last executing test programs: 1m25.634161159s ago: executing program 3 (id=506): r0 = getpgid(0xffffffffffffffff) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) (async) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000000)={@host}) 1m25.571352053s ago: executing program 3 (id=508): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xfffffffa, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) shmat(r2, &(0x7f00003b7000/0x1000)=nil, 0x6000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0}) syz_pidfd_open(0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xfffffcd5, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0x10}]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x5, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x806, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000080)={r8, 0x3, r7}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000100)={0xf}, 0x1) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1m22.598667925s ago: executing program 3 (id=561): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a\x00', @ANYRES32], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = open(&(0x7f00000000c0)='./file0/file1\x00', 0x4048840, 0x44) fcntl$setlease(r2, 0x400, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) r4 = socket(0x200000100000011, 0x803, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendmmsg$sock(r4, &(0x7f0000002980)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000200)="041f999c295f034799638bd388a8", 0xe}], 0x1}}], 0x1, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYRES64=r5, @ANYRESDEC=0x0, @ANYBLOB="2c670081000000000000df15e44d6f29f241f3ae7e810e951cf2d380850012f5ae68495a2d5a3cce5eb096b3a7761fefe43b95afb5dffaed1a5eb0ab18797cbb349cc2644e30fd8466adfff26e4f651e827a80e0003d89516b006c9b1abba983ca01a120e0a17060c40917cc2457842dcc6b456bec5376584e5ccb71fd08f6847364dbcdb45aefc5985ea163d3270c2e872babe4581b55dfab33ba9135e5b9d9e401857778c6f41f3e3be31550f3b46d97b80dbd0d1bd5ccb94cc2c46616462747334715fb7ff8c85e7249082fa132cde6de5e8e8e1ad6b1f41ce0", @ANYRES16=r0, @ANYBLOB=',\x00']) read$FUSE(r8, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9}, 0x50) r10 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x55}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0}) r11 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) lseek(r11, 0xdd14, 0x4) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010000800"/20, @ANYRES32=r12, @ANYBLOB="00000000a4620000280012800e0001006970366772657461700000001400028006000e9903000000060018007eba0000"], 0x48}}, 0x0) 1m22.535143545s ago: executing program 3 (id=566): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x0, 0x0, 0x0, 0xff], 0x2}}}}]}, 0x88}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0xffff, 0x3, 0x3, 0x1}, 0x14) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x38, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 1m22.281458482s ago: executing program 3 (id=568): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000a4c000/0xf000)=nil, 0xf000, 0x4000, 0x3, &(0x7f00008dd000/0x4000)=nil) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="010000001d000001010000000000000047f11600"/33]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x600}]}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x15, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb904021d080000000000000000070a000a000900142603600e1208001e0000050401a8430400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0x103}], 0x1}, 0x0) mremap(&(0x7f0000a14000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000e92000/0x2000)=nil, 0x2000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m22.280820038s ago: executing program 3 (id=569): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_open_procfs$pagemap(r1, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = gettid() creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x50000) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000080)={0x0, r3}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) (async) syz_open_procfs$pagemap(r1, &(0x7f0000000280)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) gettid() (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900), 0x0) (async) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) dup(r5) (async) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) (async) truncate(&(0x7f0000000240)='./file0\x00', 0x50000) (async) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) fcntl$setownex(r2, 0xf, &(0x7f0000000080)={0x0, r3}) (async) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async) 1m22.238237574s ago: executing program 32 (id=569): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_open_procfs$pagemap(r1, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = gettid() creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x50000) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000080)={0x0, r3}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) (async) syz_open_procfs$pagemap(r1, &(0x7f0000000280)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) gettid() (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900), 0x0) (async) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) dup(r5) (async) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) (async) truncate(&(0x7f0000000240)='./file0\x00', 0x50000) (async) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) fcntl$setownex(r2, 0xf, &(0x7f0000000080)={0x0, r3}) (async) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async) 32.323536198s ago: executing program 4 (id=1042): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x100, {0x0, 0x0, 0x0, r4, {0xffe0}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40080}, 0x4004844) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x10, 0x0, 0x44, @private0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1, 0x8000, 0x8af2, 0x3}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)=ANY=[@ANYBLOB="740000000001010300000000000000000000000408001a40000000070c00188008000240000000094400068014000500ff0000000000000000000000000000010c0ffb387f3be7649224000008000100ac1414aa080001000a01010008000200e000000108000200640119010800034000001400"], 0x74}, 0x1, 0x0, 0x0, 0x24040}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) accept4$alg(r1, 0x0, 0x0, 0xc00) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6000ea00", @ANYRESHEX, @ANYRES64, @ANYRES32=r8, @ANYBLOB="8b4e4ce366a11e2bc80b329501be8ad9d7c928438755e5878b266dc8ebfde96d5a04a28c3295e82d31d44a43028635934ca21aa3be478c632302a965e9f76e3e988f0b8c398c52a6f3195a72cf90585d2e31d6819eebaf7e4cf7be0d0ef8aaf6c71f83ada776c52e2af6743f5c768aabe58ee872c4"], 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000800) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010300000ae6f720ffa003"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a\x00', @ANYRES32], 0x50) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r9, &(0x7f0000000000), 0xd) r10 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000000200)={0xffffff3c, {{0xa, 0x0, 0xfffffffc, @mcast1}}}, 0x88) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) 32.2620516s ago: executing program 4 (id=1045): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f00000001c0)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "455a936e29dce970f9495ce7c5993abb4736e49865037714c0dde0c23a7f5e32", 0x6, 0x24, 0xffffffff}, 0x3c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001800110117000000000000000a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x67, 0x0, &(0x7f0000000040)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) 32.203241274s ago: executing program 4 (id=1047): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000f9ff0000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 32.202055318s ago: executing program 4 (id=1048): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x40c00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='bpf\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000202050000000000004dfd24f643612d1c22ca300ac8cfae00000003000008"], 0x14}, 0x1, 0x0, 0x0, 0xd1}, 0x50) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getdents(r1, &(0x7f0000000640)=""/103, 0x67) memfd_create(&(0x7f0000000000)='\x00', 0x1) syz_emit_ethernet(0x1c2, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x18c, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x0, 0x19, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5"}]}}}}}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@setlink={0x30, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xf61f}, @IFLA_TXQLEN={0x8, 0xd, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r1) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)={0x160, r10, 0x20, 0xffff, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe64}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2c}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x280}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7f9c}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3b}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x884) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 32.092767459s ago: executing program 4 (id=1052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r1 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001c000000000000000000000007000000440c0717"], 0x38}, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0xa}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000000)={{@host}}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000005c0)={'#! ', './file0/file0'}, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x462200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="92"]) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 31.894084215s ago: executing program 4 (id=1057): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000faff0000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 31.887588123s ago: executing program 33 (id=1057): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000faff0000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 17.793097647s ago: executing program 5 (id=1284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r3, r2) r4 = syz_open_dev$usbmon(&(0x7f0000000240), 0xfff, 0x12b802) preadv(r4, &(0x7f0000000880)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0xffffffff, 0x0, 0xf}}, 0x0, 0x0}}) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 17.673719012s ago: executing program 5 (id=1285): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000700b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 17.673588683s ago: executing program 5 (id=1286): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000bc0)={0x10, 0x39, 0xa, 0x70bd2d, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f00000007c0)=ANY=[], 0x100, 0x4}, 0x44080) ioctl$SNDCTL_DSP_STEREO(r0, 0x40045010, &(0x7f0000000040)=0xfdfffffe) 17.604050422s ago: executing program 5 (id=1287): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FITHAW(r0, 0xc0045878) (async) r1 = socket$kcm(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x4) 17.603407004s ago: executing program 5 (id=1289): r0 = syz_open_procfs(0x0, &(0x7f0000000900)='stat\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x62242, 0x80, 0x1}, 0x18) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000200)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0x3ff}}]}}) (async) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) (async) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x802, 0x109) (async) lseek(r0, 0x7, 0x2) (async, rerun: 64) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b63, 0x4) (async, rerun: 64) open$dir(&(0x7f00000000c0)='./file0\x00', 0xc00, 0x10) 17.393889383s ago: executing program 5 (id=1290): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r2 = io_uring_setup(0x154c, &(0x7f0000000200)={0x0, 0x0, 0x2}) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x4cc}], 0x2, 0x40000022, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000000a80)=[{0x2, 0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f0000000640)=""/159, 0x9f}], &(0x7f0000000180)}, {0xa, 0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000002c0)=""/23, 0x17}, {&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000000440)=""/94, 0x5e}, {&(0x7f0000000800)=""/97, 0x61}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f0000000900)=""/160, 0xa0}, {&(0x7f00000009c0)=""/182, 0xb6}, {&(0x7f0000000b40)=""/77, 0x4d}, {&(0x7f0000000bc0)=""/205, 0xcd}, {&(0x7f0000000cc0)=""/167, 0xa7}], &(0x7f0000000880)=[0x0, 0xffffffffffffffff, 0x4, 0x6]}], 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x30, 0x2c, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0xf0}}, 0x1c}}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x3ff, 0x0, 0x3}, 0x1c) close(r4) r9 = socket$netlink(0x10, 0x3, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r11, 0x101, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0xd}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 17.393450628s ago: executing program 34 (id=1290): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r2 = io_uring_setup(0x154c, &(0x7f0000000200)={0x0, 0x0, 0x2}) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x4cc}], 0x2, 0x40000022, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000000a80)=[{0x2, 0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f0000000640)=""/159, 0x9f}], &(0x7f0000000180)}, {0xa, 0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000002c0)=""/23, 0x17}, {&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000000440)=""/94, 0x5e}, {&(0x7f0000000800)=""/97, 0x61}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f0000000900)=""/160, 0xa0}, {&(0x7f00000009c0)=""/182, 0xb6}, {&(0x7f0000000b40)=""/77, 0x4d}, {&(0x7f0000000bc0)=""/205, 0xcd}, {&(0x7f0000000cc0)=""/167, 0xa7}], &(0x7f0000000880)=[0x0, 0xffffffffffffffff, 0x4, 0x6]}], 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x30, 0x2c, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0xf0}}, 0x1c}}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x3ff, 0x0, 0x3}, 0x1c) close(r4) r9 = socket$netlink(0x10, 0x3, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r11, 0x101, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0xd}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.371839021s ago: executing program 0 (id=1347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x6b8ffff, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 5.371384914s ago: executing program 0 (id=1348): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="15f2ad82f309a648b3177da0ddf3ab68e1d7fe46faa3fdd1ef15efd55cf587ca4879c3df2be612ad45e347cf312d38f8aed47186f685ea91745962273590253fb3161bb73bb1dac7c58f93ccb4d1026bc0fe92af6bf8f38f0714db684aaa001cfc89c51314346a09c567e00b1c7866f55b9faa2e74709b3be3871c38f32626d353d4b82316cf35150ea5c172b0d9c2fc592ab9fc5f8f2f86060663ff6e15d1a7c5cb5938d35d12ab2989c778306253ec3a8736e4cee88d085c9e245d04fd1faeb6ea80eb376c5b995b3292709d88801ee97c75a8c68086555f03c510c8", 0xdd}) 3.29402042s ago: executing program 0 (id=1367): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) (async) 3.293569475s ago: executing program 0 (id=1368): r0 = socket$inet_udplite(0x2, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(r1, &(0x7f0000000000)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 3.213792477s ago: executing program 0 (id=1369): setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) (async) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:traceroute_exec_t:s0\x00', 0x27, 0x5) (async) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffffb) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x2400) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8100, 0x0) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r2, r4}}, './file0\x00'}) linkat(r5, &(0x7f00000003c0)='./file1\x00', r5, &(0x7f0000000400)='./file0\x00', 0x1400) (async) r6 = timerfd_create(0x2, 0x80000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r6, {r3, r4}}, './file1\x00'}) (async) r8 = geteuid() (async) fstat(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7, {r8, r10}}, './file0/file0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@getlink={0x44, 0x12, 0x20e, 0x8, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2208, 0x10148}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}, @IFLA_WEIGHT={0x8, 0xf, 0x200}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) (async) getuid() syz_open_pts(r0, 0x840) chown(&(0x7f0000000680)='./file0/file0\x00', r8, r12) (async) ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f00000006c0)) (async) r13 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000700), 0x800, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000000840)=0xe8) setfsuid(r15) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000880)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r5, {r9, r12}}, './file0/file0\x00'}) sendmsg$nl_route(r16, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@ipv4_newaddr={0x40, 0x14, 0x0, 0x70bd26, 0x25dfdbfc, {0x2, 0x18, 0x30, 0xc8, r14}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x1550}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}, @IFA_TARGET_NETNSID={0x8}, @IFA_FLAGS={0x8, 0x8, 0x290}, @IFA_RT_PRIORITY={0x8, 0x9, 0xf63a}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x4) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r13, 0xc004500a, &(0x7f0000000bc0)=0x8) symlinkat(&(0x7f0000000c00)='./file1\x00', r16, &(0x7f0000000c40)='./file1\x00') (async) ioctl$TIOCSETD(r16, 0x5423, &(0x7f0000000c80)=0x12) (async) accept$inet6(r7, 0x0, &(0x7f0000000cc0)) read$FUSE(r11, &(0x7f0000000d00)={0x2020}, 0x2020) 2.913626804s ago: executing program 0 (id=1372): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x2, 0x4, 0x4, 0xa, 0x500, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x4, @multicast, 'syzkaller0\x00'}}, 0x1e) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) memfd_create(&(0x7f0000001800)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05YH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2{\xc5\xca\xf3,\x1f]S\xc0\x9fa\xbd\xfa3\x19\x85\xf15\xf4\x184\xa3{\xac\xfd\x9c0\xad\x1b\x88\xdf\x8eb\xb0\xec\xb2\x80\xf0=\x1aBk\x8fi/7\f\x98D\x9d\xca\x9d\xfaq\xefG`\xe2\x9d9w\xef\xe6\x00'/1976, 0x7) (async) r4 = memfd_create(&(0x7f0000001800)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05YH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2{\xc5\xca\xf3,\x1f]S\xc0\x9fa\xbd\xfa3\x19\x85\xf15\xf4\x184\xa3{\xac\xfd\x9c0\xad\x1b\x88\xdf\x8eb\xb0\xec\xb2\x80\xf0=\x1aBk\x8fi/7\f\x98D\x9d\xca\x9d\xfaq\xefG`\xe2\x9d9w\xef\xe6\x00'/1976, 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) dup3(r4, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x2c011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x2c011, r5, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000240)=0x1, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) (async) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x64, 0x0, 0x608, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000}, 0x20000000) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x64, 0x0, 0x608, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000}, 0x20000000) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r3) (async) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x2a, r3) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="a67a2f94dccfc6ae460ca60b3a8a515712384d7806f2f81ff78c69cd084000000035b0b397e0a545bd99b8eecf9c15e9c5edf285f7d100b2", 0x38}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r8, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="a67a2f94dccfc6ae460ca60b3a8a515712384d7806f2f81ff78c69cd084000000035b0b397e0a545bd99b8eecf9c15e9c5edf285f7d100b2", 0x38}], 0x1}}], 0x1, 0x0) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r10, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c210000086dd600a843500240600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90c2fffd90780000080a0000000000000000030301000800"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1802000000000000000000000400007f36428e4adad70775f80085000000870000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$SG_GET_TIMEOUT(r9, 0x2202, 0x0) (async) ioctl$SG_GET_TIMEOUT(r9, 0x2202, 0x0) 2.897561463s ago: executing program 35 (id=1372): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x2, 0x4, 0x4, 0xa, 0x500, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x4, @multicast, 'syzkaller0\x00'}}, 0x1e) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) memfd_create(&(0x7f0000001800)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05YH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2{\xc5\xca\xf3,\x1f]S\xc0\x9fa\xbd\xfa3\x19\x85\xf15\xf4\x184\xa3{\xac\xfd\x9c0\xad\x1b\x88\xdf\x8eb\xb0\xec\xb2\x80\xf0=\x1aBk\x8fi/7\f\x98D\x9d\xca\x9d\xfaq\xefG`\xe2\x9d9w\xef\xe6\x00'/1976, 0x7) (async) r4 = memfd_create(&(0x7f0000001800)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05YH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2{\xc5\xca\xf3,\x1f]S\xc0\x9fa\xbd\xfa3\x19\x85\xf15\xf4\x184\xa3{\xac\xfd\x9c0\xad\x1b\x88\xdf\x8eb\xb0\xec\xb2\x80\xf0=\x1aBk\x8fi/7\f\x98D\x9d\xca\x9d\xfaq\xefG`\xe2\x9d9w\xef\xe6\x00'/1976, 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) dup3(r4, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x2c011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x2c011, r5, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000240)=0x1, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) (async) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x64, 0x0, 0x608, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000}, 0x20000000) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x64, 0x0, 0x608, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffffc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000}, 0x20000000) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r3) (async) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x2a, r3) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="a67a2f94dccfc6ae460ca60b3a8a515712384d7806f2f81ff78c69cd084000000035b0b397e0a545bd99b8eecf9c15e9c5edf285f7d100b2", 0x38}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r8, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="a67a2f94dccfc6ae460ca60b3a8a515712384d7806f2f81ff78c69cd084000000035b0b397e0a545bd99b8eecf9c15e9c5edf285f7d100b2", 0x38}], 0x1}}], 0x1, 0x0) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r10, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c210000086dd600a843500240600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90c2fffd90780000080a0000000000000000030301000800"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1802000000000000000000000400007f36428e4adad70775f80085000000870000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$SG_GET_TIMEOUT(r9, 0x2202, 0x0) (async) ioctl$SG_GET_TIMEOUT(r9, 0x2202, 0x0) 2.303079935s ago: executing program 6 (id=1376): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 64) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x2}, @val, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @private, @empty}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) (async) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0xfeff, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x96}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async, rerun: 32) chdir(&(0x7f0000000100)='./file0\x00') (async, rerun: 64) mkdir(0x0, 0x0) (async, rerun: 64) chdir(0x0) (async) r6 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000180)=""/173, 0xad) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x0, 0x0, {0x7, r4}}, 0x18}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_io_uring_setup(0xd4c, &(0x7f00000002c0)={0x0, 0x1e19, 0x1, 0x2, 0x316}, &(0x7f0000000180), &(0x7f0000000340)) io_uring_setup(0x4298, &(0x7f0000000380)={0x0, 0x58cf, 0x2000, 0x0, 0xda, 0x0, r8}) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) (async) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f0000002300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=""/17, 0x11}, 0x8}], 0x1, 0x10140, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x7, &(0x7f0000000000)=@raw=[@exit, @map_idx, @call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @generic={0x20}, @exit], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.062927374s ago: executing program 1 (id=1379): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="97e455ffffffffffffff7fb40bdf61bad49e87e577b33e783edf526714ec4d9e90ee972352d1ddfc6453ce253fec7d47c6cabf683b2566b9d28d4333721b4bb67a3db113e2ed534f9c5a9da2e44aa88e2baaf1a86954aa4b07470e1ff36148ef132fe7184feca0cea6fde95fa080d8cd93c537b077a568f3559ff1fb025cb41e96d2e2ac5a838275fe0a", 0x8a}, {&(0x7f0000000040)="bfed6746ebed8f7d76af4fd38a76b8166953098160cb0301ff0c60708b8e9b3c32cda9a685304e9c04d9ba9e5c280716966b72dcc7f44f616e190610a36d190dec0e1b40fcb5f84477f848ed0a243f9d959618efb51e57801b1a7dbec08ff33c12fbbb57360294f66e99d0a5d3782b78f4834069056e30b43fe878c52cd4486c721b5a08a21570d16c8cc951cc62b94ff0b53e2bfa38089258330e7fa5bcbb978539bf59f826c6485a", 0xa9}, {&(0x7f0000000100)="58cf2baeeadae4b69e7256c8eb73b5881c1d2fdc7c0b6abd8633a7b572347da3560e7afb5749f262a73192d16310a8edcd561d3365c90e9ffb586711d003ebc084cfcf5448e5935e44d5594639ffe53ff13a7fa025523553916357a4bc698a22d612f5deb40fb3067fa729a386abf0ec01ed13f23c9c58ca", 0x78}], 0x3) 1.993637331s ago: executing program 1 (id=1380): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000002800), 0x10000, 0x60040) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x7}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000002a40)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = getpid() r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@delqdisc={0x4c, 0x25, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff7, 0xa}, {0xb, 0xe}, {0xfff3, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfff}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}]}, 0x4c}}, 0x0) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x2002, 0x0) r8 = openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/98, 0x62}], 0x1, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x6, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.943483103s ago: executing program 6 (id=1381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x2, 'lc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) (async) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x14) (async) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000053ed23a2701a72f08e77519c64a5de00010401020000000000000000075cd3000000000000040000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000140)) (async) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.941806114s ago: executing program 6 (id=1382): r0 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, &(0x7f0000002180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007", @ANYRESOCT], 0x48}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffd2a, &(0x7f0000000040), 0x3}, 0x0) r4 = eventfd(0x2) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000900)={r4, 0x8}) close(r2) 1.773620072s ago: executing program 1 (id=1384): r0 = syz_open_dev$evdev(&(0x7f0000000300), 0xf818, 0x40500) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000800'], 0x2a, 0xfffffffffffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000015269eb0c9f803f8f303ff00003b8c5bd6fba31e9631b1d7d2598701911d47c4953c151641053149f2f3b3600bb2bb79decfd88e2c67dd8f38aa4c9e2adfc15ddfe419831525ece73a5372888eb5b49ac496bcaa8be593c4fcbde0cc9ba7d011fdaab4c15facbbbe5aebd0d47e2b2079364b043230fe", @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r3, 0x400, 0x1) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x4000, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000440)={r6, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, "339f020bbe78b39843d601010000040000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a65f0400000000000000000010e200000000000000000000000100", [0x0, 0x100000001]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r6) r8 = creat(&(0x7f0000000280)='./bus\x00', 0x100) sendfile(r4, r5, 0x0, 0x80) r9 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0)={0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES2(r9, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x20000000, 0x0, 0x0}, 0x20) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000005c0)=""/54) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$notify(r4, 0x402, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38010000100005f600000000000000007f000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000faffa92d0000006c000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000480003"], 0x138}}, 0x0) 1.723149885s ago: executing program 6 (id=1385): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100), 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0) listen(r0, 0x1ff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000500)="ab", 0x1, 0x11, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='fscache_acquire\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0xc}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492728, 0x0) 912.605376ms ago: executing program 1 (id=1386): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="4d80f3878e66be1a80bcad000000", 0xe, 0x48090, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) (async) pipe2$watch_queue(&(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0xc0) setsockopt$inet6_dccp_buf(r2, 0x21, 0xc, &(0x7f00000000c0)="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", 0x1000) 862.568109ms ago: executing program 1 (id=1387): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000180)="260fc76e31f30fc7fd9066b9900d00000f320fa80f35360f01c20f2084ba2100b88c00ef0f001f", 0x27}], 0x1, 0x9, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x108005, 0x4) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 623.31565ms ago: executing program 2 (id=1388): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500150002008178a8001500080001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003940)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f900de97969b0954a0f89a4e330000000000000027000000000000000000000000000000000000000043bcdba9cda70935a73fce7269d43bb55d501ccdfed13c9d00c66ec427b225616a74bcf7333d271ae4fdda05ca4686d7bf4dffe86f8fefe0a15e38862175ccf71cf62fd97dfcdae949412030cd025b70c6b0"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000800000e1ff00230000956162150200", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000001f00000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b509000002000000639af0ff000000008709000000000000c39af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000040), 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r6 = fanotify_init(0x4, 0x0) r7 = open(&(0x7f0000000340)='./bus\x00', 0x404101, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000500)={0x1, 0x7}) fanotify_mark(r6, 0xd, 0x8000029, r7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB="6c0000000001110400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100060000002c0002801400011e1f0000000000000008000200ac1e00010c0002800500010000000000060003ff000100000800074000000009"], 0x6c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001800104000008000100e000000108000200e00000010002800500010000000000c4399ee4ccaba77bf90875b8c3dda8f29bd123e818ff53c6ce0c5bfbc804ed7350492535a87a8ea119e52ffb2b6a65d2e3a8296b0a9f5c7853b80f4afe3c65bfb863014f2751abea4595c4fd3a7d9f90891aaf908cb6546b3193bb8b1e0017f489ee9d9c34362098403f5f733cfb4ecce6"], 0x38}}, 0x20000094) r10 = creat(&(0x7f00000000c0)='./bus\x00', 0x24) fsetxattr$system_posix_acl(r10, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90000000000901010000000000000000030000025800020006000340000100001400018008000100e0000002080002007f0000011400018008000100000000000800020064010100060003400003000006000340000200001400018008000100ac1e010108000200ac1414aa08000640000000000900010073797a31000000000800064000000001080006400000f801"], 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x4810) r11 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f00000017c0)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)="a5", 0x1}], 0x1, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1], 0x18}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x1923, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x1, 0x0) 393.45983ms ago: executing program 2 (id=1389): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x1, 0x80, 0x8, 0x6, {{0x3a, 0x4, 0x3, 0x5, 0xe8, 0x65, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@cipso={0x86, 0x1e, 0x2, [{0x2, 0x11, "6e007d5ba0a81f6037b731da478e42"}, {0x1, 0x7, "bec048df11"}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x68, [@empty]}, @noop, @cipso={0x86, 0x46, 0xffffffffffffffff, [{0x0, 0x8, "170e9782cc0c"}, {0x5, 0xe, "a71084c3d994962e1e5c0bad"}, {0x2, 0x7, "aa01aa426d"}, {0x0, 0xb, "2f287c2e1285260fcd"}, {0x2, 0xa, "d345cf0879e36749"}, {0x6, 0x3, "87"}, {0x5, 0xb, "8f1142e1bc45c3df65"}]}, @timestamp_addr={0x44, 0x34, 0xae, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast1}, {@loopback, 0x1}, {@broadcast, 0x1}, {@rand_addr=0x64010102, 0x7}, {@remote, 0x9}]}, @timestamp_addr={0x44, 0x14, 0x2d, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x5, 0x0}, 0x4}, {@local, 0x9}]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x6, [0x7, 0x9]}, @timestamp={0x44, 0x10, 0xd7, 0x0, 0x1, [0x2, 0x7, 0x4]}]}}}}}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @broadcast, @loopback}, &(0x7f0000000240)=0xc) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000000) (async) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380), 0x90b83, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000003c0)) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000400)=0x3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_emit_vhci(&(0x7f0000000540)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xd9}, "8dc02e159deef1ff65abbd180b45186408cf0e8f1bd3e1b48150860a2dda42722e2528ae0c402e8aa433d4b38552c10922ce8ecb13c08c361bd85ae610aaea4d877d179b2c0d4ecd81c6108ab9c8354ae754c08ff3a1a7a89c2f9efd04cb5ca64f109337cabac9d42ae14192754592a6ceb6b2ea814459b8e54877cd83ec145834df4fe3035404dc776b986b08502a9e19aec213aed8023d1a6bdc345d096e1510b4bc9dba0ef25657e445b66a1c5849b96134a21468e51672a85bb27a4a2d51e883fef3f31a1ecb33525906541d62c6b7f376a66432bebc95"}, 0xdd) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = signalfd4(r3, &(0x7f0000000640)={[0x9]}, 0x8, 0x80800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0x0, r5, 0x0, 0x9, &(0x7f0000000680)='mptcp_pm\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r6}, 0x4) r7 = socket(0x25, 0x1, 0xb3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) sendmsg$kcm(r7, &(0x7f0000000a00)={&(0x7f00000008c0)=@in6={0xa, 0x4e23, 0xc, @mcast1, 0x3}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000940)="7a138dec94232094c6b7551140f37e74", 0x10}, {&(0x7f0000000980)}], 0x2}, 0x24000000) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x144, 0x17, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x114, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x144}, 0x1, 0x0, 0x0, 0x40000}, 0x4004014) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x230000, 0x1) (async) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000cc0)) (async) r10 = syz_open_dev$vcsu(&(0x7f0000000d00), 0x7f, 0x20502) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000d40)={0x0, r10, 0x2}) write$tun(r11, &(0x7f0000000d80)={@val={0x0, 0x88e5}, @void, @llc={@llc={0xdc, 0x80, "03"}}}, 0x7) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r9, 0x8002f515, &(0x7f0000000dc0)) (async) connect$l2tp6(r3, &(0x7f0000000e00)={0xa, 0x0, 0xcc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x4}, 0x20) (async) sendmsg$nl_route_sched(r11, &(0x7f0000001980)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f0000000e80)=@delchain={0xa88, 0x65, 0x20, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4}, {0x10, 0xa}, {0x7, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x3}, @TCA_U32_LINK={0x8, 0x3, 0xa0000}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0xa}}, @filter_kind_options=@f_route={{0xa}, {0x14c, 0x2, [@TCA_ROUTE4_POLICE={0x18, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}]}, @TCA_ROUTE4_POLICE={0x54, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0x8800000, 0x9, 0x5, {0x7f, 0x0, 0xfff8, 0x0, 0x6, 0x1}, {0x1, 0x0, 0x1ff, 0x6, 0xff, 0x2}, 0x6, 0x9}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xfff1}}, @TCA_ROUTE4_ACT={0xcc, 0x6, [@m_ct={0xc8, 0x14, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_LABELS_MASK={0x14, 0x8, "f00064c13686cd2c5b27aeeec5d4a34c"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010100}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x5f, 0x6, "51a303e4cdb42112c3d5ae35e05ff4119ba488665ad3c1f22dedf9d4ac9dbec951be92006b2f3e42f46872db42043034d866324dfab72327d47a90bea3290338b2656bc119180c416ffddab806bb28bcf857faba1092540929d410"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x8, 0x9}}]}}, @TCA_RATE={0x6, 0x5, {0x8d, 0xb}}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "38dbf7c3c4b025e560798dc0bb3f7046"}, @TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x3}, @TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xff, 0xff, 0x0, 0xffffff00]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}, @filter_kind_options=@f_u32={{0x8}, {0x868, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x5}, @TCA_U32_LINK={0x8, 0x3, 0x5}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xb}}, @TCA_U32_CLASSID={0x8, 0x1, {0x7, 0x5}}, @TCA_U32_CLASSID={0x8, 0x1, {0x6, 0xffe0}}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x92}]}, @TCA_U32_ACT={0x4}, @TCA_U32_DIVISOR={0x8, 0x4, 0xcd}, @TCA_U32_POLICE={0x820, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffeb5, 0x4, 0x6, 0x8, 0x5, 0x6, 0x7, 0xe64, 0x0, 0x101, 0x8, 0x6, 0x0, 0x0, 0xc30, 0x8, 0x9, 0x1, 0xb8b, 0x1, 0x3, 0x8, 0x3ff, 0x3, 0x7, 0x0, 0x2, 0x6, 0x0, 0x5, 0x2, 0x0, 0x6a, 0x6b17, 0x0, 0x28, 0x6, 0x7e, 0x3ff, 0x9, 0x3f8000, 0x5, 0x9, 0x57f, 0x80000000, 0x2, 0x9, 0x400, 0x80, 0xd, 0x7, 0xfff, 0x10, 0x3, 0x4, 0xffffffff, 0xfff, 0x5, 0x9, 0x1, 0x8, 0x9, 0x8, 0x5, 0x61c7, 0x2, 0x3, 0x40, 0x3, 0x5, 0x3, 0x100, 0x3, 0xfffffffc, 0x10001, 0x400, 0x3, 0x8ae, 0x9, 0x3, 0x1, 0x8e57, 0x7, 0x1, 0x80000001, 0x100, 0xa, 0x80000001, 0x5, 0x1, 0x0, 0x7, 0x1, 0x7, 0xfffffffd, 0x0, 0x8, 0x4, 0x401, 0x7, 0x3, 0x2d4a, 0x8, 0x8f0a, 0x9, 0xffffffff, 0x7, 0x4220, 0x101, 0x4000, 0x8, 0x80000000, 0x6, 0x2d1b, 0x7fffffff, 0x6efc, 0x91e1, 0xf904, 0x3, 0xffffffff, 0x3000000, 0x6, 0x9, 0x7, 0x5, 0x3, 0x3, 0x4, 0x5, 0x0, 0x6, 0x5, 0xb0, 0x0, 0x2, 0x9, 0x4, 0x3ff, 0x3, 0xf200, 0x4868, 0xd31, 0xdc, 0x6, 0x5, 0x10001, 0x9, 0x3948ec5c, 0x963, 0x7, 0x9, 0x3, 0x82, 0x7, 0x6de1, 0x2, 0xfff, 0x80000001, 0x0, 0x2, 0xd9, 0x52, 0xf, 0xfffffffa, 0x2b58, 0x1, 0x0, 0x7, 0x1, 0x2255, 0x3, 0x3, 0x3, 0x8, 0x200, 0x6, 0x6, 0x7ff, 0x81, 0x2b09, 0x3, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x80000000, 0x3, 0x4, 0x7, 0xfffffff9, 0x27d382f0, 0x1ff, 0x4, 0x5, 0x4, 0x80000000, 0x5, 0x3, 0x6, 0x7, 0x68, 0x80000000, 0x2, 0x9, 0x6, 0x2, 0x7, 0x4, 0xeff9, 0x1, 0x9, 0x7f980, 0xc, 0x5, 0x2d, 0x40, 0x5, 0x7, 0x0, 0x5, 0x1a, 0x0, 0x7f, 0x6, 0x2, 0x6, 0xff, 0xf, 0xc, 0x80000001, 0xba10, 0x0, 0x3, 0x5, 0x176c, 0x400, 0x4, 0x7, 0x2, 0x3, 0x9, 0xb, 0x8, 0x1000, 0x401, 0x1, 0x10001, 0xca, 0x10, 0xed2, 0xe, 0x100, 0x3020, 0x3, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x9, 0x1, 0x5, 0x0, 0x401, 0x81, 0x0, 0x6, 0x5, 0x7, 0xb, 0x2, 0x800, 0x40, 0x400, 0x6, 0x6, 0x4, 0x9, 0x1000, 0x2, 0x800, 0x2, 0xfa8, 0xffff, 0x101, 0x3, 0x4, 0x600, 0x9f, 0x8, 0x8, 0x2, 0x3, 0x5, 0x8, 0x6, 0x0, 0x4, 0x4, 0xe7, 0x9, 0x4f, 0x8, 0x8, 0xfffffffd, 0x0, 0x2, 0x8, 0x705, 0x80000000, 0xff, 0x40, 0x892f, 0xe, 0xd2, 0x3, 0x72, 0x1, 0xc, 0x6, 0xc11, 0x9, 0xc, 0x7, 0x2, 0x7fff, 0xfffffff7, 0x200, 0x200, 0x6, 0x0, 0x5, 0xfff, 0x3, 0xffffffff, 0x10001, 0x0, 0x0, 0xfdd, 0x1, 0x9, 0xa0, 0x8, 0x7, 0x9, 0x9, 0x0, 0x9e5c, 0x6, 0xfffffff9, 0x8, 0xfff, 0x1, 0x8, 0x4, 0x1ff, 0xc1, 0x40, 0x35, 0x6, 0x7, 0x1, 0x5, 0xfffffffe, 0x5, 0x7, 0x2, 0xfffffe63, 0x0, 0x1, 0xfffffffc, 0xc, 0x6, 0x8000, 0x7, 0xfffff801, 0x9, 0x8, 0xfffffff1, 0xec, 0x91, 0x8001, 0xff0, 0xb, 0x9, 0x7fffffff, 0x3, 0x85f7, 0x7, 0x1, 0x1, 0x4, 0xff, 0x8, 0x943, 0x1, 0x7, 0x6, 0x101, 0x4, 0x9, 0x3, 0x5, 0x5, 0x0, 0x9, 0x800, 0x800, 0xe, 0x5, 0x255, 0x7ff, 0x4, 0x7, 0x6, 0x3, 0x8, 0x8, 0x3, 0xe1, 0x8, 0x0, 0x4, 0xff, 0xc, 0x8001, 0x9, 0x9, 0x3, 0x3, 0x1, 0x7333, 0x80000001, 0x6, 0xcae, 0x10000, 0xef8, 0x7fff, 0x1, 0x80, 0x800, 0xffffffff, 0xef0c, 0x0, 0x8000, 0x0, 0x3, 0x8, 0x800, 0x8, 0x50ae, 0xfffffffa, 0x7, 0xffffffc0, 0x1, 0x8, 0x9, 0x9, 0x0, 0xf4f, 0x4, 0x5, 0x0, 0x0, 0x8, 0x4, 0x3, 0x20, 0x5, 0x71ac, 0x7fffffff, 0x5, 0x3, 0x7, 0x1, 0x7, 0x6, 0x60d55c98, 0x8, 0x1, 0x9, 0x6, 0xc9, 0x0, 0x6775, 0x9cc, 0x5, 0x9169, 0x8001, 0x18747957, 0xd86, 0x2, 0x2, 0x8, 0x6, 0x8001, 0x200, 0x2, 0x1, 0x0, 0x0, 0xffffffff, 0x3, 0x80000001, 0x8844, 0x7, 0x2, 0x0, 0xfffffff9, 0x31cd, 0x4, 0x9, 0x51e00, 0x4]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xe, 0x7}}]}, 0xa88}, 0x1, 0x0, 0x0, 0x40019}, 0x800) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f00000019c0), 0x80000, 0x0) ioctl$SIOCX25SFACILITIES(r12, 0x89e3, &(0x7f0000001a00)={0x2a, 0x1, 0x9, 0xb, 0x1, 0x81}) (async, rerun: 64) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000001a40)={"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"}) (rerun: 64) 393.131802ms ago: executing program 6 (id=1390): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="9f90875a73ad17dee9ebece02db2103d", 0x20) r1 = accept$alg(r0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{&(0x7f00000000c0)=@ax25={{}, [@remote, @rose, @null, @rose, @remote, @bcast, @remote, @bcast]}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000000340)=""/133, 0x85}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/9, 0x9}, {&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000540)=""/114, 0x72}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x7, &(0x7f0000003740)=""/4096, 0x1000}, 0xffffffff}], 0x1, 0x10000, &(0x7f00000005c0)) r2 = socket$kcm(0x21, 0x2, 0x2) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000004780)) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20048840) syncfs(r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f00000010c0)) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000004740)={0x8, 0x7}) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) read$alg(r1, &(0x7f0000000240)=""/245, 0xf5) 342.434515ms ago: executing program 2 (id=1391): openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x8902, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x8902, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="5ce8086600002effffff0000000000009500000000000000141d2558581cbd27bbe0ef0364534e6ddd73001ba9a665884c9c6dd201c94f6368614fa1aad6dbe8c9d84bbb1fe6913b4a1d8f7d2cc0c14fefc8d700000000000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rxrpc_local\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)=ANY=[]) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB=';']) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) recvmmsg(r6, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f00000004c0)=""/107, 0x6b}, {&(0x7f00000005c0)=""/216, 0xd8}], 0x5, &(0x7f0000000540)=""/64, 0x40}, 0x2}, {{&(0x7f00000011c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001240)=""/122, 0x7a}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/253, 0xfd}, {&(0x7f00000013c0)=""/129, 0x81}, {&(0x7f0000001480)=""/96, 0x60}], 0x5}, 0x7f}, {{&(0x7f0000001580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000740)=""/49, 0x31}], 0x1}, 0x80000001}, {{&(0x7f0000001640)=@caif=@util, 0x80, &(0x7f0000002bc0)=[{&(0x7f00000016c0)=""/24, 0x18}, {&(0x7f0000001700)=""/56, 0x38}, {&(0x7f0000002880)=""/227, 0xe3}, {&(0x7f0000001740)=""/15, 0xf}, {&(0x7f0000002980)=""/242, 0xf2}, {&(0x7f0000002a80)=""/96, 0x60}, {&(0x7f0000001780)}, {&(0x7f0000002b00)=""/61, 0x3d}, {&(0x7f0000002b40)=""/2, 0x2}, {&(0x7f0000002b80)}], 0xa, &(0x7f0000002c80)=""/236, 0xec}, 0xfffffffa}], 0x4, 0x20, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r8, 0x80089419, &(0x7f00000002c0)) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYRES8=r5]) write$P9_RLERRORu(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="1600000007010009002f6465920692065a2bf6640000"], 0x16) (async) write$P9_RLERRORu(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="1600000007010009002f6465920692065a2bf6640000"], 0x16) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x40a2012, r0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000080)) 283.887876ms ago: executing program 6 (id=1392): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x20000000, &(0x7f0000000140)={0x11, 0x0, r3}, 0x3) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000180)=[{r4, 0x4047, 0x700}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x6559, 0x13580, 0x3}, &(0x7f0000000040), &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0xfffffffffffffeb8, 0x0, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE]}, {0x4}, {0xfffffffffffffeb6}, {0xc}}}]}]}, 0xfffffffffffffed8}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000500", 0x33fe0}], 0x1}, 0x0) 283.74501ms ago: executing program 1 (id=1393): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r2, 0x1, 0x3, 0x0, &(0x7f0000000640)) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x10, r1, 0x10000000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) (async) r5 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x40080, 0x0) ioctl$PTP_PIN_GETFUNC(r5, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x9714, 0x2, 0x200}) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) 11.921194ms ago: executing program 2 (id=1394): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_secret(0x80000) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000480)={&(0x7f0000000440)=[{0xfff8, 0x4000, 0xb4, &(0x7f0000000240)="163ac988a8c60a4a5f15c6d49b9e098b13b224d9c3d6b1919faff82b19add20bb47ec3bd04ec4cde0952c12e417c31f8ed6307720002327e32fa584a79a80715f4ffe25b25bdffd859a810d72ab264971394b2a4d32f075cb2bafc66646439d4489846d6ca8e0afe9d6b8661b46edd33637055c4de756d2cc4f3aec063917bd76aaa6ea7678ac9d9d3259ed43267120010abb60c1118fbf6f526a2a91daa93aa1005c58eb4be1c04079967c9a22ac5025eeaa3e0"}, {0xc, 0x2000, 0x1e, &(0x7f0000000300)="d6989b2b88fe7ceb34d021f3ba68124b5b53392befa4f0dd22780cce6a66"}, {0x2, 0xa210, 0xc9, &(0x7f0000000340)="170b17201a9843a224a8884914f967dab8b0ac093aee0a37da56fdf564a85f75746619dfcf8160cf734abc9137d360e98ac3372cbab2714a2f5241c219bfb75dac1967fbe3ef2ebcb76640e931cadff066e6591ed683d146057f718a28ecfdaecddf8acda2c67f9be9e73e4d3762cf5c239da5159f176f2263f98ee5db7421517550b19a880f6aa8b27505b0d252c9df7ea2b28faa6a1f92903ee37dd8794e2d92bf568ae26df6223f38b14bfe8b1ae178fab3ed1d43925a69fb11f37c878ddab287a8858271574f0a"}], 0x3}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x8000, 0x8, 0x6bb0, 0xdac, {{0x7, 0x4, 0x3, 0x23, 0x1c, 0x64, 0x0, 0x9, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010102, {[@ssrr={0x89, 0x7, 0x2b, [@dev={0xac, 0x14, 0x14, 0x18}]}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0xfffb}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x78}}, 0xc4) (async) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0xa, 0x0, 0xfffffffffffffdf0}}], 0x40000000000019f, 0x0) 11.788659ms ago: executing program 2 (id=1395): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 11.610059ms ago: executing program 2 (id=1396): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000240)='syscall\x00') capset(&(0x7f0000000240)={0x19980330, r3}, &(0x7f00000002c0)={0x2, 0x400, 0xd3, 0xfffffffa, 0xd, 0x6}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) r8 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r9, &(0x7f00000000c0)='./file0\x00') openat(r9, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x5, 0x20000000, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8890}, 0x8044) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) r11 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)={0x77359400}}) io_uring_enter(r11, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5, 0x6, 0x7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r4}]}, 0x48}}, 0x0) 0s ago: executing program 7 (id=1373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x800000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200fffe0900020073797a32000000000900010084797a30000000004400048024000180090001006d6574610000000014000280080001400000000108000240000000171c000180090001006d617371000000000c0002801300024000000008140000001100010000000000000000000000000a7ebbeeb3f4bc29ce1103673fcc77bb40e618b3c4757806d0ef280d57ffa803a1d29365a8fe62e67d826846477e36f82e7ba4f9329fe69368be7358"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x1d3, 0xc8000) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x12, 0x0, 0xd, "fbdbf978590aa1b88c44306d20"}}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x2002, 0x6, 0xfffffffd, 0x46, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) (async) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) (async) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) fcntl$setsig(r5, 0xa, 0x21) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '[-.'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}}, 0x0) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r10, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0x80, 0xfdc, 0x3131354f, 0x7, 0xc4, 0x0, 0xa, 0x80, 0x0, 0x1, 0x1, 0x1}}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x20, r12, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) 0s ago: executing program 2 (id=1397): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r0, 0x1000) r1 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000040)={0x0, 0xbd8}) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) kernel console output (not intermixed with test programs): : device descriptor read/8, error -71 [ 114.097452][ T8] usb usb9-port1: unable to enumerate USB device [ 114.365545][ T5299] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 114.413724][ T39] audit: type=1400 audit(1731733501.406:1331): avc: denied { accept } for pid=9410 comm="syz.2.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 114.449002][ T9413] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 114.481600][ T9419] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 114.510974][ T39] audit: type=1400 audit(1731733501.506:1332): avc: denied { bind } for pid=9422 comm="syz.1.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.514060][ T9423] binder: 9422:9423 ioctl 4018620d 0 returned -22 [ 114.521230][ T9423] input: syz1 as /devices/virtual/input/input14 [ 114.657950][ T39] audit: type=1400 audit(1731733501.656:1333): avc: denied { bind } for pid=9431 comm="syz.0.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.671677][ T39] audit: type=1400 audit(1731733501.666:1334): avc: denied { ioctl } for pid=9431 comm="syz.0.951" path="socket:[30249]" dev="sockfs" ino=30249 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.715456][ T9436] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 114.739196][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 114.741364][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.953'. [ 114.762054][ T9440] sch_fq: defrate 511 ignored. [ 114.771586][ T9441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.954'. [ 114.774065][ T9440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.954'. [ 114.825400][ T75] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 114.977894][ T75] usb 7-1: not running at top speed; connect to a high speed hub [ 114.981601][ T75] usb 7-1: config 1 has an invalid interface number: 87 but max is 3 [ 114.984104][ T75] usb 7-1: config 1 has an invalid interface number: 68 but max is 3 [ 114.986183][ T75] usb 7-1: config 1 has an invalid interface number: 230 but max is 3 [ 114.988174][ T75] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.990586][ T75] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 114.992770][ T75] usb 7-1: config 1 has no interface number 0 [ 114.994232][ T75] usb 7-1: config 1 has no interface number 1 [ 114.995765][ T75] usb 7-1: config 1 has no interface number 2 [ 114.997256][ T75] usb 7-1: config 1 interface 87 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 114.999889][ T75] usb 7-1: config 1 interface 87 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 115.002489][ T75] usb 7-1: config 1 interface 230 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 115.005863][ T75] usb 7-1: config 1 interface 87 has no altsetting 0 [ 115.007482][ T75] usb 7-1: config 1 interface 68 has no altsetting 0 [ 115.009109][ T75] usb 7-1: config 1 interface 230 has no altsetting 0 [ 115.013048][ T75] usb 7-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.be [ 115.015357][ T75] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.017354][ T75] usb 7-1: Product: ю [ 115.018370][ T75] usb 7-1: Manufacturer: 榳烍 [ 115.019565][ T75] usb 7-1: SerialNumber: 鶲瘥賺歆꩞ヷ訶춷謈얻틎䃰᳽Т⠉㩓፯咙婓첀ꍌ퐆嵸ዀἷ댹춮㖼촅☯㛞떅钪츻愸蘕뗝袔ᩀూ漡ꍻ硢쐇ۯ嵬ĉ뤇뵣ꥄሴ蒁촜縰 [ 115.230222][ T75] (null): radio-mr800 - initialization failed [ 115.231891][ T75] radio-mr800 7-1:1.87: probe with driver radio-mr800 failed with error -8 [ 115.234110][ T75] usbhid 7-1:1.87: couldn't find an input interrupt endpoint [ 115.240452][ T75] usb 7-1: USB disconnect, device number 15 [ 115.369316][ T9443] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 115.487947][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.958'. [ 115.522430][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 115.544895][ T9461] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 115.592607][ T39] audit: type=1400 audit(1731733502.586:1335): avc: denied { bind } for pid=9465 comm="syz.1.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.597469][ T39] audit: type=1400 audit(1731733502.596:1336): avc: denied { connect } for pid=9465 comm="syz.1.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.621125][ T9469] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 115.624421][ T9469] FAULT_INJECTION: forcing a failure. [ 115.624421][ T9469] name failslab, interval 1, probability 0, space 0, times 0 [ 115.627494][ T9469] CPU: 3 UID: 0 PID: 9469 Comm: syz.0.965 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 115.630103][ T9469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.632736][ T9469] Call Trace: [ 115.633610][ T9469] [ 115.634382][ T9469] dump_stack_lvl+0x16c/0x1f0 [ 115.635624][ T9469] should_fail_ex+0x497/0x5b0 [ 115.636842][ T9469] should_failslab+0xc2/0x120 [ 115.638045][ T9469] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 115.639386][ T9469] ? dev_queue_xmit_nit+0x43/0xba0 [ 115.640660][ T9469] ? skb_clone+0x190/0x3f0 [ 115.641787][ T9469] skb_clone+0x190/0x3f0 [ 115.642887][ T9469] dev_queue_xmit_nit+0x38f/0xba0 [ 115.644136][ T9469] dev_hard_start_xmit+0x56/0x790 [ 115.645457][ T9469] ? __dev_queue_xmit+0x252/0x4350 [ 115.646790][ T9469] __dev_queue_xmit+0x7c7/0x4350 [ 115.648045][ T9469] ? __pfx___dev_queue_xmit+0x10/0x10 [ 115.649401][ T9469] ? __asan_memcpy+0x3c/0x60 [ 115.650571][ T9469] ? __asan_memcpy+0x3c/0x60 [ 115.651738][ T9469] ? __skb_clone+0x570/0x760 [ 115.652928][ T9469] netlink_deliver_tap+0xa7d/0xd90 [ 115.654220][ T9469] netlink_unicast+0x6b4/0x7f0 [ 115.655432][ T9469] ? __pfx_netlink_unicast+0x10/0x10 [ 115.656763][ T9469] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 115.658063][ T9469] netlink_ack+0x6a8/0xb90 [ 115.659209][ T9469] netlink_rcv_skb+0x348/0x440 [ 115.660406][ T9469] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 115.661788][ T9469] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.663101][ T9469] ? netlink_deliver_tap+0x1ae/0xd90 [ 115.664433][ T9469] netlink_unicast+0x53c/0x7f0 [ 115.665626][ T9469] ? __pfx_netlink_unicast+0x10/0x10 [ 115.666948][ T9469] netlink_sendmsg+0x8b8/0xd70 [ 115.668150][ T9469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.669470][ T9469] ____sys_sendmsg+0xaaf/0xc90 [ 115.670680][ T9469] ? copy_msghdr_from_user+0x10b/0x160 [ 115.672046][ T9469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.673385][ T9469] ? __pfx___lock_acquire+0x10/0x10 [ 115.674731][ T9469] ___sys_sendmsg+0x135/0x1e0 [ 115.675929][ T9469] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.677233][ T9469] ? lock_acquire+0x2f/0xb0 [ 115.678379][ T9469] ? __fget_files+0x40/0x3f0 [ 115.679591][ T9469] ? fdget+0x176/0x210 [ 115.680658][ T9469] __sys_sendmsg+0x117/0x1f0 [ 115.681827][ T9469] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.683109][ T9469] ? __fget_files+0x244/0x3f0 [ 115.684315][ T9469] do_syscall_64+0xcd/0x250 [ 115.685468][ T9469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.686961][ T9469] RIP: 0033:0x7fa718b7e719 [ 115.688099][ T9469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.693112][ T9469] RSP: 002b:00007fa7199f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.695231][ T9469] RAX: ffffffffffffffda RBX: 00007fa718d35f80 RCX: 00007fa718b7e719 [ 115.697228][ T9469] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 115.699223][ T9469] RBP: 00007fa7199f4090 R08: 0000000000000000 R09: 0000000000000000 [ 115.701180][ T9469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.703184][ T9469] R13: 0000000000000000 R14: 00007fa718d35f80 R15: 00007ffd15482708 [ 115.705151][ T9469] [ 115.758570][ T9478] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 115.762781][ T9478] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 115.808134][ T9486] netlink: 'syz.1.971': attribute type 3 has an invalid length. [ 115.809100][ T9485] netlink: 'syz.1.971': attribute type 3 has an invalid length. [ 115.810042][ T9486] netlink: 132 bytes leftover after parsing attributes in process `syz.1.971'. [ 115.813488][ T9486] sp0: Synchronizing with TNC [ 115.815884][ T9485] netlink: 132 bytes leftover after parsing attributes in process `syz.1.971'. [ 115.846498][ T9489] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 115.913788][ T9496] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 115.917702][ T9496] FAULT_INJECTION: forcing a failure. [ 115.917702][ T9496] name failslab, interval 1, probability 0, space 0, times 0 [ 115.920952][ T9496] CPU: 3 UID: 0 PID: 9496 Comm: syz.0.975 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 115.923734][ T9496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.926401][ T9496] Call Trace: [ 115.927262][ T9496] [ 115.928037][ T9496] dump_stack_lvl+0x16c/0x1f0 [ 115.929240][ T9496] should_fail_ex+0x497/0x5b0 [ 115.930427][ T9496] should_failslab+0xc2/0x120 [ 115.931653][ T9496] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 115.933017][ T9496] ? dev_queue_xmit_nit+0x43/0xba0 [ 115.934312][ T9496] ? skb_clone+0x190/0x3f0 [ 115.935473][ T9496] skb_clone+0x190/0x3f0 [ 115.936578][ T9496] dev_queue_xmit_nit+0x38f/0xba0 [ 115.937847][ T9496] dev_hard_start_xmit+0x56/0x790 [ 115.939137][ T9496] ? __dev_queue_xmit+0x252/0x4350 [ 115.940442][ T9496] __dev_queue_xmit+0x7c7/0x4350 [ 115.941710][ T9496] ? __pfx___dev_queue_xmit+0x10/0x10 [ 115.943104][ T9496] ? __asan_memcpy+0x3c/0x60 [ 115.944273][ T9496] ? __asan_memcpy+0x3c/0x60 [ 115.945454][ T9496] ? __skb_clone+0x570/0x760 [ 115.946634][ T9496] netlink_deliver_tap+0xa7d/0xd90 [ 115.947945][ T9496] netlink_unicast+0x6b4/0x7f0 [ 115.949172][ T9496] ? __pfx_netlink_unicast+0x10/0x10 [ 115.950532][ T9496] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 115.951813][ T9496] netlink_ack+0x6a8/0xb90 [ 115.952967][ T9496] netlink_rcv_skb+0x348/0x440 [ 115.954189][ T9496] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 115.955620][ T9496] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.956949][ T9496] ? netlink_deliver_tap+0x1ae/0xd90 [ 115.958279][ T9496] netlink_unicast+0x53c/0x7f0 [ 115.959493][ T9496] ? __pfx_netlink_unicast+0x10/0x10 [ 115.960840][ T9496] netlink_sendmsg+0x8b8/0xd70 [ 115.962059][ T9496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.963398][ T9496] ____sys_sendmsg+0xaaf/0xc90 [ 115.964612][ T9496] ? copy_msghdr_from_user+0x10b/0x160 [ 115.966003][ T9496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.967366][ T9496] ? __pfx___lock_acquire+0x10/0x10 [ 115.968682][ T9496] ___sys_sendmsg+0x135/0x1e0 [ 115.969857][ T9496] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.971168][ T9496] ? lock_acquire+0x2f/0xb0 [ 115.972328][ T9496] ? __fget_files+0x40/0x3f0 [ 115.973508][ T9496] ? fdget+0x176/0x210 [ 115.974559][ T9496] __sys_sendmsg+0x117/0x1f0 [ 115.975745][ T9496] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.977043][ T9496] ? __fget_files+0x244/0x3f0 [ 115.978247][ T9496] do_syscall_64+0xcd/0x250 [ 115.979382][ T9496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.980887][ T9496] RIP: 0033:0x7fa718b7e719 [ 115.982020][ T9496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.986864][ T9496] RSP: 002b:00007fa7199f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.988989][ T9496] RAX: ffffffffffffffda RBX: 00007fa718d35f80 RCX: 00007fa718b7e719 [ 115.991003][ T9496] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 115.992986][ T9496] RBP: 00007fa7199f4090 R08: 0000000000000000 R09: 0000000000000000 [ 115.995043][ T9496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.997039][ T9496] R13: 0000000000000000 R14: 00007fa718d35f80 R15: 00007ffd15482708 [ 115.999034][ T9496] [ 116.138265][ T9511] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 116.170447][ T9513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.982'. [ 116.192298][ T39] audit: type=1400 audit(1731733503.186:1337): avc: denied { map } for pid=9515 comm="syz.2.983" path="socket:[30480]" dev="sockfs" ino=30480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 116.200661][ T9516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.275788][ T5987] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 116.400620][ T9518] raw_sendmsg: syz.4.984 forgot to set AF_INET. Fix it! [ 116.426826][ T5987] usb 5-1: not running at top speed; connect to a high speed hub [ 116.429480][ T5987] usb 5-1: config 1 has an invalid interface number: 87 but max is 3 [ 116.431457][ T5987] usb 5-1: config 1 has an invalid interface number: 68 but max is 3 [ 116.433507][ T5987] usb 5-1: config 1 has an invalid interface number: 230 but max is 3 [ 116.436226][ T5987] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.439221][ T5987] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 116.441629][ T5987] usb 5-1: config 1 has no interface number 0 [ 116.443207][ T5987] usb 5-1: config 1 has no interface number 1 [ 116.444754][ T5987] usb 5-1: config 1 has no interface number 2 [ 116.446679][ T5987] usb 5-1: config 1 interface 87 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 116.449402][ T5987] usb 5-1: config 1 interface 87 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 116.452046][ T5987] usb 5-1: config 1 interface 230 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 116.455274][ T5987] usb 5-1: config 1 interface 87 has no altsetting 0 [ 116.457061][ T5987] usb 5-1: config 1 interface 68 has no altsetting 0 [ 116.458731][ T5987] usb 5-1: config 1 interface 230 has no altsetting 0 [ 116.462245][ T5987] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.be [ 116.464561][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.466676][ T5987] usb 5-1: Product: ю [ 116.467735][ T5987] usb 5-1: Manufacturer: 榳烍 [ 116.468963][ T5987] usb 5-1: SerialNumber: 鶲瘥賺歆꩞ヷ訶춷謈얻틎䃰᳽Т⠉㩓፯咙婓첀ꍌ퐆嵸ዀἷ댹춮㖼촅☯㛞떅钪츻愸蘕뗝袔ᩀూ漡ꍻ硢쐇ۯ嵬ĉ뤇뵣ꥄሴ蒁촜縰 [ 116.525414][ T5299] Bluetooth: hci0: command tx timeout [ 116.681427][ T5987] (null): radio-mr800 - initialization failed [ 116.683418][ T5987] radio-mr800 5-1:1.87: probe with driver radio-mr800 failed with error -8 [ 116.685924][ T5987] usbhid 5-1:1.87: couldn't find an input interrupt endpoint [ 116.691544][ T5987] usb 5-1: USB disconnect, device number 17 [ 116.751191][ T9526] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 116.754323][ T9526] FAULT_INJECTION: forcing a failure. [ 116.754323][ T9526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.758667][ T9526] CPU: 0 UID: 0 PID: 9526 Comm: syz.2.987 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 116.761595][ T9526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.764186][ T9526] Call Trace: [ 116.765054][ T9526] [ 116.765828][ T9526] dump_stack_lvl+0x16c/0x1f0 [ 116.767024][ T9526] should_fail_ex+0x497/0x5b0 [ 116.768227][ T9526] _copy_from_user+0x2e/0xd0 [ 116.769413][ T9526] kstrtouint_from_user+0xd7/0x1c0 [ 116.770706][ T9526] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 116.772150][ T9526] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 116.773572][ T9526] proc_fail_nth_write+0x84/0x250 [ 116.774857][ T9526] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 116.776247][ T9526] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 116.777665][ T9526] vfs_write+0x24c/0x1150 [ 116.778775][ T9526] ? __fget_files+0x23a/0x3f0 [ 116.780001][ T9526] ? fdget_pos+0x24c/0x360 [ 116.781294][ T9526] ? __pfx_lock_release+0x10/0x10 [ 116.782574][ T9526] ? trace_lock_acquire+0x14a/0x1d0 [ 116.783940][ T9526] ? __pfx_vfs_write+0x10/0x10 [ 116.785135][ T9526] ? __pfx___mutex_lock+0x10/0x10 [ 116.786449][ T9526] ? __fget_files+0x244/0x3f0 [ 116.787614][ T9526] ksys_write+0x12f/0x260 [ 116.788747][ T9526] ? __pfx_ksys_write+0x10/0x10 [ 116.790028][ T9526] do_syscall_64+0xcd/0x250 [ 116.791214][ T9526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.792713][ T9526] RIP: 0033:0x7fcfda57d1ff [ 116.793840][ T9526] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 116.798674][ T9526] RSP: 002b:00007fcfdb33f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 116.800725][ T9526] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcfda57d1ff [ 116.802718][ T9526] RDX: 0000000000000001 RSI: 00007fcfdb33f0a0 RDI: 0000000000000004 [ 116.804663][ T9526] RBP: 00007fcfdb33f090 R08: 0000000000000000 R09: 0000000000000000 [ 116.806614][ T9526] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 116.808523][ T9526] R13: 0000000000000000 R14: 00007fcfda735f80 R15: 00007ffc39625068 [ 116.810458][ T9526] [ 116.811337][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.855024][ T9535] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 116.881126][ T9537] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 117.125492][ T5984] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 117.277255][ T39] audit: type=1400 audit(1731733504.276:1338): avc: denied { read } for pid=9547 comm="syz.4.997" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.285426][ T5984] usb 7-1: Using ep0 maxpacket: 8 [ 117.288488][ T5984] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.290993][ T5984] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.293390][ T5984] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.296247][ T5984] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.299514][ T5984] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.302011][ T5984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.510181][ T5984] usb 7-1: usb_control_msg returned -32 [ 117.511692][ T5984] usbtmc 7-1:16.0: can't read capabilities [ 117.565431][ T5299] Bluetooth: hci3: command 0x0406 tx timeout [ 119.882371][ T830] usb 7-1: USB disconnect, device number 16 [ 120.468182][ T9558] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 120.470824][ T64] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 120.580210][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1003'. [ 120.755394][ T75] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 120.805393][ T5987] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 120.907820][ T75] usb 5-1: not running at top speed; connect to a high speed hub [ 120.910585][ T75] usb 5-1: config 1 has an invalid interface number: 87 but max is 3 [ 120.912608][ T75] usb 5-1: config 1 has an invalid interface number: 68 but max is 3 [ 120.914637][ T75] usb 5-1: config 1 has an invalid interface number: 230 but max is 3 [ 120.916819][ T75] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.919416][ T75] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 120.921772][ T75] usb 5-1: config 1 has no interface number 0 [ 120.923378][ T75] usb 5-1: config 1 has no interface number 1 [ 120.924961][ T75] usb 5-1: config 1 has no interface number 2 [ 120.926612][ T75] usb 5-1: config 1 interface 87 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 120.929375][ T75] usb 5-1: config 1 interface 87 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 120.932213][ T75] usb 5-1: config 1 interface 230 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 120.935492][ T75] usb 5-1: config 1 interface 87 has no altsetting 0 [ 120.937139][ T75] usb 5-1: config 1 interface 68 has no altsetting 0 [ 120.938805][ T75] usb 5-1: config 1 interface 230 has no altsetting 0 [ 120.942083][ T75] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.be [ 120.944498][ T75] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.946578][ T75] usb 5-1: Product: ю [ 120.947643][ T75] usb 5-1: Manufacturer: 榳烍 [ 120.948904][ T75] usb 5-1: SerialNumber: 鶲瘥賺歆꩞ヷ訶춷謈얻틎䃰᳽Т⠉㩓፯咙婓첀ꍌ퐆嵸ዀἷ댹춮㖼촅☯㛞떅钪츻愸蘕뗝袔ᩀూ漡ꍻ硢쐇ۯ嵬ĉ뤇뵣ꥄሴ蒁촜縰 [ 120.985367][ T5987] usb 9-1: Using ep0 maxpacket: 32 [ 120.987949][ T5987] usb 9-1: config 4 has an invalid interface number: 8 but max is 0 [ 120.990036][ T5987] usb 9-1: config 4 has no interface number 0 [ 120.991572][ T5987] usb 9-1: config 4 interface 8 has no altsetting 0 [ 120.994939][ T5987] usb 9-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 120.997251][ T5987] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.999314][ T5987] usb 9-1: Product: syz [ 121.000592][ T5987] usb 9-1: Manufacturer: syz [ 121.001754][ T5987] usb 9-1: SerialNumber: syz [ 121.161215][ T75] (null): radio-mr800 - initialization failed [ 121.162919][ T75] radio-mr800 5-1:1.87: probe with driver radio-mr800 failed with error -8 [ 121.165234][ T75] usbhid 5-1:1.87: couldn't find an input interrupt endpoint [ 121.172163][ T75] usb 5-1: USB disconnect, device number 18 [ 121.211088][ T5987] opticon 9-1:4.8: opticon converter detected [ 121.213569][ T5987] usb 9-1: opticon converter now attached to ttyUSB0 [ 121.218414][ T5987] usb 9-1: USB disconnect, device number 11 [ 121.224525][ T5987] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 121.227302][ T5987] opticon 9-1:4.8: device disconnected [ 121.379240][ T9580] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 121.400834][ T9582] input: syz1 as /devices/virtual/input/input15 [ 121.429194][ T9587] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 121.564527][ T9593] --map-set only usable from mangle table [ 121.663186][ T9600] netlink: 'syz.1.1014': attribute type 3 has an invalid length. [ 121.665954][ T9600] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1014'. [ 121.734735][ T9607] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 121.806721][ T39] audit: type=1400 audit(1731733508.806:1339): avc: denied { setopt } for pid=9611 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.833316][ T9619] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 121.885155][ T9624] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 122.025780][ T9641] 9pnet_fd: Insufficient options for proto=fd [ 122.029479][ T39] audit: type=1400 audit(1731733509.026:1340): avc: denied { module_load } for pid=9640 comm="syz.2.1028" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=32959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 122.039742][ T9641] Invalid ELF header magic: != ELF [ 122.089598][ T9644] random: crng reseeded on system resumption [ 122.089599][ T39] audit: type=1400 audit(1731733509.086:1341): avc: denied { write } for pid=9642 comm="syz.2.1030" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.136924][ T9647] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 122.205457][ T8] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 122.238656][ T39] audit: type=1400 audit(1731733509.236:1342): avc: denied { write } for pid=9648 comm="syz.4.1032" lport=50440 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 122.345017][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1033'. [ 122.353314][ T9653] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.355950][ T9653] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.358239][ T9653] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.360525][ T9653] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.364164][ T9653] vxlan0: entered promiscuous mode [ 122.366981][ T8] usb 6-1: not running at top speed; connect to a high speed hub [ 122.370468][ T8] usb 6-1: config 1 has an invalid interface number: 87 but max is 3 [ 122.375386][ T8] usb 6-1: config 1 has an invalid interface number: 68 but max is 3 [ 122.378114][ T8] usb 6-1: config 1 has an invalid interface number: 230 but max is 3 [ 122.380938][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.384389][ T8] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 122.396638][ T8] usb 6-1: config 1 has no interface number 0 [ 122.398802][ T8] usb 6-1: config 1 has no interface number 1 [ 122.400920][ T8] usb 6-1: config 1 has no interface number 2 [ 122.403092][ T8] usb 6-1: config 1 interface 87 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 122.407422][ T8] usb 6-1: config 1 interface 87 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 122.411044][ T8] usb 6-1: config 1 interface 230 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 122.415728][ T8] usb 6-1: config 1 interface 87 has no altsetting 0 [ 122.416748][ T9668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1037'. [ 122.417940][ T8] usb 6-1: config 1 interface 68 has no altsetting 0 [ 122.423044][ T8] usb 6-1: config 1 interface 230 has no altsetting 0 [ 122.429043][ T8] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.be [ 122.432085][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.436359][ T8] usb 6-1: Product: ю [ 122.437732][ T8] usb 6-1: Manufacturer: 榳烍 [ 122.439469][ T8] usb 6-1: SerialNumber: 鶲瘥賺歆꩞ヷ訶춷謈얻틎䃰᳽Т⠉㩓፯咙婓첀ꍌ퐆嵸ዀἷ댹춮㖼촅☯㛞떅钪츻愸蘕뗝袔ᩀూ漡ꍻ硢쐇ۯ嵬ĉ뤇뵣ꥄሴ蒁촜縰 [ 122.443847][ T39] audit: type=1400 audit(1731733509.436:1343): avc: denied { getopt } for pid=9669 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.498251][ T9679] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 122.505393][ T830] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 122.534061][ T9684] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1043'. [ 122.538643][ T9684] netlink: 'syz.2.1043': attribute type 1 has an invalid length. [ 122.578861][ T9693] binder: 9692:9693 unknown command 0 [ 122.580460][ T9693] binder: 9692:9693 ioctl c0306201 20000000 returned -22 [ 122.582145][ T9696] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1046'. [ 122.584695][ T9696] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 122.587093][ T9696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1046'. [ 122.590007][ T9696] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1046'. [ 122.592526][ T9696] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 122.594553][ T9696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1046'. [ 122.597219][ T9695] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 122.599234][ T9695] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1046'. [ 122.601503][ T9696] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 122.603530][ T9696] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 122.606606][ T9696] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 122.608729][ T9696] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 122.610796][ T9696] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 122.622156][ T9700] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 122.661192][ T830] usb 5-1: config 0 has an invalid interface number: 104 but max is 0 [ 122.661818][ T9706] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 122.662723][ T8] (null): radio-mr800 - initialization failed [ 122.662764][ T8] radio-mr800 6-1:1.87: probe with driver radio-mr800 failed with error -8 [ 122.662859][ T8] usbhid 6-1:1.87: couldn't find an input interrupt endpoint [ 122.663348][ T830] usb 5-1: config 0 has no interface number 0 [ 122.669678][ T8] usb 6-1: USB disconnect, device number 15 [ 122.670486][ T830] usb 5-1: config 0 interface 104 has no altsetting 0 [ 122.679085][ T830] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 122.681444][ T830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.681866][ T9700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9700 comm=syz.4.1048 [ 122.683532][ T830] usb 5-1: Product: syz [ 122.688199][ T830] usb 5-1: Manufacturer: syz [ 122.689434][ T830] usb 5-1: SerialNumber: syz [ 122.691871][ T830] usb 5-1: config 0 descriptor?? [ 122.696153][ T830] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 122.787422][ T39] audit: type=1400 audit(1731733509.786:1344): avc: denied { ioctl } for pid=9714 comm="syz.2.1054" path="socket:[32281]" dev="sockfs" ino=32281 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 122.794081][ T39] audit: type=1400 audit(1731733509.786:1345): avc: denied { accept } for pid=9714 comm="syz.2.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 122.812024][ T39] audit: type=1400 audit(1731733509.806:1346): avc: denied { getopt } for pid=9717 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.896413][ T830] gspca_vc032x: reg_r err -71 [ 122.897702][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.899090][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.900466][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.901994][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.903388][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.904761][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.906236][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.907620][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.908993][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.910361][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.911739][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.913120][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.914499][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.915977][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.917379][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.918763][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.920155][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.921536][ T830] gspca_vc032x: I2c Bus Busy Wait 00 [ 122.922908][ T830] gspca_vc032x: Unknown sensor... [ 122.924248][ T830] vc032x 5-1:0.104: probe with driver vc032x failed with error -22 [ 122.927078][ T830] usb 5-1: USB disconnect, device number 19 [ 122.981423][ T6331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.984242][ T6331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.987038][ T6331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 123.038438][ T5299] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.042133][ T5299] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.044608][ T5299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.048191][ T5299] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.050611][ T5299] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 123.052757][ T5299] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.094082][ T6331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.096962][ T6331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.099619][ T6331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 123.104795][ T9732] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 123.152517][ T9727] chnl_net:caif_netlink_parms(): no params data found [ 123.170719][ T6331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.173424][ T6331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.176569][ T6331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 123.246129][ T9727] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.248625][ T9727] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.250575][ T9727] bridge_slave_0: entered allmulticast mode [ 123.252662][ T9727] bridge_slave_0: entered promiscuous mode [ 123.255203][ T9727] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.260329][ T9727] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.262243][ T9727] bridge_slave_1: entered allmulticast mode [ 123.264361][ T9727] bridge_slave_1: entered promiscuous mode [ 123.294591][ T6331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.297354][ T6331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.300013][ T6331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 123.313420][ T9727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.317490][ T9727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.347542][ T9727] team0: Port device team_slave_0 added [ 123.350166][ T9727] team0: Port device team_slave_1 added [ 123.351065][ T9749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.369297][ T9727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.371166][ T9727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.378228][ T9727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.383986][ T9727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.385967][ T9727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.392686][ T9727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.432820][ T9727] hsr_slave_0: entered promiscuous mode [ 123.434934][ T9727] hsr_slave_1: entered promiscuous mode [ 123.437035][ T9727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.439024][ T9727] Cannot create hsr debugfs directory [ 123.446433][ T9758] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 123.479085][ T6331] bridge_slave_1: left allmulticast mode [ 123.480577][ T6331] bridge_slave_1: left promiscuous mode [ 123.482458][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.487481][ T6331] bridge_slave_0: left allmulticast mode [ 123.488982][ T6331] bridge_slave_0: left promiscuous mode [ 123.490483][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.715421][ T5984] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 123.725822][ T39] audit: type=1400 audit(1731733510.716:1347): avc: denied { bind } for pid=9769 comm="syz.2.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.738135][ T6331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.742688][ T6331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.752011][ T6331] bond0 (unregistering): Released all slaves [ 123.768277][ T9765] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 123.798160][ T6331] tipc: Disabling bearer [ 123.806224][ T6331] tipc: Left network mode [ 123.868865][ T9784] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 123.872351][ T9727] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.877598][ T9774] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 123.891921][ T5984] usb 5-1: not running at top speed; connect to a high speed hub [ 123.894884][ T5984] usb 5-1: config 1 has an invalid interface number: 87 but max is 3 [ 123.897372][ T5984] usb 5-1: config 1 has an invalid interface number: 68 but max is 3 [ 123.899487][ T5984] usb 5-1: config 1 has an invalid interface number: 230 but max is 3 [ 123.901600][ T5984] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.904340][ T5984] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 123.906859][ T5984] usb 5-1: config 1 has no interface number 0 [ 123.908456][ T5984] usb 5-1: config 1 has no interface number 1 [ 123.910035][ T5984] usb 5-1: config 1 has no interface number 2 [ 123.911634][ T5984] usb 5-1: config 1 interface 87 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 123.914513][ T5984] usb 5-1: config 1 interface 87 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 123.917401][ T5984] usb 5-1: config 1 interface 230 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 123.920852][ T5984] usb 5-1: config 1 interface 87 has no altsetting 0 [ 123.922668][ T5984] usb 5-1: config 1 interface 68 has no altsetting 0 [ 123.923116][ T9727] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.924450][ T5984] usb 5-1: config 1 interface 230 has no altsetting 0 [ 123.930203][ T5984] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.be [ 123.932564][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.934652][ T5984] usb 5-1: Product: ю [ 123.935791][ T5984] usb 5-1: Manufacturer: 榳烍 [ 123.937059][ T5984] usb 5-1: SerialNumber: 鶲瘥賺歆꩞ヷ訶춷謈얻틎䃰᳽Т⠉㩓፯咙婓첀ꍌ퐆嵸ዀἷ댹춮㖼촅☯㛞떅钪츻愸蘕뗝袔ᩀూ漡ꍻ硢쐇ۯ嵬ĉ뤇뵣ꥄሴ蒁촜縰 [ 123.949913][ T9727] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.953853][ T9727] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.996606][ T9727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.030009][ T9727] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.037741][ T6332] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.040160][ T6332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.049625][ T6332] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.051590][ T6332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.089924][ T6331] hsr_slave_0: left promiscuous mode [ 124.091783][ T6331] hsr_slave_1: left promiscuous mode [ 124.093561][ T6331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.095768][ T6331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.098005][ T6331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.099949][ T6331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.120728][ T6331] veth1_macvtap: left promiscuous mode [ 124.122621][ T6331] veth0_macvtap: left promiscuous mode [ 124.124117][ T6331] veth1_vlan: left promiscuous mode [ 124.125590][ T6331] veth0_vlan: left promiscuous mode [ 124.151633][ T5984] (null): radio-mr800 - initialization failed [ 124.153389][ T5984] radio-mr800 5-1:1.87: probe with driver radio-mr800 failed with error -8 [ 124.156144][ T5984] usbhid 5-1:1.87: couldn't find an input interrupt endpoint [ 124.165182][ T5984] usb 5-1: USB disconnect, device number 20 [ 124.565377][ T8] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 124.719699][ T8] usb 6-1: config 0 has an invalid interface number: 104 but max is 0 [ 124.722458][ T8] usb 6-1: config 0 has no interface number 0 [ 124.724573][ T8] usb 6-1: config 0 interface 104 has no altsetting 0 [ 124.731377][ T8] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 124.734395][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.736828][ T8] usb 6-1: Product: syz [ 124.737927][ T8] usb 6-1: Manufacturer: syz [ 124.739168][ T8] usb 6-1: SerialNumber: syz [ 124.741352][ T8] usb 6-1: config 0 descriptor?? [ 124.744035][ T8] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 124.762902][ T6331] team0 (unregistering): Port device team_slave_1 removed [ 124.841022][ T6331] team0 (unregistering): Port device team_slave_0 removed [ 125.088244][ T5299] Bluetooth: hci3: command tx timeout [ 125.268128][ T8] gspca_vc032x: reg_r err -110 [ 125.269524][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.271021][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.272405][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.273787][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.275193][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.276777][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.278171][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.279562][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.281607][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.283021][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.284403][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.286196][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.287598][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.288984][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.290627][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.292080][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.293467][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.294872][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.296308][ T8] gspca_vc032x: Unknown sensor... [ 125.297650][ T8] vc032x 6-1:0.104: probe with driver vc032x failed with error -22 [ 125.367429][ T9807] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 125.370947][ T9811] IPVS: Unknown mcast interface: vxcan1 [ 125.376538][ T5983] usb 6-1: USB disconnect, device number 16 [ 125.432413][ T9727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.534836][ T9727] veth0_vlan: entered promiscuous mode [ 125.540520][ T9727] veth1_vlan: entered promiscuous mode [ 125.555147][ T9727] veth0_macvtap: entered promiscuous mode [ 125.558917][ T9727] veth1_macvtap: entered promiscuous mode [ 125.572960][ T39] audit: type=1400 audit(1731733512.566:1348): avc: denied { accept } for pid=9845 comm="syz.2.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.574033][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.581566][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.584098][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.586919][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.589446][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.592136][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.595828][ T9727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.609946][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.612670][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.615198][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.618167][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.620691][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.623369][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.627949][ T9727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.631194][ T9727] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.633525][ T9727] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.636044][ T9727] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.638314][ T9727] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.687715][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.690349][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.703218][ T6332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.705262][ T6332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.720573][ T6331] IPVS: stop unused estimator thread 0... [ 125.909769][ T9873] __nla_validate_parse: 98 callbacks suppressed [ 125.909780][ T9873] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1092'. [ 125.913955][ T9873] unsupported nla_type 40 [ 125.917173][ T9873] pim6reg1: entered promiscuous mode [ 125.918659][ T9873] pim6reg1: entered allmulticast mode [ 126.026189][ T35] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 126.174141][ T9895] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1093'. [ 126.197810][ T35] usb 10-1: not running at top speed; connect to a high speed hub [ 126.200985][ T35] usb 10-1: config 1 has an invalid interface number: 87 but max is 3 [ 126.204413][ T35] usb 10-1: config 1 has an invalid interface number: 68 but max is 3 [ 126.208318][ T35] usb 10-1: config 1 has an invalid interface number: 230 but max is 3 [ 126.211501][ T35] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.214094][ T35] usb 10-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 126.216519][ T35] usb 10-1: config 1 has no interface number 0 [ 126.218127][ T35] usb 10-1: config 1 has no interface number 1 [ 126.219790][ T35] usb 10-1: config 1 has no interface number 2 [ 126.221410][ T35] usb 10-1: config 1 interface 87 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 126.224121][ T35] usb 10-1: config 1 interface 87 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 126.226907][ T35] usb 10-1: config 1 interface 230 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 126.230456][ T35] usb 10-1: config 1 interface 87 has no altsetting 0 [ 126.232164][ T35] usb 10-1: config 1 interface 68 has no altsetting 0 [ 126.233910][ T35] usb 10-1: config 1 interface 230 has no altsetting 0 [ 126.237399][ T35] usb 10-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.be [ 126.239850][ T35] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.242065][ T35] usb 10-1: Product: ю [ 126.243178][ T35] usb 10-1: Manufacturer: 榳烍 [ 126.244511][ T35] usb 10-1: SerialNumber: 鶲瘥賺歆꩞ヷ訶춷謈얻틎䃰᳽Т⠉㩓፯咙婓첀ꍌ퐆嵸ዀἷ댹춮㖼촅☯㛞떅钪츻愸蘕뗝袔ᩀూ漡ꍻ硢쐇ۯ嵬ĉ뤇뵣ꥄሴ蒁촜縰 [ 126.386090][ T9913] pim6reg: entered allmulticast mode [ 126.456382][ T35] (null): radio-mr800 - initialization failed [ 126.458152][ T35] radio-mr800 10-1:1.87: probe with driver radio-mr800 failed with error -8 [ 126.461046][ T35] usbhid 10-1:1.87: couldn't find an input interrupt endpoint [ 126.472477][ T35] usb 10-1: USB disconnect, device number 2 [ 126.504239][ T9922] tipc: Started in network mode [ 126.505955][ T9922] tipc: Node identity 4, cluster identity 4711 [ 126.507642][ T9922] tipc: Node number set to 4 [ 126.667179][ T9940] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1108'. [ 126.735697][ T9942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1108'. [ 126.738109][ T9941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1108'. [ 126.903849][ T9953] tmpfs: Bad value for 'mpol' [ 126.907171][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 126.907180][ T39] audit: type=1400 audit(1731733513.906:1354): avc: denied { getopt } for pid=9952 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 127.056706][ T39] audit: type=1400 audit(1731733514.056:1355): avc: denied { create } for pid=9969 comm="syz.5.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.063456][ T39] audit: type=1400 audit(1731733514.056:1356): avc: denied { write } for pid=9969 comm="syz.5.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.111101][ T9979] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1121'. [ 127.137699][ T39] audit: type=1400 audit(1731733514.136:1357): avc: denied { map } for pid=9984 comm="syz.2.1122" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 127.139277][ T9979] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1121'. [ 127.143762][ T39] audit: type=1400 audit(1731733514.136:1358): avc: denied { execute } for pid=9984 comm="syz.2.1122" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 127.169967][ T9986] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 127.172424][ T9986] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 127.175452][ T5299] Bluetooth: hci3: command tx timeout [ 127.178841][ T39] audit: type=1400 audit(1731733514.166:1359): avc: denied { mount } for pid=9984 comm="syz.2.1122" name="/" dev="9p" ino=37617753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 127.190035][ T39] audit: type=1400 audit(1731733514.186:1360): avc: denied { unmount } for pid=8383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 127.319112][ T9994] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1125'. [ 127.435763][ T5987] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 127.597152][ T5987] usb 10-1: not running at top speed; connect to a high speed hub [ 127.600168][ T5987] usb 10-1: config 1 has an invalid interface number: 87 but max is 3 [ 127.602273][ T5987] usb 10-1: config 1 has an invalid interface number: 68 but max is 3 [ 127.615410][ T5987] usb 10-1: config 1 has an invalid interface number: 230 but max is 3 [ 127.617562][ T5987] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.620169][ T5987] usb 10-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 127.622479][ T5987] usb 10-1: config 1 has no interface number 0 [ 127.624093][ T5987] usb 10-1: config 1 has no interface number 1 [ 127.625814][ T5987] usb 10-1: config 1 has no interface number 2 [ 127.627446][ T5987] usb 10-1: config 1 interface 87 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 127.630199][ T5987] usb 10-1: config 1 interface 87 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 127.632961][ T5987] usb 10-1: config 1 interface 230 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 127.636455][ T5987] usb 10-1: config 1 interface 87 has no altsetting 0 [ 127.638211][ T5987] usb 10-1: config 1 interface 68 has no altsetting 0 [ 127.639967][ T5987] usb 10-1: config 1 interface 230 has no altsetting 0 [ 127.643278][ T5987] usb 10-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.be [ 127.645788][ T5987] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.647891][ T5987] usb 10-1: Product: ю [ 127.648998][ T5987] usb 10-1: Manufacturer: 榳烍 [ 127.650292][ T5987] usb 10-1: SerialNumber: 鶲瘥賺歆꩞ヷ訶춷謈얻틎䃰᳽Т⠉㩓፯咙婓첀ꍌ퐆嵸ዀἷ댹춮㖼촅☯㛞떅钪츻愸蘕뗝袔ᩀూ漡ꍻ硢쐇ۯ嵬ĉ뤇뵣ꥄሴ蒁촜縰 [ 127.714487][T10009] block device autoloading is deprecated and will be removed. [ 127.716912][ T39] audit: type=1400 audit(1731733514.716:1361): avc: denied { ioctl } for pid=10007 comm="syz.0.1131" path="/328/file0/file0" dev="fuse" ino=0 ioctlcmd=0x910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 127.863617][ T5987] (null): radio-mr800 - initialization failed [ 127.865503][ T5987] radio-mr800 10-1:1.87: probe with driver radio-mr800 failed with error -8 [ 127.867844][ T5987] usbhid 10-1:1.87: couldn't find an input interrupt endpoint [ 127.874264][T10026] No buffer was provided with the request [ 127.878585][ T5987] usb 10-1: USB disconnect, device number 3 [ 127.880656][T10026] No buffer was provided with the request [ 127.957806][ T39] audit: type=1400 audit(1731733514.956:1362): avc: denied { write } for pid=10031 comm="syz.0.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 128.016455][T10003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1129'. [ 128.371426][ T39] audit: type=1400 audit(1731733515.366:1363): avc: denied { read } for pid=10043 comm="syz.2.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.429435][T10053] 9p: Unknown uid 00000000004294967295 [ 129.059834][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1149'. [ 129.245478][ T5299] Bluetooth: hci3: command tx timeout [ 129.275426][ T75] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 129.325426][ T5984] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 129.428032][ T75] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.430987][ T75] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.433518][ T75] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 129.436100][ T75] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.439164][ T75] usb 5-1: config 0 descriptor?? [ 129.477103][ T5984] usb 6-1: not running at top speed; connect to a high speed hub [ 129.480091][ T5984] usb 6-1: config 1 has an invalid interface number: 87 but max is 3 [ 129.482235][ T5984] usb 6-1: config 1 has an invalid interface number: 68 but max is 3 [ 129.484379][ T5984] usb 6-1: config 1 has an invalid interface number: 230 but max is 3 [ 129.487164][ T5984] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.490176][ T5984] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 129.492540][ T5984] usb 6-1: config 1 has no interface number 0 [ 129.494328][ T5984] usb 6-1: config 1 has no interface number 1 [ 129.496337][ T5984] usb 6-1: config 1 has no interface number 2 [ 129.498041][ T5984] usb 6-1: config 1 interface 87 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 129.500872][ T5984] usb 6-1: config 1 interface 87 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 129.503691][ T5984] usb 6-1: config 1 interface 230 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 129.507245][ T5984] usb 6-1: config 1 interface 87 has no altsetting 0 [ 129.509093][ T5984] usb 6-1: config 1 interface 68 has no altsetting 0 [ 129.510868][ T5984] usb 6-1: config 1 interface 230 has no altsetting 0 [ 129.514447][ T5984] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.be [ 129.516928][ T5984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.519036][ T5984] usb 6-1: Product: ю [ 129.520183][ T5984] usb 6-1: Manufacturer: 榳烍 [ 129.521508][ T5984] usb 6-1: SerialNumber: 鶲瘥賺歆꩞ヷ訶춷謈얻틎䃰᳽Т⠉㩓፯咙婓첀ꍌ퐆嵸ዀἷ댹춮㖼촅☯㛞떅钪츻愸蘕뗝袔ᩀూ漡ꍻ硢쐇ۯ嵬ĉ뤇뵣ꥄሴ蒁촜縰 [ 129.732428][ T5984] (null): radio-mr800 - initialization failed [ 129.734223][ T5984] radio-mr800 6-1:1.87: probe with driver radio-mr800 failed with error -8 [ 129.738440][ T5984] usbhid 6-1:1.87: couldn't find an input interrupt endpoint [ 129.745202][ T5984] usb 6-1: USB disconnect, device number 17 [ 129.845949][ T75] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 129.847982][ T75] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 129.850707][ T75] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.0005/input/input18 [ 129.862780][ T75] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 130.046267][ T5984] usb 5-1: USB disconnect, device number 21 [ 130.264081][T10148] xt_cgroup: path and classid specified [ 130.549936][T10169] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 130.586955][T10174] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 130.589342][T10174] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 130.592149][T10175] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 130.593862][T10175] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 130.598249][T10175] vhci_hcd vhci_hcd.0: Device attached [ 130.600301][T10179] usbip_core: unknown command [ 130.601552][T10179] vhci_hcd: unknown pdu 0 [ 130.602690][T10179] usbip_core: unknown command [ 130.604508][T10174] vhci_hcd vhci_hcd.0: Device attached [ 130.604572][ T6332] vhci_hcd: stop threads [ 130.607802][ T6332] vhci_hcd: release socket [ 130.609078][ T6332] vhci_hcd: disconnect device [ 130.615194][T10176] vhci_hcd: connection closed [ 130.616620][ T6326] vhci_hcd: stop threads [ 130.618980][ T6326] vhci_hcd: release socket [ 130.620153][ T6326] vhci_hcd: disconnect device [ 130.627932][T10183] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 130.630488][T10183] overlayfs: failed to set xattr on upper [ 130.632264][T10183] overlayfs: ...falling back to redirect_dir=nofollow. [ 130.634095][T10183] overlayfs: ...falling back to index=off. [ 130.636519][T10183] overlayfs: ...falling back to uuid=null. [ 130.639625][T10183] overlayfs: ...falling back to xino=off. [ 130.675505][ T829] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 130.826995][ T829] usb 6-1: not running at top speed; connect to a high speed hub [ 130.830446][ T829] usb 6-1: config 1 has an invalid interface number: 87 but max is 3 [ 130.833111][ T829] usb 6-1: config 1 has an invalid interface number: 68 but max is 3 [ 130.835951][ T829] usb 6-1: config 1 has an invalid interface number: 230 but max is 3 [ 130.838708][ T829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.842148][ T829] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 130.845139][ T829] usb 6-1: config 1 has no interface number 0 [ 130.847563][ T829] usb 6-1: config 1 has no interface number 1 [ 130.849579][ T829] usb 6-1: config 1 has no interface number 2 [ 130.851657][ T829] usb 6-1: config 1 interface 87 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 130.855465][ T829] usb 6-1: config 1 interface 87 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 130.859200][ T829] usb 6-1: config 1 interface 230 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 130.863579][ T829] usb 6-1: config 1 interface 87 has no altsetting 0 [ 130.865984][ T829] usb 6-1: config 1 interface 68 has no altsetting 0 [ 130.868162][ T829] usb 6-1: config 1 interface 230 has no altsetting 0 [ 130.871977][ T829] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.be [ 130.875110][ T829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.877819][ T829] usb 6-1: Product: ю [ 130.879198][ T829] usb 6-1: Manufacturer: 榳烍 [ 130.880840][ T829] usb 6-1: SerialNumber: 鶲瘥賺歆꩞ヷ訶춷謈얻틎䃰᳽Т⠉㩓፯咙婓첀ꍌ퐆嵸ዀἷ댹춮㖼촅☯㛞떅钪츻愸蘕뗝袔ᩀూ漡ꍻ硢쐇ۯ嵬ĉ뤇뵣ꥄሴ蒁촜縰 [ 131.021009][T10201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1178'. [ 131.094494][ T829] (null): radio-mr800 - initialization failed [ 131.096263][ T829] radio-mr800 6-1:1.87: probe with driver radio-mr800 failed with error -8 [ 131.098574][ T829] usbhid 6-1:1.87: couldn't find an input interrupt endpoint [ 131.104167][ T829] usb 6-1: USB disconnect, device number 18 [ 131.295579][ T75] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 131.325420][ T5299] Bluetooth: hci3: command tx timeout [ 131.445429][ T75] usb 5-1: Using ep0 maxpacket: 8 [ 131.448081][ T75] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.450899][ T75] usb 5-1: config 0 has no interfaces? [ 131.452429][ T75] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.454851][ T75] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.458030][ T75] usb 5-1: config 0 descriptor?? [ 131.693644][T10226] validate_nla: 63 callbacks suppressed [ 131.693655][T10226] netlink: 'syz.1.1186': attribute type 178 has an invalid length. [ 131.804964][T10233] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 131.862478][T10203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.864761][T10203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.872377][T10203] syz.0.1179: attempt to access beyond end of device [ 131.872377][T10203] nbd0: rw=0, sector=16, nr_sectors = 8 limit=0 [ 131.876537][T10203] REISERFS warning (device nbd0): sh-2006 read_super_block: bread failed (dev nbd0, block 2, size 4096) [ 131.880136][T10203] syz.0.1179: attempt to access beyond end of device [ 131.880136][T10203] nbd0: rw=0, sector=128, nr_sectors = 8 limit=0 [ 131.883459][T10203] REISERFS warning (device nbd0): sh-2006 read_super_block: bread failed (dev nbd0, block 16, size 4096) [ 131.886810][T10203] REISERFS warning (device nbd0): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd0 [ 131.902144][ T75] usb 5-1: USB disconnect, device number 22 [ 132.125452][ T830] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 132.276989][ T830] usb 6-1: not running at top speed; connect to a high speed hub [ 132.279843][ T830] usb 6-1: config 1 has an invalid interface number: 87 but max is 3 [ 132.282000][ T830] usb 6-1: config 1 has an invalid interface number: 68 but max is 3 [ 132.284094][ T830] usb 6-1: config 1 has an invalid interface number: 230 but max is 3 [ 132.286415][ T830] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.289021][ T830] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 132.291458][ T830] usb 6-1: config 1 has no interface number 0 [ 132.293094][ T830] usb 6-1: config 1 has no interface number 1 [ 132.294674][ T830] usb 6-1: config 1 has no interface number 2 [ 132.296494][ T830] usb 6-1: config 1 interface 87 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 132.299281][ T830] usb 6-1: config 1 interface 87 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 132.302126][ T830] usb 6-1: config 1 interface 230 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 132.305613][ T830] usb 6-1: config 1 interface 87 has no altsetting 0 [ 132.307338][ T830] usb 6-1: config 1 interface 68 has no altsetting 0 [ 132.309068][ T830] usb 6-1: config 1 interface 230 has no altsetting 0 [ 132.312301][ T830] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.be [ 132.314650][ T830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.316884][ T830] usb 6-1: Product: ю [ 132.317975][ T830] usb 6-1: Manufacturer: 榳烍 [ 132.319267][ T830] usb 6-1: SerialNumber: 鶲瘥賺歆꩞ヷ訶춷謈얻틎䃰᳽Т⠉㩓፯咙婓첀ꍌ퐆嵸ዀἷ댹춮㖼촅☯㛞떅钪츻愸蘕뗝袔ᩀూ漡ꍻ硢쐇ۯ嵬ĉ뤇뵣ꥄሴ蒁촜縰 [ 132.438264][T10260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1197'. [ 132.447370][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.449514][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.529817][ T830] (null): radio-mr800 - initialization failed [ 132.531545][ T830] radio-mr800 6-1:1.87: probe with driver radio-mr800 failed with error -8 [ 132.533904][ T830] usbhid 6-1:1.87: couldn't find an input interrupt endpoint [ 132.539725][ T830] usb 6-1: USB disconnect, device number 19 [ 132.615524][T10265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1198'. [ 132.874565][T10267] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 132.898251][T10269] mkiss: ax0: crc mode is auto. [ 133.093157][T10283] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1204'. [ 133.098707][T10283] rtc_cmos 00:05: Alarms can be up to one day in the future [ 133.100992][T10283] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1204'. [ 133.197899][T10289] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 133.297252][T10294] can0: slcan on ptm0. [ 133.385522][T10294] can0 (unregistered): slcan off ptm0. [ 133.399985][T10296] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 133.627685][T10311] sd 0:0:0:0: PR command failed: 1026 [ 133.629475][T10311] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 133.631486][T10311] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 133.725714][ T829] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 133.865763][T10318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10318 comm=syz.0.1217 [ 133.898271][T10327] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 133.906898][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 133.910063][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 133.910077][ T39] audit: type=1400 audit(1731733520.906:1368): avc: denied { ioctl } for pid=10328 comm="syz.0.1220" path="socket:[35310]" dev="sockfs" ino=35310 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.914960][ T829] usb 6-1: not running at top speed; connect to a high speed hub [ 133.921764][ T39] audit: type=1400 audit(1731733520.916:1369): avc: denied { write } for pid=10328 comm="syz.0.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.927243][ T829] usb 6-1: config 1 has an invalid interface number: 87 but max is 3 [ 133.929345][ T829] usb 6-1: config 1 has an invalid interface number: 68 but max is 3 [ 133.931369][ T829] usb 6-1: config 1 has an invalid interface number: 230 but max is 3 [ 133.933421][ T829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.936174][ T829] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 133.938479][ T829] usb 6-1: config 1 has no interface number 0 [ 133.940063][ T829] usb 6-1: config 1 has no interface number 1 [ 133.941646][ T829] usb 6-1: config 1 has no interface number 2 [ 133.943227][ T829] usb 6-1: config 1 interface 87 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 133.946308][ T829] usb 6-1: config 1 interface 87 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 133.949081][ T829] usb 6-1: config 1 interface 230 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 133.952508][ T829] usb 6-1: config 1 interface 87 has no altsetting 0 [ 133.954243][ T829] usb 6-1: config 1 interface 68 has no altsetting 0 [ 133.954254][ T829] usb 6-1: config 1 interface 230 has no altsetting 0 [ 133.956969][ T829] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.be [ 133.961320][ T829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.963383][ T829] usb 6-1: Product: ю [ 133.964453][ T829] usb 6-1: Manufacturer: 榳烍 [ 133.966230][ T829] usb 6-1: SerialNumber: 鶲瘥賺歆꩞ヷ訶춷謈얻틎䃰᳽Т⠉㩓፯咙婓첀ꍌ퐆嵸ዀἷ댹춮㖼촅☯㛞떅钪츻愸蘕뗝袔ᩀూ漡ꍻ硢쐇ۯ嵬ĉ뤇뵣ꥄሴ蒁촜縰 [ 134.058608][T10343] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 134.060474][T10343] overlayfs: failed to set xattr on upper [ 134.061953][T10343] overlayfs: ...falling back to redirect_dir=nofollow. [ 134.063718][T10343] overlayfs: ...falling back to index=off. [ 134.065234][T10343] overlayfs: ...falling back to uuid=null. [ 134.069986][T10343] ubi: mtd0 is already attached to ubi0 [ 134.171686][ T39] audit: type=1400 audit(1731733521.166:1370): avc: denied { bind } for pid=10350 comm="syz.5.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 134.179452][ T829] (null): radio-mr800 - initialization failed [ 134.181256][ T829] radio-mr800 6-1:1.87: probe with driver radio-mr800 failed with error -8 [ 134.183555][ T829] usbhid 6-1:1.87: couldn't find an input interrupt endpoint [ 134.197057][ T829] usb 6-1: USB disconnect, device number 20 [ 134.391854][T10362] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 134.518763][ T39] audit: type=1400 audit(1731733521.516:1371): avc: denied { map } for pid=10375 comm="syz.5.1235" path="socket:[38137]" dev="sockfs" ino=38137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 134.557747][T10386] [U] v3f"S/4:XTzWtlW= [ 134.559610][T10386] [U] J"e:" [ 134.564638][T10388] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 134.609664][T10394] Bluetooth: Short BCSP packet [ 134.740658][T10404] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1246'. [ 134.743113][T10404] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 134.760022][ T39] audit: type=1400 audit(1731733521.756:1372): avc: denied { map } for pid=10412 comm="syz.1.1248" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 134.760717][T10404] ALSA: seq fatal error: cannot create timer (-16) [ 134.778544][T10415] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 134.824059][T10419] Dead loop on virtual device ip6_vti0, fix it urgently! [ 135.277688][ T75] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 135.446927][ T75] usb 6-1: not running at top speed; connect to a high speed hub [ 135.449863][ T75] usb 6-1: config 1 has an invalid interface number: 87 but max is 3 [ 135.452178][ T75] usb 6-1: config 1 has an invalid interface number: 68 but max is 3 [ 135.454485][ T75] usb 6-1: config 1 has an invalid interface number: 230 but max is 3 [ 135.456907][ T75] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.459664][ T75] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 135.462096][ T75] usb 6-1: config 1 has no interface number 0 [ 135.463787][ T75] usb 6-1: config 1 has no interface number 1 [ 135.465633][ T75] usb 6-1: config 1 has no interface number 2 [ 135.467353][ T75] usb 6-1: config 1 interface 87 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 135.470260][ T75] usb 6-1: config 1 interface 87 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 135.473156][ T75] usb 6-1: config 1 interface 230 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 135.476926][ T75] usb 6-1: config 1 interface 87 has no altsetting 0 [ 135.478782][ T75] usb 6-1: config 1 interface 68 has no altsetting 0 [ 135.480613][ T75] usb 6-1: config 1 interface 230 has no altsetting 0 [ 135.484034][ T75] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.be [ 135.487467][ T75] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.489710][ T75] usb 6-1: Product: ю [ 135.490823][ T75] usb 6-1: Manufacturer: 榳烍 [ 135.492186][ T75] usb 6-1: SerialNumber: 鶲瘥賺歆꩞ヷ訶춷謈얻틎䃰᳽Т⠉㩓፯咙婓첀ꍌ퐆嵸ዀἷ댹춮㖼촅☯㛞떅钪츻愸蘕뗝袔ᩀూ漡ꍻ硢쐇ۯ嵬ĉ뤇뵣ꥄሴ蒁촜縰 [ 135.702550][ T75] (null): radio-mr800 - initialization failed [ 135.705639][ T75] radio-mr800 6-1:1.87: probe with driver radio-mr800 failed with error -8 [ 135.708291][ T75] usbhid 6-1:1.87: couldn't find an input interrupt endpoint [ 135.714536][ T75] usb 6-1: USB disconnect, device number 21 [ 135.898550][ T39] audit: type=1400 audit(1731733522.896:1373): avc: denied { read } for pid=10449 comm="syz.0.1259" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 135.904331][ T39] audit: type=1400 audit(1731733522.896:1374): avc: denied { open } for pid=10449 comm="syz.0.1259" path="/371/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 135.983927][T10454] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 136.120303][ T39] audit: type=1400 audit(1731733523.116:1375): avc: denied { ioctl } for pid=10460 comm="syz.0.1263" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 136.213218][ T39] audit: type=1400 audit(1731733523.206:1376): avc: denied { setopt } for pid=10474 comm="syz.0.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 136.218722][ T39] audit: type=1400 audit(1731733523.216:1377): avc: denied { connect } for pid=10474 comm="syz.0.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 136.254227][T10483] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 136.635388][ T6003] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 136.685458][ T5299] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 136.685488][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 136.727300][ T64] Bluetooth: hci4: sending frame failed (-49) [ 136.729690][ T5299] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 136.786928][ T6003] usb 6-1: not running at top speed; connect to a high speed hub [ 136.789511][ T6003] usb 6-1: config 1 has an invalid interface number: 87 but max is 3 [ 136.791519][ T6003] usb 6-1: config 1 has an invalid interface number: 68 but max is 3 [ 136.793546][ T6003] usb 6-1: config 1 has an invalid interface number: 230 but max is 3 [ 136.795805][ T6003] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.798291][ T6003] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 136.800598][ T6003] usb 6-1: config 1 has no interface number 0 [ 136.802176][ T6003] usb 6-1: config 1 has no interface number 1 [ 136.803733][ T6003] usb 6-1: config 1 has no interface number 2 [ 136.805385][ T6003] usb 6-1: config 1 interface 87 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 136.807942][ T6003] usb 6-1: config 1 interface 87 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 136.810541][ T6003] usb 6-1: config 1 interface 230 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 136.813699][ T6003] usb 6-1: config 1 interface 87 has no altsetting 0 [ 136.815444][ T6003] usb 6-1: config 1 interface 68 has no altsetting 0 [ 136.817044][ T6003] usb 6-1: config 1 interface 230 has no altsetting 0 [ 136.820125][ T6003] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.be [ 136.822439][ T6003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.824604][ T6003] usb 6-1: Product: ю [ 136.825762][ T6003] usb 6-1: Manufacturer: 榳烍 [ 136.827040][ T6003] usb 6-1: SerialNumber: 鶲瘥賺歆꩞ヷ訶춷謈얻틎䃰᳽Т⠉㩓፯咙婓첀ꍌ퐆嵸ዀἷ댹춮㖼촅☯㛞떅钪츻愸蘕뗝袔ᩀూ漡ꍻ硢쐇ۯ嵬ĉ뤇뵣ꥄሴ蒁촜縰 [ 136.889864][T10527] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 137.037080][ T6003] (null): radio-mr800 - initialization failed [ 137.038783][ T6003] radio-mr800 6-1:1.87: probe with driver radio-mr800 failed with error -8 [ 137.041266][ T6003] usbhid 6-1:1.87: couldn't find an input interrupt endpoint [ 137.049619][ T6003] usb 6-1: USB disconnect, device number 22 [ 137.484420][ T96] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.505482][ T6003] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 137.551904][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.557093][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.561359][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.567396][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.570074][ T64] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 137.572032][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.579505][ T96] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.590121][T10571] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 137.658066][ T6003] usb 5-1: config 129 has an invalid interface number: 160 but max is 3 [ 137.660245][ T6003] usb 5-1: config 129 has an invalid interface number: 187 but max is 3 [ 137.662373][ T6003] usb 5-1: config 129 has an invalid interface number: 184 but max is 3 [ 137.668136][ T6003] usb 5-1: config 129 has an invalid interface number: 156 but max is 3 [ 137.670330][ T6003] usb 5-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 137.675550][ T6003] usb 5-1: config 129 has an invalid interface number: 125 but max is 3 [ 137.677870][ T6003] usb 5-1: config 129 has 5 interfaces, different from the descriptor's value: 4 [ 137.680604][ T6003] usb 5-1: config 129 has no interface number 0 [ 137.682256][ T6003] usb 5-1: config 129 has no interface number 1 [ 137.683901][ T6003] usb 5-1: config 129 has no interface number 2 [ 137.692129][ T6003] usb 5-1: config 129 has no interface number 3 [ 137.693775][ T6003] usb 5-1: config 129 has no interface number 4 [ 137.695721][ T6003] usb 5-1: config 129 interface 160 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 137.698868][ T6003] usb 5-1: config 129 interface 160 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 137.700793][ T96] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.702362][ T6003] usb 5-1: too many endpoints for config 129 interface 187 altsetting 76: 154, using maximum allowed: 30 [ 137.709476][T10568] chnl_net:caif_netlink_parms(): no params data found [ 137.712526][ T6003] usb 5-1: config 129 interface 187 altsetting 76 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 137.715766][ T6003] usb 5-1: config 129 interface 187 altsetting 76 has a duplicate endpoint with address 0xC, skipping [ 137.718711][ T6003] usb 5-1: config 129 interface 187 altsetting 76 has a duplicate endpoint with address 0x9, skipping [ 137.720525][T10584] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1295'. [ 137.721534][ T6003] usb 5-1: config 129 interface 187 altsetting 76 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 137.727702][ T6003] usb 5-1: config 129 interface 187 altsetting 76 has a duplicate endpoint with address 0xF, skipping [ 137.730523][ T6003] usb 5-1: config 129 interface 187 altsetting 76 has a duplicate endpoint with address 0x9, skipping [ 137.733469][ T6003] usb 5-1: config 129 interface 187 altsetting 76 has an invalid descriptor for endpoint zero, skipping [ 137.737110][ T6003] usb 5-1: config 129 interface 187 altsetting 76 endpoint 0x1 has an invalid bInterval 80, changing to 4 [ 137.739897][ T6003] usb 5-1: config 129 interface 187 altsetting 76 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 137.742677][ T6003] usb 5-1: config 129 interface 187 altsetting 76 has an invalid descriptor for endpoint zero, skipping [ 137.748499][ T6003] usb 5-1: config 129 interface 187 altsetting 76 has 10 endpoint descriptors, different from the interface descriptor's value: 154 [ 137.755511][ T6003] usb 5-1: config 129 interface 184 altsetting 5 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 137.760171][ T6003] usb 5-1: config 129 interface 184 altsetting 5 has a duplicate endpoint with address 0x83, skipping [ 137.763037][ T6003] usb 5-1: config 129 interface 184 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 137.764987][T10593] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 137.766028][ T6003] usb 5-1: config 129 interface 184 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 137.771107][ T6003] usb 5-1: config 129 interface 184 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.774484][ T6003] usb 5-1: config 129 interface 156 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 137.777368][ T6003] usb 5-1: config 129 interface 156 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 137.780222][ T6003] usb 5-1: config 129 interface 156 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 137.783164][ T6003] usb 5-1: config 129 interface 156 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 137.786050][ T6003] usb 5-1: config 129 interface 156 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 137.789062][ T6003] usb 5-1: config 129 interface 156 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 137.791886][ T6003] usb 5-1: config 129 interface 156 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 137.794673][ T6003] usb 5-1: config 129 interface 156 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 137.797519][ T6003] usb 5-1: config 129 interface 156 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 137.800296][ T6003] usb 5-1: config 129 interface 156 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 137.803119][ T6003] usb 5-1: config 129 interface 156 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 137.806059][ T6003] usb 5-1: config 129 interface 156 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 137.808929][ T6003] usb 5-1: config 129 interface 156 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 137.811796][ T6003] usb 5-1: config 129 interface 125 altsetting 226 has an invalid descriptor for endpoint zero, skipping [ 137.814757][ T6003] usb 5-1: config 129 interface 187 has no altsetting 0 [ 137.816786][ T6003] usb 5-1: config 129 interface 184 has no altsetting 0 [ 137.818601][ T6003] usb 5-1: config 129 interface 156 has no altsetting 0 [ 137.820392][ T6003] usb 5-1: config 129 interface 125 has no altsetting 0 [ 137.823787][ T6003] usb 5-1: New USB device found, idVendor=bee4, idProduct=1224, bcdDevice=4c.2a [ 137.826211][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.828267][ T6003] usb 5-1: Product: ࠁ [ 137.829368][ T6003] usb 5-1: Manufacturer: ї [ 137.830538][ T6003] usb 5-1: SerialNumber: ࠒ [ 137.847611][ T96] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.851598][T10598] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1298'. [ 137.863515][T10568] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.865459][T10568] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.867331][T10568] bridge_slave_0: entered allmulticast mode [ 137.869297][T10568] bridge_slave_0: entered promiscuous mode [ 137.872207][T10568] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.874553][T10568] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.877096][T10568] bridge_slave_1: entered allmulticast mode [ 137.879778][T10568] bridge_slave_1: entered promiscuous mode [ 137.907572][T10568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.912565][T10568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.940681][T10568] team0: Port device team_slave_0 added [ 137.944615][T10568] team0: Port device team_slave_1 added [ 137.971864][T10568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.973678][T10568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.981076][T10568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.988111][T10568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.989901][T10568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.997673][T10568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.030954][ T96] bridge_slave_1: left allmulticast mode [ 138.032498][ T96] bridge_slave_1: left promiscuous mode [ 138.034447][ T96] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.037173][T10561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.041233][T10561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.044471][ T96] bridge_slave_0: left allmulticast mode [ 138.045402][T10561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.046112][ T96] bridge_slave_0: left promiscuous mode [ 138.049259][T10561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.050177][ T96] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.062264][ T6003] usb-storage 5-1:129.160: USB Mass Storage device detected [ 138.085565][ T830] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 138.151148][ T6003] usb 5-1: USB disconnect, device number 23 [ 138.257041][ T830] usb 7-1: not running at top speed; connect to a high speed hub [ 138.259994][ T830] usb 7-1: config 1 has an invalid interface number: 87 but max is 3 [ 138.262108][ T830] usb 7-1: config 1 has an invalid interface number: 68 but max is 3 [ 138.264195][ T830] usb 7-1: config 1 has an invalid interface number: 230 but max is 3 [ 138.266636][ T830] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.269350][ T830] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 138.271672][ T830] usb 7-1: config 1 has no interface number 0 [ 138.273256][ T830] usb 7-1: config 1 has no interface number 1 [ 138.274851][ T830] usb 7-1: config 1 has no interface number 2 [ 138.276724][ T830] usb 7-1: config 1 interface 87 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 138.279645][ T830] usb 7-1: config 1 interface 87 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 138.282416][ T830] usb 7-1: config 1 interface 230 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 138.286118][ T830] usb 7-1: config 1 interface 87 has no altsetting 0 [ 138.287875][ T830] usb 7-1: config 1 interface 68 has no altsetting 0 [ 138.289787][ T830] usb 7-1: config 1 interface 230 has no altsetting 0 [ 138.293189][ T830] usb 7-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.be [ 138.295645][ T830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.297742][ T830] usb 7-1: Product: ю [ 138.298832][ T830] usb 7-1: Manufacturer: 榳烍 [ 138.300216][ T830] usb 7-1: SerialNumber: 鶲瘥賺歆꩞ヷ訶춷謈얻틎䃰᳽Т⠉㩓፯咙婓첀ꍌ퐆嵸ዀἷ댹춮㖼촅☯㛞떅钪츻愸蘕뗝袔ᩀూ漡ꍻ硢쐇ۯ嵬ĉ뤇뵣ꥄሴ蒁촜縰 [ 138.363049][ T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.369241][ T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.373196][ T96] bond0 (unregistering): Released all slaves [ 138.378986][T10568] hsr_slave_0: entered promiscuous mode [ 138.380964][T10568] hsr_slave_1: entered promiscuous mode [ 138.382961][T10568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.385008][T10568] Cannot create hsr debugfs directory [ 138.512220][ T830] (null): radio-mr800 - initialization failed [ 138.513945][ T830] radio-mr800 7-1:1.87: probe with driver radio-mr800 failed with error -8 [ 138.514750][T10568] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 138.519582][T10568] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 138.519767][ T830] usbhid 7-1:1.87: couldn't find an input interrupt endpoint [ 138.527557][T10568] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 138.529958][ T830] usb 7-1: USB disconnect, device number 17 [ 138.536584][T10568] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 138.595637][T10568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.601997][T10568] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.607462][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.609332][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.614966][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.616933][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.623700][T10621] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 138.641943][ T96] hsr_slave_0: left promiscuous mode [ 138.645394][ T96] hsr_slave_1: left promiscuous mode [ 138.647376][ T96] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.649498][ T96] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.652461][ T96] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.654385][ T96] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.655730][T10624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10624 comm=syz.0.1302 [ 138.677158][ T96] veth1_macvtap: left promiscuous mode [ 138.678642][ T96] veth0_macvtap: left promiscuous mode [ 138.680114][ T96] veth1_vlan: left promiscuous mode [ 138.681493][ T96] veth0_vlan: left promiscuous mode [ 139.032582][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 139.032593][ T39] audit: type=1400 audit(1731733526.026:1382): avc: denied { read write } for pid=8383 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.040591][ T39] audit: type=1400 audit(1731733526.026:1383): avc: denied { open } for pid=8383 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.045274][ T829] IPVS: starting estimator thread 0... [ 139.050662][ T39] audit: type=1400 audit(1731733526.026:1384): avc: denied { ioctl } for pid=8383 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.127735][T10639] hpfs: hpfs_map_sector(): read error [ 139.138015][T10637] IPVS: using max 36 ests per chain, 86400 per kthread [ 139.392110][ T96] team0 (unregistering): Port device team_slave_1 removed [ 139.463548][ T96] team0 (unregistering): Port device team_slave_0 removed [ 139.655399][ T64] Bluetooth: hci3: command tx timeout [ 140.096221][T10568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.192759][T10568] veth0_vlan: entered promiscuous mode [ 140.196774][T10568] veth1_vlan: entered promiscuous mode [ 140.210171][T10568] veth0_macvtap: entered promiscuous mode [ 140.213212][T10568] veth1_macvtap: entered promiscuous mode [ 140.219316][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.221952][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.224425][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.227396][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.229865][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.232505][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.236218][T10568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.242533][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.245220][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.248108][T10568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.250731][T10568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.253827][T10568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.259050][T10568] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.261276][T10568] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.263491][T10568] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.265825][T10568] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.296276][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.298379][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.310642][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.312677][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.322919][ T39] audit: type=1400 audit(1731733527.316:1385): avc: denied { mounton } for pid=10568 comm="syz-executor" path="/syzkaller.A39nNr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=41020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 141.735452][ T64] Bluetooth: hci3: command tx timeout [ 143.805551][ T64] Bluetooth: hci3: command tx timeout [ 145.885655][ T64] Bluetooth: hci3: command tx timeout [ 148.075643][T10742] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 148.119336][T10728] kvm: pic: non byte write [ 148.301133][T10776] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 148.307983][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 148.352107][ T39] audit: type=1400 audit(1731733535.346:1386): avc: denied { name_bind } for pid=10782 comm="syz.1.1323" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 148.360083][ T39] audit: type=1400 audit(1731733535.356:1387): avc: denied { name_connect } for pid=10782 comm="syz.1.1323" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 148.395416][ T5984] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 148.546946][ T5984] usb 11-1: not running at top speed; connect to a high speed hub [ 148.549678][ T5984] usb 11-1: config 1 has an invalid interface number: 87 but max is 3 [ 148.551772][ T5984] usb 11-1: config 1 has an invalid interface number: 68 but max is 3 [ 148.553961][ T5984] usb 11-1: config 1 has an invalid interface number: 230 but max is 3 [ 148.556780][ T5984] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.560245][ T5984] usb 11-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 148.562479][ T5984] usb 11-1: config 1 has no interface number 0 [ 148.564043][ T5984] usb 11-1: config 1 has no interface number 1 [ 148.565765][ T5984] usb 11-1: config 1 has no interface number 2 [ 148.567355][ T5984] usb 11-1: config 1 interface 87 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 148.570173][ T5984] usb 11-1: config 1 interface 87 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 148.572860][ T5984] usb 11-1: config 1 interface 230 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 148.576577][ T5984] usb 11-1: config 1 interface 87 has no altsetting 0 [ 148.578981][ T5984] usb 11-1: config 1 interface 68 has no altsetting 0 [ 148.580821][ T5984] usb 11-1: config 1 interface 230 has no altsetting 0 [ 148.584005][ T5984] usb 11-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.be [ 148.586856][ T5984] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.589450][ T5984] usb 11-1: Product: ю [ 148.590503][ T5984] usb 11-1: Manufacturer: 榳烍 [ 148.591763][ T5984] usb 11-1: SerialNumber: 鶲瘥賺歆꩞ヷ訶춷謈얻틎䃰᳽Т⠉㩓፯咙婓첀ꍌ퐆嵸ዀἷ댹춮㖼촅☯㛞떅钪츻愸蘕뗝袔ᩀూ漡ꍻ硢쐇ۯ嵬ĉ뤇뵣ꥄሴ蒁촜縰 [ 148.607079][ T39] audit: type=1400 audit(1731733535.606:1388): avc: denied { nlmsg_write } for pid=10793 comm="syz.2.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.720871][ T39] audit: type=1400 audit(1731733535.716:1389): avc: denied { read } for pid=10800 comm="syz.0.1329" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 148.805950][ T5984] (null): radio-mr800 - initialization failed [ 148.807705][ T5984] radio-mr800 11-1:1.87: probe with driver radio-mr800 failed with error -8 [ 148.810065][ T5984] usbhid 11-1:1.87: couldn't find an input interrupt endpoint [ 148.816021][ T5984] usb 11-1: USB disconnect, device number 2 [ 148.823752][T10801] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.825740][T10801] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 148.833621][T10801] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 148.841578][T10801] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 148.843227][T10801] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 148.845672][T10801] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 148.879447][T10807] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 149.072690][T10815] overlayfs: invalid origin (0000) [ 149.207235][T10832] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1337'. [ 149.288304][ T39] audit: type=1400 audit(1731733536.286:1390): avc: denied { write } for pid=10839 comm="syz.2.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.327534][T10845] pim6reg9: entered allmulticast mode [ 149.362858][T10843] : renamed from hsr0 (while UP) [ 149.372045][T10851] sp0: Synchronizing with TNC [ 149.391550][ T39] audit: type=1400 audit(1731733536.386:1391): avc: denied { write } for pid=10853 comm="syz.1.1346" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 149.396094][T10848] [U] [ 149.471692][ T69] Bluetooth: hci4: Frame reassembly failed (-84) [ 149.498647][T10862] overlayfs: failed to resolve './file1': -2 [ 149.523640][ T39] audit: type=1400 audit(1731733536.516:1392): avc: denied { mounton } for pid=10864 comm="syz.6.1350" path="/6/file0" dev="autofs" ino=40488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 149.855404][ T5983] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 150.017389][ T5983] usb 11-1: not running at top speed; connect to a high speed hub [ 150.020277][ T5983] usb 11-1: config 1 has an invalid interface number: 87 but max is 3 [ 150.022443][ T5983] usb 11-1: config 1 has an invalid interface number: 68 but max is 3 [ 150.024557][ T5983] usb 11-1: config 1 has an invalid interface number: 230 but max is 3 [ 150.026782][ T5983] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.029337][ T5983] usb 11-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 150.031679][ T5983] usb 11-1: config 1 has no interface number 0 [ 150.033330][ T5983] usb 11-1: config 1 has no interface number 1 [ 150.034959][ T5983] usb 11-1: config 1 has no interface number 2 [ 150.036660][ T5983] usb 11-1: config 1 interface 87 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 150.039425][ T5983] usb 11-1: config 1 interface 87 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 150.042182][ T5983] usb 11-1: config 1 interface 230 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 150.045635][ T5983] usb 11-1: config 1 interface 87 has no altsetting 0 [ 150.047350][ T5983] usb 11-1: config 1 interface 68 has no altsetting 0 [ 150.049053][ T5983] usb 11-1: config 1 interface 230 has no altsetting 0 [ 150.052373][ T5983] usb 11-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.be [ 150.054688][ T5983] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.056882][ T5983] usb 11-1: Product: ю [ 150.057986][ T5983] usb 11-1: Manufacturer: 榳烍 [ 150.059290][ T5983] usb 11-1: SerialNumber: 鶲瘥賺歆꩞ヷ訶춷謈얻틎䃰᳽Т⠉㩓፯咙婓첀ꍌ퐆嵸ዀἷ댹춮㖼촅☯㛞떅钪츻愸蘕뗝袔ᩀూ漡ꍻ硢쐇ۯ嵬ĉ뤇뵣ꥄሴ蒁촜縰 [ 150.271853][ T5983] (null): radio-mr800 - initialization failed [ 150.273533][ T5983] radio-mr800 11-1:1.87: probe with driver radio-mr800 failed with error -8 [ 150.276614][ T5983] usbhid 11-1:1.87: couldn't find an input interrupt endpoint [ 150.281845][ T5983] usb 11-1: USB disconnect, device number 3 [ 150.311749][ T39] audit: type=1326 audit(1731733537.306:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10884 comm="syz.1.1354" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3137e719 code=0x7ffc0000 [ 150.317883][ T39] audit: type=1326 audit(1731733537.306:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10884 comm="syz.1.1354" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3137e719 code=0x7ffc0000 [ 150.323980][ T39] audit: type=1326 audit(1731733537.306:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10884 comm="syz.1.1354" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf3137e719 code=0x7ffc0000 [ 150.368522][T10887] program syz.1.1354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.814511][T10899] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1357'. [ 150.823085][T10899] libceph: resolve '4' (ret=-3): failed [ 150.848032][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 150.852418][T10901] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.855488][ T64] Bluetooth: hci1: command 0x0419 tx timeout [ 150.857255][T10903] netlink: 'syz.6.1359': attribute type 1 has an invalid length. [ 150.859563][T10903] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.1359'. [ 150.912223][T10906] netlink: 'syz.2.1358': attribute type 12 has an invalid length. [ 150.914267][T10906] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.1358'. [ 150.967768][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1358'. [ 150.979407][T10906] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.031368][T10906] bridge_slave_0 (unregistering): left allmulticast mode [ 151.033428][T10906] bridge_slave_0 (unregistering): left promiscuous mode [ 151.035518][T10906] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.078993][T10911] team0: No ports can be present during mode change [ 151.486598][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 151.488329][ T5299] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 151.545408][ T75] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 151.716906][ T75] usb 11-1: not running at top speed; connect to a high speed hub [ 151.719858][ T75] usb 11-1: config 1 has an invalid interface number: 87 but max is 3 [ 151.721887][ T75] usb 11-1: config 1 has an invalid interface number: 68 but max is 3 [ 151.724479][ T75] usb 11-1: config 1 has an invalid interface number: 230 but max is 3 [ 151.726988][ T75] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.729992][ T75] usb 11-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 151.732288][ T75] usb 11-1: config 1 has no interface number 0 [ 151.733859][ T75] usb 11-1: config 1 has no interface number 1 [ 151.735739][ T75] usb 11-1: config 1 has no interface number 2 [ 151.737326][ T75] usb 11-1: config 1 interface 87 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 151.740029][ T75] usb 11-1: config 1 interface 87 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 151.742810][ T75] usb 11-1: config 1 interface 230 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 151.747138][ T75] usb 11-1: config 1 interface 87 has no altsetting 0 [ 151.748871][ T75] usb 11-1: config 1 interface 68 has no altsetting 0 [ 151.750801][ T75] usb 11-1: config 1 interface 230 has no altsetting 0 [ 151.754010][ T75] usb 11-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.be [ 151.756584][ T75] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.758590][ T75] usb 11-1: Product: ю [ 151.759666][ T75] usb 11-1: Manufacturer: 榳烍 [ 151.760903][ T75] usb 11-1: SerialNumber: 鶲瘥賺歆꩞ヷ訶춷謈얻틎䃰᳽Т⠉㩓፯咙婓첀ꍌ퐆嵸ዀἷ댹춮㖼촅☯㛞떅钪츻愸蘕뗝袔ᩀూ漡ꍻ硢쐇ۯ嵬ĉ뤇뵣ꥄሴ蒁촜縰 [ 151.906184][ T6328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.908918][ T6328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 151.969784][ T6328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.972785][ T6328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 151.979836][ T75] (null): radio-mr800 - initialization failed [ 151.981574][ T75] radio-mr800 11-1:1.87: probe with driver radio-mr800 failed with error -8 [ 151.983949][ T75] usbhid 11-1:1.87: couldn't find an input interrupt endpoint [ 151.994160][ T75] usb 11-1: USB disconnect, device number 4 [ 152.018872][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.021771][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.024169][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.028942][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.031568][ T64] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.033921][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.051012][ T6328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.055262][ T6328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 152.119876][ T6328] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.122535][ T6328] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 152.127932][T10964] chnl_net:caif_netlink_parms(): no params data found [ 152.174966][T10964] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.178496][T10964] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.180396][T10964] bridge_slave_0: entered allmulticast mode [ 152.183635][T10964] bridge_slave_0: entered promiscuous mode [ 152.188854][T10964] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.190701][T10964] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.192494][T10964] bridge_slave_1: entered allmulticast mode [ 152.194404][T10964] bridge_slave_1: entered promiscuous mode [ 152.218182][T10964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.222623][T10964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.251115][T10964] team0: Port device team_slave_0 added [ 152.256943][T10964] team0: Port device team_slave_1 added [ 152.298846][T10964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.300678][T10964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.307328][T10964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.312350][T10964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.314073][T10964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.320603][T10964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.329182][ T6328] bridge_slave_1: left allmulticast mode [ 152.330879][ T6328] bridge_slave_1: left promiscuous mode [ 152.332378][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.337277][ T6328] bridge_slave_0: left allmulticast mode [ 152.338923][ T6328] bridge_slave_0: left promiscuous mode [ 152.340444][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.380886][ T6328] batman_adv: batadv0: Removing interface: ip6gretap1 [ 152.681083][ T6328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.684845][ T6328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.688436][ T6328] bond0 (unregistering): Released all slaves [ 152.692611][ T6328] bond1 (unregistering): Released all slaves [ 152.696857][ T6328] bond2 (unregistering): Released all slaves [ 152.714109][T10984] syzkaller1: entered promiscuous mode [ 152.715663][T10984] syzkaller1: entered allmulticast mode [ 152.743720][T10964] hsr_slave_0: entered promiscuous mode [ 152.759796][T10964] hsr_slave_1: entered promiscuous mode [ 152.764615][T11000] [U] U aԞw>x>RgM#RdS%?}Gʿh;%fҍC3rKz=SOZJ+iTKGaH/OΦ_͓7whU\Zu [ 152.767256][T10964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.769068][T11000] [U] gF}vOӊviS ` `p<2ͩ0Nٺ\(krOanm [ 152.770339][T10964] Cannot create hsr debugfs directory [ 152.772372][T11000] [U] @DwH [ 152.785155][T10999] [U] $?W}<W6nХx+x@in0?x,HlrZplQbO>+8X39Y&HZX+䶞rVs/| j3r4}VzWIb1cV3eXgTH^DYF9?:%R5ScWi"޴) [ 154.929001][T11125] ? __die+0x1e/0x60 [ 154.929995][T11125] ? page_fault_oops+0x3b6/0xb80 [ 154.931231][T11125] ? __pfx_page_fault_oops+0x10/0x10 [ 154.932533][T11125] ? __pfx___lock_acquire+0x10/0x10 [ 154.933846][T11125] ? __pfx_lock_release+0x10/0x10 [ 154.935147][T11125] ? do_user_addr_fault+0xa90/0x13f0 [ 154.936509][T11125] ? rcu_is_watching+0x12/0xc0 [ 154.937745][T11125] ? exc_page_fault+0x5c/0xc0 [ 154.938979][T11125] ? asm_exc_page_fault+0x26/0x30 [ 154.940296][T11125] filemap_read_folio+0xc6/0x2a0 [ 154.941578][T11125] ? __pfx_filemap_read_folio+0x10/0x10 [ 154.943008][T11125] ? __filemap_get_folio+0x2a5/0xaf0 [ 154.944383][T11125] do_read_cache_folio+0x263/0x5c0 [ 154.945713][T11125] freader_get_folio+0x337/0x8e0 [ 154.947005][T11125] freader_fetch+0xc2/0x5f0 [ 154.948181][T11125] ? mt_find+0x4c8/0xa20 [ 154.949289][T11125] __build_id_parse.isra.0+0xed/0x7a0 [ 154.950678][T11125] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 154.952225][T11125] ? __pfx_find_vma+0x10/0x10 [ 154.952740][ T39] audit: type=1400 audit(1731733541.946:1419): avc: denied { map } for pid=11126 comm="syz.7.1398" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 154.953439][T11125] do_procmap_query+0xd62/0x1030 [ 154.960663][T11125] ? __pfx_do_procmap_query+0x10/0x10 [ 154.962050][T11125] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 154.963891][T11125] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 154.965618][T11125] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 154.967413][T11125] ? selinux_file_ioctl+0x180/0x270 [ 154.968787][T11125] ? selinux_file_ioctl+0xb4/0x270 [ 154.970131][T11125] procfs_procmap_ioctl+0x7d/0xb0 [ 154.971493][T11125] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 154.973007][T11125] __x64_sys_ioctl+0x18f/0x220 [ 154.974283][T11125] do_syscall_64+0xcd/0x250 [ 154.975489][T11125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.977039][T11125] RIP: 0033:0x7fcfda57e719 [ 154.978215][T11125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.983205][T11125] RSP: 002b:00007fcfdb33f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.985323][T11125] RAX: ffffffffffffffda RBX: 00007fcfda735f80 RCX: 00007fcfda57e719 [ 154.987306][T11125] RDX: 0000000020000180 RSI: 00000000c0686611 RDI: 0000000000000004 [ 154.989293][T11125] RBP: 00007fcfda5f175e R08: 0000000000000000 R09: 0000000000000000 [ 154.991281][T11125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.993330][T11125] R13: 0000000000000000 R14: 00007fcfda735f80 R15: 00007ffc39625068 [ 154.995390][T11125] [ 154.996212][T11125] Modules linked in: [ 154.997243][T11125] CR2: 0000000000000000 [ 154.998336][T11125] ---[ end trace 0000000000000000 ]--- [ 154.999764][T11125] RIP: 0010:0x0 [ 155.000693][T11125] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 155.002591][T11125] RSP: 0018:ffffc900066c79c8 EFLAGS: 00010283 [ 155.004174][T11125] RAX: 0000000000000ada RBX: 0000000000000000 RCX: ffffc90007a36000 [ 155.006233][T11125] RDX: 0000000000040000 RSI: ffffea0000db4f40 RDI: ffff8880289f4000 [ 155.007644][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 155.008238][T11125] RBP: ffffea0000db4f40 R08: 0000000000000007 R09: 0000000000000000 [ 155.008247][T11125] R10: 0000000000000000 R11: ffffffff961d45d0 R12: 1ffff92000cd8f3a [ 155.008253][T11125] R13: ffff8880289f4000 R14: 0000000000000000 R15: dffffc0000000000 [ 155.008259][T11125] FS: 00007fcfdb33f6c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 155.008279][T11125] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.008288][T11125] CR2: ffffffffffffffd6 CR3: 000000004dda6000 CR4: 0000000000352ef0 [ 155.022495][T11125] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.024553][T11125] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 155.026513][T11125] Kernel panic - not syncing: Fatal exception [ 155.028433][T11125] Kernel Offset: disabled [ 155.029466][T11125] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:05:42 Registers: info registers vcpu 0 CPU#0 RAX=000000000017934c RBX=0000000000000000 RCX=ffffffff8b23b459 RDX=ffffed100d4c7026 RSI=ffffffff8bd1b640 RDI=ffffffff816477cc RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f5d88 R15=0000000000000000 RIP=ffffffff8b23c83f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b3131fffc CR3=0000000027d4c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffba73f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffba73f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffba73f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffba73f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffba73f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffba73f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffba750c488 00007ffba750c480 00007ffba750c478 00007ffba750c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffba806d100 00007ffba750c440 00007ffba750c458 00007ffba750c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffba750c498 00007ffba750c490 00007ffba750c488 00007ffba750c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 00000000000001b4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850bb9b5 RDI=ffffffff9aaebc80 RBP=ffffffff9aaebc40 RSP=ffffc900066c7278 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000063 R14=ffffffff850bb950 R15=0000000000000000 RIP=ffffffff850bb9df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fcfdb33f6c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004dda6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfdb33ef90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfda5f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfda5f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfda5f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfda5f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfda5f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfda5f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000017ace4 RBX=0000000000000002 RCX=ffffffff8b23b459 RDX=ffffed100d507026 RSI=ffffffff8bd1b640 RDI=ffffffff816477cc RBP=ffffed1003ade000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6f0000 R14=ffffffff905f5d88 R15=0000000000000000 RIP=ffffffff8b23c83f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbcdc4ef870 CR3=0000000042cd4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc39625400 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfda5f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfda5f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfda5f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfda5f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfda5f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcfda5f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000021879 RBX=ffff88806a746a80 RCX=ffffc90006b47000 RDX=0000000000040000 RSI=ffffffff81815fd6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90005d4fb30 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d4e8d51 R13=0000000000000001 R14=ffff88806a746a88 R15=ffff88806a940140 RIP=ffffffff81815fd8 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ffba82636c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffba8262f98 CR3=0000000027d4c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd92c1600 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf313f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf313f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf313f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf313f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf313f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdf313f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000048 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000