last executing test programs: 1m41.871763441s ago: executing program 1 (id=2): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)={0x24, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x401}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_io_uring_setup(0x5c26, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440), &(0x7f0000000080)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) write$binfmt_register(r0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)={0x24, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x401}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_io_uring_setup(0x5c26, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440), &(0x7f0000000080)) (async) 1m41.786349521s ago: executing program 1 (id=9): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) r3 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'bond0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be002829fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000040000000000000000200000950000000000000098dedacd75ebf3e4dc2a8ea543a0da6b25225db2c01b81e89f3cd5794e1a88abd52777ab26"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x24}, 0x94) 1m40.858991196s ago: executing program 1 (id=26): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x4, 0x4c99, 0x1000a, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x1, @void, @value, @value=r1}, 0x50) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0xe, 0xfff, 0x2000, r2, 0x100, '\x00', r4, r5, 0x4, 0x1, 0x5, 0x5}, 0x50) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f00000003c0)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000480)={r8, @in={{0x2, 0x0, @empty}}}, 0x90) listen(r1, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000e4fffffffffffff8000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) statx(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.cpu/cgroup.procs\x00', 0x4000, 0x7ff, &(0x7f00000046c0)) read$FUSE(r10, &(0x7f00000020c0)={0x2020}, 0x2020) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r0, &(0x7f0000000040)='3\r', 0x2) 1m26.209904884s ago: executing program 3 (id=195): r0 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000180)=[{r0, 0x8450}], 0x1, 0xf45) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) (async, rerun: 32) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000000c0)=0x4) (rerun: 32) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000000)=0x7, 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x90) (async) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) (async) getsockopt(r5, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) pipe(&(0x7f0000000080)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x7, &(0x7f0000000040)="fbffffff", 0x4) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001b80)=[{0x0}], 0x1, 0x7ff, 0x4f) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m26.062950453s ago: executing program 3 (id=197): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x40, 0xb, 0x0, 0x8, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xf423f, 0x0, 0x8, 0x1, 0x0, 0x0, 0x6, 0x5, 0x3, 0x0, 0x6, 0x4}) (async) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x40, 0xb, 0x0, 0x8, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xf423f, 0x0, 0x8, 0x1, 0x0, 0x0, 0x6, 0x5, 0x3, 0x0, 0x6, 0x4}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800010000000010000000000200000002000009f6"], 0x30}, 0x1, 0x0, 0x0, 0x10001}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f000000c300)=ANY=[@ANYRESDEC=r0], 0x64}, 0x1, 0x0, 0x0, 0x24060850}, 0x0) 1m25.870376841s ago: executing program 32 (id=26): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x4, 0x4c99, 0x1000a, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x1, @void, @value, @value=r1}, 0x50) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0xe, 0xfff, 0x2000, r2, 0x100, '\x00', r4, r5, 0x4, 0x1, 0x5, 0x5}, 0x50) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f00000003c0)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000480)={r8, @in={{0x2, 0x0, @empty}}}, 0x90) listen(r1, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000e4fffffffffffff8000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) statx(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.cpu/cgroup.procs\x00', 0x4000, 0x7ff, &(0x7f00000046c0)) read$FUSE(r10, &(0x7f00000020c0)={0x2020}, 0x2020) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r0, &(0x7f0000000040)='3\r', 0x2) 1m25.196359617s ago: executing program 3 (id=204): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 64) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async, rerun: 64) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) (async) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) write$cgroup_pid(r4, &(0x7f0000000240), 0xfdef) (async, rerun: 32) read$FUSE(r4, &(0x7f0000000700)={0x2020}, 0xfdef) (rerun: 32) shutdown(r0, 0x1) 1m25.085863092s ago: executing program 3 (id=205): r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000140001000000000000000000021fc800", @ANYRES32=r2, @ANYBLOB="080002007f00000014000600060000000180"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = syz_pidfd_open(r0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0xff06, 0x0) 1m24.89590183s ago: executing program 3 (id=208): r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r6, 0x4018aee3, &(0x7f0000000040)=@attr_pmu_filter={0x0, 0x1, 0x1, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x4, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = socket$inet(0x2, 0x1, 0x100) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r10, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000300000020"}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028c37000ffdbdf250a0000002100038004000680"], 0x1c}}, 0x4008040) shmctl$SHM_LOCK(r0, 0xb) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r12, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x0, "9123dbf1aea4ad9484b2cbf5fef9149d2965e642f2557f836662bdd2be1f755f", 0x32314d4e}) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000ff0000010000000008000500ac1414ff"], 0x24}}, 0x0) shmctl$IPC_RMID(r0, 0x0) 1m24.694685709s ago: executing program 3 (id=210): r0 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x300008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) (async) read$FUSE(r3, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000001c0)={0x5fa, 0x3, 0x1, {0x1, @pix_mp={0xcf6, 0x1c00, 0x3432564e, 0x5, 0x6, [{0x2a302c, 0x10000}, {0x1, 0xffffffff}, {0x5, 0x1}, {0x9, 0x10001}, {0x2, 0xfffffffd}, {0x9, 0x5}, {0x9, 0x8}, {0x6, 0x10000}], 0x7f, 0x5, 0x4, 0x1}}, 0x7f}) (async) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000003c0)={0x3, 0x6, 0x2, {0x1, @win={{0x0, 0xd4, 0xe5, 0x5}, 0x6, 0x0, &(0x7f0000001b00)={{0x6, 0x5, 0x82, 0x1000}, &(0x7f0000001ac0)={{0x4, 0x1000000, 0x3}, &(0x7f0000001a80)={{0x0, 0xffff0001, 0x3992, 0xa}}}}, 0x3, &(0x7f0000001b40)="079fef8a08bb7ac92238a01f16f44ad101c1628e1a7e3b2a268f7ee3e132e53d6166971cb2f2e13d7dd5acc46332860df95687cbbe0400ac8a179d20b1e22561d830fcc7e8b81ca04fb45f49c6f72011124105f00107ebe43609615e05b6402d629d0fc90eed5d142e48c50f1627105519c7", 0x6}}}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xb3f, 0x1000, 0x9, 0x4, 0x5, 0x9, 0xc4b2, 0x65f4, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000000000000000000001"], 0x4c}}, 0x0) (async, rerun: 64) sendmmsg$unix(r0, &(0x7f0000001e00)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f00000005c0)="3efba5429434eaf4ae141a92792f51d6ed0ed1c6419a09095b41d2473dbb1d7c72cb4093e0bcfea948e5bfa386b93277aad7488e44db7cf74de4f61062c6d4c665dd2bb64af89fb1880cb87090bf208a494d3b3746d8bd3707bfe551ebab743ab193b0ba5d9da0f9aaf20c8741d6ce8d4bcdcfddaaf6ea39f5ce2f45d17959813659ad4fa89715163ae73d78e6bf3d106383285d86cadd961414f082cf560abe8d33edd82bcb37deee93348368f97a0f49352ee9a7152b64f9b0", 0xba}, {&(0x7f0000000680)="9a4cdee9", 0x4}, {&(0x7f0000001700)="248daf3c02f30748f642512afa3702962a7774c8b94d6994ab00d95fc4dcd721130da795ae64e835878be406b5b7fd6407f28b5312abb42ccfc77dd6666775e98197fb22d115903b3b1147bb569aa8b5bc2159668ed4794c0c574f755c449b95e5e07691b45c0980fbaa0283448aa0bd23129e4ac62f96e87aa0330ca3582c7b53d89e50d8", 0x85}, {&(0x7f00000017c0)="59f0647c15cbff17b830502f9c6ee28d4146d60e4502f864dc1d9bb447e766077555e8341a0c8c258002a11104b5fb85c92a11da2b8c734735676f486d8ab1b457cf31df414e465093d2f5cf032767fce03e033bd3ccf5ede3a6342a0ce7", 0x5e}, {&(0x7f0000001840)="76ffa141d448f098", 0x8}, {&(0x7f0000001880)="caf97808eb4b97b4706478da1c051c29df94cd0beac37f9e25e110a86f1a1ddb28b7395406b64473b796a25a43f6119d05239082af25e6b5310d6cc9f3e8531876adec64c4d2ed40e824dcae67c719ed68d9d9fb5e4311e582a2718bae8ced00bafec57dce4ffe14f2322fb67f908329167495b9fd0356865544bd", 0x7b}], 0x7, 0x0, 0x0, 0x14}}, {{&(0x7f0000001980)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001a00)="febff8574a0acc7416ab", 0xa}], 0x1, &(0x7f0000002080)=ANY=[@ANYBLOB="2000000000000000010002001a9e0000ff615930f65b0218f446ec66369f6cf9c939cf257ee2b09c9e1b18557ecdea0871283ef9a6a20371dbe0205af99cc1014eee16b653c34ffa4c8c11fa9606507ac7e28f5ae1eaa2cf499110bb0004f946189164c6960e1cbc62ef955b774db1bdc4a00ef47500edfc97d78fb2a8d440b42e6090242cff4d28f40c8ddcca39635b4d85f3946f2335b53d1f075c33efdf7ec1dc2cea0a9ac631e9466883d112ea6a5d416a368eb13ff633de9d6b46e1493989ee", @ANYRES32=r4, @ANYRES64=r5, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000001000000", @ANYBLOB="4eb7ebb31ce4fcc31ac1a51fc8bc01d4713f013476fada62c5f4586356920bdfdbe96a69f610bb8da483cafb4f8906757f390e6e8f24e4a9387985beb0b0e0a9315f05a5f433622eef6e18aea05192ca458a3c35efea7ce88005003250fdf4bb625041fc801878f50e3317bf57bddf145a69167d9c8845654c6c45802795b4b78a8188b8bd69f9f06a9ae106ad99e2648f00145dcf0ad0a45114c00076932c02b9cd38c0074244f487992df88ac075a033014d76f5cb0d1c6492cca8674e4e96ab45f681144e79342a8c6eb70e2f881fec27972a4a5007ee4c78067deb6532c4e5b36da5a80f17394b95ca618c46b5e3d96690ebac", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="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", @ANYRES32], 0x128, 0x4841}}, {{&(0x7f0000001c00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001c80)="95bda31033ca50e6952ce07d9fa535a71b743eb1211d8c77397002e7e25e40f82b85e527b2f8277828bf47b3ce084eefc976ac6db1cb55a3f53d511bb44ae12c84f614a473aa176b055ed7a7befe4ce18435ed2df94f11e9cb6b7af1a29492d551fa561a8e7a6cb9bfc6633d2367e464b93798450532869b7b166e818aaf3cef250c8508cf297db05858288474850edcefff37bfc7562ec48eae", 0x9a}, {&(0x7f0000001d40)="5631216ace7ab2a3db6862fbe82d9e00c2dd6d9f3886b19a05fda135bdf1eb08b1360da92573fbe81eabf9382a46976b7d1689297ea3c224f037fea7e619cc643a57fc1c9e4221919837bb3bb2424ec730016f3321ee302033bd79882c4c9d9c73813cfbbfa6735070e561fcb1edcbf4be65a817fbeecb9b9bdf0c", 0x7b}], 0x2, 0x0, 0x0, 0x4000000}}], 0x3, 0x850) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x18840}, 0x4000841) (async) r10 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) (async) write$cgroup_int(r3, &(0x7f00000002c0)=0x4, 0x12) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020200020c00000000000000000000000200080008000000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff0000000000000000030005000000000002000000000000001000000000000000"], 0x60}, 0x1, 0x7}, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="f3a50f09cbd0640f01c4660f38817ac5baf80c66b814370f8766efbafc0cb000ef0f01c40f07568000048e3665660ff5649ff082622463baf80c66b8b8ba8a8966efbafc0cec8ed8", 0x48}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_RUN(r13, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 1m16.944092374s ago: executing program 0 (id=242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x20, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f00000000c0)) 1m16.666120772s ago: executing program 0 (id=243): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0xd3e, 0x0, 0x4000000, 0x100, 0x19, "0062ba7d82000000000000000000f7ffffff00"}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) (async) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r2, 0x4, 0x7c00) dup3(r3, r2, 0x0) (async) dup3(r3, r2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 1m16.556331104s ago: executing program 0 (id=244): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000129487a71fe2c251244961f2a74ac35ff5fc62c141dd3649af9d1587d741f8369d27d6c3d109bfffb92d594b3545a0b324afce706f475d4ba881b7b461e65f7559bc24ddab6dfe6e8367199f488cdec853a9ad59469711e7b6c43651c0a7cf3320f011c70c791b5ecce969d7f7f04fd3e4e847b388fae051f00100000000c9ea7ebbaab6da2e0f06e959ed9e201e263e1872f8958a78b94a1679cd93a5a20cbb5fad955333d21f6b", 0xd4}], 0x1}, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x221a, 0x4) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x6, 0x1, 0x8, 0x40, 0x1ff}) 1m16.376067129s ago: executing program 0 (id=246): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002640), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000002680)={0xffffff7f, 0x2, 'client1\x00', 0x0, "2245941080736c1d", "db7895b88a8cfee74a15e0c3d0a55a5cb7f822ac34a3a29d6da58b5d00001000"}) 1m16.272539444s ago: executing program 0 (id=247): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x402000, 0x2) getsockname$inet6(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x61, 0x18, 0xfa00, {0xfffffffffffffff6, 0x0, 0x13f, 0x3}}, 0xfffffffffffffc69) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x20048054) r4 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000000)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0xfffffffc, '\x00', @string=&(0x7f0000000080)=0x11}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000100)={0xec, 0x5000, 0x4, 0xffffffffffffffff, 0x3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r12, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r12, 0x0, 0x3, &(0x7f0000000080)=0x40, 0x4) connect$inet(r12, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r10, 0x0, r12, 0x0, 0x8000, 0x0) write$FUSE_DIRENTPLUS(r11, &(0x7f0000000340)=ANY=[@ANYBLOB="f8"], 0x1f8) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r9, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000240)={0x1, 0x0, [{0x7, 0x5, 0x6, 0x0, 0x1, 0x9, 0x961}]}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x880) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000300)) 1m16.025038949s ago: executing program 0 (id=250): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000002000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80) (async, rerun: 64) r3 = socket(0x2d, 0x2, 0x0) (rerun: 64) connect$qrtr(r3, &(0x7f0000000300)={0x2d, 0xffffffff, 0x7ffe}, 0xc) ioctl(r2, 0x7dd9, &(0x7f0000000040)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r5) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x13, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m9.109274512s ago: executing program 33 (id=210): r0 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x300008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) (async) read$FUSE(r3, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000001c0)={0x5fa, 0x3, 0x1, {0x1, @pix_mp={0xcf6, 0x1c00, 0x3432564e, 0x5, 0x6, [{0x2a302c, 0x10000}, {0x1, 0xffffffff}, {0x5, 0x1}, {0x9, 0x10001}, {0x2, 0xfffffffd}, {0x9, 0x5}, {0x9, 0x8}, {0x6, 0x10000}], 0x7f, 0x5, 0x4, 0x1}}, 0x7f}) (async) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000003c0)={0x3, 0x6, 0x2, {0x1, @win={{0x0, 0xd4, 0xe5, 0x5}, 0x6, 0x0, &(0x7f0000001b00)={{0x6, 0x5, 0x82, 0x1000}, &(0x7f0000001ac0)={{0x4, 0x1000000, 0x3}, &(0x7f0000001a80)={{0x0, 0xffff0001, 0x3992, 0xa}}}}, 0x3, &(0x7f0000001b40)="079fef8a08bb7ac92238a01f16f44ad101c1628e1a7e3b2a268f7ee3e132e53d6166971cb2f2e13d7dd5acc46332860df95687cbbe0400ac8a179d20b1e22561d830fcc7e8b81ca04fb45f49c6f72011124105f00107ebe43609615e05b6402d629d0fc90eed5d142e48c50f1627105519c7", 0x6}}}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xb3f, 0x1000, 0x9, 0x4, 0x5, 0x9, 0xc4b2, 0x65f4, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000000000000000000001"], 0x4c}}, 0x0) (async, rerun: 64) sendmmsg$unix(r0, &(0x7f0000001e00)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f00000005c0)="3efba5429434eaf4ae141a92792f51d6ed0ed1c6419a09095b41d2473dbb1d7c72cb4093e0bcfea948e5bfa386b93277aad7488e44db7cf74de4f61062c6d4c665dd2bb64af89fb1880cb87090bf208a494d3b3746d8bd3707bfe551ebab743ab193b0ba5d9da0f9aaf20c8741d6ce8d4bcdcfddaaf6ea39f5ce2f45d17959813659ad4fa89715163ae73d78e6bf3d106383285d86cadd961414f082cf560abe8d33edd82bcb37deee93348368f97a0f49352ee9a7152b64f9b0", 0xba}, {&(0x7f0000000680)="9a4cdee9", 0x4}, {&(0x7f0000001700)="248daf3c02f30748f642512afa3702962a7774c8b94d6994ab00d95fc4dcd721130da795ae64e835878be406b5b7fd6407f28b5312abb42ccfc77dd6666775e98197fb22d115903b3b1147bb569aa8b5bc2159668ed4794c0c574f755c449b95e5e07691b45c0980fbaa0283448aa0bd23129e4ac62f96e87aa0330ca3582c7b53d89e50d8", 0x85}, {&(0x7f00000017c0)="59f0647c15cbff17b830502f9c6ee28d4146d60e4502f864dc1d9bb447e766077555e8341a0c8c258002a11104b5fb85c92a11da2b8c734735676f486d8ab1b457cf31df414e465093d2f5cf032767fce03e033bd3ccf5ede3a6342a0ce7", 0x5e}, {&(0x7f0000001840)="76ffa141d448f098", 0x8}, {&(0x7f0000001880)="caf97808eb4b97b4706478da1c051c29df94cd0beac37f9e25e110a86f1a1ddb28b7395406b64473b796a25a43f6119d05239082af25e6b5310d6cc9f3e8531876adec64c4d2ed40e824dcae67c719ed68d9d9fb5e4311e582a2718bae8ced00bafec57dce4ffe14f2322fb67f908329167495b9fd0356865544bd", 0x7b}], 0x7, 0x0, 0x0, 0x14}}, {{&(0x7f0000001980)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001a00)="febff8574a0acc7416ab", 0xa}], 0x1, &(0x7f0000002080)=ANY=[@ANYBLOB="2000000000000000010002001a9e0000ff615930f65b0218f446ec66369f6cf9c939cf257ee2b09c9e1b18557ecdea0871283ef9a6a20371dbe0205af99cc1014eee16b653c34ffa4c8c11fa9606507ac7e28f5ae1eaa2cf499110bb0004f946189164c6960e1cbc62ef955b774db1bdc4a00ef47500edfc97d78fb2a8d440b42e6090242cff4d28f40c8ddcca39635b4d85f3946f2335b53d1f075c33efdf7ec1dc2cea0a9ac631e9466883d112ea6a5d416a368eb13ff633de9d6b46e1493989ee", @ANYRES32=r4, @ANYRES64=r5, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000001000000", @ANYBLOB="4eb7ebb31ce4fcc31ac1a51fc8bc01d4713f013476fada62c5f4586356920bdfdbe96a69f610bb8da483cafb4f8906757f390e6e8f24e4a9387985beb0b0e0a9315f05a5f433622eef6e18aea05192ca458a3c35efea7ce88005003250fdf4bb625041fc801878f50e3317bf57bddf145a69167d9c8845654c6c45802795b4b78a8188b8bd69f9f06a9ae106ad99e2648f00145dcf0ad0a45114c00076932c02b9cd38c0074244f487992df88ac075a033014d76f5cb0d1c6492cca8674e4e96ab45f681144e79342a8c6eb70e2f881fec27972a4a5007ee4c78067deb6532c4e5b36da5a80f17394b95ca618c46b5e3d96690ebac", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="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", @ANYRES32], 0x128, 0x4841}}, {{&(0x7f0000001c00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001c80)="95bda31033ca50e6952ce07d9fa535a71b743eb1211d8c77397002e7e25e40f82b85e527b2f8277828bf47b3ce084eefc976ac6db1cb55a3f53d511bb44ae12c84f614a473aa176b055ed7a7befe4ce18435ed2df94f11e9cb6b7af1a29492d551fa561a8e7a6cb9bfc6633d2367e464b93798450532869b7b166e818aaf3cef250c8508cf297db05858288474850edcefff37bfc7562ec48eae", 0x9a}, {&(0x7f0000001d40)="5631216ace7ab2a3db6862fbe82d9e00c2dd6d9f3886b19a05fda135bdf1eb08b1360da92573fbe81eabf9382a46976b7d1689297ea3c224f037fea7e619cc643a57fc1c9e4221919837bb3bb2424ec730016f3321ee302033bd79882c4c9d9c73813cfbbfa6735070e561fcb1edcbf4be65a817fbeecb9b9bdf0c", 0x7b}], 0x2, 0x0, 0x0, 0x4000000}}], 0x3, 0x850) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x18840}, 0x4000841) (async) r10 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) (async) write$cgroup_int(r3, &(0x7f00000002c0)=0x4, 0x12) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020200020c00000000000000000000000200080008000000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff0000000000000000030005000000000002000000000000001000000000000000"], 0x60}, 0x1, 0x7}, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="f3a50f09cbd0640f01c4660f38817ac5baf80c66b814370f8766efbafc0cb000ef0f01c40f07568000048e3665660ff5649ff082622463baf80c66b8b8ba8a8966efbafc0cec8ed8", 0x48}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_RUN(r13, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 1m1.021859312s ago: executing program 34 (id=250): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000002000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80) (async, rerun: 64) r3 = socket(0x2d, 0x2, 0x0) (rerun: 64) connect$qrtr(r3, &(0x7f0000000300)={0x2d, 0xffffffff, 0x7ffe}, 0xc) ioctl(r2, 0x7dd9, &(0x7f0000000040)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r5) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x13, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4.965577391s ago: executing program 2 (id=644): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e27, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0x4a, 0xf080, 0x4}, 0x9c) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8457f, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000001c0)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r3, 0x0, 0x0, 'syz1\x00', 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x148, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_DESC={0x118, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0xffffffffffffff53, 0x1, 0x1, 0x0, 0xc00000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6c5}, @NFTA_SET_FIELD_LEN={0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0xb0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b63c6e8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x92471df}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8f}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2fd}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0x4}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x170}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x400000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x30}], 0x1}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.595043593s ago: executing program 2 (id=659): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r1, 0x0, 0x3) listen(r0, 0x5) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@local, @empty, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0x9}}}}}}, 0x0) 3.504422001s ago: executing program 2 (id=661): r0 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40080333}, &(0x7f0000000080)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x4}, 0x1, {0x0, r3}}) 3.503253788s ago: executing program 2 (id=663): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000280)) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r2 = getpid() capset(&(0x7f0000000480)={0x19980330, r2}, &(0x7f0000000500)={0x4, 0x7, 0x2, 0x6, 0x5, 0x3}) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0x1}}], 0x2, 0x400c404) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000600)="c74424001c310000c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x40, 0x23, 0x40, {0x40, 0x0, "8c3624af6c7fb45204e3a30010c58e2ed8d8615d33c7942f04dd84b9661c6e490d970c20344e2eea6c6d006d0ceb7b4e553c309ea96675440a646ab81607"}}, &(0x7f0000000100)={0x0, 0x3, 0x8f, @string={0x8f, 0x3, "607317920886aab11325c4479911b91e8cce4397ec48e2bd0d88b563698bbac39054fa66ebb124bb6c73654fda1a95744f174802b8da3410d64fa5bf738364cf113b76475a26be603994434308eb221788b493f414db5c59ea50b6292bc40a1cbb25606772a1aff2da6bcc73d53558ca731231974884114ab1dbdbeac6ecdb7f7821b51dc65ef3082d30f5af0b"}}}, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x20, 0x18, 0x2a, "5aded737faaa98bd08a0c533288595d343dba12d43c954602b66763a3eefc130783051012056a30747f9"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x0, 0x8e, {0x8c, "91d2538685062b56e2532166d6574b509c68cd12e93e16a0475b36a66439b354baca38536a2a00a07eb3f37b20b9d35adf07586873bb3cfd04f1de265a9b0a862473b9a0de95e8504789e1ba068716a1ef5a82ead6651566810076af4a290d58a9b2822daaf01914bdbb810d6d6addabd9420619c2a303f788f8a07d3271552aa81feeda8981e8ad56282ab7"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x6}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x10}}) ioctl$FS_IOC_GETVERSION(r6, 0xc0105b08, &(0x7f00000004c0)) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000440)=0x1, 0x4) write(r6, &(0x7f0000000800)="c5577f906129e71d3a0283074fc478276f156a0acbf56a25d010a74f09efcdfec12f36fd68f9cc04ebcf8ce0faa88dc2ad28988f76d74af66256515786039fc04ae3dcb3b8783de4199b05dd636c464159a798337240e43a02ee8abee8845d9a48642216e04204fbde9897316520768cf674ea0e1b782320019045ae8556a928699ec0b290d04826f79f3a4dfa0763f543849a9aecced8c7117e1b076412f6cd11f72621d1c45d5f211314ecbf745a429371bf0d686d3d1d182060a8291a1a8e0e9ca9f56633a82232069ea0b2d921ca88bdf8a8098c18599234b78fa616205ea40b646fce436bbb95dbb879c11b83ab4fd4ed09f0d5f95d5e", 0xf9) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r7, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x8, 0x3, 0x6, 0xe5c, 0x2, 0x3, 0x0, 0x91, 0x40, 0x1e6, 0xe0000, 0x3, 0x38, 0x4, 0x10, 0x3, 0x8}, [{0x3, 0x1, 0x855, 0xe5a, 0x8, 0x50f1, 0x665b, 0xdd}, {0x7, 0x3ff, 0x7, 0x9, 0x7ff, 0x2684, 0x3, 0x5}, {0x7, 0x3, 0x8, 0x80000000, 0x379, 0x9, 0x4, 0x80000000}, {0x6, 0x81, 0xc, 0x9, 0x8, 0x9, 0xfffffffffffffffc, 0x3}], "a2f16a6652233e1d79875a2b8b6a43c22923bf5cedb7a4368ae1d38ee151e36df9f260e812fc93d72437de7a68a088de17939451a83eec757820fb9045563d0dde2482618e58664e15e26d78d362a738ac81f1cdc9b0a50d866e9925f30d82c53b00286f67c9597fe0bd4ef9d191c3a7144b0ebd6ccdeb54834c87fe271de5f57e343485e4b1cdcf43fefd8ab819c5be2244697ae3463d8def68ac6fd95db3ae937645b3ae9f4c9d4e8ffa12a988216282472fbc801111dc09e8f6be173283cdd4dd01f5ff0175d503cac8b015d89cbd2d92865c125e87eec449baf69f7c059dfd4891e30af043dc9b525c0e2c7609fcdf3c7654006035383c52c1afd4202ce86d26b5f45e02986616bad7abbc76adca8f322943c3f932cf7a255aa9cb0dae886288489135425dc581a12cec2cac428c6145591dbc98c993e3c75836a9f73b28600f96a2648397780fa573b98001a0640432450f5628c0a3f76492edf5aab04a7fe6ba8aaaa1477fb3e55a3bfd7de6934964dc9a478284d5610dcb10aa78aeaca3a8ebabe4af1d86ba404e019a07b840247f972675f888c07b8b5a2ee0efa4f00ce8c720a4d30579bcc01b33c4fb26e7d734c1eac29caeb665c25a5f7e6e494b0a695cb056382c8f511ed2fd03c555815bf588ff6e147a3c7f2359e1d55547edac87bcf93fc1459732c067daad481d9dbc565b26a884cb1836ce66fbdf47706f71953571c3ee0f9b442304decc1ff4933a18fca9118a52e1011cdf9632bce8bf427edaa91fd87a7570ae21d3b7e013569d1321e3aa68bdc146074cbb48d263544bdc4653cfa6faf2eddaba30b6034ae1e49d2dfa16e900a0f6833d91ea47f242556e9997329545392a528f1d57396dd96d3e43a7414fd7d26087743c8de1ebe086aa4cee96da59a90c3f8834b13257c64038f993e9d12596a6b6d19458d7159665a7e0267edc469da2e8042d9187275172feb591d04ae08ce755e60e4047c161e8ffa428b41c1c8f73b4bb2bf141165e961826c97e428cb0dbd81df91ae8bbd4b68f7a6db13ce3be3a7cad12fb9b1369321502a0407c4e3500de2f403760f7b01401090ac6f42219a830e0108300a9f2b7a151b583d4ca19843ae21b114fecc8703c0dfbaa875f56abcacdf46fce7a1652c8daec07a6c73ebf2ba4c04fbc7d109e2ff62cd3ee445914a216783151cf4391c23147b405df3645ae898e51e3ecb80899928bfdaf4f175bce2ffa08981182747eb25c916564c05f85fc5b2b05c2cf62b6d078ea9e1459738d73a1e8cf6d4c26dfc809875f6e3d716575322ced5bb7d6d6da5d178149353b19705295f83c19c9aab6374e3e7f3e0234d5fad841d2a7382c88603317c994724291e38c27da0bc6c49aebab39f17d9d3fc565a49feeb90681c40a799bc847f02adab701d229e0544db6f06539fc5f4a95ab8e01a08c2051f936a67346f60bf61c12f33b5e48cee4d5eccca774ab87dc02905f7ecd4cb35c1452a8edaf641c385638e5e167d048bdf93b7c0f25c3de7904aca249b6bc269e0fc21aad4d3ef9fe260651096c5a3966fa559fb19f077b287b9ef5bfa1c141d8c733f435c4a0235a4a8d56ae457727d00442a416509051343a6462b6f05753004e28d1350bdad56e8058b33c3f5c5fe284997be1a8605b61bf48bc744c24b8296c3398b081525b172b962c3577cf3f5504d1f14718223fb879ab5b99873a91886242e9cc9478aa9192522d34451b40e67bd4caaf0aea291ce77e1fc5780760b513b331c605e2fdbc25747798fb662ef10015aedb9e326ffdc2be328f16698e87357434ccacd79e484fc23c1529f1fe1e078b06f054d3de61dc2b533afcc030ce89fea1e8c3041e3c972d81a1942be2cc82ddd0ea7a5f40f5555052ce9d3c86d83866ecb8f3e3fe5b2717a73d5d20ee3ba0af0297fc833fd82e673eb2001d6e3b70041c93d3b9afab098b22f6699479e2297cb6c900dd245e3d659fa59b0ee863dd00ed2c75a63c1b012fd4313107a91cdb3b2f77fc4a9a001341a870b94ffb8fd9b16d69250174fe7738790e438fb67a5ab3e79d8fb8970aa1bae710222fd7d8e78fcea0962f7e0ee873b3f3aa09af103abed34e3154d8308dee7e33f6157df6b6f3be68c4645db7908867ee32c42e407e1c3a91344253623257a064f3b33c05cc5e2c2f25d36e896e14542bcb3032383e6cc2734cebdad21d499b7ee8d0292ba767be1ebae94520f3c0b77a150886f56974a9dad940a15d01fdd1218f4e3263908d576cb3c1506acf0d5225f77d90d48e28cc26b4522e9306b51847c97e72e8714723498d08795beb21a29cfbcf0244273dac903e5b95b13c6909ef421cf08d34d26a662d1c167b9622470775e3cbe19f5a1012ef541f41c8a3798aed57a5b8dff5e97db6f649c107654b14cbf3b6f5e478620d70a029f09d6df71bd084687dae4fe9ab3db313e298f7682d8749ffdc1b8ca51e31e764b8724b2aa44bfe0afe380bf3de2906c35988402abd8f56f7018f31d466c91fc51dff4dfcb313ebee9a7316cdbce390597ff85e8d1733320840d6bda54452658ce734c9aedb655db9957a273956ecf67c6c244b7de19928b7a4ff7217c908e4062c9e12852f8276be99a99a3aafbdd7fcc6d27896cc88be4033783f68f59e22bf1228029c688e8504c648c2f578fd539a7d5643cb4238c89d7a747838781c6b6a56863e5c9f5c2b9e8b42c8256f945d972ddebe0a9e1b24e9726b05bde5c66d116ccce9f1e443fcbb04488c1203f6eeaf46586fe1d7abdc934668e28ce601f5ce772845184b32392e27fa010c36c61f4c327bbf6361af496792fa6518e98962115047389c033b70addddd09b81bc46e0365e7467c5babf41be6396883f029c407d79a31b1e40c8ae5d0b3fd9afa673e1d3d55795b4042c966484e5ab35c757b9bfa39e06eaf460a0bf0d0a55d3c74d073755ae8bd58e5146df3534d766babc4260a5ba27e74f6171e6d98bedbdb2e669b97b50600b7f4b0b63cb6e32b6ff1113a2f1e72dc8a80c4c30c91a56f8ec90cac2e277c2d6799c1be42320a364163d825b8c6f2c1b31362f345e23297f262628b5d163eb972a7e3210700eca3ffaf36bb982bb0e09aec4d887affc27170a616d8e1791e0ee962d4d14a2d14b3c6552482b6fb71b7ab551ec4058e8c2b19ee7a50ba99cbe2131b357e5664a6914b915cd1899b85afa67ea0d79b6465cc4605a0dea7738f3f12e707514d37ed1ba86fe4b0cb0961d16ab251adfadb22e63ae672850f3ce5457cd7c380ca48150a0b9b912ebaaa4d952bc4ab4714973706f10f885d34f2a10df6f946e7277c76c38f24d889e6c0848c0857f012a5ff472c9f726e1daf4b855f0dcbed19ad9f6d25a4fbf4839be4b1b914a2e24b295283a00f004b90338dab8910bd880599c936e9c1f355f3e1f7d55893c45256386a6c612237e0444a0344d35bdbca06f3b7f9fca0d6688f2a6f9b6e3ce8657dcaa13a9b60d7acfc8d11c27d68582d8001b968b80f93662901e315879d6e669a190c228cb11aefa1d9f9c6b3ef73f398397ec604478559d0d7f9f66a3f3fb9c0c11f8a1526a8288aaf47a623caca671343a0214a92b3170caa916474830fa30b99d94af011961f2a083beb387d46469815dc6809e72fb5e9ae54543178b606eb7bcb554bd02be8c3a97a0eae45752b3d417ab020905421d9a56d8ea54966a624c430349288fd273e702d3ce038fc72d64c0d833755647a45b8e0fc696c98b0beccaa3a678de21931d9143ff1fcdd092b9a8405e0158a9b46c914fc5bd01bc879d63e27725e9166ca4ec9b52e3ea73146aa86e0d80ce65eeaa0ed81b9c972f9389fb292d52a0672004430705362ed9fa133aecdaa8d7112db1b00ee4cfd2d1b3912a628f6811c4094507e117d205f2da9cd244363f0893fa768cbba7ac65267387a6b15b967a910b6e715b268122260c0c0aec28ac55c64c1b65f2741101853e213051292f1a88cf885c89f4dd658e0ed38ae8d11453619d5267af2968d9b0b4b26a20882f8617f6f837937684cad345c50215da0dc2dfc715f2e29b42ce54dc7a1a646f6263032c94d34ada08d50b8f45cb14bdc016cadf347d1ffa69389aa6db26ff3bd1ec7ea89829e26784130197a07e2b545021e10d4dc26aa6bb6a7241dc2d18bf7ef9ee8d0386b21f3551702f0f64d02b697361a4c8ad256bd852fbad745f2b3804a7b040d35264d8f84b68ca7d70cd737d01e8a0de4f6ea84f64538c9f4b64edcaad9014569c78afe098633b5034890e9e9d60f218c26d7a44173b666133a86659ad0ce8aabad9e155590595bf07368b690d0383b268384ef5178a02a62fb4923627259f2d378dc90993d99549b7bbe212657d28ddc9b4f3dbc3df3f9fa5b3b3e2b35d7f2ceed2de209813344c9eda64f075132576879e476a7066ef67bda37834905b7abb90552f47f94f89068c3f1d9aa3d3ddc5ab1a931af305c52cda6a25d732197b62f330a7cedd921c04a1b78daecd3b198ded7cf9f2e471b94465c2d8571ebe2ba4eead5efe1e2e4669872f21b4b11778d3dc7116b59fc3cc7202bdf8bb4bf758b79c7b28ebaf80506e4c92908e4c4c1bdee318fba273575585211736419e950632224e8e762ff70d24dfa966467461fcb5966225b19d2ff09f42abbee7b50a15dea4154154c73b960ecf412934cf9ba6e782d6668874fc8f80d834992bd02d07d6c96d7e6dcf01ad3d82fa5d794744d74f2c1c4dabdb576abfbc4723f3e66ec220bed18709ceae7c11e3dbe2bc76bdd40be8867f43471baaeb0dfa60ef918071a6c1be2f79907c62ea43e65fde0adc76d0be146620cd2760b967a55e2823635c2a5faff7f89901e95005ab7e8948cf6bd3022c99718f9254862529d703c6c433412153f1c4c63a36bb6a3fc0ab36d5c41e9789f02d42eaa860cdf69184b7ddac4c2eb689ebb11f098786c08e1f862b2bd5d786e46176466b876d88647d0ce4d445b15aad1ea41b07c3a075776832abe2c8acc8f9e8e861d33a4d8f186024f1658367b5978721cc2f656f7e15325969d2c3040feda44064bff529f745d0e5107f094c5bceb1f14f6a004e4ba19b1470fb473561bcd2c14b90e8a270c50b096bab73b7cc0cd60f06b79f48bae5c164d877849e2915ae35250fafca4a359fc95f589ed5c9ebc858dccaa21189536de32532e9df00a336f3932292aee61c76f3a9f9ae6e871e09fa5271287549c7b3a54c4115df537bcbd7d8a18f03b98e21d6c7fc4aa5e04d3194b3def3509a2a5c16fc4acaef68ce722ba591f46ee2745106b1915463b6c1e96cdbe1249feb81355895a34766b1c18cf1864be3f1bca7c028f19e2f067f55b1f3924b1d3eeb2731b81662c1b2bb4d81806d5f6d8688dc86165e40c175fbb718173ecb6a696f33d9879dc541f47e6b274afe3e221358396129a2117f3e3cfb8d34a0d2fc87ca85821d00ef5212480e420946c48b27849d40302ab31d85b3d7dcd9ce70709218b7396d061131d5ed7daa060fa5fa4b07a29adb7ab72b99df8dece9cb33def0f37f052b6036db654c5260b4d86d92d6bab5238afafbfc574d7e624890d0a59d0c5f63cbdae925baac22f96165022d6f993dae22677cffe7665d4a6a43ea856ae67604dfbac3d4d12533944d3f9eecedb179bbdc98930c790ed25efe9e9fe5daceb08f3d7d925f78d9e78f10dd9548d9ee03a498b4bff2f76eba5a8eead6419f6035e09f84d4a04b9ff0d5545818603705fefe05eb679415b48003cbb718b9ad5734036bea7ce84b662909f2bf9f9", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1920) 1.723711874s ago: executing program 5 (id=677): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r2, 0x6, 0x1e, 0x0, &(0x7f0000000500)) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x21c2, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x7, 0xfffffffb, 0x8000, 0x9, 0x6c6]}, &(0x7f00000000c0)=0x54) 1.483639797s ago: executing program 5 (id=678): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffff1a}}, './file1\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000a, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x14102, 0x12345}) r4 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0x0, 0x21, 0x0, 0x0) connect$inet(r3, &(0x7f0000000440)={0x2, 0x4e24, @multicast2}, 0x10) syz_emit_ethernet(0x246, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@llc_tr={0x11, {@llc={0xdc, 0xbc, "83", "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"}}}}}, 0x0) 1.34566188s ago: executing program 5 (id=682): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 1.285589777s ago: executing program 4 (id=683): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r0, 0x82081fc) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000780)={0xa, 0x1, 0x80000000, @dev={0xfe, 0x80, '\x00', 0xa6}, 0x1}, 0x1c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r1, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0xfffffe01, 0x8, 0x2, 0x0, 0x1}, 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) 1.283945178s ago: executing program 5 (id=684): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (async, rerun: 32) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) (rerun: 32) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="a1831c39f47a3d946469b159f64d0ba5", 0x10}], 0x1}], 0x1, 0x2004001) (async) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x100000000000f7) read$watch_queue(r4, &(0x7f0000000280)=""/162, 0xa2) (async) keyctl$revoke(0x3, r3) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4603240095258000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff0000380046"], 0x78) (async) close(r6) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f00000000c0)=[@ioring_restriction_sqe_op={0x1, 0x1f}, @ioring_restriction_sqe_flags_required={0x3, 0x1b}, @ioring_restriction_sqe_flags_required={0x3, 0xb}, @ioring_restriction_register_op={0x0, 0x16}, @ioring_restriction_sqe_op={0x1, 0x21}, @ioring_restriction_register_op], 0x6) (async) r7 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f0000000040)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.025644148s ago: executing program 5 (id=687): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 783.462477ms ago: executing program 5 (id=690): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) r2 = syz_open_pts(r1, 0x101) r3 = dup3(r2, r1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7, 0x0, 0xfffffffd, 0x2}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) syz_io_uring_setup(0x27f3, 0x0, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000280)={&(0x7f0000000200)=[{0x0, 0x4000, 0x0, 0x0}], 0x1}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)={0x0, 0x23, 0xaf, {0xaf, 0x10, "b08bde4001ac58100c3e1d3be05189ac29896b7aacbacc651fe5e7b80dfdcaacf280dac20730e267d8ba938c476a063c764a3232d749ca86838b9e7046fad45483e1357e273bf50fbfb377f70679a20c776d32e55743c18da7d24ecd6cd83eb8270400fe84ae8b2f2a0b140c2550e96847face589975d89fe0a6b4dc9329c36340b2198a2ae2f94502255324e4165b8169b56e13e382979bb0edb402eeaf798287dac3ff5ea18bb838ce687d3a"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}, &(0x7f0000000180)={0x0, 0xf, 0x6b, {0x5, 0xf, 0x6b, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfd, "8fb95289102bbaf9d2078f93fc0b3fee"}, @generic={0x4f, 0x10, 0x4, "566d3e1a3ea47a48a2fa35af122c3efb1289ad4e48b507c959645a2a1df536a14a32d3a3b8f9ddf7e2c374b14ea819ecf950c5bf9a59a7996237fe833db49cd393ad1e42bab45c2f7e662fd0"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb7, 0x80, 0x86, 0x4, "f47c6274", "c61d03d7"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0x37, 0x1, 0x4, 0x1, 0x80}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000400)={0x0, 0x1, 0xed, "9021f752293889ade31bbf5edfbdf7753027f7b8db0f7955df5cee2fe8a25cb444bcb2532a2ac8e14f6614a191ebcb0bab5ddfd1a5cfc271b991edcdc4eabb251e2aa38e38beae96a6a1d214390a1653f24aec62b5129edd59c13a38d1b0b3a249b6a495ad6b8b1ad8113f71546e5c7c58e2931eaf5ca3c767517ed40d650dc5919a11703493ba572c7b6a4c136cc9ce58c2fe9e58b0b173149b92799b021466bff83e9e664bf6e3bea687c8b35d9c2703a5c16bc0b0118042175a70f4e2cca0f8fa84decadbbac3c3f87f98508774e0ed7bd289516808f1eb23d95f18f1a4e1599179a64fc6d07b113d4a4116"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x2, 0x80}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x42a}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0xb, 0x2, "8d30"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0xe}, &(0x7f0000000700)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, &(0x7f0000000780)={0x40, 0x19, 0x2, "1f93"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000800)={0x40, 0x1c, 0x1}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f00000003c0)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 685.191721ms ago: executing program 6 (id=691): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x6, 0x8}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x6, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000140)=0x2) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{}]}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0xa, 0xa6cb8, 0x362041}) write$tcp_mem(r2, &(0x7f0000000300)={0x5, 0x20, 0x3, 0x20, 0x7}, 0x48) (async, rerun: 32) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000400)=""/207, 0xcf}, {&(0x7f0000000500)=""/213, 0xd5}, {&(0x7f0000000600)=""/26, 0x1a}, {&(0x7f0000000640)=""/17, 0x11}], 0x5, 0x4, 0xe) (async, rerun: 32) r4 = open(&(0x7f0000000700)='./file0\x00', 0x210202, 0x141) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000740), 0x10000, 0x0) (async, rerun: 32) readv(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000780)=""/115, 0x73}, {&(0x7f0000000800)=""/123, 0x7b}, {&(0x7f0000000880)=""/120, 0x78}, {&(0x7f0000000900)=""/212, 0xd4}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/24, 0x18}], 0x6) (async, rerun: 32) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001ac0)={0x0, 0xc, 0x7, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001ec0)={r6, 0x7}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) read$FUSE(r7, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000004340), 0x10, &(0x7f0000004400)={&(0x7f0000004380)=@canfd={{0x2, 0x1}, 0xd, 0x1, 0x0, 0x0, "87014bd86b7e97c438d23dd2b2edd12fa0906506499bd8be8b8368e3c071135290d4057492650f36a81d7fbd8d6203be2740103e032c159d41ac3fa4a8a56b56"}, 0x48}, 0x1, 0x0, 0x0, 0x15}, 0x4000) syz_usb_connect(0x6, 0x265, &(0x7f0000004480)={{0x12, 0x1, 0x201, 0xdc, 0xb8, 0x3c, 0x8, 0xe10a, 0xd734, 0x21d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x253, 0x1, 0x2, 0xde, 0xb0, 0x5, [{{0x9, 0x4, 0x58, 0x2, 0xd, 0xef, 0x1, 0x1, 0x0, [@hid_hid={0x9, 0x21, 0x9, 0x40, 0x1, {0x22, 0x204}}], [{{0x9, 0x5, 0xbf84b4f6f0251c50, 0x2, 0x40, 0x5, 0xf4}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x1, 0x3, 0xda}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x1, 0xe, 0x9, [@generic={0xc6, 0x22, "365c34cf4e302772f4ee75e1abe20330112fe1e0ffc53b935f2e994075520cbc650773c8559dfc5acce76def79d7c8c8c015d63b46bc380621e16a4e12b5a9980759edd2a2bfc663f18b675ae0019404ef774fc75c384f2d82dbd6a325dbf0b86d081933e7511d0e2cd7ef7a733653a29482577dfdffb340b352e2496867163464692e688eb0ba0f6621831452f2f6002e1af67aaf41ad60ac36ad54018af2076ddb5d774684683d872da58a0516a2b58c5209e63c8243c01f28c55f1a9d9926a3dc3021"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x8, 0xf2, 0x2}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x0, 0x4, 0x14}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0xff, 0xe, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0x100}]}}, {{0x9, 0x5, 0xc, 0x3, 0x10, 0x6, 0xe, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xb, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0x2c, 0x2, [@generic={0x1c, 0x23, "fff4a4b68abdcef88f62da0ba9af306baf235194c8d931f09652"}, @generic={0x49, 0x2, "c4a126d66b000cfc50b078cd3731466c578a9c909b80d023e3ecaf3c9b9c838749f1176f6df825dbb579f26d356c9fcc5f157e7f9a3223455ffbc67a1bf757aad3a0fb19bfab42"}]}}, {{0x9, 0x5, 0x8, 0x24, 0x200, 0x8, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x44, 0x49d2}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xc0, 0x3, 0x7f, [@generic={0x75, 0xa, "237f161075545aabc60100d58f47d55463ba8d7bef59750eb315708df9cc0bbfee6cf37ee6f61d26113db1afcf8a21241d2b6bc8af2b4efec329476b66068dec9a281b1e23d61f41c04e32fae1344d66aad585f22a41569037446600022f919db1a1406bc6b01a58d11262cef4f727730ca8bc"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0xf, 0x1, 0xff}}, {{0x9, 0x5, 0x4, 0x0, 0x1af, 0x53, 0x4, 0x5}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0xff, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7ff}]}}]}}]}}]}}, &(0x7f0000004940)={0xa, &(0x7f0000004700)={0xa, 0x6, 0x201, 0x8, 0x0, 0x4, 0x20, 0x94}, 0x5, &(0x7f0000004740)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000004780)=@lang_id={0x4, 0x3, 0x436}}, {0x2d, &(0x7f00000047c0)=@string={0x2d, 0x3, "826967ab2803a07fa625ed8ec787cb2113335104b924df6fcb16414724dd69f62c6f57b240c87b3fd747cb"}}, {0x4, &(0x7f0000004800)=@lang_id={0x4, 0x3, 0x414}}, {0xa, &(0x7f0000004840)=@string={0xa, 0x3, "6a5d3176bc2e8641"}}, {0xbc, &(0x7f0000004880)=@string={0xbc, 0x3, "407d33dcbc12fe5fa74bc4a17196beb59b55c79b65d4bf179663718423b3f238a8febc12cb7cb7fa9b7ce4b75035d1b677a0b1f8b7ebe0ed6c8389ab07c17adbccbad45c9cc9e8f7230bb0fdfcde9b7620455b881a82519409658ab6b660dfa6aa1020e246dd1de2de19028423942ea6935cf0180547040e159a3ae8669d9405e8fdd4bb73583cc8e082fcd3b7efbc518d2687d453b545e34061f766924c4f659060400b64281a06cd993fc35f50ad450bc2183cf989670ae7e5"}}]}) (async) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f00000049c0)=""/22) (async) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000004d80)=[{0x1, 0x1, 0x0, &(0x7f0000004a80)=[{&(0x7f0000004a00)=""/119, 0x77}], &(0x7f0000004ac0)=[0x728b, 0x2, 0x6, 0x1, 0x3858, 0x0, 0x401, 0x3]}, {0x2, 0x1, 0x0, &(0x7f0000004c00)=[{&(0x7f0000004b00)=""/131, 0x83}, {&(0x7f0000004bc0)=""/48, 0x30}], &(0x7f0000004c40)=[0x6, 0xf85, 0x9, 0x6, 0x2, 0x8, 0x826]}, {0x1, 0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000004c80)=""/114, 0x72}], &(0x7f0000004d40)=[0x4, 0x1bd, 0xfffffffffffffff8]}], 0x3) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004f00)={@map=r4, 0x2a, 0x1, 0x3, &(0x7f0000004e00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000004e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004e80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004ec0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async, rerun: 32) ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f0000004f40)=""/254) (async, rerun: 64) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000005080)={0x0, @loopback, @local}, &(0x7f00000050c0)=0xc) (rerun: 64) sendmsg$nl_route_sched_retired(r0, &(0x7f00000059c0)={&(0x7f0000005040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005980)={&(0x7f0000005100)=@deltfilter={0x878, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xfff1, 0x6}, {0xffe0, 0xf}}, [@f_tcindex={{0xc}, {0x394, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_POLICE={0x90, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x10000, 0x4, 0x7, {0x6, 0x1, 0x5, 0x80, 0x7, 0x1}, {0x2, 0x2, 0x4, 0x101, 0x3, 0x9}, 0x0, 0xe9, 0x200}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffc01}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_POLICE={0x1c, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff2e53}]}, @TCA_TCINDEX_ACT={0x90, 0x7, [@m_mpls={0x8c, 0x1c, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_LABEL={0x8, 0x5, 0x256a6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffc01, 0x3, 0x10000000, 0x3, 0x5}, 0x3}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x80, 0x8, 0x7d, 0x2}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x809b}, @TCA_MPLS_BOS={0x5, 0x8, 0x8}]}, {0x5, 0x6, 'l'}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_ACT={0x22c, 0x7, [@m_csum={0xf0, 0x14, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x20000000, 0x7ff, 0x3c}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x7, 0x0, 0x3b}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe1d, 0x8, 0x2, 0x6, 0x4715c65a}, 0x5e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xff, 0x4, 0x4, 0xa6}, 0x2f}}]}, {0x54, 0x6, "be030ad1aaf21be6f778d6929bf01aedec80f8b5b9e7dd4540decd6d4958dc858aba2e2232f812afecf1ec47e37b7a4e7efe7b74c25a284e8b0b249b945d8c66d1aa5334139b90555e327ce080fadca7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x138, 0x13, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xfffffeff, 0x1, 0xc68c, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xeee, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0xc, 0x5, 0x6, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x2, 0x10000000, 0x1, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x344, 0x8}}]}, {0xac, 0x6, "e3c72991f3d677d8e91c71f25aed3bbc7204905672b9a363b00b2eb005c3191daa3640ae44e9e2436b32082efd183705ed9a458d654a6c2ef39a3826f5182d310428c767c52f22c7876d562717a69d90c87a60ee251a89bc308c6076f2d017f44c1d1e00b5208d0bcff44054949dae5f208d6277e40e2e995fc8395196ef3ba701ed617a78c2aebf529c7eaad9bae61848be884b59d3b4b3d8d3c35ba14498f96fba62f57e0043fb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff3, 0xc}}]}}, @f_rsvp={{0x9}, {0x34, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xd, 0x10}}, @TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0x37, 0x4}, {0x8, 0x6, 0x9}, 0x5e, 0x3, 0x8}}]}}, @f_rsvp6={{0xa}, {0x468, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_RSVP_SRC={0x14, 0x3, @remote}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xc5, 0x80, 0x3}, {0x2, 0x7fff, 0xa942}, 0x16, 0x0, 0x2}}, @TCA_RSVP_POLICE={0x41c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x103, 0x4, 0x6, 0xcae, 0x1ff, 0x7, 0xfffff52d, 0x8, 0x4, 0x10001, 0x4, 0xffffffff, 0x80000000, 0x8e09, 0x3, 0x9, 0x4, 0x1, 0x942, 0xffe00000, 0x38f, 0x9, 0x100, 0x7, 0xffffffff, 0x9, 0xb2b5, 0x800, 0x1, 0x6, 0x0, 0xdef, 0x3, 0x4, 0x4, 0x7, 0xe92c, 0x4, 0x8, 0x6, 0x8, 0x4, 0xfffffffe, 0x80000000, 0x5, 0x8, 0x7, 0xc1b0e35, 0x9, 0x1, 0x8001, 0x6, 0xfffffffc, 0x3, 0x3, 0x6, 0x800, 0x38000000, 0x5, 0x8, 0x2, 0xba47, 0x3, 0x80, 0x1, 0xfffffff8, 0x0, 0xdbfb, 0x1000000, 0x4, 0x5, 0x8, 0xb, 0xfffffffe, 0x82d, 0x0, 0x5, 0x400, 0x3, 0xb6, 0xffff, 0x6, 0xffff0, 0xfe, 0x7, 0x100, 0x5, 0x80000001, 0x800, 0x4ac, 0x259, 0x9, 0x2, 0x400, 0x8, 0x10001, 0x4, 0x8, 0x90, 0x60, 0x0, 0x6, 0x9, 0x7, 0x4, 0x5, 0x5, 0x4, 0x5, 0x5, 0x3, 0x6, 0xa07e, 0xfffffff8, 0x2, 0x7, 0xffff, 0x81, 0x1, 0x2, 0x6, 0x5, 0x2, 0x80000001, 0x408, 0xa, 0x1, 0x9, 0x7fff, 0xfffffffc, 0x6, 0x2, 0x7, 0x7, 0x4, 0x1b, 0x400, 0x81, 0x11ca, 0x4, 0x87, 0xafb, 0x2, 0x147b, 0x1ff, 0xfffffe00, 0x6, 0x7, 0xfffffffb, 0x1000, 0x7, 0x8, 0x9, 0x3, 0x80, 0x10000, 0x4, 0x1, 0xff, 0xf54, 0x5, 0x80000001, 0x9, 0x8, 0x3, 0x7, 0x64, 0x3, 0x6, 0x101, 0x6, 0x3, 0x40, 0x4, 0x9, 0x3, 0xd1f, 0x152, 0x0, 0x8001, 0xa, 0x2, 0x0, 0x8, 0x2266, 0x8, 0x7, 0xffffffff, 0x7, 0x3ff, 0x1, 0x8, 0x4, 0x2000000, 0x89, 0xfffffff7, 0x800, 0x9, 0x7, 0x9, 0x4, 0x6, 0x1, 0x0, 0x8, 0x4, 0x0, 0x3, 0x8c, 0x101, 0xa148, 0x8, 0x8, 0x7, 0x8, 0x4, 0x7, 0x6, 0x6, 0x1, 0x4, 0x9, 0x5, 0x9, 0x59f, 0x10000, 0x0, 0x3, 0x1, 0x10001, 0x31df, 0xc, 0x8, 0x5, 0x4, 0x4, 0x1, 0x67, 0x9, 0x7, 0x3d, 0x7e8, 0x200, 0x3, 0x4, 0x60, 0x0, 0x3f1d, 0x3, 0x5, 0x9, 0xc5, 0x26, 0x3, 0x2, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xdff}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x4048054}, 0xa000) write$FUSE_INTERRUPT(r0, &(0x7f0000005a00)={0x10, 0x0, r8}, 0x10) (async) r10 = socket$rds(0x15, 0x5, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r10, 0xc0046686, &(0x7f0000005a40)={0x3523871e4def6cc4, 0x5, "1be2a9c3d6"}) (async) ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f0000005ac0)={0x0, @can={0x1d, r9}, @llc={0x1a, 0x6, 0x6, 0x4e, 0x0, 0x3, @random="c5c1523b8bee"}, @llc={0x1a, 0x118, 0xdf, 0x6, 0x6, 0x69, @broadcast}, 0xc, 0x0, 0x0, 0x0, 0x3, &(0x7f0000005a80)='bond_slave_0\x00', 0x385f, 0x5, 0xffff}) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000005bc0)={0x0, 0xa7c, 0x4, r4, 0x0, &(0x7f0000005b80)={0x990a2e, 0xc1, '\x00', @p_u8=&(0x7f0000005b40)=0xfb}}) 684.825422ms ago: executing program 6 (id=692): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f00000056c0), 0x4) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f0000000080)={{r4}, "592594ffd7c9b4aeffb5df6699b708da4aa16fd248847391fd64fcd91b9076c87e087ef4cd73c38e33b0b8070ed706f34de0c3530769ed1f901b449a8660ae4b67a990c335c1c5576f68ca635fe0b47b37f4c44ae8c0459183d256d0765e5ad9ff20405750925253c624507c4a301e0502eb9da9f600cca7122785a9d0e533798c253d764f5aafa980edbfcf1bef6545f9f643daffb1e1fa2e558a4558476335bb9bc8c8a3a73747acd894123dba955c59327d269293bd0fc1ff10e440428f87bac1801990ad484651891d1b272da0bdcc78fa8a0d809f462d5770e8f537719a5e598d6bd2cabe36608c0c14b174164d431dfa20db5f50742b5bed777a31ca3961846a1825b96e511891a76e7766e03db1312924e74fe71e843d3e67dffdd5d1bd5304f12dd20755bca14357461952c142a807719246adc5f993c281913e4ea465f4cd8a2632901b7aa92eb57becf1a4eb6bf43a0f484d742a81f4d35d313acf91d81b0446ba9fe6359b93e22cf441620fb136d59c4b1b3234d5e565ca18a8d1fc5215d1c3e248785a545c3c7e3e99e02b9a634d382f1a5d12705f27491317779a7e972329781b44714c66deb77d4e535df7e5bdd30695eb25950e7950f5b8bfd6a67d7fcc15a1e7bd91d7330e1be3bf86622f8722d7dc221ce5f4cd9848a47cce01a31926f92ce50ab2ac2935be866eaf57c2eb0c7db7d5792f3be79e565428d8c2cc970c55e71ceb0b8313b111a729bfe418e6ca669f11b078eaddbc78b3642c2b056e3456230ac1c759106e849499d373f5ca0acd6588f55092364029090ef8d2d09cc3f7e26a17772dc39af9976d2b9187df03b1a8a3c446f7e0698a024aca7f6bcb04c3f64d2a0ae78d8a660c847000aa6389b94b9d4b3274ae73a3bcbf6a8da504485fd94ee2ecddf43cd00cf5b2c0a51c3ab101d8939eefe29c2d890189bc5e990efe8789c6ddd3be07fd8f4f6c5fc87fe36e0a9f17c81cdd3d12574e739d4e3550265a5b0f761259aa6ffabaaa7450738099bdb30f433ba71841946fe5c3d97ee1d1805d0fdbb40fbdfe8e9d7311dba2cb07f45a3a94f8047199f341097720669344c563ad0e4279a233b2ad5b55e95e2ac965a81bfbf0c455409961eb3ffda89313acf19ace93110b5c3580dd27b613eed39d506231b04f47df1ef3f260dfc794c904c614016543ab57764d2cf2f2abfc136b0dc504efa7f56433f9f195aaac997202c0356bb56e474ac7b37cf3a3521bebe27b8b6971c78a6038c9d875f1d736910e083f8f89bbc7c564fe6771ff384af625d2e2a46d6e328b7571ea7f4bcb4ecbcc7b82c1546acf8dd2746d7ef66de15c72b10abab031f042cc202787630e3a83543f3baaab49d17e7466ffaa72eb806b588e31f4dbdc715240f70cbf451455c81117086b7fbae5b222c00a491012aefb2e93cd6e03fe23d475281c0a34041be64c65a6a173af82bfed5039ee35f36d282feaf9bc87936e5af38954d8d5b673cbb1223af32efedf39001fc41ac71f807035c8d68f9c2b5aafd903818141dc0c1ab8a7030e5ae60dcd4ecd4bb54cec454c9e7ef650e9039aff7f4e0ff889ff01e33057194918a0b99d8ef2dd0a7c74133884b3391f4971e6fbaef4df8161d7a93ef5a342e579df4b1ff90b3dcd3ffca59b1a0459d2c5cae4d1d45cd1370ec32f2c603d4a0f680868caf8a002715f4f7df66e90c279a2bef5d1d89cf4d94afa31d8aa9dbbf2473a97fcc73d21d2ebedc886209f71b0581eec8e3ddff4a5afbb4b59b93a7b0fe918ad7d47f3b7b2db80c556a1a5b6f74e1ce76fb4ac7c68e21f103585f570a12d0afcb324e187e48a17732586632ec37eb0c1d90d61ee88248519c7843e610b15310269159dfda44b554f317fc065759a474074a8e5e39d99a8f101cd45a48b9e592ae84d4d155d230ce40075f33cfb13cb80010f58456b1bdf300ab04c8d39ca8b374cacdba4f957b4c8668c4c530a0d6ee152fe7932dab31087bf2a1f82cc3154ce1c7b8c1b969450aa468f58d5f334c0be6913eb6c1c94d4c5aa622e05be1570225b1e004ec4e30ad69b3a26413ab75e6d9bc3ea36ac1ef8c17fb7a4fc77e7e908bd855490972b65e5135335062cbad29acfc69fb313a9217fd78f5f2efb6b20e4508ca550f3ddf9b2702c9cdfe97d1ba322ee3172027e2a4b91d223670a621da9bae4212a73d5c47c83e690af20d21e4cc9d34b69ebf3c59bc765c20dd90c502e363f0d0c6173a4f07156b6333de786834360225c43b8a11d6048872be53080fa6234b32ff4b047a420949bb3a789c22d9f11695849623ff330661c94afab958b6d5148467a5f890860f4a90914cc39e62ad601b379afca7f7988c63f8208eca7e172c394f9fa3380bd8700ae1ef88b04a820fd0d5d73a16b63ee93672fda428d0d375fa0b808d9216429587feec1b06fa2aa2ef9d8c3e4ed06f3546f5adb70fbfb8da0f4b22131314633f0c346e8cee4b7b165d6f16fd5a3dbb7961a7f0b05f293db046cf3104fbd99dbe831f4c650f2b8ac5edc5fb60d2612ad77ab47f1e6e59cc2f1a3d151fb21ba22949d09c957ef8157d8fa756d079c2620a183f65a6a1a1407f51d54d9bc4bbb67d77266f7f8de6c1533b2bb1cbefeaaacd2c51c559404cb3617d438c47df8bf06ff7f790118efae0fb01b1214c07c2915053de1b285755281994ee361d5647a9394df125f6d6f99cf3fd16b0078518c9e56b51e46cea2fcc7d4a5ffcefefcff3aee3cd9c9496050c756612ea1eb344e022c8b4d77227451f5355a316957a1e0562a8e7afb5a439d657ccbbc9839e4d1b1b691497af8fc1c7d4e28508c8c4a7a52465e7cc8bcc3fa74bf7aa7c3a8f15b65b6bdf49bb7eb5f44cdfc6a421a1b33348c8a4f3fca6f057f472000c8d6fa1fc8e0a64765e8ac11b9fb23c0698da96138efb162a65f81a986f99ec1ca137bd85e1f0b84f3d11575d6e77026da531bf05c26ce3dc9f539e1b3ba08c7755893da1b96d2dd87db486b11662790b5cf2f2b468bbc4338f9b7f3fca91a5263100fcae36d0ae197aad2d3cf3923f1d6904363bac4250fffff4e499eea8441a8fc9dca3ca16deb638ea3aea6dba04510f0eaa743d2939ca5ca11021e24185ea0ec5f448665d36c59c3ac9403f64a1175450bc9eab6d3140fa5c285ba4d7ebd715c8808fcebd9391086c894e6acf62a45a099d97bbacb5d836023d31e31c8d71b0c06d34092c967696f9e36bd09b875db4466785b13d4b5809f5f0b5c512a6f0cad7d09c69bbc6492cdd7a664200029dae93a247847cf68f7d58b563fb2d3e6a457949cb6a8498cd3a15a0f497aacc0f3fb59aec92266f453d788c7dbacd9e0fb7e2fd28677a5da43bb8814e51fae181732f16fc34d8b982e7994f5c9eec5de9ddbe1dda2f2d3ae291e957ae49f7b6c4e84cb325e8077d339872c29accaaf91f873b763053dbb80791a13553ebc3e5efef4b704a1ae0765e441fbb8e25896bd030f9b967a09efe831aa95471af35ddcdc98ac664305dfd4844972bb451e085ed1f26f20ce2797869a85f8431e0830e092d5d61b9cdcfe39a77f1f97d4b717f6a2962d382f30d8122b255deaa8c33097d6170b40c17d6b92b0cabf658c1e375a600f9368a5e7604cd8f4f05540b78393c7ae8ed4345516b8bed56b3c222fdc9863bfbbebda09914961f4f209a567035f73efd1e7e314251149969bcfcec4226f68e456be65861701ac3e37cd94d7171bfa17b1645f10c6e5a4b2c0085c062077ef1251b9506a95f081da8a4df0ecae2e6c463d1acc5455790dabc71b7383614580c95d2a516a056aa44efd02111df189e51363148ad37b8475b3fcc6104783b3b692ced39b738b8e412cac0c1e0ae84b8c333ae221364c28e1e89d92f03546c0edec638fd34de7777f571d42f56910dfef15562ae5f4379785e8cf962ea34ad9dc309f12bd0ac861c84a2ec67374fc27e78c3e700ac2cc7edc3d287c0ec022d084365c92a694e9c5565c5fc25cd730ada06cd87d1e78fc70f29b79aba3bf74f4f04fb68abf0d8e263e866a51e9195a2238fc9836a5a66714aa84c8103a6d3f1e6c79c21279ac7b8e80e7cc59d88739fdb3ce5db2d2393c97a10b49941fbf4623c9782178ff1b7459b37c5825285c30fb602936c9011fd28dc50d30caffc4d3538600e3f3c316e0281b67ba11961f435441da78264cb75e58412d15d8afeafded0715e6ea8b2fadbe3ffec8e1e6bf609be6a7019221260cba08d52276fbe4e886276e11ddd4f5e47646776282316ca29444b81ec10f4a2120feab81c90ca4fb0852a7785b67a074b1b1983e0e526c0149cd943441c0c470aca2c303111e093200368223b87afaabfe287284436f6c9dfe69309c9f9785696e0fc817a4e1653501a0108da6a5b6fe96f6eadf98b4d49f07cac76b5267bd4736a65e1e3f080010fcb96534c7677eb8933a076f70d46a04163577b9848fe53f2c59404c587810e29a0c4637029a3286158c92618a4ca2530dd1574d55cd16d3332e1eb97b5505f493ba1c1511d392693482b716d5320224474357e7c608e8282abeb73689d5b88eac399898ddad64b90a9679faaaafc606f804b97945fb52155270000625e806364fae376151fcb6168e9492231263aa1355cc6588de32296ff1210e92d50592b1225ea1e2702b14b4c56ffbae92e7fe2de11cb5bb022ee324ea65ad5f4e55d620b8db9c67d0b44c53b1d94ed0211b0755be34716545efc6228de6c5047579b62c8aeacdbf6fed7efde8c52c0a0c0ef1442516f63a729adc4d847fc5800d3cffad7c376ad9285d2f1e1080d42591b30427f889f8d63f8a34fc95d062847e31f63b884c92095f1979ab9688b802a92fa8bd8206e5c4557b96a378b1053d054ac197435d87e10d635b3c12ba996fa295af272d8f5252bbb73ba614b94bc85043712190c0066a61728477a8118b100f110eb6427b964a6b17eafc5a16e00e1969f6e9cf71263179616fabc8cec9252e8118019679e4016270cf44dc9bc55d23d737fd9955af584cf413518a58db1f28f449e7f2fcd7c82f288a6df6f384d45d7ce4eb35f6029f4632dca164e92d8f450eb5710660dc2e89f6c1075c87fbc5cb06048d7d2c454f393ad33d6804484735e21b4b7043098fcfba0e9ffb9446f617b10afa96cd8f51a2120f8efe1dbdd3d27a3e487b106cab9aedcddbc1d483e5449be6055e7bacb150393532240755a6f3eacff5a5b9e932a1e582e7ba5ea05de40e65aa5e92938c690b7a2c9962909ef1d9eac8610ac8da49caab92e271d9d878a2a5ace192c41aba3970cee11c28bc9cba488757087a8af946b1b0d0e95ee4891ff3a8c388b299e49e9d0088ec776b5abcbc04bb26be7cfe8f34a3dae788457b3476abbcb38ef6d5f4da04c793b19b8f25fb7e41f13d7660341c3d10418f64f4e183f5208b95b57593e1950470ee2f832382ddf0ef70479a99472e1165f052784b44051f3ec12d2b400c4f9beeaa0e287619595ae2b5238163aac45e77971e4dc8933eaa122579bbe46fd40ef742d9dd15deeb164c8892808537faf3ac7c0c28a89af62317783c60e7407fb410a4a5004bf0a439d0e0f1a0175bc318ea0bcb1faa1659df7278581f20e26bade769ad6bd5528bc154cd06264658feab5fe39edaf0876600cce4f03778e9bb12b7966a8c7dca9e36d96903a4ee36059f43a0a7ed92f5d1d4e912daa472f1473988ec071331dd75afa84d08157a4116b18e2a7db61b5400614208cbdf5acc475e73562ada2b5ca43b0f0549ae109b"}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) r5 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12100, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x26f}, {&(0x7f0000000580)="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", 0x212}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) write$binfmt_script(r0, 0x0, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e20, @multicast1}}) 395.456346ms ago: executing program 4 (id=693): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x6, 0xc000) tee(r0, r1, 0x4, 0x2) pselect6(0x40, &(0x7f0000000040)={0xfffffffff9c2d3d7, 0x400, 0xfffffffffffffffa, 0xfffffffffffffff9, 0x400, 0x4, 0x5, 0x4}, &(0x7f0000000080)={0x5bed, 0x2, 0xf6, 0x8001, 0x9, 0x5, 0x7000000000000000, 0xfffffffffffffff0}, &(0x7f00000000c0)={0x5, 0x6, 0xff, 0x5, 0x8, 0x81, 0x7, 0xdf}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0xe]}, 0x8}) syz_open_dev$amidi(&(0x7f00000001c0), 0x9, 0x200) (async) r2 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x97, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x20, 0xfb, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x1, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x82, 0x5, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0x40, 0xdc}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0xf0, 0xb, 0x6, 0x40, 0xb6}, 0xab, &(0x7f0000000280)={0x5, 0xf, 0xab, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "18771a3919bd3642814bf4bed4304320"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1e, 0xf, 0xcb, 0x0, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0x6, 0x4}, @generic={0x65, 0x10, 0x3, "15e026f75fb5706e280058321ed2400b482ba88915581b3edf34c1063118438d58a0eb6aadb4ee7309bb24c9ca5a7d2e9a8ecce0f22a684de6fb3e7fb763ac4dced473d81076ebcb2b508dcd85fe16722291aa6b1afdfbc7b64817399d977a73da89"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "69d1f4b3f919c8e249eb234358a29f67"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0xd, 0x2}]}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x447}}, {0xc6, &(0x7f0000000380)=@string={0xc6, 0x3, "ca29a7a7b21413a328c6ede4648d9015d6b7f5687ac7d1184835ed8ef847e4c10cad00eefc130913227330cfa5d325650afa5d3071c3505bab01fff21bb598a19d5cf93511a24e7a9c9d69a2b7b007fb1e063b95874c7ac45d508744b5047dd69ffbcc5adb242ba6342d564b8a74d8d541023c2e081ccbba2770342783af5e7a1184f006ad688fbb976d64b7a6fede8e7dfb19669eabe4243943cbd4bfbc04896da4fbea10701d815fe4b0dd55f26c9fdfe2ecd7659bc2a5ca6baa6431d5b1f1d15ec34b"}}]}) syz_usb_disconnect(r2) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) tee(r1, r3, 0x0, 0x298c6d6263d18b6a) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) fsetxattr$trusted_overlay_redirect(r4, &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x8, 0x1) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0/file0\x00'}) (rerun: 64) ioctl$CDROM_DEBUG(r5, 0x5330, 0x0) r6 = accept4$tipc(r5, &(0x7f0000000580), &(0x7f00000005c0)=0x10, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/asound/seq/clients\x00', 0x0, 0x0) close_range(r6, r7, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000640), 0x8, 0x402601) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r8, 0x40047211, &(0x7f0000000680)=0x8) (async) syz_usb_ep_write(r2, 0x81, 0x9d, &(0x7f00000006c0)="bfa960a09938d45706f602be74d1efa0b5f1e85bbf79f09dfc79d12e5a1133fbcbabc24533207a26940eb945422432a79c56df7ca7a75e166ad8ec46c1b90580dc188d312de40fa39fce9384d64360b58422456e870f26522369ea0f9ec009c45151324491a5de8900dc7959ba5c1a9d884c4c936bf7f68194f71eae833debc4f7404a08b1befbc504680d905e69a9056113936e39b79b4bf4c1aa4e93") ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) sendto$inet6(r4, &(0x7f0000000780)="30056910ad9b6c6a8c1c9280b01a499508b5c742ff1ef79e9e92d40d0e9a79126be643f53307cbf72574c5f4d207b2c17c17f82a4773c80a83210224f088daca49b3b2a357ae5015b7bd434dfb84da5ff941", 0x52, 0x1, &(0x7f0000000800)={0xa, 0x4e21, 0x5, @mcast1, 0x1}, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x400000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000880)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000900)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f0000000980)={0x28, 0x3, r9, r10, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000940)}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r8, 0x40045402, &(0x7f00000009c0)) (async, rerun: 64) ioctl$FS_IOC_GETFSUUID(r8, 0x80111500, &(0x7f0000000a00)) (async) llistxattr(&(0x7f0000000a40)='./file0/file0\x00', &(0x7f0000000a80)=""/5, 0x5) (async) sendmsg$key(r7, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000ac0)={0x2, 0x18, 0x7, 0xc, 0x20c, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_key={0x5, 0x9, 0xc8, 0x0, "1a7669d118b0381a28752f53fb5b3dd6f168a45c119aaeda58"}, @sadb_x_sec_ctx={0x201, 0x18, 0x0, 0xa, 0x1000, "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"}, @sadb_ident={0x2, 0xb, 0xb, 0x0, 0x6}, @sadb_ident={0x2, 0xb, 0x7fff, 0x0, 0x3}]}, 0x1060}}, 0x48000) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000001bc0), r3) 315.061786ms ago: executing program 4 (id=694): syz_emit_ethernet(0x142, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) io_setup(0x2, &(0x7f0000000200)=0x0) (async) r2 = eventfd2(0x0, 0x0) (async, rerun: 64) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x1}}) (async, rerun: 64) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async, rerun: 64) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) (rerun: 64) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x4, @value=0x9}) (async) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xe}, {0xffe0, 0xf}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x48, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x740b85e921414c2e, 0x6}, {0x0, 0x4}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast2}]}}]}, 0x48}}, 0x24044094) (async, rerun: 64) r10 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) (rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r10, 0x0) 314.804274ms ago: executing program 2 (id=695): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8a4}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x24000000) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040051) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xa0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440), 0x1000000, &(0x7f0000000100)={[{@clone_children}]}) 235.081481ms ago: executing program 4 (id=696): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x1, 0x4d88, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc5df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894cbed629ecc25c288b3d4556a85a1e2150cac5b686a8de29ab7c35040b77875bfa0e451dc0869cfe105bd115e7cf48f44dfdf26be65f3b727fd88d6395d051e49c060998e84b19377fcb20fe2eb392335e5a9d84555ef037aab37169ce761aa8a8ec08ea87e3a3b896f3d1b2380bc8256e0f7ea7dc488382e6112b53a7bb269d6261f87e0e0e0cef9152f8a67f412148f34880c970101fbd7b0e8fc49d6a5c87e487b7b175b15be26b6b8e1ed8527614dcefcfd80f8392560c8b706418b7de8fbb7a666a7e7f322dc70373606bf39efa04616cb99d662dfc591061bde5ed27a66aa7edbfec1eb0b1e843c372b84c3ed514a0aadf523b8669e526765d429824aeaa0a6f4c185754d437d977a1f586431dc256ce5aa7c25be259de3a0ae6e5bcdf56b4c7e8199fe6b461e78467cfac19de6956056ef57e93d3a7df8f646f4a9002b100edb0a6caa72b3f6eb29dc54de58120d27daff9cd61c64107e1bcb3b3212e1e2aa24fb24dc2dafc636c82ad25da9d934e46c7783d8f915337612feb348857ce2262240dfe51ec94d9d61074959f167b9840b20f003883bf167149228d7f03eafde851427cd1966a96aeae05b51ae4cd82f4b4dad60a070c01a8b500e2683f7136e331602e76845262825d7f3764cf1a05ad95d88aab71d41484f63fa6a43c044c7f03130552321933bc40b888fd0cc55939ff79a5059516f3b80c7ba8188ffb6a259a34567ee52c1f9df0f6c91737d688e36d076a49d1045cac30d5ed52a10381c96d9f22e469cc531bb06853d18b8f8625d2a917e795ffa4407fa75713510a3f5370e1ecbf7a5ff68a90a1eda077531cf4d399d4908f138c936e1931c72240070c6a6255f5fd03966e9a06c1d481e8e3d128e880776e572177780a3481c49bd86c174e152bafed245d58ef3428c645b08e48833960d1b5223d7be0c67a2b2c7531390d1837a84ed004a00cb4b0cd6e78824da032b48c49ec006d14206dc3d0c67d7ca87e9ea0faddc3e0b0c917c64eefeebf79e3a16c958db63a08a5d4d7210273aba3e56a4cd4cccb044750ff97749505ff1332b2dd30990849ab1500e1947d0abfb0c59760f0a502806ee1bce56fbb42251dd6ac8b709c73a6b8c548c2b23cf351dc498810e477bd082464e76702703b56d3cd2f3d8a2e00f19d8ffa3c236d3601f169c9dfe9c316f8cbe63c3801a51ea5ac785694a0c653cd28d68c5a81c2590d2aeea8c8688b2e88f46c4f99890e51b42cce485fcb4d91557fb3912b36b0dbeac8df44e945eb9937141402fb2aa1476185e1f8c37f6c98bc937f36d9c7237135132a54a03067b002b9c657ab0daa253af66eee78b0309cb8532dd2dee800c8349b731da0efa66ead82eebe0102279df5aa281fe1d86c0dbf154910d5e8a113ecbddbd046367b9e2acfa7cc406f61b472bbec6919534615ed81b664da956ce6586bf4c92d63ef371dfec5f9ce748931d585cadc9372a95a1372c7213e2c52fca253945afeee02e9f2de2d9452c85fd2dbdc87cb6c25697dfcbed8a0eba381835e6c360f3861367ec98a9a9ccf956d6cbfb706fee0d391cf82a0d4662792274f52fc2b5d72a43ec74a86400e62d3652f607774cfad1504bc0476570d532b527bf0d7012804b2e6fdf9a9414f10b16c9374f2b065348d865b309e37750d3a7e12394e356c48c9fa0d4a9a43f689f6cbf70b09a3b9782cc3d5d93480f8a7a21a049780fc6bf21f1eca938a37afcbb2b929a0c502e164d2571e78d214b359d97e3edc0ad5c7fd1625b4ece33e1f569676e9a7262ead857873f77ef149d2f8c5a09ab19ae384a7f957f612a24283c35327aa969b20711309644c5b3e6c89da94e1f5da54246bd771468a1adc8a8d601e0b12769604f0f07ca43ce2a8a2f4b5654c0b76b146c49038e07db54dae702580b97096911f034fc1797029de8b7c213c902d1d754e77ff85e6222e745db9d5d2d45c5d29a8b6de0f27e5701fdf12b09fd6c70baa0f85a424c21ce0796dbe1fd366b94fcdf64ea232b3e88b89a38d728de77e84decc804f07a48f2716ca6f76b24923cea1a4da0d1f1dc73611269e784c4fd921f9b26c11f35b5cda45842a81b603ce2155d95c273fa0743a571b52e68c9ea3f28009fc37406b9e329ce50fedfb20dfb4cdf3a94769aee2586c2a17e68a07abfcd18aceddfd3876b14558e4d092eadb9120796c44e89610494085117bc41b5c4619a8c160b97811df49fc7d9bf222d7a002640644337ef5af53ed50661131f7c042665b276c0adf0c9a74f3542729beb7632a6027e65eddff7bb27915826701ec9b6a4c672f08877eefd859e0aa6e75a2e841e1ea98dff994e5a58be628df86bff17497a4d0f92ab39db421eb1062a2a393656bbb1d92becbb91a59619156b51585cd2eafd8a18d6326166312efeaa7258bddad63e0c7372ffb7ce1f1adf1ac2ffa0f278e4be6684d762f8971ed7bb04096b96f8126bf5fd32142e745d421f495327dde0f1e2d9a1d8ba63c1453101396a2e54e89cdabac2c6a01f23a5c1d5a2dfa2a3c634176e97c9c62b41ea28102b5a08af2fba1d311bb323df086ea97726c9d8c7b7b53a3399a80f040d434fdcc2148fb1da3b7d7f0f3e3fd56471a310ee275da611c79f86be8ed6343f6ed0ad91dfeffebc3ab6389d0566d6db904c1db499ae7d2698fdc7170320f85cc3d3d0d9d0d0c7d45db7b53c5eb79a2fed2a048d9d74419532122fac62f6315a9e13b461cb4e26514491debd366927987271be963ea5805a49b8b480c6a393fda1b11fd5634890cf02948cb5bfea237afb30d081c7403cd334a02e5bb8db542c4d5fa5ec5c8a0dd36b62156881c98e01948b4775a502c5d8453439fd930df52caac9d71c28b712000b306b913c10918ca0bc194f2533334462e5cd2b2e6c978a4838febfbc2d4375b8108bd0aa32aeaf05e7ba30c781cace6470ead574f5cbfa68aa8c8d835e9b3ab2bd7dd90b5e3e6cd62d8e04c3b45326e1f560a8dd8f3db4177e9e5ccd61f21dacb5c40c8030559cdfe88f7aa98bdcde90c1214cf293b3df093d0630bc3073cbaffa025b1f5537b49d799731745de7d36cded4a9db25915a511ba505b4ddd885cd226c24ea37fd926dbd90b887"}, {0x0, 0x0, 0x7fffffff, 0x0}, {0x3, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0xfffffffffffffdf4, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x104, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) r3 = fsopen(&(0x7f0000000140)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f00000004c0)=0x1, 0x4) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x0, 0x5}]}) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000000)={0x8, 0x101}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 234.491383ms ago: executing program 6 (id=697): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00007d0000)) (async) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00007d0000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x39) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x39) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x24048050}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtfilter={0x24, 0x28, 0xd27, 0x1000004, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x2, 0x9}, {0x4}, {0x3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048805}, 0x4000) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtfilter={0x24, 0x28, 0xd27, 0x1000004, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x2, 0x9}, {0x4}, {0x3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048805}, 0x4000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x64, r10, 0x101, 0x0, 0x200, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x24, 0x34, @random="7e90ce48de9e27d3014d7633f25c8fe93c045a957fc5bda40db753e3b61e8139"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x18, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x40080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) 165.518641ms ago: executing program 2 (id=698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) r3 = syz_io_uring_setup(0x749e, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2e7}, &(0x7f0000000100), &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffe}, 0x48) syz_io_uring_setup(0x1005c20, &(0x7f0000000240)={0x0, 0xe454, 0x13290, 0x2}, &(0x7f0000000100), &(0x7f00000003c0)) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 165.36371ms ago: executing program 6 (id=699): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40011) syz_open_dev$evdev(&(0x7f0000000280), 0xfffffffffffffffe, 0x1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xe2201, 0x0) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xe2201, 0x0) close(r1) 61.442068ms ago: executing program 6 (id=700): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x200000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f00000000c0)}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x6dc8}]}}}]}, 0x40}}, 0x0) 60.53088ms ago: executing program 4 (id=701): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) statfs(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)=""/254) (async) chdir(&(0x7f00000000c0)='./bus\x00') (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc000, 0x8) 516.642µs ago: executing program 6 (id=702): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d1", 0x1aa}], 0x1, 0x9) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4c0000001a001100000000000000000002000000000000000000000005001b0006000000080001007f000001"], 0x4c}}, 0x0) 0s ago: executing program 4 (id=703): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000080)=0x7, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002080)=ANY=[@ANYBLOB="e0000000150021"], 0xe0}], 0x1, 0x0, 0x0, 0x41}, 0x4000800) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}]}}}]}, 0x44}}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000240)={r5, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x18, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24433d1e770a0000000011bd67c99471acee0000000f000000000600", [0x20000000]}}) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000500)={'filter\x00', 0x4}, 0x68) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="021104060f00000027bd7000fcdbdf2502000100000004d60368990400000040020013000300000026bd700001350000050006006c8000000a000e2000000004fe8000000000000000000000000000bb000000800000000004001800039e1800800ac72aa77b261d46525ce5e0941498746d26a841f82017"], 0x78}}, 0x4010) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r10, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x4, "7eacf9", "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"}}, 0x110) r11 = dup(r10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="011027bd7000fe0000000000000008000300", @ANYRES32=r9, @ANYBLOB="0d817cef9e1dd64ef35c7feca44d098967230730ff373ab38d1306ed16efce7710281f42d6d3b18b6cb8221474edffee20a513602498153a2b071cafd0654f0523afb02e123312cb00cd651bcaff9325e01b4e72bee0613e5d0a8d6656187be661b5ab85f16274fef89e7b0ba59e0d1bd879c7ba87ff11c32dfb76b543437e1442787bb4684676f740881ea94f103989c98630f06ed273d38b0c65236a275f50934517514495031d20340a3a6ca91247a937cb318c9ad9099b4333d4"], 0x28}}, 0x40851) kernel console output (not intermixed with test programs): 2.502275][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.506166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 82.509692][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.513260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.517653][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.521132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.525227][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.617253][ T6059] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 82.766868][ T6059] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 82.770189][ T6059] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.772904][ T6059] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.777364][ T6059] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.780688][ T6059] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.783512][ T6059] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.788050][ T6059] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.791005][ T6059] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.793837][ T6059] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.798490][ T6059] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.801449][ T6059] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.804278][ T6059] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.808165][ T6059] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.816059][ T6059] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.820844][ T6059] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.824307][ T6059] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.827945][ T6059] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.831318][ T6059] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.835282][ T6059] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.845414][ T6059] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.849605][ T6059] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.854153][ T6059] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.861007][ T6059] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 82.865403][ T6059] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 82.870631][ T6059] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.874685][ T6059] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 82.878747][ T6059] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 82.881413][ T6059] usb 7-1: Product: syz [ 82.882735][ T6059] usb 7-1: Manufacturer: syz [ 82.884140][ T6059] usb 7-1: SerialNumber: syz [ 82.888965][ T6059] usb 7-1: config 0 descriptor?? [ 82.898527][ T6059] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 83.069167][ T6993] netlink: 'syz.4.256': attribute type 64 has an invalid length. [ 83.071970][ T6993] netlink: 'syz.4.256': attribute type 4 has an invalid length. [ 83.074556][ T6993] netlink: 152 bytes leftover after parsing attributes in process `syz.4.256'. [ 83.153319][ C1] usb 7-1: yurex_control_callback - control failed: -71 [ 83.154046][ T1463] usb 7-1: USB disconnect, device number 12 [ 83.169576][ T1463] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 83.807200][ T53] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 83.956248][ T53] usb 9-1: Using ep0 maxpacket: 16 [ 83.971654][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 83.977338][ T53] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 83.980503][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.983584][ T53] usb 9-1: Product: syz [ 83.985225][ T53] usb 9-1: Manufacturer: syz [ 83.992308][ T53] usb 9-1: SerialNumber: syz [ 83.996794][ T53] usb 9-1: config 0 descriptor?? [ 84.004917][ T53] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 84.012222][ T53] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 84.604122][ T53] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 85.235397][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 85.235407][ T40] audit: type=1400 audit(3515296260.122:402): avc: denied { bind } for pid=7018 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.245063][ T40] audit: type=1400 audit(3515296260.132:403): avc: denied { name_bind } for pid=7018 comm="syz.2.262" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 85.254500][ T40] audit: type=1400 audit(3515296260.132:404): avc: denied { node_bind } for pid=7018 comm="syz.2.262" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 85.263730][ T40] audit: type=1400 audit(3515296260.132:405): avc: denied { listen } for pid=7018 comm="syz.2.262" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.296170][ T40] audit: type=1400 audit(3515296260.182:406): avc: denied { accept } for pid=7018 comm="syz.2.262" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.318594][ T53] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 86.321814][ T53] em28xx 9-1:0.0: board has no eeprom [ 86.386642][ T53] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 86.389164][ T53] em28xx 9-1:0.0: dvb set to bulk mode. [ 86.395246][ T839] em28xx 9-1:0.0: Binding DVB extension [ 86.424967][ T5977] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 86.459133][ T839] em28xx 9-1:0.0: Registering input extension [ 86.539007][ T839] usb 9-1: USB disconnect, device number 3 [ 86.541528][ T839] em28xx 9-1:0.0: Disconnecting em28xx [ 86.543246][ T839] em28xx 9-1:0.0: Closing input extension [ 86.574825][ T839] em28xx 9-1:0.0: Freeing device [ 86.695060][ T5977] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.703166][ T5977] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.712860][ T5977] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.750868][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.992313][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.264'. [ 87.003171][ T5977] usb 7-1: usb_control_msg returned -32 [ 87.004939][ T5977] usbtmc 7-1:16.0: can't read capabilities [ 87.083629][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 87.280706][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 87.330630][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.333928][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 87.355110][ T7040] usbtmc 7-1:16.0: usbtmc_ioctl_request failed -32 [ 87.358378][ T24] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 87.361107][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.378216][ T24] usb 9-1: config 0 descriptor?? [ 87.506227][ C2] net_ratelimit: 50165 callbacks suppressed [ 87.506238][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.506507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 87.508252][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.511952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.515585][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.519323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.522861][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.526919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.530227][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.533898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.763710][ T40] audit: type=1400 audit(3515296262.652:407): avc: denied { ioctl } for pid=7031 comm="syz.2.264" path="socket:[21510]" dev="sockfs" ino=21510 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.785415][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 87.838452][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 87.850518][ T24] usb 9-1: USB disconnect, device number 4 [ 88.019341][ T5978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.022416][ T5978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.025012][ T5978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.027715][ T5978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.030562][ T5978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.180110][ T7043] chnl_net:caif_netlink_parms(): no params data found [ 88.296172][ T7043] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.298603][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.301353][ T7043] bridge_slave_0: entered allmulticast mode [ 88.303975][ T7043] bridge_slave_0: entered promiscuous mode [ 88.309906][ T7043] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.311021][ T7061] capability: warning: `syz.4.268' uses 32-bit capabilities (legacy support in use) [ 88.316603][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.318888][ T7043] bridge_slave_1: entered allmulticast mode [ 88.321480][ T7043] bridge_slave_1: entered promiscuous mode [ 88.393431][ T7043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.405023][ T7043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.488532][ T7043] team0: Port device team_slave_0 added [ 88.493468][ T7043] team0: Port device team_slave_1 added [ 88.556089][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.566547][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.577743][ T7043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.582488][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.584731][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.593585][ T7043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.652703][ T7043] hsr_slave_0: entered promiscuous mode [ 88.655002][ T7043] hsr_slave_1: entered promiscuous mode [ 88.659587][ T7043] debugfs: 'hsr0' already exists in 'hsr' [ 88.661451][ T7043] Cannot create hsr debugfs directory [ 88.778916][ T40] audit: type=1400 audit(3515296263.672:408): avc: denied { validate_trans } for pid=7077 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 88.836080][ T40] audit: type=1400 audit(3515296263.722:409): avc: denied { getopt } for pid=7081 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.879097][ T7043] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.882380][ T40] audit: type=1400 audit(3515296263.772:410): avc: denied { ioctl } for pid=7083 comm="syz.4.271" path="socket:[20901]" dev="sockfs" ino=20901 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.892072][ T7043] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 88.901003][ T7043] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.910790][ T7043] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 88.976085][ T7043] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.978335][ T7043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.980646][ T7043] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.983444][ T7043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.024542][ T7043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.051902][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.061772][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.099572][ T7043] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.107176][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.110182][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.118199][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.120991][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.160022][ T34] usb 7-1: USB disconnect, device number 13 [ 89.253658][ T7043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.267894][ T839] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 89.278605][ T7103] NILFS (nbd2): device size too small [ 89.358366][ T40] audit: type=1400 audit(3515296264.252:411): avc: denied { setattr } for pid=7107 comm="syz.2.275" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.416342][ T839] usb 9-1: Using ep0 maxpacket: 16 [ 89.419499][ T839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 89.424227][ T839] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 89.427414][ T839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.430388][ T839] usb 9-1: Product: syz [ 89.431729][ T839] usb 9-1: Manufacturer: syz [ 89.433216][ T839] usb 9-1: SerialNumber: syz [ 89.440102][ T839] usb 9-1: config 0 descriptor?? [ 89.445265][ T839] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 89.449129][ T839] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 89.464062][ T7115] 9pnet: Found fid 0 not clunked [ 89.477604][ T7043] veth0_vlan: entered promiscuous mode [ 89.482642][ T7043] veth1_vlan: entered promiscuous mode [ 89.498145][ T7043] veth0_macvtap: entered promiscuous mode [ 89.502473][ T7043] veth1_macvtap: entered promiscuous mode [ 89.520113][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.528328][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.540171][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.544609][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.556130][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.560527][ T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.633901][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.641511][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.650859][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.653371][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.030788][ T7128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61968 sclass=netlink_route_socket pid=7128 comm=syz.5.279 [ 90.041270][ T7130] netlink: 'syz.2.278': attribute type 1 has an invalid length. [ 90.050285][ T839] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 90.076390][ T5982] Bluetooth: hci2: command tx timeout [ 90.169057][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.281'. [ 90.171888][ T7137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.174261][ T7137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.186619][ T7137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.188901][ T7137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.759912][ T839] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 91.762540][ T839] em28xx 9-1:0.0: board has no eeprom [ 91.826309][ T839] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 91.828888][ T839] em28xx 9-1:0.0: dvb set to bulk mode. [ 91.836806][ T839] em28xx 9-1:0.0: Binding DVB extension [ 91.914840][ T839] em28xx 9-1:0.0: Registering input extension [ 92.010771][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 92.010784][ T40] audit: type=1400 audit(3515296266.902:413): avc: denied { bind } for pid=7159 comm="syz.5.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.055135][ T839] usb 9-1: USB disconnect, device number 5 [ 92.060701][ T839] em28xx 9-1:0.0: Disconnecting em28xx [ 92.062747][ T839] em28xx 9-1:0.0: Closing input extension [ 92.073524][ T839] em28xx 9-1:0.0: Freeing device [ 92.085982][ T40] audit: type=1400 audit(3515296266.972:414): avc: denied { write } for pid=7164 comm="syz.5.289" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 92.119422][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.291'. [ 92.122467][ T7169] 8021q: VLANs not supported on ip_vti0 [ 92.125103][ T40] audit: type=1400 audit(3515296267.012:415): avc: denied { ioctl } for pid=7168 comm="syz.2.291" path="socket:[22318]" dev="sockfs" ino=22318 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.146359][ T5982] Bluetooth: hci2: command tx timeout [ 92.154644][ T40] audit: type=1400 audit(3515296267.022:416): avc: denied { bind } for pid=7168 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.169518][ T40] audit: type=1400 audit(3515296267.032:417): avc: denied { write } for pid=7168 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.249485][ T40] audit: type=1400 audit(3515296267.142:418): avc: denied { watch_mount } for pid=7172 comm="syz.5.292" path="/9" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.274065][ T7173] tipc: Failed to obtain node identity [ 92.276047][ T7173] tipc: Enabling of bearer rejected, failed to enable media [ 92.364347][ T7169] loop6: detected capacity change from 0 to 7 [ 92.374206][ T6194] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 92.378251][ T6194] loop6: partition table partially beyond EOD, truncated [ 92.381366][ T6194] loop6: p1 size 1585496431 extends beyond EOD, truncated [ 92.391489][ T40] audit: type=1400 audit(3515296267.282:419): avc: denied { read } for pid=7175 comm="syz.5.293" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 92.402131][ T40] audit: type=1400 audit(3515296267.282:420): avc: denied { open } for pid=7175 comm="syz.5.293" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 92.409622][ T7169] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 92.411349][ T7169] loop6: partition table partially beyond EOD, truncated [ 92.415063][ T7169] loop6: p1 size 1585496431 extends beyond EOD, truncated [ 92.462185][ T6194] udevd[6194]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 92.516326][ C2] net_ratelimit: 57242 callbacks suppressed [ 92.516336][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.516531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 92.518406][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.522099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.525756][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.529482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.533085][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.537031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.540441][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.544129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.708789][ T7184] .: renamed from bond0 (while UP) [ 92.748299][ T40] audit: type=1400 audit(3515296267.642:421): avc: denied { watch_sb } for pid=7185 comm="syz.2.296" path="/92" dev="tmpfs" ino=533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 93.140051][ T40] audit: type=1400 audit(3515296268.032:422): avc: denied { ioctl } for pid=7204 comm="syz.5.302" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.153362][ T7205] overlay: filesystem on ./file0 not supported as upperdir [ 93.161266][ T7205] bpf: Bad value for 'uid' [ 93.162915][ T7205] kAFS: No cell specified [ 93.286292][ T1463] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 93.436215][ C0] sched: DL replenish lagged too much [ 93.446378][ T1463] usb 9-1: Using ep0 maxpacket: 8 [ 93.452663][ T1463] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.466394][ T1463] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 93.470169][ T1463] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.484687][ T1463] usb 9-1: config 0 descriptor?? [ 93.616274][ T6034] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 93.692345][ T1463] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 93.748157][ T7221] can0: slcan on ttyprintk. [ 93.782224][ T6034] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.786690][ T6034] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.792905][ T6034] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.795977][ T6034] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.827781][ T7220] can0 (unregistered): slcan off ttyprintk. [ 93.879160][ T7229] netlink: 'syz.2.307': attribute type 2 has an invalid length. [ 94.004437][ T6034] usb 10-1: usb_control_msg returned -32 [ 94.017522][ T7217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pid=7217 comm=syz.5.305 [ 94.021740][ T6034] usbtmc 10-1:16.0: can't read capabilities [ 94.226480][ T5982] Bluetooth: hci2: command tx timeout [ 94.240595][ T6034] usb 9-1: USB disconnect, device number 6 [ 94.916023][ T7255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.312'. [ 95.136385][ T6034] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 95.286268][ T6034] usb 9-1: Using ep0 maxpacket: 32 [ 95.294656][ T6034] usb 9-1: config 0 has no interfaces? [ 95.300042][ T6034] usb 9-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 95.304225][ T6034] usb 9-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 95.308234][ T6034] usb 9-1: Product: syz [ 95.310098][ T6034] usb 9-1: Manufacturer: syz [ 95.314166][ T6034] usb 9-1: config 0 descriptor?? [ 95.539920][ T7256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.545458][ T7256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.757552][ T7256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.762512][ T7256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.769206][ T6034] usb 9-1: USB disconnect, device number 7 [ 96.016580][ T5978] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.019935][ T5978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.022818][ T5978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.025539][ T5978] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.028128][ T5978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.173417][ T7273] chnl_net:caif_netlink_parms(): no params data found [ 96.306420][ T5982] Bluetooth: hci2: command tx timeout [ 96.335141][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.344343][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.348292][ T7273] bridge_slave_0: entered allmulticast mode [ 96.351677][ T7273] bridge_slave_0: entered promiscuous mode [ 96.355575][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.358639][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.361261][ T7273] bridge_slave_1: entered allmulticast mode [ 96.363934][ T7273] bridge_slave_1: entered promiscuous mode [ 96.381321][ T7298] /dev/sg0: Can't lookup blockdev [ 96.503539][ T7273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.509959][ T7273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.584703][ T7273] team0: Port device team_slave_0 added [ 96.598491][ T7273] team0: Port device team_slave_1 added [ 96.671899][ T6034] usb 10-1: USB disconnect, device number 2 [ 96.702216][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.704475][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.712905][ T7273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.717965][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.720262][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.728825][ T7273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.786351][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 96.793537][ T7273] hsr_slave_0: entered promiscuous mode [ 96.795918][ T7273] hsr_slave_1: entered promiscuous mode [ 96.801889][ T7273] debugfs: 'hsr0' already exists in 'hsr' [ 96.803856][ T7273] Cannot create hsr debugfs directory [ 97.024013][ T7273] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 97.032623][ T7273] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 97.040713][ T7273] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 97.048711][ T7273] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 97.075395][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.078443][ T7273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.081441][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.084042][ T7273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.137003][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.151347][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.158119][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.200253][ T7273] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.206094][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.208928][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.216332][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.218922][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.236815][ T7273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.240893][ T7273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.351359][ T7273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.526272][ C2] net_ratelimit: 55859 callbacks suppressed [ 97.526290][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.526412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.528835][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.532372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.535983][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.539945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 97.543147][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.546860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.550580][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.554145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.682672][ T7273] veth0_vlan: entered promiscuous mode [ 97.701303][ T7273] veth1_vlan: entered promiscuous mode [ 97.736146][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 97.736160][ T40] audit: type=1400 audit(3515296272.622:433): avc: denied { getopt } for pid=7343 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 97.749785][ T7273] veth0_macvtap: entered promiscuous mode [ 97.753604][ T7273] veth1_macvtap: entered promiscuous mode [ 97.783444][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.791837][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.800818][ T46] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.804383][ T46] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.811309][ T46] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.814186][ T46] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.891015][ T218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.891029][ T218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.943432][ T7358] Bluetooth: MGMT ver 1.23 [ 97.963604][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.963833][ T40] audit: type=1400 audit(3515296272.802:434): avc: denied { map } for pid=7351 comm="syz.4.335" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.966074][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.074979][ T5982] Bluetooth: hci0: command tx timeout [ 98.172341][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.339'. [ 98.192768][ T40] audit: type=1400 audit(3515296273.082:435): avc: denied { ioctl } for pid=7370 comm="syz.2.339" path="socket:[23133]" dev="sockfs" ino=23133 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 98.193419][ T7371] use of bytesused == 0 is deprecated and will be removed in the future, [ 98.207371][ T7371] use the actual size instead. [ 98.247556][ T34] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 98.398915][ T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.402813][ T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.408085][ T34] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.412568][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.627814][ T34] usb 9-1: usb_control_msg returned -32 [ 98.629707][ T34] usbtmc 9-1:16.0: can't read capabilities [ 98.863901][ T7391] syz_tun: entered allmulticast mode [ 98.978305][ T7392] usbtmc 9-1:16.0: usbtmc_ioctl_request failed -32 [ 98.983127][ T6787] usb 9-1: USB disconnect, device number 8 [ 99.106590][ T34] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 99.276712][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 99.280549][ T34] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.286546][ T34] usb 7-1: config 0 has no interface number 0 [ 99.311245][ T34] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 99.322932][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.329288][ T34] usb 7-1: Product: syz [ 99.332301][ T34] usb 7-1: Manufacturer: syz [ 99.334282][ T34] usb 7-1: SerialNumber: syz [ 99.347323][ T34] usb 7-1: config 0 descriptor?? [ 99.364609][ T34] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 99.376233][ T34] usb 7-1: selecting invalid altsetting 1 [ 99.378055][ T34] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 99.387066][ T34] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 99.393575][ T34] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 99.400589][ T34] usb 7-1: media controller created [ 99.419236][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.466727][ T7397] 9p filesystem being mounted at /20/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 99.639716][ T7409] sctp: [Deprecated]: syz.4.349 (pid 7409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.639716][ T7409] Use struct sctp_sack_info instead [ 99.866955][ T7415] 9p: Unknown Cache mode or invalid value fs [ 99.879102][ T7416] netlink: 'syz.5.352': attribute type 10 has an invalid length. [ 99.881989][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.885077][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.895202][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.897601][ T7416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.900042][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.902515][ T7416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.908155][ T7416] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 99.957350][ T40] audit: type=1400 audit(3515296274.852:436): avc: denied { read write } for pid=7421 comm="syz.5.354" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.965382][ T40] audit: type=1400 audit(3515296274.852:437): avc: denied { open } for pid=7421 comm="syz.5.354" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 100.022371][ T7425] syzkaller1: entered promiscuous mode [ 100.024219][ T7425] syzkaller1: entered allmulticast mode [ 100.131538][ T40] audit: type=1400 audit(3515296275.022:438): avc: denied { module_request } for pid=7426 comm="syz.5.356" kmod=6E65746465762D0D scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 100.146835][ T5982] Bluetooth: hci0: command tx timeout [ 100.370481][ T40] audit: type=1400 audit(3515296275.262:439): avc: denied { setattr } for pid=7402 comm="syz.4.349" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 100.412834][ T7436] netlink: 'syz.4.358': attribute type 1 has an invalid length. [ 100.418212][ T7436] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 100.466883][ T34] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 100.472077][ T40] audit: type=1400 audit(3515296275.362:440): avc: denied { mounton } for pid=7441 comm="syz.4.359" path="/syzcgroup/unified/syz4" dev="pstore" ino=1451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 100.480564][ T34] zl10353_read_register: readreg error (reg=127, ret==-110) [ 100.497666][ T7391] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 100.504511][ T34] usb 7-1: USB disconnect, device number 14 [ 100.505085][ T7390] syz_tun: left allmulticast mode [ 100.518154][ T7442] netlink: 40 bytes leftover after parsing attributes in process `syz.4.359'. [ 100.566266][ T1463] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 100.641957][ T1170] block nbd0: Possible stuck request ffff888027ea01c0: control (read@0,1024B). Runtime 30 seconds [ 100.645787][ T1170] block nbd0: Possible stuck request ffff888027ea0380: control (read@1024,1024B). Runtime 30 seconds [ 100.649748][ T1170] block nbd0: Possible stuck request ffff888027ea0540: control (read@2048,1024B). Runtime 30 seconds [ 100.653025][ T1170] block nbd0: Possible stuck request ffff888027ea0700: control (read@3072,1024B). Runtime 30 seconds [ 100.722348][ T1463] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.725888][ T1463] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.730454][ T1463] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.734088][ T1463] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.776830][ T61] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 100.951288][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 100.964271][ T61] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.967682][ T61] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.970969][ T61] usb 9-1: Product: syz [ 100.972332][ T61] usb 9-1: Manufacturer: syz [ 100.973833][ T61] usb 9-1: SerialNumber: syz [ 100.977485][ T61] usb 9-1: config 0 descriptor?? [ 101.029893][ T1463] usb 10-1: usb_control_msg returned -32 [ 101.031754][ T1463] usbtmc 10-1:16.0: can't read capabilities [ 101.036917][ T7447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.039922][ T7447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.207814][ T7453] program syz.2.361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.373850][ T61] usb 9-1: USB disconnect, device number 9 [ 101.421506][ T6191] udevd[6191]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.612998][ T7472] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 101.633862][ T7474] 9pnet_virtio: no channels available for device 127.0.0.1 [ 101.680735][ T7476] IPVS: persistence engine module ip_vs_pe_s not found [ 101.689810][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 101.737083][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 101.820113][ T7483] fuse: Bad value for 'fd' [ 102.270702][ T7494] can0: slcan on ttyS3. [ 102.378027][ T7493] can0 (unregistered): slcan off ttyS3. [ 102.480450][ T7502] 9p filesystem being mounted at /10/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 102.536245][ C2] net_ratelimit: 57333 callbacks suppressed [ 102.536258][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.536356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 102.538317][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.541982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.545628][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.549331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.553005][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.556656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 102.560788][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.564554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 102.872441][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.6.381'. [ 102.900363][ T7537] XFS (nullb0): Invalid superblock magic number [ 102.971008][ T7546] 9p filesystem being mounted at /13/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 102.979031][ T40] audit: type=1400 audit(3515296277.872:441): avc: denied { create } for pid=7545 comm="syz.6.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 102.997644][ T40] audit: type=1400 audit(3515296277.882:442): avc: denied { write } for pid=7545 comm="syz.6.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 103.006311][ T40] audit: type=1400 audit(3515296277.882:443): avc: denied { write } for pid=7543 comm="syz.2.385" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 103.021399][ T40] audit: type=1400 audit(3515296277.882:444): avc: denied { open } for pid=7543 comm="syz.2.385" path="/123/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 103.038973][ T7556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=7556 comm=syz.6.386 [ 103.045712][ T40] audit: type=1400 audit(3515296277.932:445): avc: denied { mounton } for pid=7543 comm="syz.2.385" path="/123/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 103.144852][ T40] audit: type=1400 audit(3515296278.032:446): avc: denied { write } for pid=7560 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 103.181672][ T7563] sctp: [Deprecated]: syz.4.390 (pid 7563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.181672][ T7563] Use struct sctp_sack_info instead [ 103.234283][ T40] audit: type=1400 audit(3515296278.122:447): avc: denied { mounton } for pid=7564 comm="syz.4.391" path="/51/bus" dev="tmpfs" ino=286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 103.234362][ T7565] 9pnet_rdma: rdma_create_trans (7565): problem binding to privport: 13 [ 103.245519][ T7565] 9pnet_rdma: rdma_create_trans (7565): problem binding to privport: 13 [ 103.285770][ T40] audit: type=1326 audit(3515296278.172:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d5d8eba9 code=0x7ffc0000 [ 103.294586][ T40] audit: type=1326 audit(3515296278.172:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10d5d8eba9 code=0x7ffc0000 [ 103.302194][ T40] audit: type=1326 audit(3515296278.182:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.392" exe="/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f10d5d8eba9 code=0x7ffc0000 [ 103.362820][ T61] usb 10-1: USB disconnect, device number 3 [ 103.946031][ T7601] netlink: 'syz.5.398': attribute type 1 has an invalid length. [ 104.014931][ T7571] netlink: 5 bytes leftover after parsing attributes in process `syz.4.393'. [ 104.079871][ T7608] evm: overlay not supported [ 104.173983][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 104.181076][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 104.376828][ T7621] nvme_fabrics: missing parameter 'transport=%s' [ 104.379111][ T7621] nvme_fabrics: missing parameter 'nqn=%s' [ 104.416257][ T839] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 104.581091][ T839] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.587103][ T839] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.592877][ T839] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.595744][ T839] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.804167][ T7640] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 104.818528][ T839] usb 10-1: usb_control_msg returned -32 [ 104.820361][ T839] usbtmc 10-1:16.0: can't read capabilities [ 104.983614][ T7658] netlink: 'syz.4.415': attribute type 2 has an invalid length. [ 104.986120][ T7658] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 105.193687][ T7665] usbtmc 10-1:16.0: usbtmc_ioctl_request failed -32 [ 105.197570][ T61] usb 10-1: USB disconnect, device number 4 [ 106.510632][ T7676] bridge0: port 3(syz_tun) entered blocking state [ 106.513977][ T7676] bridge0: port 3(syz_tun) entered disabled state [ 106.538691][ T7676] syz_tun: entered allmulticast mode [ 106.543434][ T7676] syz_tun: entered promiscuous mode [ 106.546032][ T7676] bridge0: port 3(syz_tun) entered blocking state [ 106.549161][ T7676] bridge0: port 3(syz_tun) entered forwarding state [ 107.358195][ T7683] syz.4.423 (7683): drop_caches: 1 [ 107.546314][ C0] net_ratelimit: 59135 callbacks suppressed [ 107.546327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.546357][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.548686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 107.552119][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.555713][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.559772][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.564905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.568132][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.572957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 107.576468][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.786276][ T5982] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.788305][ T7690] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 109.465736][ T7683] syz.4.423 (7683): drop_caches: 1 [ 109.513078][ T7702] binder: 7700:7702 ioctl c018620b 0 returned -14 [ 109.515882][ T7701] binder: 7700:7701 ioctl c018620b 0 returned -14 [ 109.601841][ T7690] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.622266][ T7690] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.643213][ T7690] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.645453][ T7690] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.657161][ T7690] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 109.659035][ T7690] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 109.678979][ T7690] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 109.690065][ T7690] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.691935][ T7690] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.699973][ T7705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.429'. [ 109.702870][ T7705] Bluetooth: MGMT ver 1.23 [ 109.711248][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 109.711257][ T40] audit: type=1400 audit(3515296284.602:478): avc: denied { write } for pid=7704 comm="syz.4.429" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 109.720850][ T7705] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 109.726724][ T7690] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.760510][ T7705] fuse: Unknown parameter 'dedault_pe49ÜÐ(ªÓïé' [ 109.882035][ T40] audit: type=1400 audit(3515296284.772:479): avc: denied { execmem } for pid=7708 comm="syz.6.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 109.921940][ T40] audit: type=1800 audit(3515296284.772:480): pid=7709 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.432" name="file0" dev="tmpfs" ino=117 res=0 errno=0 [ 109.941955][ T40] audit: type=1400 audit(3515296284.772:481): avc: denied { getopt } for pid=7710 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.957241][ T40] audit: type=1804 audit(3515296284.782:482): pid=7712 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.432" name="/newroot/19/file0" dev="tmpfs" ino=117 res=1 errno=0 [ 109.985318][ T7721] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 110.287714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 110.336764][ T40] audit: type=1400 audit(3515296285.222:483): avc: denied { mount } for pid=7740 comm="syz.4.442" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 110.343939][ T7741] devpts: Bad value for 'max' [ 110.348272][ T40] audit: type=1400 audit(3515296285.232:484): avc: denied { remount } for pid=7740 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 110.385274][ T5982] Bluetooth: hci4: unexpected event 0x14 length: 20 > 6 [ 110.392230][ T40] audit: type=1400 audit(3515296285.282:485): avc: denied { unmount } for pid=6732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 110.457442][ T7744] ata1.00: invalid multi_count 128 ignored [ 110.489038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 110.496616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.497501][ T7745] netlink: 92 bytes leftover after parsing attributes in process `syz.4.443'. [ 110.515302][ T7746] gfs2: not a GFS2 filesystem [ 110.613094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.867412][ T5982] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.963341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.970201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 111.412162][ T40] audit: type=1400 audit(3515296286.302:486): avc: denied { mount } for pid=7752 comm="syz.4.445" name="/" dev="hugetlbfs" ino=16557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 111.519180][ T7721] syz.6.434: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 111.524602][ T7721] CPU: 1 UID: 0 PID: 7721 Comm: syz.6.434 Not tainted syzkaller #0 PREEMPT(full) [ 111.524617][ T7721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.524623][ T7721] Call Trace: [ 111.524627][ T7721] [ 111.524632][ T7721] dump_stack_lvl+0x16c/0x1f0 [ 111.524666][ T7721] warn_alloc+0x248/0x3a0 [ 111.524684][ T7721] ? __pfx_warn_alloc+0x10/0x10 [ 111.524699][ T7721] ? hash_netport4_resize+0x1d8/0x1c50 [ 111.524711][ T7721] ? __vmalloc_node_noprof+0xad/0xf0 [ 111.524728][ T7721] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 111.524748][ T7721] ? hash_netport4_resize+0x1d8/0x1c50 [ 111.524762][ T7721] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 111.524779][ T7721] ? ___kmalloc_large_node+0xed/0x160 [ 111.524797][ T7721] __kvmalloc_node_noprof+0x30a/0x620 [ 111.524807][ T7721] ? hash_netport4_resize+0x1d8/0x1c50 [ 111.524818][ T7721] ? __kmalloc_noprof+0x242/0x510 [ 111.524827][ T7721] ? hash_netport4_resize+0x1d8/0x1c50 [ 111.524839][ T7721] ? hash_netport4_resize+0x1d8/0x1c50 [ 111.524849][ T7721] hash_netport4_resize+0x1d8/0x1c50 [ 111.524860][ T7721] ? __pfx_hash_netport4_add+0x10/0x10 [ 111.524870][ T7721] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 111.524885][ T7721] ? __pfx___mutex_lock+0x10/0x10 [ 111.524909][ T7721] ? __pfx_hash_netport4_resize+0x10/0x10 [ 111.524922][ T7721] call_ad.constprop.0+0x36d/0x940 [ 111.524933][ T7721] ? __pfx_hash_netport4_resize+0x10/0x10 [ 111.524944][ T7721] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 111.524954][ T7721] ? __pfx___nla_validate_parse+0x10/0x10 [ 111.524977][ T7721] ? __nla_parse+0x40/0x60 [ 111.524987][ T7721] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 111.525002][ T7721] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 111.525014][ T7721] ? call_rcu_tasks_generic+0x400/0x920 [ 111.525041][ T7721] ? find_held_lock+0x2b/0x80 [ 111.525057][ T7721] nfnetlink_rcv_msg+0x9fc/0x1200 [ 111.525073][ T7721] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 111.525085][ T7721] ? __lock_acquire+0x62e/0x1ce0 [ 111.525112][ T7721] ? avc_has_perm_noaudit+0x149/0x3b0 [ 111.525131][ T7721] netlink_rcv_skb+0x155/0x420 [ 111.525145][ T7721] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 111.525157][ T7721] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.525177][ T7721] ? ns_capable+0xd7/0x110 [ 111.525191][ T7721] nfnetlink_rcv+0x1b3/0x430 [ 111.525201][ T7721] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 111.525211][ T7721] ? netlink_deliver_tap+0x1ae/0xd30 [ 111.525227][ T7721] netlink_unicast+0x5aa/0x870 [ 111.525242][ T7721] ? __pfx_netlink_unicast+0x10/0x10 [ 111.525257][ T7721] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 111.525274][ T7721] netlink_sendmsg+0x8d1/0xdd0 [ 111.525291][ T7721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.525323][ T7721] ____sys_sendmsg+0xa98/0xc70 [ 111.525340][ T7721] ? copy_msghdr_from_user+0x10a/0x160 [ 111.525354][ T7721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.525376][ T7721] ___sys_sendmsg+0x134/0x1d0 [ 111.525390][ T7721] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.525424][ T7721] __sys_sendmsg+0x16d/0x220 [ 111.525441][ T7721] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.525454][ T7721] ? __x64_sys_futex+0x1e0/0x4c0 [ 111.525473][ T7721] do_syscall_64+0xcd/0x4e0 [ 111.525488][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.525499][ T7721] RIP: 0033:0x7f9e1b38eba9 [ 111.525508][ T7721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.525518][ T7721] RSP: 002b:00007f9e1c1df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.525529][ T7721] RAX: ffffffffffffffda RBX: 00007f9e1b5d5fa0 RCX: 00007f9e1b38eba9 [ 111.525535][ T7721] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 111.525541][ T7721] RBP: 00007f9e1b411e19 R08: 0000000000000000 R09: 0000000000000000 [ 111.525547][ T7721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.525553][ T7721] R13: 00007f9e1b5d6038 R14: 00007f9e1b5d5fa0 R15: 00007ffc17732398 [ 111.525567][ T7721] [ 111.525635][ T7721] Mem-Info: [ 111.643207][ T7721] active_anon:27077 inactive_anon:0 isolated_anon:0 [ 111.643207][ T7721] active_file:364 inactive_file:4281 isolated_file:0 [ 111.643207][ T7721] unevictable:1768 dirty:50 writeback:0 [ 111.643207][ T7721] slab_reclaimable:12684 slab_unreclaimable:77966 [ 111.643207][ T7721] mapped:31063 shmem:18780 pagetables:1497 [ 111.643207][ T7721] sec_pagetables:306 bounce:0 [ 111.643207][ T7721] kernel_misc_reclaimable:0 [ 111.643207][ T7721] free:464536 free_pcp:13743 free_cma:0 [ 111.655997][ T7721] Node 0 active_anon:108308kB inactive_anon:0kB active_file:1456kB inactive_file:16988kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:124252kB dirty:200kB writeback:0kB shmem:71584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14000kB pagetables:5792kB sec_pagetables:1224kB all_unreclaimable? no Balloon:0kB [ 111.664925][ T7721] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 111.676481][ T5982] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.677770][ T5978] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.681193][ T7721] Node 0 DMA free:14752kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:92kB local_pcp:48kB free_cma:0kB [ 111.689310][ T7721] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 111.690978][ T7721] Node 0 DMA32 free:253548kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:108308kB inactive_anon:0kB active_file:1456kB inactive_file:16988kB unevictable:3536kB writepending:200kB present:2080628kB managed:1263436kB mlocked:0kB bounce:0kB free_pcp:30280kB local_pcp:6016kB free_cma:0kB [ 111.699836][ T7146] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 111.702044][ T7721] lowmem_reserve[]: 0 0 0 0 0 [ 111.703513][ T7721] Node 1 Normal free:1589784kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:24932kB local_pcp:4576kB free_cma:0kB [ 111.712173][ T7721] lowmem_reserve[]: 0 0 0 0 0 [ 111.713534][ T7721] Node 0 DMA: 16*4kB (U) 38*8kB (U) 50*16kB (UM) 39*32kB (UM) 29*64kB (UM) 16*128kB (UM) 7*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 1*4096kB (U) = 14768kB [ 111.718468][ T7721] Node 0 DMA32: 1337*4kB (UME) 1763*8kB (UME) 1156*16kB (UME) 474*32kB (UME) 301*64kB (UME) 253*128kB (UM) 62*256kB (UME) 27*512kB (UME) 10*1024kB (UM) 5*2048kB (M) 24*4096kB (M) = 253244kB [ 111.723801][ T7721] Node 1 Normal: 20*4kB (UME) 42*8kB (UME) 46*16kB (UME) 101*32kB (UME) 54*64kB (UME) 27*128kB (UME) 8*256kB (UME) 5*512kB (UM) 3*1024kB (M) 5*2048kB (UM) 381*4096kB (M) = 1589792kB [ 111.728893][ T7721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.731594][ T7721] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 111.734159][ T7721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.736840][ T7721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 111.739465][ T7721] 23421 total pagecache pages [ 111.740797][ T7721] 0 pages in swap cache [ 111.741985][ T7721] Free swap = 124996kB [ 111.743164][ T7721] Total swap = 124996kB [ 111.744341][ T7721] 1048443 pages RAM [ 111.745428][ T7721] 0 pages HighMem/MovableOnly [ 111.746896][ T5978] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.746941][ T7721] 283271 pages reserved [ 111.750404][ T7721] 0 pages cma reserved [ 111.848857][ T7146] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.852192][ T7146] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.857867][ T7769] can: request_module (can-proto-0) failed. [ 111.867787][ T7146] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.870721][ T7146] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.068897][ T7775] bridge_slave_0: left allmulticast mode [ 112.070792][ T7775] bridge_slave_0: left promiscuous mode [ 112.072687][ T7775] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.085363][ T7146] usb 9-1: usb_control_msg returned -32 [ 112.096405][ T7146] usbtmc 9-1:16.0: can't read capabilities [ 112.097943][ T7775] bridge_slave_1: left allmulticast mode [ 112.101324][ T7775] bridge_slave_1: left promiscuous mode [ 112.114471][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.133977][ T40] audit: type=1400 audit(3515296287.022:487): avc: denied { create } for pid=7774 comm="syz.5.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 112.159081][ T7775] bond0: (slave bond_slave_0): Releasing backup interface [ 112.174211][ T7781] netlink: 'syz.6.451': attribute type 10 has an invalid length. [ 112.185583][ T7775] bond0: (slave bond_slave_1): Releasing backup interface [ 112.205744][ T7775] team0: Port device team_slave_0 removed [ 112.222240][ T7775] team0: Port device team_slave_1 removed [ 112.224424][ T7775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.227707][ T7775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.234386][ T7775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.239360][ T7775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.247755][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.451'. [ 112.470583][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055e4e800: rx timeout, send abort [ 112.556227][ C0] net_ratelimit: 49582 callbacks suppressed [ 112.556241][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.556257][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.558322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.563026][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.567026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 112.571423][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.574851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.579628][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.583547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.588031][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.946676][ T5978] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.971202][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055e4cc00: rx timeout, send abort [ 112.973917][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055e4e800: abort rx timeout. Force session deactivation [ 113.266963][ T7786] xt_time: unknown flags 0xf4 [ 113.278526][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 113.473891][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055e4cc00: abort rx timeout. Force session deactivation [ 113.747622][ T5982] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.749672][ T5978] Bluetooth: hci4: command 0x0c1a tx timeout [ 113.826300][ T5978] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.922539][ T7786] dummy0: entered promiscuous mode [ 113.934057][ T7786] dummy0: left promiscuous mode [ 114.035180][ T7794] netlink: 'syz.6.457': attribute type 2 has an invalid length. [ 114.041522][ T7791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.053898][ T7794] geneve2: entered promiscuous mode [ 114.055576][ T7794] geneve2: entered allmulticast mode [ 114.125724][ T7797] 9p filesystem being mounted at /41/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 114.373888][ T61] usb 9-1: USB disconnect, device number 10 [ 114.419306][ T53] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 114.462228][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.464'. [ 114.465286][ T7816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7816 comm=syz.5.464 [ 114.538079][ T7820] 9p filesystem being mounted at /44/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 114.574078][ T53] usb 7-1: unable to get BOS descriptor or descriptor too short [ 114.578996][ T53] usb 7-1: not running at top speed; connect to a high speed hub [ 114.582888][ T53] usb 7-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.590191][ T53] usb 7-1: config 1 interface 0 has no altsetting 0 [ 114.595520][ T53] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.606370][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.609756][ T53] usb 7-1: Product: syz [ 114.611550][ T53] usb 7-1: Manufacturer: syz [ 114.613568][ T53] usb 7-1: SerialNumber: syz [ 114.663256][ T7826] program syz.4.469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.757568][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 114.757583][ T40] audit: type=1400 audit(3515296289.652:500): avc: denied { read } for pid=7832 comm="syz.5.466" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.758847][ T7833] trusted_key: encrypted_key: keylen parameter is missing [ 114.760260][ T40] audit: type=1400 audit(3515296289.652:501): avc: denied { open } for pid=7832 comm="syz.5.466" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.770175][ T7833] netlink: 76 bytes leftover after parsing attributes in process `syz.5.466'. [ 114.782392][ T40] audit: type=1400 audit(3515296289.662:502): avc: denied { create } for pid=7832 comm="syz.5.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.795297][ T40] audit: type=1400 audit(3515296289.662:503): avc: denied { write } for pid=7832 comm="syz.5.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.813510][ T40] audit: type=1400 audit(3515296289.662:504): avc: denied { nlmsg_write } for pid=7832 comm="syz.5.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.842862][ T7837] netlink: 112 bytes leftover after parsing attributes in process `syz.5.472'. [ 114.846607][ T7837] netlink: 112 bytes leftover after parsing attributes in process `syz.5.472'. [ 114.850118][ T7837] netlink: 102 bytes leftover after parsing attributes in process `syz.5.472'. [ 114.907653][ T40] audit: type=1400 audit(3515296289.802:505): avc: denied { append } for pid=7842 comm="syz.5.474" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.916891][ T40] audit: type=1400 audit(3515296289.812:506): avc: denied { ioctl } for pid=7842 comm="syz.5.474" path="socket:[25464]" dev="sockfs" ino=25464 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 115.020758][ T5342] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 115.183521][ T5342] usb 9-1: device descriptor read/64, error -71 [ 115.443292][ T5342] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 115.629849][ T5342] usb 9-1: device descriptor read/64, error -71 [ 115.747326][ T5342] usb usb9-port1: attempt power cycle [ 115.836326][ T5978] Bluetooth: hci4: command 0x0c1a tx timeout [ 115.906307][ T5978] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.133783][ T5342] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 116.208583][ T5342] usb 9-1: device descriptor read/8, error -71 [ 116.471213][ T5342] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 116.530085][ T5342] usb 9-1: device descriptor read/8, error -71 [ 116.648129][ T5342] usb usb9-port1: unable to enumerate USB device [ 117.174366][ T53] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 117.181483][ T53] usb 7-1: USB disconnect, device number 16 [ 117.212961][ T40] audit: type=1400 audit(3515296292.102:507): avc: denied { shutdown } for pid=7857 comm="syz.2.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.243754][ T7860] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 117.247730][ T7860] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 117.283138][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 117.566307][ C2] net_ratelimit: 56246 callbacks suppressed [ 117.566319][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.566363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.568316][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.572289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.575538][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.579210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.582738][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.586538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 117.589929][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.593447][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.682189][ T40] audit: type=1400 audit(3515296292.572:508): avc: denied { bind } for pid=7862 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.691270][ T40] audit: type=1400 audit(3515296292.582:509): avc: denied { listen } for pid=7862 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.616501][ T61] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 118.619665][ T7900] netlink: 'syz.2.492': attribute type 10 has an invalid length. [ 118.627208][ T7900] misc userio: Can't change port type on an already running userio instance [ 118.770549][ T61] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.774222][ T61] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.778567][ T61] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.781370][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.948912][ T6034] hid_parser_main: 164 callbacks suppressed [ 118.948925][ T6034] hid-generic 007C:0007:0001.0004: unknown main item tag 0x7 [ 118.966149][ T6034] hid-generic 007C:0007:0001.0004: unknown main item tag 0x7 [ 118.969512][ T6034] hid-generic 007C:0007:0001.0004: unknown main item tag 0x2 [ 118.971855][ T6034] hid-generic 007C:0007:0001.0004: unknown main item tag 0x2 [ 118.974188][ T6034] hid-generic 007C:0007:0001.0004: item fetching failed at offset 24/101 [ 118.985312][ T6034] hid-generic 007C:0007:0001.0004: probe with driver hid-generic failed with error -22 [ 118.994153][ T61] usb 11-1: usb_control_msg returned -32 [ 118.995876][ T61] usbtmc 11-1:16.0: can't read capabilities [ 119.042212][ T7910] sit0: entered allmulticast mode [ 119.350563][ T7911] usbtmc 11-1:16.0: usbtmc_ioctl_request failed -32 [ 119.358011][ T6034] usb 11-1: USB disconnect, device number 2 [ 119.444552][ T7913] sp0: Synchronizing with TNC [ 119.496951][ T7916] netlink: 'syz.2.499': attribute type 7 has an invalid length. [ 119.499837][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 119.512963][ T7917] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 119.534957][ T7917] CIFS: Unable to determine destination address [ 119.758865][ T7926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.504'. [ 119.829706][ T5982] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.018105][ T7146] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 120.156346][ T53] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 120.166322][ T7146] usb 10-1: Using ep0 maxpacket: 8 [ 120.171869][ T7146] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 120.174982][ T7146] usb 10-1: config 0 has no interface number 0 [ 120.177735][ T7146] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 1465, setting to 1024 [ 120.182023][ T7146] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 120.185539][ T7146] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.198027][ T7146] usb 10-1: config 0 descriptor?? [ 120.201339][ T7935] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 120.209378][ T7146] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 120.306415][ T53] usb 11-1: Using ep0 maxpacket: 16 [ 120.317225][ T53] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 120.323709][ T53] usb 11-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 120.326773][ T53] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.329269][ T53] usb 11-1: Product: syz [ 120.330759][ T53] usb 11-1: Manufacturer: syz [ 120.332315][ T53] usb 11-1: SerialNumber: syz [ 120.336022][ T53] usb 11-1: config 0 descriptor?? [ 120.340565][ T53] hub 11-1:0.0: bad descriptor, ignoring hub [ 120.343207][ T53] hub 11-1:0.0: probe with driver hub failed with error -5 [ 120.348454][ T53] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.411192][ T7935] netlink: 24 bytes leftover after parsing attributes in process `syz.5.506'. [ 120.654392][ T6034] usb 11-1: USB disconnect, device number 3 [ 120.785560][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 120.785589][ T40] audit: type=1400 audit(3515296295.672:518): avc: denied { append } for pid=7940 comm="syz.6.508" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 120.839576][ T7946] netlink: 28 bytes leftover after parsing attributes in process `syz.6.509'. [ 120.940044][ T6034] usb 10-1: USB disconnect, device number 5 [ 121.063588][ T7957] netlink: 'syz.6.514': attribute type 1 has an invalid length. [ 121.066179][ T7957] netlink: 136 bytes leftover after parsing attributes in process `syz.6.514'. [ 121.072044][ T7957] netlink: 'syz.6.514': attribute type 2 has an invalid length. [ 121.074355][ T7957] netlink: 'syz.6.514': attribute type 1 has an invalid length. [ 121.089205][ T40] audit: type=1400 audit(3515296295.982:519): avc: denied { append } for pid=7953 comm="syz.4.513" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 121.144491][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'. [ 121.164490][ T7959] vxlan0: entered promiscuous mode [ 121.172912][ T72] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.175676][ T72] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.186281][ T72] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.190378][ T72] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.258102][ T7967] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 121.260510][ T7967] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 121.263963][ T7967] vhci_hcd vhci_hcd.0: Device attached [ 121.268914][ T7968] vhci_hcd: connection closed [ 121.270003][ T1144] vhci_hcd: stop threads [ 121.273373][ T1144] vhci_hcd: release socket [ 121.274901][ T1144] vhci_hcd: disconnect device [ 121.356397][ T53] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 121.486395][ T53] usb 11-1: device descriptor read/64, error -71 [ 121.493797][ T7971] netlink: 'syz.5.518': attribute type 5 has an invalid length. [ 121.553010][ T7973] netlink: 36 bytes leftover after parsing attributes in process `syz.5.519'. [ 121.692201][ T7976] fuse: Bad value for 'user_id' [ 121.693735][ T7976] fuse: Bad value for 'user_id' [ 121.736390][ T53] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 121.774741][ T7981] netlink: 40 bytes leftover after parsing attributes in process `syz.5.521'. [ 121.782545][ T40] audit: type=1400 audit(3515296296.672:520): avc: denied { map } for pid=7980 comm="syz.5.521" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 121.812590][ T40] audit: type=1400 audit(3515296296.702:521): avc: denied { mounton } for pid=7982 comm="syz.5.523" path="/proc/197/cgroup" dev="proc" ino=25897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 121.883612][ T53] usb 11-1: device descriptor read/64, error -71 [ 121.924891][ T40] audit: type=1400 audit(3515296296.812:522): avc: denied { append } for pid=7989 comm="syz.2.525" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 121.924929][ T7990] random: crng reseeded on system resumption [ 121.947004][ T7990] Restarting kernel threads ... [ 121.950637][ T40] audit: type=1400 audit(3515296296.842:523): avc: denied { ioctl } for pid=7989 comm="syz.2.525" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 121.957631][ T7990] Done restarting kernel threads. [ 121.988011][ T53] usb usb11-port1: attempt power cycle [ 122.084119][ T8000] fuse: Unknown parameter '0x0000000000000005' [ 122.142932][ T40] audit: type=1400 audit(3515296297.032:524): avc: denied { mounton } for pid=7999 comm="syz.4.528" path="/97/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 122.142955][ T8001] overlayfs: unescaped trailing colons in lowerdir mount option. [ 122.206773][ T40] audit: type=1400 audit(3515296297.102:525): avc: denied { lock } for pid=8004 comm="syz.2.530" path="socket:[27479]" dev="sockfs" ino=27479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 122.346285][ T53] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 122.367212][ T53] usb 11-1: device descriptor read/8, error -71 [ 122.576317][ C2] net_ratelimit: 58962 callbacks suppressed [ 122.576327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.576336][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.578680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.582966][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.586738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 122.591413][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.595110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 122.599859][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.603246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.608261][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.616457][ T53] usb 11-1: new full-speed USB device number 7 using dummy_hcd [ 122.637627][ T53] usb 11-1: device descriptor read/8, error -71 [ 122.747848][ T53] usb usb11-port1: unable to enumerate USB device [ 122.789983][ T8009] dns_resolver: Unsupported content type (234) [ 122.902490][ T5978] Bluetooth: hci2: unexpected event for opcode 0x0c05 [ 123.068665][ T40] audit: type=1400 audit(3515296297.962:526): avc: denied { map } for pid=8022 comm="syz.2.536" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.080507][ T40] audit: type=1400 audit(3515296297.962:527): avc: denied { execute } for pid=8022 comm="syz.2.536" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.176332][ T29] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 123.308738][ T29] usb 10-1: device descriptor read/64, error -71 [ 123.547024][ T29] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 123.676345][ T29] usb 10-1: device descriptor read/64, error -71 [ 123.789581][ T29] usb usb10-port1: attempt power cycle [ 124.136442][ T29] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 124.170396][ T29] usb 10-1: device descriptor read/8, error -71 [ 124.417106][ T29] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 124.446810][ T29] usb 10-1: device descriptor read/8, error -71 [ 124.449472][ T8037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=8037 comm=syz.2.540 [ 124.570895][ T29] usb usb10-port1: unable to enumerate USB device [ 125.105360][ T8041] 9pnet_fd: Insufficient options for proto=fd [ 125.190321][ T8041] hfsplus: unable to find HFS+ superblock [ 125.320223][ T8049] input: syz0 as /devices/virtual/input/input13 [ 125.434687][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.548'. [ 125.555055][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 125.559583][ T8066] netlink: 'syz.4.549': attribute type 14 has an invalid length. [ 125.562329][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.549'. [ 125.565860][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 125.568868][ T8066] netlink: 'syz.4.549': attribute type 14 has an invalid length. [ 125.571164][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.549'. [ 125.574420][ T8066] Malformed UNC in devname [ 125.574420][ T8066] [ 125.578209][ T8066] CIFS: VFS: Malformed UNC in devname [ 125.714362][ T5978] Bluetooth: hci4: unexpected event for opcode 0x0c13 [ 125.721983][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'. [ 125.733994][ T8075] netlink: 72 bytes leftover after parsing attributes in process `syz.4.552'. [ 126.112141][ T8083] misc userio: Invalid payload size [ 126.177829][ T8086] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.555'. [ 126.215093][ T8087] netlink: 'syz.2.556': attribute type 4 has an invalid length. [ 126.360878][ T8095] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 126.380276][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 126.380291][ T40] audit: type=1400 audit(3515296301.272:536): avc: denied { accept } for pid=8094 comm="syz.2.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 126.563018][ T40] audit: type=1400 audit(3515296301.452:537): avc: denied { getopt } for pid=8100 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 126.657833][ T8104] veth1_macvtap: left promiscuous mode [ 126.660039][ T8104] macsec0: entered promiscuous mode [ 126.661798][ T8104] macsec0: entered allmulticast mode [ 126.675462][ T8104] veth1_macvtap: entered promiscuous mode [ 126.678232][ T8104] veth1_macvtap: entered allmulticast mode [ 126.680371][ T8104] macsec0: left promiscuous mode [ 126.682810][ T8104] macsec0: left allmulticast mode [ 126.685144][ T8104] veth1_macvtap: left allmulticast mode [ 126.752837][ T40] audit: type=1400 audit(3515296301.632:538): avc: denied { accept } for pid=8106 comm="syz.6.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.909359][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'. [ 126.912886][ T8118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.563'. [ 127.039755][ T8118] geneve2: entered promiscuous mode [ 127.046898][ T8118] geneve2: entered allmulticast mode [ 127.233125][ T8135] xt_socket: unknown flags 0xd0 [ 127.281077][ T218] Bluetooth: hci5: Frame reassembly failed (-84) [ 127.290330][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 127.300373][ T8130] syz_tun: entered allmulticast mode [ 127.303542][ T8129] syz_tun: left allmulticast mode [ 127.363272][ T8139] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 127.365612][ T8139] PKCS7: Only support pkcs7_signedData type [ 127.376696][ T40] audit: type=1400 audit(3515296302.272:539): avc: denied { nlmsg_read } for pid=8138 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.586311][ C0] net_ratelimit: 52168 callbacks suppressed [ 127.586324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.586346][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.588771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.592180][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.595803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 127.600874][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.604520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 127.608853][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.612378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.616102][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.106353][ T6034] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 128.147346][ T218] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 128.258058][ T6034] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 128.261405][ T6034] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 128.265633][ T6034] usb 7-1: config 0 interface 0 has no altsetting 0 [ 128.270860][ T6034] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.274492][ T6034] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.278379][ T6034] usb 7-1: Product: syz [ 128.280016][ T6034] usb 7-1: Manufacturer: syz [ 128.281992][ T6034] usb 7-1: SerialNumber: syz [ 128.287305][ T6034] usb 7-1: config 0 descriptor?? [ 128.291319][ T6034] hub 7-1:0.0: bad descriptor, ignoring hub [ 128.293594][ T6034] hub 7-1:0.0: probe with driver hub failed with error -5 [ 128.298820][ T6034] usb 7-1: selecting invalid altsetting 0 [ 128.509723][ T8169] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.574360][ T40] audit: type=1400 audit(3515296303.462:540): avc: denied { bind } for pid=8174 comm="syz.5.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.606815][ T6034] usb 7-1: USB disconnect, device number 17 [ 128.788753][ T8183] netlink: 'syz.5.584': attribute type 13 has an invalid length. [ 128.939038][ T6034] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 129.076701][ T61] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 129.097946][ T6034] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 129.101484][ T6034] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 129.105683][ T6034] usb 7-1: config 0 interface 0 has no altsetting 0 [ 129.112069][ T6034] usb 7-1: string descriptor 0 read error: -22 [ 129.114911][ T6034] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 129.119082][ T6034] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 129.125786][ T6034] usb 7-1: config 0 descriptor?? [ 129.138505][ T6034] hub 7-1:0.0: bad descriptor, ignoring hub [ 129.141117][ T6034] hub 7-1:0.0: probe with driver hub failed with error -5 [ 129.145915][ T6034] usb 7-1: selecting invalid altsetting 0 [ 129.226493][ T61] usb 10-1: Using ep0 maxpacket: 16 [ 129.230174][ T61] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.234953][ T61] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.241251][ T61] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 129.246858][ T61] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 129.250007][ T61] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.253806][ T61] usb 10-1: config 0 descriptor?? [ 129.356435][ T5978] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 129.464867][ T40] audit: type=1400 audit(3515296304.352:541): avc: denied { read } for pid=8189 comm="syz.4.586" laddr=fe80::e lport=47472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.466476][ T6034] usb 7-1: USB disconnect, device number 18 [ 129.660503][ T8187] random: crng reseeded on system resumption [ 129.670546][ T61] usbhid 10-1:0.0: can't add hid device: -71 [ 129.673583][ T61] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 129.681913][ T61] usb 10-1: USB disconnect, device number 10 [ 129.947602][ T8196] ubi31: attaching mtd0 [ 129.951804][ T8196] ubi31: scanning is finished [ 129.953309][ T8196] ubi31: empty MTD device detected [ 130.003715][ T8199] 9p filesystem being mounted at /175/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 130.012273][ T40] audit: type=1400 audit(3515296304.902:542): avc: denied { setattr } for pid=8195 comm="syz.2.588" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 130.069614][ T8196] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 130.072849][ T8196] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 130.075996][ T8196] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 130.077189][ T5982] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 130.079899][ T8196] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 130.108217][ T8196] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 130.110638][ T8196] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 130.113229][ T8196] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4166124110 [ 130.120751][ T8196] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 130.138408][ T8200] ubi31: background thread "ubi_bgt31d" started, PID 8200 [ 130.229247][ T40] audit: type=1400 audit(3515296305.122:543): avc: denied { unmount } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 130.282653][ T8204] 9pnet_fd: Insufficient options for proto=fd [ 130.388829][ T8210] fuse: Bad value for 'group_id' [ 130.390591][ T8210] fuse: Bad value for 'group_id' [ 130.416993][ T8212] overlayfs: conflicting options: nfs_export=on,index=off [ 130.512466][ T8218] __nla_validate_parse: 6 callbacks suppressed [ 130.512484][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.6.595'. [ 130.542980][ T8220] 9pnet_fd: Insufficient options for proto=fd [ 130.606344][ T29] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 130.683787][ T8225] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 130.688070][ T8225] overlayfs: missing 'lowerdir' [ 130.716589][ T1170] block nbd0: Possible stuck request ffff888027ea01c0: control (read@0,1024B). Runtime 60 seconds [ 130.720479][ T1170] block nbd0: Possible stuck request ffff888027ea0380: control (read@1024,1024B). Runtime 60 seconds [ 130.724160][ T1170] block nbd0: Possible stuck request ffff888027ea0540: control (read@2048,1024B). Runtime 60 seconds [ 130.728408][ T1170] block nbd0: Possible stuck request ffff888027ea0700: control (read@3072,1024B). Runtime 60 seconds [ 130.757874][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 130.762620][ T29] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.766032][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.769359][ T29] usb 7-1: Product: syz [ 130.770848][ T29] usb 7-1: Manufacturer: syz [ 130.772459][ T29] usb 7-1: SerialNumber: syz [ 130.775425][ T29] usb 7-1: config 0 descriptor?? [ 131.194657][ T6034] usb 7-1: USB disconnect, device number 19 [ 131.414459][ T8227] syz.5.599 (8227) used obsolete PPPIOCDETACH ioctl [ 131.421915][ T8227] usb usb9: usbfs: process 8227 (syz.5.599) did not claim interface 47 before use [ 131.498695][ T8229] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 131.511030][ T8229] netlink: 'syz.5.600': attribute type 2 has an invalid length. [ 131.513593][ T8229] netlink: 68 bytes leftover after parsing attributes in process `syz.5.600'. [ 131.971911][ T40] audit: type=1400 audit(3515296306.862:544): avc: denied { read } for pid=8237 comm="syz.6.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 132.006445][ T7146] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 132.166302][ T7146] usb 10-1: Using ep0 maxpacket: 16 [ 132.171489][ T7146] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 132.175469][ T7146] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 132.181077][ T7146] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.183891][ T7146] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.187435][ T7146] usb 10-1: Product: ≠[ 132.189169][ T7146] usb 10-1: Manufacturer: Л [ 132.191062][ T7146] usb 10-1: SerialNumber: Г [ 132.596277][ C2] net_ratelimit: 45899 callbacks suppressed [ 132.596290][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.596461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 132.598354][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.603197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.603544][ T7146] cdc_ncm 10-1:1.0: bind() failure [ 132.606855][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.608271][ T7146] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 132.608292][ T7146] cdc_ncm 10-1:1.1: bind() failure [ 132.611766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.614287][ T7146] usb 10-1: USB disconnect, device number 11 [ 132.615075][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.617347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 132.620876][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.624266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 132.629542][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.902924][ T5342] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 132.976151][ T40] audit: type=1400 audit(3515296307.862:545): avc: denied { create } for pid=8267 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 132.984773][ T40] audit: type=1400 audit(3515296307.872:546): avc: denied { getopt } for pid=8267 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 132.992255][ T8268] 9p: Unknown access argument 00000000004294967295: -22 [ 133.040812][ T8273] batadv_slave_0: entered promiscuous mode [ 133.045652][ T8273] batadv_slave_0: left promiscuous mode [ 133.175572][ T5342] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.187191][ T5342] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.212262][ T5342] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.215752][ T5342] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.492087][ T40] audit: type=1400 audit(3515296308.382:547): avc: denied { read } for pid=8252 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 133.495925][ T5342] usb 9-1: usb_control_msg returned -32 [ 133.517697][ T5342] usbtmc 9-1:16.0: can't read capabilities [ 133.922845][ T8275] usbtmc 9-1:16.0: usbtmc_ioctl_request failed -32 [ 133.925768][ T7446] usb 9-1: USB disconnect, device number 15 [ 137.498240][ T5381] udevd[5381]: worker [5971] /devices/virtual/block/nbd0 is taking a long time [ 137.606342][ C0] net_ratelimit: 54164 callbacks suppressed [ 137.606344][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.606356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.606654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 137.608472][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.612101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.615768][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.619771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.623488][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.627830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 137.631244][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.616294][ C2] net_ratelimit: 55937 callbacks suppressed [ 142.616306][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.616579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.618393][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.622033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 142.625713][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.629739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 142.633019][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.636665][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.640371][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.644064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.626332][ C2] net_ratelimit: 59159 callbacks suppressed [ 147.626345][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.626389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.628406][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.632074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 147.635703][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.639716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 147.643064][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.646718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.650383][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.654028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.678297][ T8282] netlink: 28 bytes leftover after parsing attributes in process `syz.5.614'. [ 148.819190][ T8303] netlink: 'syz.6.618': attribute type 10 has an invalid length. [ 148.896830][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.617'. [ 148.964134][ T8313] netlink: 'syz.6.619': attribute type 13 has an invalid length. [ 149.016633][ T61] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 149.062911][ T40] audit: type=1326 audit(3515296323.952:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.5.621" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b7938eba9 code=0x0 [ 149.109680][ T40] audit: type=1400 audit(3515296324.002:549): avc: denied { relabelfrom } for pid=8312 comm="syz.6.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 149.116542][ T40] audit: type=1400 audit(3515296324.002:550): avc: denied { relabelto } for pid=8312 comm="syz.6.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 149.168994][ T61] usb 9-1: Using ep0 maxpacket: 8 [ 149.174540][ T61] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 149.178417][ T61] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 149.181829][ T61] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 149.185594][ T61] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 149.191258][ T61] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.195701][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.199702][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 149.203214][ T61] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 149.209497][ T61] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 149.212261][ T61] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.214864][ T61] usb 9-1: Product: syz [ 149.216408][ T61] usb 9-1: Manufacturer: syz [ 149.217988][ T61] usb 9-1: SerialNumber: syz [ 149.221892][ T61] usb 9-1: config 0 descriptor?? [ 149.224004][ T8281] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.228570][ T61] hub 9-1:0.0: bad descriptor, ignoring hub [ 149.230554][ T61] hub 9-1:0.0: probe with driver hub failed with error -5 [ 149.234302][ T61] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input15 [ 149.317099][ T7446] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 149.433739][ T61] usb 9-1: USB disconnect, device number 16 [ 149.471725][ T7446] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.474990][ T7446] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.488448][ T7446] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.492405][ T7446] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.704813][ T7446] usb 11-1: usb_control_msg returned -32 [ 149.706807][ T7446] usbtmc 11-1:16.0: can't read capabilities [ 149.998293][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.622'. [ 150.001909][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.622'. [ 150.067221][ T8314] usbtmc 11-1:16.0: usbtmc_ioctl_request failed -32 [ 150.070645][ T53] usb 11-1: USB disconnect, device number 8 [ 150.388847][ T40] audit: type=1400 audit(3515296325.282:551): avc: denied { name_bind 0x1000000 } for pid=8340 comm="syz.5.628" path="socket:[32970]" dev="sockfs" ino=32970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 150.532089][ T8349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.536447][ T8349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.888144][ T8340] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 150.964432][ T8365] fuse: Bad value for 'fd' [ 151.059587][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.634'. [ 151.236293][ T7446] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 151.346373][ T40] audit: type=1400 audit(3515296326.232:552): avc: denied { mount } for pid=8374 comm="syz.5.637" name="/" dev="configfs" ino=3117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 151.360797][ T40] audit: type=1400 audit(3515296326.242:553): avc: denied { search } for pid=8374 comm="syz.5.637" name="/" dev="configfs" ino=3117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 151.396727][ T7446] usb 11-1: Using ep0 maxpacket: 8 [ 151.402824][ T7446] usb 11-1: config index 0 descriptor too short (expected 1307, got 27) [ 151.405064][ T8377] fuse: Unknown parameter 'fd0x0000000000000004' [ 151.406558][ T7446] usb 11-1: config 0 has an invalid interface number: 0 but max is -1 [ 151.411708][ T7446] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 151.415401][ T7446] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 151.454191][ T7446] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.464297][ T7446] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 151.469589][ T7446] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 151.474153][ T7446] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 151.484379][ T7446] usb 11-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 151.492156][ T7446] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.494990][ T7446] usb 11-1: Product: syz [ 151.497085][ T7446] usb 11-1: Manufacturer: syz [ 151.499068][ T7446] usb 11-1: SerialNumber: syz [ 151.503377][ T7446] usb 11-1: config 0 descriptor?? [ 151.506719][ T8360] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 151.510768][ T7446] hub 11-1:0.0: bad descriptor, ignoring hub [ 151.515876][ T7446] hub 11-1:0.0: probe with driver hub failed with error -5 [ 151.525857][ T7446] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input16 [ 151.630140][ C3] usb_acecad 11-1:0.0: can't resubmit intr, dummy_hcd.6-1/input0, status -1 [ 151.723629][ T7446] usb 11-1: USB disconnect, device number 9 [ 151.767445][ T61] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 151.790501][ T8391] netlink: 'syz.2.642': attribute type 28 has an invalid length. [ 151.793875][ T8391] netlink: 'syz.2.642': attribute type 3 has an invalid length. [ 151.797490][ T8391] netlink: 132 bytes leftover after parsing attributes in process `syz.2.642'. [ 151.921072][ T61] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.934633][ T61] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.945843][ T61] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.951322][ T61] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.168407][ T61] usb 10-1: usb_control_msg returned -32 [ 152.170930][ T61] usbtmc 10-1:16.0: can't read capabilities [ 152.196365][ T7146] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 152.271338][ T8413] netlink: 'syz.4.648': attribute type 10 has an invalid length. [ 152.274097][ T8413] netlink: 40 bytes leftover after parsing attributes in process `syz.4.648'. [ 152.277389][ T8413] dummy0: entered promiscuous mode [ 152.280548][ T8413] bridge0: port 3(dummy0) entered blocking state [ 152.282981][ T8413] bridge0: port 3(dummy0) entered disabled state [ 152.285249][ T8413] dummy0: entered allmulticast mode [ 152.288706][ T8413] bridge0: port 3(dummy0) entered blocking state [ 152.291142][ T8413] bridge0: port 3(dummy0) entered forwarding state [ 152.375888][ T7146] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 152.379913][ T7146] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 83, setting to 64 [ 152.404699][ T7146] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 152.410708][ T7146] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.419605][ T7146] usb 7-1: Product: syz [ 152.421047][ T7146] usb 7-1: Manufacturer: syz [ 152.422682][ T7146] usb 7-1: SerialNumber: syz [ 152.425499][ T7146] usb 7-1: config 0 descriptor?? [ 152.428048][ T8401] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.432914][ T7146] hub 7-1:0.0: bad descriptor, ignoring hub [ 152.434837][ T7146] hub 7-1:0.0: probe with driver hub failed with error -5 [ 152.439997][ T7146] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.452296][ T8415] ipvlan2: entered promiscuous mode [ 152.458277][ T8415] bridge0: port 4(ipvlan2) entered blocking state [ 152.460701][ T8415] bridge0: port 4(ipvlan2) entered disabled state [ 152.469747][ T8415] ipvlan2: entered allmulticast mode [ 152.472481][ T8415] bridge0: entered allmulticast mode [ 152.504467][ T8415] ipvlan2: left allmulticast mode [ 152.508811][ T8415] bridge0: left allmulticast mode [ 152.521398][ T8420] usbtmc 10-1:16.0: usbtmc_ioctl_request failed -32 [ 152.528198][ T6034] usb 10-1: USB disconnect, device number 12 [ 152.636260][ C2] net_ratelimit: 59107 callbacks suppressed [ 152.636272][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.636397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 152.638416][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.643377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.647084][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.653003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.655878][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.660981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 152.664663][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.669413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:94:a7:5d:29:91, vlan:0) [ 152.843093][ T8424] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 152.995804][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 152.999339][ T8401] netlink: 'syz.2.644': attribute type 30 has an invalid length. [ 153.010505][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.014626][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.020720][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.023698][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.032988][ T7146] usb 7-1: USB disconnect, device number 20 [ 153.035544][ T8429] 9p filesystem being mounted at /131/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 153.039559][ T40] audit: type=1400 audit(3515296327.922:554): avc: denied { mount } for pid=8428 comm="syz.4.654" name="/" dev="9p" ino=35913861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 153.114584][ T8431] 9p filesystem being mounted at /98/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 153.125039][ T40] audit: type=1400 audit(3515296328.012:555): avc: denied { read write } for pid=8430 comm="syz.5.655" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.153259][ T40] audit: type=1400 audit(3515296328.012:556): avc: denied { open } for pid=8430 comm="syz.5.655" path="/98/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.185718][ T40] audit: type=1400 audit(3515296328.042:557): avc: denied { mounton } for pid=8430 comm="syz.5.655" path="/98/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.367975][ T8446] netlink: 536 bytes leftover after parsing attributes in process `syz.5.657'. [ 153.375494][ T8446] netlink: 32 bytes leftover after parsing attributes in process `syz.5.657'. [ 153.686261][ T6034] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 153.693894][ T7766] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 153.846378][ T6034] usb 10-1: Using ep0 maxpacket: 8 [ 153.854023][ T6034] usb 10-1: config 0 has no interfaces? [ 153.855885][ T6034] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.860594][ T6034] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.866474][ T6034] usb 10-1: config 0 descriptor?? [ 153.986397][ T7766] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.989468][ T7766] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.993368][ T7766] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.996145][ T7766] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.214935][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 154.214947][ T40] audit: type=1400 audit(3515296329.102:559): avc: denied { unmount } for pid=6732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 154.309849][ T7766] usb 7-1: usb_control_msg returned -32 [ 154.311657][ T7766] usbtmc 7-1:16.0: can't read capabilities [ 154.431174][ T7146] usb 10-1: USB disconnect, device number 13 [ 154.432330][ T40] audit: type=1400 audit(3515296329.322:560): avc: denied { write } for pid=8486 comm="syz.4.672" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.452089][ T40] audit: type=1400 audit(3515296329.342:561): avc: denied { map } for pid=8486 comm="syz.4.672" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.080467][ T8495] tipc: Started in network mode [ 155.085190][ T8495] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 155.090454][ T8495] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 155.093316][ T8495] tipc: Enabled bearer , priority 10 [ 155.435773][ T8508] netlink: 'syz.4.679': attribute type 15 has an invalid length. [ 155.459770][ T8509] af_packet: tpacket_rcv: packet too big, clamped from 568 to 4294967272. macoff=96 [ 155.558336][ T40] audit: type=1400 audit(3515296330.432:562): avc: denied { setopt } for pid=8510 comm="syz.4.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.564965][ T40] audit: type=1400 audit(3515296330.432:563): avc: denied { write } for pid=8510 comm="syz.4.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.678689][ T40] audit: type=1800 audit(3515296330.562:564): pid=8524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.683" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 155.872452][ T8528] macvlan2: entered promiscuous mode [ 155.874288][ T8528] macvlan2: entered allmulticast mode [ 155.879908][ T8528] bond0: (slave macvlan2): Opening slave failed [ 155.890463][ T40] audit: type=1400 audit(3515296330.782:565): avc: denied { write } for pid=8529 comm="syz.5.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 156.085190][ T40] audit: type=1400 audit(3515296330.972:566): avc: denied { append } for pid=8535 comm="syz.6.689" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 156.106379][ T7446] tipc: Node number set to 1 [ 156.108354][ T40] audit: type=1400 audit(3515296330.982:567): avc: denied { bind } for pid=8535 comm="syz.6.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 156.120380][ T40] audit: type=1400 audit(3515296330.982:568): avc: denied { name_bind } for pid=8535 comm="syz.6.689" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 156.356283][ T7146] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 156.488849][ T7146] usb 10-1: device descriptor read/64, error -71 [ 156.526412][ T29] usb 7-1: USB disconnect, device number 21 [ 156.676271][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.6.697'. [ 156.726922][ T7146] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 156.862468][ T7146] usb 10-1: device descriptor read/64, error -71 [ 156.901368][ T8583] netlink: 32 bytes leftover after parsing attributes in process `syz.6.702'. [ 156.949230][ T8584] loop4: detected capacity change from 0 to 2560 [ 156.952029][ T6194] Buffer I/O error on dev loop4, logical block 0, async page read [ 156.954962][ T6194] Buffer I/O error on dev loop4, logical block 0, async page read [ 156.959360][ T6194] Buffer I/O error on dev loop4, logical block 0, async page read [ 156.962606][ T6194] Buffer I/O error on dev loop4, logical block 0, async page read [ 156.965891][ T6194] Buffer I/O error on dev loop4, logical block 0, async page read [ 156.969811][ T7146] usb usb10-port1: attempt power cycle [ 156.970923][ T6194] Buffer I/O error on dev loop4, logical block 0, async page read [ 156.975466][ T6194] Buffer I/O error on dev loop4, logical block 0, async page read [ 156.979831][ T6194] Buffer I/O error on dev loop4, logical block 0, async page read [ 156.984414][ T6194] ldm_validate_partition_table(): Disk read failed. [ 156.987692][ T6194] Buffer I/O error on dev loop4, logical block 0, async page read [ 156.991037][ T6194] Buffer I/O error on dev loop4, logical block 0, async page read [ 156.994730][ T6194] Dev loop4: unable to read RDB block 0 [ 157.002636][ T6194] loop4: unable to read partition table [ 157.014800][ T8584] ldm_validate_partition_table(): Disk read failed. [ 157.019230][ T8584] Dev loop4: unable to read RDB block 0 [ 157.021968][ T8584] loop4: unable to read partition table [ 157.029705][ T8584] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 157.326322][ T7146] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 157.349770][ T7146] usb 10-1: device descriptor read/8, error -71 [ 157.377863][ C3] ================================================================== [ 157.380615][ C3] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x9e5/0xa30 [ 157.383364][ C3] Write of size 8 at addr ffff888059a90cf0 by task syz.2.698/8567 [ 157.386866][ C3] [ 157.388343][ C3] CPU: 3 UID: 0 PID: 8567 Comm: syz.2.698 Not tainted syzkaller #0 PREEMPT(full) [ 157.388358][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.388364][ C3] Call Trace: [ 157.388369][ C3] [ 157.388374][ C3] dump_stack_lvl+0x116/0x1f0 [ 157.388390][ C3] print_report+0xcd/0x630 [ 157.388411][ C3] ? __virt_addr_valid+0x81/0x610 [ 157.388424][ C3] ? __phys_addr+0xe8/0x180 [ 157.388437][ C3] ? __xfrm_state_delete+0x9e5/0xa30 [ 157.388448][ C3] kasan_report+0xe0/0x110 [ 157.388459][ C3] ? __xfrm_state_delete+0x9e5/0xa30 [ 157.388471][ C3] __xfrm_state_delete+0x9e5/0xa30 [ 157.388483][ C3] xfrm_timer_handler+0x86c/0xf10 [ 157.388495][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 157.388507][ C3] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 157.388518][ C3] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 157.388529][ C3] ? mark_held_locks+0x49/0x80 [ 157.388545][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 157.388562][ C3] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 157.388573][ C3] __hrtimer_run_queues+0x1ff/0xad0 [ 157.388587][ C3] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 157.388598][ C3] ? read_tsc+0x9/0x20 [ 157.388613][ C3] hrtimer_run_softirq+0x17d/0x350 [ 157.388625][ C3] handle_softirqs+0x219/0x8e0 [ 157.388639][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 157.388653][ C3] __irq_exit_rcu+0x109/0x170 [ 157.388665][ C3] irq_exit_rcu+0x9/0x30 [ 157.388677][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 157.388690][ C3] [ 157.388693][ C3] [ 157.388698][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 157.388710][ C3] RIP: 0010:lockdep_unregister_key+0xe9/0x140 [ 157.388725][ C3] Code: 48 89 ef e8 b9 e5 ff ff 48 83 2d 89 21 5f 14 01 89 c3 e8 da ee ff ff 9c 58 f6 c4 02 75 52 41 f7 c4 00 02 00 00 74 01 fb 84 db <75> 1b 5b 5d 41 5c e9 4c 76 0a 00 8b 05 4a 2c 14 0f 31 db 85 c0 74 [ 157.388736][ C3] RSP: 0018:ffffc90004087a98 EFLAGS: 00000246 [ 157.388745][ C3] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 157.388751][ C3] RDX: 0000000000000000 RSI: ffffffff8df462fb RDI: ffffffff8c163000 [ 157.388758][ C3] RBP: ffffffff975b9a38 R08: 000000000001fcfb R09: ffffffff95fa93d6 [ 157.388765][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000246 [ 157.388771][ C3] R13: ffff888033c20000 R14: ffff888033c204c0 R15: 0000000000000100 [ 157.388781][ C3] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 157.388792][ C3] __qdisc_destroy+0x11a/0x4d0 [ 157.388809][ C3] qdisc_put+0xab/0xe0 [ 157.388827][ C3] shutdown_scheduler_queue+0xa5/0x160 [ 157.388843][ C3] dev_shutdown+0xb8/0x430 [ 157.388855][ C3] unregister_netdevice_many_notify+0xb2c/0x24c0 [ 157.388871][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 157.388883][ C3] ? ref_tracker_alloc+0x305/0x5b0 [ 157.388896][ C3] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 157.388911][ C3] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 157.388924][ C3] ? clear_pending_if_disabled+0xa8/0x210 [ 157.388941][ C3] unregister_netdevice_queue+0x305/0x3f0 [ 157.388959][ C3] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 157.388973][ C3] ? linkwatch_schedule_work+0x181/0x1c0 [ 157.388988][ C3] ? linkwatch_fire_event+0x6f/0x270 [ 157.389004][ C3] __tun_detach+0x1249/0x1540 [ 157.389020][ C3] ? __pfx_tun_chr_close+0x10/0x10 [ 157.389034][ C3] tun_chr_close+0xc2/0x230 [ 157.389048][ C3] __fput+0x402/0xb70 [ 157.389062][ C3] task_work_run+0x150/0x240 [ 157.389074][ C3] ? __pfx_task_work_run+0x10/0x10 [ 157.389085][ C3] ? __pfx___do_sys_close_range+0x10/0x10 [ 157.389099][ C3] exit_to_user_mode_loop+0xeb/0x110 [ 157.389110][ C3] do_syscall_64+0x41c/0x4e0 [ 157.389124][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.389133][ C3] RIP: 0033:0x7fe12838eba9 [ 157.389142][ C3] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.389151][ C3] RSP: 002b:00007ffcddea6de8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 157.389161][ C3] RAX: 0000000000000000 RBX: 00000000000263a9 RCX: 00007fe12838eba9 [ 157.389167][ C3] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 157.389173][ C3] RBP: 00007fe1285d7da0 R08: 0000000000000001 R09: 0000000fddea70df [ 157.389180][ C3] R10: 0000001b30d20000 R11: 0000000000000246 R12: 00007fe1285d5fac [ 157.389186][ C3] R13: 00007fe1285d5fa0 R14: ffffffffffffffff R15: 00007ffcddea6f00 [ 157.389195][ C3] [ 157.389199][ C3] [ 157.541446][ C3] Allocated by task 7474: [ 157.543049][ C3] kasan_save_stack+0x33/0x60 [ 157.544798][ C3] kasan_save_track+0x14/0x30 [ 157.546591][ C3] __kasan_slab_alloc+0x89/0x90 [ 157.548235][ C3] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 157.549991][ C3] xfrm_state_alloc+0x23/0x5c0 [ 157.551516][ C3] __find_acq_core+0xb59/0x2900 [ 157.553061][ C3] xfrm_find_acq+0x7b/0xa0 [ 157.554698][ C3] xfrm_alloc_userspi+0x58e/0xbb0 [ 157.556454][ C3] xfrm_user_rcv_msg+0x58e/0xc00 [ 157.558099][ C3] netlink_rcv_skb+0x155/0x420 [ 157.559639][ C3] xfrm_netlink_rcv+0x71/0x90 [ 157.561143][ C3] netlink_unicast+0x5aa/0x870 [ 157.562681][ C3] netlink_sendmsg+0x8d1/0xdd0 [ 157.564203][ C3] ____sys_sendmsg+0xa98/0xc70 [ 157.565743][ C3] ___sys_sendmsg+0x134/0x1d0 [ 157.567243][ C3] __sys_sendmsg+0x16d/0x220 [ 157.568699][ C3] do_syscall_64+0xcd/0x4e0 [ 157.570160][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.572018][ C3] [ 157.572787][ C3] Freed by task 6034: [ 157.574088][ C3] kasan_save_stack+0x33/0x60 [ 157.575578][ C3] kasan_save_track+0x14/0x30 [ 157.577094][ C3] kasan_save_free_info+0x3b/0x60 [ 157.578706][ C3] __kasan_slab_free+0x60/0x70 [ 157.580230][ C3] kmem_cache_free+0x2d1/0x4d0 [ 157.581747][ C3] xfrm_state_gc_task+0x50a/0x770 [ 157.583343][ C3] process_one_work+0x9cc/0x1b70 [ 157.584916][ C3] worker_thread+0x6c8/0xf10 [ 157.586396][ C3] kthread+0x3c2/0x780 [ 157.587697][ C3] ret_from_fork+0x56a/0x730 [ 157.589174][ C3] ret_from_fork_asm+0x1a/0x30 [ 157.590703][ C3] [ 157.591474][ C3] The buggy address belongs to the object at ffff888059a90cc0 [ 157.591474][ C3] which belongs to the cache xfrm_state of size 928 [ 157.595734][ C3] The buggy address is located 48 bytes inside of [ 157.595734][ C3] freed 928-byte region [ffff888059a90cc0, ffff888059a91060) [ 157.599984][ C3] [ 157.600758][ C3] The buggy address belongs to the physical page: [ 157.602788][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888059a90000 pfn:0x59a90 [ 157.605932][ C3] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 157.608535][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 157.610908][ C3] page_type: f5(slab) [ 157.612180][ C3] raw: 00fff00000000040 ffff888100027e00 dead000000000122 0000000000000000 [ 157.614852][ C3] raw: ffff888059a90000 00000000801e001b 00000000f5000000 0000000000000000 [ 157.617537][ C3] head: 00fff00000000040 ffff888100027e00 dead000000000122 0000000000000000 [ 157.620217][ C3] head: ffff888059a90000 00000000801e001b 00000000f5000000 0000000000000000 [ 157.622912][ C3] head: 00fff00000000003 ffffea000166a401 00000000ffffffff 00000000ffffffff [ 157.625656][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 157.628494][ C3] page dumped because: kasan: bad access detected [ 157.630584][ C3] page_owner tracks the page as allocated [ 157.632383][ C3] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6510, tgid 6509 (syz.0.140), ts 65248345824, free_ts 65129986304 [ 157.638220][ C3] post_alloc_hook+0x1c0/0x230 [ 157.639765][ C3] get_page_from_freelist+0x132b/0x38e0 [ 157.641578][ C3] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 157.643486][ C3] alloc_pages_mpol+0x1fb/0x550 [ 157.645086][ C3] new_slab+0x247/0x330 [ 157.646280][ C0] net_ratelimit: 57857 callbacks suppressed [ 157.646292][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.646315][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.646464][ C3] ___slab_alloc+0xcf2/0x1750 [ 157.646489][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.646713][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.646883][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.647033][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.647179][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.647326][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.647485][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.647635][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.687294][ C3] __slab_alloc.constprop.0+0x56/0xb0 [ 157.688998][ C3] kmem_cache_alloc_noprof+0xef/0x3b0 [ 157.690681][ C3] xfrm_state_alloc+0x23/0x5c0 [ 157.692190][ C3] __find_acq_core+0xb59/0x2900 [ 157.693730][ C3] xfrm_find_acq+0x7b/0xa0 [ 157.695148][ C3] xfrm_alloc_userspi+0x58e/0xbb0 [ 157.696738][ C3] xfrm_user_rcv_msg+0x58e/0xc00 [ 157.698308][ C3] netlink_rcv_skb+0x155/0x420 [ 157.699869][ C3] xfrm_netlink_rcv+0x71/0x90 [ 157.701463][ C3] netlink_unicast+0x5aa/0x870 [ 157.703115][ C3] page last free pid 5967 tgid 5967 stack trace: [ 157.705244][ C3] __free_frozen_pages+0x7d5/0x10f0 [ 157.706936][ C3] __put_partials+0x165/0x1c0 [ 157.708431][ C3] qlist_free_all+0x4d/0x120 [ 157.709924][ C3] kasan_quarantine_reduce+0x195/0x1e0 [ 157.711630][ C3] __kasan_slab_alloc+0x69/0x90 [ 157.713080][ C3] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 157.714802][ C3] getname_flags.part.0+0x4c/0x550 [ 157.716373][ C3] getname_flags+0x93/0xf0 [ 157.717810][ C3] __x64_sys_mkdirat+0x76/0xb0 [ 157.719347][ C3] do_syscall_64+0xcd/0x4e0 [ 157.720808][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.722770][ C3] [ 157.723621][ C3] Memory state around the buggy address: [ 157.725566][ C3] ffff888059a90b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.728255][ C3] ffff888059a90c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 157.730770][ C3] >ffff888059a90c80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 157.733287][ C3] ^ [ 157.735701][ C3] ffff888059a90d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.738256][ C3] ffff888059a90d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.740776][ C3] ================================================================== [ 157.743365][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.745622][ C3] CPU: 3 UID: 0 PID: 8567 Comm: syz.2.698 Not tainted syzkaller #0 PREEMPT(full) [ 157.748463][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.751787][ C3] Call Trace: [ 157.752876][ C3] [ 157.753811][ C3] dump_stack_lvl+0x3d/0x1f0 [ 157.755336][ C3] vpanic+0x6e8/0x7a0 [ 157.756659][ C3] ? __pfx_vpanic+0x10/0x10 [ 157.758115][ C3] ? __xfrm_state_delete+0x9e5/0xa30 [ 157.759792][ C3] panic+0xca/0xd0 [ 157.760991][ C3] ? __pfx_panic+0x10/0x10 [ 157.762412][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 157.764026][ C3] check_panic_on_warn+0xab/0xb0 [ 157.765599][ C3] end_report+0x107/0x170 [ 157.766974][ C3] kasan_report+0xee/0x110 [ 157.768391][ C3] ? __xfrm_state_delete+0x9e5/0xa30 [ 157.770094][ C3] __xfrm_state_delete+0x9e5/0xa30 [ 157.771716][ C3] xfrm_timer_handler+0x86c/0xf10 [ 157.773319][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 157.775225][ C3] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 157.776992][ C3] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 157.778781][ C3] ? mark_held_locks+0x49/0x80 [ 157.780389][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 157.782237][ C3] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 157.783950][ C3] __hrtimer_run_queues+0x1ff/0xad0 [ 157.785596][ C3] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 157.787319][ C3] ? read_tsc+0x9/0x20 [ 157.788573][ C3] hrtimer_run_softirq+0x17d/0x350 [ 157.790226][ C3] handle_softirqs+0x219/0x8e0 [ 157.791790][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 157.793551][ C3] __irq_exit_rcu+0x109/0x170 [ 157.795140][ C3] irq_exit_rcu+0x9/0x30 [ 157.796543][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 157.798357][ C3] [ 157.799328][ C3] [ 157.800279][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 157.802170][ C3] RIP: 0010:lockdep_unregister_key+0xe9/0x140 [ 157.804083][ C3] Code: 48 89 ef e8 b9 e5 ff ff 48 83 2d 89 21 5f 14 01 89 c3 e8 da ee ff ff 9c 58 f6 c4 02 75 52 41 f7 c4 00 02 00 00 74 01 fb 84 db <75> 1b 5b 5d 41 5c e9 4c 76 0a 00 8b 05 4a 2c 14 0f 31 db 85 c0 74 [ 157.810151][ C3] RSP: 0018:ffffc90004087a98 EFLAGS: 00000246 [ 157.812064][ C3] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 157.814564][ C3] RDX: 0000000000000000 RSI: ffffffff8df462fb RDI: ffffffff8c163000 [ 157.817054][ C3] RBP: ffffffff975b9a38 R08: 000000000001fcfb R09: ffffffff95fa93d6 [ 157.819519][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000246 [ 157.821962][ C3] R13: ffff888033c20000 R14: ffff888033c204c0 R15: 0000000000000100 [ 157.824390][ C3] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 157.826106][ C3] __qdisc_destroy+0x11a/0x4d0 [ 157.827582][ C3] qdisc_put+0xab/0xe0 [ 157.828852][ C3] shutdown_scheduler_queue+0xa5/0x160 [ 157.830547][ C3] dev_shutdown+0xb8/0x430 [ 157.831950][ C3] unregister_netdevice_many_notify+0xb2c/0x24c0 [ 157.833914][ C3] ? do_raw_spin_unlock+0x172/0x230 [ 157.835517][ C3] ? ref_tracker_alloc+0x305/0x5b0 [ 157.837148][ C3] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 157.839336][ C3] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 157.841054][ C3] ? clear_pending_if_disabled+0xa8/0x210 [ 157.842826][ C3] unregister_netdevice_queue+0x305/0x3f0 [ 157.844583][ C3] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 157.846524][ C3] ? linkwatch_schedule_work+0x181/0x1c0 [ 157.848251][ C3] ? linkwatch_fire_event+0x6f/0x270 [ 157.849908][ C3] __tun_detach+0x1249/0x1540 [ 157.851399][ C3] ? __pfx_tun_chr_close+0x10/0x10 [ 157.853011][ C3] tun_chr_close+0xc2/0x230 [ 157.854446][ C3] __fput+0x402/0xb70 [ 157.855691][ C3] task_work_run+0x150/0x240 [ 157.857147][ C3] ? __pfx_task_work_run+0x10/0x10 [ 157.858794][ C3] ? __pfx___do_sys_close_range+0x10/0x10 [ 157.860618][ C3] exit_to_user_mode_loop+0xeb/0x110 [ 157.862292][ C3] do_syscall_64+0x41c/0x4e0 [ 157.863759][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.865606][ C3] RIP: 0033:0x7fe12838eba9 [ 157.867009][ C3] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.872872][ C3] RSP: 002b:00007ffcddea6de8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 157.875444][ C3] RAX: 0000000000000000 RBX: 00000000000263a9 RCX: 00007fe12838eba9 [ 157.877888][ C3] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 157.880325][ C3] RBP: 00007fe1285d7da0 R08: 0000000000000001 R09: 0000000fddea70df [ 157.882744][ C3] R10: 0000001b30d20000 R11: 0000000000000246 R12: 00007fe1285d5fac [ 157.885179][ C3] R13: 00007fe1285d5fa0 R14: ffffffffffffffff R15: 00007ffcddea6f00 [ 157.887656][ C3] [ 157.889239][ C3] Kernel Offset: disabled [ 157.890586][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:36:49 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff888032f30000 RCX=ffffffff8a65396b RDX=ffff88801dafc880 RSI=ffffffff8a65398c RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc90000126e20 R8 =0000000000000005 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=ffff88802212bd20 R13=0000000000000001 R14=dffffc0000000000 R15=0000000000000001 RIP=ffffffff81bb9ed0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555556489588 CR3=000000003b99b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc177328a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc177328a6 00007ffc177328ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e1b412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e1b412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e1b412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e1b412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e1b412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e1b412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e1b5a74a8 00007f9e1b5a74a0 00007f9e1b5a7498 00007f9e1b5a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e1c10d100 00007f9e1b5a7460 00007f9e1b5a7478 00007f9e1b5a74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9e1b5a74b8 00007f9e1b5a74b0 00007f9e1b5a74a8 00007f9e1b5a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff81a25280 RBX=0000000000000002 RCX=dffffc0000000000 RDX=0000000000000000 RSI=ffffffff8c162f80 RDI=ffffffff8df61e88 RBP=0000000000000009 RSP=ffffc900006a0f20 R8 =0000000000000000 R9 =fffffbfff2156e52 R10=ffffffff90ab7297 R11=0000000000000000 R12=0000000000000002 R13=0000000000000101 R14=0000000000000001 R15=ffffffff8e20c108 RIP=ffffffff81a23920 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055ed5fb664b0 CR3=0000000033547000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003000800000000 000000fe0070bd27 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc425cf7c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc425cf7c6 00007ffc425cf7cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10d5e12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10d5e12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10d5e12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10d5e12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10d5e12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10d5e12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 054f65d0af1c072b 3a1598246013a520 eeffed741422b86c 8bb1d3d6421f2810 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e67b1856668d0a5d 3e61e0be724e1be0 2593ffca1b650004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 147e4343b576fb2d c311ff87bac779d8 1b0d9ea50b7b9ef8 fe7462f185abb561 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d433439b09d99a8c 31cb37a94712a96c 3a0a34201d039544 51174593505f276a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 23650c8bd373d26e f03086c98939104f a91e8840f7764668 b47b7842147e4343 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b576fb2dc311ff87 bac779d81b0d9ea5 0b7b9ef8fe7462f1 85abb561e67b1856 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 668d0a5d3e61e0be 724e1be02593ffca 1b65cd00cb123312 2eb0af23054f65d0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000100 RBX=0000000000000000 RCX=ffffffff897538d6 RDX=ffff88801e2c0000 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc9000061f2e8 RSP=ffffc9000061f1c8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88802b50d8df R13=ffff88802b50d8c8 R14=1ffff920000c3e4b R15=ffff888034efb000 RIP=ffffffff81bb987b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002040 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcddea7196 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcddea7196 00007ffcddea719c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe128412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe128412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe128412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe128412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe128412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe128412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1285a74a8 00007fe1285a74a0 00007fe1285a7498 00007fe1285a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe12910d100 00007fe1285a7460 00007fe1285a0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1285a74b8 00007fe1285a74b0 00007fe1285a74a8 00007fe1285a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85648ef5 RDI=ffffffff9b1170a0 RBP=ffffffff9b117060 RSP=ffffc900006f8750 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b117060 R15=ffffffff85648e90 RIP=ffffffff85648f1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055556d71d500 ffffffff 00c00000 GS =0000 ffff8880d69b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f016e0f0700 CR3=0000000013591000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000000001 Opmask02=000000000100003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f016e1bfb20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6168730073257325 7325204650420050 5241006e65706f5f 667062203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000e0024 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80410004803e0004 0000000031796870 0038000900000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000e0024 0000000100000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000003e8 0000271000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000