last executing test programs: 1m29.661566304s ago: executing program 2 (id=59): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x21, &(0x7f0000000240)=[{0x11, '\x00', @st={0x4, [{0x2, @svalue=0x10}, {0x3, @svalue=0x8000000000000001}, {0x0, @svalue=0x3ff}, {0x3, @svalue=0x2}]}, 0x7}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x198, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DESC={0x15c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x148, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6f800000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x942dd632}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x17}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}]}], {0x14, 0x10}}, 0x1c0}}, 0x0) 1m29.655465733s ago: executing program 2 (id=61): syz_emit_ethernet(0xde, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0xa8, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x2a, 0xc2, 0x0, 0x0, 0x41, {[@mptcp=@remove_addr={0x1e, 0x91, 0x2, 0x0, "5922ef63dde1079a8da9d0150b14b8903280907e74a583beee77af67d1bbd7396988f9aa1d636de6ef3c0a0731115163553914933c232d7bd9ea1fa32f04683bb525f5a9b5c2dc75ebef37e7d9e2a196e9cd7c58d613d62084a69fae248c0e98de4c0cd48e0468ba9cfe6a12ada31bbc5fa5fc0da8cb427f8f5c3072a18dceb95cc28e26808ef7844b42303676ae"}]}}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/88, 0x58}], 0x1}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x260, 0x2e0, 0x2e0, 0x260, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2, 0x1, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 1m29.592059044s ago: executing program 2 (id=62): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x309000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/101, 0x65, 0x0, &(0x7f00000000c0)=""/159, 0x9f}, &(0x7f00000001c0)=0x40) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}}, 0x0) (async) io_uring_enter(r0, 0x632, 0x37e0, 0x83, &(0x7f0000000340)={[0x8]}, 0x8) (async) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000380)=@hsc={0x1, 0x3, "7252701eaec6d7f5ece0"}) (async) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000400)={0x400, 0xffff0001, 0x1, 0x3e, 0x17, "ebfa14d69b0916c9cf442a752de15ff17f1162"}) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0\x00', r0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) (async) r4 = open$dir(&(0x7f0000000500)='./file0\x00', 0x1, 0x102) utimensat(r4, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0) (async) r5 = accept4$x25(r0, &(0x7f00000005c0)={0x9, @remote}, &(0x7f0000000600)=0x12, 0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r5, &(0x7f0000000640)={0x40000015}) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000680)='dctcp', 0x5) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000007c0)={r2, &(0x7f00000006c0)='dctcp', 0x801, &(0x7f0000000700)={@align=0x2, {0xf53a, 0x200, 0x9, 0x7}}, 0x1ff, &(0x7f0000000740), &(0x7f0000000780)=0xb8000000}) ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000000800)={0x1, 0x4}) (async) write$selinux_context(r6, &(0x7f0000000840)='system_u:object_r:cgroup_t:s0\x00', 0x1e) (async) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) close(r7) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000008c0), 0x20202, 0x0) r9 = dup(r8) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000900)=0x16) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r9, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40040800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r1, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80000001, 0xe}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000051) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r11, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, r1, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8000}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x45000) (async) ioctl$OCFS2_IOC_GROUP_EXTEND(r3, 0x40046f01, &(0x7f0000000b80)=0x6) (async) ioctl$OCFS2_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000bc0)={0x1, 0x2, 0x4, 0xfffffffffffffffc, 0x8000, 0x1}) (async) ioctl$LOOP_SET_FD(r6, 0x4c00, r8) 1m29.453091651s ago: executing program 2 (id=63): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2b05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000002980)={0x0, 0x2, 0x21}) 1m29.302546903s ago: executing program 2 (id=64): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2e}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000640)={0x2, 0xffffffff, 0x100000, 0x400000, 0x0, 0x2}) 1m29.021545937s ago: executing program 2 (id=67): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000340)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000c80)={&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x2, 0x3, {0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)="23e9f5696bf88c10b524f99455f44ae4a1d608734d4c08bd1c7d4e62a781119cc74765972b97ab987a6ae6f0e96c0385318b2913", 0x34}, {&(0x7f0000000740)="2352e761b3767c8456c5ee1a219ccd6d76537d4819df4fa19d38951cffcc68f871558b904339f0d6e7acb52e12f27a96444580df173e26fc85fd091da1bbf5bf70469ef997892c9446682578211c1455ef3b5033a5fad3f4c1ccbee3b853dd3d3af60ced6509d5ba121be5efd4f381e66f955bc5d9dbc8ea14c3046d675fb80189559dd84b", 0x85}, {&(0x7f0000000800)="6e83a9c8083816c051b7b6b05652c44012bc54a2c5e02fed78cccea8431887da2db38267d8c9730ccb476cb617844b46c7e86fd801248278aefab1f5c1cb086ec1b0a6ab515d68d6156571bdd68ec2a0de98890d368ac4e70c32ad459a56ea7dacca95f4f09e2f466169b4dca8d64e9700cfa60dfc0f0df93a79ca85420f2f8da546fbe6376312e976141e0ef84806e927d6e361ece544fb01425e0caf19ad854c6029b3cfc7097261e5269550797e9fc271bbab44a6f506a0fcb1798c56d7c44e0f985abb9d459ba50572ba51772e3f09021bb53b0b", 0xd6}, {&(0x7f0000000900)="0ce86b78ff57c2238ea78a58ca9377578f48d169b7ae5a8a080d4c0725e0ec62e07de85ed439ae0d175b553278f27fa774f8ef6252591f2981fafc1149b276decfd89031025a72f1d8141529a42b2db57f1db5714c0fad3fac1a499ef6eb246b8fc432463e3fafb396ab9b6ba3e46b53794c69cf60d134ba31034c94fa68f91e2dd3cedefc1c61c6de8549e217a9774848cc69eedc808c02a33668eaf73cceb1fc30d45691fee6cb15e1ff91c1b1ea2719d163622e38739173a63895b2", 0xbd}, {&(0x7f00000009c0)="bf2d56f4e6463b0c11cc4dcde57254b0253bf362a363912722689d001bcfc68ede34883dd18a1b6709d652d7dc528e810ae2a263f9595df5da38ac32de", 0x3d}], 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="300000000000000000000000100000003d510879b6d73b55024bc8a0f5fbb9aba657c1c204cce2208c0b5a8d0000000048000000000000000401000003000000e3c0952684d1beab1634fc10273863c6456d8f788ee6a0884efa1b19259fa1b22e037e8b04f61c3fafbccd6907e16524c16d0000000000005000000000000000180100000500000020dc5abac7549d0d0e285473b70413fa030000000000000011373fb764fa0c84aabbb9b1d4dd2921a23d2e1e1a804b291104224417f00f8275b6ad3f8400004fe132480000000000110000000300000059a2d7c5cf3bede323133960e4d80e922f6b9dfa24371ef896fe89ca45ae7d04e5b68725d3951f02d892cc7f875e6bd6494c21105cbd17593c2f62302f43bbdc5f8c698bea0e1700c80000000000000002010000000000009286ffa4f0c0701045c8997d0c9a5e6e37b7235be859092395047af83547041bf84eec55256c7a6d603424eaf27770058afa4f07c2ea7cc734895c20e45c4cecfe481fcd4371ef9a55c2dd6838ffbf06a6cdefa2a404362759aa5cae9b997c7de2c71aabe6391598fc7e39f46d93d63a6ea1912ad771a4141d0d3f3b37b0b37246bd356bce0c368ceda34be2b9e0b3ea7b3161d776600b5636219a898a650e2b7b152e06322fa9f0553fbaa261cd625b9100000000000000"], 0x1e8}, 0x24048044) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0xd114, 0x10000, 0x0, 0x125}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r3, 0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PIPE={0x3e, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x400, 0x2], 0x0, 0x200000, 0x0, {0x0, 0x0, 0x3}}) ftruncate(r1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="b84f9e713b18ee25ad3970059dd5780c", 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe60, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x3, 0xff, 0x3, 0x8000, 0x10001}, 0x6, 0xa}, [{0x101, 0x1663, 0x7, 0x3, 0x7f}, {0x1, 0x6, 0xffffff01, 0x200, 0x7f, 0x6}, {0x7, 0x9, 0xfffffffb, 0x40, 0xffffff00}, {0x8, 0x2, 0x527, 0x9, 0x101, 0x567}, {0xfffff001, 0x0, 0xff, 0x4, 0x9dc, 0xfff}, {0x80000001, 0xc, 0x2, 0x9, 0x2, 0xdb42}, {0x8000, 0x5, 0x1ff, 0x3, 0x8, 0x1}, {0xb, 0x158326f1, 0xc000000, 0x5, 0x1, 0xfffffffa}, {0x80000001, 0xfff, 0x3ff, 0x4, 0xfbe, 0x8100}, {0x2, 0x6, 0x6, 0x5, 0x80000000, 0xc}, {0x230, 0x7, 0x401, 0x0, 0x3, 0x40}, {0xffff, 0x0, 0x7, 0xff, 0x1ff, 0x6d}, {0x6, 0xfffffff7, 0x8000, 0x6d, 0x39a875de, 0xfffffffe}, {0xfff, 0xd2, 0x1, 0x1dc, 0x4, 0x7fffffff}, {0x5, 0x0, 0xfffffff5, 0xf, 0x6, 0x5}, {0x4, 0x1, 0x3, 0x49d7, 0x4, 0x10001}, {0x6, 0x7fffffff, 0x7fff, 0x94000000, 0x8, 0xc4}, {0xfff, 0x8eb, 0x5, 0x6, 0xc, 0x101}, {0xfff, 0x0, 0x7, 0x3, 0xffffffff, 0xfffffc8f}, {0x9, 0x3, 0x2d, 0xfff, 0xb, 0x1}, {0x1ff, 0xff, 0x6, 0x1, 0xffff510d, 0x8}, {0x9, 0x5, 0xe5, 0x1, 0x7, 0x8}, {0x1457, 0x50, 0x3, 0x1, 0x66fa}, {0x7f, 0x0, 0x3, 0x2}, {0x2, 0x1, 0x101, 0x8, 0x80, 0x7}, {0xffff5d0a, 0xfff, 0x3, 0x4, 0x368, 0x7}, {0x7, 0x4, 0x7ff, 0x24000000, 0xff, 0xc8bf}, {0x8000, 0x8, 0x9, 0xe, 0x2, 0xf6}, {0x2, 0xb, 0x3, 0x9, 0x0, 0x8}, {0x5, 0x8, 0x7, 0x7, 0x25, 0x3}, {0xfffffff8, 0x7fff, 0x200, 0xfffffffc, 0x7, 0x672ba19a}, {0x0, 0x3, 0xa, 0x1, 0x8, 0x1}, {0x523, 0x6, 0xf, 0x8f6c, 0x6, 0x2}, {0xfffffffe, 0x7fffffff, 0x10001, 0x5, 0x0, 0xa4}, {0x5, 0x4, 0x3, 0x0, 0x7, 0x6}, {0x3, 0x0, 0xb, 0xbb38, 0x2, 0x5}, {0x40ef74fd, 0x3, 0x8, 0x10001, 0x7fffffff, 0x5}, {0x2, 0x3, 0x7fffffff, 0x40, 0x0, 0x80000000}, {0x100, 0x2, 0x7, 0x1, 0x1, 0x5}, {0x6, 0x80000001, 0x3ff, 0x7, 0x7, 0x2}, {0xffffffff, 0x7, 0x9, 0x7f, 0x4, 0xffffb8ec}, {0x8, 0x6, 0x7, 0x8000, 0x8a, 0x100}, {0x8, 0x8, 0x2, 0x1, 0xffffff80, 0x5}, {0x9, 0x3, 0x7, 0x4, 0xe5, 0x100}, {0x9, 0x1, 0x0, 0x6, 0x0, 0xfffffffa}, {0xb, 0x8, 0x8001, 0x8000, 0xfffffffb, 0x9}, {0x9, 0x4, 0xf, 0xcdd, 0x80000001, 0x4}, {0x6, 0xc0d9, 0x5, 0xd, 0xfffff954, 0x10000}, {0x5, 0x0, 0x5, 0x2, 0x4, 0x4}, {0xe, 0xd918, 0xd, 0x5, 0x1, 0x1}, {0x1c400000, 0x1, 0x9a, 0x8, 0x200, 0xd7}, {0xe4, 0x9, 0x1, 0x8, 0x2, 0x8}, {0x7, 0x9, 0x5, 0x9, 0xf}, {0x6, 0x0, 0x0, 0x695c0e03, 0x1, 0x6}, {0xd, 0x401, 0x3ff, 0xb26, 0x6, 0x5}, {0x1, 0xfffffff2, 0xff, 0x400, 0x9, 0x9}, {0x2, 0x3, 0x4, 0x6, 0x414, 0x7fff}, {0x5, 0x10000, 0xfb, 0x7f, 0x8, 0x1}, {0x15d356d2, 0x0, 0x80000000, 0x80000000, 0x3, 0x6}, {0x2, 0x4, 0x6, 0x4, 0x7fffffff, 0x4}, {0x4, 0x0, 0x9, 0x8, 0x10001, 0x2}, {0x1000, 0x5, 0x3, 0x0, 0x1, 0x4b78}, {0x8001, 0x3, 0x1, 0x13, 0x5, 0x1}, {0x6, 0x2eb, 0xa774, 0x3, 0x1, 0x9}, {0x4, 0x401, 0x1, 0x9, 0x0, 0x10}, {0x401, 0x2, 0xa65, 0x2, 0x0, 0xec}, {0x5, 0xfffff84a, 0xae8, 0x200000, 0x2, 0x4}, {0x7d82, 0x0, 0x9, 0x7e, 0xee4c, 0x9}, {0x18c, 0x4, 0x4, 0x6, 0x6, 0x4}, {0x1, 0x2, 0x6, 0x3, 0x2, 0x7}, {0xbec5, 0xf, 0x5e5, 0x80000000, 0x5, 0x1000}, {0x3, 0x24, 0x0, 0x1, 0x100, 0x6}, {0x1, 0xfffffc01, 0xe, 0x9, 0x5, 0x3}, {0x0, 0x8000, 0x4, 0x2, 0xccc2, 0xfffffffc}, {0x3, 0xfffff726, 0x80000001, 0x0, 0x1270, 0x1}, {0x6, 0x6, 0x7ff, 0xffffff00, 0x6, 0x2}, {0x1, 0x4, 0x3, 0x1ff, 0x0, 0x6}, {0x9, 0x8, 0x3, 0x5, 0x3, 0xa}, {0x6, 0x5, 0x92, 0x9, 0x0, 0x101}, {0x2, 0xcb, 0x2, 0xd0, 0x101, 0x7ff}, {0x5, 0xffff, 0x1, 0x1, 0xacf, 0x3a}, {0x6a8, 0x9, 0x6, 0x5932, 0x80, 0x3}, {0x4, 0x2, 0x273, 0xfffffe00, 0xfffffffc, 0x111}, {0x7, 0x4, 0xffffffff, 0x5, 0x7, 0x8}, {0x4, 0x0, 0x6, 0x2, 0x5}, {0xfe, 0x4, 0x5, 0x9, 0xcc5, 0x6}, {0x8, 0x9, 0x0, 0x4, 0x40, 0x6378}, {0x4, 0xb, 0xffffffff, 0x0, 0x4, 0x37b}, {0x7fff, 0x4, 0x8, 0x7, 0xfffffffb, 0xb}, {0x9, 0x5, 0x3, 0x11, 0x4, 0x3}, {0x101, 0xfffff2bb, 0x10000000, 0x1, 0xa7b, 0x1aa}, {0x1ff, 0x4801ea46, 0x7, 0x5cf7, 0x7, 0x6}, {0xffff, 0x24603cae, 0xffff, 0x8, 0x80000001, 0x1}, {0x5, 0xf, 0x3, 0x7, 0x200, 0x7}, {0x7, 0x0, 0x4, 0x2, 0x8cdc, 0x3ff}, {0x9, 0x2, 0xb, 0x3}, {0x4e, 0x1, 0x8, 0x3, 0x1, 0x2}, {0x4, 0x2, 0x6, 0x0, 0x5, 0x956b}, {0x3, 0x4978, 0xffffffff, 0x373, 0xc, 0xd2}, {0x2, 0x3, 0x21b, 0x7, 0x5, 0x800}, {0x1ff, 0xf, 0xffffffff, 0x3, 0x401, 0x3}, {0xc, 0xd98, 0x1, 0x2, 0x9, 0x7dcf}, {0xfe5, 0x7, 0xb, 0x7fffffff, 0x6cd, 0xbc}, {0x8001, 0x10, 0x3, 0x400, 0x240}, {0x7f, 0x8, 0x5, 0x6, 0x7, 0x3}, {0x2, 0x4, 0xf, 0x9, 0x4, 0x8}, {0x7, 0x6, 0x1, 0x4, 0x0, 0x3}, {0xf, 0x4, 0x2, 0x7ff, 0x0, 0x8}, {0x2000000, 0x3, 0x10001, 0x0, 0x2, 0xa71}, {0xffff6e9f, 0x0, 0x10000, 0x80000000, 0x5, 0x4}, {0x8, 0xffffff81, 0x3, 0xce1b, 0x7ff, 0x7}, {0x200000, 0x5, 0x40, 0xfffffc01, 0xfffffff8, 0x5}, {0x5, 0x696, 0x2040, 0x6, 0x6}, {0x4, 0xffffffff, 0x7, 0x6, 0x0, 0xffffffc0}, {0x9, 0x9, 0x4, 0xffffffff, 0x3, 0xffff7fff}, {0x80000001, 0x8001, 0x6, 0xf000000, 0x6, 0x6}, {0x398, 0x81, 0x80, 0xfaa6, 0xf, 0xa}, {0xbf25, 0xf, 0xff, 0x4, 0x5, 0x8}, {0x8000, 0x9, 0x7, 0x2f50, 0x7, 0x8}, {0x40, 0x9, 0x3, 0x8, 0x63e, 0x2}, {0xfffffff9, 0xe, 0xfffffeff, 0x962, 0x1, 0x5}, {0x8, 0x4, 0x7, 0x81000000, 0xfffff801, 0x9}, {0x384, 0x8, 0x9f9, 0x1, 0x5, 0x1ff80000}, {0x4, 0x400, 0x5, 0x4, 0x2, 0x1}, {0x1b7, 0x638, 0x8, 0x7, 0x6, 0x9ab}, {0x401, 0x5, 0xe, 0x1400, 0x7, 0x1}, {0x4bb, 0x1, 0x3, 0x7, 0x3, 0x6}, {0xa, 0xaac, 0xe09, 0x0, 0x1, 0x5}], [{0x4, 0x1}, {0x5}, {0x3}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4}, {0xa, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x1, 0x1}, {}, {0x2}, {0x4}, {0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x7, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0xef03a6718bc9ce6c}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x2}, {0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x98bcf35d982431ef}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x4}, {0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x240440d5}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x1000) read$char_usb(r11, &(0x7f0000000640)=""/184, 0xb8) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000400)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x7, 0x0, 0x0, 0x16, 0x15, "fee8a2ab78fc939fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8129af0000000000000000132900", "2809e8dbe108598948224add4afac11d875397bdb22d0000b420a1a93c52cdec5f819e01177d3d458dd4992861abffe3000000000000000000000000ffff00", "f42205000000000000000000000000000000002000", [0x7, 0x2000000000001]}}) ioctl$LOOP_GET_STATUS64(r9, 0x4c05, &(0x7f0000000540)) r12 = syz_open_dev$loop(&(0x7f0000000180), 0x6, 0x101c00) ioctl$LOOP_GET_STATUS(r12, 0x4c03, &(0x7f00000001c0)) 1m28.904616402s ago: executing program 32 (id=67): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000340)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000c80)={&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x2, 0x3, {0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000700)="23e9f5696bf88c10b524f99455f44ae4a1d608734d4c08bd1c7d4e62a781119cc74765972b97ab987a6ae6f0e96c0385318b2913", 0x34}, {&(0x7f0000000740)="2352e761b3767c8456c5ee1a219ccd6d76537d4819df4fa19d38951cffcc68f871558b904339f0d6e7acb52e12f27a96444580df173e26fc85fd091da1bbf5bf70469ef997892c9446682578211c1455ef3b5033a5fad3f4c1ccbee3b853dd3d3af60ced6509d5ba121be5efd4f381e66f955bc5d9dbc8ea14c3046d675fb80189559dd84b", 0x85}, {&(0x7f0000000800)="6e83a9c8083816c051b7b6b05652c44012bc54a2c5e02fed78cccea8431887da2db38267d8c9730ccb476cb617844b46c7e86fd801248278aefab1f5c1cb086ec1b0a6ab515d68d6156571bdd68ec2a0de98890d368ac4e70c32ad459a56ea7dacca95f4f09e2f466169b4dca8d64e9700cfa60dfc0f0df93a79ca85420f2f8da546fbe6376312e976141e0ef84806e927d6e361ece544fb01425e0caf19ad854c6029b3cfc7097261e5269550797e9fc271bbab44a6f506a0fcb1798c56d7c44e0f985abb9d459ba50572ba51772e3f09021bb53b0b", 0xd6}, {&(0x7f0000000900)="0ce86b78ff57c2238ea78a58ca9377578f48d169b7ae5a8a080d4c0725e0ec62e07de85ed439ae0d175b553278f27fa774f8ef6252591f2981fafc1149b276decfd89031025a72f1d8141529a42b2db57f1db5714c0fad3fac1a499ef6eb246b8fc432463e3fafb396ab9b6ba3e46b53794c69cf60d134ba31034c94fa68f91e2dd3cedefc1c61c6de8549e217a9774848cc69eedc808c02a33668eaf73cceb1fc30d45691fee6cb15e1ff91c1b1ea2719d163622e38739173a63895b2", 0xbd}, {&(0x7f00000009c0)="bf2d56f4e6463b0c11cc4dcde57254b0253bf362a363912722689d001bcfc68ede34883dd18a1b6709d652d7dc528e810ae2a263f9595df5da38ac32de", 0x3d}], 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x24048044) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0xd114, 0x10000, 0x0, 0x125}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r3, 0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PIPE={0x3e, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x400, 0x2], 0x0, 0x200000, 0x0, {0x0, 0x0, 0x3}}) ftruncate(r1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="b84f9e713b18ee25ad3970059dd5780c", 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe60, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x3, 0xff, 0x3, 0x8000, 0x10001}, 0x6, 0xa}, [{0x101, 0x1663, 0x7, 0x3, 0x7f}, {0x1, 0x6, 0xffffff01, 0x200, 0x7f, 0x6}, {0x7, 0x9, 0xfffffffb, 0x40, 0xffffff00}, {0x8, 0x2, 0x527, 0x9, 0x101, 0x567}, {0xfffff001, 0x0, 0xff, 0x4, 0x9dc, 0xfff}, {0x80000001, 0xc, 0x2, 0x9, 0x2, 0xdb42}, {0x8000, 0x5, 0x1ff, 0x3, 0x8, 0x1}, {0xb, 0x158326f1, 0xc000000, 0x5, 0x1, 0xfffffffa}, {0x80000001, 0xfff, 0x3ff, 0x4, 0xfbe, 0x8100}, {0x2, 0x6, 0x6, 0x5, 0x80000000, 0xc}, {0x230, 0x7, 0x401, 0x0, 0x3, 0x40}, {0xffff, 0x0, 0x7, 0xff, 0x1ff, 0x6d}, {0x6, 0xfffffff7, 0x8000, 0x6d, 0x39a875de, 0xfffffffe}, {0xfff, 0xd2, 0x1, 0x1dc, 0x4, 0x7fffffff}, {0x5, 0x0, 0xfffffff5, 0xf, 0x6, 0x5}, {0x4, 0x1, 0x3, 0x49d7, 0x4, 0x10001}, {0x6, 0x7fffffff, 0x7fff, 0x94000000, 0x8, 0xc4}, {0xfff, 0x8eb, 0x5, 0x6, 0xc, 0x101}, {0xfff, 0x0, 0x7, 0x3, 0xffffffff, 0xfffffc8f}, {0x9, 0x3, 0x2d, 0xfff, 0xb, 0x1}, {0x1ff, 0xff, 0x6, 0x1, 0xffff510d, 0x8}, {0x9, 0x5, 0xe5, 0x1, 0x7, 0x8}, {0x1457, 0x50, 0x3, 0x1, 0x66fa}, {0x7f, 0x0, 0x3, 0x2}, {0x2, 0x1, 0x101, 0x8, 0x80, 0x7}, {0xffff5d0a, 0xfff, 0x3, 0x4, 0x368, 0x7}, {0x7, 0x4, 0x7ff, 0x24000000, 0xff, 0xc8bf}, {0x8000, 0x8, 0x9, 0xe, 0x2, 0xf6}, {0x2, 0xb, 0x3, 0x9, 0x0, 0x8}, {0x5, 0x8, 0x7, 0x7, 0x25, 0x3}, {0xfffffff8, 0x7fff, 0x200, 0xfffffffc, 0x7, 0x672ba19a}, {0x0, 0x3, 0xa, 0x1, 0x8, 0x1}, {0x523, 0x6, 0xf, 0x8f6c, 0x6, 0x2}, {0xfffffffe, 0x7fffffff, 0x10001, 0x5, 0x0, 0xa4}, {0x5, 0x4, 0x3, 0x0, 0x7, 0x6}, {0x3, 0x0, 0xb, 0xbb38, 0x2, 0x5}, {0x40ef74fd, 0x3, 0x8, 0x10001, 0x7fffffff, 0x5}, {0x2, 0x3, 0x7fffffff, 0x40, 0x0, 0x80000000}, {0x100, 0x2, 0x7, 0x1, 0x1, 0x5}, {0x6, 0x80000001, 0x3ff, 0x7, 0x7, 0x2}, {0xffffffff, 0x7, 0x9, 0x7f, 0x4, 0xffffb8ec}, {0x8, 0x6, 0x7, 0x8000, 0x8a, 0x100}, {0x8, 0x8, 0x2, 0x1, 0xffffff80, 0x5}, {0x9, 0x3, 0x7, 0x4, 0xe5, 0x100}, {0x9, 0x1, 0x0, 0x6, 0x0, 0xfffffffa}, {0xb, 0x8, 0x8001, 0x8000, 0xfffffffb, 0x9}, {0x9, 0x4, 0xf, 0xcdd, 0x80000001, 0x4}, {0x6, 0xc0d9, 0x5, 0xd, 0xfffff954, 0x10000}, {0x5, 0x0, 0x5, 0x2, 0x4, 0x4}, {0xe, 0xd918, 0xd, 0x5, 0x1, 0x1}, {0x1c400000, 0x1, 0x9a, 0x8, 0x200, 0xd7}, {0xe4, 0x9, 0x1, 0x8, 0x2, 0x8}, {0x7, 0x9, 0x5, 0x9, 0xf}, {0x6, 0x0, 0x0, 0x695c0e03, 0x1, 0x6}, {0xd, 0x401, 0x3ff, 0xb26, 0x6, 0x5}, {0x1, 0xfffffff2, 0xff, 0x400, 0x9, 0x9}, {0x2, 0x3, 0x4, 0x6, 0x414, 0x7fff}, {0x5, 0x10000, 0xfb, 0x7f, 0x8, 0x1}, {0x15d356d2, 0x0, 0x80000000, 0x80000000, 0x3, 0x6}, {0x2, 0x4, 0x6, 0x4, 0x7fffffff, 0x4}, {0x4, 0x0, 0x9, 0x8, 0x10001, 0x2}, {0x1000, 0x5, 0x3, 0x0, 0x1, 0x4b78}, {0x8001, 0x3, 0x1, 0x13, 0x5, 0x1}, {0x6, 0x2eb, 0xa774, 0x3, 0x1, 0x9}, {0x4, 0x401, 0x1, 0x9, 0x0, 0x10}, {0x401, 0x2, 0xa65, 0x2, 0x0, 0xec}, {0x5, 0xfffff84a, 0xae8, 0x200000, 0x2, 0x4}, {0x7d82, 0x0, 0x9, 0x7e, 0xee4c, 0x9}, {0x18c, 0x4, 0x4, 0x6, 0x6, 0x4}, {0x1, 0x2, 0x6, 0x3, 0x2, 0x7}, {0xbec5, 0xf, 0x5e5, 0x80000000, 0x5, 0x1000}, {0x3, 0x24, 0x0, 0x1, 0x100, 0x6}, {0x1, 0xfffffc01, 0xe, 0x9, 0x5, 0x3}, {0x0, 0x8000, 0x4, 0x2, 0xccc2, 0xfffffffc}, {0x3, 0xfffff726, 0x80000001, 0x0, 0x1270, 0x1}, {0x6, 0x6, 0x7ff, 0xffffff00, 0x6, 0x2}, {0x1, 0x4, 0x3, 0x1ff, 0x0, 0x6}, {0x9, 0x8, 0x3, 0x5, 0x3, 0xa}, {0x6, 0x5, 0x92, 0x9, 0x0, 0x101}, {0x2, 0xcb, 0x2, 0xd0, 0x101, 0x7ff}, {0x5, 0xffff, 0x1, 0x1, 0xacf, 0x3a}, {0x6a8, 0x9, 0x6, 0x5932, 0x80, 0x3}, {0x4, 0x2, 0x273, 0xfffffe00, 0xfffffffc, 0x111}, {0x7, 0x4, 0xffffffff, 0x5, 0x7, 0x8}, {0x4, 0x0, 0x6, 0x2, 0x5}, {0xfe, 0x4, 0x5, 0x9, 0xcc5, 0x6}, {0x8, 0x9, 0x0, 0x4, 0x40, 0x6378}, {0x4, 0xb, 0xffffffff, 0x0, 0x4, 0x37b}, {0x7fff, 0x4, 0x8, 0x7, 0xfffffffb, 0xb}, {0x9, 0x5, 0x3, 0x11, 0x4, 0x3}, {0x101, 0xfffff2bb, 0x10000000, 0x1, 0xa7b, 0x1aa}, {0x1ff, 0x4801ea46, 0x7, 0x5cf7, 0x7, 0x6}, {0xffff, 0x24603cae, 0xffff, 0x8, 0x80000001, 0x1}, {0x5, 0xf, 0x3, 0x7, 0x200, 0x7}, {0x7, 0x0, 0x4, 0x2, 0x8cdc, 0x3ff}, {0x9, 0x2, 0xb, 0x3}, {0x4e, 0x1, 0x8, 0x3, 0x1, 0x2}, {0x4, 0x2, 0x6, 0x0, 0x5, 0x956b}, {0x3, 0x4978, 0xffffffff, 0x373, 0xc, 0xd2}, {0x2, 0x3, 0x21b, 0x7, 0x5, 0x800}, {0x1ff, 0xf, 0xffffffff, 0x3, 0x401, 0x3}, {0xc, 0xd98, 0x1, 0x2, 0x9, 0x7dcf}, {0xfe5, 0x7, 0xb, 0x7fffffff, 0x6cd, 0xbc}, {0x8001, 0x10, 0x3, 0x400, 0x240}, {0x7f, 0x8, 0x5, 0x6, 0x7, 0x3}, {0x2, 0x4, 0xf, 0x9, 0x4, 0x8}, {0x7, 0x6, 0x1, 0x4, 0x0, 0x3}, {0xf, 0x4, 0x2, 0x7ff, 0x0, 0x8}, {0x2000000, 0x3, 0x10001, 0x0, 0x2, 0xa71}, {0xffff6e9f, 0x0, 0x10000, 0x80000000, 0x5, 0x4}, {0x8, 0xffffff81, 0x3, 0xce1b, 0x7ff, 0x7}, {0x200000, 0x5, 0x40, 0xfffffc01, 0xfffffff8, 0x5}, {0x5, 0x696, 0x2040, 0x6, 0x6}, {0x4, 0xffffffff, 0x7, 0x6, 0x0, 0xffffffc0}, {0x9, 0x9, 0x4, 0xffffffff, 0x3, 0xffff7fff}, {0x80000001, 0x8001, 0x6, 0xf000000, 0x6, 0x6}, {0x398, 0x81, 0x80, 0xfaa6, 0xf, 0xa}, {0xbf25, 0xf, 0xff, 0x4, 0x5, 0x8}, {0x8000, 0x9, 0x7, 0x2f50, 0x7, 0x8}, {0x40, 0x9, 0x3, 0x8, 0x63e, 0x2}, {0xfffffff9, 0xe, 0xfffffeff, 0x962, 0x1, 0x5}, {0x8, 0x4, 0x7, 0x81000000, 0xfffff801, 0x9}, {0x384, 0x8, 0x9f9, 0x1, 0x5, 0x1ff80000}, {0x4, 0x400, 0x5, 0x4, 0x2, 0x1}, {0x1b7, 0x638, 0x8, 0x7, 0x6, 0x9ab}, {0x401, 0x5, 0xe, 0x1400, 0x7, 0x1}, {0x4bb, 0x1, 0x3, 0x7, 0x3, 0x6}, {0xa, 0xaac, 0xe09, 0x0, 0x1, 0x5}], [{0x4, 0x1}, {0x5}, {0x3}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4}, {0xa, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x1, 0x1}, {}, {0x2}, {0x4}, {0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x7, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0xef03a6718bc9ce6c}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x2}, {0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x98bcf35d982431ef}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x4}, {0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x240440d5}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x1000) read$char_usb(r11, &(0x7f0000000640)=""/184, 0xb8) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000400)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x7, 0x0, 0x0, 0x16, 0x15, "fee8a2ab78fc939fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8129af0000000000000000132900", "2809e8dbe108598948224add4afac11d875397bdb22d0000b420a1a93c52cdec5f819e01177d3d458dd4992861abffe3000000000000000000000000ffff00", "f42205000000000000000000000000000000002000", [0x7, 0x2000000000001]}}) ioctl$LOOP_GET_STATUS64(r9, 0x4c05, &(0x7f0000000540)) r12 = syz_open_dev$loop(&(0x7f0000000180), 0x6, 0x101c00) ioctl$LOOP_GET_STATUS(r12, 0x4c03, &(0x7f00000001c0)) 46.589872394s ago: executing program 4 (id=631): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x0) (async, rerun: 64) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 45.642373789s ago: executing program 4 (id=636): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async) modify_ldt$write2(0x11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x64ed0000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="6e5ce498c4e7eedc042df22b7e8cacabf95cef7eefc569a9fd620c5afd95ffbc11a674d75611947b4419ec9ee790", 0x2e}], 0x1) (async) recvfrom$llc(r1, &(0x7f0000000200)=""/192, 0xc0, 0x101, &(0x7f0000000340)={0x1a, 0x205, 0x5, 0x9, 0xe3, 0x2, @local}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) recvfrom(r0, &(0x7f0000000140)=""/146, 0x92, 0x10000, 0x0, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRESHEX=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4020000) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x38, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002a0012800b00010067656e65766500000c00028008001100ff"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r8, @ANYBLOB="46d2c44d", @ANYRES32=r6, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 45.392634937s ago: executing program 4 (id=639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0xd1}]}, 0x1b}}, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xffff, 0xffe0}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xffe0, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004e00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {}, {0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 45.331792492s ago: executing program 4 (id=641): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0xb, 0xa4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00$'], 0x50}}], 0x1, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000400)={0x50, 0x0, r6, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x32b28eade3f84e8b, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6000, 0xd, r7, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) unlink(&(0x7f0000000200)='./file0/file0\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0xd, {0x0, 0x8, 0xfffffffffffffffd, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x2000, 0x101, r7, r8, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) ppoll(&(0x7f0000000300)=[{r9, 0x221}, {r2, 0x4800}], 0x2, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x5, 0x9, 0xe0, 0x2}, {0x8000, 0x10, 0x2, 0x1}, {0x6, 0x9, 0x9, 0x6850}, {0x3, 0x6, 0x55, 0x7fffffff}]}) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(0xffffffffffffffff, 0xc010644a, &(0x7f00000000c0)) 45.28291127s ago: executing program 4 (id=642): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000520000/0x1000)=nil, 0x1000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000982ff81000000fe0000000000000008000f00fd000000", 0x24) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='vga16fb\x00', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/vga16fb/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='pcspkr\x00', 0x7) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r4, &(0x7f0000000240)="1b5b324a0a0a0a0a920ccfd8317f3fe4b92b1fa59b9f5773759b787021da722861c5af2ed37c1a3dea42e132437c3b490dc6b0cc0d2683c67e195713ae4d70e83528ebeb0000", 0x46) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mlock(&(0x7f0000520000/0x1000)=nil, 0x1000) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) (async) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000982ff81000000fe0000000000000008000f00fd000000", 0x24) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) (async) write(r2, &(0x7f0000000200)='vga16fb\x00', 0x8) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/vga16fb/bind\x00', 0x1, 0x0) (async) write(r3, &(0x7f0000000400)='pcspkr\x00', 0x7) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) write(r4, &(0x7f0000000240)="1b5b324a0a0a0a0a920ccfd8317f3fe4b92b1fa59b9f5773759b787021da722861c5af2ed37c1a3dea42e132437c3b490dc6b0cc0d2683c67e195713ae4d70e83528ebeb0000", 0x46) (async) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) (async) 45.201733812s ago: executing program 4 (id=644): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000440)={{0x7, 0x6, 0x3, 0x5}, 'syz0\x00', 0x53}) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000540)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="d14949aefdacd2c21f8281cd884fe8d16f2662bd96bff1", @ANYRES16=r8, @ANYBLOB="ff0600000000fcdbdf25520000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000000000000008000100030000000500020000"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) 30.182498855s ago: executing program 33 (id=644): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000440)={{0x7, 0x6, 0x3, 0x5}, 'syz0\x00', 0x53}) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000540)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="d14949aefdacd2c21f8281cd884fe8d16f2662bd96bff1", @ANYRES16=r8, @ANYBLOB="ff0600000000fcdbdf25520000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000000000000008000100030000000500020000"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) 4.896622228s ago: executing program 0 (id=1023): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000440)="f6f4e9a100000000002a8ba478bbb7dbfc007024", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48) 4.812015691s ago: executing program 0 (id=1024): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r2, &(0x7f0000000340)={0x14, &(0x7f0000000000)={0x20, 0x23, 0x14, {0x14, 0x2, "e2523b718d6051ba95621be493ab656b0f00"}}, &(0x7f0000000280)={0x0, 0x3, 0xb8, @string={0xb8, 0x3, "c5b144a04595a28ebd559d73840c972f29a79e5616469cc998c5c927a00e6688adb1fd2785d3ab65cd661768bbe254a55f5fc7f6e4675d625dff70802e91719c2e12cf9c3acecf4725bb8826734f0cb6038149ca79122baa4264696a0b1ef083df5b9377fcd436b923f4d56e117f7db897c8f7bf2cf873308fbbc71e6bb1e0c016ca385a7045004da74d07469bed66f66bbcc7fd282ae04b59f04fd55c7e76879dd51b6a48ae29ca0d84339a1896c057d208a9cba98c"}}}, &(0x7f0000000800)={0x44, &(0x7f0000000500)={0x40, 0x7, 0xff, "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"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000680)={0x0, 0x8, 0x1}, &(0x7f00000006c0)={0x20, 0x81, 0x2, "8c42"}, &(0x7f0000000700)={0x20, 0x82, 0x1, "94"}, &(0x7f0000000740)={0x20, 0x83, 0x2, "3aa5"}, &(0x7f0000000780)={0x20, 0x84, 0x4, '0x0}) ioctl$MEMLOCK(0xffffffffffffffff, 0x40084d05, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf250800000008000300", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848) 3.8922541s ago: executing program 3 (id=1035): socket(0x400000000010, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "758bcd936fea094f473f4c4a65c12e40"}]}}]}, 0x48}}, 0x0) r2 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x40440c4) (async) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x40440c4) 3.891836521s ago: executing program 3 (id=1036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x83a3, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xfffffffe}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42400, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc03064ca, &(0x7f00000022c0)={&(0x7f0000000000)=[r3, r3], &(0x7f0000002280)=[0x9], 0x100, 0x2, 0x5}) close(r1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461701a00000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x83a3, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xfffffffe}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42400, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc03064ca, &(0x7f00000022c0)={&(0x7f0000000000)=[r3, r3], &(0x7f0000002280)=[0x9], 0x100, 0x2, 0x5}) (async) close(r1) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) (async) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461701a00000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}}, 0x0) (async) 3.722644231s ago: executing program 3 (id=1037): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc5328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091260010000000000000e30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778fd87105119cc7e2f828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x80000000) write$binfmt_aout(r1, &(0x7f0000000700)=ANY=[], 0xff2e) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000800)=""/71, 0x47}], 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000180)=[@code={0xa, 0x64, {"470f01cbf9f60000010f01c10f009000000000430f78c3f3440f09410fc79b000000000f201e430f0766b822000f00d866baf80cb8d55d75f18a8ab9800800d70f3235000400000f30b0f67daceeaceec76b01"}}], 0x64}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000580)={[0x35, 0x6, 0x0, 0x180, 0x44, 0x1, 0xf1, 0x3ff, 0x7c, 0x100000000000002, 0x6, 0x9, 0x0, 0x9, 0x80000000000, 0xbda], 0x51001, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.792356685s ago: executing program 3 (id=1042): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0\x00', 0x20000, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x9, 0xffff, 0x0, 0xfffffffffffffffd, 0x8800, 0x4, 0xc9, 0x3, 0x2, 0x33, 0x7, 0x3, 0x3, 0xea, 0x5, 0x1], 0x8000000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_clone(0x11, 0x0, 0x3e, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000b00), 0x64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d80c}, 0x0) 2.631503878s ago: executing program 3 (id=1044): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) (async) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x30, 0x0) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r2, 0x541b, 0x0) (async, rerun: 64) ioctl(r2, 0x5451, 0x0) (async, rerun: 64) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 32) r6 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) readv(r6, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/78, 0x4e}], 0x1) (async) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x12}, [@typed={0xd, 0x163, 0x0, 0x0, @str='threaded\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1fffff9, {0x0, 0x0, 0x0, r9, {0x7}, {0xc}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048054) 2.439494222s ago: executing program 5 (id=1046): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142bc00090ef83804919e1d9fb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1}, 0x4) r2 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x6a, 0x3, 0x20000000, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/bus/pci/devices\x00', 0x0, 0x0) read(r3, &(0x7f0000000600)=""/1024, 0x400) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002ac0)={r1, 0x7, 0x3, 0x8}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) 2.04248899s ago: executing program 3 (id=1054): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffe}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "b798a56e73f2756ea84437a0681804424c822a009cecd7782041c56e8dfaee88"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5a}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040001}, 0x40801) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd7000000000000400000004000d"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 1.979837875s ago: executing program 34 (id=1054): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffe}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "b798a56e73f2756ea84437a0681804424c822a009cecd7782041c56e8dfaee88"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5a}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040001}, 0x40801) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd7000000000000400000004000d"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 1.560711018s ago: executing program 5 (id=1058): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@iv={0x50, 0x117, 0x2, 0x3c, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d43"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x68, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec", 0x6e}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000000)={0x15, &(0x7f0000000200)=[{0x34, '\x00', @data=0x400, 0x7fffffff}]}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.418349691s ago: executing program 0 (id=1060): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002e80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)="c3d1de1e66fbb8ed6f357e6275", 0xd}], 0x1}, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x2000000003fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x4d, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000b00)={r2, r1}) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) 1.383484412s ago: executing program 5 (id=1061): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) (async) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000400)={0x130, 0x0, 0x0, {0x4000000000007, 0xc, 0x0, '\x00', {0x20, 0x80000000, 0xf, 0x0, 0xffffffffffffffff, 0x0, 0x6000, '\x00', 0x3, 0x8004, 0xd60b, 0x8000000000000001, {0x200b, 0xfffffff0}, {0x4, 0x2, 0xc000000}, {0x40c, 0x2}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x5, 0x1ff, 0x8000}}}, 0x130) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.262077668s ago: executing program 5 (id=1065): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$dh_compute(0x17, &(0x7f0000001200), 0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={'hmac(streebog512)\x00'}}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)={0x30, 0x42, 0x107, 0xfffffffe, 0xfffffffe, {0x3, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x87, 0x0, 0x1, [@nested={0xc, 0x8d, 0x0, 0x1, [@typed={0x8, 0x34, 0x0, 0x0, @fd}]}]}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c004) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x13, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000340)=""/187) 1.162547743s ago: executing program 5 (id=1066): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142bc00090ef83804919e1d9fb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1}, 0x4) r2 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x6a, 0x3, 0x20000000, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/bus/pci/devices\x00', 0x0, 0x0) read(r3, &(0x7f0000000600)=""/1024, 0x400) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002ac0)={r1, 0x7, 0x3, 0x8}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) 524.886544ms ago: executing program 1 (id=1073): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1\x00', 0x1a480, 0x0) mkdirat(r0, &(0x7f0000000000)='./config\x00', 0x15d) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, 0x0, 0x0) rmdir(&(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00') 524.337363ms ago: executing program 1 (id=1074): ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 472.9792ms ago: executing program 1 (id=1075): r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8'], 0x38}}, 0x20000000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xa80, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x800, 0x0) sendfile(r2, r3, 0x0, 0x7fffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000001240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x2, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x20008080) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r5, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x4, 0x3, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa0100fd, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) r7 = fsmount(r4, 0x1, 0x0) fchdir(r7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 412.463471ms ago: executing program 0 (id=1076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x6, 0x8}, {0x2ae, 0x6, 0x0, 0x5}}}}, 0x15) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e6", 0x76}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) read(r4, &(0x7f0000001000)=""/8192, 0x2000) read(r4, &(0x7f0000001000)=""/8192, 0x2000) sendmmsg$alg(r4, &(0x7f0000000280), 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x80140, 0x28) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000005000/0x2000)=nil, &(0x7f000000e000/0x4000)=nil, 0x2000, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 343.339572ms ago: executing program 5 (id=1077): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r4, &(0x7f00000003c0)={0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="000bbd44ecb28b1ee94499213ab0020000000230eb7c32ec66ece2823a1b5ba107c3c18150195ac7d68e211eb70ed4769bf071b84e021c31175371b3a0137eff6f41e8557dade15097c80107033f95ccf5e6368afce5cf56a6c9f6f168900349175a013fa8d92bef143d87f3dd910100b28b018087ba9caa"], &(0x7f0000000200)=ANY=[]}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x5b02, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'sh\x00', 0x1, 0x80002, 0x64}, 0x2c) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) sendmmsg(r7, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x1, {0x1, 0xf0, 0x1}}, 0x18) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000600)={0x0, 0x8000000000001, 0x1, [0x58, 0xd2, 0x7fffffffffffffff, 0xa, 0x9d], [0x2, 0x3, 0x7, 0x9, 0x40, 0x0, 0x1ff, 0x1, 0x9, 0x1, 0x2, 0x8000, 0x8, 0x40e46b2a, 0x10000, 0x4, 0x1000000000c, 0x10000, 0x50, 0x1, 0x6, 0x7, 0x7, 0x3, 0x9, 0x8, 0x10000, 0x4, 0x10001, 0x9, 0x40000000004fb, 0x7, 0xfff, 0x8012, 0x3, 0x400, 0x5, 0x2000000000, 0xa7, 0x0, 0x4, 0x17ff, 0x2, 0x803, 0xd079, 0x20000000000008, 0x8000000000000000, 0x0, 0x5, 0x8000000000000001, 0x9, 0x3ff, 0xfffffffffffffffa, 0x5, 0x6, 0x7, 0xffffffffffffffff, 0x0, 0x3c, 0x8, 0xffffffffffffffff, 0x72, 0x9, 0xffff, 0x7, 0x7fffffff, 0xfffffffffffffff7, 0x6, 0x10001, 0x3, 0xfffffffffffffffb, 0xff, 0x4, 0x3, 0x8000006f2, 0x3, 0x7, 0x7, 0x3, 0x0, 0x7e36e345, 0x8, 0x104, 0x1, 0x1, 0x230e1f85, 0x0, 0x8000, 0x6489, 0x8bfb, 0x4, 0x0, 0x2, 0x0, 0x9, 0x80000000, 0xf, 0x5d789b87, 0x2, 0x3, 0x5, 0x1, 0x9, 0x6c, 0x5, 0x5, 0x7, 0x3ff, 0x6, 0x1, 0x8076, 0x1000, 0x8, 0x5, 0xe, 0x401, 0x7, 0x203, 0xfffffffffffffff2, 0x2, 0x9]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000a40)={r9, 0xffffffff00000001, 0x1, [0x9, 0x180000000, 0xfed, 0x0, 0x7], [0xca, 0x3097387c, 0x5c26, 0x6, 0x0, 0x9, 0x5, 0x8, 0x7, 0x0, 0x8, 0xfffffffffffffffb, 0x4, 0xffffffff00000000, 0x2, 0x3f, 0xfffffffffffffff8, 0x2258, 0x1, 0x8, 0x2, 0x9, 0x80, 0x1, 0x2, 0x6, 0x2, 0xa332, 0x8, 0xe0f5, 0xb1af, 0x6, 0x2, 0x1, 0x7, 0xc3f, 0x96, 0x3, 0xa9, 0x7, 0x3, 0x10001, 0xb, 0x101, 0x6ad0, 0xd, 0x8, 0x4, 0x80000001, 0x8, 0x0, 0x3, 0x8, 0x382, 0x1, 0x8, 0x77, 0xffffffffffffffff, 0x2, 0x4000eca, 0xa, 0x5, 0x7, 0x1e0, 0x4, 0x800000000000000, 0xa0, 0x7, 0x9, 0x8, 0x2, 0x8, 0x6, 0x35, 0x2, 0x0, 0x7, 0x9, 0x8, 0x1, 0x0, 0x8, 0xfffffffffffffffa, 0x8, 0x8, 0x3bb9, 0xd4, 0x3, 0x58, 0x7, 0x109, 0x26d, 0x100, 0x8000000000000001, 0xa, 0x7fffffffffffffff, 0x19c, 0xfffffffffffffffd, 0x7, 0x2, 0xc5, 0x8, 0x4e0b435c, 0x3, 0x1, 0x3, 0x7, 0x10, 0x73, 0x81, 0x3ff, 0x401, 0x3eaa, 0xffffffffffffffff, 0x9f5, 0x7, 0x8000000000000001, 0x8, 0xfffffffffffffe01, 0xe, 0x2]}) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f00000000c0), 0x4) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 317.434873ms ago: executing program 1 (id=1078): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x2, 0x7, 0x800000000000, 0x6, 0xc, 0x4, {0x6, 0x4, 0x4, 0x0, 0x203, 0x55d, 0xfffffffa, 0x0, 0x80010001, 0x2000, 0x1002, 0x0, r2, 0x8000, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) write$FUSE_INIT(r0, &(0x7f0000000ac0)={0x50, 0x0, r1, {0x7, 0x2d, 0x3, 0x400, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) (rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x72) (async, rerun: 64) iopl(0x3) (async, rerun: 64) syz_io_uring_setup(0x35ea, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3c5}, 0xfffffffffffffffe, 0x0, &(0x7f0000000000)) 282.546517ms ago: executing program 0 (id=1079): unshare(0x2040400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x23315}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) r6 = socket$netlink(0x10, 0x3, 0xf) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000000)="09000000e700140000007e7bfbf788a83baa9900d6f10806950088a8000088a8", 0x69, 0x4042810, &(0x7f0000000080)={0x11, 0x88a8, r8, 0x1, 0x8, 0x6, @broadcast}, 0x14) r9 = openat$cgroup_ro(r5, &(0x7f0000000000)='cgroup.freeze\x00', 0x5000000, 0x0) readv(r9, &(0x7f00000012c0)=[{&(0x7f0000002c40)=""/4081, 0xff1}], 0x1) unshare(0x20800) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x64) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x49}, 0x94) socket$inet(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 222.370263ms ago: executing program 1 (id=1080): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000000), 0x113400, 0x0) read$ptp(r0, &(0x7f0000000040)=""/114, 0x72) r1 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f0000000100)={0x4, 0x1}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000000180)={'\x00', 0x2, 0x1, 0x9}) clock_gettime(0x7, &(0x7f0000000200)) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000280)={'ip6gre0', 0x32, 0x36}, 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x9a) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000300)="e0c44f11683752ff03", 0x9) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x8000, 0xc4, 0x8}, 0x18) readlinkat(r5, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/128, 0x80) openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x200101, 0x1, 0x2}, 0x18) setxattr$security_capability(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580)=@v3={0x3000000, [{0x7, 0x2}, {0x8, 0x7}]}, 0x18, 0x1) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f00000005c0)={0x1, 0x8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xe8) read$FUSE(r4, &(0x7f0000000800)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$pvfs2(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x4000, &(0x7f0000002840)={[{'$'}, {'net_prio.ifpriomap\x00'}, {'/dev/ptp0\x00'}, {}, {'/dev/ptp1\x00'}, {'+r\\$$!('}], [{@fowner_gt={'fowner>', r6}}, {@uid_eq={'uid', 0x3d, r7}}]}) ioctl$CDROMSUBCHNL(r4, 0x530b, &(0x7f00000028c0)={0x2, 0x16, 0x8, 0x6, 0x1, 0x5, @lba, @msf={0xca, 0x9, 0xd}}) pipe2$watch_queue(&(0x7f0000002900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000002940)={0x4, 0x0, 0x50000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) mq_timedreceive(r8, &(0x7f0000002980)=""/153, 0x99, 0x0, 0x0) ioctl$XFS_IOC_GETBMAP(r8, 0xc0205826, &(0x7f0000002a40)={0x8, 0x1b7, 0x1, 0x2, 0x6}) fchdir(r4) write$eventfd(r8, &(0x7f0000002a80)=0x63, 0x8) r9 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r9, 0x89a0, &(0x7f0000002ac0)='pim6reg0\x00') ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000002b00)) 192.837551ms ago: executing program 1 (id=1081): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) (async, rerun: 32) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@mode={'mode', 0x3d, 0x6}}]}) (rerun: 32) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x1) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f00000001c0)) (async, rerun: 32) lseek(r0, 0x10400000000001, 0x2) (rerun: 32) 0s ago: executing program 0 (id=1082): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089", 0xa6}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xffffffffffffff91}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') fchdir(r5) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0xcb, "da46043f75e837f253067c800df48082b31ce85ebdd00b7c5da4e4667f3ebe5d2e707ce37fb12335fe9b071631148feb90eea662ad21896a2168cc50ea4e43fdeae1d60970debc8f28211c002b32dfa5b3e96d47e99db39b00efe2150f3e639701179c263d3707254e1808f02abbc7d936981bc6e9ba5553c52c4c784872aa6c2b4e722b21dcb471e93b7dbf5fce46adad9cef611077f73817660e090943e8d4469449bb53a5011779eb7c07bcce11978b3ff187ed9076668a88ee69f9212025c727bff2a6077c43a9bb29"}, &(0x7f0000000440)=0xd3) write(r6, &(0x7f0000001f00)='usbip-vudc.0', 0xc) write(0xffffffffffffffff, &(0x7f0000000000)="41000200010007", 0x7) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) sendmsg$NL80211_CMD_FLUSH_PMKSA(r8, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r9, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x15}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): link: 72 bytes leftover after parsing attributes in process `syz.1.455'. [ 84.630871][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 84.647593][ T7590] team0: Port device team_slave_0 removed [ 84.685534][ T42] kauditd_printk_skb: 58 callbacks suppressed [ 84.685551][ T42] audit: type=1800 audit(1785483750.226:655): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 84.700628][ T7598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7598 comm=syz.4.456 [ 84.705503][ T42] audit: type=1800 audit(1785483750.246:656): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=5340 res=0 errno=0 [ 84.746626][ T42] audit: type=1800 audit(1785483750.286:657): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 84.760500][ T42] audit: type=1800 audit(1785483750.296:658): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 84.768060][ T42] audit: type=1400 audit(1785483750.306:659): avc: denied { read write } for pid=7602 comm="syz.1.457" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 84.775883][ T42] audit: type=1400 audit(1785483750.306:660): avc: denied { open } for pid=7602 comm="syz.1.457" path="/dev/mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 84.793992][ T42] audit: type=1400 audit(1785483750.306:661): avc: denied { ioctl } for pid=7602 comm="syz.1.457" path="/dev/mtd0" dev="devtmpfs" ino=716 ioctlcmd=0x4d17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 84.801889][ T42] audit: type=1800 audit(1785483750.306:662): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=5514 res=0 errno=0 [ 84.823085][ T42] audit: type=1800 audit(1785483750.366:663): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 84.834742][ T42] audit: type=1400 audit(1785483750.376:664): avc: denied { setopt } for pid=7610 comm="syz.1.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.840330][ T7611] cgroup: Invalid name [ 84.845102][ T7611] netlink: 'syz.1.459': attribute type 4 has an invalid length. [ 84.929221][ T7615] netlink: 'syz.1.461': attribute type 1 has an invalid length. [ 84.981664][ T7620] fuse: fd is not a fuse device [ 84.989857][ T7620] fuse: fd is not a fuse device [ 84.994827][ T7620] fuse: fd is not a fuse device [ 84.998629][ T7620] fuse: fd is not a fuse device [ 85.001246][ T7620] fuse: fd is not a fuse device [ 85.003950][ T7620] fuse: fd is not a fuse device [ 85.005737][ T7620] fuse: fd is not a fuse device [ 85.007421][ T7620] fuse: fd is not a fuse device [ 85.009219][ T7620] fuse: fd is not a fuse device [ 85.010897][ T7620] fuse: fd is not a fuse device [ 85.012681][ T7620] fuse: fd is not a fuse device [ 85.014533][ T7620] fuse: fd is not a fuse device [ 85.016283][ T7620] fuse: fd is not a fuse device [ 85.016296][ T41] usb 5-1: USB disconnect, device number 5 [ 85.017993][ T7620] fuse: fd is not a fuse device [ 85.022107][ T7620] fuse: fd is not a fuse device [ 85.024645][ T7620] fuse: fd is not a fuse device [ 85.027240][ T7620] fuse: fd is not a fuse device [ 85.028935][ T7620] fuse: fd is not a fuse device [ 85.030680][ T7620] fuse: fd is not a fuse device [ 85.032422][ T7620] fuse: fd is not a fuse device [ 85.034293][ T7620] fuse: fd is not a fuse device [ 85.036096][ T7620] fuse: fd is not a fuse device [ 85.038495][ T7620] fuse: fd is not a fuse device [ 85.040217][ T7620] fuse: fd is not a fuse device [ 85.050179][ T41] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 85.071457][ T41] iuu_phoenix 5-1:1.0: device disconnected [ 85.091050][ T7625] comedi comedi3: pcl724: I/O base address or length out of range [ 85.156782][ T7629] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 85.174148][ C2] Illegal XDP return value 16128 on prog (id 47) dev veth0_to_bridge, expect packet loss! [ 85.218874][ T7634] netlink: 'syz.1.467': attribute type 1 has an invalid length. [ 85.230575][ T7634] bond1: entered promiscuous mode [ 85.234228][ T7634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.348497][ T7637] capability: warning: `syz.4.469' uses 32-bit capabilities (legacy support in use) [ 85.771502][ T7659] fuse: fd is not a fuse device [ 85.882788][ T5822] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 85.895937][ T7668] Mass Storage Function, version: 2009/09/11 [ 85.901805][ T7668] LUN: removable file: (no medium) [ 85.921407][ T7668] UDC core: g1: couldn't find an available UDC or it's busy [ 85.982731][ T7673] tmpfs: Bad value for 'huge' [ 85.986020][ T7673] misc userio: No port type given on /dev/userio [ 86.044168][ T5822] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.048050][ T5822] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 86.052118][ T5822] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 86.055596][ T5822] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.060237][ T5822] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.064326][ T5822] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.070719][ T5822] usb 8-1: config 0 descriptor?? [ 86.113384][ T6129] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 86.266599][ T6129] usb 5-1: not running at top speed; connect to a high speed hub [ 86.271637][ T6129] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.40 [ 86.274622][ T6129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.277182][ T6129] usb 5-1: Product: syz [ 86.278526][ T6129] usb 5-1: Manufacturer: syz [ 86.278940][ T5822] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 86.280057][ T6129] usb 5-1: SerialNumber: syz [ 86.298983][ T5822] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 86.314118][ T5822] usb 8-1: USB disconnect, device number 7 [ 86.325763][ T7687] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 86.377713][ T7691] fido_id[7691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/report_descriptor': No such file or directory [ 86.495131][ T6129] usbhid 5-1:1.0: can't add hid device: -71 [ 86.497059][ T6129] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 86.500845][ T6129] usb 5-1: USB disconnect, device number 6 [ 86.527139][ T7699] fuse: fd is not a fuse device [ 86.720258][ T7715] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.497'. [ 86.745363][ T7720] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 86.792378][ T7726] overlayfs: maximum fs stacking depth exceeded [ 86.855435][ T7735] loop5: detected capacity change from 0 to 7 [ 86.862461][ T7735] Dev loop5: unable to read RDB block 7 [ 86.867166][ T7735] loop5: AHDI p1 p2 p3 [ 86.868529][ T7735] loop5: partition table partially beyond EOD, truncated [ 86.871817][ T7735] loop5: p1 start 1818582900 is beyond EOD, truncated [ 86.874424][ T7735] loop5: p3 start 335544320 is beyond EOD, truncated [ 86.961182][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.973828][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.097616][ T7759] bond2: ARP target 9.0.0.0 is already present [ 87.099578][ T7759] bond2: option arp_ip_target: invalid value (9) [ 87.201271][ T7759] bond2 (unregistering): Released all slaves [ 87.669443][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.514'. [ 87.673386][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.514'. [ 87.681312][ T7784] usbip-vudc usbip-vudc.0: gadget not bound [ 87.928228][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 87.932015][ T7796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.518'. [ 87.950804][ T7803] futex_wake_op: syz.1.520 tries to shift op by 32; fix this program [ 88.077119][ T7808] netlink: 144 bytes leftover after parsing attributes in process `syz.3.522'. [ 89.018571][ T7830] overlayfs: missing 'workdir' [ 89.131338][ T10] Process accounting resumed [ 89.303820][ T2329] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 89.359216][ T7853] comedi comedi3: dac02: I/O base address or length out of range [ 89.367411][ T7853] tipc: Started in network mode [ 89.369167][ T7853] tipc: Node identity bab858780468, cluster identity 4711 [ 89.371589][ T7853] tipc: Enabled bearer , priority 0 [ 89.412929][ T7853] tipc: Disabling bearer [ 89.463108][ T2329] usb 8-1: Using ep0 maxpacket: 8 [ 89.468687][ T2329] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 89.472068][ T2329] usb 8-1: config 0 has no interface number 0 [ 89.477120][ T2329] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 89.482236][ T2329] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 89.487487][ T2329] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 89.492283][ T2329] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 89.498706][ T2329] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 89.502619][ T2329] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.510268][ T2329] usb 8-1: config 0 descriptor?? [ 89.519752][ T2329] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 89.576356][ T7857] FAULT_INJECTION: forcing a failure. [ 89.576356][ T7857] name failslab, interval 1, probability 0, space 0, times 1 [ 89.583311][ T7857] CPU: 2 UID: 0 PID: 7857 Comm: syz.0.536 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.583340][ T7857] Tainted: [L]=SOFTLOCKUP [ 89.583344][ T7857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.583351][ T7857] Call Trace: [ 89.583373][ T7857] [ 89.583377][ T7857] dump_stack_lvl+0x100/0x190 [ 89.583442][ T7857] should_fail_ex.cold+0x5/0xa [ 89.583463][ T7857] should_failslab+0xc2/0x120 [ 89.583491][ T7857] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 89.583506][ T7857] ? down_read+0x13b/0x4c0 [ 89.583523][ T7857] ? __pfx_keyring_search_iterator+0x10/0x10 [ 89.583557][ T7857] ? dh_data_from_key+0x164/0x2d0 [ 89.583571][ T7857] kmemdup_noprof+0x29/0x60 [ 89.583585][ T7857] dh_data_from_key+0x164/0x2d0 [ 89.583599][ T7857] __keyctl_dh_compute+0x3a4/0x10d0 [ 89.583611][ T7857] ? find_held_lock+0x2b/0x80 [ 89.583633][ T7857] ? get_pid_task+0xfc/0x250 [ 89.583643][ T7857] ? get_pid_task+0xfc/0x250 [ 89.583654][ T7857] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 89.583668][ T7857] ? proc_fail_nth_write+0x9f/0x220 [ 89.583692][ T7857] ? rcu_read_lock_any_held+0x6a/0xa0 [ 89.583705][ T7857] ? find_held_lock+0x2b/0x80 [ 89.583714][ T7857] ? ksys_write+0x190/0x250 [ 89.583736][ T7857] ? __mutex_unlock_slowpath+0x35d/0x930 [ 89.583754][ T7857] keyctl_dh_compute+0xd9/0x140 [ 89.583766][ T7857] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 89.583780][ T7857] ? ksys_write+0x1ac/0x250 [ 89.583797][ T7857] ? __pfx_ksys_write+0x10/0x10 [ 89.583817][ T7857] __do_sys_keyctl+0x464/0x5a0 [ 89.583835][ T7857] do_syscall_64+0x115/0x870 [ 89.583862][ T7857] ? clear_bhb_loop+0x40/0x90 [ 89.583878][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.583889][ T7857] RIP: 0033:0x7f074759e019 [ 89.583900][ T7857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.583911][ T7857] RSP: 002b:00007f0748445028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 89.583935][ T7857] RAX: ffffffffffffffda RBX: 00007f0747825fa0 RCX: 00007f074759e019 [ 89.583945][ T7857] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017 [ 89.583951][ T7857] RBP: 00007f0748445090 R08: 0000000000000000 R09: 0000000000000000 [ 89.583958][ T7857] R10: 0000000000000043 R11: 0000000000000246 R12: 0000000000000001 [ 89.583964][ T7857] R13: 00007f0747826038 R14: 00007f0747825fa0 R15: 00007ffc31c3b788 [ 89.583979][ T7857] [ 89.717379][ T42] kauditd_printk_skb: 166 callbacks suppressed [ 89.717398][ T42] audit: type=1400 audit(1785483755.256:831): avc: denied { read write } for pid=7834 comm="syz.3.529" name="ldusb0" dev="devtmpfs" ino=3408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.729886][ T42] audit: type=1400 audit(1785483755.266:832): avc: denied { open } for pid=7834 comm="syz.3.529" path="/dev/ldusb0" dev="devtmpfs" ino=3408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.755733][ T42] audit: type=1400 audit(1785483755.296:833): avc: denied { open } for pid=7864 comm="syz.0.539" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 89.765282][ T42] audit: type=1800 audit(1785483755.296:834): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 89.774365][ T42] audit: type=1400 audit(1785483755.296:835): avc: denied { ioctl } for pid=7864 comm="syz.0.539" path="/dev/ptyq4" dev="devtmpfs" ino=131 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 89.784552][ T5844] usb 8-1: USB disconnect, device number 8 [ 89.784779][ T7835] ldusb 8-1:0.55: Couldn't submit interrupt_out_urb -19 [ 89.787105][ C2] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 89.793485][ T42] audit: type=1400 audit(1785483755.336:836): avc: denied { create } for pid=7834 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.800197][ T5844] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 89.802050][ T42] audit: type=1400 audit(1785483755.336:837): avc: denied { read } for pid=7834 comm="syz.3.529" dev="nsfs" ino=4026533151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.810676][ T42] audit: type=1400 audit(1785483755.336:838): avc: denied { open } for pid=7834 comm="syz.3.529" path="net:[4026533151]" dev="nsfs" ino=4026533151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.818626][ T42] audit: type=1400 audit(1785483755.336:839): avc: denied { read } for pid=7834 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.827308][ T42] audit: type=1400 audit(1785483755.336:840): avc: denied { create } for pid=7834 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.914704][ T7876] netlink: 'syz.1.541': attribute type 29 has an invalid length. [ 90.095509][ T7885] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 90.105749][ T7884] netlink: 104 bytes leftover after parsing attributes in process `syz.1.545'. [ 90.194442][ T7891] netlink: 'syz.1.546': attribute type 21 has an invalid length. [ 90.198998][ T5748] Bluetooth: hci1: connection err: -111 [ 90.247656][ T5748] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 90.290518][ T7897] dlm: Unknown command passed to DLM device : 33 [ 90.290518][ T7897] [ 90.346191][ T7893] FAULT_INJECTION: forcing a failure. [ 90.346191][ T7893] name failslab, interval 1, probability 0, space 0, times 0 [ 90.351383][ T7893] CPU: 2 UID: 0 PID: 7893 Comm: syz.0.547 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.351412][ T7893] Tainted: [L]=SOFTLOCKUP [ 90.351418][ T7893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.351428][ T7893] Call Trace: [ 90.351434][ T7893] [ 90.351441][ T7893] dump_stack_lvl+0x100/0x190 [ 90.351471][ T7893] should_fail_ex.cold+0x5/0xa [ 90.351496][ T7893] should_failslab+0xc2/0x120 [ 90.351520][ T7893] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 90.351543][ T7893] ? down_read+0x13b/0x4c0 [ 90.351564][ T7893] ? __pfx_keyring_search_iterator+0x10/0x10 [ 90.351587][ T7893] ? dh_data_from_key+0x164/0x2d0 [ 90.351611][ T7893] kmemdup_noprof+0x29/0x60 [ 90.351632][ T7893] dh_data_from_key+0x164/0x2d0 [ 90.351653][ T7893] __keyctl_dh_compute+0x3d2/0x10d0 [ 90.351672][ T7893] ? find_held_lock+0x2b/0x80 [ 90.351689][ T7893] ? get_pid_task+0xfc/0x250 [ 90.351705][ T7893] ? get_pid_task+0xfc/0x250 [ 90.351723][ T7893] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 90.351744][ T7893] ? proc_fail_nth_write+0x9f/0x220 [ 90.351779][ T7893] ? rcu_read_lock_any_held+0x6a/0xa0 [ 90.351797][ T7893] ? find_held_lock+0x2b/0x80 [ 90.351812][ T7893] ? ksys_write+0x190/0x250 [ 90.351844][ T7893] ? __mutex_unlock_slowpath+0x35d/0x930 [ 90.351871][ T7893] keyctl_dh_compute+0xd9/0x140 [ 90.351890][ T7893] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 90.351913][ T7893] ? ksys_write+0x1ac/0x250 [ 90.351940][ T7893] ? __pfx_ksys_write+0x10/0x10 [ 90.351969][ T7893] __do_sys_keyctl+0x464/0x5a0 [ 90.351996][ T7893] do_syscall_64+0x115/0x870 [ 90.352015][ T7893] ? clear_bhb_loop+0x40/0x90 [ 90.352037][ T7893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.352055][ T7893] RIP: 0033:0x7f074759e019 [ 90.352071][ T7893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.352088][ T7893] RSP: 002b:00007f0748445028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 90.352106][ T7893] RAX: ffffffffffffffda RBX: 00007f0747825fa0 RCX: 00007f074759e019 [ 90.352117][ T7893] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017 [ 90.352127][ T7893] RBP: 00007f0748445090 R08: 0000000000000000 R09: 0000000000000000 [ 90.352137][ T7893] R10: 0000000000000043 R11: 0000000000000246 R12: 0000000000000001 [ 90.352147][ T7893] R13: 00007f0747826038 R14: 00007f0747825fa0 R15: 00007ffc31c3b788 [ 90.352171][ T7893] [ 90.504674][ T7907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.553'. [ 90.514440][ T7907] netlink: 'syz.1.553': attribute type 10 has an invalid length. [ 90.520608][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.523870][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.529897][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.532897][ T7907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.536216][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.538678][ T7907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.550359][ T7907] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 90.587258][ T7907] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:446a:31ff:febc:4631 error=-28 [ 90.861668][ T7907] infiniband syz1: set active [ 90.865297][ T7907] infiniband syz1: added bridge_slave_1 [ 90.881517][ T7907] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 90.887483][ T7907] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 90.893550][ T7907] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 90.943039][ T7907] RDS/IB: syz1: added [ 90.945580][ T7907] smc: adding ib device syz1 with port count 1 [ 90.947776][ T7907] smc: ib device syz1 port 1 has no pnetid [ 91.374560][ T7943] fuse: fd is not a fuse device [ 91.465357][ T7945] fuse: fd is not a fuse device [ 91.643504][ T5822] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 91.719670][ T7952] binder: BINDER_SET_CONTEXT_MGR already set [ 91.721692][ T7952] binder: 7951:7952 ioctl 4018620d 200000004a80 returned -16 [ 91.772664][ T5822] usb 6-1: device descriptor read/64, error -71 [ 92.012745][ T5822] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 92.142897][ T5822] usb 6-1: device descriptor read/64, error -71 [ 92.266005][ T5822] usb usb6-port1: attempt power cycle [ 92.613039][ T5822] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 92.636199][ T5822] usb 6-1: device descriptor read/8, error -71 [ 92.652470][ T7960] vxfs: unable to read disk superblock at 1 [ 92.655686][ T7960] vxfs: unable to read disk superblock at 8 [ 92.658166][ T7960] vxfs: can't find superblock. [ 92.669286][ T7960] input: syz0 as /devices/virtual/input/input10 [ 92.726791][ T7962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.730633][ T7963] CIFS: Attempting to mount //127.0.0.1/share [ 92.844454][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888036b3b800: rx timeout, send abort [ 92.872689][ T5822] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 92.893473][ T5822] usb 6-1: device descriptor read/8, error -71 [ 93.002943][ T5822] usb usb6-port1: unable to enumerate USB device [ 93.349194][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888036b3b800: abort rx timeout. Force session deactivation [ 93.513843][ T7967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.572'. [ 93.565595][ T7963] CIFS: VFS: Error connecting to socket. Aborting operation. [ 93.573451][ T7963] CIFS: VFS: cifs_mount failed w/return code = -4 [ 93.620242][ T7973] ehci-pci 0000:00:1d.7: remove, state 1 [ 93.631545][ T7973] usb usb2: USB disconnect, device number 1 [ 93.634561][ T7973] usb 2-1: USB disconnect, device number 2 [ 93.778169][ T7973] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 94.025811][ T7976] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 94.040057][ T7976] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 94.057025][ T7976] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 94.072904][ T7976] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 94.084428][ T7976] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 94.088134][ T7976] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 94.090953][ T7976] usb usb2: Product: EHCI Host Controller [ 94.093465][ T7976] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 94.096194][ T7976] usb usb2: SerialNumber: 0000:00:1d.7 [ 94.116896][ T7976] hub 2-0:1.0: USB hub found [ 94.120678][ T7976] hub 2-0:1.0: 6 ports detected [ 94.168830][ T7976] hub 1-0:1.0: USB hub found [ 94.171381][ T7976] hub 1-0:1.0: 2 ports detected [ 94.209540][ T7976] hub 3-0:1.0: USB hub found [ 94.211676][ T7976] hub 3-0:1.0: 2 ports detected [ 94.253819][ T7976] hub 4-0:1.0: USB hub found [ 94.257235][ T7976] hub 4-0:1.0: 2 ports detected [ 94.306083][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 94.392698][ T5822] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 94.403072][ T7995] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 94.577292][ T5822] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 94.581132][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 94.586741][ T5822] usb 2-1: Product: QEMU USB Tablet [ 94.588921][ T5822] usb 2-1: Manufacturer: QEMU [ 94.590940][ T5822] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 94.624518][ T5822] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0005/input/input11 [ 94.630831][ T8009] kvm: user requested TSC rate below hardware speed [ 94.670572][ T8009] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 94.702175][ T5822] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 94.724121][ T42] kauditd_printk_skb: 231 callbacks suppressed [ 94.724133][ T42] audit: type=1800 audit(1785483760.266:1072): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151097 res=0 errno=0 [ 94.736604][ T42] audit: type=1800 audit(1785483760.276:1073): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151112 res=0 errno=0 [ 94.745723][ T42] audit: type=1800 audit(1785483760.276:1074): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=151128 res=0 errno=0 [ 94.762637][ T42] audit: type=1800 audit(1785483760.276:1075): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=151131 res=0 errno=0 [ 94.769166][ T42] audit: type=1800 audit(1785483760.276:1076): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=151130 res=0 errno=0 [ 94.778346][ T42] audit: type=1800 audit(1785483760.276:1077): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=151129 res=0 errno=0 [ 94.786249][ T42] audit: type=1800 audit(1785483760.276:1078): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=151120 res=0 errno=0 [ 94.793560][ T42] audit: type=1800 audit(1785483760.276:1079): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=151123 res=0 errno=0 [ 94.800120][ T42] audit: type=1800 audit(1785483760.286:1080): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=151322 res=0 errno=0 [ 94.806787][ T42] audit: type=1800 audit(1785483760.286:1081): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=151080 res=0 errno=0 [ 94.831969][ T41] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 94.958811][ T8027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.016300][ T8028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.073821][ T8031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.095175][ T41] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 95.613291][ T41] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 95.652374][ T8014] ceph: No mds server is up or the cluster is laggy [ 95.752243][ T8048] netlink: 112 bytes leftover after parsing attributes in process `syz.1.594'. [ 95.792773][ T8051] fuse: fd is not a fuse device [ 95.797816][ T8051] binder: BC_ACQUIRE_RESULT not supported [ 95.801897][ T8051] binder: 8050:8051 ioctl c0306201 2000000003c0 returned -22 [ 95.831997][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 95.838491][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 95.869236][ T8054] xfrm1: entered allmulticast mode [ 95.962978][ T8067] netlink: 'syz.4.597': attribute type 14 has an invalid length. [ 96.192367][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'. [ 96.196496][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'. [ 96.268598][ T8093] macvtap1: entered allmulticast mode [ 96.271312][ T8093] bond0: entered allmulticast mode [ 96.273723][ T8093] bond_slave_0: entered allmulticast mode [ 96.276107][ T8093] bond_slave_1: entered allmulticast mode [ 96.278747][ T8093] bond_slave_0: entered promiscuous mode [ 96.283117][ T8093] bond_slave_1: entered promiscuous mode [ 96.287503][ T8093] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 96.291313][ T8093] bond0: left allmulticast mode [ 96.294831][ T8093] bond_slave_0: left allmulticast mode [ 96.296706][ T8093] bond_slave_1: left allmulticast mode [ 96.320058][ T24] bond_slave_0: left promiscuous mode [ 96.323507][ T24] bond_slave_1: left promiscuous mode [ 96.467640][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.607'. [ 96.544614][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.607'. [ 96.720499][ T8109] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 96.726093][ T8109] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8109 comm=syz.3.609 [ 97.259676][ T8143] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 97.326577][ T8139] Invalid argument reading file caps for ./file0 [ 97.479202][ T8157] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(1) [ 97.481558][ T8157] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 97.484966][ T8157] vhci_hcd vhci_hcd.0: Device attached [ 97.566400][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 97.752647][ T41] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 98.138244][ T8159] vhci_hcd: connection reset by peer [ 98.145591][ T5841] vhci_hcd vhci_hcd.3: stop threads [ 98.147973][ T5841] vhci_hcd vhci_hcd.3: release socket [ 98.152940][ T5841] vhci_hcd vhci_hcd.3: disconnect device [ 98.239814][ T8189] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 98.846559][ T8203] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 98.852290][ T8203] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 98.857051][ T8203] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 98.895639][ T8183] ceph: No mds server is up or the cluster is laggy [ 98.902825][ T8186] ceph: No mds server is up or the cluster is laggy [ 99.061728][ T8206] mmap: syz.1.634 (8206) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.385444][ T8221] netlink: 'syz.0.637': attribute type 1 has an invalid length. [ 99.422005][ T8221] bridge2: entered promiscuous mode [ 99.437404][ T8221] bond2: (slave bridge2): making interface the new active one [ 99.440460][ T8221] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 99.455674][ T8221] bridge3: entered promiscuous mode [ 99.461823][ T8221] bond2: (slave bridge3): Enslaving as a backup interface with an up link [ 99.509278][ T8229] fuse: fd is not a fuse device [ 99.775235][ T42] kauditd_printk_skb: 131 callbacks suppressed [ 99.775248][ T42] audit: type=1800 audit(1785483765.316:1213): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 99.797781][ T42] audit: type=1800 audit(1785483765.336:1214): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 99.830043][ T42] audit: type=1800 audit(1785483765.366:1215): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 99.840050][ T42] audit: type=1400 audit(1785483765.376:1216): avc: denied { mount } for pid=8247 comm="syz.3.647" name="/" dev="configfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 99.850910][ T8248] udc dummy_udc.0: failed to start g1: -19 [ 99.856129][ T42] audit: type=1400 audit(1785483765.376:1217): avc: denied { search } for pid=8247 comm="syz.3.647" name="/" dev="configfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.865578][ T42] audit: type=1400 audit(1785483765.376:1218): avc: denied { search } for pid=8247 comm="syz.3.647" name="usb_gadget" dev="configfs" ino=3799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.874860][ T42] audit: type=1400 audit(1785483765.376:1219): avc: denied { search } for pid=8247 comm="syz.3.647" name="/" dev="configfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.880484][ T8248] UDC core: g1: couldn't find an available UDC or it's busy [ 99.885803][ T42] audit: type=1400 audit(1785483765.376:1220): avc: denied { search } for pid=8247 comm="syz.3.647" name="usb_gadget" dev="configfs" ino=3799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.888199][ T8250] zero sized request [ 99.899572][ T42] audit: type=1400 audit(1785483765.376:1221): avc: denied { search } for pid=8247 comm="syz.3.647" name="g1" dev="configfs" ino=14096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.910574][ T42] audit: type=1400 audit(1785483765.376:1222): avc: denied { search } for pid=8247 comm="syz.3.647" name="configs" dev="configfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 99.921997][ T8252] __nla_validate_parse: 4 callbacks suppressed [ 99.922014][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 99.986354][ T8258] zero sized request [ 100.131947][ T8265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8265 comm=syz.0.652 [ 100.154878][ T8265] bridge_slave_1: left allmulticast mode [ 100.157773][ T8269] openvswitch: netlink: Actions may not be safe on all matching packets [ 100.164197][ T8265] bridge_slave_1: left promiscuous mode [ 100.171289][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.210349][ T8265] bridge_slave_0: left allmulticast mode [ 100.216534][ T8265] bridge_slave_0: left promiscuous mode [ 100.220672][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.439133][ T8276] netlink: 14 bytes leftover after parsing attributes in process `syz.3.655'. [ 100.604286][ T8283] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 100.615170][ T8288] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 100.656389][ T8287] vivid-000: unregistering video7 [ 100.689059][ T8287] vivid-000: unregistering video8 [ 100.717998][ T8287] vivid-000: unregistering vbi0 [ 100.736980][ T8287] vivid-000: unregistering vbi1 [ 100.750322][ T8292] dvmrp0: entered allmulticast mode [ 100.786235][ T8287] vivid-000: unregistering swradio0 [ 100.839886][ T8287] vivid-000: unregistering radio0 [ 100.862630][ T8287] vivid-000: unregistering radio1 [ 100.885084][ T8287] vivid-000: unregistering video9 [ 100.923892][ T8287] vivid-000: unregistering video10 [ 100.949450][ T8287] vivid-000: unregistering v4l-touch0 [ 101.096455][ T8287] vivid-001: unregistering video11 [ 101.105360][ T8287] vivid-001: unregistering video12 [ 101.110786][ T8287] vivid-001: unregistering vbi2 [ 101.124371][ T8287] vivid-001: unregistering vbi3 [ 101.126730][ T8287] vivid-001: unregistering swradio1 [ 101.156753][ T8287] vivid-001: unregistering radio2 [ 101.162468][ T8287] vivid-001: unregistering radio3 [ 101.168921][ T8287] vivid-001: unregistering video13 [ 101.178932][ T8287] vivid-001: unregistering video14 [ 101.185831][ T8287] vivid-001: unregistering v4l-touch1 [ 101.261315][ T8287] vivid-002: unregistering video15 [ 101.265943][ T8287] vivid-002: unregistering video16 [ 101.268986][ T8287] vivid-002: unregistering vbi4 [ 101.287225][ T8287] vivid-002: unregistering vbi5 [ 101.297486][ T8287] vivid-002: unregistering swradio2 [ 101.317077][ T8287] vivid-002: unregistering radio4 [ 101.322435][ T8287] vivid-002: unregistering radio5 [ 101.330750][ T8287] vivid-002: unregistering video17 [ 101.335954][ T8287] vivid-002: unregistering video18 [ 101.339395][ T8287] vivid-002: unregistering v4l-touch2 [ 101.403964][ T8287] vivid-003: unregistering video19 [ 101.410486][ T8287] vivid-003: unregistering video20 [ 101.418426][ T8287] vivid-003: unregistering vbi6 [ 101.426626][ T8287] vivid-003: unregistering vbi7 [ 101.438869][ T8287] vivid-003: unregistering swradio3 [ 101.457087][ T8287] vivid-003: unregistering radio6 [ 101.464321][ T8287] vivid-003: unregistering radio7 [ 101.471345][ T8287] vivid-003: unregistering video21 [ 101.477878][ T8287] vivid-003: unregistering video22 [ 101.484467][ T8287] vivid-003: unregistering v4l-touch3 [ 101.557928][ T8287] vivid-004: unregistering video23 [ 101.560887][ T8287] vivid-004: unregistering video24 [ 101.563864][ T8287] vivid-004: unregistering vbi8 [ 101.571583][ T8287] vivid-004: unregistering vbi9 [ 101.596437][ T8287] vivid-004: unregistering swradio4 [ 101.601798][ T8287] vivid-004: unregistering radio8 [ 101.608490][ T8287] vivid-004: unregistering radio9 [ 101.613997][ T8287] vivid-004: unregistering video25 [ 101.618879][ T8287] vivid-004: unregistering video26 [ 101.625569][ T8287] vivid-004: unregistering v4l-touch4 [ 101.670671][ T8287] vivid-005: unregistering video27 [ 101.673114][ T8287] vivid-005: unregistering video28 [ 101.678948][ T8287] vivid-005: unregistering vbi10 [ 101.688229][ T8287] vivid-005: unregistering vbi11 [ 101.697048][ T8287] vivid-005: unregistering swradio5 [ 101.707132][ T8287] vivid-005: unregistering radio10 [ 101.718909][ T8287] vivid-005: unregistering radio11 [ 101.724005][ T8287] vivid-005: unregistering video29 [ 101.729247][ T8287] vivid-005: unregistering video30 [ 101.731621][ T8287] vivid-005: unregistering v4l-touch5 [ 101.764116][ T8287] vivid-006: unregistering video31 [ 101.770187][ T8287] vivid-006: unregistering video32 [ 101.776227][ T8287] vivid-006: unregistering vbi12 [ 101.783931][ T8287] vivid-006: unregistering vbi13 [ 101.793666][ T8287] vivid-006: unregistering swradio6 [ 101.797310][ T8287] vivid-006: unregistering radio12 [ 101.806797][ T8287] vivid-006: unregistering radio13 [ 101.812187][ T8287] vivid-006: unregistering video33 [ 101.815763][ T8287] vivid-006: unregistering video34 [ 101.819332][ T8287] vivid-006: unregistering v4l-touch6 [ 101.856296][ T8287] vivid-007: unregistering video35 [ 101.861754][ T8287] vivid-007: unregistering video36 [ 101.866568][ T8287] vivid-007: unregistering vbi14 [ 101.871952][ T8287] vivid-007: unregistering vbi15 [ 101.887217][ T8287] vivid-007: unregistering swradio7 [ 101.896314][ T8287] vivid-007: unregistering radio14 [ 101.905149][ T8287] vivid-007: unregistering radio15 [ 101.909636][ T8287] vivid-007: unregistering video37 [ 101.915176][ T8287] vivid-007: unregistering video38 [ 101.923439][ T8287] vivid-007: unregistering v4l-touch7 [ 101.955441][ T8287] vivid-008: unregistering video39 [ 101.962846][ T8287] vivid-008: unregistering video40 [ 101.966177][ T8287] vivid-008: unregistering vbi16 [ 101.976411][ T8287] vivid-008: unregistering vbi17 [ 101.982440][ T8287] vivid-008: unregistering swradio8 [ 101.998848][ T8287] vivid-008: unregistering radio16 [ 102.010541][ T8287] vivid-008: unregistering radio17 [ 102.017171][ T8287] vivid-008: unregistering video41 [ 102.022282][ T8287] vivid-008: unregistering video42 [ 102.027005][ T8287] vivid-008: unregistering v4l-touch8 [ 102.066500][ T8287] vivid-009: unregistering video43 [ 102.069146][ T8287] vivid-009: unregistering video44 [ 102.072159][ T8287] vivid-009: unregistering vbi18 [ 102.080084][ T8287] vivid-009: unregistering vbi19 [ 102.086973][ T8287] vivid-009: unregistering swradio9 [ 102.099406][ T8287] vivid-009: unregistering radio18 [ 102.104262][ T8287] vivid-009: unregistering radio19 [ 102.109221][ T8287] vivid-009: unregistering video45 [ 102.112153][ T8287] vivid-009: unregistering video46 [ 102.118165][ T8287] vivid-009: unregistering v4l-touch9 [ 102.147583][ T8287] vivid-010: unregistering video47 [ 102.150122][ T8287] vivid-010: unregistering video48 [ 102.153717][ T8287] vivid-010: unregistering vbi20 [ 102.159207][ T8287] vivid-010: unregistering vbi21 [ 102.168629][ T8287] vivid-010: unregistering swradio10 [ 102.175725][ T8287] vivid-010: unregistering radio20 [ 102.180799][ T8287] vivid-010: unregistering radio21 [ 102.185944][ T8287] vivid-010: unregistering video49 [ 102.188701][ T8287] vivid-010: unregistering video50 [ 102.194575][ T8287] vivid-010: unregistering v4l-touch10 [ 102.224183][ T8287] vivid-011: unregistering video51 [ 102.226775][ T8287] vivid-011: unregistering video52 [ 102.229566][ T8287] vivid-011: unregistering vbi22 [ 102.235927][ T8287] vivid-011: unregistering vbi23 [ 102.247098][ T8287] vivid-011: unregistering swradio11 [ 102.251856][ T8287] vivid-011: unregistering radio22 [ 102.256131][ T8287] vivid-011: unregistering radio23 [ 102.263698][ T8287] vivid-011: unregistering video53 [ 102.266168][ T8287] vivid-011: unregistering video54 [ 102.269933][ T8287] vivid-011: unregistering v4l-touch11 [ 102.309716][ T8287] vivid-012: unregistering video55 [ 102.312279][ T8287] vivid-012: unregistering video56 [ 102.315288][ T8287] vivid-012: unregistering vbi24 [ 102.320893][ T8287] vivid-012: unregistering vbi25 [ 102.327136][ T8287] vivid-012: unregistering swradio12 [ 102.335393][ T8287] vivid-012: unregistering radio24 [ 102.344208][ T8287] vivid-012: unregistering radio25 [ 102.350790][ T8287] vivid-012: unregistering video57 [ 102.361727][ T8287] vivid-012: unregistering video58 [ 102.365697][ T8287] vivid-012: unregistering v4l-touch12 [ 102.439320][ T8287] vivid-013: unregistering video59 [ 102.444551][ T8287] vivid-013: unregistering video60 [ 102.448836][ T8287] vivid-013: unregistering vbi26 [ 102.457809][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.665'. [ 102.464255][ T8287] vivid-013: unregistering vbi27 [ 102.486632][ T8287] vivid-013: unregistering swradio13 [ 102.490491][ T8287] vivid-013: unregistering radio26 [ 102.496532][ T8287] vivid-013: unregistering radio27 [ 102.499262][ T8287] vivid-013: unregistering video61 [ 102.501546][ T8287] vivid-013: unregistering video62 [ 102.507111][ T8287] vivid-013: unregistering v4l-touch13 [ 102.535141][ T8287] vivid-014: unregistering video63 [ 102.540802][ T8287] vivid-014: unregistering video64 [ 102.549824][ T8287] vivid-014: unregistering vbi28 [ 102.554253][ T8287] vivid-014: unregistering vbi29 [ 102.557424][ T8287] vivid-014: unregistering swradio14 [ 102.569118][ T8287] vivid-014: unregistering radio28 [ 102.575640][ T8287] vivid-014: unregistering radio29 [ 102.580398][ T8287] vivid-014: unregistering video65 [ 102.584930][ T8287] vivid-014: unregistering video66 [ 102.589599][ T8287] vivid-014: unregistering v4l-touch14 [ 102.620154][ T8322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8322 comm=syz.0.667 [ 102.628055][ T8287] vivid-015: unregistering video67 [ 102.630388][ T8287] vivid-015: unregistering video68 [ 102.634019][ T8287] vivid-015: unregistering vbi30 [ 102.637555][ T8287] vivid-015: unregistering vbi31 [ 102.654910][ T8287] vivid-015: unregistering swradio15 [ 102.666221][ T8325] ntfs3: Unknown parameter 'discardnfigfs' [ 102.666552][ T8287] vivid-015: unregistering radio30 [ 102.669109][ T8324] ntfs3: Unknown parameter 'discardnfigfs' [ 102.673206][ T8287] vivid-015: unregistering radio31 [ 102.677048][ T8287] vivid-015: unregistering video69 [ 102.681168][ T8287] vivid-015: unregistering video70 [ 102.709236][ T8287] vivid-015: unregistering v4l-touch15 [ 102.731951][ T8287] vivid-016: unregistering video71 [ 102.735611][ T8287] vivid-016: unregistering video72 [ 102.737828][ T8287] vivid-016: unregistering vbi32 [ 102.750683][ T8287] vivid-016: unregistering vbi33 [ 102.761522][ T8287] vivid-016: unregistering swradio16 [ 102.766708][ T8287] vivid-016: unregistering radio32 [ 102.769565][ T8287] vivid-016: unregistering radio33 [ 102.775299][ T8287] vivid-016: unregistering video73 [ 102.780739][ T8287] vivid-016: unregistering video74 [ 102.788306][ T8287] vivid-016: unregistering v4l-touch16 [ 102.791257][ T8332] netlink: 11 bytes leftover after parsing attributes in process `syz.0.671'. [ 102.794788][ T8332] netlink: 11 bytes leftover after parsing attributes in process `syz.0.671'. [ 102.800385][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 102.818462][ T8287] vivid-017: unregistering video75 [ 102.820800][ T8287] vivid-017: unregistering video76 [ 102.825220][ T8287] vivid-017: unregistering vbi34 [ 102.831787][ T8287] vivid-017: unregistering vbi35 [ 102.835819][ T8287] vivid-017: unregistering swradio17 [ 102.839113][ T8287] vivid-017: unregistering radio34 [ 102.843456][ T41] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 102.850595][ T8287] vivid-017: unregistering radio35 [ 102.853426][ T8287] vivid-017: unregistering video77 [ 102.855822][ T8287] vivid-017: unregistering video78 [ 102.858413][ T8287] vivid-017: unregistering v4l-touch17 [ 102.890127][ T8287] vivid-018: unregistering video79 [ 102.893520][ T8287] vivid-018: unregistering video80 [ 102.899316][ T8287] vivid-018: unregistering vbi36 [ 102.906552][ T8287] vivid-018: unregistering vbi37 [ 102.910114][ T8287] vivid-018: unregistering swradio18 [ 102.915900][ T8287] vivid-018: unregistering radio36 [ 102.919107][ T8287] vivid-018: unregistering radio37 [ 102.929675][ T8287] vivid-018: unregistering video81 [ 102.933119][ T8287] vivid-018: unregistering video82 [ 102.938764][ T8287] vivid-018: unregistering v4l-touch18 [ 102.984567][ T8287] vivid-019: unregistering video83 [ 102.987832][ T8287] vivid-019: unregistering video84 [ 102.991689][ T8287] vivid-019: unregistering vbi38 [ 103.000175][ T8287] vivid-019: unregistering vbi39 [ 103.004587][ T8287] vivid-019: unregistering swradio19 [ 103.015515][ T8287] vivid-019: unregistering radio38 [ 103.021035][ T8287] vivid-019: unregistering radio39 [ 103.024796][ T8287] vivid-019: unregistering video85 [ 103.027153][ T8287] vivid-019: unregistering video86 [ 103.031136][ T8287] vivid-019: unregistering v4l-touch19 [ 103.057448][ T8287] vivid-020: unregistering video87 [ 103.060324][ T8287] vivid-020: unregistering video88 [ 103.064719][ T8287] vivid-020: unregistering vbi40 [ 103.075855][ T8287] vivid-020: unregistering vbi41 [ 103.082928][ T8287] vivid-020: unregistering swradio20 [ 103.092751][ T8287] vivid-020: unregistering radio40 [ 103.097017][ T8287] vivid-020: unregistering radio41 [ 103.099601][ T8287] vivid-020: unregistering video89 [ 103.102057][ T8287] vivid-020: unregistering video90 [ 103.107098][ T8287] vivid-020: unregistering v4l-touch20 [ 103.135218][ T8287] vivid-021: unregistering video91 [ 103.137522][ T8287] vivid-021: unregistering video92 [ 103.141178][ T8287] vivid-021: unregistering vbi42 [ 103.146369][ T8287] vivid-021: unregistering vbi43 [ 103.150807][ T8287] vivid-021: unregistering swradio21 [ 103.155448][ T8287] vivid-021: unregistering radio42 [ 103.159794][ T8287] vivid-021: unregistering radio43 [ 103.163095][ T8287] vivid-021: unregistering video93 [ 103.165417][ T8287] vivid-021: unregistering video94 [ 103.167856][ T8287] vivid-021: unregistering v4l-touch21 [ 103.192825][ T8287] vivid-022: unregistering video95 [ 103.195204][ T8287] vivid-022: unregistering video96 [ 103.198286][ T8287] vivid-022: unregistering vbi44 [ 103.202242][ T8287] vivid-022: unregistering vbi45 [ 103.205213][ T8287] vivid-022: unregistering swradio22 [ 103.207671][ T8287] vivid-022: unregistering radio44 [ 103.210103][ T8287] vivid-022: unregistering radio45 [ 103.224586][ T8287] vivid-022: unregistering video97 [ 103.232218][ T8287] vivid-022: unregistering video98 [ 103.237635][ T8287] vivid-022: unregistering v4l-touch22 [ 103.267506][ T8287] vivid-023: unregistering video99 [ 103.270629][ T8287] vivid-023: unregistering video100 [ 103.274672][ T8287] vivid-023: unregistering vbi46 [ 103.277938][ T8287] vivid-023: unregistering vbi47 [ 103.280210][ T8287] vivid-023: unregistering swradio23 [ 103.283097][ T8287] vivid-023: unregistering radio46 [ 103.285376][ T8287] vivid-023: unregistering radio47 [ 103.289077][ T8287] vivid-023: unregistering video101 [ 103.291522][ T8287] vivid-023: unregistering video102 [ 103.294350][ T8287] vivid-023: unregistering v4l-touch23 [ 103.468073][ T8342] netlink: 'syz.0.675': attribute type 1 has an invalid length. [ 104.198747][ T5748] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 104.540148][ T8366] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.545215][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.589024][ T8366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.593907][ T8366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.669475][ T8379] netlink: 232 bytes leftover after parsing attributes in process `syz.1.685'. [ 104.675216][ T8379] Failed to get privilege flags for destination (handle=0x2:0xfffffffc) [ 104.703057][ T5841] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.705886][ T5841] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.708876][ T5841] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.711688][ T5841] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.717419][ T5841] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.720375][ T5841] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.731284][ T8384] geneve2: entered promiscuous mode [ 104.755000][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.760221][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.772749][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.796035][ T42] kauditd_printk_skb: 227 callbacks suppressed [ 104.796047][ T42] audit: type=1800 audit(1785483770.336:1450): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 104.806618][ T42] audit: type=1800 audit(1785483770.336:1451): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.688" name="enable" dev="sysfs" ino=2848 res=0 errno=0 [ 104.829760][ T42] audit: type=1800 audit(1785483770.366:1452): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 104.839911][ T42] audit: type=1400 audit(1785483770.366:1453): avc: denied { create } for pid=8392 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.856175][ T42] audit: type=1800 audit(1785483770.396:1454): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 104.872159][ T42] audit: type=1800 audit(1785483770.406:1455): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 104.885540][ T42] audit: type=1800 audit(1785483770.426:1456): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 104.941600][ T42] audit: type=1400 audit(1785483770.476:1457): avc: denied { create } for pid=8401 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 104.955042][ T42] audit: type=1400 audit(1785483770.486:1458): avc: denied { ioctl } for pid=8401 comm="syz.1.691" path="socket:[28740]" dev="sockfs" ino=28740 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 104.982464][ T42] audit: type=1800 audit(1785483770.516:1459): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 104.989238][ T8410] cgroup2: Unknown parameter '/' [ 105.017491][ T8412] cgroup2: Unknown parameter '/' [ 105.048205][ T5748] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 105.050161][ T8418] fuse: fd is not a fuse device [ 105.053207][ T5748] CPU: 0 UID: 0 PID: 5748 Comm: kworker/u34:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.053236][ T5748] Tainted: [L]=SOFTLOCKUP [ 105.053243][ T5748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.053255][ T5748] Workqueue: hci2 hci_rx_work [ 105.053306][ T5748] Call Trace: [ 105.053327][ T5748] [ 105.053335][ T5748] dump_stack_lvl+0x100/0x190 [ 105.053398][ T5748] sysfs_warn_dup.cold+0x1c/0x28 [ 105.053433][ T5748] sysfs_create_dir_ns+0x24b/0x2b0 [ 105.053481][ T5748] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 105.053509][ T5748] ? find_held_lock+0x2b/0x80 [ 105.053540][ T5748] ? kobject_add_internal+0x25f/0x930 [ 105.053567][ T5748] ? kobject_add_internal+0x25f/0x930 [ 105.053595][ T5748] ? do_raw_spin_unlock+0x145/0x1e0 [ 105.053622][ T5748] kobject_add_internal+0x2c8/0x930 [ 105.053650][ T5748] kobject_add+0x16a/0x1e0 [ 105.053674][ T5748] ? __pfx_kobject_add+0x10/0x10 [ 105.053697][ T5748] ? class_to_subsys+0x10f/0x150 [ 105.053756][ T5748] ? kobject_put+0xb9/0x640 [ 105.053779][ T5748] ? _raw_spin_unlock+0x28/0x50 [ 105.053803][ T5748] device_add+0x294/0x1970 [ 105.053828][ T5748] ? __pfx_dev_set_name+0x10/0x10 [ 105.053854][ T5748] ? __pfx_device_add+0x10/0x10 [ 105.053877][ T5748] ? mgmt_send_event_skb+0x2fb/0x460 [ 105.053904][ T5748] hci_conn_add_sysfs+0x1a3/0x260 [ 105.053927][ T5748] le_conn_complete_evt+0x11eb/0x1f60 [ 105.053952][ T5748] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 105.053970][ T5748] ? hci_event_packet+0x186/0xcd0 [ 105.053994][ T5748] hci_le_conn_complete_evt+0x23c/0x3a0 [ 105.054013][ T5748] ? skb_pull_data+0x15f/0x1e0 [ 105.054040][ T5748] hci_le_meta_evt+0x34a/0x5f0 [ 105.054060][ T5748] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 105.054114][ T5748] hci_event_packet+0x51c/0xcd0 [ 105.054134][ T5748] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 105.054157][ T5748] ? __pfx_hci_event_packet+0x10/0x10 [ 105.054181][ T5748] ? kcov_remote_start+0x384/0x670 [ 105.054202][ T5748] ? lockdep_hardirqs_on+0x78/0x100 [ 105.054226][ T5748] hci_rx_work+0x451/0xfc0 [ 105.054249][ T5748] process_one_work+0xa23/0x1940 [ 105.054279][ T5748] ? __pfx_process_one_work+0x10/0x10 [ 105.054304][ T5748] ? __pfx_hci_rx_work+0x10/0x10 [ 105.054329][ T5748] worker_thread+0x5ef/0xe50 [ 105.054357][ T5748] ? kthread+0x13a/0x450 [ 105.054374][ T5748] ? __pfx_worker_thread+0x10/0x10 [ 105.054392][ T5748] kthread+0x370/0x450 [ 105.054408][ T5748] ? __pfx_kthread+0x10/0x10 [ 105.054426][ T5748] ret_from_fork+0x72b/0xd50 [ 105.054452][ T5748] ? __pfx_ret_from_fork+0x10/0x10 [ 105.054475][ T5748] ? __switch_to+0x800/0x10f0 [ 105.054493][ T5748] ? __pfx_kthread+0x10/0x10 [ 105.054510][ T5748] ret_from_fork_asm+0x1a/0x30 [ 105.054546][ T5748] [ 105.054570][ T5748] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 105.156519][ T5748] Bluetooth: hci2: failed to register connection device [ 105.318575][ T8430] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 105.321102][ T8430] netlink: 228 bytes leftover after parsing attributes in process `syz.1.698'. [ 106.083839][ T8490] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 106.144205][ T8495] overlayfs: failed to resolve './file1': -2 [ 106.487343][ T8506] gadgetfs: bound to dummy_udc driver [ 106.708180][ T8511] netlink: 48 bytes leftover after parsing attributes in process `syz.0.722'. [ 106.732658][ T6129] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 106.735480][ C1] gadgetfs: connected [ 106.737544][ T6129] gadgetfs: disconnected [ 106.858236][ T8517] bridge3: entered promiscuous mode [ 106.863415][ T8517] bridge3: entered allmulticast mode [ 106.902914][ C1] gadgetfs: connected [ 106.905105][ T6129] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 106.909227][ T6129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.917470][ C1] gadgetfs: configuration #1 [ 106.925411][ T8520] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 106.928289][ T8505] gadgetfs: suspended from state 3 [ 106.932949][ T8505] gadgetfs: disconnected [ 106.935616][ T6129] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input12 [ 106.965290][ T6129] usb 6-1: USB disconnect, device number 14 [ 107.011581][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 107.015342][ T8522] netlink: 'syz.1.725': attribute type 10 has an invalid length. [ 107.019494][ T8522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.725'. [ 107.695766][ T5743] Bluetooth: hci1: Invalid handle: 0xffc9 > 0x0eff [ 107.852946][ T8554] nbd1: detected capacity change from 0 to 63 [ 107.972294][ T8566] fuse: fd is not a fuse device [ 108.337971][ T8579] bridge_slave_1: left allmulticast mode [ 108.340440][ T8579] bridge_slave_1: left promiscuous mode [ 108.344387][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.352122][ T8579] bridge_slave_0: left allmulticast mode [ 108.354912][ T8579] bridge_slave_0: left promiscuous mode [ 108.360564][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.364211][ T8582] netlink: 'syz.0.743': attribute type 1 has an invalid length. [ 108.392443][ T8582] 8021q: adding VLAN 0 to HW filter on device bond4 [ 108.397308][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'. [ 108.400182][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.743'. [ 108.416466][ T6484] block nbd1: Receive control failed (result -104) [ 108.456729][ T8585] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 108.463506][ T8585] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 108.487114][ T8587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8587 comm=syz.3.745 [ 108.634216][ T8597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.859611][ T8611] netlink: 'syz.0.753': attribute type 10 has an invalid length. [ 108.870988][ T8611] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 109.597057][ T8653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.764'. [ 109.604029][ T8650] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 109.704576][ T8657] netlink: 32 bytes leftover after parsing attributes in process `syz.0.767'. [ 109.716620][ T8660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.768'. [ 109.811206][ T8663] netlink: 348 bytes leftover after parsing attributes in process `syz.1.769'. [ 109.849570][ T42] kauditd_printk_skb: 137 callbacks suppressed [ 109.849583][ T42] audit: type=1800 audit(1785483775.386:1597): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 109.867799][ T42] audit: type=1800 audit(1785483775.406:1598): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 109.885976][ T42] audit: type=1400 audit(1785483775.426:1599): avc: denied { bind } for pid=8670 comm="syz.1.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.898901][ T42] audit: type=1400 audit(1785483775.436:1600): avc: denied { getopt } for pid=8670 comm="syz.1.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.911433][ T8671] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 109.920512][ T42] audit: type=1800 audit(1785483775.456:1601): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154497 res=0 errno=0 [ 110.101592][ T42] audit: type=1800 audit(1785483775.636:1602): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 110.128633][ T8676] netlink: 'syz.3.772': attribute type 15 has an invalid length. [ 110.135738][ T42] audit: type=1800 audit(1785483775.676:1603): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 110.154537][ T42] audit: type=1800 audit(1785483775.696:1604): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 110.172651][ T42] audit: type=1400 audit(1785483775.706:1605): avc: denied { read write } for pid=8677 comm="syz.3.774" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 110.192705][ T42] audit: type=1400 audit(1785483775.706:1606): avc: denied { open } for pid=8677 comm="syz.3.774" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 110.330275][ T8690] __nla_validate_parse: 1 callbacks suppressed [ 110.330292][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.777'. [ 110.395353][ T8692] IPv6: syztnl0: Disabled Multicast RS [ 110.524444][ T1359] IPVS: starting estimator thread 0... [ 110.622916][ T8700] IPVS: using max 44 ests per chain, 105600 per kthread [ 110.636733][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.784'. [ 110.643596][ T8716] syzkaller1: entered promiscuous mode [ 110.645433][ T8716] syzkaller1: entered allmulticast mode [ 110.670784][ T8718] netlink: 'syz.1.785': attribute type 64 has an invalid length. [ 110.674095][ T8718] netlink: 'syz.1.785': attribute type 4 has an invalid length. [ 110.678894][ T8718] netlink: 152 bytes leftover after parsing attributes in process `syz.1.785'. [ 110.972727][ T6129] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 110.998487][ T8735] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 111.121697][ T8745] 8021q: VLANs not supported on ip_vti0 [ 111.136548][ T6129] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.141069][ T6129] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.147561][ T6129] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.151427][ T6129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.182832][ T1309] block nbd1: Possible stuck request ffff888029010000: control (read@0,1024B). Runtime 2 seconds [ 111.188787][ T1309] block nbd1: Possible stuck request ffff8880290101c0: control (read@1024,1024B). Runtime 2 seconds [ 111.192248][ T1309] block nbd1: Possible stuck request ffff888029010380: control (read@2048,1024B). Runtime 2 seconds [ 111.197487][ T1309] block nbd1: Possible stuck request ffff888029010540: control (read@3072,1024B). Runtime 2 seconds [ 111.288079][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.797'. [ 111.290987][ T8761] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 111.365682][ T6129] usb 6-1: GET_CAPABILITIES returned 0 [ 111.367929][ T6129] usbtmc 6-1:16.0: can't read capabilities [ 111.571514][ T8724] netlink: 'syz.1.787': attribute type 30 has an invalid length. [ 111.627404][ T8770] netlink: 'syz.1.787': attribute type 30 has an invalid length. [ 111.724948][ T8770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8770 comm=syz.1.787 [ 111.735201][ T1351] usb 6-1: USB disconnect, device number 15 [ 112.124624][ T8772] netlink: 68 bytes leftover after parsing attributes in process `syz.0.801'. [ 112.205006][ T8775] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 112.517782][ T8786] /dev/sr0: Can't open blockdev [ 112.604158][ T8791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.610590][ T8791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.732704][ T2329] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 112.820478][ T8791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.823942][ T8791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.828471][ T8791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.832124][ T8794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.833180][ T8791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.835697][ T8794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.862681][ T1359] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 112.862685][ T2329] usb 5-1: device descriptor read/64, error -71 [ 113.037210][ T1359] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 113.044945][ T1359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 113.049820][ T1359] usb 6-1: Product: syz [ 113.051188][ T1359] usb 6-1: Manufacturer: syz [ 113.077973][ T1359] iuu_phoenix 6-1:1.0: iuu_phoenix converter detected [ 113.085253][ T1359] usb 6-1: iuu_phoenix converter now attached to ttyUSB0 [ 113.134863][ T2329] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 113.272696][ T2329] usb 5-1: device descriptor read/64, error -71 [ 113.334001][ T8795] kernel read not supported for file /sg0 (pid: 8795 comm: syz.1.808) [ 113.382791][ T2329] usb usb5-port1: attempt power cycle [ 113.722665][ T2329] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 113.743077][ T2329] usb 5-1: device descriptor read/8, error -71 [ 113.982614][ T2329] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 114.003373][ T2329] usb 5-1: device descriptor read/8, error -71 [ 114.113507][ T2329] usb usb5-port1: unable to enumerate USB device [ 114.456509][ T1359] usb 6-1: USB disconnect, device number 16 [ 114.468155][ T1359] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 114.483066][ T1359] iuu_phoenix 6-1:1.0: device disconnected [ 114.534150][ T1309] block nbd1: Possible stuck request ffff888029010000: control (read@0,1024B). Runtime 4 seconds [ 114.538404][ T1309] block nbd1: Possible stuck request ffff8880290101c0: control (read@1024,1024B). Runtime 4 seconds [ 114.542930][ T1309] block nbd1: Possible stuck request ffff888029010380: control (read@2048,1024B). Runtime 4 seconds [ 114.547579][ T1309] block nbd1: Possible stuck request ffff888029010540: control (read@3072,1024B). Runtime 4 seconds [ 114.800382][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.806047][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.810076][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.814009][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.817929][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.993466][ T42] kauditd_printk_skb: 84 callbacks suppressed [ 114.993479][ T42] audit: type=1800 audit(1785483780.526:1691): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 115.273405][ T6129] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 115.306251][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.308705][ T8799] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.311041][ T8799] bridge_slave_0: entered allmulticast mode [ 115.313911][ T8799] bridge_slave_0: entered promiscuous mode [ 115.317491][ T8799] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.319982][ T8799] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.322610][ T8799] bridge_slave_1: entered allmulticast mode [ 115.325434][ T8799] bridge_slave_1: entered promiscuous mode [ 115.342088][ T8799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.347064][ T8799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.368001][ T8799] team0: Port device team_slave_0 added [ 115.373221][ T8799] team0: Port device team_slave_1 added [ 115.395847][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.398791][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.409075][ T8799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.415692][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.418378][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.426723][ T8799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.443963][ T6129] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 115.446634][ T6129] usb 6-1: config 1 has no interface number 0 [ 115.448661][ T6129] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 115.455135][ T6129] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 115.459983][ T6129] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 115.462712][ T8799] hsr_slave_0: entered promiscuous mode [ 115.463458][ T6129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.465963][ T8799] hsr_slave_1: entered promiscuous mode [ 115.467704][ T6129] usb 6-1: Product: syz [ 115.471832][ T6129] usb 6-1: Manufacturer: syz [ 115.473876][ T6129] usb 6-1: SerialNumber: syz [ 115.479148][ T8810] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 115.486342][ T42] audit: type=1800 audit(1785483781.026:1692): pid=5738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162832 res=0 errno=0 [ 115.493042][ T42] audit: type=1800 audit(1785483781.026:1693): pid=5738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=162876 res=0 errno=0 [ 115.514821][ T42] audit: type=1800 audit(1785483781.026:1694): pid=5738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=162845 res=0 errno=0 [ 115.529303][ T42] audit: type=1800 audit(1785483781.026:1695): pid=5738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=162846 res=0 errno=0 [ 115.544607][ T42] audit: type=1800 audit(1785483781.086:1696): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 115.583050][ T42] audit: type=1800 audit(1785483781.126:1697): pid=8799 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27718 res=0 errno=0 [ 115.590821][ T42] audit: type=1800 audit(1785483781.126:1698): pid=8799 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27717 res=0 errno=0 [ 115.602826][ T42] audit: type=1800 audit(1785483781.126:1699): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164293 res=0 errno=0 [ 115.639813][ T42] audit: type=1800 audit(1785483781.176:1700): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 115.660179][ T8799] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 115.665437][ T8799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.668401][ T8799] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 115.677478][ T8799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.680504][ T8799] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 115.696081][ T8799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.698805][ T8799] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 115.704497][ T8799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.710169][ T8823] netlink: 32 bytes leftover after parsing attributes in process `syz.3.812'. [ 115.718381][ T8799] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.720671][ T8799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.723125][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.725324][ T8799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.754137][ T8799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.762473][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.767338][ T8833] netlink: 32 bytes leftover after parsing attributes in process `syz.3.813'. [ 115.771791][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.801809][ T8799] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.808821][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.811174][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.817771][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.820403][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.889072][ T8810] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 115.895271][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 115.905500][ T8848] netlink: 'syz.3.816': attribute type 32 has an invalid length. [ 115.913528][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 115.916304][ T8848] netlink: 'syz.3.816': attribute type 32 has an invalid length. [ 116.105236][ T8866] overlayfs: failed lookup in lower (newroot/212, name='file0', err=-40): overlapping layers [ 116.111138][ T8866] evm: overlay not supported [ 116.189604][ T8799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.203342][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.820'. [ 116.257404][ T8880] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 116.364377][ T8799] veth0_vlan: entered promiscuous mode [ 116.372513][ T8799] veth1_vlan: entered promiscuous mode [ 116.399544][ T8799] veth0_macvtap: entered promiscuous mode [ 116.407850][ T8799] veth1_macvtap: entered promiscuous mode [ 116.427605][ T8799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.441326][ T8799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.449362][ T8887] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 116.488309][ T8887] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref] [ 116.491868][ T8887] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 116.496278][ T8887] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff] [ 116.499245][ T8887] pci 0000:00:01.0: ROM [mem 0x00000000-0x0000ffff pref] [ 116.502148][ T8887] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 116.533456][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.535883][ T8887] pci 0000:00:01.0: Adding to iommu group 1 [ 116.543949][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.549416][ T8887] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 116.551657][ T8887] pci 0000:00:01.0: vgaarb: bridge control possible [ 116.553796][ T8887] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 116.563493][ T5841] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.572651][ T5841] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.577025][ T8887] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 116.581061][ T8887] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 116.605405][ T8887] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 116.657973][ T8887] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 116.659957][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.663050][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.664751][ T8887] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 116.671441][ T8887] [drm] features: -virgl +edid -resource_blob -host_visible [ 116.671456][ T8887] [drm] features: -context_init -blob_alignment [ 116.686858][ T8887] [drm] number of scanouts: 1 [ 116.688532][ T8887] [drm] number of cap sets: 0 [ 116.690115][ T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.694476][ T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.726181][ T8887] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2 [ 116.764752][ T8887] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device [ 116.804265][ T8890] netlink: 11 bytes leftover after parsing attributes in process `syz.5.809'. [ 116.807257][ T8890] netlink: 11 bytes leftover after parsing attributes in process `syz.5.809'. [ 116.819491][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.809'. [ 116.862789][ T5743] Bluetooth: hci0: command tx timeout [ 117.317137][ T8907] macvlan2: entered promiscuous mode [ 117.807492][ T8916] openvswitch: netlink: VXLAN extension 19 out of range max 1 [ 117.892868][ T1309] block nbd1: Possible stuck request ffff888029010000: control (read@0,1024B). Runtime 6 seconds [ 117.896282][ T1309] block nbd1: Possible stuck request ffff8880290101c0: control (read@1024,1024B). Runtime 6 seconds [ 117.900208][ T1309] block nbd1: Possible stuck request ffff888029010380: control (read@2048,1024B). Runtime 6 seconds [ 117.904864][ T1309] block nbd1: Possible stuck request ffff888029010540: control (read@3072,1024B). Runtime 6 seconds [ 118.030277][ T6129] usb 6-1: Incompatible driver and firmware versions [ 118.043464][ T6129] usb 6-1: USB disconnect, device number 17 [ 118.055691][ T8930] netlink: 68 bytes leftover after parsing attributes in process `syz.1.834'. [ 118.123351][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 118.289212][ T8946] netlink: 'syz.5.839': attribute type 1 has an invalid length. [ 118.512752][ T1359] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 118.672857][ T1359] usb 6-1: Using ep0 maxpacket: 8 [ 118.675781][ T1359] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 118.678471][ T1359] usb 6-1: config 0 has no interface number 0 [ 118.680407][ T1359] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 118.684527][ T1359] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 118.688199][ T1359] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 118.691630][ T1359] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.698621][ T1359] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 118.702244][ T1359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.708162][ T1359] usb 6-1: config 0 descriptor?? [ 118.714227][ T1359] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 118.932742][ T5743] Bluetooth: hci0: command tx timeout [ 119.099199][ T8943] binder: Bad value for 'max' [ 119.112144][ T8943] fuse: fd is not a fuse device [ 119.118658][ T1359] usb 6-1: USB disconnect, device number 18 [ 119.125956][ T1359] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 121.014528][ T5743] Bluetooth: hci0: command tx timeout [ 121.257425][ T1309] block nbd1: Possible stuck request ffff888029010000: control (read@0,1024B). Runtime 8 seconds [ 121.260834][ T1309] block nbd1: Possible stuck request ffff8880290101c0: control (read@1024,1024B). Runtime 8 seconds [ 121.264273][ T1309] block nbd1: Possible stuck request ffff888029010380: control (read@2048,1024B). Runtime 8 seconds [ 121.267691][ T1309] block nbd1: Possible stuck request ffff888029010540: control (read@3072,1024B). Runtime 8 seconds [ 123.093362][ T5743] Bluetooth: hci0: command tx timeout [ 124.230176][ T42] kauditd_printk_skb: 100 callbacks suppressed [ 124.230194][ T42] audit: type=1400 audit(1785483789.766:1801): avc: denied { write } for pid=8975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.292056][ T42] audit: type=1400 audit(1785483789.816:1802): avc: denied { write } for pid=8978 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.613560][ T25] block nbd1: Possible stuck request ffff888029010000: control (read@0,1024B). Runtime 10 seconds [ 124.617318][ T25] block nbd1: Possible stuck request ffff8880290101c0: control (read@1024,1024B). Runtime 10 seconds [ 124.621254][ T25] block nbd1: Possible stuck request ffff888029010380: control (read@2048,1024B). Runtime 10 seconds [ 124.625069][ T25] block nbd1: Possible stuck request ffff888029010540: control (read@3072,1024B). Runtime 10 seconds [ 124.824676][ T8987] netlink: 48 bytes leftover after parsing attributes in process `syz.1.843'. [ 124.836660][ T8987] netlink: 48 bytes leftover after parsing attributes in process `syz.1.843'. [ 124.847088][ T8990] 9pnet_virtio: no channels available for device 127.0.0.1 [ 124.874010][ T8994] netlink: 'syz.1.846': attribute type 1 has an invalid length. [ 124.878345][ T42] audit: type=1800 audit(1785483790.416:1803): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 124.895903][ T42] audit: type=1800 audit(1785483790.436:1804): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 124.967425][ T42] audit: type=1800 audit(1785483790.506:1805): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 124.996373][ T42] audit: type=1800 audit(1785483790.536:1806): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 125.000070][ T9002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.849'. [ 125.044476][ T9005] netlink: 156 bytes leftover after parsing attributes in process `syz.0.850'. [ 125.079154][ T9005] syzkaller0: entered promiscuous mode [ 125.092835][ T9005] syzkaller0: entered allmulticast mode [ 125.098337][ T42] audit: type=1800 audit(1785483790.636:1807): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 125.144190][ T8984] netlink: 'syz.5.844': attribute type 21 has an invalid length. [ 125.193173][ T42] audit: type=1800 audit(1785483790.736:1808): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 125.248465][ T42] audit: type=1800 audit(1785483790.786:1809): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 125.273288][ T42] audit: type=1800 audit(1785483790.806:1810): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 125.391183][ T9021] tipc: Started in network mode [ 125.392874][ T9021] tipc: Node identity 4, cluster identity 4711 [ 125.394851][ T9021] tipc: Node number set to 4 [ 125.441125][ T9027] netlink: 20 bytes leftover after parsing attributes in process `syz.5.857'. [ 125.444148][ T9027] netlink: 20 bytes leftover after parsing attributes in process `syz.5.857'. [ 125.498416][ T9013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.854'. [ 125.867289][ T9060] overlayfs: failed to resolve './file0': -2 [ 125.871492][ T9059] macvlan0: entered promiscuous mode [ 126.123667][ T9073] netlink: 48 bytes leftover after parsing attributes in process `syz.3.871'. [ 126.141175][ T9073] xt_cgroup: xt_cgroup: no path or classid specified [ 126.222396][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 126.225368][ T9076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.228293][ T9076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.242746][ T1359] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 126.403410][ T1359] usb 5-1: Using ep0 maxpacket: 8 [ 126.406538][ T1359] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.409823][ T1359] usb 5-1: config 0 has no interface number 0 [ 126.412514][ T1359] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.416869][ T1359] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 126.420422][ T1359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.429293][ T1359] usb 5-1: config 0 descriptor?? [ 126.456981][ T1359] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 126.644222][ T1359] usb 5-1: USB disconnect, device number 11 [ 126.841176][ T9085] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 126.905828][ T9089] tls_set_device_offload_rx: netdev not found [ 127.013761][ T1359] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 127.164539][ T1359] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.169743][ T1359] usb 5-1: config 0 has no interface number 0 [ 127.173166][ T1359] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 127.180220][ T1359] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.186464][ T1359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.195708][ T1359] usb 5-1: config 0 descriptor?? [ 127.212758][ T1359] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 127.317271][ T9121] fuse: Unknown parameter '000000000000000000030x00000000000000040x00000000000000040x0000000000000003' [ 127.370563][ T9121] xt_l2tp: v2 doesn't support IP mode [ 127.409238][ T9131] nftables ruleset with unbound chain [ 127.418367][ T9131] befs: (loop1): No write support. Marking filesystem read-only [ 127.427764][ T9131] befs: (loop1): unable to read superblock [ 127.429555][ T1359] usb 5-1: USB disconnect, device number 12 [ 127.585891][ T9140] netlink: zone id is out of range [ 127.591668][ T9140] xfs: Unknown parameter 'grpquotai' [ 127.624405][ T9144] netlink: 'syz.1.889': attribute type 1 has an invalid length. [ 127.624897][ T9142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.637788][ T9142] fuse: fd is not a fuse device [ 127.660697][ T9144] 8021q: adding VLAN 0 to HW filter on device bond4 [ 127.668934][ T9144] bond3: (slave bond4): making interface the new active one [ 127.678353][ T9144] bond3: (slave bond4): Enslaving as an active interface with an up link [ 127.745589][ T9150] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 127.972851][ T25] block nbd1: Possible stuck request ffff888029010000: control (read@0,1024B). Runtime 12 seconds [ 127.978837][ T25] block nbd1: Possible stuck request ffff8880290101c0: control (read@1024,1024B). Runtime 12 seconds [ 127.983455][ T25] block nbd1: Possible stuck request ffff888029010380: control (read@2048,1024B). Runtime 12 seconds [ 127.987868][ T25] block nbd1: Possible stuck request ffff888029010540: control (read@3072,1024B). Runtime 12 seconds [ 128.122635][ T1359] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 128.284025][ T1359] usb 6-1: unable to get BOS descriptor or descriptor too short [ 128.287917][ T1359] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 128.291149][ T1359] usb 6-1: can't read configurations, error -71 [ 128.933858][ T9164] netlink: 'syz.1.892': attribute type 21 has an invalid length. [ 128.936444][ T9164] netlink: 156 bytes leftover after parsing attributes in process `syz.1.892'. [ 129.784519][ T42] kauditd_printk_skb: 73 callbacks suppressed [ 129.784537][ T42] audit: type=1800 audit(1785483795.326:1884): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 129.797527][ T9166] misc userio: Can't change port type on an already running userio instance [ 129.800219][ T42] audit: type=1800 audit(1785483795.336:1885): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=167368 res=0 errno=0 [ 129.857020][ T42] audit: type=1800 audit(1785483795.396:1886): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 129.960554][ T42] audit: type=1800 audit(1785483795.496:1887): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 130.007347][ T42] audit: type=1800 audit(1785483795.546:1888): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 130.041412][ T42] audit: type=1400 audit(1785483795.576:1889): avc: denied { read } for pid=9175 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.065245][ T42] audit: type=1800 audit(1785483795.606:1890): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 130.075326][ T42] audit: type=1326 audit(1785483795.616:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.1.897" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ca99e019 code=0x7ffc0000 [ 130.087788][ T42] audit: type=1326 audit(1785483795.616:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.1.897" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ca99e019 code=0x7ffc0000 [ 130.097439][ T42] audit: type=1326 audit(1785483795.616:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.1.897" exe="/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f65ca99e019 code=0x7ffc0000 [ 130.519237][ T9183] netlink: 'syz.3.898': attribute type 10 has an invalid length. [ 130.521787][ T9183] syz_tun: entered promiscuous mode [ 130.525391][ T9183] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 130.599071][ T9142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.605711][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'. [ 130.919218][ T9200] kvm: user requested TSC rate below hardware speed [ 130.969337][ T9204] netlink: 64 bytes leftover after parsing attributes in process `syz.5.904'. [ 131.002386][ T9206] netlink: 48 bytes leftover after parsing attributes in process `syz.1.906'. [ 131.054552][ T9209] openvswitch: netlink: Port -2146435068 exceeds max allowable 65535 [ 131.173638][ T9224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.913'. [ 131.177224][ T9224] Unknown options in mask b7f2 [ 131.343843][ T25] block nbd1: Possible stuck request ffff888029010000: control (read@0,1024B). Runtime 14 seconds [ 131.347889][ T25] block nbd1: Possible stuck request ffff8880290101c0: control (read@1024,1024B). Runtime 14 seconds [ 131.352115][ T25] block nbd1: Possible stuck request ffff888029010380: control (read@2048,1024B). Runtime 14 seconds [ 131.356482][ T25] block nbd1: Possible stuck request ffff888029010540: control (read@3072,1024B). Runtime 14 seconds [ 131.361061][ T1359] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 131.522815][ T1359] usb 10-1: Using ep0 maxpacket: 8 [ 131.527483][ T1359] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 131.530392][ T1359] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 131.536746][ T1359] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 131.541590][ T1359] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.546528][ T1359] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.551199][ T1359] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.555853][ T1359] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 131.561270][ T1359] usb 10-1: config 168 interface 0 has no altsetting 0 [ 131.580615][ T1359] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 131.584100][ T1359] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 131.588990][ T1359] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 131.593891][ T1359] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.598849][ T1359] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.603616][ T1359] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.608622][ T1359] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 131.614287][ T1359] usb 10-1: config 168 interface 0 has no altsetting 0 [ 131.618303][ T1359] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 131.621485][ T1359] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 131.626228][ T1359] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 131.630966][ T1359] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.635984][ T1359] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.640754][ T1359] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.645545][ T1359] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 131.651162][ T1359] usb 10-1: config 168 interface 0 has no altsetting 0 [ 131.657529][ T1359] usb 10-1: string descriptor 0 read error: -22 [ 131.660331][ T1359] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 131.664210][ T1359] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.675755][ T1359] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 132.351954][ T9270] erspan0: entered promiscuous mode [ 132.432849][ T9275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.930'. [ 132.486473][ T9282] comedi comedi3: no devices specified [ 132.491187][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'. [ 132.696377][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.408391][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 133.567363][ T9305] netlink: 56 bytes leftover after parsing attributes in process `syz.0.938'. [ 133.751231][ T9313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.940'. [ 133.755144][ T9313] x_tables: ip_tables: sctp.0 match: invalid size 296 (kernel) != (user) 344 [ 133.906851][ T149] usb 10-1: USB disconnect, device number 2 [ 134.207646][ T9327] netlink: 48 bytes leftover after parsing attributes in process `syz.1.945'. [ 134.214955][ T9327] overlay: filesystem on ./bus not supported as upperdir [ 134.217957][ T9327] smc: net device dummy0 applied user defined pnetid SYZ0 [ 134.388340][ T9334] can: request_module (can-proto-0) failed. [ 134.695144][ T25] block nbd1: Possible stuck request ffff888029010000: control (read@0,1024B). Runtime 16 seconds [ 134.700094][ T25] block nbd1: Possible stuck request ffff8880290101c0: control (read@1024,1024B). Runtime 16 seconds [ 134.706352][ T25] block nbd1: Possible stuck request ffff888029010380: control (read@2048,1024B). Runtime 16 seconds [ 134.711126][ T25] block nbd1: Possible stuck request ffff888029010540: control (read@3072,1024B). Runtime 16 seconds [ 134.780899][ T9368] openvswitch: netlink: Missing key (keys=40, expected=100) [ 134.813094][ T42] kauditd_printk_skb: 6655 callbacks suppressed [ 134.813112][ T42] audit: type=1800 audit(1785483800.356:8549): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 134.813217][ T9372] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.825256][ T9372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.829098][ T9372] IPv6: NLM_F_CREATE should be set when creating new route [ 134.838713][ T42] audit: type=1800 audit(1785483800.376:8550): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 134.864206][ T9372] syzkaller0: entered promiscuous mode [ 134.866701][ T9372] syzkaller0: entered allmulticast mode [ 134.877766][ T42] audit: type=1400 audit(1785483800.416:8551): avc: denied { listen } for pid=9371 comm="syz.0.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 134.916779][ T42] audit: type=1400 audit(1785483800.456:8552): avc: denied { write } for pid=9375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.974924][ T42] audit: type=1400 audit(1785483800.516:8553): avc: denied { write } for pid=9379 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.041381][ T42] audit: type=1800 audit(1785483800.576:8554): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 135.092666][ T1359] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 135.264577][ T1359] usb 6-1: config 0 has no interfaces? [ 135.266408][ T1359] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 135.269358][ T1359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.273956][ T1359] usb 6-1: config 0 descriptor?? [ 135.275625][ T42] audit: type=1800 audit(1785483800.816:8555): pid=5738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175950 res=0 errno=0 [ 135.282160][ T42] audit: type=1800 audit(1785483800.816:8556): pid=5738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=175979 res=0 errno=0 [ 135.290250][ T42] audit: type=1800 audit(1785483800.816:8557): pid=5738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=175957 res=0 errno=0 [ 135.297733][ T42] audit: type=1800 audit(1785483800.816:8558): pid=5738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=175958 res=0 errno=0 [ 135.511058][ T1351] usb 6-1: USB disconnect, device number 21 [ 135.637712][ T9412] __nla_validate_parse: 2 callbacks suppressed [ 135.637725][ T9412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.964'. [ 135.647408][ T9412] overlay: filesystem on ./file0 not supported as upperdir [ 135.687793][ T9423] file system registered [ 135.739779][ T9409] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 135.783701][ T9428] netlink: 'syz.5.966': attribute type 21 has an invalid length. [ 135.973228][ T9452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.971'. [ 136.013974][ T9452] loop3: detected capacity change from 0 to 7 [ 136.023809][ T9452] loop3: p1 p4 [ 136.030087][ T9452] loop3: partition table partially beyond EOD, truncated [ 136.041042][ T9452] loop3: p4 start 65535 is beyond EOD, truncated [ 136.041776][ T9456] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 136.132554][ T9466] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 136.144736][ T5738] udevd[5738]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 136.342679][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 136.353772][ T9482] loop5: detected capacity change from 0 to 2640 [ 136.362030][ T9482] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 136.365182][ T9482] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 136.367848][ T9482] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 136.370600][ T9482] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 136.373286][ T9482] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 136.376035][ T9482] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 136.378699][ T9482] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 136.381449][ T9482] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 136.385083][ T9482] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 136.394419][ T9482] Buffer I/O error on dev loop5, logical block 9, lost async page write [ 136.419382][ T9482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.980'. [ 136.429862][ T5888] Process accounting resumed [ 136.453163][ T9487] netlink: 24 bytes leftover after parsing attributes in process `syz.5.982'. [ 136.512747][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 136.517011][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 136.519701][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.523037][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.527038][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.530325][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.534414][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.537376][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.762142][ T1351] usb 6-1: USB disconnect, device number 22 [ 136.966731][ T9499] can0: slcan on ptm0. [ 137.068212][ T9500] can0 (unregistered): slcan off ptm0. [ 137.356860][ T9527] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 137.362324][ T9526] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 137.533719][ T9545] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 137.607919][ T9547] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.658656][ T9554] netlink: 44 bytes leftover after parsing attributes in process `syz.0.998'. [ 137.664054][ T9554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.998'. [ 137.709042][ T9547] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.793491][ T9547] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.874362][ T9547] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.969505][ T9561] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1001'. [ 138.055085][ T25] block nbd1: Possible stuck request ffff888029010000: control (read@0,1024B). Runtime 18 seconds [ 138.058642][ T25] block nbd1: Possible stuck request ffff8880290101c0: control (read@1024,1024B). Runtime 18 seconds [ 138.062046][ T25] block nbd1: Possible stuck request ffff888029010380: control (read@2048,1024B). Runtime 18 seconds [ 138.065487][ T25] block nbd1: Possible stuck request ffff888029010540: control (read@3072,1024B). Runtime 18 seconds [ 138.201846][ T9577] nbd: must specify an index to disconnect [ 138.205958][ T9577] netlink: 'syz.1.1006': attribute type 1 has an invalid length. [ 138.454780][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1011'. [ 138.500693][ T9591] team0: Port device team_slave_0 removed [ 138.843050][ T6129] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 138.883165][ T2329] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 138.973644][ T6129] usb 6-1: device descriptor read/64, error -71 [ 139.032849][ T2329] usb 10-1: Using ep0 maxpacket: 32 [ 139.036470][ T2329] usb 10-1: config index 0 descriptor too short (expected 15270, got 18) [ 139.041207][ T2329] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 139.044734][ T2329] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.047956][ T2329] usb 10-1: Product: syz [ 139.049564][ T2329] usb 10-1: Manufacturer: syz [ 139.051208][ T2329] usb 10-1: SerialNumber: syz [ 139.054892][ T2329] usb 10-1: config 0 descriptor?? [ 139.061440][ T2329] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 139.064902][ T2329] dvb-usb: bulk message failed: -22 (4/0) [ 139.068156][ T2329] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 139.071909][ T2329] dvb-usb: bulk message failed: -22 (5/0) [ 139.074054][ T2329] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 139.080896][ T2329] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.085720][ T2329] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 139.088898][ T2329] usb 10-1: media controller created [ 139.099863][ T2329] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.110411][ T2329] usb 10-1: selecting invalid altsetting 3 [ 139.112632][ T2329] ttusb2: set interface to alts=3 failed [ 139.131806][ T2329] DVB: Unable to find symbol tda10086_attach() [ 139.134286][ T2329] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 139.137685][ T2329] dvb-usb: bulk message failed: -22 (4/0) [ 139.139858][ T2329] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 139.143548][ T2329] dvb-usb: bulk message failed: -22 (5/0) [ 139.145531][ T2329] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 139.149078][ T2329] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 139.212839][ T6129] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 139.263870][ T9596] dvb-usb: bulk message failed: -22 (7/0) [ 139.267182][ T9596] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 139.271806][ T9596] ttusb2: i2c transfer failed. [ 139.274988][ T2329] usb 10-1: USB disconnect, device number 3 [ 139.296728][ T2329] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 139.342900][ T6129] usb 6-1: device descriptor read/64, error -71 [ 139.452962][ T6129] usb usb6-port1: attempt power cycle [ 139.747068][ T9603] binder: 9602:9603 ioctl c0306201 200000000040 returned -14 [ 139.792900][ T6129] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 139.813035][ T6129] usb 6-1: device descriptor read/8, error -71 [ 139.827086][ T42] kauditd_printk_skb: 152 callbacks suppressed [ 139.827098][ T42] audit: type=1400 audit(1785483805.366:8711): avc: denied { bind } for pid=9608 comm="syz.5.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.859822][ T42] audit: type=1800 audit(1785483805.396:8712): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 139.891010][ T42] audit: type=1800 audit(1785483805.426:8713): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 139.918799][ T42] audit: type=1800 audit(1785483805.456:8714): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 139.934972][ T42] audit: type=1800 audit(1785483805.476:8715): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 139.951522][ T9622] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1022'. [ 139.976785][ T42] audit: type=1800 audit(1785483805.516:8716): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 140.002459][ T42] audit: type=1800 audit(1785483805.536:8717): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 140.015837][ T9627] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 140.024558][ T9627] netlink: 'syz.5.1022': attribute type 64 has an invalid length. [ 140.074040][ T6129] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 140.093044][ T6129] usb 6-1: device descriptor read/8, error -71 [ 140.099367][ T42] audit: type=1800 audit(1785483805.636:8718): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 140.202897][ T6129] usb usb6-port1: unable to enumerate USB device [ 140.252999][ T2329] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 140.298053][ T42] audit: type=1800 audit(1785483805.836:8719): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 140.306546][ T42] audit: type=1400 audit(1785483805.846:8720): avc: denied { accept } for pid=9632 comm="syz.5.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 140.345738][ T9636] syzkaller0: entered promiscuous mode [ 140.348070][ T9636] syzkaller0: entered allmulticast mode [ 140.403023][ T2329] usb 5-1: Using ep0 maxpacket: 32 [ 140.407691][ T2329] usb 5-1: unable to get BOS descriptor or descriptor too short [ 140.412145][ T2329] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 140.415966][ T2329] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 140.419492][ T2329] usb 5-1: config 14 has no interface number 0 [ 140.422240][ T2329] usb 5-1: config 14 has no interface number 1 [ 140.424976][ T2329] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 140.429412][ T2329] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 140.434663][ T2329] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 140.439403][ T2329] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 140.444192][ T2329] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 140.448813][ T2329] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.454326][ T2329] usb 5-1: config 14 interface 57 has no altsetting 0 [ 140.457142][ T2329] usb 5-1: config 14 interface 228 has no altsetting 0 [ 140.462048][ T2329] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 140.466272][ T2329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.469607][ T2329] usb 5-1: Product: syz [ 140.471386][ T2329] usb 5-1: Manufacturer: syz [ 140.473490][ T2329] usb 5-1: SerialNumber: syz [ 140.872051][ T9651] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.891146][ T2329] legousbtower 5-1:14.57: interrupt endpoints not found [ 140.991335][ T9651] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.068188][ T9651] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.150271][ T9651] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.292380][ T2329] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 141.300048][ T2329] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 141.303426][ T5841] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.307048][ T5841] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.312845][ T5841] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.316397][ T5841] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.425066][ T25] block nbd1: Possible stuck request ffff888029010000: control (read@0,1024B). Runtime 20 seconds [ 141.428515][ T25] block nbd1: Possible stuck request ffff8880290101c0: control (read@1024,1024B). Runtime 20 seconds [ 141.431970][ T25] block nbd1: Possible stuck request ffff888029010380: control (read@2048,1024B). Runtime 20 seconds [ 141.435481][ T25] block nbd1: Possible stuck request ffff888029010540: control (read@3072,1024B). Runtime 20 seconds [ 141.826260][ T9678] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 141.831157][ T9678] Cannot find add_set index 0 as target [ 141.835295][ T9679] Cannot find add_set index 0 as target [ 142.207393][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1024'. [ 142.391416][ T9695] bond0: (slave syz_tun): Releasing backup interface [ 142.404832][ T9702] fuse: fd is not a fuse device [ 142.775238][ T9728] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1053'. [ 142.911183][ T9731] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 143.008034][ T9732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1055'. [ 143.008741][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 143.018303][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 143.025634][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 143.030667][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 143.034323][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.397474][ T149] usb 5-1: USB disconnect, device number 13 [ 143.412031][ T149] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 143.478067][ T9758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.571464][ T9773] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1065'. [ 143.709717][ T9736] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.712770][ T9736] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.715393][ T9736] bridge_slave_0: entered allmulticast mode [ 143.718865][ T9736] bridge_slave_0: entered promiscuous mode [ 143.723307][ T9736] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.726237][ T9736] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.728622][ T9736] bridge_slave_1: entered allmulticast mode [ 143.732379][ T9736] bridge_slave_1: entered promiscuous mode [ 143.764563][ T9736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.770681][ T9736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.787529][ T9736] team0: Port device team_slave_0 added [ 143.791591][ T9736] team0: Port device team_slave_1 added [ 143.822139][ T9790] netlink: 'syz.1.1068': attribute type 1 has an invalid length. [ 143.822322][ T9736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.827294][ T9736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.835265][ T9736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.841829][ T9791] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 143.858639][ T9790] bond5: option mode: invalid value (9) [ 143.861334][ T9790] bond5 (unregistering): Released all slaves [ 143.875658][ T9736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.877833][ T9736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.885787][ T9736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.908899][ T9736] hsr_slave_0: entered promiscuous mode [ 143.911094][ T9736] hsr_slave_1: entered promiscuous mode [ 143.913328][ T9736] debugfs: 'hsr0' already exists in 'hsr' [ 143.915183][ T9736] Cannot create hsr debugfs directory [ 144.064757][ T9736] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 144.069157][ T9736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.072105][ T9736] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 144.076623][ T9736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.079628][ T9736] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 144.084347][ T9736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.087186][ T9736] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 144.092087][ T9736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 144.114518][ T9736] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.117425][ T9736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.120451][ T9736] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.123373][ T9736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.162712][ T9736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.175617][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.183821][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.194055][ T9736] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.200862][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.203971][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.218156][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.221033][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.347886][ T9814] netlink: 'syz.1.1074': attribute type 23 has an invalid length. [ 144.559283][ T9831] fuse: fd is not a fuse device [ 144.566292][ T9736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.618075][ T9837] vlan2: entered promiscuous mode [ 144.620382][ T9837] syz_tun: entered promiscuous mode [ 144.624362][ T9837] vlan2: entered allmulticast mode [ 144.626219][ T9837] syz_tun: entered allmulticast mode [ 144.753695][ T9736] veth0_vlan: entered promiscuous mode [ 144.767125][ T9736] veth1_vlan: entered promiscuous mode [ 144.776453][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 144.779837][ T25] block nbd1: Possible stuck request ffff888029010000: control (read@0,1024B). Runtime 22 seconds [ 144.784658][ T25] block nbd1: Possible stuck request ffff8880290101c0: control (read@1024,1024B). Runtime 22 seconds [ 144.790055][ T25] block nbd1: Possible stuck request ffff888029010380: control (read@2048,1024B). Runtime 22 seconds [ 144.792003][ T9736] veth0_macvtap: entered promiscuous mode [ 144.794023][ T25] block nbd1: Possible stuck request ffff888029010540: control (read@3072,1024B). Runtime 22 seconds [ 144.799890][ T9736] veth1_macvtap: entered promiscuous mode [ 144.817406][ T9736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.827361][ T9736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.835720][ T5841] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.874720][ T5841] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.885404][ T5841] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.893771][ T42] kauditd_printk_skb: 198 callbacks suppressed [ 144.893782][ T42] audit: type=1800 audit(1785483810.426:8919): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 144.924938][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.929700][ T42] audit: type=1800 audit(1785483810.456:8920): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=188296 res=0 errno=0 [ 144.944667][ T9859] ================================================================== [ 144.946906][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.947551][ T9859] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 144.954034][ T9859] Read of size 64 at addr ffffffff9ba55400 by task syz.0.1082/9859 [ 144.956642][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.957432][ T42] audit: type=1800 audit(1785483810.466:8921): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=188422 res=0 errno=0 [ 144.957462][ T42] audit: type=1400 audit(1785483810.476:8922): avc: denied { read } for pid=9858 comm="syz.0.1082" name="g1" dev="configfs" ino=14096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 144.957484][ T42] audit: type=1400 audit(1785483810.476:8923): avc: denied { read open } for pid=9858 comm="syz.0.1082" path="/321/my_configfs/usb_gadget/g1" dev="configfs" ino=14096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 144.957506][ T42] audit: type=1800 audit(1785483810.476:8924): pid=9859 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1082" name="UDC" dev="configfs" ino=38092 res=0 errno=0 [ 144.958100][ T9859] [ 144.958112][ T9859] CPU: 3 UID: 0 PID: 9859 Comm: syz.0.1082 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.958132][ T9859] Tainted: [L]=SOFTLOCKUP [ 144.958137][ T9859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.958145][ T9859] Call Trace: [ 144.958166][ T9859] [ 144.958171][ T9859] dump_stack_lvl+0x100/0x190 [ 144.958215][ T9859] print_report+0x13d/0x4b0 [ 144.958241][ T9859] ? __virt_addr_valid+0x239/0x430 [ 144.958273][ T9859] ? usb_copy_descriptors+0x18d/0x320 [ 144.958290][ T9859] kasan_report+0xdf/0x1c0 [ 144.958313][ T9859] ? usb_copy_descriptors+0x18d/0x320 [ 144.958330][ T9859] kasan_check_range+0x10f/0x1e0 [ 144.958619][ T9859] __asan_memcpy+0x23/0x60 [ 144.958633][ T9859] usb_copy_descriptors+0x18d/0x320 [ 144.958650][ T9859] usb_assign_descriptors+0xd2/0x470 [ 144.958667][ T9859] f_audio_bind+0x243a/0x3950 [ 144.958688][ T9859] ? __pfx_f_audio_bind+0x10/0x10 [ 144.958704][ T9859] usb_add_function+0x219/0x890 [ 144.958718][ T9859] ? composite_dev_prepare+0x1d1/0x420 [ 144.958735][ T9859] configfs_composite_bind+0xd83/0x1960 [ 144.958750][ T9859] ? kernfs_create_link+0x1bd/0x240 [ 144.958802][ T9859] gadget_bind_driver+0x28c/0xbf0 [ 144.958823][ T9859] ? __pfx_gadget_bind_driver+0x10/0x10 [ 144.958842][ T9859] really_probe+0x241/0xa60 [ 144.958874][ T9859] __driver_probe_device+0x20e/0x450 [ 144.958889][ T9859] driver_probe_device+0x4a/0x140 [ 144.958905][ T9859] __driver_attach+0x21f/0x5b0 [ 144.958922][ T9859] ? __pfx___driver_attach+0x10/0x10 [ 144.958937][ T9859] bus_for_each_dev+0x13e/0x1d0 [ 144.958950][ T9859] ? __pfx_bus_for_each_dev+0x10/0x10 [ 144.958961][ T9859] ? bus_add_driver+0x2b5/0x5b0 [ 144.958976][ T9859] bus_add_driver+0x305/0x5b0 [ 144.958990][ T9859] driver_register+0x1e2/0x360 [ 144.959006][ T9859] usb_gadget_register_driver_owner+0x132/0x210 [ 144.959025][ T9859] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 144.959040][ T9859] configfs_write_iter+0x302/0x4e0 [ 144.959054][ T9859] vfs_write+0x6ac/0x1050 [ 144.959072][ T9859] ? __pfx_configfs_write_iter+0x10/0x10 [ 144.959090][ T9859] ? __pfx_vfs_write+0x10/0x10 [ 144.959110][ T9859] ksys_write+0x12a/0x250 [ 144.959126][ T9859] ? __pfx_ksys_write+0x10/0x10 [ 144.959145][ T9859] do_syscall_64+0x115/0x870 [ 144.959160][ T9859] ? clear_bhb_loop+0x40/0x90 [ 144.959174][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.959186][ T9859] RIP: 0033:0x7f074759e019 [ 144.959196][ T9859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.959209][ T9859] RSP: 002b:00007f0748445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.959236][ T9859] RAX: ffffffffffffffda RBX: 00007f0747825fa0 RCX: 00007f074759e019 [ 144.959244][ T9859] RDX: 000000000000000c RSI: 0000200000001f00 RDI: 0000000000000009 [ 144.959252][ T9859] RBP: 00007f074763500c R08: 0000000000000000 R09: 0000000000000000 [ 144.959260][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.959268][ T9859] R13: 00007f0747826038 R14: 00007f0747825fa0 R15: 00007ffc31c3b788 [ 144.959280][ T9859] [ 144.959285][ T9859] [ 145.094400][ T9859] The buggy address belongs to the variable: [ 145.096566][ T9859] ac_header_desc+0x0/0x40 [ 145.098115][ T9859] [ 145.098970][ T9859] The buggy address belongs to the physical page: [ 145.101131][ T9859] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ba55 [ 145.104051][ T9859] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 145.106723][ T9859] raw: 00fff00000002000 ffffea00006e9548 ffffea00006e9548 0000000000000000 [ 145.109547][ T9859] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 145.112356][ T9859] page dumped because: kasan: bad access detected [ 145.114489][ T9859] page_owner info is not present (never set?) [ 145.116558][ T9859] [ 145.117379][ T9859] Memory state around the buggy address: [ 145.119328][ T9859] ffffffff9ba55300: 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 [ 145.122022][ T9859] ffffffff9ba55380: 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 145.124714][ T9859] >ffffffff9ba55400: 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 145.127334][ T9859] ^ [ 145.128888][ T9859] ffffffff9ba55480: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 145.131459][ T9859] ffffffff9ba55500: 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 145.134214][ T9859] ================================================================== [ 145.137114][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 145.137863][ T5743] Bluetooth: hci2: command tx timeout [ 145.142064][ T24] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 145.150713][ T9859] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 145.153123][ T9859] CPU: 3 UID: 0 PID: 9859 Comm: syz.0.1082 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.156848][ T9859] Tainted: [L]=SOFTLOCKUP [ 145.158332][ T9859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.161579][ T9859] Call Trace: [ 145.162715][ T9859] [ 145.163774][ T9859] dump_stack_lvl+0x100/0x190 [ 145.165357][ T9859] vpanic+0x552/0x970 [ 145.166744][ T9859] ? __pfx_vpanic+0x10/0x10 [ 145.168314][ T9859] ? mark_held_locks+0x40/0x70 [ 145.169943][ T9859] ? usb_copy_descriptors+0x18d/0x320 [ 145.171743][ T9859] panic+0xd1/0xe0 [ 145.173025][ T9859] ? __pfx_panic+0x10/0x10 [ 145.174590][ T9859] ? usb_copy_descriptors+0x18d/0x320 [ 145.176437][ T9859] ? preempt_schedule_common+0x42/0xc0 [ 145.178323][ T9859] check_panic_on_warn.cold+0x19/0x34 [ 145.180131][ T9859] end_report.part.0+0x3a/0x90 [ 145.181818][ T9859] kasan_report.cold+0xe/0x18 [ 145.183543][ T9859] ? usb_copy_descriptors+0x18d/0x320 [ 145.185584][ T9859] kasan_check_range+0x10f/0x1e0 [ 145.187317][ T9859] __asan_memcpy+0x23/0x60 [ 145.188894][ T9859] usb_copy_descriptors+0x18d/0x320 [ 145.190672][ T9859] usb_assign_descriptors+0xd2/0x470 [ 145.192430][ T9859] f_audio_bind+0x243a/0x3950 [ 145.194097][ T9859] ? __pfx_f_audio_bind+0x10/0x10 [ 145.195866][ T9859] usb_add_function+0x219/0x890 [ 145.197505][ T9859] ? composite_dev_prepare+0x1d1/0x420 [ 145.199398][ T9859] configfs_composite_bind+0xd83/0x1960 [ 145.201328][ T9859] ? kernfs_create_link+0x1bd/0x240 [ 145.203111][ T9859] gadget_bind_driver+0x28c/0xbf0 [ 145.204831][ T9859] ? __pfx_gadget_bind_driver+0x10/0x10 [ 145.206759][ T9859] really_probe+0x241/0xa60 [ 145.208331][ T9859] __driver_probe_device+0x20e/0x450 [ 145.210167][ T9859] driver_probe_device+0x4a/0x140 [ 145.211866][ T9859] __driver_attach+0x21f/0x5b0 [ 145.213593][ T9859] ? __pfx___driver_attach+0x10/0x10 [ 145.215453][ T9859] bus_for_each_dev+0x13e/0x1d0 [ 145.217100][ T9859] ? __pfx_bus_for_each_dev+0x10/0x10 [ 145.219035][ T9859] ? bus_add_driver+0x2b5/0x5b0 [ 145.220744][ T9859] bus_add_driver+0x305/0x5b0 [ 145.222339][ T9859] driver_register+0x1e2/0x360 [ 145.224022][ T9859] usb_gadget_register_driver_owner+0x132/0x210 [ 145.226097][ T9859] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 145.228047][ T9859] configfs_write_iter+0x302/0x4e0 [ 145.229849][ T9859] vfs_write+0x6ac/0x1050 [ 145.231337][ T9859] ? __pfx_configfs_write_iter+0x10/0x10 [ 145.233360][ T9859] ? __pfx_vfs_write+0x10/0x10 [ 145.235139][ T9859] ksys_write+0x12a/0x250 [ 145.236622][ T9859] ? __pfx_ksys_write+0x10/0x10 [ 145.238268][ T9859] do_syscall_64+0x115/0x870 [ 145.239933][ T9859] ? clear_bhb_loop+0x40/0x90 [ 145.241601][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.243619][ T9859] RIP: 0033:0x7f074759e019 [ 145.245123][ T9859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.251610][ T9859] RSP: 002b:00007f0748445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.254444][ T9859] RAX: ffffffffffffffda RBX: 00007f0747825fa0 RCX: 00007f074759e019 [ 145.257105][ T9859] RDX: 000000000000000c RSI: 0000200000001f00 RDI: 0000000000000009 [ 145.259850][ T9859] RBP: 00007f074763500c R08: 0000000000000000 R09: 0000000000000000 [ 145.262513][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.265390][ T9859] R13: 00007f0747826038 R14: 00007f0747825fa0 R15: 00007ffc31c3b788 [ 145.268086][ T9859] [ 145.269803][ T9859] Kernel Offset: disabled [ 145.271268][ T9859] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:43:30 Registers: info registers vcpu 0 CPU#0 RAX=000000590f10fa87 RBX=ffff88806a423d80 RCX=00000000000006e0 RDX=0000000000000059 RSI=ffffffff81fa1375 RDI=ffff8880250cca80 RBP=00000021b97a8f9e RSP=ffffc90003087a10 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92000610f4c R13=0000000000000001 R14=0000000000000001 R15=ffff88806a423dc0 RIP=ffffffff81fa1388 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd9d96ffe9c CR3=0000000058cc9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffffd0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000082000020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 0000555893b302a0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f89cf7f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a55a3e5418a4a 2a2a2a2a4159434e ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 754f4645425d051a 474f475a05414945 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6573756f6d2d746e 650039323100303a 393532622f30303a 3231303049500030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000d1 0000000000000030 000000000000006d 766b2f6373696d2f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73616c632f7379a2 2f002f7375622f43 79732f002f6d6519 05125c01061a425c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f737f7ffff7ffb7 6f7f7fffff7f7f67 ff73ff7fffff7f7f 6d7f7d77ff7feffe ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6261545f4253555f 554d45515f554d45 512d6273752f6469 2d79622f7475706e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555867641560 00000035636f6c62 0000000000000021 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 0000000000000030 0000000000000008 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000039 RCX=ffffffff81e8b18e RDX=0000000000000001 RSI=0000000000000000 RDI=ffff8880268bca80 RBP=0000000000000001 RSP=ffffc9000622f788 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92000c45ef4 R13=0000000000000200 R14=ffff88802d194a80 R15=ffffc9000622f858 RIP=ffffffff8bbef2e0 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7983baae9c CR3=00000000339df000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=0000000000000000 Opmask02=000000000fffffff Opmask03=0000000002082001 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555893b49000 0000555893b49000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555893b205b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555893b1dd70 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373262be0c17483 7373262eb574c259 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ed4cd85df1ad6f7b 7373737626fa4858 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f6d697377685f31 3132303863616d2f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45440065676e6168 633d4e4f49544341 0000000000001011 0000000000797400 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff81fdc7c2 RDX=ffff88802f5e4a80 RSI=ffffffff81fdc79c RDI=ffff88802f5e4a80 RBP=ffff88806a743500 RSP=ffffc90003ddf7e0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4e86a1 R14=0000000000000001 R15=ffff88806a63c880 RIP=ffffffff81fdc79e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f32b67d4e9c CR3=00000000585af000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65cb75d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcdd0d0d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcdd0d0d6 00007ffdcdd0d0dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65caa355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65caa3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65caa35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65caa35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65cabf2600 00007f65cabf25e0 00007f65cabf25e8 00007f65cabf2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f65cabf25f8 00007f65cabf25c8 00007f65cabf2600 00007f65cabf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000002a374 RBX=ffffc90004106cba RCX=ffffc90004559000 RDX=0000000000080000 RSI=ffffffff8bb7a87d RDI=ffff88802d194a80 RBP=0000000000000002 RSP=ffffc90004106828 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000002 R11=0000000000017aca R12=ffffc90004106cba R13=ffffc90084106cb0 R14=ffffc900041068ca R15=dffffc0000000000 RIP=ffffffff8bb7a87d RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f07484456c0 ffffffff 00c00000 GS =0000 ffff8880d60da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f07477d1b00 CR3=0000000013303000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7570637265705f65 676173752e746363 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc31c3bc76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc31c3bc76 00007ffc31c3bc7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07476355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f074763562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0747635793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0747635621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000