last executing test programs: 1m14.300142018s ago: executing program 3 (id=157): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x12, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2, 0x0, 0x3, 0x4000}}, 0x20) (async) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x100, 0xa, 0x13600, 0xf61c691, 0x1, 0x10005, 0x201, 0x3, 0x80008, 0x15, 0xd, 0x7, 0x7, 0x1, 0x6, 0x100, 0x6, 0x9, 0x20003, 0x7fffffff, 0xb740, 0xca9f, 0x7, 0x20001e58, 0x8, 0x37f93241, 0x3, 0x0, 0x9, 0x1, 0x2]}) r4 = socket(0x2, 0x2, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) (async) r5 = epoll_create1(0x80000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x9, 0x70bd2a, 0x25dfdbbe, {0x0, 0x0, 0x0, r7, 0x4706, 0x37eba}, [@IFLA_CARRIER={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc00088d}, 0x24068000) (async) shutdown(r4, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) io_setup(0x1000, &(0x7f0000001d00)=0x0) io_submit(r9, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x88, r8, &(0x7f00000001c0)='3', 0x1, 0xb}]) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getpriority(0x1, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)) (async) ppoll(&(0x7f0000000040)=[{r5, 0x100}], 0x1, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f00000004c0)) 1m13.341296809s ago: executing program 3 (id=160): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x300, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x9, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x67}]}}]}, 0x3c}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x9, 0xe}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="c421fc107500c4417877c7e12400390100c7c724028a000000ff1c243504000000f2416f66baa100b00cee028d3bea66450f3880213e41220a48b861000000000000000f23c00f21f84c3500000b000023f8f2653866baf80cb8b428c987ef66bafc0cb843b50000eb", 0x69}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000001680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001640)={&(0x7f00000005c0)={0x1080, 0x1, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_PAYLOAD={0x1f, 0xa, "9c552fedd5ba8eb3a86a590aa500925cc4f5f732166a890907d643"}, @NFQA_PAYLOAD={0x1004, 0xa, "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"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x800}}, @NFQA_EXP={0x10, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, @NFQA_CT={0xc, 0xb, 0x0, 0x1, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, @NFQA_EXP={0x14, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2e}, @CTA_EXPECT_FLAGS={0x8}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1000}}]}, 0x1080}}, 0x44040) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x8, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {}, {0xffe7, 0xffff}}}, 0x24}}, 0x4008000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000a14c72e2dbd7000fedbdf250800010001"], 0x18}, 0x1, 0x0, 0x0, 0x20000024}, 0x80) 1m13.125271187s ago: executing program 3 (id=167): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (rerun: 64) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) (async, rerun: 32) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 32) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000001480)=[{{&(0x7f0000000080)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="f1", 0x1}], 0x1}}], 0x1, 0x10048085) (async) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0x4, 0x3, 0x4, r9}, 0x10) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000280)={0xfffc, 0x800b, 0x2, 0x10001, r9}, &(0x7f00000002c0)=0x10) (async, rerun: 32) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x400003, 0x0) (async, rerun: 32) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_NET_SET(r10, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x348, r11, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4ef}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8a32}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa272}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x34}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6c86694c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf8, 0x3, "aaa0dc9cea1c311dfcadef2aa4f826659a2e1863614d88892a0c40b38e2ef2ca603cf85829d7cf339f0fabda0374e54d2cfa79610d4a6b97e7971a87e29d82f71bda13f0b95b533eff08e8d66ffb784d0f537d159a6f601c9c7a90a0315319cdf9f015acf62100b54beaddb1c65e5ada57b8f58d705d9d4d2a9ec3656d0501b4d5a94dcbbbaa7a70de12f12804d6dc86c27fc023f1928a910eb434f5bd169b61e1153bffa9086a5a9f09985ec769273085f1430c2426c27c2d8565ea729bc5c35c3a16f00b4676270c04a36eca3277bbe7c4f4cd592a06f06d16eeab22ae1a9bc8bc1dee426515fd9d205a475039a09851e51032"}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9d31}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x26620553}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff801}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x348}, 0x1, 0x0, 0x0, 0xc0}, 0x28800) (async) listen(r4, 0x6f6) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1m13.123488979s ago: executing program 3 (id=168): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah', 0x4) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x3ecdf4b73ea286ce, 0x3, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0xdae}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x8, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xb3, 0x6, 0x7}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0x3, 0x2, 0x20, 0x78}, 0x0, 0x0}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x4, 0x15f, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x46, 0xe6, 0xce, 0x40, 0x413c, 0x81b3, 0xd315, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14d, 0x2, 0x5, 0x1, 0xc0, 0x6, "", [{{0x9, 0x4, 0xc1, 0x71, 0x2, 0x3b, 0x0, 0x35, 0x9, [], [{{0x9, 0x5, 0x6, 0x0, 0x8, 0x6, 0x5, 0x1, [@generic={0x7c, 0x0, "fd49aff57f3c034d8b4d222be05f1a5976ec8693a63b3e147fcf7c5acedf1884c67767d7937fdb75c6df1f9ed64f9a3ccbad41046e6c5e23214c90d5dfcd7af3c7e4fd7ae89850da5e6ba740dbe25d13d0cf5a63e692825dbca8de29013995b1f6d5941577ab533ae5b81353985a60168781dfc661348a4e1ba2"}, @generic={0x86, 0xf, "092b5a16de324ae9a842692cf559fdbdfa690a2ae05f36fa0758cd3d16d1db51a75743120dba693573ce6e3d947c1c70325a8a0cbded471241127168734582c65ab03c3a48b7a605d445360a88d6aacf3aa824f9946a38586a63b5505855107d24bf67f81e8a65f1eacdbda3d6b7115d6fd96d51bf291fb73430518878fb9ff86905859c"}]}}, {{0x9, 0x5, 0x7, 0x28266b5e7a1948db, 0x20, 0x8, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xb, 0x8}]}}]}}, {{0x9, 0x4, 0x5a, 0x1, 0x1, 0xc6, 0x9a, 0x4e, 0x9, [], [{{0x9, 0x5, 0x0, 0x2e, 0x8, 0x7, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xcafa}]}}]}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x7, 0xa, 0x3, 0xff, 0x3}, 0x2a, &(0x7f0000000400)={0x5, 0xf, 0x2a, 0x4, [@ss_container_id={0x1, 0x10, 0x4, 0x1, "6e7da0421a1a73112bfd6199d111510a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xc0, 0x2, 0x2, 0xf8}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x44, &(0x7f0000000500)=@string={0x44, 0x3, "1bcab9d79d63d494e5dc609ff30d82bb60696964d59b6279a4d27eb157de21ccfdcb99dc14d973281e1400ba66b1749037adaddc5df6aaa8a5ae11bad736af6347df"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x804}}, {0x60, &(0x7f0000000600)=@string={0x60, 0x3, "9bd578bd5c80491d70091a2655c3f3594da584688fc76d7663a8a77820437baec6b54ec14d88daaa5235734444ca1423c267736b8038dd4f6d06f2e373cc39adb3397b1e5a66b5d0f3e8077530b87a334a4dc03020327ff81744e5790c9f"}}, {0xea, &(0x7f0000000680)=@string={0xea, 0x3, "67207763ebc1faba511762bb33c43b8ba801f7bc99420922f634b6d065fca3fc6b68e99a93217e09e397b4b9f16c1bf18764b68f2656bddebfcbe96585e10dbdba355b34848fae819dfd3ec3de7d238581c45728165f672b9150a2614d80314da00edc9c83667439438d443614399f7ec05c0e0f0bd61bbb94722452db1600d3416b46a879f1a4346f1766eebf0a4c3663fc68cfcdc8ee088837db437fb1e131bfd14b50c158ae9d72804e027ccfa68f5cf8ea7b935f0f3e9e7b027acaacf97c0985421ff1a6deac75102e013203d366670be0eb9a0a70f0fd9ebf5ef307819c43a2899e3f23808a"}}]}) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x1, @empty, 0x6, 0x2}, 0x20) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1m11.711867703s ago: executing program 3 (id=179): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000240)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='tcp 2', 0x5) r2 = socket(0x10, 0x80003, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'sit0\x00'}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='net_prio.prioidx\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 1m11.579439266s ago: executing program 3 (id=180): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003680)={0x2020}, 0x2020) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='freezer.state\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) setns(r2, 0x10000000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) accept(r3, &(0x7f0000000240)=@rc={0x1f, @fixed}, &(0x7f0000000300)=0x80) 1m2.320430813s ago: executing program 0 (id=265): r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0xfffffff9}], 0x1, 0x1, 0x0) unshare(0x4020400) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x4020400) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000000000200001) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x6, 0x7, 0x38, @remote, @remote, 0x8, 0x7, 0x0, 0x15f}}) sendmmsg(0xffffffffffffffff, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="0281", 0x2}], 0x1}}], 0x1, 0x8000) socket$inet(0x2, 0x801, 0x100) socket$pppl2tp(0x18, 0x1, 0x1) (async) recvmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0xfffffff9}], 0x1, 0x1, 0x0) (async) unshare(0x4020400) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) unshare(0x4020400) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000000000200001) (async) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) (async) socket(0xa, 0x3, 0x3a) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x6, 0x7, 0x38, @remote, @remote, 0x8, 0x7, 0x0, 0x15f}}) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="0281", 0x2}], 0x1}}], 0x1, 0x8000) (async) socket$inet(0x2, 0x801, 0x100) (async) 1m2.319664301s ago: executing program 0 (id=266): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001680)=@nat={'nat\x00', 0x19, 0x2, 0x90, [0x200000001400, 0x0, 0x0, 0x20000000150e, 0x200000001644], 0x0, 0x0, 0x0}, 0x108) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) 1m2.218988575s ago: executing program 0 (id=267): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0xffb3, 0xc0c, 0x100, 0x2}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0x7}, 0x8) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10010, r0, 0xe44e6000) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r1, 0x10}, 0x8) recvfrom$rxrpc(r0, &(0x7f0000000180)=""/101, 0x65, 0x10100, &(0x7f0000000200)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x24) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/223, 0xdf}, {&(0x7f0000000340)=""/181, 0xb5}, {&(0x7f0000000400)=""/125, 0x7d}], 0x3, 0xaa, 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x81, 0x7ff, 0x3, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x7, 0x200, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x0, 0x81, 0x5, 0xffffffc0, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x87ee, 0x40, 0xfffffffd, 0x59a}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000840)={'tunl0\x00', &(0x7f00000007c0)={'gretap0\x00', 0x0, 0x7800, 0x8000, 0x6, 0xfffff9ad, {{0x17, 0x4, 0x1, 0x2f, 0x5c, 0x64, 0x0, 0x3, 0x4, 0x0, @remote, @remote, {[@cipso={0x86, 0x46, 0xffffffffffffffff, [{0x5, 0x9, "8d5c2156ac08ed"}, {0x7, 0x8, "1e047a70d795"}, {0x2, 0x11, "382d694f3b38ef389b2709c2e4dd2f"}, {0x7, 0x12, "873149504a0432fe4bb2ff3ea1382e0a"}, {0x6, 0x9, "dd6320919163b5"}, {0x6, 0x3, '\\'}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000980)={'erspan0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x10, 0x8000, 0x5, 0x3, {{0x2c, 0x4, 0x2, 0x9, 0xb0, 0x68, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@timestamp_addr={0x44, 0x3c, 0x42, 0x1, 0x7, [{@empty, 0x101}, {@rand_addr=0x64010101, 0xff}, {@loopback, 0x2f}, {@remote, 0x1}, {@private=0xa010100, 0x5}, {@multicast2, 0x7ff}, {@private=0xa010100, 0x3}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x4d, 0x1, 0xc, [{@local, 0x7}, {@empty, 0x8000}, {@rand_addr=0x64010101, 0xfa}, {@local, 0xfff}, {@loopback, 0x1e1}, {@loopback}, {@empty, 0x4}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x58, 0x3, 0x7, [{@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x81}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a00)={'gretap0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x68, 0x7800, 0x2, 0xe3fa, {{0x7, 0x4, 0x2, 0x1e, 0x1c, 0x66, 0x0, 0x4, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @dev={0xac, 0x14, 0x14, 0x1f}, {[@noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x4, 0x43bb, 0x50, @mcast2, @dev={0xfe, 0x80, '\x00', 0x11}, 0x7800, 0x1, 0x40, 0x1000}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b00)={'ip_vti0\x00', 0x0, 0x7800, 0x20, 0x7ff, 0x7, {{0x34, 0x4, 0x0, 0x4, 0xd0, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1, {[@cipso={0x86, 0x81, 0x3, [{0x1, 0x4, "c4a0"}, {0x1, 0xd, "a32eef610dff8b5df936f0"}, {0x6, 0x5, "042506"}, {0x5, 0x12, "87ae2d061c24f00a7a2a58894fb4c50f"}, {0x0, 0xe, "f5457713001fa22582fa3195"}, {0x1, 0xc, "8c3b20fe018aae66e411"}, {0x6, 0xd, "46bbe15fef1dd093b4f8c1"}, {0x1, 0xa, "a1c01210613bc467"}, {0x7, 0x11, "0198942da85672891e2a78653fc0b0"}, {0x6, 0x11, "cc9863eee782cbaef98d844db31ba8"}]}, @lsrr={0x83, 0xf, 0xe2, [@multicast2, @remote, @multicast2]}, @noop, @noop, @timestamp_prespec={0x44, 0x1c, 0x9b, 0x3, 0x3, [{@broadcast, 0x5d38}, {@multicast2, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x3}]}, @timestamp_prespec={0x44, 0xc, 0xc7, 0x3, 0x5, [{@multicast1, 0x2}]}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000c40)={@initdev, 0x0}, &(0x7f0000000c80)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={r0, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000d00)=[0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f0000000d80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001240)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000fc0)={0x22c, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000044) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r14, 0x6, 0x3, &(0x7f0000001280), &(0x7f00000012c0)=0x4) accept$phonet_pipe(r0, &(0x7f0000001300), &(0x7f0000001340)=0x10) r15 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r15, 0x10e, 0x1, &(0x7f0000001380)=0xf, 0x4) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f00000013c0)) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000001400)={0xfffffff7, "b680061efabcabdd1dadb35c08340c9b608530fba86eb3a7c51fb2ebfdb598bd", 0x7}) bind$netlink(r0, &(0x7f0000001440)={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc) ioctl$XFS_IOC_EXCHANGE_RANGE(r15, 0x40285881, &(0x7f0000001480)={r14, 0x0, 0x9, 0x9d6, 0x8, 0x4}) 1m2.217520893s ago: executing program 0 (id=268): read(0xffffffffffffffff, &(0x7f0000000600), 0x100) (async) read(0xffffffffffffffff, &(0x7f0000000600), 0x100) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xa797, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_TXQLEN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x10000, 0x0) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') r13 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat(0xffffffffffffff9c, &(0x7f0000000800)='./export_dir\x00', 0xc2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000800)='./export_dir\x00', 0xc2, 0x0) mkdir(&(0x7f0000000e00)='./proc_dir\x00', 0x1ff) (async) mkdir(&(0x7f0000000e00)='./proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./proc_dir\x00', &(0x7f0000001100)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000001000)='./proc_dir\x00', &(0x7f0000001100)='proc\x00', 0x0, 0x0) r14 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./proc_dir/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r14, &(0x7f0000001300)='nfsd 127.0.0.1 2000000000 *\n', 0x1c) r15 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc_dir/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r15, &(0x7f0000000b00)='* ./export_dir 2000000000 \\194 0 0 0\n', 0x25) rt_sigprocmask(0x1, &(0x7f0000000480)={[0x5]}, &(0x7f00000004c0), 0x8) write$binfmt_aout(r13, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) (async) write$binfmt_aout(r13, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) syz_ublk_setup_queues(r12, r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x121}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(r12, r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x121}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r12}, 0x94) 1m1.908995475s ago: executing program 0 (id=269): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'macvlan1\x00', &(0x7f00000009c0)=@ethtool_flash={0x26, 0x8000000, './file0/file0\x00'}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="fd37982ac3c61b36c5d3db763f5a9ca80780f3568fa2ce58663f1105997696ef16d29da97b18f633b999bdd54f20afeecb12a01aa8fb8f", 0x37}, {&(0x7f00000000c0)="b1c7b9b4511850f1e1e4c45e4a31c24313f3e59972bdee06f15802dd788f82d5e7e53b6ed60e9f30e5d730b28122681450b74bd40329ae1d2f951da866c85337053ccfc563e310dddaae20486e3623b74bffb4ee3c200a5ee2047f2c7bb1646c84214ff6298af7f95833e9dc760db0962d105567ee07de177d99ec04e0e63328f190b54b81745e60da11dd4da3f422248697115f876f0ec2bb76050b5e92adc523b0b349e1", 0xa5}, {&(0x7f0000000180)="4db462edda7534562a45fa91a610c2eef0997d49d2549e0019c1d31f8e79bb2849dbcdccffd8670a13fffbab8c02446448eeb5291ca0e25ded03001dd570406937b30bb5f21e3ab7b26116a03b4314454cae0a3de1cef60e7e140fa931786c0246ae2204a50a5a73ddd75f09c5d0e57729db6325299a458290a02fd9bc4d5aa0c7fab1da4fb62b59c7fe9e6343a9e7200c2cfa043d55e8408ff4bac53fa34b4cd4ab65e0b5b73b33a8bf1fb3f1ac68e00c1077aa37f6f6d9efed53", 0xbb}], 0x3, &(0x7f00000003c0)=[{0x68, 0x115, 0x9, "fd78c882c0b93a3db34342de5217946cf8caa8290f050c8382a9ae5d8db0f83c6df8227384ae68572b384cf50a9839758c034965878c4fdcf17f61e409cebd1e950843944c43d137eab8f0e6f1036a7432ead9c1"}, {0x48, 0x103, 0x101, "4ca1885316ac658b74af5483627ac079ea3ac479c236ee9194ff3fd86d92fc7bbd92575eb3342a71caec207d8745874cb290d7699d3d"}, {0xa0, 0x10b, 0x1, "fdc0232159ab8bc034d2e2e4a22782b66032fc0040c2077ea2eda27f5bee6e20f9cffacb82c3cd4ef7579c8032b5f63c5e617534535a7b84c98845f137f6efa615df146ab30ab5eb677da6f4c6a55decfb627471cb419e4ac5d06fc2dcf93a09cdd586c6bade7d8095f48e73d93966ab3939e69f915fe92014e3f5c301bb2ce424449fac53bd223c199f511525e1e8fe"}, {0x60, 0x29, 0x1, "81bb2b2d4f857540f1868592ea32e070acdc966e3b413fe4fe6d1e443d296bd39467f4a19997858852c8c999ec222adc5c2f2e6ffb53c701ec0ac8750d409d52fcf778849f4711fc994ce8d0"}, {0x30, 0x115, 0x8, "2c70db393435f078262dd9fbf3bb9bb291ad217e795f2b4b29921db7267e41"}], 0x1e0}, 0x40810) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'macvlan1\x00', &(0x7f00000009c0)=@ethtool_flash={0x26, 0x8000000, './file0/file0\x00'}}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="fd37982ac3c61b36c5d3db763f5a9ca80780f3568fa2ce58663f1105997696ef16d29da97b18f633b999bdd54f20afeecb12a01aa8fb8f", 0x37}, {&(0x7f00000000c0)="b1c7b9b4511850f1e1e4c45e4a31c24313f3e59972bdee06f15802dd788f82d5e7e53b6ed60e9f30e5d730b28122681450b74bd40329ae1d2f951da866c85337053ccfc563e310dddaae20486e3623b74bffb4ee3c200a5ee2047f2c7bb1646c84214ff6298af7f95833e9dc760db0962d105567ee07de177d99ec04e0e63328f190b54b81745e60da11dd4da3f422248697115f876f0ec2bb76050b5e92adc523b0b349e1", 0xa5}, {&(0x7f0000000180)="4db462edda7534562a45fa91a610c2eef0997d49d2549e0019c1d31f8e79bb2849dbcdccffd8670a13fffbab8c02446448eeb5291ca0e25ded03001dd570406937b30bb5f21e3ab7b26116a03b4314454cae0a3de1cef60e7e140fa931786c0246ae2204a50a5a73ddd75f09c5d0e57729db6325299a458290a02fd9bc4d5aa0c7fab1da4fb62b59c7fe9e6343a9e7200c2cfa043d55e8408ff4bac53fa34b4cd4ab65e0b5b73b33a8bf1fb3f1ac68e00c1077aa37f6f6d9efed53", 0xbb}], 0x3, &(0x7f00000003c0)=[{0x68, 0x115, 0x9, "fd78c882c0b93a3db34342de5217946cf8caa8290f050c8382a9ae5d8db0f83c6df8227384ae68572b384cf50a9839758c034965878c4fdcf17f61e409cebd1e950843944c43d137eab8f0e6f1036a7432ead9c1"}, {0x48, 0x103, 0x101, "4ca1885316ac658b74af5483627ac079ea3ac479c236ee9194ff3fd86d92fc7bbd92575eb3342a71caec207d8745874cb290d7699d3d"}, {0xa0, 0x10b, 0x1, "fdc0232159ab8bc034d2e2e4a22782b66032fc0040c2077ea2eda27f5bee6e20f9cffacb82c3cd4ef7579c8032b5f63c5e617534535a7b84c98845f137f6efa615df146ab30ab5eb677da6f4c6a55decfb627471cb419e4ac5d06fc2dcf93a09cdd586c6bade7d8095f48e73d93966ab3939e69f915fe92014e3f5c301bb2ce424449fac53bd223c199f511525e1e8fe"}, {0x60, 0x29, 0x1, "81bb2b2d4f857540f1868592ea32e070acdc966e3b413fe4fe6d1e443d296bd39467f4a19997858852c8c999ec222adc5c2f2e6ffb53c701ec0ac8750d409d52fcf778849f4711fc994ce8d0"}, {0x30, 0x115, 0x8, "2c70db393435f078262dd9fbf3bb9bb291ad217e795f2b4b29921db7267e41"}], 0x1e0}, 0x40810) (async) 1m1.570779s ago: executing program 0 (id=270): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x4800) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0x3, 0x4) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000000000611080000000000095006e00000000007a6f005f596135d31c6833bb52305b95f2b64a33618975eadcecdbf444d77755de2b6373e106e80523bb553717ca08a8dcbbb2c09e5810105e13387341b12b316e016e9199c0b00dcde7b012dd58a25fa8946c249c77cf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) recvfrom$l2tp(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 1m1.508819193s ago: executing program 32 (id=270): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="020f200015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000004600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff02000000000000000000000000000100000000000014d4010018dd4a1c96e58fe07e85ab32303e0f04b87f21548bdcccb3d36a2ccb6578199312521249de154f3c3f5f339fa2b9df7eb2abbe567ae4f526979fce340102afdac37b74be99ca1a9dae9125e990bbac77db5c9a8b61d5e507953cab0a8e233c"], 0xa8}}, 0x4800) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0x3, 0x4) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000000000611080000000000095006e00000000007a6f005f596135d31c6833bb52305b95f2b64a33618975eadcecdbf444d77755de2b6373e106e80523bb553717ca08a8dcbbb2c09e5810105e13387341b12b316e016e9199c0b00dcde7b012dd58a25fa8946c249c77cf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) recvfrom$l2tp(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 56.507980076s ago: executing program 33 (id=180): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003680)={0x2020}, 0x2020) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='freezer.state\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) setns(r2, 0x10000000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) accept(r3, &(0x7f0000000240)=@rc={0x1f, @fixed}, &(0x7f0000000300)=0x80) 48.470109332s ago: executing program 1 (id=427): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 48.468982297s ago: executing program 1 (id=428): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x485, 0x0, 0x8001}]}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000001480)=[{{&(0x7f0000000080)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="f1", 0x1}], 0x1}}], 0x1, 0x10048085) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setns(0xc9, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0x4, 0x3, 0x4, r8}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x2703, 0x5, 0x3, 0x8, 0x101, 0x800, 0x1000, 0x0, r8}, 0x20) sendmmsg$inet_sctp(r0, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000008400000000000000a2001000010009001800000000000000840000000b0000007f1400000100000000"], 0x30}], 0x1, 0x40) 45.439742189s ago: executing program 1 (id=475): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="fbd89b3e8977042b8d347071ecb9ced6ca30c62d075a011fd70630380f4fb526e74634260eaa7b3bddf26611e940db08172fad84fa1395", 0x37}, {&(0x7f0000000100)="24adae2b5c2fb0d06e", 0x9}], 0x2}, 0x34000041) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}]}, &(0x7f0000000180)=0x10) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r7, 0x0, 0xd0, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000080)={r8, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x9, 0x9}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x17f, 0x4, 0x11, 0x1, 0x8}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={r8, 0x7, "30a15b5c9db3c4"}, &(0x7f00000000c0)=0xf) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r11], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) creat(&(0x7f0000000440)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 44.54959508s ago: executing program 1 (id=489): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x4000000) ppoll(&(0x7f0000000140)=[{r2, 0xc002}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) r6 = dup2(r1, r2) fcntl$setown(r6, 0x8, r0) tkill(r0, 0x13) gettid() (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x2) (async) fcntl$setsig(r1, 0xa, 0x12) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x4000000) (async) ppoll(&(0x7f0000000140)=[{r2, 0xc002}], 0x1, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) (async) dup2(r1, r2) (async) fcntl$setown(r6, 0x8, r0) (async) tkill(r0, 0x13) (async) 44.416283383s ago: executing program 1 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@multiplanar_overlay={0x8, 0x2, 0x4, 0x4, 0x81, {}, {0x5, 0x2, 0x7, 0xb, 0x5, 0x2, "1c1b778c"}, 0x7, 0x3, {0x0}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r2, 0xacf5e67dd0b58d31, 0xffffffff, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x4c044) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x4, &(0x7f0000000440)={&(0x7f0000000240)=""/174, 0xae}) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r6, 0x29, 0x4, &(0x7f0000000300)={0x7ff, {{0xa, 0x4e21, 0x7ffffffc, @private2={0xfc, 0x2, '\x00', 0xff}, 0x800}}, {{0xa, 0x4e20, 0x4d14, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, 0x9}}}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040001}, 0xc0000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f0000000480)={0x0, 0xffffff24, &(0x7f00000014c0)={&(0x7f0000000180)={0x34, r5, 0x1, 0x50bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) 44.400694783s ago: executing program 1 (id=498): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000), 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x60, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x60, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000240)={0x5, 0x4000000000008a, 0xfffffffffffffbff, 0x5, 0x9, 0x42, 0x52e6ac5e, 0x2000ffffffff, 0x9651, 0x786, 0xfffffffffffffff8, 0x8, 0x5, 0x7, 0x80100000000000, 0xcc3, 0x2001, 0x85, 0x17, 0x80000000, 0x400, 0x8, 0x7, 0xfffffffffffffffe, 0x200000000003, 0x400000000000000a}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x40cb, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_client}]}}) (async) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x40cb, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_client}]}}) sendto$inet6(r2, &(0x7f0000000040)="7cf2b4df80", 0x5, 0x91, &(0x7f00000003c0)={0xa, 0x4e21, 0x2bdc, @dev={0xfe, 0x80, '\x00', 0x43}}, 0x1c) 39.699733371s ago: executing program 2 (id=554): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffc0000, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/strings/0x409/s1\x00', 0x1ff) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/s1\x00') 39.52251093s ago: executing program 2 (id=555): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000040)={0x22, 0xfe, 0xdc}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x8, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 39.519359473s ago: executing program 2 (id=556): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001640)={{0xffffffffffffffff, &(0x7f0000000040)='*{#$}\x00', 0x2000, &(0x7f0000000080)={@_ha_fsid={[0x3, 0x7]}, {0xf001, 0x0, 0x7, 0x3}}, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x6}, 0x6, &(0x7f0000001580)=[{0x1, 0x7, &(0x7f0000000140)='\x00', &(0x7f00000001c0)="f5295c9d25f1b3224ae4f5009e9f9e517e1c9a6fe47d73d7398c6d16c4d2ba18a5b6c45edc7aec81fb37d13f6cda3930a330e5fc5648e6ba508967b6883a37da3111def0aae1f9867c4b2ab4318e2d6ed5ada1be478c97657ae87434782f1ff32f8c047cb6c36653bf631bf738013b593df096de01756901b9277d64cece3003f043ca5bbc87959a5ef1f4caa2fd8a1097b7a36654341dc2e84823c66215a088b995d50209c4ba8ba65823", 0xab, 0xa}, {0x3, 0x5, &(0x7f0000000280)='}-.^\x00', &(0x7f00000002c0)="43352b8b8610313b0baab94378eefcf2ad948114f1be190794044a0f168abbbc0a3f27e0c77596d1307c399f2ac8c49064f02d3118e487c7ee5d1f2f34ded996780b9fe3ce74f24dade93bced14737e9b28cf716c8697241a6637dd1e31ae1665ed4a5ac164c94cb8c2aa3fa4f63f8d28246c6150490ac2252e0334dbbaf5033fc38a2c327ab6897888bc310bc047a0491563aa2992a7cea3c6724dc4967d8f4ccad7c4d95", 0xa5, 0xa}, {0x1, 0x7fffffff, &(0x7f0000000380)='\xbc-&\\:.\x00', &(0x7f0000001700)="a6a72444c867369604f32f6055abf098eb1187390f5b04c2de75292a2e128a48fe6fac6521053e7438dd6bea4249d08a82836cd92c7a30c70adf933d2ab0a6e853949596f4cf886aa052a92030f8f9d0aa0cb4e42f75c54e127d4bb17fcdbab6e1707384f0df5a9f7244cac39c6caa04c6fb274721f7924d887ceb20edd4cab3b1e3a42508ef1f04724e8efb7a", 0x8d, 0x20}, {0x3, 0xfa16f794, &(0x7f0000000440)='])^\\]&}\x00', &(0x7f0000000480)="c8f1425e17e027", 0x7, 0x38}, {0x2, 0x2, &(0x7f00000004c0)='-@\x00', &(0x7f0000000500)="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", 0x1000, 0x10}, {0x1, 0x7fffffff, &(0x7f0000001500)='\x00', &(0x7f0000001540)="48bb161e4a87b5e497d6de", 0xb, 0x30}]}) ioctl$MEMSETBADBLOCK(r0, 0x40084d0c, &(0x7f00000016c0)=0x2) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x2000000) 39.519011392s ago: executing program 2 (id=557): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount(0x0, &(0x7f0000001080)='./sys_link\x00', &(0x7f0000001040)='fusectl\x00', 0x11, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl(r3, 0x541b, 0x0) ioctl(r3, 0x5451, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000700)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000d4b000/0x18000)=nil, &(0x7f0000000bc0)=[@text32={0x20, 0x0}], 0x1, 0x60, &(0x7f0000000c00)=[@cr0={0x0, 0x10015}], 0x1) 39.474934094s ago: executing program 2 (id=558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xe, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x4, 0x8, [{0x0, 0x575e, 0x6, 0x9}, {0x1, 0xf, 0xfffffffe, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x200040c0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r13, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x40000000, 0x0, 0x9}]}) setresuid(0x0, 0xee00, r10) r14 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r15 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200c0, 0x0) ioctl$I2C_PEC(r15, 0x708, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x3, 0x0, 0x1, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(r14, 0x6, 0x0, 0x0, 0x0) r16 = fsmount(r14, 0x0, 0x0) fchdir(r16) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) 39.280566674s ago: executing program 2 (id=559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x24008080) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) 39.245962015s ago: executing program 34 (id=559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x24008080) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) 32.860462044s ago: executing program 4 (id=593): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x44040, 0x11b) (rerun: 32) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x9) (async) syz_emit_ethernet(0x56, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x10000, 0x0, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000ffffff7f00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00D\x00\b'], 0x16c}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x80000001}}, 0x10) 32.798426499s ago: executing program 4 (id=594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYBLOB="bd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x82902, 0x0) sendfile(r3, r3, 0x0, 0x200000) cachestat(r3, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xb0, 0x2a, 0x107, 0xfffffffc, 0x25dfdbff, {0x3, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}, @generic="ee10e7671d7f6741a90d952dbf2aa5ee5b3a29107e1c709c28b3c2d4b016f971aa19b754eeb34b20aba28665a73ffd1558ef7ce918b9e2ce9d7eefc2a2219902ff639410bf8ca06f719fa39d01a53cef5da48e16d9d97ff88d82772e1560cde0b9d3bd69db7cb5374237e616b83da874235f09a6803e10bb7595a5924ee733b443f5f407c6686bf2b5e15ed1f4830cacc5c2"]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004805}, 0xc000) 32.558343061s ago: executing program 4 (id=595): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001044a00203afffe880000000000000000000000000001fe8000000000000000000000000000aa8800907800000000fe8000000000000000000000000000bb0201000000000000c2b1691e05b6eb9d7538d98e4915eb0b0fbf0792f81fb29b05567273188400baab058344afa1fa4622f4e243e73f4c84f96e1963c46c2c7524198767b01a79cd19e031c32835a1dedce57ec3309ca136ea413df90c50791013433dc019203d2339e9b3b98edaf98368c493e3d720a3"], 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) (async) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) 32.556409052s ago: executing program 4 (id=596): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/bus/pci/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000600)=""/1024, 0x400) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4c0000001a001100000000000000000002000000000000000000000005001b0006000000080001007f000001"], 0x4c}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0xa, r4, 0x0, r2}) r5 = syz_open_dev$ublk_bdev(&(0x7f00000001c0), 0x0, 0x80) write$ublk_bdev(r5, &(0x7f0000000200)="e690cdd30e7569f0ad84b747a2172660048812f23564a63c58702581f6ab9167ceeda75f5ed7ec7a2300984227430491c4dcb2486325d23071faf6fab831ce1243d793b1a023b4f1c4f8a58646510a7077ebcec143e41022e0c53be86c720b1b751c64aae10231fca7ecc8c383783970edc3ff5dfb1e03987122af14e9ba795452f9389808f4d2337bd2a8efd03d8f9eb6ec06b7ee810a33589393c5f3d23ebec3efd986ff2ed960257a1e36e34f1f91201ea3c432f6fc6de76cd9ed3501cb0ed604cef4c77c0c63770be6ea5612c13efd4025db5613bbe9b03af1", 0xdb) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0xa, r4, 0x0, r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="580000000206010100000000000000000000000605000100070000000900020073797a30000000000c000780050015000b00000012000300686173683a6e65742c706f72740000000500050002000073fe00040002000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_mr_cache\x00') preadv(r8, &(0x7f0000000340)=[{&(0x7f0000000080)=""/120, 0x78}], 0x1, 0x67, 0x105) 32.420078962s ago: executing program 4 (id=597): r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10) mmap(&(0x7f000018b000/0x4000)=nil, 0x4000, 0xb, 0x8031, r0, 0x21169000) r1 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340), &(0x7f0000000600), &(0x7f0000000000)) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x400000, 0x2) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x630200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/class/drm/version\x00', 0x0, 0x0) read(r4, &(0x7f0000000300), 0x100) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r5, 0x200, &(0x7f00000011c0)={&(0x7f00000001c0)=""/4096, 0x1000}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='@-\'\x00', &(0x7f0000000180)='$\x00', 0x0) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000000)={0xc, &(0x7f00000000c0)=[{0x29, '\x00', @data=0x5, 0xfffffff7}]}) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000002000)={0x0, 0x7}, &(0x7f0000002040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000020c0)={r6, 0x1c, &(0x7f0000002080)=[@in6={0xa, 0x4e22, 0x80000001, @mcast1, 0x6}]}, &(0x7f0000002100)=0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 32.370325108s ago: executing program 4 (id=598): r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @broadcast}, {0x320}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) 29.344875425s ago: executing program 35 (id=498): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000), 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x60, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863336057ac14142c88a8a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x60, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863336057ac14142c88a8a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000240)={0x5, 0x4000000000008a, 0xfffffffffffffbff, 0x5, 0x9, 0x42, 0x52e6ac5e, 0x2000ffffffff, 0x9651, 0x786, 0xfffffffffffffff8, 0x8, 0x5, 0x7, 0x80100000000000, 0xcc3, 0x2001, 0x85, 0x17, 0x80000000, 0x400, 0x8, 0x7, 0xfffffffffffffffe, 0x200000000003, 0x400000000000000a}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x40cb, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_client}]}}) (async) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x40cb, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@access_client}]}}) sendto$inet6(r2, &(0x7f0000000040)="7cf2b4df80", 0x5, 0x91, &(0x7f00000003c0)={0xa, 0x4e21, 0x2bdc, @dev={0xfe, 0x80, '\x00', 0x43}}, 0x1c) 17.203381853s ago: executing program 36 (id=598): r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @broadcast}, {0x320}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) 11.05760443s ago: executing program 8 (id=825): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 11.05414578s ago: executing program 8 (id=827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0) (async) r1 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0xfa, 0x10, 0xfff00002}, {0x16, 0x0, 0xfd}]}, 0x10) (async) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x800, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r2, &(0x7f0000000040)={0x18, 0x0, r3, {0x7}}, 0x18) (async) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./myconfig/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r6, &(0x7f0000000900)='super-speed', 0xb) (async) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@arm64={0x5, 0x8, 0x3a, '\x00', 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.93961343s ago: executing program 8 (id=829): madvise(&(0x7f0000985000/0x1000)=nil, 0x1000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@const={0xc, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000140)=""/65, 0x27, 0x41, 0x0, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r1, 0x1, 0x2, 0x1}, 0x50) close(r0) r2 = io_uring_setup(0x537e, &(0x7f0000000200)={0x0, 0x61ee, 0x800, 0x2, 0x199}) syz_io_uring_setup(0x1b8b, &(0x7f0000000280)={0x0, 0xce01, 0x10, 0x1, 0xaf, 0x0, r2}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 10.786879706s ago: executing program 8 (id=830): mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="ae729185cecea2e52c588bdf3fef0e018a"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0xc0085666, &(0x7f0000000080)={0x2, 0x4}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000080)=""/5, 0x5, 0x0, &(0x7f00000002c0)=""/227, 0xe3}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0x2a, &(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRES32=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000005070000008200000018110000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000000)) 10.728270278s ago: executing program 8 (id=832): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x2, @pix_mp={0x3, 0xfffff549, 0x3031334d, 0x0, 0x5, [{0x3, 0xfffffffa}, {0x3, 0x2}, {0x7, 0x2}, {0x2, 0xeb}, {0x0, 0x4}, {0x8, 0xb}, {0x8}, {0x5, 0x18f674ba}], 0x1, 0x8b, 0x6, 0x2, 0x7}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x410001, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x2) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range(r1, r2, 0x0) 10.178938362s ago: executing program 8 (id=839): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14}}, 0x64}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) (async) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000100"], 0x18}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 10.130538753s ago: executing program 37 (id=839): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14}}, 0x64}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) (async) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000100"], 0x18}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2.270345492s ago: executing program 6 (id=889): r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) socket$inet6(0xa, 0x3, 0x4) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0405602, &(0x7f00000001c0)=@overlay={0x0, 0x1, 0x4, 0x171003, 0x0, {}, {0x1, 0xc, 0x18, 0xa4, 0xb, 0x9e, "f50f8900"}, 0x4, 0x3, {}, 0x44}) 2.269943988s ago: executing program 6 (id=890): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)={0x18, 0x5e, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 2.050145309s ago: executing program 6 (id=891): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2}, {0x60}, {}, {0x6}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_off}]}) lsetxattr$security_evm(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200), &(0x7f0000000680)=ANY=[@ANYBLOB="03"], 0x9, 0x1) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0/file0/file0\x00', &(0x7f0000000240), &(0x7f0000000280)={'L-', 0x200}, 0x16, 0x1) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0/file0\x00', &(0x7f0000000040), 0x1004014, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3da550dd8273b6074e740453f8853d2feccf3bd623afc34720af29df667227641d786bfc05334fc3f0fa447f7c8009c93682af49e3ab53c245fa6f34ae39aecd27a4738f91bca15658e273ef79e46ee2cbb1f4604e69540992e4115cab43c8a18276c13a6ea7058553b7ae61a21d8e88f1105dfe6ae76d1b265a4251166ecf098c208894359b004bfde1118ae96d421f4016788c2c0b82f1b898447f2698a114032e050f3e1b385bf59ff3eb4539435fde6cb915afe2b1c7d1f05dd242548bd0c25abb6a47", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) sendto$inet6(r1, &(0x7f0000000080)="e3", 0x1, 0x40000, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}, 0x1c) 2.049549301s ago: executing program 7 (id=892): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)={0x4bc, 0x0, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0xd80c}, 0x8, 0x3, 0x8, 0x3, 0x27, 'syz0\x00', "7771ed767577c46244729ba238281f43a70c46b86fe9271284a5f83fa7582718", "7801537634028a1390bc0622fd63330ca478d532c87bcc3b47cf2a9477617b1d", [{0x1ba6, 0x4, {0x1, 0x7000}}, {0x9, 0x0, {0x3, 0x9}}, {0xb7, 0xecf, {0x0, 0xffffff44}}, {0x2, 0xffff, {0x3, 0x4}}, {0x7, 0x76c4, {0x3, 0x6}}, {0xc, 0x8, {0x0, 0x2}}, {0x6, 0x4, {0x2}}, {0x1, 0x9, {0x1, 0x2}}, {0x4d, 0x423d, {0x3, 0x7}}, {0x401, 0x6, {0x0, 0x7}}, {0x8, 0x4, {0x0, 0x10000}}, {0x3, 0x7ff, {0x0, 0xd75}}, {0x5, 0xb, {0x2, 0x3}}, {0x7, 0x9, {0x1, 0x4}}, {0xffff, 0x1, {0x1, 0xfff}}, {0x3000, 0x5, {0x1, 0x98f}}, {0x6, 0xffff, {0x2, 0x5}}, {0xcc2, 0x2, {0x3, 0x8001}}, {0x4, 0x8, {0x0, 0x53}}, {0x7, 0x4000, {0x1, 0xfffffb75}}, {0x9, 0x8, {0x1, 0x7}}, {0x5, 0x44, {0x0, 0x400}}, {0x8000, 0x2, {0x0, 0x5}}, {0x6, 0xf000, {0x2, 0x6}}, {0x1, 0xffff, {0x1, 0x7}}, {0x791f, 0x7, {0x2, 0x5}}, {0x5, 0x5, {0x2, 0x3}}, {0x213, 0x6, {0x0, 0x7}}, {0x9, 0x9, {0x3, 0x4c4}}, {0x4dcf, 0x4, {0x3, 0x4}}, {0x9, 0x3, {0x0, 0x8}}, {0x40, 0x3, {0x2, 0x7}}, {0xd, 0x6, {0x1, 0x8}}, {0x0, 0x3, {0x3, 0x6}}, {0x9, 0xfffe, {0x0, 0x963}}, {0x1, 0x5, {0x3, 0x6c0d}}, {0x5, 0x8, {0x7, 0x80000000}}, {0xffff, 0x3, {0xc6b04437a5f6769f, 0x82b}}, {0x3, 0xfff, {0x1, 0x9}}, {0xe61c, 0x2, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x8, 0x1, 0x8, 0x2, 0x27, 'syz0\x00', "d68eac673c2de2acf7f8e25a8240fff8cb9c93ae61f01de2bcadf6df53b22dff", "c57f1c7c5246ea3cea53b3f3af136598be647da8f1c40aa7c90990495e2a936b", [{0x8, 0xfffe, {0x2, 0x3}}, {0x7, 0x5, {0x2, 0x7fffffff}}, {0x9, 0x1, {0x0, 0x5}}, {0x8, 0x80, {0x1, 0xfffffff7}}, {0x4, 0x7ff, {0x2, 0x3}}, {0x400, 0x1ff, {0x1, 0xfffff872}}, {0x0, 0xff80, {0x2, 0x9}}, {0x3, 0x7, {0x1, 0x4}}, {0x6, 0x5, {0x1, 0x101}}, {0xf384, 0x3, {0x2, 0x8000}}, {0xfe, 0x9, {0x1, 0x2}}, {0x2, 0x8, {0x0, 0x2}}, {0x800, 0x3946, {0x3, 0x5}}, {0x1, 0x7ff, {0x2, 0x7b1}}, {0x7f, 0xfc00, {0x0, 0x8}}, {0xf, 0x6, {0x0, 0x80}}, {0xadfb, 0xfe8e, {0x0, 0x1c0}}, {0x8001, 0x36, {0x0, 0xfffffffc}}, {0x8, 0x3ff, {0x2, 0xe}}, {0x5, 0x3, {0x0, 0x7}}, {0x8, 0x8, {0x3, 0x14a}}, {0x401, 0x8, {0x3, 0x2fd8}}, {0x0, 0x7, {0x2, 0x4b71}}, {0x3e, 0xfffe, {0x0, 0x1ff}}, {0xc, 0x8001, {0x2, 0xc}}, {0x7c7, 0x0, {0x3, 0x6}}, {0x7, 0xff, {0x3, 0x1ff}}, {0x4, 0x28, {0x3, 0x8}}, {0x882d, 0xfe1d, {0x2, 0x5}}, {0x5, 0x2, {0x1, 0x9010}}, {0x1, 0xf001, {0x3, 0x4}}, {0x24, 0xb08, {0x3, 0x4}}, {0x4, 0x2, {0x3, 0x6}}, {0x8, 0x4, {0x3, 0x800}}, {0x1, 0x4, {0x0, 0x3}}, {0x100, 0x5, {0x3, 0x7f}}, {0x5, 0x1e1, {0x3, 0x3}}, {0x4, 0x3, {0x3, 0xff}}, {0x0, 0x2, {0x3, 0x6}}, {0xde9, 0x8, {0x3, 0xfffffffd}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x24008081}, 0x4004) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080018"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x48040) r4 = socket$packet(0x11, 0x3, 0x300) socket(0x1e, 0x6, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f00000002c0)=@ethtool_cmd={0x35, 0xc5, 0x531, 0x8d, 0xf, 0x1, 0x6, 0x25, 0x5, 0xd, 0xad, 0x7, 0x80, 0x5, 0xfd, 0xf, [0x3, 0x10007c88]}}) io_setup(0x8, &(0x7f0000000580)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x80001, 0x84) listen(r6, 0x804) listen(r6, 0x3) r7 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[], 0x20}, 0x1, 0x300000000000000, 0x0, 0x4000000}, 0x0) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000140)=""/210) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="1a040500bbff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r9, 0x1, 0x6, 0x6, @remote}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=r0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r0], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.18990061s ago: executing program 5 (id=896): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504a9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x10001}]}}}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0xcf, 0x18, 0x401, 0x49, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x7, 0xfffeffff, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0xcf, 0x18, 0x401, 0x49, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x7, 0xfffeffff, 0x3}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000) 1.180829092s ago: executing program 6 (id=897): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xd, 0xc}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x498d0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="2000002400070128bd7000fadbdf25027c00000c000180080002000100000000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 1.175457139s ago: executing program 9 (id=898): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x3}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x10001, 0x2, 0xa, 0x1}, 0x50) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8, r1}, 0x38) 1.102591288s ago: executing program 5 (id=899): mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)='erofs\x00', 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETS(r0, 0x80047456, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f00000000c0)={0xfffffffa, "02fa2b50842ebee1d302999a0c029c624609be376e7c1713810a05bb269d1f51", 0x200, 0x9, 0x8f, 0x8, 0x6}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f0000000000)='smb3\x00', 0x0, &(0x7f0000000380)='acl') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000270e00"/20, @ANYRES32=0x0, @ANYBLOB="2a130200b7580000140012800b00010067656e65766500000400028008002000070cf0ce"], 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0) 1.030556908s ago: executing program 9 (id=900): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000300)=@filename='./file0/file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mount(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80001, 0x0) r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x2) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000200)=0xb51c, 0x4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000280)=@chain) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\x00', 0xfffffffffffffff9) keyctl$assume_authority(0x10, r2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000180)=0x26000) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0x1, 0x45, '\x00', 0xfffffffffffffffb}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.030160824s ago: executing program 5 (id=901): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='xfs\x00', 0x0, &(0x7f0000000000)='usrquota') (async) openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x142, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') (async) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000400)={0x6, 0x5, 0x0, 'queue1\x00', 0x2}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x6, 0x8, 0x2da, 0x0, 0x7fffffffffffe, 0x5, 0x8, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r9, 0xc0045405, &(0x7f0000000080)=0x40) (async) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x8000, 0x0, r4, r5, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3dd65875885e8771c08f2b442e38ac410c4b1ec28a931881584a187affd10e4e015a7129e1bb75814f3903d9131339f46758c3d17f0bd03abc945b9b87b379ad6ab97ee73ec0b66ea5619fb6f8cce5e9f46c5dc12fec531c771bfb7e7c6e7e7aacd056c8c49af359fef2ef5b1ffb1155ef6a0c8469516e7b982c35c1299cfb40c4100717728643843e", @ANYRESHEX=r0, @ANYBLOB=',seclabel,smackfshat=/dev/audio1\x00,pcr=00000000000000000061,ro,\x00']) 959.529478ms ago: executing program 6 (id=902): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={[{@redirect_dir_off}, {@default_permissions}, {@index_on}, {@redirect_dir_nofollow}, {@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@verity_on}, {@redirect_dir_off}, {@metacopy_off}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) 951.329379ms ago: executing program 5 (id=903): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x1000, 0x0, 0x42}, &(0x7f0000000200), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/49, 0x31}], &(0x7f0000000180)=[0xfffffffffffffff9], 0x1}, 0x20) (async) listen(r0, 0xfffffffc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x40080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) (async) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x101000) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0445624, &(0x7f0000000300)={0xf0f000, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x100000000, 0xfffffffffdfff003, 0x0, 0x9, 0x5, 0x2, 0x2, [0x9, 0x2, 0x0, 0xfffffffd]}) 950.452059ms ago: executing program 6 (id=904): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0xfffffffb}, 0x1c, 0x0}, 0x3400c8d4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0xfffffdfc}]) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000200)) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats_percpu\x00') write$cgroup_pid(r5, 0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0xc0010015, 0x0, 0x4}]}) r10 = signalfd(r6, &(0x7f0000000180), 0x8) read$eventfd(r10, &(0x7f00000001c0), 0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000380)=r12, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x0, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a00)=@newtclass={0x8c8, 0x28, 0x604, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff2}, {0xb, 0xfff3}, {0x0, 0xa}}, [@tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_htb={{0x8}, {0x884, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x8}, @TCA_HTB_CEIL64={0xc, 0x7, 0x7fff}, @TCA_HTB_PARMS={0x30, 0x1, {{0x6, 0x2, 0x3f, 0x1ff, 0x7, 0x6}, {0x9, 0x0, 0x81, 0x7, 0x2, 0x15d600}, 0x3, 0x8, 0x3, 0x0, 0x1}}, @TCA_HTB_RTAB={0x404, 0x4, [0x1, 0x1, 0x9, 0x7, 0xd, 0xfff, 0x1, 0x0, 0x2, 0x9, 0x8, 0x4, 0x5, 0x8, 0x2, 0x4, 0x8273, 0xdaa2, 0x1, 0x1, 0xffffffff, 0x7, 0x7, 0x6f, 0x1, 0x9, 0x8, 0xfffffffe, 0x80, 0x5, 0xffff, 0x4, 0x6, 0x3, 0x0, 0xb, 0x9, 0x9, 0x0, 0x8, 0x1, 0x7f, 0x400, 0x90c, 0xccc6, 0x3ff, 0x7c, 0x7e, 0x5b6bfed4, 0xfffff58f, 0x4, 0x400, 0x8d, 0x3a, 0x8, 0x97, 0xb1be, 0x8f998019, 0x6, 0xff, 0x2, 0xb, 0xc, 0x6, 0x2, 0x1, 0x3ff, 0x240, 0x8, 0x4, 0x2, 0xffffffff, 0x2, 0x8, 0xb, 0x2ee, 0x8, 0xc, 0x5, 0x5, 0x3, 0x1000, 0x1, 0x3ff, 0xd1, 0x0, 0x40, 0x9, 0x4, 0x7, 0x9, 0xffffffff, 0x1, 0x179a, 0x9, 0x3, 0x10001, 0xcf, 0x3, 0x200, 0x5, 0x7, 0x5, 0x80, 0x6, 0x5, 0xf17, 0xc935415, 0xffffffff, 0xaedb, 0x293, 0x7, 0x834, 0x10, 0x5, 0xff, 0x5, 0x40, 0x7, 0x1, 0x7, 0x1000, 0x1ff, 0xfd50, 0xffffffb7, 0x26, 0x24b, 0x5, 0x0, 0x10, 0x12b, 0x8, 0x3, 0x4, 0x7fffffff, 0xffffffaa, 0x6, 0x73, 0x3, 0x0, 0xffffffc0, 0x9, 0x0, 0xd, 0x100, 0x8c79, 0x401, 0x1, 0x800, 0x6, 0x9, 0x80000000, 0x3, 0x200, 0x3, 0x5, 0x8001, 0x8, 0xff, 0xfffffff7, 0x5, 0x6, 0x0, 0x2, 0x3, 0x2, 0xfffffff9, 0x3, 0x5, 0x0, 0xffffffff, 0x3, 0x8, 0x5, 0x3, 0xa, 0xc0c, 0x2, 0x4bf, 0xfffffffb, 0x8, 0x5, 0xe30, 0x9, 0x5, 0x3, 0x2, 0x0, 0xfffffff8, 0x10001, 0x6, 0xaca0, 0x400, 0x76, 0x94bb, 0xcc4, 0xfffffffa, 0x32c1, 0x10, 0x6, 0x5, 0x1, 0x4, 0x1, 0x584, 0x4, 0x9, 0xd, 0x5, 0x7, 0x101, 0x480000, 0x95, 0x9, 0x9, 0x7, 0x5, 0x7ff, 0x3, 0x4, 0x6, 0xb, 0x5, 0x1000, 0x1, 0x6, 0x6, 0x5, 0x2, 0x8000, 0x6, 0x7, 0x2, 0x7, 0x8, 0x80, 0x2, 0x5, 0xffff, 0x10000, 0x3, 0x4, 0x0, 0x1, 0x9, 0x2, 0x1, 0x6, 0x1, 0x3, 0xfffff801, 0x4, 0x5, 0x3, 0x5976, 0x4]}, @TCA_HTB_RTAB={0x404, 0x4, [0x5, 0xd007, 0x7ff, 0x100, 0xffff2af5, 0xe5, 0x9, 0x7fffffff, 0x4, 0x2, 0x80, 0x3, 0x5, 0xeb, 0x2, 0x9, 0x5, 0x90a5, 0x1, 0xb, 0x7cb, 0x1ff, 0xff74, 0x4, 0x7, 0x100, 0x5, 0x40, 0x7fffffff, 0xfa, 0x101, 0x4, 0x0, 0x893, 0x80, 0x5, 0x1, 0x0, 0x1, 0x400, 0x7, 0xb53, 0x8, 0xfffffffa, 0x2, 0x4, 0x738, 0x1, 0x0, 0x3, 0x2ad, 0x2, 0xffffffff, 0x3, 0x90c, 0x3, 0x4, 0x2, 0x7f, 0x3, 0x3, 0x5, 0xffff, 0xd22, 0x2, 0x35d, 0x10000, 0x0, 0x0, 0x8, 0x200, 0xfff, 0x0, 0x7ff, 0x5, 0x37caea33, 0x209586de, 0x0, 0xee, 0x800, 0x1, 0x8, 0x9, 0x2, 0x5c2, 0x7, 0x1, 0xa4ce, 0x6, 0x200, 0x910c, 0x7, 0x7, 0x7ff, 0x10000fa8, 0x6, 0x2, 0x90, 0x62b, 0x7, 0x7, 0xa5, 0x8, 0x1ff, 0x0, 0x9, 0x9, 0x4, 0x401, 0x80, 0xfffffffe, 0x339d0959, 0x7, 0x2, 0x8001, 0x26e2, 0x3, 0x9, 0xd452, 0x2, 0x3, 0x4d9, 0x6, 0x2, 0x6, 0x1000, 0x32ea, 0x10001, 0x7ff, 0x1, 0x3, 0x8, 0x1, 0x9, 0xfff, 0x4d, 0x3, 0x6, 0x0, 0x200, 0x4, 0xfffff801, 0x2, 0x6, 0x800000, 0xd0, 0xfffffe20, 0xb7cd, 0xfffffffc, 0x40000000, 0x401, 0x7, 0x1, 0xffff, 0xc, 0x9, 0x9, 0x1ff, 0x381a000, 0x8000, 0x7fff, 0x8, 0x0, 0xffffff80, 0x5, 0x1000, 0x10, 0xff, 0x200000, 0x2, 0x3f9b7cf3, 0x3, 0x483ef225, 0x6, 0x10, 0x7, 0x6, 0xfffffff7, 0x4339, 0x5, 0x7, 0xffffffff, 0x400, 0x6, 0xb4, 0x7, 0x8, 0xfff, 0x5, 0x36, 0x1, 0xfffffff7, 0x81, 0x2, 0x0, 0x6, 0x1, 0x4, 0x83, 0xfffffffc, 0x4, 0x8f1, 0xe, 0x8, 0x2, 0x10001, 0x48bc, 0x8, 0x0, 0x8002, 0x4, 0x8, 0x6, 0x1, 0x8, 0x1, 0xb1e, 0x200, 0x4, 0x7f, 0x5, 0xaae, 0x200, 0x80, 0x7, 0x6, 0x8000, 0x1, 0x3, 0xb, 0x5, 0x8, 0x6, 0x6, 0xa5, 0x0, 0x1c00, 0x6, 0x101, 0x9, 0x2, 0x4, 0x4, 0x5, 0x800, 0x6, 0x9, 0x7, 0x7, 0x1, 0x7, 0x654b16e6, 0xffffff97, 0x8, 0x1, 0x2]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x1, 0x5, 0x8, 0x5, 0x4}, {0x0, 0x1, 0x3, 0x8, 0x40, 0xb86b}, 0x5, 0xfffffff9, 0x6, 0x1bd, 0x800}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}]}, 0x8c8}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x48a82, 0x0) write$sysctl(r13, &(0x7f0000000100)='0\x00', 0x2) 839.698717ms ago: executing program 9 (id=905): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x70bd25, 0x0, {0x2, 0x14, 0x14, 0x0, 0x0, 0x2, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x40}}]}, 0x30}}, 0x40000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@updsa={0x10c, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast1, 0x4d2, 0x2b}, @in=@rand_addr=0x64010101, {}, {0x4f5, 0x0, 0x0, 0xcb66}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x42}, [@encap={0x1c, 0x4, {0xad4ab344a903da57, 0x4e21, 0x4e23, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}}]}, 0x10c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x14) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000000)=0x2, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r4) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r6, 0x4001af84, &(0x7f0000000080)={0x1}) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001f80), r3) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001fc0)={0x14, r7, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2008010}, 0x24040014) 764.77944ms ago: executing program 9 (id=906): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000440), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40841}, 0x1) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x80000) 720.07105ms ago: executing program 9 (id=907): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') pread64(r0, &(0x7f00000013c0)=""/15, 0xf, 0x404) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="0100e4a5c9088e98cba400006cf607d49fd2cead41f274b576ba0aeaa5ee09b127e215a619e5ced109bddab35d698eae3ba55fabd9615aee7361ae54"]) r3 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x18, 0x2, 0x281}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) listen(r4, 0x0) shutdown(r4, 0x0) accept(r4, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000001040)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}], 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') (async) pread64(r0, &(0x7f00000013c0)=""/15, 0xf, 0x404) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="0100e4a5c9088e98cba400006cf607d49fd2cead41f274b576ba0aeaa5ee09b127e215a619e5ced109bddab35d698eae3ba55fabd9615aee7361ae54"]) (async) io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x18, 0x2, 0x281}) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async) listen(r4, 0x0) (async) shutdown(r4, 0x0) (async) accept(r4, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000001040)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}], 0x2) (async) 619.556849ms ago: executing program 9 (id=908): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000400)='1\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1\x00', 0x2) close(r3) write(0xffffffffffffffff, &(0x7f0000000400)='1\x00', 0x2) close(0xffffffffffffffff) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000001ec0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r4, 0x3b83, &(0x7f0000001f00)={0x28, 0x10000, 0x0, r5, 0x85b8b, 0x8, 0x0, 0x14d47b}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1f.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='1\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000600)='1\x00', 0x2) (async) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ptrace(0x10, r7) 549.448764ms ago: executing program 7 (id=909): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = gettid() ioprio_get$pid(0x1, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000140)={0x1c, 0x4, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 339.219988ms ago: executing program 7 (id=910): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x200400, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x80010, r1, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000080)) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) 260.860928ms ago: executing program 7 (id=911): setns(0xc9, 0x0) (async) setns(0xc9, 0x0) syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}}, 0x20}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}}, 0x20}}, 0x0) 179.377343ms ago: executing program 7 (id=912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}]}]}, 0xc8}}, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000200)=0xffffffff, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 49.454442ms ago: executing program 5 (id=913): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x6) (async) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 318.505µs ago: executing program 5 (id=914): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_vhci(&(0x7f0000002900)=ANY=[@ANYBLOB="043e0612a2"], 0x9) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='config/file0\x00', &(0x7f00000000e0)='configfs\x00', 0x1104010, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) openat(r3, &(0x7f0000000240)='idProduct\x00', 0x2, 0x0) r4 = openat(r3, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000340)='serialnumber\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)='fedcba9', 0x7) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x513, 0x70bd26, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x22c49004}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004091}, 0x20000005) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000680)={0x424, 0x3f4, 0x8, 0x70bd25, 0x25dfdbfc, {0x0, 0x1, 0xe, [0x5, 0x1, 0x6, 0x492ee9ea, 0x1, 0xd, 0x6, 0x0, 0x3b7, 0x3, 0x9, 0x7fffffff, 0x5, 0x6, 0xc9d2, 0x8, 0x8, 0x6, 0x401, 0x40, 0x5, 0xfffffffc, 0x3, 0x12000, 0xfffffffc, 0x0, 0x4, 0x9, 0x32, 0x7fffffff, 0x8, 0x7, 0x960, 0x1000008, 0x6, 0x400, 0x400, 0xffffffff, 0x99, 0xfffffff7, 0x7, 0x7, 0x37, 0x6, 0xd10, 0xd, 0x7, 0x6, 0x1, 0xfa9, 0x50, 0x3, 0x5, 0x0, 0xffff9d14, 0x9, 0x6, 0xfffff001, 0x7, 0xae, 0x490e, 0x8, 0x9, 0x6], [0x40, 0x8, 0x171, 0x6, 0x0, 0x8, 0x6, 0x5, 0x1, 0x1, 0x100, 0x5, 0x80, 0x7fffffff, 0xffff, 0x20000, 0x4, 0x6, 0x6, 0x1a0d, 0xf, 0x2da1, 0x3479, 0x0, 0xff, 0x0, 0x6, 0x100, 0x3, 0x80, 0x6, 0x80, 0x7, 0xfffffffa, 0x1ff, 0x6, 0xff, 0x46, 0xfffffffd, 0x81, 0x8, 0x80, 0x6, 0xd, 0x7, 0x10001, 0xfffffff9, 0x100, 0x9, 0x9, 0x9, 0x6, 0x1ff, 0x6, 0xfffeffff, 0x6, 0x80, 0x9, 0x19e80000, 0xffba, 0x2, 0x1bb, 0x7, 0x4], [0x8001, 0x0, 0x3ff, 0x6, 0x3, 0xff, 0xffffffff, 0xffffffff, 0x3, 0x0, 0x8, 0x8, 0x1ab, 0x8000, 0xfffffff2, 0x3, 0x5, 0x18a7, 0x30, 0xffff, 0x2, 0x5, 0x2, 0x40, 0x8000, 0x96, 0x10001, 0x10, 0x6a, 0x0, 0x5, 0x8, 0x6, 0x1, 0x5, 0xc1, 0x1, 0x15c6, 0x6, 0x4, 0x10000, 0x98, 0xffff, 0x0, 0x0, 0x7, 0x4, 0x8000000, 0x31d, 0x2, 0x0, 0x1, 0x200, 0x8000, 0x4000, 0x1, 0x7, 0x0, 0x5, 0x9, 0x70e, 0x1, 0xffff, 0xca], [0x4, 0x5c50458b, 0x1, 0x10, 0x15, 0x4, 0x7, 0x1, 0x40, 0x9, 0x9, 0x6, 0x6, 0xd83, 0x81, 0x401, 0x401, 0x5, 0x7, 0x4, 0x8, 0xdcc, 0xff, 0x4, 0x2f59, 0x5, 0x3ff, 0x7ff, 0x101, 0x0, 0xed, 0x1, 0x3, 0x1, 0x2, 0x4, 0x81, 0x2, 0x100, 0xffffffff, 0x1, 0x681b, 0x0, 0x5, 0xc72, 0x80000001, 0x10000, 0x1, 0xfffffffc, 0x3, 0x0, 0x10001, 0x2, 0x9, 0x5, 0x6, 0x0, 0x4, 0x3, 0x80000000, 0x9, 0x4, 0x9, 0x6], 0x2, ['[\x00']}, ["", "", "", "", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x10}, 0x200080b1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x800}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) writev(r6, &(0x7f00000005c0)=[{&(0x7f0000000280)="034abe1977a266845817abfa8ffdf07ff962447c87d5e75f6ddb8ca23c00286e95dda2c42f0436c113d7fdb60443f29cd742fa0a13d1efe9b3e6978789f72a781623547030bda8da4c59c84345beffc5d140bb1f5a71bf9a6a540046ed838dffa04c91a7fa315c9d75abda5ef59d", 0x6e}, {&(0x7f0000000380)="4c783e58d9e53017cdc1ddf9a7c2f43a81d700a205e6810879db85f85f5362ae94bee5de450c035a88e976dbe04c4c5b9d93dd3383d68969daff561a6b79a0fd5c0a22fc95ae43ed8213c21ec6584b4d1587d6ca76580b4bdd9a8aae57172ef4f13ea23674143a64e51ec6f6f5c8b450d43b4b248b99f9c7e853a6c442578e5d803d5214dde21f9415c71644afc91d9dbfa1de3fde49cf71cd45d583c52f36ba205242902ba8cec65fb526de32c0c428896ddf986627d72e5e840ebaecad587c019f77ddc90768d1a8a48ee8681dc24b0f77a20307fe527be6987f4ec4f92f72845376ef33", 0xe5}, {&(0x7f0000000480)="5cb4eac2731b959daa58e62877d21a2d1d85aad0c9515378990717a6ae0d1d8aeaa35d45c1a20b40c7499b93d15877524055e815112a637a4bc95da3e72aba48660c2f1609882cf6a3fa7d67839177b5cf4a9c35f3eeacb1290bedf75807addbdb29f89c11b3fd0bc77c7e0508e3a2a516071d826a50d842c393cee0fac5310cd362e42bb0989ee257b009432a64917d439034b917d835a64af5110f4d3b6c8ba3970ee61a97ae68d5dd61fe791d421112487ec3440d5ce811b52458024e519ff947", 0xc2}, {&(0x7f0000000580)="30bd77c7ac77c1f5217c4448f888ab1ebac6", 0x12}], 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r9}, 0x10) socket$inet6(0xa, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r12, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r12, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000fedbdf250300000018000180040004000d0001006574683a687372300000000055b8c2af6d5643e7b3f315f8e127dfbc0fd73ff5babfc2abf938e6301b5d371bdd6f20f587a0a7a0375e794d3bd25c6c82bb0c5ee9c7dedf408a4186cfbbf91b4cc17714faa951ed15ce5a6db2c254ee271dfbccb5163820c3f28ef942d1051f53f57c59b6391f961cee99498406d558eb38fa6f67f301c4455e8a5a19c435d4c77bceaae7585a447e124732a03c8f4e4f2dbe1a66ba6c14056333d339272894e6d7d667c863b17a5fbb95"], 0x2c}}, 0x40000000) 0s ago: executing program 7 (id=915): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000400000280600fc000000000000000000000000000000fe8000000000000000000000000000aa4e234e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a080000013120200000029e530c36978a84b987889057e89"], 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='1', 0x1) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) poll(&(0x7f00000000c0)=[{r4, 0x70ac}], 0x1, 0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) r5 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x26, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, r5}) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x365) preadv(r0, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4082, 0xfffffffffffffda8}], 0x1, 0x33, 0x61) kernel console output (not intermixed with test programs): ing interface the new active one [ 89.393030][ T7311] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 89.443429][ T7314] syz_tun: left allmulticast mode [ 89.445145][ T7314] syz_tun: left promiscuous mode [ 89.446915][ T7314] bridge0: port 3(syz_tun) entered disabled state [ 89.453524][ T7314] bridge_slave_1: left allmulticast mode [ 89.455399][ T7314] bridge_slave_1: left promiscuous mode [ 89.457450][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.465016][ T7314] bridge_slave_0: left allmulticast mode [ 89.467631][ T7314] bridge_slave_0: left promiscuous mode [ 89.471013][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.537190][ T42] kauditd_printk_skb: 51 callbacks suppressed [ 89.537209][ T42] audit: type=1400 audit(1785445924.706:666): avc: denied { ioctl } for pid=7316 comm="syz.5.384" path="socket:[19279]" dev="sockfs" ino=19279 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.650578][ T7320] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 89.662806][ T7320] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 89.666904][ T7320] uhci_hcd 0000:00:1d.0: detected 2 ports [ 89.669233][ T7320] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0 [ 89.677045][ T7320] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 89.681444][ T7320] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 89.684203][ T7320] usb usb2: Product: UHCI Host Controller [ 89.686170][ T7320] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 89.689059][ T7322] kvm: user requested TSC rate below hardware speed [ 89.689110][ T7320] usb usb2: SerialNumber: 0000:00:1d.0 [ 89.702647][ T7322] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.386'. [ 89.717357][ T7320] hub 2-0:1.0: USB hub found [ 89.720504][ T7320] hub 2-0:1.0: 2 ports detected [ 89.728051][ T42] audit: type=1400 audit(1785445924.896:667): avc: denied { cmd } for pid=7319 comm="syz.5.385" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 89.814085][ T7329] input: syz1 as /devices/virtual/input/input11 [ 89.860649][ T5891] tipc: Node number set to 2130706433 [ 89.898381][ T42] audit: type=1326 audit(1785445925.066:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7337 comm="syz.5.390" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab8d19df99 code=0x0 [ 90.009664][ T7345] netlink: 'syz.5.391': attribute type 1 has an invalid length. [ 90.012795][ T7345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.093931][ T42] audit: type=1400 audit(1785445925.266:669): avc: denied { getopt } for pid=7352 comm="syz.5.394" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.166812][ T42] audit: type=1400 audit(1785445925.336:670): avc: denied { read write } for pid=7356 comm="syz.5.396" name="mouse0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 90.168852][ T7357] netlink: 28 bytes leftover after parsing attributes in process `syz.5.396'. [ 90.176024][ T42] audit: type=1400 audit(1785445925.336:671): avc: denied { open } for pid=7356 comm="syz.5.396" path="/dev/input/mouse0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 90.180335][ T7357] netlink: 28 bytes leftover after parsing attributes in process `syz.5.396'. [ 90.250742][ T7361] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 90.314075][ T42] audit: type=1400 audit(1785445925.486:672): avc: denied { sqpoll } for pid=7362 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 90.345533][ T42] audit: type=1400 audit(1785445925.516:673): avc: denied { accept } for pid=7363 comm="syz.5.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 90.480262][ T5755] Bluetooth: hci4: command tx timeout [ 90.515619][ T42] audit: type=1400 audit(1785445925.686:674): avc: denied { name_bind } for pid=7374 comm="syz.5.402" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 90.558808][ T5755] Bluetooth: hci0: command 0x080f tx timeout [ 90.562077][ T1498] usb 7-1: USB disconnect, device number 16 [ 90.616334][ T7379] program syz.2.403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.621609][ T7379] trusted_key: encrypted_key: insufficient parameters specified [ 90.720784][ T7381] kvm: pic: single mode not supported [ 90.721921][ T7381] kvm: pic: single mode not supported [ 90.839630][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 90.846561][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 91.024528][ T7399] netlink: 32 bytes leftover after parsing attributes in process `syz.1.409'. [ 91.178246][ T42] audit: type=1400 audit(1785445926.346:675): avc: denied { write } for pid=7408 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 91.563442][ T7426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.634349][ T7429] netlink: 80 bytes leftover after parsing attributes in process `syz.4.419'. [ 91.768031][ T7425] infiniband syz1: set active [ 91.773488][ T7425] infiniband syz1: added syz_tun [ 91.785370][ T7425] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 91.790417][ T7425] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 91.797512][ T7425] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 91.825525][ T7425] RDS/IB: syz1: added [ 91.829126][ T7425] smc: adding ib device syz1 with port count 1 [ 91.832298][ T7425] smc: ib device syz1 port 1 has no pnetid [ 91.838589][ T1498] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 91.856156][ T7439] bond0: entered promiscuous mode [ 91.857925][ T7439] bond_slave_0: entered promiscuous mode [ 91.859963][ T7439] bond_slave_1: entered promiscuous mode [ 91.862649][ T7439] gretap0: entered promiscuous mode [ 91.865550][ T7439] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 91.870583][ T7439] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 91.874641][ T7439] hsr1: entered promiscuous mode [ 91.957821][ T7449] tipc: Failed to remove unknown binding: 66,0,0/0:1637093719/1637093720 [ 91.962292][ T7450] tipc: Failed to remove unknown binding: 66,0,0/0:1637093719/1637093720 [ 91.967945][ T7449] tipc: Failed to remove unknown binding: 66,0,0/0:1637093719/1637093720 [ 92.008473][ T1498] usb 10-1: Using ep0 maxpacket: 8 [ 92.011503][ T1498] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.017851][ T1498] usb 10-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 92.021732][ T1498] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.027320][ T7460] bond0: (slave team0): Releasing backup interface [ 92.033187][ T1498] usb 10-1: config 0 descriptor?? [ 92.038164][ T7460] bond0: (slave bond_slave_0): Releasing backup interface [ 92.047313][ T1498] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 92.063929][ T7460] bond0: (slave bond_slave_1): Releasing backup interface [ 92.075540][ T7460] team0: Port device team_slave_0 removed [ 92.083322][ T7460] team0: Port device team_slave_1 removed [ 92.083704][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.083717][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.085319][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.085330][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.086376][ T7460] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.350841][ T7492] binder_alloc: binder_alloc_mmap_handler: 7489 200000ffd000-200001000000 already mapped failed -16 [ 92.390050][ T61] Bluetooth: hci1: Frame reassembly failed (-84) [ 92.395843][ T7488] Bluetooth: hci1: Frame reassembly failed (-90) [ 92.406992][ T7492] binder_alloc: 7489: binder_alloc_buf, no vma [ 92.408549][ T7491] binder_alloc: 7489: binder_alloc_buf, no vma [ 92.512434][ T6760] usb 10-1: USB disconnect, device number 2 [ 92.558478][ T5742] Bluetooth: hci4: command tx timeout [ 92.721034][ T7502] veth1: Caught tx_queue_len zero misconfig [ 93.236190][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.240020][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.242988][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.245899][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.292071][ T7592] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 93.382334][ T7600] program syz.2.447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.391970][ T7600] xt_hashlimit: size too large, truncated to 1048576 [ 93.541473][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.546315][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.746750][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.749733][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.758210][ T7620] 9p: Invalid gid '0x00000000ffffffff' [ 93.770062][ T7620] __nla_validate_parse: 7 callbacks suppressed [ 93.770077][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.450'. [ 93.777790][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.450'. [ 93.780908][ T5891] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 93.784072][ T7620] overlayfs: failed lookup in lower (newroot/22, name='file0', err=-40): overlapping layers [ 93.803725][ T7623] loop6: detected capacity change from 0 to 2640 [ 93.813619][ T5761] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.818869][ T5761] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.823539][ T5761] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.827292][ T5761] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.832076][ T5761] Buffer I/O error on dev loop6, logical block 0, async page read [ 93.966057][ T7637] tipc: Started in network mode [ 93.968167][ T7637] tipc: Node identity 664dd3d81b4d, cluster identity 4711 [ 93.971924][ T7637] tipc: Enabled bearer , priority 0 [ 93.985065][ T7635] tipc: Disabling bearer [ 94.081684][ T5742] Bluetooth: hci2: SCO packet for unknown connection handle 1280 [ 94.109510][ T7644] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.456' sets config #511 [ 94.249358][ T7650] netlink: 16 bytes leftover after parsing attributes in process `syz.5.458'. [ 94.400360][ T5742] Bluetooth: hci1: command 0x1003 tx timeout [ 94.400384][ T5755] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 94.415260][ T7657] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 94.496761][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.463'. [ 94.500874][ T7668] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 94.872306][ T7693] f2fs: Unknown parameter 'discardrfs/binder0' [ 94.876589][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 94.876604][ T42] audit: type=1400 audit(1785445930.046:704): avc: denied { accept } for pid=7692 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.948054][ T7703] kvm: user requested TSC rate below hardware speed [ 95.293327][ T42] audit: type=1400 audit(1785445930.466:705): avc: denied { create } for pid=7717 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.309376][ T42] audit: type=1400 audit(1785445930.486:706): avc: denied { bind } for pid=7717 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.321043][ T42] audit: type=1400 audit(1785445930.486:707): avc: denied { accept } for pid=7717 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.334448][ T42] audit: type=1400 audit(1785445930.486:708): avc: denied { write } for pid=7717 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.375564][ T7721] netlink: 'syz.1.475': attribute type 8 has an invalid length. [ 95.377970][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 95.381056][ T7720] binder: 7719:7720 ioctl c0306201 200000000440 returned -14 [ 95.383770][ T42] audit: type=1804 audit(1785445930.556:709): pid=7721 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.475" name="/newroot/118/file0" dev="tmpfs" ino=651 res=1 errno=0 [ 95.501335][ T7728] capability: warning: `syz.5.479' uses 32-bit capabilities (legacy support in use) [ 95.544092][ T42] audit: type=1400 audit(1785445930.716:710): avc: denied { wake_alarm } for pid=7729 comm="syz.5.480" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.818744][ T7700] ceph: No mds server is up or the cluster is laggy [ 95.917541][ T7741] netlink: 'syz.2.483': attribute type 12 has an invalid length. [ 95.958464][ T5849] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 96.010593][ T7747] netlink: 'syz.2.485': attribute type 10 has an invalid length. [ 96.013046][ T7747] netlink: 40 bytes leftover after parsing attributes in process `syz.2.485'. [ 96.016167][ T7747] batadv0: entered promiscuous mode [ 96.017968][ T7747] batadv0: entered allmulticast mode [ 96.022015][ T7747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.024994][ T7747] bridge0: port 3(batadv0) entered blocking state [ 96.027293][ T7747] bridge0: port 3(batadv0) entered disabled state [ 96.118421][ T5849] usb 10-1: Using ep0 maxpacket: 8 [ 96.130095][ T5849] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 96.135351][ T5849] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.140046][ T5849] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.144138][ T5849] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.148298][ T5849] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.154192][ T5849] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.157983][ T5849] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.279787][ T7770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.495'. [ 96.322585][ T42] audit: type=1400 audit(1785445931.496:711): avc: denied { ioctl } for pid=7776 comm="syz.4.497" path="socket:[21860]" dev="sockfs" ino=21860 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.328559][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 96.336455][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 96.369103][ T5849] usb 10-1: usb_control_msg returned -32 [ 96.370953][ T5849] usbtmc 10-1:16.0: can't read capabilities [ 96.373622][ T7785] netlink: 'syz.4.500': attribute type 10 has an invalid length. [ 96.382822][ T7785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.386417][ T7785] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 96.395515][ T7785] netlink: 68 bytes leftover after parsing attributes in process `syz.4.500'. [ 96.558003][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 96.563896][ T42] audit: type=1400 audit(1785445931.736:712): avc: denied { bind } for pid=7794 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.570888][ T7797] sock: sock_set_timeout: `syz.4.504' (pid 7797) tries to set negative timeout [ 96.672824][ T7801] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 96.678761][ T7801] kvm: user requested TSC rate below hardware speed [ 96.704404][ T42] audit: type=1400 audit(1785445931.876:713): avc: denied { setopt } for pid=7807 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 96.709928][ T7808] Invalid argument reading file caps for ./file0 [ 96.751466][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 96.758670][ T7812] loop8: detected capacity change from 0 to 4194304 [ 97.035215][ T7822] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 97.040064][ T7822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7822 comm=syz.2.511 [ 97.076577][ T7826] usbtmc 10-1:16.0: control status returned 0 [ 97.112928][ T7833] IPVS: Unknown mcast interface: lo [ 98.473421][ T7878] Mass Storage Function, version: 2009/09/11 [ 98.477836][ T7878] LUN: removable file: (no medium) [ 98.713418][ T55] usb 10-1: USB disconnect, device number 3 [ 99.009367][ T7910] __nla_validate_parse: 6 callbacks suppressed [ 99.009386][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.533'. [ 99.035541][ T7910] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.045823][ T7910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=7910 comm=syz.2.533 [ 99.207388][ T7929] trusted_key: encrypted_key: master key parameter 'üÿ?—ÑÐÃB°mvTeJ+µ'9q¶Öjà' is invalid [ 99.207550][ T7930] netlink: 'syz.2.538': attribute type 2 has an invalid length. [ 99.337040][ T7945] netlink: 'syz.2.543': attribute type 1 has an invalid length. [ 99.339471][ T7945] netlink: 76 bytes leftover after parsing attributes in process `syz.2.543'. [ 99.559928][ T55] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 99.718563][ T55] usb 9-1: Using ep0 maxpacket: 32 [ 99.722515][ T55] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 99.725223][ T55] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 99.730124][ T55] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 99.735186][ T55] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 99.741495][ T55] usb 9-1: config 0 interface 0 has no altsetting 0 [ 99.748051][ T55] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 99.752631][ T55] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 99.756016][ T55] usb 9-1: Product: syz [ 99.757790][ T55] usb 9-1: Manufacturer: syz [ 99.758724][ T5849] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 99.760057][ T55] usb 9-1: SerialNumber: syz [ 99.767554][ T55] usb 9-1: config 0 descriptor?? [ 99.772570][ T55] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 99.779245][ T55] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 99.883984][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 99.884006][ T42] audit: type=1400 audit(1785445935.056:737): avc: denied { write } for pid=7959 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.928506][ T5849] usb 7-1: Using ep0 maxpacket: 32 [ 99.932916][ T5849] usb 7-1: unable to get BOS descriptor or descriptor too short [ 99.942318][ T5849] usb 7-1: string descriptor 0 read error: -22 [ 99.945218][ T5849] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 99.949760][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 99.983326][ T5849] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 99.984796][ T42] audit: type=1400 audit(1785445935.156:738): avc: denied { write } for pid=7962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.985436][ T7943] program syz.4.542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.994130][ T5849] dw2102: su3000_power_ctrl: 1, initialized 0 [ 100.000518][ T5849] dvb-usb: bulk message failed: -22 (2/0) [ 100.009447][ T5849] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.014828][ T5849] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 100.019662][ T5849] usb 7-1: media controller created [ 100.021364][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 100.023660][ T5849] dw2102: i2c transfer failed. [ 100.025218][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 100.027438][ T5849] dw2102: i2c transfer failed. [ 100.029456][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 100.031489][ T5849] dw2102: i2c transfer failed. [ 100.033315][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 100.035013][ T5849] dw2102: i2c transfer failed. [ 100.036903][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 100.039253][ T7966] : renamed from bond0 (while UP) [ 100.041419][ T5849] dw2102: i2c transfer failed. [ 100.041938][ T5855] usb 9-1: USB disconnect, device number 3 [ 100.041991][ C1] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 100.042981][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 100.051376][ T5849] dw2102: i2c transfer failed. [ 100.052956][ T5849] dvb-usb: MAC address: 02:02:02:02:02:02 [ 100.055217][ T42] audit: type=1400 audit(1785445935.226:739): avc: denied { write } for pid=7967 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.061025][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.066758][ T7943] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 100.073347][ T5855] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 100.083673][ T5849] dvb-usb: bulk message failed: -22 (3/0) [ 100.087793][ T5849] dw2102: command 0x0e transfer failed. [ 100.089890][ T5849] dvb-usb: bulk message failed: -22 (3/0) [ 100.091686][ T5849] dw2102: command 0x0e transfer failed. [ 100.215430][ T7977] xt_hashlimit: size too large, truncated to 1048576 [ 100.311547][ T7968] binder: 7941:7968 ioctl c0306201 200000000640 returned -22 [ 100.321594][ T42] audit: type=1400 audit(1785445935.496:740): avc: denied { map } for pid=7941 comm="syz.4.542" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.390435][ T7984] netlink: 20 bytes leftover after parsing attributes in process `syz.5.551'. [ 100.399691][ T5849] dvb-usb: bulk message failed: -22 (3/0) [ 100.402105][ T5849] dw2102: command 0x0e transfer failed. [ 100.404458][ T5849] dvb-usb: bulk message failed: -22 (3/0) [ 100.409134][ T5849] dw2102: command 0x0e transfer failed. [ 100.414572][ T5849] dvb-usb: bulk message failed: -22 (1/0) [ 100.419724][ T5849] dw2102: command 0x51 transfer failed. [ 100.420450][ T7984] tipc: Enabling of bearer rejected, failed to enable media [ 100.442494][ T5849] DVB: Unable to find symbol ds3000_attach() [ 100.445027][ T5849] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 100.498530][ T5849] rc_core: IR keymap rc-su3000 not found [ 100.500900][ T5849] Registered IR keymap rc-empty [ 100.505041][ T5849] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 100.512908][ T5849] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input13 [ 100.523110][ T5849] dvb-usb: schedule remote query interval to 150 msecs. [ 100.526159][ T5849] dw2102: su3000_power_ctrl: 0, initialized 1 [ 100.528979][ T5849] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 100.534937][ T5849] usb 7-1: USB disconnect, device number 18 [ 100.601328][ T6760] hid-generic 0005:16C0:5505.0003: item fetching failed at offset 0/2 [ 100.601385][ T5849] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 100.611498][ T6760] hid-generic 0005:16C0:5505.0003: probe with driver hid-generic failed with error -22 [ 100.981347][ T7995] veth0_macvtap: Caught tx_queue_len zero misconfig [ 100.986240][ T42] audit: type=1400 audit(1785445936.156:741): avc: denied { write } for pid=7994 comm="syz.2.554" name="0x409" dev="configfs" ino=10569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.002908][ T42] audit: type=1400 audit(1785445936.176:742): avc: denied { write } for pid=7994 comm="syz.2.554" name="0x409" dev="configfs" ino=10569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.378927][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.471032][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.503209][ T5849] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 101.510797][ T5849] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 101.551630][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.554604][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.560026][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.567340][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.573610][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.576295][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.622389][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.560'. [ 101.625863][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.560'. [ 101.641028][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.648985][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.560'. [ 101.653459][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.560'. [ 101.823333][ T12] bridge0: port 3(batadv0) entered disabled state [ 101.828709][ T12] bridge_slave_1: left allmulticast mode [ 101.831148][ T12] bridge_slave_1: left promiscuous mode [ 101.836557][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.842504][ T12] bridge_slave_0: left allmulticast mode [ 101.844726][ T12] bridge_slave_0: left promiscuous mode [ 101.846960][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.855436][ T8021] uprobe: syz.5.562:8021 failed to unregister, leaking uprobe [ 101.927045][ T12] gretap0 (unregistering): left promiscuous mode [ 101.967334][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.972573][ T12] bond_slave_0: left promiscuous mode [ 101.975167][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.978182][ T12] bond_slave_1: left promiscuous mode [ 101.980206][ T12] bond0 (unregistering): Released all slaves [ 101.986421][ T12] bond1 (unregistering): Released all slaves [ 101.993574][ T12] bond2 (unregistering): Released all slaves [ 102.018224][ T8026] netlink: 40 bytes leftover after parsing attributes in process `syz.5.563'. [ 102.107346][ T42] audit: type=1400 audit(1785445937.276:743): avc: denied { write } for pid=8032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.162150][ T42] audit: type=1400 audit(1785445937.336:744): avc: denied { write } for pid=8038 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.218211][ T8041] netlink: 'syz.5.564': attribute type 10 has an invalid length. [ 102.223733][ T5449] 8021q: adding VLAN 0 to HW filter on device eth10 [ 102.234937][ T8041] team0: Port device veth0 added [ 102.241993][ T42] audit: type=1400 audit(1785445937.416:745): avc: denied { accept } for pid=8040 comm="syz.5.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.243098][ T8041] tipc: Can't bind to reserved service type 2 [ 102.306951][ T42] audit: type=1400 audit(1785445937.476:746): avc: denied { connect } for pid=8046 comm="syz.5.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.324062][ T8006] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.328677][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.335226][ T8006] bridge_slave_0: entered allmulticast mode [ 102.342429][ T8006] bridge_slave_0: entered promiscuous mode [ 102.345911][ T8006] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.348985][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.351420][ T8006] bridge_slave_1: entered allmulticast mode [ 102.354545][ T8006] bridge_slave_1: entered promiscuous mode [ 102.401404][ T8006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.406615][ T8006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.423634][ T8006] team0: Port device team_slave_0 added [ 102.426890][ T8006] team0: Port device team_slave_1 added [ 102.445727][ T8006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.447792][ T8061] trusted_key: syz.5.568 sent an empty control message without MSG_MORE. [ 102.448019][ T8006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.467871][ T8006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.473880][ T8006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.476651][ T8006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.487773][ T8006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.517505][ T5449] 8021q: adding VLAN 0 to HW filter on device eth11 [ 102.539816][ T8006] hsr_slave_0: entered promiscuous mode [ 102.542180][ T8006] hsr_slave_1: entered promiscuous mode [ 102.544337][ T8006] debugfs: 'hsr0' already exists in 'hsr' [ 102.546175][ T8006] Cannot create hsr debugfs directory [ 102.698455][ T847] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 102.802850][ T5449] 8021q: adding VLAN 0 to HW filter on device eth12 [ 102.831800][ T8006] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.840969][ T8006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.851551][ T12] hsr_slave_0: left promiscuous mode [ 102.854521][ T12] hsr_slave_1: left promiscuous mode [ 102.857436][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.860566][ T847] usb 9-1: Using ep0 maxpacket: 32 [ 102.863418][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.870970][ T847] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 102.874532][ T847] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 102.878207][ T847] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 102.888447][ T847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.893405][ T847] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 102.897528][ T847] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 102.903618][ T847] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 102.907527][ T847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.922135][ T847] usb 9-1: config 0 descriptor?? [ 102.978194][ T12] team0 (unregistering): Port device team_slave_1 removed [ 102.988579][ T12] team0 (unregistering): Port device team_slave_0 removed [ 103.083937][ T8006] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 103.090776][ T8006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.094802][ T8006] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 103.100350][ T8006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.104281][ T8006] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 103.110407][ T8006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.129128][ T8006] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.131836][ T8006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.132247][ T847] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 103.134246][ T8006] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.139718][ T8006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.146400][ T847] usb 9-1: USB disconnect, device number 4 [ 103.157177][ T847] usblp0: removed [ 103.206481][ T7553] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.214705][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.226672][ T8006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.245059][ T8006] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.252538][ T7553] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.254820][ T7553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.271776][ T7549] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.274127][ T7549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.343437][ T5449] 8021q: adding VLAN 0 to HW filter on device eth13 [ 103.479616][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.573'. [ 103.527608][ T8105] netlink: 16 bytes leftover after parsing attributes in process `syz.5.574'. [ 103.600627][ T5755] Bluetooth: hci1: command tx timeout [ 103.608504][ T5851] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 103.620710][ T8006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.739042][ T5851] usb 9-1: device descriptor read/64, error -71 [ 103.797366][ T8006] veth0_vlan: entered promiscuous mode [ 103.808273][ T8006] veth1_vlan: entered promiscuous mode [ 103.832055][ T8006] veth0_macvtap: entered promiscuous mode [ 103.838946][ T8006] veth1_macvtap: entered promiscuous mode [ 103.851378][ T8006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.861262][ T8006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.871637][ T5791] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.875258][ T5791] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.880445][ T5791] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.883990][ T5791] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.956550][ T7550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.960563][ T7550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.978529][ T5851] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 103.983240][ T7549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.986408][ T7549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.100064][ T8130] openvswitch: netlink: IP tunnel TTL not specified. [ 104.108562][ T5851] usb 9-1: device descriptor read/64, error -71 [ 104.218915][ T5851] usb usb9-port1: attempt power cycle [ 104.259453][ T8133] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 104.559314][ T5851] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 104.579122][ T5851] usb 9-1: device descriptor read/8, error -71 [ 104.818446][ T5851] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 104.839447][ T5851] usb 9-1: device descriptor read/8, error -71 [ 104.948889][ T5851] usb usb9-port1: unable to enumerate USB device [ 104.982822][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 104.982841][ T42] audit: type=1400 audit(1785445940.156:764): avc: denied { append } for pid=8142 comm="syz.5.582" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 105.678760][ T5755] Bluetooth: hci1: command tx timeout [ 105.696846][ T8154] bond0: entered promiscuous mode [ 105.700057][ T8154] bond_slave_0: entered promiscuous mode [ 105.702120][ T8154] bond_slave_1: entered promiscuous mode [ 105.706022][ T8154] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 105.712070][ T8154] batadv0: entered promiscuous mode [ 105.715100][ T8154] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 105.718938][ T8154] bond0: left promiscuous mode [ 105.720530][ T8154] bond_slave_0: left promiscuous mode [ 105.722478][ T8154] bond_slave_1: left promiscuous mode [ 105.724296][ T8154] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 105.729573][ T8154] batadv0: left promiscuous mode [ 105.745293][ T8155] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 105.748128][ T8155] SELinux: failed to load policy [ 107.148741][ T8137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.190876][ T42] audit: type=1400 audit(1785445942.366:765): avc: denied { listen } for pid=8158 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.252096][ T8164] e1000e 0000:00:02.0 eth1: removed PHC [ 107.376888][ T8164] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 107.445304][ T8168] veth0_to_bond: entered allmulticast mode [ 107.493521][ T5891] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 107.511385][ T42] audit: type=1400 audit(1785445942.686:766): avc: denied { write } for pid=8171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.562010][ T42] audit: type=1400 audit(1785445942.736:767): avc: denied { write } for pid=8176 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.590699][ T8169] usb_phy_generic usb_phy_generic.0.auto: dummy supplies not allowed for exclusive requests (id=vbus) [ 107.602904][ T8169] dwc2 dwc2.2.auto: supply vusb_d not found, using dummy regulator [ 107.612671][ T8169] dwc2 dwc2.2.auto: supply vusb_a not found, using dummy regulator [ 107.616428][ T8169] dwc2 dwc2.2.auto: Configuration mismatch. dr_mode forced to host [ 107.619044][ T8169] dwc2 dwc2.2.auto: Bad value for GSNPSID: 0x52540012 [ 107.655569][ T42] audit: type=1400 audit(1785445942.826:768): avc: denied { write } for pid=8179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.660729][ T5891] usb 11-1: Using ep0 maxpacket: 8 [ 107.670167][ T5891] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 107.673458][ T5891] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.677257][ T5891] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.684127][ T5891] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.688297][ T5891] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.693879][ T5891] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.697490][ T5891] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.699127][ T42] audit: type=1400 audit(1785445942.876:769): avc: denied { write } for pid=8182 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.758720][ T5755] Bluetooth: hci1: command tx timeout [ 107.763940][ T42] audit: type=1400 audit(1785445942.936:770): avc: denied { write } for pid=8185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.820570][ T42] audit: type=1400 audit(1785445942.996:771): avc: denied { write } for pid=8191 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.833862][ T42] audit: type=1804 audit(1785445943.006:772): pid=8193 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.593" name="/newroot/80/file0" dev="tmpfs" ino=456 res=1 errno=0 [ 107.841187][ T42] audit: type=1800 audit(1785445943.006:773): pid=8193 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.593" name="file0" dev="tmpfs" ino=456 res=0 errno=0 [ 108.175533][ T8215] netlink: 32 bytes leftover after parsing attributes in process `syz.4.596'. [ 108.196203][ T8215] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 108.205746][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 108.475918][ T8237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.480702][ T8237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.544591][ T8245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=8245 comm=syz.5.601 [ 108.896671][ T8266] xt_hashlimit: size too large, truncated to 1048576 [ 108.904879][ T8268] usbtmc 11-1:16.0: simple usb_control_msg returned 0 [ 109.271629][ T8281] erspan1: entered promiscuous mode [ 109.306864][ T8283] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 109.313437][ T8283] PKCS7: Only support pkcs7_signedData type [ 109.478302][ T8288] binder: BINDER_SET_CONTEXT_MGR already set [ 109.482504][ T8288] binder: 8287:8288 ioctl 4018620d 2000000002c0 returned -16 [ 109.635559][ T8298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.660022][ T5849] hid-generic 0362:07FF:7FFFFFFF.0005: item fetching failed at offset 0/1 [ 109.666655][ T5849] hid-generic 0362:07FF:7FFFFFFF.0005: probe with driver hid-generic failed with error -22 [ 109.838454][ T5755] Bluetooth: hci1: command tx timeout [ 110.136728][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.5.618'. [ 110.203555][ T8322] bond1 (unregistering): Released all slaves [ 110.257476][ T7228] usb 11-1: USB disconnect, device number 2 [ 110.316151][ T8329] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 110.368975][ T1136] ata1.00: exception Emask 0x0 SAct 0x80 SErr 0x0 action 0x6 [ 110.371379][ T1136] ata1.00: waking up from sleep [ 110.373281][ T1136] ata1: hard resetting link [ 110.407574][ T8337] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 110.639764][ T8342] netlink: 16162 bytes leftover after parsing attributes in process `syz.6.624'. [ 110.643381][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 110.643392][ T42] audit: type=1400 audit(1785445945.816:797): avc: denied { accept } for pid=8341 comm="syz.6.624" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.689916][ T1136] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 110.699364][ T1136] ata1.00: configured for UDMA/100 [ 110.702450][ T1136] ata1: EH complete qemu-system-x86_64: vtd_iova_to_slpte: detected slpte permission error (iova=0xfefad000, level=0x1, slpte=0x4ea70001, write=1, pasid=0xffffffff) qemu-system-x86_64: vtd_iommu_translate: detected translation failure (dev=00:1f:02, iova=0xfefad000) qemu-system-x86_64: New fault is not recorded due to compression of faults [ 110.708145][ C2] DMAR: DRHD: handling fault status reg 2 [ 110.711481][ C2] DMAR: [DMA Write NO_PASID] Request device [0000:00:1f.2] fault addr 0xfefad000 [fault reason 0x05] PTE Write access is not set [ 110.779092][ T42] audit: type=1400 audit(1785445945.946:798): avc: denied { append } for pid=8346 comm="syz.5.627" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 110.835602][ T8347] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.838803][ T8347] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.841220][ T8347] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.847209][ T8347] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.886051][ T8347] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 110.889357][ T8347] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 110.893417][ T8347] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 110.902632][ T8347] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.906041][ T8347] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.912655][ T8347] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.933408][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.627'. [ 111.014356][ T8360] netlink: 7 bytes leftover after parsing attributes in process `syz.5.631'. [ 111.105387][ T8366] openvswitch: netlink: IP tunnel dst address not specified [ 111.111994][ T5755] Bluetooth: hci4: unexpected event for opcode 0x200c [ 111.193171][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.636'. [ 111.197142][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.636'. [ 111.438240][ T42] audit: type=1400 audit(1785445946.606:799): avc: denied { read write } for pid=8388 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 111.447712][ T42] audit: type=1400 audit(1785445946.606:800): avc: denied { open } for pid=8388 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 111.453433][ T5742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.464852][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.468697][ T5742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.473615][ T5742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.477022][ T5742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.591395][ T8403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8403 comm=syz.5.643 [ 111.658812][ T42] audit: type=1400 audit(1785445946.826:801): avc: denied { setattr } for pid=8407 comm="syz.5.644" name="" dev="pipefs" ino=26095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 111.671043][ T8408] clocksource: Switched to clocksource acpi_pm [ 111.684220][ T8408] clocksource: Switched to clocksource tsc [ 111.718658][ T8410] netlink: 5 bytes leftover after parsing attributes in process `syz.5.645'. [ 111.722615][ T8410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.792774][ T8412] bond1: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 111.904650][ T8421] fuse: fd is not a fuse device [ 111.911691][ T7553] Bluetooth: hci5: Frame reassembly failed (-84) [ 112.119932][ T8388] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.123103][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.126204][ T8388] bridge_slave_0: entered allmulticast mode [ 112.131059][ T8388] bridge_slave_0: entered promiscuous mode [ 112.136812][ T8388] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.139969][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.143020][ T8388] bridge_slave_1: entered allmulticast mode [ 112.147156][ T8388] bridge_slave_1: entered promiscuous mode [ 112.176623][ T8388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.183169][ T8388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.202914][ T8388] team0: Port device team_slave_0 added [ 112.206221][ T8388] team0: Port device team_slave_1 added [ 112.221225][ T8388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.223495][ T8388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.231582][ T8388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.236046][ T8388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.238467][ T8388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.246470][ T8388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.272647][ T8388] hsr_slave_0: entered promiscuous mode [ 112.274881][ T8388] hsr_slave_1: entered promiscuous mode [ 112.277128][ T8388] debugfs: 'hsr0' already exists in 'hsr' [ 112.279368][ T8388] Cannot create hsr debugfs directory [ 112.417828][ T8388] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 112.427491][ T8388] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.431578][ T8388] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 112.437070][ T8388] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.443490][ T8388] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 112.449315][ T8388] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.453011][ T8388] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 112.458467][ T8388] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.531721][ T8388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.547062][ T8388] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.553337][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.556269][ T7538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.567193][ T7538] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.570135][ T7538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.799004][ T8425] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.801849][ T8425] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.805666][ T8425] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 112.809715][ T8425] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.821951][ T8388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.822401][ T8425] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.827055][ T8425] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.834381][ T8425] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.896955][ T8454] netlink: 'syz.5.651': attribute type 10 has an invalid length. [ 112.920269][ T8454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.920433][ T8456] netlink: 'syz.5.651': attribute type 338 has an invalid length. [ 113.016279][ T8388] veth0_vlan: entered promiscuous mode [ 113.027591][ T8388] veth1_vlan: entered promiscuous mode [ 113.053715][ T8388] veth0_macvtap: entered promiscuous mode [ 113.059594][ T8388] veth1_macvtap: entered promiscuous mode [ 113.070927][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.079716][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.090420][ T5842] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.095872][ T5842] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.099608][ T5842] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.105664][ T5842] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.182288][ T7551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.185809][ T7551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.213459][ T7556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.216895][ T7556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.538493][ T7228] usb 12-1: new low-speed USB device number 2 using dummy_hcd [ 113.596759][ T8473] openvswitch: netlink: Flow actions attr not present in new flow. [ 113.635300][ T42] audit: type=1400 audit(1785445948.807:802): avc: denied { name_bind } for pid=8477 comm="syz.5.656" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 113.689615][ T8479] netlink: 36 bytes leftover after parsing attributes in process `syz.5.656'. [ 113.690147][ T7228] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 113.693639][ T8479] netlink: 16 bytes leftover after parsing attributes in process `syz.5.656'. [ 113.696029][ T7228] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 113.700708][ T8479] netlink: 36 bytes leftover after parsing attributes in process `syz.5.656'. [ 113.703345][ T7228] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.703361][ T7228] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 113.714918][ T7228] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 113.721454][ T7228] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 113.723936][ T7228] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 113.727313][ T7228] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.731157][ T7228] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 113.734930][ T7228] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 113.740197][ T7228] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 113.743084][ T7228] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 113.746837][ T7228] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.750604][ T7228] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 113.754077][ T7228] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 113.760254][ T7228] usb 12-1: string descriptor 0 read error: -22 [ 113.762316][ T7228] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 113.765185][ T7228] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.772686][ T8480] gfs2: error -5 reading superblock [ 113.778503][ T7228] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 113.903063][ T42] audit: type=1400 audit(1785445949.077:803): avc: denied { write } for pid=8481 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.918573][ T5755] Bluetooth: hci5: command 0x1003 tx timeout [ 113.918929][ T5742] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 113.951796][ T42] audit: type=1400 audit(1785445949.127:804): avc: denied { write } for pid=8484 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.043431][ T8489] 9pnet: Found fid 0 not clunked [ 114.053926][ T42] audit: type=1400 audit(1785445949.227:805): avc: denied { write } for pid=8487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.117658][ T42] audit: type=1400 audit(1785445949.287:806): avc: denied { write } for pid=8495 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.159047][ T5742] Bluetooth: hci3: command 0x0419 tx timeout [ 114.204426][ T8462] cgroup: release_agent respecified [ 114.543739][ T8507] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30483 sclass=netlink_tcpdiag_socket pid=8507 comm=syz.5.661 [ 114.543833][ T8508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30483 sclass=netlink_route_socket pid=8508 comm=syz.5.661 [ 114.565917][ T8511] netlink: 156 bytes leftover after parsing attributes in process `syz.6.662'. [ 114.878479][ T5755] Bluetooth: hci0: command 0x080f tx timeout [ 114.878569][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.878590][ T5756] Bluetooth: hci4: command 0x0c1a tx timeout [ 114.882124][ T5742] Bluetooth: hci2: command 0x041b tx timeout [ 115.032343][ T8544] 8021q: VLANs not supported on ip6tnl0 [ 115.258458][ T5851] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 115.420032][ T5851] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.431140][ T5851] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 115.440553][ T5851] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 115.448734][ T5851] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.456396][ T5851] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.466093][ T5851] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.473749][ T5851] usb 11-1: config 0 descriptor?? [ 115.484455][ T8538] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 115.527954][ T5742] Bluetooth: hci4: unexpected event for opcode 0x2035 [ 115.717094][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 115.717109][ T42] audit: type=1400 audit(1785445950.887:826): avc: denied { write } for pid=8582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.776916][ T42] audit: type=1400 audit(1785445950.947:827): avc: denied { write } for pid=8585 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.099475][ T5851] usbhid 11-1:0.0: can't add hid device: -71 [ 116.101459][ T5851] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 116.118598][ T1498] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 116.121194][ T5851] usb 11-1: USB disconnect, device number 3 [ 116.239202][ T5849] usb 12-1: USB disconnect, device number 2 [ 116.280961][ T1498] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.286016][ T1498] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 116.292207][ T1498] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 116.296392][ T1498] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.302384][ T1498] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.306892][ T1498] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.324204][ T1498] usb 10-1: config 0 descriptor?? [ 116.332430][ T8589] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 116.483562][ T42] audit: type=1400 audit(1785445951.657:828): avc: denied { write } for pid=8592 comm="syz.7.673" name="functions" dev="configfs" ino=10540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.691172][ T42] audit: type=1400 audit(1785445951.867:829): avc: denied { write } for pid=8592 comm="syz.7.673" name="c.1" dev="configfs" ino=8846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.698341][ T42] audit: type=1400 audit(1785445951.867:830): avc: denied { write } for pid=8592 comm="syz.7.673" name="c.1" dev="configfs" ino=8846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.764923][ T55] libceph: mon0 (1)[c::]:6789 socket error on write [ 116.771250][ T55] libceph: mon0 (1)[c::]:6789 socket error on write [ 116.948451][ T1498] usbhid 10-1:0.0: can't add hid device: -71 [ 116.950490][ T1498] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 116.959334][ T5742] Bluetooth: hci2: command 0x041b tx timeout [ 116.959389][ T5746] Bluetooth: hci0: command 0x080f tx timeout [ 116.961993][ T5755] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.971217][ T1498] usb 10-1: USB disconnect, device number 4 [ 117.043117][ T55] libceph: mon0 (1)[c::]:6789 socket error on write [ 117.563384][ T55] libceph: mon0 (1)[c::]:6789 socket error on write [ 117.581835][ T8596] ceph: No mds server is up or the cluster is laggy [ 117.775994][ T42] audit: type=1400 audit(1785445952.947:831): avc: denied { create } for pid=8621 comm="syz.6.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.782052][ T42] audit: type=1400 audit(1785445952.957:832): avc: denied { setopt } for pid=8621 comm="syz.6.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.836184][ T8629] netlink: 16 bytes leftover after parsing attributes in process `syz.6.682'. [ 117.853257][ T8629] bond0: entered promiscuous mode [ 117.855153][ T8629] bond_slave_0: entered promiscuous mode [ 117.857622][ T8629] bond_slave_1: entered promiscuous mode [ 117.863005][ T8629] gretap0: entered promiscuous mode [ 117.869139][ T8629] hsr1: entered promiscuous mode [ 118.002685][ T42] audit: type=1400 audit(1785445953.177:833): avc: denied { write } for pid=8637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.061219][ T42] audit: type=1400 audit(1785445953.237:834): avc: denied { write } for pid=8642 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.077108][ T42] audit: type=1400 audit(1785445953.247:835): avc: denied { setopt } for pid=8643 comm="syz.7.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 118.239326][ T1047] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 118.377308][ T8664] openvswitch: netlink: Port -2146435068 exceeds max allowable 65535 [ 118.420136][ T1047] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 118.427026][ T1047] usb 11-1: config 0 interface 0 has no altsetting 0 [ 118.433626][ T1047] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 118.436937][ T1047] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 118.442733][ T1047] usb 11-1: Product: syz [ 118.444195][ T1047] usb 11-1: Manufacturer: syz [ 118.445674][ T1047] usb 11-1: SerialNumber: syz [ 118.449736][ T8667] af_packet: tpacket_rcv: packet too big, clamped from 104 to 4294967272. macoff=96 [ 118.461017][ T1047] usb 11-1: config 0 descriptor?? [ 118.469518][ T8667] macvlan2: entered promiscuous mode [ 118.473771][ T1047] usb 11-1: selecting invalid altsetting 0 [ 118.660833][ T8687] Cannot find add_set index 0 as target [ 118.684665][ T8689] comedi comedi2: adq12b: I/O base address or length out of range [ 118.687383][ T8640] netdevsim netdevsim6: Direct firmware load for . [ 118.687383][ T8640] failed with error -2 [ 118.694176][ T1047] usb 11-1: USB disconnect, device number 4 [ 118.705208][ T8640] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 118.705208][ T8640] [ 118.849596][ T8696] efs: device does not support 512 byte blocks [ 118.852213][ T8696] device does not support 512 byte blocks [ 118.852213][ T8696] [ 119.038589][ T5755] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.038811][ T5742] Bluetooth: hci0: command 0x080f tx timeout [ 119.038846][ T5746] Bluetooth: hci2: command 0x041b tx timeout [ 119.148574][ T5849] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 119.308499][ T5849] usb 10-1: Using ep0 maxpacket: 8 [ 119.311701][ T5849] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 119.317338][ T5849] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.320849][ T5849] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.323988][ T5849] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.327271][ T5849] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.332103][ T5849] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.335149][ T5849] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.547604][ T5849] usb 10-1: usb_control_msg returned -32 [ 119.550390][ T5849] usbtmc 10-1:16.0: can't read capabilities [ 119.768647][ T7228] usb 12-1: new full-speed USB device number 3 using dummy_hcd [ 119.900789][ T8714] usbtmc 10-1:16.0: INITIATE_CLEAR returned 0 [ 119.930780][ T7228] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.935148][ T7228] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 119.939032][ T7228] usb 12-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 119.942778][ T7228] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.953716][ T7228] usb 12-1: config 0 descriptor?? [ 119.962824][ T7228] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 119.967711][ T7228] dvb-usb: bulk message failed: -22 (3/0) [ 119.979215][ T7228] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 119.983507][ T7228] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 119.986482][ T7228] usb 12-1: media controller created [ 119.990283][ T7228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.005627][ T7228] dvb-usb: bulk message failed: -22 (6/0) [ 120.012260][ T7228] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 120.016201][ T7228] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb12/12-1/input/input14 [ 120.033735][ T7228] dvb-usb: schedule remote query interval to 150 msecs. [ 120.036051][ T7228] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 120.102481][ T5891] usb 10-1: USB disconnect, device number 5 [ 120.165152][ T8713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.169618][ T8713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.191478][ T7228] dvb-usb: bulk message failed: -22 (1/0) [ 120.194351][ T7228] dvb-usb: error while querying for an remote control event. [ 120.348538][ T7228] dvb-usb: bulk message failed: -22 (1/0) [ 120.351985][ T7228] dvb-usb: error while querying for an remote control event. [ 120.508537][ T7228] dvb-usb: bulk message failed: -22 (1/0) [ 120.510367][ T7228] dvb-usb: error while querying for an remote control event. [ 120.681342][ T5855] dvb-usb: bulk message failed: -22 (1/0) [ 120.689949][ T5855] dvb-usb: error while querying for an remote control event. [ 120.695244][ T7228] usb 12-1: USB disconnect, device number 3 [ 120.755540][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 120.755558][ T42] audit: type=1400 audit(1785446211.927:847): avc: denied { write } for pid=8720 comm="syz.7.706" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 120.770262][ T7228] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 121.087087][ T8726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8726 comm=syz.7.707 [ 121.091937][ T42] audit: type=1400 audit(1785446212.267:848): avc: denied { mounton } for pid=8733 comm="syz.6.708" path="/30/file0/file1" dev="9p" ino=78395465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.119109][ T5742] Bluetooth: hci2: command 0x041b tx timeout [ 121.126981][ T42] audit: type=1400 audit(1785446212.297:849): avc: denied { name_bind } for pid=8735 comm="syz.5.709" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 121.338511][ T847] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 121.357668][ T8745] netlink: 11148 bytes leftover after parsing attributes in process `syz.7.712'. [ 121.490055][ T847] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 121.493300][ T847] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 121.510767][ T847] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 121.518106][ T847] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 121.530644][ T847] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 121.536193][ T847] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 121.541911][ T847] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 121.546961][ T847] usb 11-1: Product: syz [ 121.550913][ T847] usb 11-1: Manufacturer: syz [ 121.573931][ T847] cdc_wdm 11-1:1.0: skipping garbage [ 121.580700][ T847] cdc_wdm 11-1:1.0: skipping garbage [ 121.597163][ T847] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 121.608443][ T847] cdc_wdm 11-1:1.0: Unknown control protocol [ 121.763510][ T8763] netlink: 60 bytes leftover after parsing attributes in process `syz.5.719'. [ 121.773156][ T8763] netlink: 60 bytes leftover after parsing attributes in process `syz.5.719'. [ 121.777560][ T8763] netlink: 'syz.5.719': attribute type 32 has an invalid length. [ 121.880102][ T42] audit: type=1400 audit(1785446213.047:850): avc: denied { accept } for pid=8747 comm="syz.7.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.888555][ T8766] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 121.890447][ T8766] PKCS7: Only support pkcs7_signedData type [ 121.898558][ T42] audit: type=1400 audit(1785446213.057:851): avc: denied { write } for pid=8747 comm="syz.7.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.905154][ T42] audit: type=1400 audit(1785446213.067:852): avc: denied { read } for pid=8747 comm="syz.7.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.918436][ T42] audit: type=1400 audit(1785446213.087:853): avc: denied { name_connect } for pid=8747 comm="syz.7.713" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 122.064800][ T42] audit: type=1400 audit(1785446213.237:854): avc: denied { getopt } for pid=8776 comm="syz.5.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.329075][ T8780] syzkaller0: entered promiscuous mode [ 122.330920][ T8780] syzkaller0: entered allmulticast mode [ 122.337002][ T42] audit: type=1400 audit(1785446213.507:855): avc: denied { write } for pid=8733 comm="syz.6.708" name="/" dev="9p" ino=78395343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.345267][ T42] audit: type=1400 audit(1785446213.517:856): avc: denied { remove_name } for pid=8733 comm="syz.6.708" name="file0" dev="9p" ino=78395345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.078461][ T5826] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 123.228521][ T847] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 123.239773][ T5826] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.243539][ T5826] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 123.247249][ T5826] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 123.250541][ T5826] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.255118][ T5826] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.259076][ T5826] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.263534][ T5826] usb 12-1: config 0 descriptor?? [ 123.398465][ T847] usb 10-1: Using ep0 maxpacket: 32 [ 123.401865][ T847] usb 10-1: config index 0 descriptor too short (expected 15270, got 18) [ 123.406357][ T847] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 123.409773][ T847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.412523][ T847] usb 10-1: Product: syz [ 123.414133][ T847] usb 10-1: Manufacturer: syz [ 123.415730][ T847] usb 10-1: SerialNumber: syz [ 123.422372][ T847] usb 10-1: config 0 descriptor?? [ 123.433273][ T847] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 123.435818][ T847] dvb-usb: bulk message failed: -22 (4/0) [ 123.437756][ T847] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 123.443704][ T847] dvb-usb: bulk message failed: -22 (5/0) [ 123.445629][ T847] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 123.452037][ T847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.456182][ T847] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 123.458949][ T847] usb 10-1: media controller created [ 123.468452][ T8789] netlink: 16 bytes leftover after parsing attributes in process `syz.7.724'. [ 123.468994][ T847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.486074][ T5826] usbhid 12-1:0.0: can't add hid device: -71 [ 123.488255][ T5826] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 123.492686][ T847] usb 10-1: selecting invalid altsetting 3 [ 123.495619][ T5826] usb 12-1: USB disconnect, device number 4 [ 123.497949][ T847] ttusb2: set interface to alts=3 failed [ 123.517788][ T847] DVB: Unable to find symbol tda10086_attach() [ 123.521211][ T847] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 123.524550][ T847] dvb-usb: bulk message failed: -22 (4/0) [ 123.526397][ T847] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 123.530250][ T847] dvb-usb: bulk message failed: -22 (5/0) [ 123.534115][ T847] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 123.537572][ T847] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 123.621897][ T8800] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 123.621946][ T5755] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.635161][ T8788] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 123.635267][ T5755] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.650707][ T5755] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.652156][ T8788] dvb-usb: bulk message failed: -22 (7/0) [ 123.654316][ T5755] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.659463][ T5755] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.669585][ T8788] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 123.677318][ T8788] ttusb2: i2c transfer failed. [ 123.691523][ T5851] usb 10-1: USB disconnect, device number 6 [ 123.740642][ T5851] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 123.880088][ T8815] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 123.958191][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.998794][ T8820] Cannot find del_set index 14804 as target [ 124.069782][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.080013][ T5826] usb 11-1: USB disconnect, device number 5 [ 124.182882][ T12] bond0: (slave netdevsim1): Releasing backup interface [ 124.189565][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.263514][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.264601][ T8827] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 124.340949][ T8798] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.343227][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.345443][ T8798] bridge_slave_0: entered allmulticast mode [ 124.347967][ T8798] bridge_slave_0: entered promiscuous mode [ 124.351324][ T8798] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.353630][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.355859][ T8798] bridge_slave_1: entered allmulticast mode [ 124.358877][ T8798] bridge_slave_1: entered promiscuous mode [ 124.375340][ T8798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.380410][ T8798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.402969][ T8798] team0: Port device team_slave_0 added [ 124.406893][ T8798] team0: Port device team_slave_1 added [ 124.431494][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.433683][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.441409][ T8798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.446276][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.452821][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.462414][ T8798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.475314][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.7.738'. [ 124.550490][ T8851] kvm: user requested TSC rate below hardware speed [ 124.552831][ T8851] kvm: vcpu 0: requested 5792 ns lapic timer period limited to 200000 ns [ 124.557796][ T8851] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3538623789 (113235961248 ns) > initial count (200000 ns). Using initial count to start timer. [ 124.583541][ T8798] hsr_slave_0: entered promiscuous mode [ 124.586102][ T8798] hsr_slave_1: entered promiscuous mode [ 124.588315][ T8798] debugfs: 'hsr0' already exists in 'hsr' [ 124.590780][ T8798] Cannot create hsr debugfs directory [ 124.621306][ T12] bridge_slave_1: left allmulticast mode [ 124.623190][ T12] bridge_slave_1: left promiscuous mode [ 124.625129][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.638335][ T12] bridge_slave_0: left allmulticast mode [ 124.640828][ T12] bridge_slave_0: left promiscuous mode [ 124.645750][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.698688][ T5827] SELinux: failure in sel_netif_sid_slow(), invalid network interface (74) [ 124.710724][ T5827] SELinux: failure in sel_netif_sid_slow(), invalid network interface (73) [ 124.745659][ T8867] file system registered [ 124.770074][ T8006] ffs_data_put(): freeing [ 124.838961][ T12] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 124.841515][ T12] bond1 (unregistering): (slave bridge1): the permanent HWaddr of slave - ea:9c:79:57:e9:ab - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 124.847445][ T12] bond1 (unregistering): (slave bridge2): making interface the new active one [ 124.850665][ T12] bond1 (unregistering): (slave bridge2): Error 16 setting MAC of new active slave [ 124.857774][ T12] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 124.865517][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.870249][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.880310][ T12] bond0 (unregistering): Released all slaves [ 124.885109][ T12] bond1 (unregistering): Released all slaves [ 124.892169][ T12] bond2 (unregistering): Released all slaves [ 124.916816][ T5449] 8021q: adding VLAN 0 to HW filter on device eth1 [ 125.122540][ T8798] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 125.126666][ T8798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.129568][ T8798] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 125.133307][ T8798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.135911][ T8798] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 125.140034][ T8798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.145690][ T8798] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 125.150297][ T8798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.207480][ T5449] 8021q: adding VLAN 0 to HW filter on device eth14 [ 125.263134][ T8899] pimreg8: entered allmulticast mode [ 125.274504][ T8798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.286170][ T8798] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.294245][ T7553] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.296340][ T7553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.296526][ T8903] vivid-001: disconnect [ 125.305944][ T8902] vivid-001: reconnect [ 125.320355][ T7553] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.323124][ T7553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.444402][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.749'. [ 125.452804][ T12] hsr_slave_0: left promiscuous mode [ 125.459764][ T12] hsr_slave_1: left promiscuous mode [ 125.462857][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.465541][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.468822][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.471264][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.489593][ T12] veth1_macvtap: left promiscuous mode [ 125.491799][ T12] veth0_macvtap: left promiscuous mode [ 125.493884][ T12] veth1_vlan: left promiscuous mode [ 125.495866][ T12] veth0_vlan: left promiscuous mode [ 125.629854][ T8930] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 125.639750][ T12] team0 (unregistering): Port device team_slave_1 removed [ 125.651806][ T12] team0 (unregistering): Port device team_slave_0 removed [ 125.658426][ T8932] netlink: 40 bytes leftover after parsing attributes in process `syz.7.752'. [ 125.715719][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.7.752'. [ 125.731095][ T5449] 8021q: adding VLAN 0 to HW filter on device eth15 [ 125.733972][ T8909] hsr_slave_0: left promiscuous mode [ 125.736345][ T8909] hsr_slave_1: left promiscuous mode [ 125.760270][ T5742] Bluetooth: hci5: command tx timeout [ 125.787431][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 125.787443][ T42] audit: type=1400 audit(1785446216.957:870): avc: denied { setopt } for pid=8936 comm="syz.5.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 125.801628][ T8937] netlink: 28 bytes leftover after parsing attributes in process `syz.5.754'. [ 125.861966][ T42] audit: type=1400 audit(1785446217.027:871): avc: denied { write } for pid=8946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.925776][ T42] audit: type=1400 audit(1785446217.097:872): avc: denied { write } for pid=8953 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.992377][ T5449] 8021q: adding VLAN 0 to HW filter on device eth16 [ 126.045526][ T8798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.118484][ T5826] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 126.268462][ T5826] usb 12-1: Using ep0 maxpacket: 16 [ 126.272483][ T8798] veth0_vlan: entered promiscuous mode [ 126.274209][ T5826] usb 12-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 126.277489][ T8798] veth1_vlan: entered promiscuous mode [ 126.280077][ T5826] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.284787][ T5826] usb 12-1: Product: syz [ 126.286088][ T5826] usb 12-1: Manufacturer: syz [ 126.289807][ T5826] usb 12-1: SerialNumber: syz [ 126.336518][ T8798] veth0_macvtap: entered promiscuous mode [ 126.379625][ T8798] veth1_macvtap: entered promiscuous mode [ 126.393314][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.408769][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.422114][ T5819] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.424851][ T5819] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.432598][ T5819] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.435352][ T5819] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.527322][ T5826] usb 12-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 126.538252][ T5826] usb 12-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 126.541782][ T5826] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 126.544396][ T5826] usb 12-1: media controller created [ 126.557724][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.647422][ T7556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.650275][ T7556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.715709][ T7551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.718860][ T7551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.792629][ T8985] fuse: fd is not a fuse device [ 126.803493][ T5826] zl10353_read_register: readreg error (reg=127, ret==-110) [ 126.826553][ T5826] dvb_usb_gl861 12-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 126.835231][ T5826] usb 12-1: USB disconnect, device number 5 [ 127.076424][ T42] audit: type=1400 audit(1785446218.247:873): avc: denied { mounton } for pid=9007 comm="syz.8.763" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 127.076459][ T9008] fuse: fd is not a fuse device [ 127.078613][ T9009] fuse: fd is not a fuse device [ 127.176723][ T9022] netlink: 'syz.8.767': attribute type 1 has an invalid length. [ 127.187270][ T9025] netlink: 'syz.5.768': attribute type 9 has an invalid length. [ 127.196888][ T9024] netlink: 'syz.5.768': attribute type 9 has an invalid length. [ 127.232602][ T42] audit: type=1400 audit(1785446218.407:874): avc: denied { append } for pid=9029 comm="syz.5.770" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.243429][ T9030] netlink: 'syz.5.770': attribute type 1 has an invalid length. [ 127.270595][ T9030] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.281128][ T9030] veth0_to_bond: left allmulticast mode [ 127.287007][ T9030] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 127.295266][ T42] audit: type=1400 audit(1785446218.467:875): avc: denied { read } for pid=9029 comm="syz.5.770" name="file0" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 127.305534][ T42] audit: type=1400 audit(1785446218.467:876): avc: denied { open } for pid=9029 comm="syz.5.770" path="/151/file0" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 127.314801][ T42] audit: type=1400 audit(1785446218.477:877): avc: denied { ioctl } for pid=9029 comm="syz.5.770" path="/151/file0" dev="tmpfs" ino=843 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 127.350403][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.7.772'. [ 127.398608][ T9043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9043 comm=syz.5.773 [ 127.509151][ T9065] netlink: 28 bytes leftover after parsing attributes in process `syz.8.779'. [ 127.512104][ T9065] bond_slave_0: entered promiscuous mode [ 127.514320][ T9065] bond_slave_0: entered allmulticast mode [ 127.560826][ T9070] syz.5.781: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 127.569369][ T9070] CPU: 3 UID: 0 PID: 9070 Comm: syz.5.781 Not tainted syzkaller #0 PREEMPT(full) [ 127.569388][ T9070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.569397][ T9070] Call Trace: [ 127.569414][ T9070] [ 127.569419][ T9070] dump_stack_lvl+0x100/0x190 [ 127.569452][ T9070] warn_alloc.cold+0x94/0xa8 [ 127.569467][ T9070] ? __pfx_warn_alloc+0x10/0x10 [ 127.569484][ T9070] ? lockdep_unlock+0x5a/0xc0 [ 127.569497][ T9070] ? __lock_acquire+0xd5b/0x1a40 [ 127.569515][ T9070] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 127.569535][ T9070] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 127.569550][ T9070] __vmalloc_node_range_noprof+0x136c/0x1630 [ 127.569573][ T9070] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 127.569590][ T9070] ? trace_contention_end+0x126/0x160 [ 127.569607][ T9070] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 127.569630][ T9070] ? dvb_demux_do_ioctl+0x929/0x1200 [ 127.569648][ T9070] ? find_held_lock+0x2b/0x80 [ 127.569666][ T9070] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 127.569683][ T9070] ? __pfx___mutex_lock+0x10/0x10 [ 127.569701][ T9070] ? tomoyo_path_number_perm+0x188/0x580 [ 127.569723][ T9070] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 127.569741][ T9070] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 127.569760][ T9070] __vmalloc_node_noprof+0xad/0xf0 [ 127.569778][ T9070] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 127.569798][ T9070] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 127.569817][ T9070] dvb_demux_do_ioctl+0x9e0/0x1200 [ 127.569839][ T9070] ? do_vfs_ioctl+0x226/0x13e0 [ 127.569859][ T9070] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 127.569874][ T9070] dvb_usercopy+0x167/0x340 [ 127.569890][ T9070] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 127.569907][ T9070] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 127.569924][ T9070] ? __pfx_dvb_usercopy+0x10/0x10 [ 127.569944][ T9070] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 127.569959][ T9070] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 127.569974][ T9070] ? selinux_file_ioctl+0x13b/0x290 [ 127.569991][ T9070] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 127.570006][ T9070] ? selinux_file_ioctl+0xb6/0x290 [ 127.570023][ T9070] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 127.570038][ T9070] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 127.570053][ T9070] dvb_demux_ioctl+0x29/0x40 [ 127.570068][ T9070] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 127.570084][ T9070] __x64_sys_ioctl+0x18e/0x210 [ 127.570102][ T9070] do_syscall_64+0x115/0x870 [ 127.570114][ T9070] ? clear_bhb_loop+0x40/0x90 [ 127.570128][ T9070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.570139][ T9070] RIP: 0033:0x7fab8d19df99 [ 127.570151][ T9070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.570161][ T9070] RSP: 002b:00007fab8e071028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.570187][ T9070] RAX: ffffffffffffffda RBX: 00007fab8d425fa0 RCX: 00007fab8d19df99 [ 127.570194][ T9070] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000006 [ 127.570200][ T9070] RBP: 00007fab8d234ec4 R08: 0000000000000000 R09: 0000000000000000 [ 127.570207][ T9070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.570215][ T9070] R13: 00007fab8d426038 R14: 00007fab8d425fa0 R15: 00007fff70df0848 [ 127.570233][ T9070] ? __UNIQUE_ID_modinfo_723+0x638c0057/0xffffffffffec9f0d [ 127.570254][ T9070] [ 127.570259][ T9070] Mem-Info: [ 127.643676][ T42] audit: type=1400 audit(1785446218.817:878): avc: denied { mount } for pid=9077 comm="syz.7.783" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 127.654114][ T9076] netlink: 'syz.8.782': attribute type 178 has an invalid length. [ 127.655684][ T9070] active_anon:29957 inactive_anon:1 isolated_anon:0 [ 127.655684][ T9070] active_file:1358 inactive_file:62954 isolated_file:0 [ 127.655684][ T9070] unevictable:1768 dirty:33 writeback:0 [ 127.655684][ T9070] slab_reclaimable:12932 slab_unreclaimable:76565 [ 127.655684][ T9070] mapped:30330 shmem:18756 pagetables:3971 [ 127.655684][ T9070] sec_pagetables:298 bounce:0 [ 127.655684][ T9070] kernel_misc_reclaimable:0 [ 127.655684][ T9070] free:393459 free_pcp:20386 free_cma:0 [ 127.655762][ T9070] Node 0 active_anon:119788kB inactive_anon:4kB active_file:5432kB inactive_file:251584kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:72168kB dirty:120kB writeback:0kB shmem:71476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16512kB pagetables:7352kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 127.655816][ T9070] Node 1 active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49152kB dirty:12kB writeback:0kB shmem:3548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:8532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 127.655863][ T9070] Node 0 DMA free:10800kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:440kB local_pcp:96kB free_cma:0kB [ 127.655917][ T9070] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 127.655956][ T9070] Node 0 DMA32 free:59344kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:119788kB inactive_anon:4kB active_file:5432kB inactive_file:251584kB unevictable:3536kB writepending:120kB zspages:0kB present:2080628kB managed:1255240kB mlocked:0kB bounce:0kB free_pcp:49132kB local_pcp:9204kB free_cma:0kB [ 127.656009][ T9070] lowmem_reserve[]: 0 0 0 0 0 [ 127.656080][ T9070] Node 1 Normal free:1503692kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:3536kB writepending:12kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:31972kB local_pcp:9580kB free_cma:0kB [ 127.656143][ T9070] lowmem_reserve[]: 0 0 [ 127.658087][ T9076] netlink: 11396 bytes leftover after parsing attributes in process `syz.8.782'. [ 127.790297][ T9070] 0 0 0 [ 127.791271][ T9070] Node 0 DMA: 9*4kB (UM) 7*8kB (M) 11*16kB (UM) 14*32kB (UM) 14*64kB (UM) 8*128kB (UM) 8*256kB (UM) 8*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 10828kB [ 127.796279][ T9070] Node 0 DMA32: 291*4kB (UME) 138*8kB (UM) 91*16kB (UM) 111*32kB (UM) 19*64kB (UME) 22*128kB (UM) 8*256kB (UM) 7*512kB (UME) 18*1024kB (UM) 4*2048kB (UME) 4*4096kB (U) = 59948kB [ 127.801955][ T9070] Node 1 Normal: 229*4kB (UME) 249*8kB (UME) 241*16kB (UME) 225*32kB (UME) 247*64kB (UME) 232*128kB (UM) 223*256kB (UME) 198*512kB (UM) 174*1024kB (UME) 6*2048kB (UME) 268*4096kB (M) = 1506124kB [ 127.808004][ T9070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.811084][ T9070] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 127.813902][ T9070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.818571][ T9070] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.827652][ T9070] 83061 total pagecache pages [ 127.829254][ T9070] 0 pages in swap cache [ 127.838458][ T9070] Free swap = 124996kB [ 127.838774][ T5742] Bluetooth: hci5: command tx timeout [ 127.839881][ T9070] Total swap = 124996kB [ 127.839892][ T9070] 1048443 pages RAM [ 127.839897][ T9070] 0 pages HighMem/MovableOnly [ 127.839901][ T9070] 285322 pages reserved [ 127.839906][ T9070] 0 pages cma reserved [ 127.866777][ T9087] fuse: fd is not a fuse device [ 127.958197][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.789'. [ 127.970130][ T9105] fuse: fd is not a fuse device [ 127.976690][ T9100] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.010086][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.791'. [ 128.075954][ T9116] netlink: 'syz.7.793': attribute type 10 has an invalid length. [ 128.076032][ T9115] netlink: 'syz.7.793': attribute type 10 has an invalid length. [ 128.102806][ T9116] team0: Port device dummy0 added [ 128.220951][ T9125] loop5: detected capacity change from 0 to 7 [ 128.227415][ T9128] loop2: detected capacity change from 0 to 3 [ 128.228753][ T5849] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 128.239117][ T9128] ldm_validate_privheads(): Disk read failed. [ 128.239731][ T9125] loop5: p3 p4 [ 128.241345][ T9128] Dev loop2: unable to read RDB block 3 [ 128.241367][ T9128] loop2: unable to read partition table [ 128.241505][ T9128] loop2: partition table beyond EOD, truncated [ 128.246615][ T9128] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 128.248884][ T9125] loop5: partition table partially beyond EOD, truncated [ 128.257364][ T9128] netlink: 148 bytes leftover after parsing attributes in process `syz.5.797'. [ 128.349411][ T5941] udevd[5941]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 128.353011][ T7641] udevd[7641]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 128.353680][ T9129] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3108460079 (12433840316 ns) > initial count (4732552468 ns). Using initial count to start timer. [ 128.364544][ T9129] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1462839683 (46810869856 ns) > initial count (35198749888 ns). Using initial count to start timer. [ 128.370797][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.7.798'. [ 128.401000][ T5849] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 128.404668][ T5849] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.412993][ T5849] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.416891][ T5849] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 128.422675][ T5849] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 128.425757][ T5849] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 128.429464][ T5849] usb 11-1: Manufacturer: syz [ 128.440162][ T5849] usb 11-1: config 0 descriptor?? [ 128.478017][ T42] audit: type=1400 audit(1785446219.647:879): avc: denied { mount } for pid=9139 comm="syz.5.802" name="/" dev="hugetlbfs" ino=31533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 128.488755][ T9144] overlayfs: maximum fs stacking depth exceeded [ 128.536024][ T9147] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9147 comm=syz.8.803 [ 128.541288][ T9143] netlink: 'syz.8.803': attribute type 1 has an invalid length. [ 128.543784][ T9143] netlink: 'syz.8.803': attribute type 7 has an invalid length. [ 128.546400][ T9143] netlink: 240 bytes leftover after parsing attributes in process `syz.8.803'. [ 128.629156][ T9154] netlink: 100 bytes leftover after parsing attributes in process `syz.8.805'. [ 128.705469][ T9159] fuse: fd is not a fuse device [ 128.816531][ T9164] zonefs (loop7) ERROR: Not a zoned block device [ 128.850927][ T5849] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 128.871174][ T5849] appleir 0003:05AC:8243.0006: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 128.877015][ T9170] overlay: filesystem on ./bus not supported as upperdir [ 128.877139][ T9171] overlay: filesystem on ./bus not supported as upperdir [ 129.037787][ T9185] program syz.8.814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.043377][ T9185] fuse: fd is not a fuse device [ 129.123951][ T9194] netlink: 60 bytes leftover after parsing attributes in process `syz.8.816'. [ 129.149174][ T9197] netlink: 'syz.5.817': attribute type 7 has an invalid length. [ 129.186361][ T9199] xt_hashlimit: size too large, truncated to 1048576 [ 129.749021][ T9236] overlayfs: failed to resolve './file2': -2 [ 129.920143][ T5742] Bluetooth: hci5: command tx timeout [ 130.006829][ T9255] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 130.015335][ T9255] batman_adv: batadv0: Adding interface: gretap1 [ 130.017313][ T9255] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.025894][ T9255] batman_adv: batadv0: Interface activated: gretap1 [ 130.087460][ T9260] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 130.466800][ T9283] binder: 9282:9283 ioctl c0306201 200000000640 returned -22 [ 130.523881][ T5791] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.629997][ T5791] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.657991][ T5755] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.663630][ T5755] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.667135][ T5755] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.672651][ T5755] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.676242][ T5755] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.732431][ T5791] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.849866][ T5791] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.950012][ T5826] usb 11-1: USB disconnect, device number 6 [ 131.034515][ T9302] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 131.089323][ T5791] bridge_slave_1: left allmulticast mode [ 131.091217][ T5791] bridge_slave_1: left promiscuous mode [ 131.093046][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.098197][ T5791] bridge_slave_0: left allmulticast mode [ 131.100493][ T5791] bridge_slave_0: left promiscuous mode [ 131.102345][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.164062][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 131.164080][ T42] audit: type=1400 audit(1785446222.337:905): avc: denied { write } for pid=9305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.219705][ T42] audit: type=1400 audit(1785446222.397:906): avc: denied { write } for pid=9312 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.241001][ T5791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.245561][ T5791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.251257][ T5791] bond0 (unregistering): Released all slaves [ 131.294250][ T5449] 8021q: adding VLAN 0 to HW filter on device eth17 [ 131.437621][ T42] audit: type=1400 audit(1785446222.607:907): avc: denied { write } for pid=9331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.523580][ T42] audit: type=1400 audit(1785446222.697:908): avc: denied { write } for pid=9337 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.539314][ T9291] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.542534][ T9291] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.545724][ T9291] bridge_slave_0: entered allmulticast mode [ 131.551417][ T9291] bridge_slave_0: entered promiscuous mode [ 131.572817][ T9291] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.576008][ T9291] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.579422][ T9291] bridge_slave_1: entered allmulticast mode [ 131.583380][ T9291] bridge_slave_1: entered promiscuous mode [ 131.591282][ T5449] 8021q: adding VLAN 0 to HW filter on device eth18 [ 131.619304][ T9291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.623797][ T9291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.669423][ T9291] team0: Port device team_slave_0 added [ 131.673269][ T9291] team0: Port device team_slave_1 added [ 131.745251][ T9291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.748460][ T9291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.768304][ T42] audit: type=1400 audit(1785446222.937:909): avc: denied { write } for pid=9340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.788449][ T9291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.797365][ T9291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.800819][ T9291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.811239][ T9291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.828316][ T42] audit: type=1400 audit(1785446222.997:910): avc: denied { write } for pid=9348 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.871552][ T5791] hsr_slave_0: left promiscuous mode [ 131.874467][ T5791] hsr_slave_1: left promiscuous mode [ 131.877273][ T5791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.880765][ T5791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.884600][ T5791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.887815][ T5791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.900695][ T5791] veth1_macvtap: left promiscuous mode [ 131.903132][ T5791] veth0_macvtap: left promiscuous mode [ 131.905596][ T5791] veth1_vlan: left promiscuous mode [ 131.907874][ T5791] veth0_vlan: left promiscuous mode [ 132.121629][ T5791] team0 (unregistering): Port device team_slave_1 removed [ 132.134881][ T5791] team0 (unregistering): Port device team_slave_0 removed [ 132.209647][ T9291] hsr_slave_0: entered promiscuous mode [ 132.212082][ T9291] hsr_slave_1: entered promiscuous mode [ 132.214361][ T9291] debugfs: 'hsr0' already exists in 'hsr' [ 132.216349][ T9291] Cannot create hsr debugfs directory [ 132.220102][ T5449] 8021q: adding VLAN 0 to HW filter on device eth19 [ 132.377635][ T42] audit: type=1400 audit(1785446223.547:911): avc: denied { write } for pid=9357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.456301][ T42] audit: type=1400 audit(1785446223.627:912): avc: denied { write } for pid=9360 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.491151][ T9291] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 132.506836][ T9291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.511075][ T9291] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 132.531260][ T9291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.535528][ T5449] 8021q: adding VLAN 0 to HW filter on device eth20 [ 132.538101][ T9291] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 132.549969][ T9291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 132.558909][ T9291] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 132.563338][ T9291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.602136][ T9373] Device name not specified. [ 132.602136][ T9373] [ 132.616596][ T9291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.639011][ T9291] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.644319][ T7556] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.646574][ T7556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.656071][ T7556] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.658272][ T7556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.689226][ T9291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.722496][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.732389][ T5742] Bluetooth: hci0: command tx timeout [ 132.912674][ T9291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.066843][ T9291] veth0_vlan: entered promiscuous mode [ 133.074458][ T9291] veth1_vlan: entered promiscuous mode [ 133.090052][ T9291] veth0_macvtap: entered promiscuous mode [ 133.094726][ T9291] veth1_macvtap: entered promiscuous mode [ 133.103974][ T9291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.110963][ T9291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.117911][ T5791] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.123396][ T5791] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.127837][ T5791] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.133183][ T5791] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.221472][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.224828][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.247260][ T7553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.250990][ T7553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.362025][ T9400] validate_nla: 2 callbacks suppressed [ 133.362039][ T9400] netlink: 'syz.6.852': attribute type 7 has an invalid length. [ 133.367294][ T9400] netlink: 'syz.6.852': attribute type 8 has an invalid length. [ 133.407747][ T42] audit: type=1400 audit(1785446224.577:913): avc: denied { ioctl } for pid=9396 comm="syz.9.851" path="socket:[32679]" dev="sockfs" ino=32679 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 133.626543][ T9411] fuse: Bad value for 'fd' [ 133.769315][ T9414] kernel profiling enabled (shift: 63) [ 133.773894][ T9414] profiling shift: 63 too large [ 133.804815][ T42] audit: type=1400 audit(1785446224.977:914): avc: denied { getopt } for pid=9418 comm="syz.9.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 133.813360][ T9421] __nla_validate_parse: 5 callbacks suppressed [ 133.813372][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.858'. [ 133.821057][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.858'. [ 134.188871][ T5851] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 134.338524][ T5851] usb 14-1: Using ep0 maxpacket: 8 [ 134.342519][ T5851] usb 14-1: config 0 has an invalid interface number: 55 but max is 0 [ 134.345992][ T5851] usb 14-1: config 0 has no interface number 0 [ 134.348606][ T5851] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 134.352643][ T5851] usb 14-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 134.357146][ T5851] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.362042][ T5851] usb 14-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 134.367163][ T5851] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 134.370898][ T5851] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.376753][ T5851] usb 14-1: config 0 descriptor?? [ 134.385737][ T5851] ldusb 14-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 134.584172][ T9431] netlink: 40 bytes leftover after parsing attributes in process `syz.9.861'. [ 134.591480][ T5851] usb 14-1: USB disconnect, device number 2 [ 134.600770][ T5851] ldusb 14-1:0.55: LD USB Device #0 now disconnected [ 134.798655][ T5742] Bluetooth: hci0: command tx timeout [ 135.503182][ T9466] netlink: 72 bytes leftover after parsing attributes in process `syz.9.869'. [ 135.564304][ T9470] fuse: Bad value for 'fd' [ 135.838839][ T5851] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 135.988480][ T5851] usb 14-1: Using ep0 maxpacket: 8 [ 135.994493][ T5851] usb 14-1: config 0 has an invalid interface number: 55 but max is 0 [ 135.997772][ T5851] usb 14-1: config 0 has no interface number 0 [ 136.000477][ T5851] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.004729][ T5851] usb 14-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 136.009492][ T5851] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 136.013711][ T5851] usb 14-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 136.018827][ T5851] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 136.022351][ T5851] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.026946][ T5851] usb 14-1: config 0 descriptor?? [ 136.032516][ T5851] ldusb 14-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 136.289450][ T7228] usb 14-1: USB disconnect, device number 3 [ 136.290963][ C1] ldusb 14-1:0.55: usb_submit_urb failed (-19) [ 136.292739][ T9472] ldusb 14-1:0.55: Couldn't submit interrupt_out_urb -19 [ 136.294823][ T9473] No control pipe specified [ 136.301658][ T7228] ldusb 14-1:0.55: LD USB Device #0 now disconnected [ 136.391927][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 136.391941][ T42] audit: type=1400 audit(1785446227.567:917): avc: denied { write } for pid=9476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.454382][ T42] audit: type=1400 audit(1785446227.627:918): avc: denied { write } for pid=9479 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.765606][ T42] audit: type=1400 audit(1785446227.937:919): avc: denied { write } for pid=9482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.824697][ T42] audit: type=1400 audit(1785446227.997:920): avc: denied { write } for pid=9485 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.888699][ T5742] Bluetooth: hci0: command tx timeout [ 137.606170][ T42] audit: type=1400 audit(1785446228.777:921): avc: denied { write } for pid=9504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.664845][ T42] audit: type=1400 audit(1785446228.837:922): avc: denied { write } for pid=9513 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.702823][ T42] audit: type=1400 audit(1785446228.877:923): avc: denied { checkpoint_restore } for pid=9514 comm="syz.7.879" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 137.740798][ T9523] fuse: Bad value for 'fd' [ 137.749281][ T9524] Invalid source name [ 137.753965][ T9524] UBIFS error (pid: 9524): cannot open "./file0", error -22 [ 137.754120][ T9523] Invalid source name [ 137.757761][ T9523] UBIFS error (pid: 9523): cannot open "./file0", error -22 [ 137.776339][ T42] audit: type=1400 audit(1785446228.947:924): avc: denied { write } for pid=9522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.834636][ T42] audit: type=1400 audit(1785446229.007:925): avc: denied { bind } for pid=9532 comm="syz.6.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.839638][ T9533] Bluetooth: MGMT ver 1.23 [ 137.842608][ T42] audit: type=1400 audit(1785446229.007:926): avc: denied { name_bind } for pid=9532 comm="syz.6.883" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 137.845336][ T9533] netlink: 32 bytes leftover after parsing attributes in process `syz.6.883'. [ 137.874686][ T847] libceph: connect (1)[c::]:6789 error -101 [ 137.876786][ T847] libceph: mon0 (1)[c::]:6789 connect error [ 137.886703][ T9535] ceph: No mds server is up or the cluster is laggy [ 137.900253][ T9540] netlink: 'syz.6.884': attribute type 23 has an invalid length. [ 137.961561][ T9543] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 138.027476][ T9545] netlink: 'syz.6.886': attribute type 12 has an invalid length. [ 138.048563][ T1007] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 138.198567][ T1007] usb 14-1: Using ep0 maxpacket: 32 [ 138.213592][ T1007] usb 14-1: config index 0 descriptor too short (expected 156, got 27) [ 138.217260][ T1007] usb 14-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 138.222020][ T1007] usb 14-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 138.226571][ T1007] usb 14-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 138.233303][ T1007] usb 14-1: config 0 interface 0 has no altsetting 0 [ 138.242501][ T1007] usb 14-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 138.246323][ T1007] usb 14-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 138.247441][ T9552] 9p: Bad value for 'rfdno' [ 138.250398][ T1007] usb 14-1: Product: syz [ 138.254080][ T1007] usb 14-1: Manufacturer: syz [ 138.256184][ T1007] usb 14-1: SerialNumber: syz [ 138.289162][ T1007] usb 14-1: config 0 descriptor?? [ 138.297018][ T1007] ldusb 14-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 138.311574][ T1007] ldusb 14-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 138.474100][ T9566] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 138.561570][ T9531] ldusb 14-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 138.561940][ T5855] usb 14-1: USB disconnect, device number 4 [ 138.564673][ C1] ldusb 14-1:0.0: usb_submit_urb failed (-19) [ 138.576568][ T5855] ldusb 14-1:0.0: LD USB Device #0 now disconnected [ 138.751658][ T9578] overlayfs: failed to resolve './bus': -2 [ 138.908777][ T10] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 138.970888][ T5742] Bluetooth: hci0: command tx timeout [ 139.058723][ T10] usb 12-1: Using ep0 maxpacket: 16 [ 139.062793][ T10] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.066980][ T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.071463][ T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.074983][ T10] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.078936][ T10] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.086613][ T10] usb 12-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.090174][ T10] usb 12-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.093356][ T10] usb 12-1: Manufacturer: syz [ 139.097412][ T10] usb 12-1: config 0 descriptor?? [ 139.358734][ T10] rc_core: IR keymap rc-hauppauge not found [ 139.360906][ T10] Registered IR keymap rc-empty [ 139.363576][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 139.379543][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 139.399778][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 139.404531][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input16 [ 139.411432][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 139.428493][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 139.449490][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 139.469448][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 139.489127][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 139.508719][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 139.529374][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 139.550438][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 139.568723][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 139.592211][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 139.597486][ T9608] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 139.607209][ T9608] CIFS mount error: No usable UNC path provided in device string! [ 139.607209][ T9608] [ 139.612290][ T10] mceusb 12-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 139.612307][ T10] mceusb 12-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 139.616195][ T10] usb 12-1: USB disconnect, device number 6 [ 139.626831][ T9608] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 139.683984][ T9612] /dev/sg0: Can't lookup blockdev [ 139.734383][ T9617] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 139.741988][ T9610] kvm: pic: non byte write [ 139.853487][ T9625] kvm: kvm [9623]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x4 [ 140.712843][ T9637] ================================================================== [ 140.716152][ T9637] BUG: KASAN: slab-use-after-free in __release_resource+0x276/0x2c0 [ 140.719372][ T9637] Read of size 8 at addr ffff888021f70c38 by task syz.9.908/9637 [ 140.722741][ T9659] tipc: Enabled bearer , priority 10 [ 140.723283][ T9637] [ 140.723316][ T9637] CPU: 3 UID: 0 PID: 9637 Comm: syz.9.908 Not tainted syzkaller #0 PREEMPT(full) [ 140.723339][ T9637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.723358][ T9637] Call Trace: [ 140.723382][ T9637] [ 140.723390][ T9637] dump_stack_lvl+0x100/0x190 [ 140.723419][ T9637] print_report+0x13d/0x4b0 [ 140.723446][ T9637] ? __virt_addr_valid+0x239/0x430 [ 140.723468][ T9637] ? __release_resource+0x276/0x2c0 [ 140.723492][ T9637] kasan_report+0xdf/0x1c0 [ 140.723513][ T9637] ? __release_resource+0x276/0x2c0 [ 140.723538][ T9637] __release_resource+0x276/0x2c0 [ 140.723561][ T9637] release_resource+0x26/0x40 [ 140.723583][ T9637] pci_remove_bus_device+0x2d3/0x3b0 [ 140.723609][ T9637] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 140.723631][ T9637] remove_store+0x123/0x140 [ 140.723651][ T9637] ? __pfx_remove_store+0x10/0x10 [ 140.723672][ T9637] ? find_held_lock+0x2b/0x80 [ 140.723697][ T9637] ? sysfs_file_kobj+0xe4/0x290 [ 140.723720][ T9637] ? sysfs_file_kobj+0xe4/0x290 [ 140.723745][ T9637] ? __pfx_remove_store+0x10/0x10 [ 140.723762][ T9637] dev_attr_store+0x58/0x80 [ 140.723784][ T9637] ? __pfx_dev_attr_store+0x10/0x10 [ 140.723806][ T9637] sysfs_kf_write+0xf2/0x150 [ 140.723828][ T9637] kernfs_fop_write_iter+0x3e0/0x5f0 [ 140.723847][ T9637] ? __pfx_sysfs_kf_write+0x10/0x10 [ 140.723868][ T9637] vfs_write+0x6ac/0x1050 [ 140.723889][ T9637] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 140.723907][ T9637] ? __pfx_vfs_write+0x10/0x10 [ 140.723932][ T9637] ksys_write+0x12a/0x250 [ 140.723951][ T9637] ? __pfx_ksys_write+0x10/0x10 [ 140.723974][ T9637] do_syscall_64+0x115/0x870 [ 140.724027][ T9637] ? clear_bhb_loop+0x40/0x90 [ 140.724047][ T9637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.724065][ T9637] RIP: 0033:0x7fedd5f9df99 [ 140.724080][ T9637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.724097][ T9637] RSP: 002b:00007fedd6f29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.724132][ T9637] RAX: ffffffffffffffda RBX: 00007fedd6226090 RCX: 00007fedd5f9df99 [ 140.724144][ T9637] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 140.724155][ T9637] RBP: 00007fedd6034ec4 R08: 0000000000000000 R09: 0000000000000000 [ 140.724167][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.724175][ T9637] R13: 00007fedd6226128 R14: 00007fedd6226090 R15: 00007ffdf4647a78 [ 140.724188][ T9637] [ 140.724192][ T9637] [ 140.828154][ T9637] Allocated by task 8169: [ 140.829977][ T9637] kasan_save_stack+0x30/0x50 [ 140.831938][ T9637] kasan_save_track+0x14/0x30 [ 140.833757][ T9637] __kasan_kmalloc+0xaa/0xb0 [ 140.835256][ T9637] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 140.837261][ T9637] kmemdup_noprof+0x29/0x60 [ 140.839050][ T9637] platform_device_add_resources+0x37/0x100 [ 140.841030][ T9637] dwc2_pci_probe+0x1d3/0x360 [ 140.842510][ T9637] local_pci_probe+0xdd/0x1b0 [ 140.844106][ T9637] pci_call_probe+0x176/0x800 [ 140.845624][ T9637] pci_device_probe+0x1cd/0x370 [ 140.847267][ T9637] really_probe+0x241/0xa60 [ 140.849114][ T9637] __driver_probe_device+0x20e/0x450 [ 140.851328][ T9637] device_driver_attach+0xd1/0x220 [ 140.853493][ T9637] bind_store+0xf4/0x190 [ 140.855277][ T9637] drv_attr_store+0x74/0xb0 [ 140.857221][ T9637] sysfs_kf_write+0xf2/0x150 [ 140.859144][ T9637] kernfs_fop_write_iter+0x3e0/0x5f0 [ 140.861358][ T9637] vfs_write+0x6ac/0x1050 [ 140.863169][ T9637] ksys_write+0x12a/0x250 [ 140.865000][ T9637] do_syscall_64+0x115/0x870 [ 140.866970][ T9637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.869471][ T9637] [ 140.870491][ T9637] Freed by task 9637: [ 140.872186][ T9637] kasan_save_stack+0x30/0x50 [ 140.874167][ T9637] kasan_save_track+0x14/0x30 [ 140.876152][ T9637] kasan_save_free_info+0x3b/0x70 [ 140.878270][ T9637] __kasan_slab_free+0x5f/0x80 [ 140.880297][ T9637] kfree+0x22b/0x6c0 [ 140.881968][ T9637] platform_device_release+0x8a/0xb0 [ 140.884191][ T9637] device_release+0xd2/0x270 [ 140.886118][ T9637] kobject_put+0x1f7/0x640 [ 140.887976][ T9637] put_device+0x1f/0x30 [ 140.889749][ T9637] platform_device_unregister+0x45/0x50 [ 140.892033][ T9637] dwc2_pci_remove+0x55/0xd0 [ 140.893954][ T9637] pci_device_remove+0xb2/0x1d0 [ 140.895967][ T9637] device_remove+0xcb/0x180 [ 140.897881][ T9637] device_release_driver_internal+0x44e/0x620 [ 140.900423][ T9637] pci_stop_bus_device+0x120/0x160 [ 140.902503][ T9637] pci_stop_and_remove_bus_device+0x58/0xa0 [ 140.904986][ T9637] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 140.907658][ T9637] remove_store+0x123/0x140 [ 140.909613][ T9637] dev_attr_store+0x58/0x80 [ 140.911522][ T9637] sysfs_kf_write+0xf2/0x150 [ 140.913496][ T9637] kernfs_fop_write_iter+0x3e0/0x5f0 [ 140.915604][ T9637] vfs_write+0x6ac/0x1050 [ 140.917087][ T9637] ksys_write+0x12a/0x250 [ 140.918813][ T9637] do_syscall_64+0x115/0x870 [ 140.920492][ T9637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.922344][ T9637] [ 140.923111][ T9637] The buggy address belongs to the object at ffff888021f70c00 [ 140.923111][ T9637] which belongs to the cache kmalloc-128 of size 128 [ 140.928696][ T9637] The buggy address is located 56 bytes inside of [ 140.928696][ T9637] freed 128-byte region [ffff888021f70c00, ffff888021f70c80) [ 140.933977][ T9637] [ 140.934749][ T9637] The buggy address belongs to the physical page: [ 140.936830][ T9637] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888021f70100 pfn:0x21f70 [ 140.940622][ T9637] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 140.943083][ T9637] page_type: f5(slab) [ 140.944360][ T9637] raw: 00fff00000000200 ffff88801bc42a00 ffffea00015f3910 ffffea00016c57d0 [ 140.947064][ T9637] raw: ffff888021f70100 000000080010000e 00000000f5000000 0000000000000000 [ 140.950336][ T9637] page dumped because: kasan: bad access detected [ 140.953001][ T9637] page_owner tracks the page as allocated [ 140.955337][ T9637] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 36, tgid 36 (kworker/u33:0), ts 6263029117, free_ts 6262500452 [ 140.963390][ T9637] post_alloc_hook+0xfd/0x120 [ 140.965363][ T9637] get_page_from_freelist+0xf48/0x3530 [ 140.967605][ T9637] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 140.970061][ T9637] new_slab+0xa2/0x640 [ 140.971770][ T9637] refill_objects+0xe3/0x410 [ 140.973728][ T9637] __pcs_replace_empty_main+0x376/0x680 [ 140.975554][ T9637] __kmalloc_noprof+0x66d/0x820 [ 140.977254][ T9637] lsm_blob_alloc+0x68/0x90 [ 140.978809][ T9637] security_task_alloc+0x2a/0x260 [ 140.980423][ T9637] copy_process+0x2b94/0x8030 [ 140.981902][ T9637] kernel_clone+0x176/0x9d0 [ 140.983335][ T9637] user_mode_thread+0xcc/0x110 [ 140.985087][ T9637] call_usermodehelper_exec_work+0xcb/0x180 [ 140.987562][ T9637] process_one_work+0xa23/0x1940 [ 140.989662][ T9637] worker_thread+0x5ef/0xe50 [ 140.991577][ T9637] kthread+0x370/0x450 [ 140.993331][ T9637] page last free pid 36 tgid 36 stack trace: [ 140.995745][ T9637] __free_frozen_pages+0x79f/0x1090 [ 140.997897][ T9637] __kasan_populate_vmalloc+0x1ea/0x210 [ 141.000206][ T9637] alloc_vmap_area+0x95d/0x2bb0 [ 141.002252][ T9637] __get_vm_area_node+0x1ca/0x330 [ 141.004363][ T9637] __vmalloc_node_range_noprof+0x228/0x1630 [ 141.006684][ T9637] __vmalloc_node_noprof+0xad/0xf0 [ 141.008802][ T9637] copy_process+0x7fb/0x8030 [ 141.010683][ T9637] kernel_clone+0x176/0x9d0 [ 141.012369][ T9637] user_mode_thread+0xcc/0x110 [ 141.013934][ T9637] call_usermodehelper_exec_work+0xcb/0x180 [ 141.015781][ T9637] process_one_work+0xa23/0x1940 [ 141.017393][ T9637] worker_thread+0x5ef/0xe50 [ 141.019010][ T9637] kthread+0x370/0x450 [ 141.020332][ T9637] ret_from_fork+0x72b/0xd50 [ 141.021797][ T9637] ret_from_fork_asm+0x1a/0x30 [ 141.023310][ T9637] [ 141.024089][ T9637] Memory state around the buggy address: [ 141.025832][ T9637] ffff888021f70b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.028639][ T9637] ffff888021f70b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 141.032015][ T9637] >ffff888021f70c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.035343][ T9637] ^ [ 141.037791][ T9637] ffff888021f70c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 141.040980][ T9637] ffff888021f70d00: 00 00 00 00 00 00 00 00 00 00 00 00 04 fc fc fc [ 141.043865][ T9637] ================================================================== [ 141.047622][ T9637] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 141.050140][ T9637] CPU: 3 UID: 0 PID: 9637 Comm: syz.9.908 Not tainted syzkaller #0 PREEMPT(full) [ 141.053107][ T9637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.056304][ T9637] Call Trace: [ 141.057456][ T9637] [ 141.058717][ T9637] dump_stack_lvl+0x100/0x190 [ 141.060681][ T9637] vpanic+0x552/0x970 [ 141.062332][ T9637] ? __pfx_vpanic+0x10/0x10 [ 141.064145][ T9637] ? mark_held_locks+0x40/0x70 [ 141.066030][ T9637] ? irqentry_exit+0x24d/0xa00 [ 141.067902][ T9637] ? __release_resource+0x276/0x2c0 [ 141.070124][ T9637] panic+0xd1/0xe0 [ 141.071727][ T9637] ? __pfx_panic+0x10/0x10 [ 141.073735][ T9637] check_panic_on_warn.cold+0x19/0x34 [ 141.076058][ T9637] end_report.part.0+0x3a/0x90 [ 141.078109][ T9637] kasan_report.cold+0xe/0x18 [ 141.080189][ T9637] ? __release_resource+0x276/0x2c0 [ 141.082357][ T9637] __release_resource+0x276/0x2c0 [ 141.084485][ T9637] release_resource+0x26/0x40 [ 141.086502][ T9637] pci_remove_bus_device+0x2d3/0x3b0 [ 141.088731][ T9637] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 141.091436][ T9637] remove_store+0x123/0x140 [ 141.093063][ T9637] ? __pfx_remove_store+0x10/0x10 [ 141.094838][ T9637] ? find_held_lock+0x2b/0x80 [ 141.096805][ T9637] ? sysfs_file_kobj+0xe4/0x290 [ 141.098809][ T9637] ? sysfs_file_kobj+0xe4/0x290 [ 141.100778][ T9637] ? __pfx_remove_store+0x10/0x10 [ 141.102888][ T9637] dev_attr_store+0x58/0x80 [ 141.104831][ T9637] ? __pfx_dev_attr_store+0x10/0x10 [ 141.106953][ T9637] sysfs_kf_write+0xf2/0x150 [ 141.108894][ T9637] kernfs_fop_write_iter+0x3e0/0x5f0 [ 141.111080][ T9637] ? __pfx_sysfs_kf_write+0x10/0x10 [ 141.113235][ T9637] vfs_write+0x6ac/0x1050 [ 141.115046][ T9637] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 141.117475][ T9637] ? __pfx_vfs_write+0x10/0x10 [ 141.119493][ T9637] ksys_write+0x12a/0x250 [ 141.121337][ T9637] ? __pfx_ksys_write+0x10/0x10 [ 141.123287][ T9637] do_syscall_64+0x115/0x870 [ 141.124773][ T9637] ? clear_bhb_loop+0x40/0x90 [ 141.126247][ T9637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.128289][ T9637] RIP: 0033:0x7fedd5f9df99 [ 141.130186][ T9637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.136284][ T9637] RSP: 002b:00007fedd6f29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.139011][ T9637] RAX: ffffffffffffffda RBX: 00007fedd6226090 RCX: 00007fedd5f9df99 [ 141.141908][ T9637] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 141.144391][ T9637] RBP: 00007fedd6034ec4 R08: 0000000000000000 R09: 0000000000000000 [ 141.147572][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.150701][ T9637] R13: 00007fedd6226128 R14: 00007fedd6226090 R15: 00007ffdf4647a78 [ 141.153354][ T9637] [ 141.154974][ T9637] Kernel Offset: disabled [ 141.156378][ T9637] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:08:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff81fdc702 RDX=ffff888057e88000 RSI=ffffffff81fdc6dc RDI=ffff888057e88000 RBP=ffff88806a741240 RSP=ffffc90006dcf9e8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4e8249 R14=0000000000000001 R15=ffff88806a43c880 RIP=ffffffff81fdc6e3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555567602500 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001280 CR3=000000002bdc2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c40000 Opmask01=0000000000000001 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00373a372f6b636f 6c622f7665642f73 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558dfca017c0 0000558dfca017c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13313f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13313f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff00ffffff00 00000000ff000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff00ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326fe8fec3483 737326fbd7d77d59 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d4158d752dbe28cd 737373762bacba8c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20676e6964616572 004b4f2034366f66 6e695f706f6f6c20 676e696461657200 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05424b4c41444057 004b4f0511134a43 4b4c5f554a4a4905 424b4c4144405700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a72737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554500484e2d4945 2f45524144004449 0053242d5457452d 484e2d4953242d54 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000031f7 RBX=000000000000002c RCX=ffffc9000d201000 RDX=0000000000080000 RSI=ffffffff81e8b0bc RDI=ffff88805a5f4a80 RBP=0000000000000001 RSP=ffffc900077a7150 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92000ef4e2c R13=0000000000000200 R14=ffff88803215ca80 R15=ffffc900077a7218 RIP=ffffffff81e8b0be RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fab8e0716c0 ffffffff 00c00000 GS =0000 ffff8880d5edc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fab8d189100 CR3=0000000012aeb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ff15f1e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ff15f1e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555cf25f28 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0820800300080001 0000040806040142 f838100001800401 0000040806060101 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d000080001b00300 0000000000000000 0000000000000001 ffffffffffffffff ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 df08019003000488 0001880302b8c604 8400018403140400 0180030008000210 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001410000604749e 2094841000041000 0d8004060278cc00 23647261632f6972 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 642f7665642f01ff ffffffffffffffe1 080d800300040000 080042800401c710 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001410000604749e 2094841000041000 0d8004060278cc00 23647261632f6972 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 df08019003000488 0001880302b8c604 8400018403140400 0180030008000210 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101c20800660800 0210007a80040100 000008060a01529e 09af10007a900302 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d206873756c666c 6320363365737020 74617020766f6d63 2061636d20656770 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e206c6c61637379 7320746820737320 3265737320657373 207273786620786d ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6373745f746e6174 736e6f63206d6c20 7063737464722062 6731657064702078 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a09746e656d6e 67696c615f656863 61630a3436203a09 657a697320687375 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6973796870207374 6962203634203a09 73657a6973207373 65726464610a3436 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 67616e616d207265 776f700a6c617574 7269762073746962 203834202c6c6163 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000060000006f 666e697570632f63 6f72702f0000000d 0a0a3a746e656d65 info registers vcpu 2 CPU#2 RAX=00000000000f9f27 RBX=ffff88801eed4a80 RCX=ffffffff8bbb22d5 RDX=0000000000000000 RSI=ffffffff8e1a6f32 RDI=ffffffff8c402680 RBP=ffffed1003dda950 RSP=ffffc90000187e00 R8 =0000000000000001 R9 =ffffed100d4c678d R10=ffff88806a633c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bbb089f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa3c8b5da08 CR3=0000000037959000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedd6d5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf4647f66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf4647f66 00007ffdf4647f6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedd60354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedd60354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedd603564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedd60354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedd61f1600 00007fedd61f15e0 00007fedd61f15e8 00007fedd61f1618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedd61f15f8 00007fedd61f15c8 00007fedd61f1600 00007fedd61f15e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000003 RBX=0000000000000000 RCX=ffffffff81e8b0ce RDX=0000000000000001 RSI=ffffffff81e8b0bc RDI=ffff88803215ca80 RBP=0000000000000001 RSP=ffffc900064af880 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92000c95f13 R13=0000000000000000 R14=ffff88805a5f4a80 R15=ffffc900064af950 RIP=ffffffff820a604f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fedd6f296c0 ffffffff 00c00000 GS =0000 ffff8880d60dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc9a7e4c20 CR3=0000000037959000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 397a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf4647f66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf4647f66 00007ffdf4647f6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedd60354a7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedd60354e7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedd603564b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fedd60354d9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000