last executing test programs: 5m1.382315786s ago: executing program 32 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000002e") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) lremovexattr(&(0x7f00000001c0)='./dev/mapper/control\x00', &(0x7f0000000200)=@random={'osx.', '$\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080019"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) r2 = inotify_init() syz_emit_ethernet(0x3b6, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x424) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020800000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048008000700", @ANYRESHEX=r3], 0xc0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000b1f000/0xf000)=nil, &(0x7f0000f4a000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fbc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f00004d9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r5 = io_uring_setup(0x2b24, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0x2f8}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r6, r4, 0x0) 4m38.145097119s ago: executing program 33 (id=610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)={0xfffffffffffffffc, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x28068040}, 0x4051) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000001c0)={0x11, 0x7, {0x6873d3a3, @struct={0x6, 0xc}, 0x0, 0xd18, 0x6, 0x2, 0x3, 0x5, 0x401, @struct={0x8000}, 0xfffffff0, 0x1000, [0x8, 0x7, 0x0, 0x7, 0x2, 0xffffffff]}, {0x0, @usage=0x7, 0x0, 0x41, 0x4, 0x1, 0x0, 0x1, 0x0, @struct={0x1, 0x1}, 0x0, 0x4, [0x80000000, 0x1, 0x200, 0x2, 0x7, 0xf4b0]}, {0x5, @struct={0x2, 0x9}, 0x0, 0x80000000, 0x9058, 0x0, 0x1, 0x101, 0x84, @struct={0xffffffff, 0x7}, 0x0, 0x8, [0x5, 0x26, 0x100000000000, 0x1000, 0x3]}, {0x5, 0x9, 0x2}}) r2 = syz_io_uring_setup(0x5613, &(0x7f00000000c0)={0x0, 0x2dea, 0x480d, 0x2, 0x7e}, &(0x7f0000000dc0), &(0x7f0000000e00), &(0x7f0000000e40)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000e80)="21cfa10df6ad95e96fbd3e7e6b70a71ef90f702c81923498fb94b0dc73e9b6b52655427fb061dbc5d2", 0x29) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000005c0)={0x0, 0x8, 0x3, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000009c0)={0x0, 0x4, {0x5, @struct={0xe, 0x7}, r1, 0x275, 0x4, 0xc, 0x9, 0x9, 0x20, @struct={0x0, 0x9}, 0x450, 0xd02, [0x7, 0x8000000000000004, 0xffffffffffffffff, 0x1, 0x0, 0x200c]}, {0x9, @usage=0xb7, 0x0, 0x2, 0x3, 0xb9, 0x6, 0x8, 0x0, @usage=0x4, 0xa00000, 0x2, [0x0, 0x8000000000000004, 0x6, 0x0, 0xff, 0x9]}, {0x8000, @usage=0xff, r3, 0x9, 0x7ffffffc, 0x7, 0x2, 0x400, 0x9, @struct, 0x3, 0x9, [0x101, 0x9, 0x8000000000000001, 0x7, 0x7, 0x3]}, {0x80, 0x7, 0x6}}) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000140)) 3m33.938934575s ago: executing program 1 (id=1302): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x1f, '\x00', @st={0x4, [{0x0, @uvalue=0x8}, {0x3, @uvalue=0x3}, {0x1, @svalue=0xff}, {0x2, @uvalue=0x8d3c}]}, 0x4}, {0x39, '\x00', @buffer={"55eb476b13d85ef7a019aef895e9baae03d9401b33813c1f29bc0c0ac8383761", 0x20}, 0x5}, {0xf, '\x00', @data=0x81, 0x3}, {0x28}, {0x3c, '\x00', @data=0x8, 0x1}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x804) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000700", "f4bd000000801900", [0x0, 0x31]}}) 3m33.870740991s ago: executing program 1 (id=1303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) (async) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 3m33.870606044s ago: executing program 5 (id=1304): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8922, &(0x7f0000000280)={'dummy0\x00'}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) getpeername$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) 3m33.818047064s ago: executing program 1 (id=1306): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x464, 0x0, 0x1, [@nested={0x8, 0xcd, 0x0, 0x1, [@nested={0x4, 0x62}]}]}]}]}, 0x28}}, 0xc000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 3m33.629942016s ago: executing program 4 (id=1307): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0x29, 0x7, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffe0}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000006c0)="5d7f9f", 0x3}], 0x1}}], 0x1, 0x20008000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34000000000001002000000000040000020007e3997f95763d1ac4000600150006000000100016800c000180080002"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001100050026bd7000ffdbdf25070fef93", @ANYRES32=r4, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38) keyctl$instantiate(0xc, 0x0, 0xfffffffffffffffd, 0x2f, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="077722f800e0142f5f338a0900000000f1ffffff000000118d0000000000000001cd8bafe60000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 3m33.377547041s ago: executing program 1 (id=1309): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r3, 0x0, 0xee01) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000000c0)=0x4) close_range(r0, r1, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000040)={"1555d92d996e67e6757e7abab54e7c78a6bacfb8fa82afcccc5f5b3af8376ec4", r2}) r4 = fsopen(&(0x7f0000000000)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='ip\x00\x03cr\x80e\x83', &(0x7f0000000240)='.\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\xe7\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04y\rr\xba^\x9f\xf4\xfb\xaa#\xf6lX\'\x03u\xc6XZ\x8eK*Zs\xdb\xcaV\x92\x84\xc5\x05i]\xb6N\xa9&a\xe6\xa1\xedgd\xc2\x8b1Kq\x90U\xe0\x9a\xee\xd6BdU?\r\xd2\x13}u\xf6\x9entz\vW\x04\x968\xc5v\xe0t:\xe0D\xe8\xca\xb8\xd5\xb0\x89\x90\x928\x1d\r\x8b\xf2#8\xf5rI=6\xa1L\x19>I\f\xe7\xab\x98\xd2x\x82\x820\xf6\x8b]T\xd1\xe0\xefD\xc3\x94O\xdd\\\xd6\xb5z.\xc9z>\xdab\xcdw\xbf\x91\x190we\xa5\xfc\xf9\xaf\xedA&\xd50\xa9\xf0\xbeX\xe8\xd0', 0x0) 3m33.376989708s ago: executing program 4 (id=1310): mknod$loop(0x0, 0xfff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d2861657329f0000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000140)={@empty, @empty, 0x0, "1c6804d4a58b85e13e66ab6fafd10df8ab973be71cc99e43030305633956c3c4", 0xfffffc00, 0x9, 0xfffff536, 0xde5}, 0x3c) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000072009fb326bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="557e660e665aa8b87aa494a37bdb20851354bbc873e0208d06bd5d27"], 0x20}, 0x1, 0x0, 0x0, 0x8044010}, 0x20041040) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000880)={r5, &(0x7f0000000780)="d11951f8d10b46"}, 0x20) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @any, 0x80}, 0xa) 3m33.37691704s ago: executing program 5 (id=1311): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x4000000000000000, 0x0) 3m33.270672451s ago: executing program 5 (id=1312): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1a75f, 0x4b7bc}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x60bf}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 3m33.270343048s ago: executing program 4 (id=1313): unshare(0x62020600) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x14, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x5}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0xa1}, @tail_call, @call={0x85, 0x0, 0x0, 0xb7}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2d1d6, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000540)=[{0x5, 0x2, 0x9, 0x9}, {0x5, 0x5, 0xd, 0xb}, {0x5, 0x4, 0x2, 0x3}, {0x1, 0x4, 0x1, 0x3}], 0x10, 0x9}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0x0, 0xa54, 0x1c}, 0xc) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x13, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x8, 0x37, &(0x7f00000002c0)=""/55, 0x0, 0xc2, '\x00', r3, @fallback=0x36, r4, 0x8, &(0x7f0000000380)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xa, 0x41f, 0x8}, 0x10, 0x0, r5, 0x4, &(0x7f00000007c0)=[r6, r7, r8, r9, 0xffffffffffffffff], &(0x7f0000000800)=[{0x2, 0x3, 0x2, 0xc}, {0x5, 0x2, 0xc, 0xa}, {0x5, 0x4, 0x8, 0x3}, {0x3, 0x2, 0xc, 0x4}], 0x10, 0x1}, 0x94) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000000)={{0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e20, 0x4, 'dh\x00', 0x2, 0x6, 0x79}, {@multicast2, 0x4e22, 0x2, 0x1, 0x3, 0x9}}, 0x44) 3m33.17053964s ago: executing program 5 (id=1315): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}}) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0xffffffffffffff17, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac", 0x53}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f", 0x9e}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a3731", 0xae}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x200, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r1, {0x0, 0x9}, {0xf, 0x9}, {0x5, 0x6}}, [@qdisc_kind_options=@q_etf={{}, {0x0, 0x2, @TCA_ETF_PARMS={0x0, 0x1, {0x139, 0x0, 0x2}}}}]}, 0x4c}}, 0x0) 3m33.120597513s ago: executing program 1 (id=1317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x591, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x591, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ff00000000000000080200001832000003000000000000000000000018380000020000000000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001830000004000000000000000000000018230000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000002aa239c979edb628000000000f58526d54aad73fabff59402914a1d9b96ac3d90f5827efd548ffce29a51ed5410cabfb47cb9e35d72c456d95a2000000000000000000"], &(0x7f0000000500)='GPL\x00', 0x5, 0x8c, &(0x7f0000000640)=""/140, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xb64a, 0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x0, 0x10, 0xc}, 0x94) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ff00000000000000080200001832000003000000000000000000000018380000020000000000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001830000004000000000000000000000018230000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000002aa239c979edb628000000000f58526d54aad73fabff59402914a1d9b96ac3d90f5827efd548ffce29a51ed5410cabfb47cb9e35d72c456d95a2000000000000000000"], &(0x7f0000000500)='GPL\x00', 0x5, 0x8c, &(0x7f0000000640)=""/140, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xb64a, 0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x0, 0x10, 0xc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x462b42, 0xf5) write$binfmt_misc(r4, &(0x7f0000000600)="566fbd", 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x208, 0x2e0, 0x2e0, 0x208, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xf0, 0x118, 0x0, {0x1000000}, [@common=@dst={{0x48}, {0x7fff, 0x3, 0x7de91c6f22c9938, [0x9, 0x1ff, 0x87e, 0x2a, 0xafd4, 0x9, 0xa, 0x7, 0x6, 0x1000, 0x6, 0x200, 0x9, 0x0, 0x7, 0x3], 0xa}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @void}, 0x10) connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x1, 0x4, 0x4, 0x1}}, 0x26) syz_usb_connect$cdc_ecm(0x6, 0x7b, 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x6, 0x7b, 0x0, 0x0) socket(0x1d, 0x2, 0x6) (async) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x14, 0x31, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x14, 0x31, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) close(r6) syz_usb_connect(0x5, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901fc03010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$I2C(&(0x7f0000000180), 0x2, 0x40402) (async) r8 = syz_open_dev$I2C(&(0x7f0000000180), 0x2, 0x40402) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000080)={0x0, 0x7c, 0x2, &(0x7f0000000040)={0x20, "1bf44f0d0000000000000000000047568375038923ec02b61472ceb17c66f71968"}}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) 3m32.990754528s ago: executing program 5 (id=1319): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = userfaultfd(0x801) fchmod(r1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r0}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$KVM_TDX_INIT_MEM_REGION(r2, 0xc008aeba, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x54000, 0x2}}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="38010000100001002cbc700000000000ff020000000000000000000000000001ac14140d0000000000000000000000000000ecdf00000000000000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000000000003200000000000000000000000000000000000000fefffffffffffffffeffffffffffffff030000000000000000000000000000000300000000000000fcffffffffffffff0000000000000000090000000000000003000000000000000408400000000000090000000000000092020000000000000100b000000000000000000a0001003a00000000000000480002006362632874776f666973682900"/231], 0x138}, 0x1, 0x0, 0x0, 0x4040000}, 0x44040) getsockopt$netlink(r0, 0x10e, 0x6, &(0x7f00000001c0)=""/225, &(0x7f0000000540)=0xe1) r3 = socket(0x1e, 0x4, 0x0) r4 = memfd_secret(0x80000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@set_irq_handler={0xc8, 0x20, {0x6, 0x2}}], 0x20}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r6, 0x0, 0x0) sendmsg$AUDIT_GET(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3e8, 0x400, 0x70bd2d, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000810}, 0x41000) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x8040000, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000001c0)='yeah', 0x4) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) 3m32.990474016s ago: executing program 4 (id=1320): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x8cffffffffffffff, 0x0) 3m32.738653376s ago: executing program 4 (id=1321): ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000000)={0x5, 0x8, 0xfffffffc, 0x6, '\x00', '\x00', '\x00', 0x4, 0x9, 0x7fff, 0x8, "19f6082e276b02492bb548c16df60212"}) r0 = socket$inet(0x2, 0x80000, 0xffffffff) r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x400100) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@delqdisc={0x5c, 0x25, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x3, 0x3}, {0x7, 0x10}, {0xd, 0x6}}, [@TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xde, 0x1, 0x20, 0x7ff, 0x1, 0x3, 0xd3, 0xa}}, {0x18, 0x2, [0x9, 0x0, 0x9, 0xdddc, 0x8, 0x7, 0x2, 0x2, 0x3, 0x0]}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040001) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x20, 0x1}, 0x18) r5 = openat(r4, &(0x7f00000003c0)='./file0\x00', 0x80, 0x80) socket$nl_route(0x10, 0x3, 0x0) utime(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)={0xfffffffffffffffc, 0x6}) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(r5, &(0x7f0000000480)='./file0/file0\x00', 0x20) ioctl$KVM_TDX_CAPABILITIES(r5, 0xc008aeba, &(0x7f0000000d00)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x1, 0x0, [{}]}}}) r6 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000d40)={{0x5, 0x2}, 0x100, './file1\x00'}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r5, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ec0)=0x14) sendmsg$kcm(r1, &(0x7f0000001040)={&(0x7f0000000f00)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast1}, 0x1, 0x2, 0x3}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f80)}, {&(0x7f0000000fc0)="662f19e49ea892", 0x7}], 0x2}, 0x10000000) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000001080)) ioctl$VIDIOC_G_STD(r6, 0x80085617, &(0x7f00000010c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000001100)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) pwrite64(r9, &(0x7f0000001140)="8ae3fca47f2688566e359d0c9395c89d2930efca30e70a5f439be628c2bf846d90fe4ff8fa52e3ea650994cd9a19bb5d9513463662e814b1782b1cf793253d401edf281419", 0x45, 0xffffffffffffffff) mkdirat(r5, &(0x7f00000011c0)='./file1\x00', 0x1a0) ioctl$OCFS2_IOC_GROUP_ADD(r4, 0x40186f02, &(0x7f0000001200)={0x97, 0x4, 0x9, 0x7ff}) readv(r5, &(0x7f0000002400)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/100, 0x64}, {&(0x7f00000022c0)=""/52, 0x34}, {&(0x7f0000002300)=""/126, 0x7e}, {&(0x7f0000002380)=""/68, 0x44}], 0x5) r10 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000002480)={@private0, 0x53, r8}) readv(r2, &(0x7f00000025c0)=[{&(0x7f00000024c0)=""/59, 0x3b}, {&(0x7f0000002500)=""/182, 0xb6}], 0x2) bind$inet6(r10, &(0x7f0000002600)={0xa, 0x4e23, 0xfffffff9, @loopback, 0xe}, 0x1c) 3m29.150439053s ago: executing program 4 (id=1323): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/32], &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) 3m26.758640123s ago: executing program 5 (id=1324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x200, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2, 0x600aa}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x3}]}, 0x28}}, 0x24008040) 3m22.108705733s ago: executing program 1 (id=1325): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x1f, '\x00', @st={0x4, [{0x0, @uvalue=0x8}, {0x3, @uvalue=0x3}, {0x1, @svalue=0xff}, {0x2, @uvalue=0x8d3c}]}, 0x4}, {0x39, '\x00', @buffer={"55eb476b13d85ef7a019aef895e9baae03d9401b33813c1f29bc0c0ac8383761", 0x20}, 0x5}, {0xf, '\x00', @data=0x81, 0x3}, {0x28}, {0x3c, '\x00', @data=0x8, 0x1}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x804) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000d00", "f4bd000000801900", [0x0, 0x31]}}) 3m13.014073813s ago: executing program 34 (id=1322): syz_emit_ethernet(0x106, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x106, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) (async) 3m3.911360383s ago: executing program 35 (id=1323): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/32], &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) 2m51.854449227s ago: executing program 36 (id=1325): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x1f, '\x00', @st={0x4, [{0x0, @uvalue=0x8}, {0x3, @uvalue=0x3}, {0x1, @svalue=0xff}, {0x2, @uvalue=0x8d3c}]}, 0x4}, {0x39, '\x00', @buffer={"55eb476b13d85ef7a019aef895e9baae03d9401b33813c1f29bc0c0ac8383761", 0x20}, 0x5}, {0xf, '\x00', @data=0x81, 0x3}, {0x28}, {0x3c, '\x00', @data=0x8, 0x1}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x804) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000d00", "f4bd000000801900", [0x0, 0x31]}}) 2m42.328065385s ago: executing program 37 (id=1324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x200, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2, 0x600aa}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x3}]}, 0x28}}, 0x24008040) 1m7.839781414s ago: executing program 8 (id=1490): getgroups(0x3, &(0x7f0000000c80)=[0xee01, 0xee00, 0xffffffffffffffff]) setresgid(r0, r0, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)='*\x00', r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r2}) keyctl$get_security(0x11, r2, &(0x7f0000000000)=""/27, 0x1b) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0xfd03, 0x0, 0x0, 0x5, 0x4}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000180)={0x0, {0xfffeffff, 0x4}}) 1m7.75974587s ago: executing program 8 (id=1491): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x3c, 0x41, 0x1, 0x80000, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@nested={0x14, 0xd, 0x0, 0x1, [@typed={0xf, 0xe3, 0x0, 0x0, @str='virt_wifi0\x00'}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 1m7.759512897s ago: executing program 8 (id=1492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000480)=ANY=[@ANYRES16=r4, @ANYRES64=r1, @ANYBLOB="05052522f187cedbdf257c00000008010300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0000880a020100000800faff0700d06d6558d57daaaaaaaaaa148100000008"], 0x54) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x2010, r6, 0xffff9000) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000280)={0x9, 0x2, 0x8000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0x1, 0x1}, 0x6) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) 1m7.048743327s ago: executing program 8 (id=1506): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r1, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x5, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], &(0x7f00000000c0)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, r0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0xbd08, 0x400, 0x2, 0x2e7}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e23, 0x7ff, @loopback, 0xffffffff}, 0x1c) listen(r9, 0x4) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000280)="474d5b5a8a7828d4", 0x8, 0xe0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @remote}, 0x1c) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x1, 0x4000, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) close_range(r8, 0xffffffffffffffff, 0x0) r11 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x4e20, @rand_addr=0xdffffc13}}) setsockopt$inet_tcp_int(r7, 0x6, 0x8, &(0x7f00000000c0)=0xfffffffb, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYRES64=r0], 0x64}, 0x1, 0x0, 0x0, 0x57}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000002100df4d0000000001000000020000000000000008000000050016008400000023f65b9d4ae83291dc3db78236ea731bacb62220b492ad67f8f136fdaf"], 0x24}}, 0x0) lstat(0x0, &(0x7f0000000180)) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="042300dfffffff0007000000001ae5fd"], 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m6.909622198s ago: executing program 8 (id=1509): syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d626990643d0101617469633c00cb7986df600fc084dcaadd2c12f36059d304b27624e2f1c05ce6703ea1b443481f3c298663ea697c988c64ef3036bbcbe6a862f43c3466bc9083d55451734dc0392324aeb7311a012e5be81d44f9290465f225c9cdf743e50000000000"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000900)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000b00)='1\n\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000c00), 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) symlinkat(&(0x7f0000000140)='./sys/devices/platform/vhci_hcd.0/detach\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./sys/devices/platform/vhci_hcd.0/detach\x00') bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000500)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/platform/vhci_hcd.0/detach\x00', 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r5, 0x1, &(0x7f0000000040)={{r6, r7+60000000}, {0x0, 0x3938700}}, &(0x7f0000000080)) write(r5, &(0x7f0000000280)='0', 0x1) lseek(r5, 0x8, 0x3) 1m6.554491179s ago: executing program 8 (id=1517): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000001040000000000000000791210000000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) pwrite64(r1, &(0x7f0000000400)="676f8d2b2a87c92bc1b8db00074390983fc892e546713392e3ed5d0721c6407f6eea167dc65f346b975dc6389de2c9b5beee992fdb0615a1cbf2635d63f50317a85fd67a3ac848ec2e7de6cae7a62540a23758e4d78505790b62fd0ebf36c84e14c843e12c50bb0f9074ff7ea562520b336bf58e2fc801aaf6a4f4ae29101f49eec486da884a21f634391cccc398f55c023cd9dc81f204b7f91722746b035d62c197a55ffbf80dc3152202ce97beee3479cc228f65dccf3578e736c4ec4f371552ae7ab6c7c22910453681c33bd47d15abc5940b58c8bc3abcae", 0xda, 0x7) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0)={r3, r2, 0x4, r2}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x11) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r0, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080)={'@\x00', 0x0, 0x6, 0x3, 0x7ff, 0x1, "ff0000c8e29b15e5a8c8c7ffff00", "0200", "020500", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff0200", "000000400300"]}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x800) r8 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000200)="01154e000100445588fb000088fb", 0xe, 0x804, &(0x7f0000000040)={0x11, 0xf8, r9, 0x0, 0x0, 0x0}, 0x14) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffe, 0x6, 0xaf, @scatter={0x2, 0x0, &(0x7f0000002300)=[{&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f0000001300)=""/4096, 0x1000}]}, &(0x7f0000000100)="1205b26291fe", 0x0, 0x1, 0x10, 0x3, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000009c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000840)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x35}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}}, &(0x7f00000008c0)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 55.574577102s ago: executing program 7 (id=1536): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x1f, '\x00', @st={0x4, [{0x0, @uvalue=0x8}, {0x3, @uvalue=0x3}, {0x1, @svalue=0xff}, {0x2, @uvalue=0x8d3c}]}, 0x4}, {0x39, '\x00', @buffer={"55eb476b13d85ef7a019aef895e9baae03d9401b33813c1f29bc0c0ac8383761", 0x20}, 0x5}, {0xf, '\x00', @data=0x81, 0x3}, {0x28}, {0x3c, '\x00', @data=0x8, 0x1}]}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000000900", "f4bd000000801900", [0x0, 0x31]}}) 55.479904681s ago: executing program 7 (id=1538): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ffffff0000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) 55.479657292s ago: executing program 7 (id=1539): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'pimreg0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e00010069703667726574617000000034000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r3, @ANYBLOB], 0x68}}, 0x0) (async, rerun: 64) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @local}, 0x14) (async, rerun: 64) r4 = getuid() (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x18, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@polexpire={0xcc, 0x1b, 0x300, 0x70bd2b, 0x25dfdbff, {{{@in=@local, @in=@rand_addr=0x64010100, 0x4e21, 0x3, 0x4e21, 0x0, 0xa, 0x80, 0x20, 0x0, r3, r4}, {0x6, 0x1, 0xffff, 0x8, 0x5, 0x5, 0x2}, {0x100000001, 0x9, 0x7ff, 0xc}, 0x5db4, 0x6e6bbd, 0x1}, 0xb8}, [@offload={0xc, 0x1c, {r5, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x28000014}, 0x90) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)=@deltaction={0x190, 0x31, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x33c0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2f}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6e6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbc000000}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) (async) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) syz_open_procfs(r7, &(0x7f0000000040)='auxv\x00') 55.33857066s ago: executing program 7 (id=1542): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0xe0) fcntl$notify(r0, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x1000000}}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) syz_clone(0x0, &(0x7f0000000380)="65743e74fc92a2c6f3856f6c7679c082fd4d64baebc84c8118d86cd89a62c6dc7f1b812d6fdf8e7898a6830186ed8e98ba49149529470c39120ccf5256113e8bd9109eccc584f6f5919cf1457854d62b14799a1f80fbb29135cf1d779220ac5e7e39388423aecdf90883552ab352e10a0776f90dd11c34864efc795fba12820917eabb67fd68cac5055bf842837617cf02869973291ac60028f45c7f4817720466e26148ae538f2154566c", 0xab, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="611442bf3c0785343c8b932ffd1c91b65f8c5413d4ec220ef57dffd790447b9238ebb338264dd9c7b0e8faf59a2576cee976a59a2e63a6cef67c4b43d93edab743978afd994b6f802955a78265c640430d686cd70fe7cceb773809459ec4757a8f7df3ade048c76fb8910d") r1 = open(&(0x7f0000000040)='./file0\x00', 0x10507e, 0xa6) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r1}]) prctl$PR_SVE_GET_VL(0x33, 0x172a4) 55.139525974s ago: executing program 7 (id=1544): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x4400, 0x0) setns(0xc9, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)="e9fd", 0x2}, 0x1, 0x0, 0x0, 0x40000dc}, 0x24004014) r3 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r3, 0x3) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='base=0x0 size=0x40000000 type=write-back\n\x00', 0x29) write(r1, &(0x7f0000000100)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) pwritev(r6, &(0x7f0000002180)=[{&(0x7f0000000b40)="35330fa233927534c65872ad16d4f5a4c5", 0x11}], 0x1, 0xe, 0x6) 54.43975384s ago: executing program 7 (id=1550): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0x1}, {0x16, 0x4, 0x6}]}) r0 = socket(0xa, 0x5, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async, rerun: 32) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000001800)={&(0x7f0000000340)={0xa, 0x4e22, 0x5, @local, 0x3}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000380)="517aa40182e6f15251efc8e6bfebbb9734c6b9bb541a06454115320b2fd19ce1a5557eb990f5d731e27d989e794432338b13f59c8c8d126f07d25f845b1ffedec79f921fb1b16d9c2b98c9030d154ce4fef51e7702c90bfd126d001f6ddf4503b30fd8aa066206f5f4de3be42b6d2ff52898aa7754ff3e0eb5f08c151a7c05", 0x7f}, {&(0x7f0000000440)="1b756d7deb4eb37fabf173b729b89332634069c7235f9db601712d7d4f28618e5437b7eee110c2960d708a4197a1cc95b059079f8c27c127bf5dc7e05cc058f0e699a5d007c61d94bfd49302ba1fc7b805f92edb3682ddeeb63cbf798b125f1dc3e16da3fcc8600d84bd2404485ac9e7f7fe69752f88b7febe02784a654f38ee91380e2c44408fdbb0b2defd964a32f1dbd720869ef469c582b7f5e0e4695af52a28d645eb5ff49c3f313227f2852f49d4d320d3864b5a1339aa6f4b4539a9332c5a0f45c07604ec913a5b56f928e83106ad6c2d7797f9704d306bbc4d3b21e51908ea4dedef54d29f63137e359e3f8627", 0xf1}, {&(0x7f0000000540)="b21f1abac23c2a48a97e8fd2fc1440756ec05752e88f954ac192c5e4ab4d057821c08ba489dc7303800e2e6f", 0x2c}, {&(0x7f0000000600)="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", 0x3dd}], 0x4, &(0x7f0000001780)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x67, 0x3, '\x00', [@enc_lim, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x1000}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x50}, 0x60000040) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000000)=0x8, 0x4) (async) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f00000000c0), 0x4) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) (async, rerun: 64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) (async, rerun: 64) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f00000001c0)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000042) 54.289708634s ago: executing program 38 (id=1550): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0x1}, {0x16, 0x4, 0x6}]}) r0 = socket(0xa, 0x5, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async, rerun: 32) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000001800)={&(0x7f0000000340)={0xa, 0x4e22, 0x5, @local, 0x3}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000380)="517aa40182e6f15251efc8e6bfebbb9734c6b9bb541a06454115320b2fd19ce1a5557eb990f5d731e27d989e794432338b13f59c8c8d126f07d25f845b1ffedec79f921fb1b16d9c2b98c9030d154ce4fef51e7702c90bfd126d001f6ddf4503b30fd8aa066206f5f4de3be42b6d2ff52898aa7754ff3e0eb5f08c151a7c05", 0x7f}, {&(0x7f0000000440)="1b756d7deb4eb37fabf173b729b89332634069c7235f9db601712d7d4f28618e5437b7eee110c2960d708a4197a1cc95b059079f8c27c127bf5dc7e05cc058f0e699a5d007c61d94bfd49302ba1fc7b805f92edb3682ddeeb63cbf798b125f1dc3e16da3fcc8600d84bd2404485ac9e7f7fe69752f88b7febe02784a654f38ee91380e2c44408fdbb0b2defd964a32f1dbd720869ef469c582b7f5e0e4695af52a28d645eb5ff49c3f313227f2852f49d4d320d3864b5a1339aa6f4b4539a9332c5a0f45c07604ec913a5b56f928e83106ad6c2d7797f9704d306bbc4d3b21e51908ea4dedef54d29f63137e359e3f8627", 0xf1}, {&(0x7f0000000540)="b21f1abac23c2a48a97e8fd2fc1440756ec05752e88f954ac192c5e4ab4d057821c08ba489dc7303800e2e6f", 0x2c}, {&(0x7f0000000600)="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", 0x3dd}], 0x4, &(0x7f0000001780)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x67, 0x3, '\x00', [@enc_lim, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x1000}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x50}, 0x60000040) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000000)=0x8, 0x4) (async) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f00000000c0), 0x4) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) (async, rerun: 64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) (async, rerun: 64) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f00000001c0)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000042) 51.530798263s ago: executing program 39 (id=1517): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000001040000000000000000791210000000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) pwrite64(r1, &(0x7f0000000400)="676f8d2b2a87c92bc1b8db00074390983fc892e546713392e3ed5d0721c6407f6eea167dc65f346b975dc6389de2c9b5beee992fdb0615a1cbf2635d63f50317a85fd67a3ac848ec2e7de6cae7a62540a23758e4d78505790b62fd0ebf36c84e14c843e12c50bb0f9074ff7ea562520b336bf58e2fc801aaf6a4f4ae29101f49eec486da884a21f634391cccc398f55c023cd9dc81f204b7f91722746b035d62c197a55ffbf80dc3152202ce97beee3479cc228f65dccf3578e736c4ec4f371552ae7ab6c7c22910453681c33bd47d15abc5940b58c8bc3abcae", 0xda, 0x7) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0)={r3, r2, 0x4, r2}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x11) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r0, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080)={'@\x00', 0x0, 0x6, 0x3, 0x7ff, 0x1, "ff0000c8e29b15e5a8c8c7ffff00", "0200", "020500", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff0200", "000000400300"]}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x800) r8 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000200)="01154e000100445588fb000088fb", 0xe, 0x804, &(0x7f0000000040)={0x11, 0xf8, r9, 0x0, 0x0, 0x0}, 0x14) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffe, 0x6, 0xaf, @scatter={0x2, 0x0, &(0x7f0000002300)=[{&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f0000001300)=""/4096, 0x1000}]}, &(0x7f0000000100)="1205b26291fe", 0x0, 0x1, 0x10, 0x3, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000009c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000840)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x35}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}}, &(0x7f00000008c0)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 14.179444981s ago: executing program 3 (id=2132): keyctl$set_reqkey_keyring(0xe, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5500000020007fafa72d13b2a4a2719302000000030b43026c26236925000400fe7f86dadbddc2806b367e0000bd2dca8a9848a3c728f1c46b7b31afdc1338d5090000007ba900005ae583de0da6d8319fd8af8400", 0x55}], 0x1}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000000)) write(r2, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x14, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffd}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x1, 0x400) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r4 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0x4) 14.120031808s ago: executing program 3 (id=2133): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0xaa, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 14.115338236s ago: executing program 3 (id=2135): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x1f, '\x00', @st={0x4, [{0x0, @uvalue=0x8}, {0x3, @uvalue=0x3}, {0x1, @svalue=0xff}, {0x2, @uvalue=0x8d3c}]}, 0x4}, {0x39, '\x00', @buffer={"55eb476b13d85ef7a019aef895e9baae03d9401b33813c1f29bc0c0ac8383761", 0x20}, 0x5}, {0xf, '\x00', @data=0x81, 0x3}, {0x28}, {0x3c, '\x00', @data=0x8, 0x1}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x804) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000000000000010", "f4bd000000801900", [0x0, 0x31]}}) 14.041381022s ago: executing program 3 (id=2138): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000006c0)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x57ff]}}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x293002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @broadcast}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000440)={'gretap0\x00', &(0x7f00000003c0)={'gretap0\x00', r2, 0x7f00, 0x10, 0x2, 0x1c6, {{0xc, 0x4, 0x0, 0x1, 0x30, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast1, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x1c, 0x96, 0x3, 0x1, [{@broadcast, 0x2}, {@local, 0x18000000}, {@remote, 0xd8fa}]}]}}}}}) syz_emit_ethernet(0x94, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000860000000000119078000000000000000000004e2200729078040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b6be521000000000000000024cac6af5777491726f8db7c84519de571787b86c22be830bff366d1aaf67f7cf6f12bd0a407d624be362ba286475bdf7122dcfd33ab8d6792d6f7393d9ea3dd91c7b633725d5cfe7e2032d869b189736c034f55366dc05b710f"], 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) preadv2(r0, &(0x7f0000001880)=[{&(0x7f0000000040)=""/239, 0xef}], 0x1, 0x8, 0x5, 0x10) syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000006c0)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x57ff]}}) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x293002, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @broadcast}, &(0x7f00000001c0)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000440)={'gretap0\x00', &(0x7f00000003c0)={'gretap0\x00', r2, 0x7f00, 0x10, 0x2, 0x1c6, {{0xc, 0x4, 0x0, 0x1, 0x30, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast1, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x1c, 0x96, 0x3, 0x1, [{@broadcast, 0x2}, {@local, 0x18000000}, {@remote, 0xd8fa}]}]}}}}}) (async) syz_emit_ethernet(0x94, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000860000000000119078000000000000000000004e2200729078040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b6be521000000000000000024cac6af5777491726f8db7c84519de571787b86c22be830bff366d1aaf67f7cf6f12bd0a407d624be362ba286475bdf7122dcfd33ab8d6792d6f7393d9ea3dd91c7b633725d5cfe7e2032d869b189736c034f55366dc05b710f"], 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) (async) preadv2(r0, &(0x7f0000001880)=[{&(0x7f0000000040)=""/239, 0xef}], 0x1, 0x8, 0x5, 0x10) (async) 13.863078602s ago: executing program 3 (id=2148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r0}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 13.530414275s ago: executing program 3 (id=2146): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x1f, '\x00', @st={0x4, [{0x0, @uvalue=0x8}, {0x3, @uvalue=0x3}, {0x1, @svalue=0xff}, {0x2, @uvalue=0x8d3c}]}, 0x4}, {0x39, '\x00', @buffer={"55eb476b13d85ef7a019aef895e9baae03d9401b33813c1f29bc0c0ac8383761", 0x20}, 0x5}, {0xf, '\x00', @data=0x81, 0x3}, {0x28}, {0x3c, '\x00', @data=0x8, 0x1}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x804) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000000000000000000fe", "f4bd000000801900", [0x0, 0x31]}}) 13.384164008s ago: executing program 40 (id=2146): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x1f, '\x00', @st={0x4, [{0x0, @uvalue=0x8}, {0x3, @uvalue=0x3}, {0x1, @svalue=0xff}, {0x2, @uvalue=0x8d3c}]}, 0x4}, {0x39, '\x00', @buffer={"55eb476b13d85ef7a019aef895e9baae03d9401b33813c1f29bc0c0ac8383761", 0x20}, 0x5}, {0xf, '\x00', @data=0x81, 0x3}, {0x28}, {0x3c, '\x00', @data=0x8, 0x1}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x804) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000000000000000000fe", "f4bd000000801900", [0x0, 0x31]}}) 1.879413552s ago: executing program 9 (id=2309): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001580), &(0x7f00000015c0)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) pwritev(r5, &(0x7f0000000480)=[{&(0x7f00000004c0)='\x00!', 0x2}], 0x1, 0x1000000, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(0x4) (async) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001580), &(0x7f00000015c0)=0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) (async) pwritev(r5, &(0x7f0000000480)=[{&(0x7f00000004c0)='\x00!', 0x2}], 0x1, 0x1000000, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async) 1.769470507s ago: executing program 9 (id=2311): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000700)={0x2, 0x4e24, @empty}, 0x10) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85a00000c}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000140)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xfd}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x640100fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x5d2c7973c7bf8b01}, 0x20000050) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x11ea, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) close_range(r2, r3, 0x0) listen(r1, 0x5) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r10, 0x89e6, &(0x7f0000000080)="d40bb37e4dc480560ac8a1d1a04e44bcc68ddb5b23a87dfc618c085b3e4ccb000b05df66f6fa26564e404f39d460b4a0f7dddc5d85ddc643ea9fc255776c6ee289c2d73cddb5e4d15f20ba157f81c8a1f94568f205d5") close_range(r11, 0xffffffffffffffff, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 1.768730805s ago: executing program 0 (id=2313): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r3, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r3, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000000)={{0x1, 0x8}, {0x5, 0x8}, 0xff, 0x1}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl(r4, 0x3b90, &(0x7f0000000000)='9') (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x15}, 0x20) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r9, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000000, 0x0, 0x0}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl(r10, 0x4048aecb, &(0x7f0000000400)="070000000000000001000000ffffffff00"/64) (async) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000300)="b8180000000f01c10f01d9c3", 0xc}], 0x1, 0x0, 0x0, 0x0) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r11, 0x3, 0x11, r10, 0x0) r12 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000cc0)={0x0, &(0x7f0000000880)=[@wr_drn={0x68, 0x20, {0x2}}, @uexit={0x0, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x2, 0x8bc}}, @wrmsr={0x65, 0x20, {0x20b}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x8000000, 0xb917}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xa5, 0x0, 0x1, 0x8}}, @nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0x962}}, @nested_create_vm={0x12d, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x3cad, 0x4}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18}, @wrmsr={0x65, 0x20, {0x1a0, 0x9}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xb5, 0x7, 0x8565, 0x3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x39, 0x100, 0xfff, 0x8}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0x8c64}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0xc5b2, 0x7, 0x6}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_load_syzos={0x136, 0xa0, {0x2, 0x7, [@nested_amd_set_intercept={0x181, 0x30, {0x0, 0xfffffffffffffff7, 0x2000000000000, 0x1}}, @nested_vmresume={0x130, 0x18, 0x1}, @wrmsr={0x65, 0x20, {0x3a6, 0x2e}}, @nested_vmresume={0x130, 0x18}]}}, @rdmsr={0x66, 0x18, {0xa72}}, @nested_create_vm={0x12d, 0x18, 0x1}, @code={0xa, 0x4c, {"f2adb9180200000f320f2224b903010040b8b65957a4ba000000000f306466410f38815f68660f5d02f2ac66ba4300ecf365410f0866b8e0008ed8"}}, @wr_drn={0x68, 0x20, {0x3}}, @wr_drn={0x68, 0x20, {0x1, 0xf0}}, @set_irq_handler={0xc8, 0x20, {0x7e, 0x2}}], 0x424}) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, r11, 0x3, 0x10, r12, 0x0) (async) r13 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x4b564d07, 0xec000000, 0xcd}]}) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x157}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x117}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x2ab}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008085) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) 1.70999493s ago: executing program 2 (id=2314): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1bf) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) name_to_handle_at(r0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)=@xfs={0x1c, 0x81, {0x7, 0xffff6727, 0xffffffffffffff5c, 0x80000001}}, &(0x7f0000000340), 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000011c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400b00}, [@IFLA_WEIGHT={0x8, 0xf, 0x81}]}, 0x28}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) (async) syz_usb_connect(0x5, 0x24, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x2, 0x40402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0x7c, 0x2, &(0x7f0000000040)={0x20, "1bf44f0d0000000000000000000047568375038923ec02b61472ceb17c66f71968"}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "02d4dc91e59cf600b3a79c970213ccf1"}, @NL80211_ATTR_PMKID={0x14, 0x55, "b2c541fd373f3885781dee994da0ffcc"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x19}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x20040080) (async) ioctl(r2, 0x400c4d02, &(0x7f0000000900)) 1.466222253s ago: executing program 9 (id=2316): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x3ff, 0x3, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x64, 0x0, 0xfd, 0x29, 0x0, @multicast1, @broadcast}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b2a, &(0x7f0000000040)) r2 = inotify_init1(0x800) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x20, r3, 0x3, 0x70bd27, 0x25dbdbfb, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004044) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0xc0000484) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.463753154s ago: executing program 9 (id=2317): r0 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000300000ad2e3a4edd60ca194d1c08e9f32b317d730d36dc927371e420db43d3e3d25aa4b942310adf37d060af9f52358b1feb250af3310d2713ca6f8d2d28d04451ebe859de43f649cd26f7eaa12a0f3ef9654c44d"]) (async) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000300000ad2e3a4edd60ca194d1c08e9f32b317d730d36dc927371e420db43d3e3d25aa4b942310adf37d060af9f52358b1feb250af3310d2713ca6f8d2d28d04451ebe859de43f649cd26f7eaa12a0f3ef9654c44d"]) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x4e210, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99143b1c872e"}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}]}, 0x48}}, 0x0) 1.46094619s ago: executing program 0 (id=2318): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(&(0x7f0000000240)='./file0\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20, 0x103) (async) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) mkdirat(r2, &(0x7f0000000140)='./file0\x00', 0x132) (async) openat$incfs(r2, &(0x7f0000000100)='.log\x00', 0x0, 0xb0) lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) 1.397916136s ago: executing program 0 (id=2320): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0x9, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x4b564d07, 0x0, 0x8f}]}) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f00000004c0)=0x8) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000240)=0x1d4) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x4, 0x0, 0x11, 0x4, 0xe, &(0x7f00000000c0)="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"}) ioctl$VT_WAITACTIVE(r0, 0x5607) 1.397097224s ago: executing program 9 (id=2322): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x400c4d09, &(0x7f0000000900)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/hibernate_compression_threads', 0x48a82, 0x0) read$FUSE(r2, &(0x7f0000001340)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x5}}, './proc/mtrr\x00'}) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000180)=0xa, 0x4) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r2, 0x1, 0x2000, 0x2000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x5, 0xfffff018}, {0x6, 0x0, 0x2}]}, 0x10) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) 1.300050896s ago: executing program 9 (id=2323): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, 0xfffffffffffffffe) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000008000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_XEN_HVM(r2, 0x4068aea3, &(0x7f0000000300)={0x26, 0x0, 0x50}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 969.522447ms ago: executing program 2 (id=2331): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@inode64}, {@inode32}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x36, 0x70, 0x25]}}, {@usrquota}, {@huge_within_size}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_gt={'euid>', r2}}, {@fsname={'fsname', 0x3d, '(-{]'}}, {@uid_gt={'uid>', r3}}]}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 818.806577ms ago: executing program 2 (id=2333): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x6, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x7f, r1}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r2, 0x0) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e", 0x2c}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_io_uring_setup(0x4ec5, &(0x7f0000000140)={0x0, 0xd210, 0x2, 0x3, 0x224}, &(0x7f0000000080), &(0x7f0000001040), &(0x7f0000000000)) 547.969392ms ago: executing program 2 (id=2337): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(r1, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) 468.594006ms ago: executing program 2 (id=2338): mq_open(&(0x7f0000000a80)='\'\xf5@$*\x00', 0x40, 0xb, &(0x7f0000000ac0)={0x8, 0xffff, 0x1, 0x6}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000100), &(0x7f00000001c0)=0x40) 468.252084ms ago: executing program 6 (id=2339): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x20, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @multicast1, 0x0, "2634784b05261d78b092012000", 0x0, 0xffffffff, 0x5, 0xf6}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@private, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000100)=0x3, 0x4) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 467.089423ms ago: executing program 2 (id=2340): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ppoll(&(0x7f0000000240)=[{r1}], 0x1, &(0x7f0000000340), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, 0x2}, @decrefs={0x40046307, 0x3}, @decrefs], 0xbe, 0x0, &(0x7f0000000180)="5157223e3daba6d4a045e760d40241ed546dd3c9297eac76d9972c663c90e3db1c2e0cbbbccf1dcd2742fd43c54b423b28063a67c49a512e34df1b48939ab967efaceea2f624f19513e5f2d5c515487511efc2ae8f90b0c6f43bec7e5b10955bbdb64ea275b1cd9aa3fec5c7c14e91852c2274346f1caf7b329322d75ee479d6b96df87bb85ac1cec0f52a084147bda9b4f4c65001d120c8b95c8188a43aabedfb72fae2bfc9eef03d3ad10a540c172f2ef0df89d56dbc4382753af5f5b2"}) r2 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x19}}, 0x58) sendmsg$nl_xfrm(r0, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000003fc0)={&(0x7f0000003f80)=@newspdinfo={0x14, 0x28, 0x1}, 0x14}}, 0x0) 399.628371ms ago: executing program 0 (id=2341): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) socket$inet6(0xa, 0x2, 0x0) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000080)=0x3) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000180)='y\x105\xfb\xf7u\x83%:Ml\x9a\x9a\xb8\xe0>(\x13A-\x9a=\xb4r\xf1\x12y\xec;\x90\x06\x7f@\xf4\xe0\xc2\xb9x\xa4\x98S7\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q\xcdO\xe3i\xbd\x01\x85\x0e\x19\xce\x82\xd52\x9e\x95\xa7xbh\xf6\xa4c\x8a\xa5,\xdd\x81Z\x04\xf5\xf9\xa1\xe1\xad\xc2`\xf15\xf2$\xf2\x1c\xb0\x87pI\xab.}W\xd3o\xd3n\x9d\xb3>r\x1c<\x1b\xa5\xe27\x9f\x10\xe5\\\x1d\xcd\x91i\xc4\xad\xeb\xe5h[\xf6_\xbeW\b1\x06V\x89\r\x19:S\xf4\x7f8\xcf\xe6\xe1Tl\x00{Z\xb1\x92?\xb2\xd8\xc0\xaf\x96\xff\xe4v\xe8\x04<\xa2\x91Y\xee\xd8Rr\xe1\xdb!Z\xda\x06\xd6\x02\xb4\xfb4\xbb;7\x94\xb6_\xda\x108\x86\xfa\x97\xc2,\x8c\xf4\xaf\xb9\xfd\x8d\xff(\xd3\xbc\xdf}:4\xb9\xa00?\xac\x86@\x87\xb9\x81\xeak\x8d\x8b>\x89I\x0e\xfa\xa7\x1c\xe9\xf1U\xfc=pm6\x10vk90\x99\x15\x96\xa3\xb8_\n\xd1K\xf7m\x1as\xbd\xc4\x19Q\xc2Ge\x0e$\xdd\xec\f:\\g\xc3RnC\xe4\xc1!\xae\xd9h\xa5\xe4K\xcf\xf3\xf7\xe5o\xae\xfa\xa8\xd90Kj\x12\xcd@W\xe5\xfat`\x83\xac\xc8\xc8\xf0\xf1)\xf6A\t\xdc\xbfQ\xa9\xaer\x1d\xa5fY\x9d{\xa6\xeb\xc0\v\\\xb5cv i\b\xfc\xb9\xaf\x1aA~2\xe7\xedj\x89\x1a\x9d\xef5n\x80\xbfu\xdbi\xc7\x9c\x17\xa7`\xf5\x01\xe1v\xb4\xd9\rn\xe1\x86A\x9b \'u\x05\xa6a3\x84z\x8e\xf1\xcd\xce\r\xf8Y3h\xd9\xed\xe8\xb5\x00\x8eCH\xf1\x00\xcfLo\x92y\xafg\xdf\xa8\x9e\xbb\xf0I5\xfb\x03\x18\xf0:\xff\xed\x02\x17\x84WSgi\xecJ\x82\xc9\xf3k\x8d\xf8\xfcE\xa9\xca\xafq\xe9\x9d^\xf2', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000080)=0x1) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r8, 0xc138fd06, &(0x7f0000000540)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001414110200000000ffdb4d72080001"], 0x18}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8de}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfab0}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x4) 399.352797ms ago: executing program 6 (id=2342): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0xa0100, 0x0) r1 = creat(&(0x7f0000000100)='./config\x00', 0x46) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {r2, 0xee00}}, './config\x00'}) symlinkat(0x0, 0xffffffffffffff9c, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') read$msr(r3, &(0x7f0000000180)=""/174, 0xae) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x200) 319.057044ms ago: executing program 6 (id=2343): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000), 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x10, 0x7800, 0x7f, 0x9, {{0x1f, 0x4, 0x3, 0x39, 0x7c, 0x65, 0x0, 0x5, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x54, 0x74, 0x3, 0x1, [{@multicast1, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@local, 0x2}, {@broadcast, 0xffffffff}, {@empty, 0x9}, {@remote, 0x6687}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x2}, {@empty, 0xb}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x2}]}, @ssrr={0x89, 0x7, 0xcd, [@rand_addr=0x64010102]}, @generic={0x94, 0x2}, @generic={0x86, 0xa, "446c69d930717fe2"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000080)="62d74daf41b3906a0cedeb035cf597eb7210e2bf5eb25369a0d05f2c7b52ef4de35398186234c3e95235781eec8e1b8d7249fc10661d672e84a9384c35c868", 0x3f}, {&(0x7f00000000c0)="dff0a84ace14e6f0100db5600f33ddf4333e3ae7fff945a745244b4fd3090e4f40d6ed28f759f76a628b85c8e4763761d17966ec49c3783b8ff088485c4774a86d9d4ee4a756d0835e96283ea3167944789091dae20771cbdf299173ddfb183ded0c95250e96f34e8f9c7a", 0x6b}, {&(0x7f0000000140)="fd901f4c56a62970a1e9b31c810b04c5dfba20615675c6a1724de615705283129f5507f90bf13bc84a6ce37fa222707a5816d43c0bf3d826982da3f226593c82e765d8386244bb8453acf25493e3ef32dcc70facb938d0afbc12332530b404ad", 0x60}, {&(0x7f00000001c0)="d72ea7dcf53453ca8acae04b7951cdac7a1c90a65eb0309d646ec2f8ab67b0924227868ff490da79741c06a1e752eb54486653e70391e92e68184813c91325c426313ed78063c5830fe32dd83b70e9b05b62a4e22d2dd8d944cbec302b484bbdd8", 0x61}, {&(0x7f0000000240)="66a6a6c64423f6fa0e0530bc368bf528ed14184cb00e4dcb56aead07a1e07135e11a383877c03665a5d3ff53ff8d03e0c7aae89765325217a85834836c36b3c3474b9fdb", 0x44}, {&(0x7f00000002c0)="64ebf4b10829d37cad4f1048d33b08476aafb30e613b0576b9af311680088c3aed2bf60ab6045761545994a242f788d71879839d7277e2c8b4da750f03729822484345b13e6577cac247a189c3e90d46031552", 0x53}, {&(0x7f0000000340)="4bcedf031be533549043b8c8f73e59131edb0bb74a6e4d3b41b0b7418d09a9dcaaabde1f5c8707dbc90894", 0x2b}, {&(0x7f0000000380)="e34f6a29bcb6e3f17421a903432f8118a98770a2c793a8bb0b7547c38875a160d405d9c2a9e36e4fc8df047b184a4c53a80f0db50d82fe8d045596ba3a137ee0631f0df8d3979b1ec4b3d23f846d5701402353f224ac964d658279764b13c18d9db0ecae851cd12a46edd7d0694399063d8ee78cfc256eef0de2b4065b25f8980b71952d0cbbb2ae2b60980bc99b4cc52b6f151c40268a9f395b83648fde5821abaf1fadcd893290aca847305066706f9a48df3968c62573ccd36b65d331b670a9089cf05fa82805ac7e", 0xca}, {&(0x7f0000000480)="46d465fe940ba03a643055a645f5120be3cf728d79a11270525101faa4a61455581dfe37650559a456242eedf05db22b0f576246b4cf82d1764dff7a2d34068b7ca88f03469425ad1062d5450704993620f790c563c0415183a5dce03c294b71e825033703acb5b8de3738da92c050f56a18f9cec5a0b414beb39bf173178e66a2c4", 0x82}], 0x9, &(0x7f0000000740)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x688}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010102, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0xa0}, 0x40000) (async) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x95}, 0x20044801) (async) r6 = fanotify_init(0x0, 0x800) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000a00)=0x2) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000a40)={0x9, 0x0, 0x634f, 0x2, 'syz0\x00', 0x81}) (async) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000ac0), r3) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r7, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) syncfs(r0) mount(&(0x7f0000000bc0)=@rnullb, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='jfs\x00', 0x4040, &(0x7f0000000c80)='syz0\x00') sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000050) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000dc0)={{0x2, 0x4e24, @private=0xa010102}, {0x306, @random="752b2468a2ca"}, 0x60, {0x2, 0x4e23, @multicast2}, 'vlan0\x00'}) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000e40)={0x1, 0x1, 0x1, 0x2}, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r3) sendmsg$L2TP_CMD_NOOP(r8, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x48, r9, 0x600, 0x70bd2b, 0x7, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x35d}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x10}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x90800) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) (async) r10 = syz_genetlink_get_family_id$team(&(0x7f0000001180), r8) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x304008}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x90, r10, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x45}, 0x810) r11 = socket(0x2a, 0x6, 0x8) (async) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r12, 0x10, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x800) (async) close(r11) 318.812909ms ago: executing program 6 (id=2344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) 199.345643ms ago: executing program 6 (id=2345): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) write$P9_RREADDIR(r0, &(0x7f0000000080)={0x6f, 0x29, 0x2, {0x6, [{{0x4, 0x3, 0x8}, 0x10001, 0x4, 0xa, './mnt/test'}, {{0x4, 0x1, 0x4}, 0xba, 0x7f, 0xd, './dev/urandom'}, {{0x20, 0x2, 0x8}, 0x401, 0x7, 0x5, './mnt'}]}}, 0x6f) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) (async, rerun: 64) unlinkat(0xffffffffffffff9c, 0x0, 0x0) (rerun: 64) 199.038725ms ago: executing program 0 (id=2346): r0 = inotify_init() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x15, 0x2c}, {0x5000, 0x2000, 0xe, 0x0, 0x40, 0x5, 0x6d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x7, 0x9, 0x11, 0xa7, 0x4, 0x81}, {0x80a0000, 0xeeee0000, 0xe, 0x1, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xd000, 0xb, 0x3, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdf, 0x8b}, {0x1000, 0x100000, 0xc, 0xc, 0xb1, 0x8, 0x21, 0xa0, 0x82, 0x3, 0x1}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x1, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0x10, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x80a0000, 0x1000}, {0x3000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x2d01, 0x3000, [0xaffe, 0x4, 0x80, 0xfff]}) close_range(r0, 0xffffffffffffffff, 0x0) 89.832523ms ago: executing program 6 (id=2347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x121800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x3, 0x0, 0x2004cb, 0xffffffffeffffffe, 0x4, 0x9, 0x4, 0x0, 0x3, 0x2, 0x7fffffff], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x0, 0x8, 0x10, 0x0, 0x2, 0x0, 0x8, 0x9, 0xf}, {0x80a0000, 0x0, 0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x7}, {0xe000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfc}, {0xe000, 0xf000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0x3}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0xe, 0x8, 0x0, 0x2, 0x0, 0x3d, 0x83}, {0x0, 0x60000, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0xd000, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x2, 0x2000, 0x0, 0x0, 0x0, 0x1, 0xfd, 0xca, 0x26, 0x0, 0x0, 0xfd}, {0x80a0000}, {0x7000, 0x9fa}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x40, 0x5, 0xa, '\x00', 0x3ff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x8c01, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x40000) 0s ago: executing program 0 (id=2348): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x1f, '\x00', @st={0x4, [{0x0, @uvalue=0x8}, {0x3, @uvalue=0x3}, {0x1, @svalue=0xff}, {0x2, @uvalue=0x8d3c}]}, 0x4}, {0x39, '\x00', @buffer={"55eb476b13d85ef7a019aef895e9baae03d9401b33813c1f29bc0c0ac8383761", 0x20}, 0x5}, {0xf, '\x00', @data=0x81, 0x3}, {0x28}, {0x3c, '\x00', @data=0x8, 0x1}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x804) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000ffee00", "f4bd000000801900", [0x0, 0x31]}}) 0s ago: executing program 0 (id=2349): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='44100,48000,88200,960400,19200 ,3', 0x21) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000640)='usbip-vudc.0', 0xc) kernel console output (not intermixed with test programs): 6081 - 0 [ 312.052428][ T5806] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.064004][ T8884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.067392][ T8884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.078232][ T5835] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 312.110690][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.112670][T12271] loop5: detected capacity change from 0 to 7 [ 312.113129][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.118907][T12271] Dev loop5: unable to read RDB block 7 [ 312.120738][T12271] loop5: unable to read partition table [ 312.123206][T12271] loop5: partition table beyond EOD, truncated [ 312.129847][T12271] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 312.164948][T12275] Invalid source name [ 312.166678][T12275] UBIFS error (pid: 12275): cannot open "/dev/sg0", error -22 [ 312.241058][ T5835] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.256118][ T5835] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.259662][ T5835] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 312.263626][ T5835] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.264652][ T1219] Bluetooth: (null): Too short H5 packet [ 312.266378][ T5835] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.273225][ T5835] usb 11-1: config 0 descriptor?? [ 312.280291][ T1219] Bluetooth: (null): Invalid header checksum [ 312.426880][T12308] loop5: detected capacity change from 0 to 7 [ 312.435692][T12308] Dev loop5: unable to read RDB block 7 [ 312.437618][T12308] loop5: unable to read partition table [ 312.439512][T12308] loop5: partition table beyond EOD, truncated [ 312.445158][T12308] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 312.455446][T12310] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1626'. [ 312.685954][ T5835] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.693844][ T5835] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.696355][ T5835] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.699460][ T5835] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.703387][ T5835] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.709934][ T5835] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.712331][ T5835] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.714478][ T5835] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.716798][ T5835] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.719914][ T5835] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 312.736712][ T5835] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 312.780637][T12348] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1635'. [ 312.792854][T12348] 8021q: adding VLAN 0 to HW filter on device bond3 [ 312.807137][T12348] bond3: (slave hsr0): The slave device specified does not support setting the MAC address [ 312.815349][T12348] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 312.823945][T12348] bond3: (slave hsr0): Error -22 calling dev_set_mtu [ 312.885423][T12247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.888284][T12247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.977606][ T64] Bluetooth: hci0: command tx timeout [ 313.026847][T12371] loop5: detected capacity change from 0 to 7 [ 313.030874][T12371] Dev loop5: unable to read RDB block 7 [ 313.038544][T12371] loop5: unable to read partition table [ 313.041414][T12371] loop5: partition table beyond EOD, truncated [ 313.052315][T12371] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 313.122619][T12377] binder: 12376:12377 ioctl c0306201 200000000040 returned -11 [ 313.317630][T12391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.413431][T12390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64771 sclass=netlink_route_socket pid=12390 comm=syz.0.1641 [ 313.430098][T12397] syzkaller0: entered promiscuous mode [ 313.431882][T12397] syzkaller0: entered allmulticast mode [ 313.438756][T12390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12390 comm=syz.0.1641 [ 313.566682][ T9] usb 11-1: USB disconnect, device number 4 [ 313.709509][ T64] Bluetooth: hci2: command tx timeout [ 313.744714][T12421] netlink: 216 bytes leftover after parsing attributes in process `syz.9.1645'. [ 313.755419][T12419] jffs2: notice: (12419) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 313.759820][T12409] XFS (nbd9): SB validate failed with error -5. [ 313.766686][T12419] jffs2 filesystem being mounted at /92/mnt supports timestamps until 2106-02-07 (0xffffffff) [ 313.811930][T12419] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1647'. [ 313.943488][T12429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=12429 comm=syz.6.1649 [ 313.969092][T12435] loop6: detected capacity change from 0 to 2640 [ 313.981652][T11824] buffer_io_error: 321 callbacks suppressed [ 313.981664][T11824] Buffer I/O error on dev loop6, logical block 0, async page read [ 313.992544][T11824] Buffer I/O error on dev loop6, logical block 0, async page read [ 313.997864][T11824] Buffer I/O error on dev loop6, logical block 0, async page read [ 314.001601][T11824] Buffer I/O error on dev loop6, logical block 0, async page read [ 314.005555][T11824] Buffer I/O error on dev loop6, logical block 0, async page read [ 314.227912][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 314.265056][T12469] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1655'. [ 314.284609][T12464] Bluetooth: MGMT ver 1.23 [ 314.309643][T12475] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 314.346141][T12481] sit0: entered promiscuous mode [ 314.355647][T12481] netlink: 'syz.9.1659': attribute type 1 has an invalid length. [ 314.359598][T12481] netlink: 1 bytes leftover after parsing attributes in process `syz.9.1659'. [ 314.379289][ T9] usb 5-1: config index 0 descriptor too short (expected 192, got 36) [ 314.382031][ T9] usb 5-1: config 0 has too many interfaces: 95, using maximum allowed: 32 [ 314.391404][ T9] usb 5-1: config 0 has an invalid descriptor of length 199, skipping remainder of the config [ 314.401502][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 95 [ 314.406861][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 314.413071][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.432558][T12487] /dev/nullb0: Can't open blockdev [ 314.436865][ T9] usb 5-1: config 0 descriptor?? [ 314.470158][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1659'. [ 314.517611][T12492] gfs2: error -5 reading superblock [ 314.548224][T12494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=12494 comm=syz.9.1662 [ 314.654811][T12433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.655377][T12499] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1664'. [ 314.666000][T12433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.672929][ T64] Bluetooth: hci0: Unknown advertising packet type: 0x30 [ 314.673308][ T64] Bluetooth: hci0: Malformed LE Event: 0x0d [ 314.676970][T11172] usb 5-1: USB disconnect, device number 2 [ 314.746465][T12507] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 314.750615][T12507] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.1668'. [ 314.795588][T12514] 9p filesystem being mounted at /104/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 315.058729][ T73] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 315.210616][ T73] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 315.214688][ T73] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 315.218819][ T73] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 315.222895][ T73] usb 14-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 315.226741][ T73] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.236024][T12516] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 315.243541][ T73] cyberjack 14-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 315.271595][ T73] usb 14-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 315.382133][ T42] kauditd_printk_skb: 93 callbacks suppressed [ 315.382145][ T42] audit: type=1400 audit(5358345159.336:22461): avc: denied { write } for pid=12532 comm="syz.6.1675" name="functions" dev="configfs" ino=28940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 315.442834][T12516] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1671'. [ 315.455955][ T2318] usb 14-1: USB disconnect, device number 4 [ 315.469315][ T2318] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 315.472787][ T2318] cyberjack 14-1:1.0: device disconnected [ 315.548128][T11172] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 315.627901][T12540] netlink: 'syz.6.1676': attribute type 26 has an invalid length. [ 315.708533][T11172] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 315.712393][T11172] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 315.716427][T11172] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.723411][T11172] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 315.726969][T11172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.730752][T11172] usb 5-1: Product: syz [ 315.733745][T11172] usb 5-1: Manufacturer: syz [ 315.735547][T11172] usb 5-1: SerialNumber: syz [ 315.751380][ T42] audit: type=1400 audit(5358345159.706:22462): avc: denied { read write } for pid=12547 comm="syz.3.1679" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 315.762522][ T42] audit: type=1400 audit(5358345159.716:22463): avc: denied { open } for pid=12547 comm="syz.3.1679" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 315.782204][T11172] hub 5-1:1.0: bad descriptor, ignoring hub [ 315.784641][T11172] hub 5-1:1.0: probe with driver hub failed with error -5 [ 315.788019][ T64] Bluetooth: hci2: command tx timeout [ 315.839623][T12548] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 315.842052][T12548] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 315.854606][T12548] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 315.860744][T12548] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 315.864112][T12548] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 315.868051][T12548] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 315.871884][T12548] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 315.873833][T12548] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 315.877258][T12548] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 315.886830][T12548] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 315.889048][T12548] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 315.895150][T12548] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 315.979137][T11172] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 316.020380][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.023703][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.128333][T12558] 8021q: adding VLAN 0 to HW filter on device bond4 [ 316.139187][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1681'. [ 316.142770][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1681'. [ 316.153904][T12558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.158818][T12558] bond4: (slave bond0): making interface the new active one [ 316.162724][T12558] bond4: (slave bond0): Enslaving as an active interface with an up link [ 316.183915][ T42] audit: type=1400 audit(5358345160.136:22464): avc: denied { read write } for pid=12528 comm="syz.0.1674" name="lp0" dev="devtmpfs" ino=3098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 316.195947][ T42] audit: type=1400 audit(5358345160.136:22465): avc: denied { open } for pid=12528 comm="syz.0.1674" path="/dev/usb/lp0" dev="devtmpfs" ino=3098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 316.223038][ T42] audit: type=1400 audit(5358345160.176:22466): avc: denied { watch } for pid=12561 comm="syz.9.1682" path="/115/file0" dev="tmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 316.301417][T11172] usb 5-1: USB disconnect, device number 3 [ 316.315358][T11172] usblp0: removed [ 316.408989][T12569] loop5: detected capacity change from 0 to 7 [ 316.412403][T12569] Dev loop5: unable to read RDB block 7 [ 316.414484][T12569] loop5: unable to read partition table [ 316.416344][T12569] loop5: partition table beyond EOD, truncated [ 316.420582][T12569] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 316.620375][ T42] audit: type=1400 audit(5358345160.576:22467): avc: denied { create } for pid=12582 comm="syz.6.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 316.636229][ T42] audit: type=1400 audit(5358345160.576:22468): avc: denied { setopt } for pid=12582 comm="syz.6.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 316.673936][ T42] audit: type=1400 audit(5358345160.626:22469): avc: denied { read } for pid=12582 comm="syz.6.1687" name="file0" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 316.687694][T12583] IPVS: set_ctl: invalid protocol: 12078 115.0.0.0:0 [ 316.690118][ T42] audit: type=1400 audit(5358345160.626:22470): avc: denied { open } for pid=12582 comm="syz.6.1687" path="/110/file0" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 316.791868][T12588] xt_SECMARK: invalid mode: 2 [ 316.911496][T12600] loop5: detected capacity change from 0 to 7 [ 316.915542][T12600] Dev loop5: unable to read RDB block 7 [ 316.919942][T12600] loop5: unable to read partition table [ 316.922235][T12600] loop5: partition table beyond EOD, truncated [ 316.927509][T12600] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 317.110977][T12610] netlink: 'syz.6.1697': attribute type 3 has an invalid length. [ 317.351691][T12626] netlink: 'syz.9.1702': attribute type 12 has an invalid length. [ 317.357009][T12628] netlink: 'syz.6.1701': attribute type 11 has an invalid length. [ 317.373285][T12628] netlink: 'syz.6.1701': attribute type 11 has an invalid length. [ 317.381497][T10970] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.387904][T10970] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.402554][T12628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.407871][ T5779] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.412611][ T5779] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.502027][T12644] geneve0: entered promiscuous mode [ 317.555273][T12646] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.560805][T12646] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.809818][T12664] openvswitch: netlink: IP tunnel dst address not specified [ 317.832119][T12662] kvm: kvm [12661]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 317.845400][T12662] kvm: kvm [12661]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 317.858569][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 317.947936][ T5730] Bluetooth: hci0: command 0x0c1a tx timeout [ 317.948436][ T5741] Bluetooth: hci5: command 0x0c1a tx timeout [ 317.951046][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 318.237062][T12678] netlink: 'syz.9.1717': attribute type 1 has an invalid length. [ 318.274030][T12681] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 318.290585][ T64] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 318.305714][T12678] bond5: entered promiscuous mode [ 318.311828][T12678] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.330739][T12684] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 318.339844][T12684] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 318.343128][T12684] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 318.349533][T12684] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 318.381891][T12678] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 318.386080][T12678] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 318.393087][T12678] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 318.555589][T12696] vhci_hcd: not connected 4 [ 318.634848][T12702] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(526338.16.0), cmd(17) [ 318.643115][T12698] comedi comedi2: comedi_config --init_data is deprecated [ 319.046394][T12720] loop5: detected capacity change from 0 to 7 [ 319.050253][T12720] Dev loop5: unable to read RDB block 7 [ 319.053553][T12720] loop5: AHDI p2 [ 319.054778][T12720] loop5: partition table partially beyond EOD, truncated [ 319.187165][T12735] __nla_validate_parse: 21 callbacks suppressed [ 319.187178][T12735] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1736'. [ 319.241673][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1737'. [ 319.294488][T12735] qnx6: unable to set blocksize [ 319.395622][T12748] loop5: detected capacity change from 0 to 7 [ 319.400950][T12748] Dev loop5: unable to read RDB block 7 [ 319.403301][T12748] loop5: unable to read partition table [ 319.405790][T12748] loop5: partition table beyond EOD, truncated [ 319.408356][T12748] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 319.449148][T12752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1743'. [ 319.506473][T12751] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 319.514828][T12751] bond6 (unregistering): Released all slaves [ 319.613402][T12767] Invalid logical block size (-1) [ 319.762920][T12771] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 319.765712][T12771] CIFS: VFS: Malformed UNC in devname [ 319.787723][ T9] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 319.923889][T12792] loop5: detected capacity change from 0 to 7 [ 319.926800][T12792] Dev loop5: unable to read RDB block 7 [ 319.928892][T12792] loop5: AHDI p2 [ 319.930422][T12792] loop5: partition table partially beyond EOD, truncated [ 319.938995][ T9] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 319.942296][ T9] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 319.945429][ T9] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.948452][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 319.952140][ T9] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 319.959035][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.963746][ T9] usb 11-1: Product: syz [ 319.965092][ T9] usb 11-1: Manufacturer: syz [ 319.970514][ T9] usb 11-1: SerialNumber: syz [ 319.980742][ T9] hub 11-1:1.0: bad descriptor, ignoring hub [ 319.984477][ T9] hub 11-1:1.0: probe with driver hub failed with error -5 [ 320.017709][ T64] Bluetooth: hci5: command 0x0c1a tx timeout [ 320.017831][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 320.054121][ T5828] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.153945][ T5828] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.180218][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.186560][ T9] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 320.189412][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.199265][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.204149][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.206660][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.241370][T11172] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 320.242638][ T5828] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.351412][ T5828] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.406329][T11172] usb 14-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 320.410587][T11172] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 320.413734][T11172] usb 14-1: Product: syz [ 320.415339][T11172] usb 14-1: Manufacturer: syz [ 320.417144][T11172] usb 14-1: SerialNumber: syz [ 320.430041][T11172] usb 14-1: config 0 descriptor?? [ 320.446902][T11172] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 320.454850][T11172] dvb-usb: bulk message failed: -22 (2/0) [ 320.484096][T11172] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 320.492386][T11172] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 320.498431][ T50] usb 11-1: USB disconnect, device number 5 [ 320.515157][T11172] usb 14-1: media controller created [ 320.535104][T11172] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.542848][ T50] usblp0: removed [ 320.641369][T12798] dvb-usb: bulk message failed: -22 (5/0) [ 320.654190][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 320.654206][ T42] audit: type=1400 audit(5358345164.606:22502): avc: denied { append } for pid=12797 comm="syz.9.1754" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 320.658189][ T5828] bridge_slave_1: left allmulticast mode [ 320.667366][T11172] cxusb: set interface failed [ 320.667543][ T5828] bridge_slave_1: left promiscuous mode [ 320.669222][T11172] dvb-usb: bulk message failed: -22 (1/0) [ 320.671680][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.673587][ T42] audit: type=1400 audit(5358345164.606:22503): avc: denied { open } for pid=12797 comm="syz.9.1754" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 320.673628][ T42] audit: type=1400 audit(5358345164.606:22504): avc: denied { ioctl } for pid=12797 comm="syz.9.1754" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 320.699857][T11172] DVB: Unable to find symbol mt352_attach() [ 320.708224][T11172] dvb-usb: bulk message failed: -22 (5/0) [ 320.716899][T11172] zl10353_read_register: readreg error (reg=127, ret==-121) [ 320.719179][ T5828] bridge_slave_0: left allmulticast mode [ 320.719203][ T5828] bridge_slave_0: left promiscuous mode [ 320.719953][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.722124][T11172] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 320.787531][T11172] rc_core: IR keymap rc-dvico-mce not found [ 320.790743][T11172] Registered IR keymap rc-empty [ 320.794829][T11172] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0 [ 320.801935][T11172] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0/input8 [ 320.840713][T11172] dvb-usb: schedule remote query interval to 100 msecs. [ 320.843873][T11172] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 320.852146][T12823] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 320.852901][T11172] usb 14-1: USB disconnect, device number 5 [ 320.984877][T12825] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1759'. [ 321.040542][ T5828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.043260][T11172] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 321.072104][ T5828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.082140][ T5828] bond0 (unregistering): Released all slaves [ 321.266754][ T42] audit: type=1400 audit(5358345165.216:22505): avc: denied { write } for pid=12836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.324207][ T42] audit: type=1400 audit(5358345165.276:22506): avc: denied { write } for pid=12845 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.360074][ T41] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 321.383206][ T5438] 8021q: adding VLAN 0 to HW filter on device eth6 [ 321.386223][T12850] loop5: detected capacity change from 0 to 7 [ 321.390027][T12850] Dev loop5: unable to read RDB block 7 [ 321.391884][T12850] loop5: AHDI p2 [ 321.393167][T12850] loop5: partition table partially beyond EOD, truncated [ 321.485649][T12858] loop5: detected capacity change from 0 to 7 [ 321.504709][T12858] Dev loop5: unable to read RDB block 7 [ 321.507019][T12858] loop5: unable to read partition table [ 321.510348][T12858] loop5: partition table beyond EOD, truncated [ 321.512908][T12858] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 321.526639][T12801] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.530390][T12801] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.533471][ T41] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 321.538789][ T41] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 321.538957][T12801] bridge_slave_0: entered allmulticast mode [ 321.544793][ T41] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.549723][ T41] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 321.549959][T12801] bridge_slave_0: entered promiscuous mode [ 321.554718][ T41] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 321.566410][T12801] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.568866][T12801] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.570088][ T41] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 321.571316][T12801] bridge_slave_1: entered allmulticast mode [ 321.575674][ T41] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 321.577394][T12801] bridge_slave_1: entered promiscuous mode [ 321.581705][ T41] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.587769][ T41] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 321.592385][ T41] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 321.597394][ T41] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 321.599976][ T41] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 321.603304][ T41] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 321.606911][ T41] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 321.610465][ T41] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 321.610520][ T5828] hsr_slave_0: left promiscuous mode [ 321.616705][ T41] usb 11-1: string descriptor 0 read error: -22 [ 321.619782][ T41] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 321.619809][ T5828] hsr_slave_1: left promiscuous mode [ 321.623178][ T42] audit: type=1400 audit(5358345165.576:22507): avc: denied { shutdown } for pid=12859 comm="syz.9.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 321.630876][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.632897][ T41] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.642926][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.652201][ T41] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 321.655434][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.655456][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.683563][ T5828] veth1_macvtap: left promiscuous mode [ 321.690525][ T5828] veth0_macvtap: left promiscuous mode [ 321.695465][ T5828] veth1_vlan: left promiscuous mode [ 321.700337][ T5828] veth0_vlan: left promiscuous mode [ 321.849475][T12864] SELinux: failed to load policy [ 321.864494][ T41] usb 11-1: USB disconnect, device number 6 [ 321.976153][ T5828] team0 (unregistering): Port device team_slave_1 removed [ 321.994729][ T5828] team0 (unregistering): Port device team_slave_0 removed [ 322.017786][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 322.097594][ T64] Bluetooth: hci5: command 0x0c1a tx timeout [ 322.099566][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 322.108862][T12801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.121704][T12801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.149544][T12801] team0: Port device team_slave_0 added [ 322.154579][T12801] team0: Port device team_slave_1 added [ 322.184114][T12874] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 322.184384][ T42] audit: type=1400 audit(5358345166.136:22508): avc: denied { write } for pid=12872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.188006][T12874] bond1: entered allmulticast mode [ 322.219131][T12801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.225330][T12801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.238079][T12801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.249012][T12874] ip6erspan0: entered promiscuous mode [ 322.252695][T12801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.255310][T12801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.263394][T12801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.265567][ T42] audit: type=1400 audit(5358345166.216:22509): avc: denied { write } for pid=12878 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.272402][ T5741] Bluetooth: hci0: command tx timeout [ 322.293504][T12801] hsr_slave_0: entered promiscuous mode [ 322.295880][T12801] hsr_slave_1: entered promiscuous mode [ 322.298617][T12801] debugfs: 'hsr0' already exists in 'hsr' [ 322.300479][T12801] Cannot create hsr debugfs directory [ 322.324321][ T5438] 8021q: adding VLAN 0 to HW filter on device eth7 [ 322.484829][ T42] audit: type=1400 audit(5358345166.436:22510): avc: denied { write } for pid=12885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.555340][ T42] audit: type=1400 audit(5358345166.506:22511): avc: denied { write } for pid=12890 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.565949][T12892] netlink: 108 bytes leftover after parsing attributes in process `syz.9.1772'. [ 322.584146][T12892] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1772'. [ 322.631041][ T5438] 8021q: adding VLAN 0 to HW filter on device eth8 [ 322.722005][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 322.876473][T12910] netlink: 'syz.6.1775': attribute type 13 has an invalid length. [ 322.886844][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1775'. [ 323.007783][T12925] openvswitch: netlink: IP tunnel TTL not specified. [ 323.089528][T12932] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 323.162228][ T5741] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 323.291516][T12951] netlink: 'syz.3.1785': attribute type 1 has an invalid length. [ 323.350017][T12957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1785'. [ 323.365624][T12959] loop5: detected capacity change from 0 to 7 [ 323.376439][T12959] Dev loop5: unable to read RDB block 7 [ 323.379695][T12951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 323.386966][T12959] loop5: unable to read partition table [ 323.390397][T12954] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1786'. [ 323.391920][T12951] : renamed from dummy0 (while UP) [ 323.395174][T12959] loop5: partition table beyond EOD, truncated [ 323.401860][T12959] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 323.428042][T12954] fuse: Unknown parameter '0x0000000000000007' [ 323.463414][T12801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.478641][T12801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.483473][T12801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.512193][T12801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.517277][T12801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.525396][T12801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 323.529514][T12801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.536202][T12801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 323.551314][T12971] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 323.632009][T12801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.657196][T12801] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.668137][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.670974][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.693473][ T1219] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.696002][ T1219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.737276][T12962] tipc: Enabling of bearer rejected, failed to enable media [ 323.786365][T12992] overlayfs: overlapping lowerdir path [ 323.791386][T12998] overlayfs: overlapping lowerdir path [ 323.970878][T12801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.008246][T12801] veth0_vlan: entered promiscuous mode [ 324.014382][T12801] veth1_vlan: entered promiscuous mode [ 324.032520][T12801] veth0_macvtap: entered promiscuous mode [ 324.038064][T12801] veth1_macvtap: entered promiscuous mode [ 324.047154][T12801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.062399][T12801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.090168][T10762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.105583][T10762] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.138931][ T5878] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 324.177876][T10762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.180734][ T6920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.181064][T10762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.191160][ T6920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.229690][ T6920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.233626][ T6920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.268573][ T5878] usb 8-1: device descriptor read/64, error -71 [ 324.341635][ T5741] Bluetooth: hci0: command tx timeout [ 324.348080][T13010] dvmrp0: entered allmulticast mode [ 324.470159][T13021] loop5: detected capacity change from 0 to 7 [ 324.472977][T13021] Dev loop5: unable to read RDB block 7 [ 324.475098][T13021] loop5: unable to read partition table [ 324.482294][T13024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1797'. [ 324.498364][T13021] loop5: partition table beyond EOD, truncated [ 324.503841][T13021] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 324.517787][ T5878] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 324.560272][T13031] loop5: detected capacity change from 0 to 7 [ 324.562743][T13031] Dev loop5: unable to read RDB block 7 [ 324.564533][T13031] loop5: AHDI p2 [ 324.565758][T13031] loop5: partition table partially beyond EOD, truncated [ 324.659498][ T5878] usb 8-1: device descriptor read/64, error -71 [ 324.683504][T13046] /dev/sg0: Can't lookup blockdev [ 324.778343][ T5878] usb usb8-port1: attempt power cycle [ 324.970403][T13078] loop5: detected capacity change from 0 to 7 [ 324.976850][T13078] Dev loop5: unable to read RDB block 7 [ 324.981644][T13078] loop5: unable to read partition table [ 324.984097][T13078] loop5: partition table beyond EOD, truncated [ 324.991316][T13078] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 325.060286][T13083] loop5: detected capacity change from 0 to 7 [ 325.062730][T13083] Dev loop5: unable to read RDB block 7 [ 325.063179][T13084] jffs2: notice: (13084) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 325.064471][T13083] loop5: AHDI p2 [ 325.064484][T13083] loop5: partition table partially beyond EOD, truncated [ 325.082720][T13084] jffs2 filesystem being mounted at /6/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 325.147884][ T5878] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 325.177243][T13097] 9p: Bad value for 'wfdno' [ 325.181774][ T5878] usb 8-1: device descriptor read/8, error -71 [ 325.431527][ T5878] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 325.473098][ T5878] usb 8-1: device descriptor read/8, error -71 [ 325.536823][T13114] loop5: detected capacity change from 0 to 2640 [ 325.557256][T13114] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 325.564100][T13114] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 325.574247][T13114] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 325.586509][T13114] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 325.598972][ T5878] usb usb8-port1: unable to enumerate USB device [ 325.607339][T13114] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 325.615937][T13114] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 325.623864][T13114] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 325.627404][T13114] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 325.631311][T13114] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 325.635552][T13114] Buffer I/O error on dev loop5, logical block 9, lost async page write [ 325.683975][T13124] openvswitch: netlink: Missing valid actions attribute. [ 325.694315][T13124] openvswitch: netlink: Actions may not be safe on all matching packets [ 325.715750][ T42] kauditd_printk_skb: 153 callbacks suppressed [ 325.715769][ T42] audit: type=1400 audit(5358345169.666:22665): avc: denied { read } for pid=13113 comm="syz.6.1818" name="usbmon3" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 325.729489][ T42] audit: type=1400 audit(5358345169.666:22666): avc: denied { open } for pid=13113 comm="syz.6.1818" path="/dev/usbmon3" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 325.741433][ T42] audit: type=1400 audit(5358345169.676:22667): avc: denied { ioctl } for pid=13113 comm="syz.6.1818" path="/dev/usbmon3" dev="devtmpfs" ino=745 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 325.774839][ T42] audit: type=1400 audit(5358345169.726:22668): avc: denied { create } for pid=13113 comm="syz.6.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 325.900921][T13141] debugfs: Bad value for 'mode' [ 325.901927][ T42] audit: type=1400 audit(5358345169.856:22669): avc: denied { mount } for pid=13140 comm="syz.9.1824" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 325.903456][T13141] netlink: 'syz.9.1824': attribute type 1 has an invalid length. [ 325.934314][ T42] audit: type=1400 audit(5358345169.856:22670): avc: denied { create } for pid=13140 comm="syz.9.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 325.953184][ T42] audit: type=1400 audit(5358345169.856:22671): avc: denied { write } for pid=13140 comm="syz.9.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 325.972347][ T42] audit: type=1400 audit(5358345169.856:22672): avc: denied { remount } for pid=13140 comm="syz.9.1824" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 326.012386][T13149] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13149 comm=syz.9.1824 [ 326.017375][T13146] erofs (device loop0): cannot find valid erofs superblock [ 326.025508][ T42] audit: type=1400 audit(5358345169.976:22673): avc: denied { write } for pid=13140 comm="syz.9.1824" name="kcm" dev="proc" ino=4026534409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 326.034074][T13141] 8021q: adding VLAN 0 to HW filter on device bond6 [ 326.049498][ T42] audit: type=1400 audit(5358345169.996:22674): avc: denied { ioctl } for pid=13140 comm="syz.9.1824" path="socket:[40769]" dev="sockfs" ino=40769 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.071754][T13145] bond6: (slave gretap1): making interface the new active one [ 326.079500][T13145] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 326.316398][T13162] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1828'. [ 326.427627][ T5741] Bluetooth: hci0: command tx timeout [ 326.457327][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1830'. [ 326.464947][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1830'. [ 326.547330][T13174] loop5: detected capacity change from 0 to 7 [ 326.555873][T13174] Dev loop5: unable to read RDB block 7 [ 326.557747][T13174] loop5: AHDI p2 [ 326.560479][T13174] loop5: partition table partially beyond EOD, truncated [ 326.693428][T13176] kvm: pic: level sensitive irq not supported [ 326.698445][T13176] kvm: pic: single mode not supported [ 326.703371][T13176] kvm: pic: single mode not supported [ 326.705639][T13176] kvm: pic: level sensitive irq not supported [ 326.709852][T13176] kvm: pic: non byte read [ 326.721376][T13176] kvm: pic: non byte read [ 326.725966][T13176] kvm: pic: single mode not supported [ 326.725983][T13176] kvm: pic: level sensitive irq not supported [ 326.729361][T13176] kvm: pic: non byte read [ 326.872385][T13190] netlink: 'syz.6.1837': attribute type 1 has an invalid length. [ 326.887612][T13190] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1837'. [ 326.908121][T13190] NCSI netlink: No device for ifindex 0 [ 327.047413][T13202] xt_nfacct: accounting object `s' does not exist [ 327.097222][T13205] : renamed from bond_slave_0 (while UP) [ 327.181003][T13199] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 327.193351][T13199] device-mapper: ioctl: error adding target to table [ 327.197573][ T9] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 327.217108][T13210] loop5: detected capacity change from 0 to 7 [ 327.225893][T13210] Dev loop5: unable to read RDB block 7 [ 327.230512][T13210] loop5: AHDI p2 [ 327.232405][T13210] loop5: partition table partially beyond EOD, truncated [ 327.348259][ T9] usb 11-1: Using ep0 maxpacket: 32 [ 327.353847][ T9] usb 11-1: unable to get BOS descriptor or descriptor too short [ 327.359533][ T9] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.367753][ T9] usb 11-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 327.373947][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.379868][ T9] usb 11-1: Product: syz [ 327.381770][ T9] usb 11-1: Manufacturer: syz [ 327.385515][ T9] usb 11-1: SerialNumber: syz [ 327.598659][T13196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.616826][T13196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.632542][T13196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.642337][T13196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.659903][T13196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.668163][T13196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.682681][T13196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.711469][T13196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.721619][T13218] Need at least one configuration in g1. [ 327.727968][T13196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.740310][T13196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.753593][T13218] udc dummy_udc.0: failed to start g1: -22 [ 327.760888][T13218] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 327.823899][T13218] UDC core: g1: couldn't find an available UDC or it's busy [ 327.926213][ T9] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 327.945800][ T9] usb 11-1: MIDIStreaming interface descriptor not found [ 328.084853][ T9] usb 11-1: USB disconnect, device number 7 [ 328.332100][T13239] loop5: detected capacity change from 0 to 7 [ 328.335005][T13239] Dev loop5: unable to read RDB block 7 [ 328.337309][T13239] loop5: AHDI p2 [ 328.339325][T13239] loop5: partition table partially beyond EOD, truncated [ 328.481399][T13251] futex_wake_op: syz.0.1854 tries to shift op by 144; fix this program [ 328.508044][ T5741] Bluetooth: hci0: command tx timeout [ 328.512142][T13251] futex_wake_op: syz.0.1854 tries to shift op by 144; fix this program [ 328.573418][T13257] netlink: 'syz.6.1857': attribute type 2 has an invalid length. [ 328.577121][T13257] netlink: 46 bytes leftover after parsing attributes in process `syz.6.1857'. [ 328.747976][T13266] loop5: detected capacity change from 0 to 7 [ 328.760264][T13266] Dev loop5: unable to read RDB block 7 [ 328.765385][T13266] loop5: unable to read partition table [ 328.771875][T13266] loop5: partition table beyond EOD, truncated [ 328.776583][T13266] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 328.777667][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 328.852590][T13270] F2FS-fs: Conflicting test_dummy_encryption options [ 328.930042][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 328.933838][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.938606][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 328.947577][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.954379][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.970407][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 328.981072][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 328.989363][ T9] usb 8-1: Product: syz [ 328.991046][ T9] usb 8-1: Manufacturer: syz [ 329.051455][T13285] netlink: 'syz.0.1867': attribute type 2 has an invalid length. [ 329.054319][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 329.054820][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1867'. [ 329.059822][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 329.061550][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 329.064600][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 329.251558][T13252] Bluetooth: MGMT ver 1.23 [ 329.284763][T13252] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 329.290122][ T5878] usb 8-1: USB disconnect, device number 7 [ 329.690092][ T9] logitech-hidpp-device 0005:046D:B012.0007: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 329.716290][T13316] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 329.722178][T13315] fido_id[13315]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 329.725060][T13316] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 329.879621][T13319] CUSE: unknown device info "" [ 329.881817][T13319] CUSE: unknown device info "" [ 329.883850][T13319] CUSE: unknown device info "" [ 329.885920][T13319] CUSE: unknown device info "" [ 329.889259][T13319] CUSE: DEVNAME unspecified [ 329.982801][ T5878] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 330.120336][ T5878] usb 14-1: device descriptor read/64, error -71 [ 330.215614][T13354] xt_check_match_common: 1 callbacks suppressed [ 330.215628][T13354] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 330.250424][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1882'. [ 330.326286][T13363] netlink: 'syz.0.1884': attribute type 3 has an invalid length. [ 330.330202][T13363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1884'. [ 330.388084][ T5878] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 330.525294][T13378] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 330.528434][T13378] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 330.530875][T13378] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 330.533008][T13378] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 330.535047][T13378] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 330.537096][T13378] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 330.537529][ T5878] usb 14-1: device descriptor read/64, error -71 [ 330.539701][T13378] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 330.543458][T13378] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 330.545981][T13378] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 330.548180][T13378] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 330.605966][T13380] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 330.654141][ T5878] usb usb14-port1: attempt power cycle [ 330.790451][ T42] kauditd_printk_skb: 79 callbacks suppressed [ 330.790464][ T42] audit: type=1400 audit(5358345174.746:22754): avc: denied { sqpoll } for pid=13391 comm="syz.3.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 330.816889][T13392] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 330.841463][ T42] audit: type=1400 audit(5358345174.796:22755): avc: denied { mounton } for pid=13395 comm="syz.6.1894" path="/proc/517/task" dev="proc" ino=42427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 330.887320][ T42] audit: type=1400 audit(5358345174.836:22756): avc: denied { getopt } for pid=13398 comm="syz.0.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 330.916872][T13404] syzkaller0: create flow: hash 1012601980 index 1 [ 330.975288][T13408] kvm: user requested TSC rate below hardware speed [ 330.998359][ T5878] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 331.019841][ T5878] usb 14-1: device descriptor read/8, error -71 [ 331.029261][T13408] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 331.037009][T13408] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 331.061402][T13395] syzkaller0: delete flow: hash 1012601980 index 1 [ 331.176423][T13411] loop5: detected capacity change from 0 to 7 [ 331.185606][T13411] Dev loop5: unable to read RDB block 7 [ 331.192856][T13411] loop5: AHDI p2 [ 331.194248][T13411] loop5: partition table partially beyond EOD, truncated [ 331.277710][ T5878] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 331.302249][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 331.302494][ T5878] usb 14-1: device descriptor read/8, error -71 [ 331.307219][ T5741] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 331.346490][ T42] audit: type=1400 audit(5358345175.296:22757): avc: denied { nlmsg_read } for pid=13417 comm="syz.0.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 331.422556][ T5878] usb usb14-port1: unable to enumerate USB device [ 332.227866][ T42] audit: type=1400 audit(5358345176.186:22758): avc: denied { read } for pid=13423 comm="syz.0.1902" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 332.235873][ T42] audit: type=1400 audit(5358345176.186:22759): avc: denied { open } for pid=13423 comm="syz.0.1902" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 332.278989][ T42] audit: type=1400 audit(5358345176.236:22760): avc: denied { ioctl } for pid=13423 comm="syz.0.1902" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x6101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 332.857269][T13432] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 333.511573][T13445] loop5: detected capacity change from 0 to 7 [ 333.520416][ T42] audit: type=1400 audit(5358345177.476:22761): avc: denied { block_suspend } for pid=13441 comm="syz.3.1909" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 333.529922][T13445] Dev loop5: unable to read RDB block 7 [ 333.534955][T13445] loop5: unable to read partition table [ 333.537407][T13445] loop5: partition table beyond EOD, truncated [ 333.544379][T13445] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 333.609828][ T42] audit: type=1400 audit(5358345177.566:22762): avc: denied { setopt } for pid=13449 comm="syz.9.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 333.622519][ T42] audit: type=1400 audit(5358345177.576:22763): avc: denied { ioctl } for pid=13449 comm="syz.9.1912" path="socket:[44119]" dev="sockfs" ino=44119 ioctlcmd=0x583f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 333.726113][T13465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1914'. [ 333.766786][T13469] loop5: detected capacity change from 0 to 7 [ 333.769755][T13469] Dev loop5: unable to read RDB block 7 [ 333.772046][T13469] loop5: AHDI p2 [ 333.773539][T13469] loop5: partition table partially beyond EOD, truncated [ 333.849562][T13476] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1918'. [ 333.956599][T13482] loop5: detected capacity change from 0 to 7 [ 333.959572][T13475] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1917'. [ 333.964142][T13482] Dev loop5: unable to read RDB block 7 [ 333.966403][T13482] loop5: unable to read partition table [ 333.971491][T13482] loop5: partition table beyond EOD, truncated [ 333.973914][T13482] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 334.164443][T13492] CIFS: Unable to determine destination address [ 334.212900][T13499] netlink: 'syz.3.1924': attribute type 4 has an invalid length. [ 334.294864][T13504] i2c i2c-0: new_device: Extra parameters [ 334.354525][T13507] loop5: detected capacity change from 0 to 7 [ 334.363723][T13507] Dev loop5: unable to read RDB block 7 [ 334.368401][T13507] loop5: AHDI p2 [ 334.369978][T13507] loop5: partition table partially beyond EOD, truncated [ 334.466670][T13512] loop5: detected capacity change from 0 to 7 [ 334.469999][T13512] Dev loop5: unable to read RDB block 7 [ 334.472847][T13512] loop5: unable to read partition table [ 334.475057][T13512] loop5: partition table beyond EOD, truncated [ 334.480728][T13512] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 334.548725][T13519] Cannot find add_set index 65532 as target [ 334.599730][T13526] usb usb7: usbfs: process 13526 (syz.9.1934) did not claim interface 0 before use [ 334.809242][T13546] loop5: detected capacity change from 0 to 7 [ 334.825926][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1940'. [ 334.826643][T13546] Dev loop5: unable to read RDB block 7 [ 334.833028][T13546] loop5: AHDI p2 [ 334.834659][T13546] loop5: partition table partially beyond EOD, truncated [ 334.922326][T13553] loop5: detected capacity change from 0 to 7 [ 334.927064][T13553] Dev loop5: unable to read RDB block 7 [ 334.939465][T13553] loop5: unable to read partition table [ 334.943929][T13553] loop5: partition table beyond EOD, truncated [ 334.946431][T13553] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 335.182662][T13576] erspan0: entered promiscuous mode [ 335.189561][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 335.192412][T13576] erspan0: left promiscuous mode [ 335.270935][T13588] loop5: detected capacity change from 0 to 7 [ 335.281244][T13588] Dev loop5: unable to read RDB block 7 [ 335.283508][T13588] loop5: AHDI p2 [ 335.285184][T13588] loop5: partition table partially beyond EOD, truncated [ 335.359490][T13593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1951'. [ 335.404438][T13597] loop5: detected capacity change from 0 to 7 [ 335.410622][T13597] Dev loop5: unable to read RDB block 7 [ 335.413029][T13597] loop5: unable to read partition table [ 335.415337][T13597] loop5: partition table beyond EOD, truncated [ 335.421066][T13597] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 335.470577][T13600] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 335.728128][T13621] Bluetooth: Invalid esc byte 0xdb [ 335.741393][ T8872] Bluetooth: (null): Invalid header checksum [ 335.770750][T13624] Dev loop5: unable to read RDB block 7 [ 335.772912][T13624] loop5: AHDI p2 [ 335.774148][T13624] loop5: partition table partially beyond EOD, truncated [ 335.839088][T13628] Dev loop5: unable to read RDB block 7 [ 335.842240][T13628] loop5: unable to read partition table [ 335.844827][T13628] loop5: partition table beyond EOD, truncated [ 335.848314][T13628] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 335.861622][T13631] cgroup: none used incorrectly [ 336.011683][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 336.011699][ T42] audit: type=1400 audit(5358345179.966:22817): avc: denied { create } for pid=13647 comm="syz.9.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 336.036818][ T42] audit: type=1400 audit(5358345179.986:22818): avc: denied { ioctl } for pid=13647 comm="syz.9.1969" path="socket:[43954]" dev="sockfs" ino=43954 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 336.047176][ T42] audit: type=1400 audit(5358345179.996:22819): avc: denied { write } for pid=13651 comm="syz.6.1971" name="functions" dev="configfs" ino=28940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 336.055338][T13648] overlay: Unknown parameter 'measure' [ 336.058186][ T42] audit: type=1400 audit(5358345179.996:22820): avc: denied { add_name } for pid=13651 comm="syz.6.1971" name="ncm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 336.064655][ T42] audit: type=1400 audit(5358345179.996:22821): avc: denied { create } for pid=13651 comm="syz.6.1971" name="ncm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 336.074417][T13650] Dev loop5: unable to read RDB block 7 [ 336.077543][T13650] loop5: AHDI p2 [ 336.079013][T13650] loop5: partition table partially beyond EOD, truncated [ 336.110218][ T42] audit: type=1400 audit(5358345180.066:22822): avc: denied { write } for pid=13651 comm="syz.6.1971" name="interface.ncm" dev="configfs" ino=44583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 336.129736][ T42] audit: type=1400 audit(5358345180.066:22823): avc: denied { write } for pid=13651 comm="syz.6.1971" name="functions" dev="configfs" ino=28940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 336.148392][T13657] loop5: p3 p4 [ 336.149305][ T42] audit: type=1400 audit(5358345180.096:22824): avc: denied { write } for pid=13651 comm="syz.6.1971" name="interface.rndis" dev="configfs" ino=44602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 336.149551][T13657] loop5: partition table partially beyond EOD, truncated [ 336.218751][T11829] udevd[11829]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 336.231987][T11824] udevd[11824]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 336.321000][ T42] audit: type=1400 audit(5358345180.276:22825): avc: denied { kexec_image_load } for pid=13675 comm="syz.6.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 336.405264][ T42] audit: type=1400 audit(5358345180.356:22826): avc: denied { unmount } for pid=12801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 336.428117][T13688] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 336.472128][T13697] x_tables: duplicate underflow at hook 3 [ 336.571978][T13684] team_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 336.574360][T13702] 9p: Could not find request transport: virt [ 336.740407][T13715] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 336.742758][T13715] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 336.747808][T13715] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 336.812578][T13736] set_capacity_and_notify: 4 callbacks suppressed [ 336.812592][T13736] loop5: detected capacity change from 0 to 7 [ 336.825596][T13736] Dev loop5: unable to read RDB block 7 [ 336.827409][T13736] loop5: AHDI p2 [ 336.829416][T13736] loop5: partition table partially beyond EOD, truncated [ 336.883181][T13739] netlink: 'syz.3.1992': attribute type 1 has an invalid length. [ 336.885766][T13739] nbd: couldn't find device at index 131080 [ 336.919825][T13741] loop5: detected capacity change from 0 to 7 [ 336.923650][T13741] Dev loop5: unable to read RDB block 7 [ 336.930181][T13741] loop5: unable to read partition table [ 336.932102][T13741] loop5: partition table beyond EOD, truncated [ 336.934519][T13741] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 337.094684][T13760] loop5: detected capacity change from 0 to 7 [ 337.097317][T13760] Dev loop5: unable to read RDB block 7 [ 337.101184][T13760] loop5: AHDI p2 [ 337.107419][T13760] loop5: partition table partially beyond EOD, truncated [ 337.190745][T13769] tmpfs: Bad value for 'mpol' [ 337.210444][T13769] tmpfs: Bad value for 'mpol' [ 337.311718][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'. [ 337.352037][T13791] loop5: detected capacity change from 0 to 7 [ 337.355473][T13791] Dev loop5: unable to read RDB block 7 [ 337.357938][T13791] loop5: unable to read partition table [ 337.360383][T13791] loop5: partition table beyond EOD, truncated [ 337.362972][T13791] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 337.437268][T13795] IPv6: NLM_F_CREATE should be specified when creating new route [ 337.443027][T13795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.445201][T13795] IPv6: NLM_F_CREATE should be set when creating new route [ 337.708921][T13811] binder: 13807:13811 ioctl c00c620f 2000000002c0 returned -22 [ 337.845637][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 338.187750][ T73] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 338.202930][T13840] 9pnet_fd: Insufficient options for proto=fd [ 338.279253][T13842] loop5: detected capacity change from 0 to 7 [ 338.286259][T13842] Dev loop5: unable to read RDB block 7 [ 338.300254][T13842] loop5: AHDI p2 [ 338.301704][T13842] loop5: partition table partially beyond EOD, truncated [ 338.369350][ T73] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 338.382287][ T73] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 338.389710][ T73] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 338.392919][ T73] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.396456][T13844] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2026'. [ 338.397837][ T73] usb 11-1: Product: syz [ 338.407602][ T73] usb 11-1: Manufacturer: syz [ 338.409413][ T73] usb 11-1: SerialNumber: syz [ 338.437066][ T73] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected [ 338.479758][T13850] f2fs: Unknown parameter 'barrierr' [ 338.486015][ T73] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 338.506161][ T73] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 338.585304][T13852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=13852 comm=syz.0.2029 [ 338.679038][T13857] netlink: 'syz.0.2030': attribute type 12 has an invalid length. [ 338.685779][T13857] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2030'. [ 338.694056][T13859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2031'. [ 338.707880][ T5731] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 338.805919][T13868] net_ratelimit: 68 callbacks suppressed [ 338.805942][T13868] openvswitch: netlink: Tunnel attr 16 has unexpected len 16 expected 0 [ 338.817889][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 338.817960][ T64] Bluetooth: hci5: command 0x0c1a tx timeout [ 338.820499][ T5730] Bluetooth: hci1: command 0x0c1a tx timeout [ 338.919366][ T73] bridge0: entered promiscuous mode [ 338.992948][ T5731] usb 14-1: unable to get BOS descriptor or descriptor too short [ 338.996691][ T5731] usb 14-1: unable to read config index 0 descriptor/start: -71 [ 338.999553][ T5731] usb 14-1: can't read configurations, error -71 [ 339.088991][ T5730] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 339.606763][T13887] netlink: 622 bytes leftover after parsing attributes in process `syz.0.2039'. [ 339.653948][T13894] IPVS: length: 4096 != 8 [ 339.806807][T13905] Bluetooth: ISO socket layer initialized [ 340.144848][T13916] x_tables: duplicate underflow at hook 2 [ 340.181037][T13831] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 340.184001][T13918] loop5: detected capacity change from 0 to 7 [ 340.184526][T13918] Dev loop5: unable to read RDB block 7 [ 340.188404][T13918] loop5: unable to read partition table [ 340.190261][T13918] loop5: partition table beyond EOD, truncated [ 340.192256][T13918] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 340.195703][ T73] usb 11-1: USB disconnect, device number 8 [ 340.235179][T13924] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 340.237120][ T73] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 340.241262][T13920] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2048'. [ 340.250677][ T73] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 340.260501][ T73] ti_usb_3410_5052 11-1:2.0: device disconnected [ 340.270338][T13928] jffs2: notice: (13928) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 340.280609][T13928] jffs2 filesystem being mounted at /90/mnt supports timestamps until 2106-02-07 (0xffffffff) [ 340.532742][T13940] loop5: detected capacity change from 0 to 7 [ 340.540926][T13940] Dev loop5: unable to read RDB block 7 [ 340.547247][T13940] loop5: AHDI p2 [ 340.550110][T13940] loop5: partition table partially beyond EOD, truncated [ 340.904256][T13973] loop5: detected capacity change from 0 to 7 [ 340.908559][T13973] Dev loop5: unable to read RDB block 7 [ 340.910474][T13973] loop5: unable to read partition table [ 340.919478][T13973] loop5: partition table beyond EOD, truncated [ 340.925341][T13973] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 340.925792][T13974] netlink: 'syz.6.2060': attribute type 23 has an invalid length. [ 341.019866][T13981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2064'. [ 341.029208][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2060'. [ 341.034773][ T42] kauditd_printk_skb: 52 callbacks suppressed [ 341.034783][ T42] audit: type=1400 audit(5358345184.986:22879): avc: denied { ioctl } for pid=13972 comm="syz.6.2060" path="socket:[47424]" dev="sockfs" ino=47424 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 341.065955][ T42] audit: type=1400 audit(5358345185.016:22880): avc: denied { attach_queue } for pid=13980 comm="syz.3.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 341.171994][T13989] netlink: 'syz.6.2067': attribute type 10 has an invalid length. [ 341.202623][T13989] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.206914][T13989] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 341.215235][T13989] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2067'. [ 341.241697][T13989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.244867][T13992] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 341.256860][T13989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.271763][T13989] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 341.292595][T13995] xt_CT: You must specify a L4 protocol and not use inversions on it [ 341.305223][T13995] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2067'. [ 341.310709][T13989] bond0 (unregistering): Released all slaves [ 341.375445][T13993] ftl_cs: FTL header not found. [ 341.475508][T13993] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 341.478822][T14001] 9pnet_fd: p9_fd_create_unix (14001): problem connecting socket: ./file0: -111 [ 341.482519][ T42] audit: type=1400 audit(5358345185.436:22881): avc: denied { mounton } for pid=14000 comm="syz.6.2069" path="/190/file0" dev="tmpfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 341.529729][ T42] audit: type=1400 audit(5358345185.486:22882): avc: denied { accept } for pid=14004 comm="syz.3.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 341.535864][ T42] audit: type=1400 audit(5358345185.486:22883): avc: denied { ioctl } for pid=14004 comm="syz.3.2071" path="socket:[46585]" dev="sockfs" ino=46585 ioctlcmd=0x6e84 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 341.546076][ T42] audit: type=1400 audit(5358345185.486:22884): avc: denied { read write } for pid=14004 comm="syz.3.2071" name="uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 341.554140][ T42] audit: type=1400 audit(5358345185.486:22885): avc: denied { open } for pid=14004 comm="syz.3.2071" path="/dev/uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 341.562143][ T42] audit: type=1400 audit(5358345185.486:22886): avc: denied { ioctl } for pid=14004 comm="syz.3.2071" path="/dev/uinput" dev="devtmpfs" ino=942 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 341.579905][T14009] loop5: detected capacity change from 0 to 7 [ 341.586655][T14009] Dev loop5: unable to read RDB block 7 [ 341.589947][T14009] loop5: AHDI p2 [ 341.591199][T14009] loop5: partition table partially beyond EOD, truncated [ 341.622431][T14012] erspan1: entered allmulticast mode [ 341.683501][ T42] audit: type=1400 audit(5358345185.636:22887): avc: denied { mount } for pid=14019 comm="syz.9.2075" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 341.743839][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2077'. [ 341.747867][T14025] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2077'. [ 341.775008][T14033] binder: 14031:14033 ioctl c0306201 0 returned -14 [ 341.776523][T14025] geneve2: entered promiscuous mode [ 341.781052][T14025] geneve2: entered allmulticast mode [ 341.788736][T14025] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 341.793376][T14025] Error validating options; rc = [-22] [ 341.809132][ T42] audit: type=1400 audit(5358345185.756:22888): avc: denied { connect } for pid=14035 comm="syz.3.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 341.909070][T14048] openvswitch: netlink: Port -2146435068 exceeds max allowable 65535 [ 341.935897][T14050] loop5: detected capacity change from 0 to 7 [ 341.953710][T14050] Dev loop5: unable to read RDB block 7 [ 341.964674][T14050] loop5: AHDI p2 [ 341.966546][T14050] loop5: partition table partially beyond EOD, truncated [ 342.102751][T14063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2089'. [ 342.106839][T14064] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 342.211348][T14063] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14063 comm=syz.0.2089 [ 342.233920][T14063] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2089'. [ 342.305952][T14075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2093'. [ 342.317517][T14075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2093'. [ 342.358665][T14081] usb usb1: usbfs: process 14081 (syz.6.2095) did not claim interface 10 before use [ 342.440271][T14085] loop5: detected capacity change from 0 to 7 [ 342.454444][T14085] Dev loop5: unable to read RDB block 7 [ 342.463777][T14085] loop5: unable to read partition table [ 342.465678][T14085] loop5: partition table beyond EOD, truncated [ 342.476878][T14085] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 342.507614][ T9] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 342.558988][T14088] loop5: detected capacity change from 0 to 7 [ 342.565162][T14088] Dev loop5: unable to read RDB block 7 [ 342.566846][T14088] loop5: AHDI p2 [ 342.572356][T14088] loop5: partition table partially beyond EOD, truncated [ 342.707537][ T9] usb 14-1: Using ep0 maxpacket: 16 [ 342.710802][ T9] usb 14-1: config 0 has no interfaces? [ 342.715496][ T9] usb 14-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 342.721585][ T9] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.727372][ T9] usb 14-1: Product: syz [ 342.733525][ T9] usb 14-1: Manufacturer: syz [ 342.737334][ T9] usb 14-1: SerialNumber: syz [ 342.745613][ T9] usb 14-1: config 0 descriptor?? [ 342.769769][T14101] kvm: user requested TSC rate below hardware speed [ 342.789100][T14101] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 342.887315][T14108] loop5: detected capacity change from 0 to 7 [ 342.889852][T14108] Dev loop5: unable to read RDB block 7 [ 342.891595][T14108] loop5: AHDI p2 [ 342.892836][T14108] loop5: partition table partially beyond EOD, truncated [ 342.955358][ T5878] bridge0: entered promiscuous mode [ 342.962990][ T73] usb 14-1: USB disconnect, device number 12 [ 343.245978][T14139] loop5: detected capacity change from 0 to 7 [ 343.252498][T14139] Dev loop5: unable to read RDB block 7 [ 343.254652][T14139] loop5: unable to read partition table [ 343.256560][T14139] loop5: partition table beyond EOD, truncated [ 343.261903][T14139] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 343.524710][T14155] bridge0: port 3(vlan2) entered blocking state [ 343.527253][T14155] bridge0: port 3(vlan2) entered disabled state [ 343.531177][T14155] vlan2: entered allmulticast mode [ 343.533469][T14155] bridge0: entered allmulticast mode [ 343.538377][T14155] vlan2: left allmulticast mode [ 343.540476][T14155] bridge0: left allmulticast mode [ 343.658930][ T5878] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 343.766685][T14168] loop5: detected capacity change from 0 to 7 [ 343.773010][T14168] Dev loop5: unable to read RDB block 7 [ 343.775408][T14168] loop5: unable to read partition table [ 343.784361][T14168] loop5: partition table beyond EOD, truncated [ 343.787103][T14168] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 343.807927][ T5878] usb 11-1: Using ep0 maxpacket: 8 [ 343.812247][ T5878] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 343.818935][ T5878] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 343.829024][ T5878] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 343.833901][ T5878] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.839073][ T5878] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 343.842668][ T5878] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 343.846253][ T5878] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 343.852036][ T5878] usb 11-1: config 168 interface 0 has no altsetting 0 [ 343.856152][ T5878] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 343.860081][ T5878] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 343.864744][ T5878] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 343.871241][ T5878] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.876866][ T5878] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 343.882031][ T5878] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 343.886896][ T5878] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 343.892760][ T5878] usb 11-1: config 168 interface 0 has no altsetting 0 [ 343.896802][ T5878] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 343.899467][ T5878] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 343.902867][ T5878] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 343.907190][ T5878] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.912597][ T5878] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 343.917200][ T5878] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 343.921287][ T5878] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 343.926418][ T5878] usb 11-1: config 168 interface 0 has no altsetting 0 [ 343.931770][ T5878] usb 11-1: string descriptor 0 read error: -22 [ 343.934302][ T5878] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 343.937575][ T5878] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.951300][ T5878] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 344.198253][ T5835] usb 11-1: USB disconnect, device number 9 [ 344.587675][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 344.649386][T14188] netlink: 'syz.3.2132': attribute type 4 has an invalid length. [ 344.737562][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 344.744893][ T9] usb 5-1: config 8 has an invalid interface number: 68 but max is 3 [ 344.757507][T14194] loop5: detected capacity change from 0 to 7 [ 344.757704][ T9] usb 5-1: config 8 has an invalid interface number: 33 but max is 3 [ 344.760982][T14194] Dev loop5: unable to read RDB block 7 [ 344.766036][T14194] loop5: unable to read partition table [ 344.770605][T14194] loop5: partition table beyond EOD, truncated [ 344.774717][ T9] usb 5-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 344.778575][T14194] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 344.793266][ T9] usb 5-1: config 8 has an invalid interface number: 102 but max is 3 [ 344.807771][ T9] usb 5-1: config 8 has an invalid interface number: 69 but max is 3 [ 344.827517][ T9] usb 5-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 344.830997][T14201] loop4: detected capacity change from 0 to 7 [ 344.833120][ T9] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 344.843279][ T9] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 344.853424][ T9] usb 5-1: config 8 has no interface number 0 [ 344.858146][ T9] usb 5-1: config 8 has no interface number 1 [ 344.863596][ T9] usb 5-1: config 8 has no interface number 2 [ 344.870543][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 344.872455][ T9] usb 5-1: config 8 has no interface number 3 [ 344.876407][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.879721][ C3] buffer_io_error: 321 callbacks suppressed [ 344.879729][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 344.881740][ T9] usb 5-1: config 8 interface 68 altsetting 6 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 344.889953][ T9] usb 5-1: config 8 interface 68 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 344.894578][ T9] usb 5-1: config 8 interface 68 altsetting 6 endpoint 0x5 has invalid maxpacket 1096, setting to 64 [ 344.902036][ T9] usb 5-1: config 8 interface 33 altsetting 255 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 344.903057][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.907006][ T9] usb 5-1: config 8 interface 33 altsetting 255 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 344.909938][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 344.913321][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.916679][ T9] usb 5-1: config 8 interface 33 altsetting 255 has a duplicate endpoint with address 0x8, skipping [ 344.917507][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 344.921621][ T9] usb 5-1: config 8 interface 33 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 344.933248][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.933352][ T9] usb 5-1: config 8 interface 33 altsetting 255 has a duplicate endpoint with address 0x6, skipping [ 344.936357][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 344.941092][ T9] usb 5-1: config 8 interface 33 altsetting 255 has an invalid endpoint descriptor of length 6, skipping [ 344.944997][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.948804][ T9] usb 5-1: config 8 interface 33 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 344.951651][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 344.956267][ T9] usb 5-1: config 8 interface 33 altsetting 255 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 344.960514][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 344.968204][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 344.992899][ T9] usb 5-1: config 8 interface 102 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 345.008416][ T9] usb 5-1: config 8 interface 102 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 345.017157][ T9] usb 5-1: config 8 interface 102 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 345.023882][ T9] usb 5-1: config 8 interface 69 altsetting 214 has a duplicate endpoint with address 0x9, skipping [ 345.029236][ T9] usb 5-1: config 8 interface 69 altsetting 214 bulk endpoint 0xD has invalid maxpacket 16 [ 345.033604][T14211] syz.9.2141 (14211) used obsolete PPPIOCDETACH ioctl [ 345.033597][ T9] usb 5-1: config 8 interface 69 altsetting 214 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 345.036779][ T9] usb 5-1: config 8 interface 69 altsetting 214 has a duplicate endpoint with address 0x4, skipping [ 345.045217][ T9] usb 5-1: config 8 interface 69 altsetting 214 has a duplicate endpoint with address 0xD, skipping [ 345.051809][ T9] usb 5-1: config 8 interface 68 has no altsetting 0 [ 345.055494][ T9] usb 5-1: config 8 interface 33 has no altsetting 0 [ 345.058818][ T9] usb 5-1: config 8 interface 102 has no altsetting 0 [ 345.061872][ T9] usb 5-1: config 8 interface 69 has no altsetting 0 [ 345.154423][T14216] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 345.239039][T14220] overlay: filesystem on ./bus not supported as upperdir [ 345.330480][T14228] dlm: Unknown command passed to DLM device : 33 [ 345.330480][T14228] [ 345.584567][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.603153][ T5741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.612354][ T5741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.625260][ T5741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.633429][ T5741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.684831][T14244] BIDI support in bsg has been removed. [ 345.764794][ T5828] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.921159][ T5828] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.054364][ T5828] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.189937][ T5828] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.213451][ T73] IPVS: starting estimator thread 0... [ 346.222757][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 346.222774][ T42] audit: type=1400 audit(5358345190.176:22925): avc: denied { append } for pid=14266 comm="syz.9.2156" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 346.236083][ T42] audit: type=1400 audit(5358345190.186:22926): avc: denied { ioctl } for pid=14266 comm="syz.9.2156" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 346.339053][T14265] IPVS: using max 45 ests per chain, 108000 per kthread [ 346.468835][ T42] audit: type=1400 audit(5358345190.426:22927): avc: denied { write } for pid=14274 comm="syz.9.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 346.479626][ T42] audit: type=1400 audit(5358345190.426:22928): avc: denied { write } for pid=14274 comm="syz.9.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 346.809282][ T5828] bridge_slave_1: left allmulticast mode [ 346.812249][ T5828] bridge_slave_1: left promiscuous mode [ 346.817696][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.823985][ T5828] bridge_slave_0: left allmulticast mode [ 346.826384][ T5828] bridge_slave_0: left promiscuous mode [ 346.830453][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.069124][ T5828] bond0 (unregistering): (slave 30): Releasing backup interface [ 347.081753][ T5828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.092364][ T5828] bond0 (unregistering): Released all slaves [ 347.105458][ T5828] bond1 (unregistering): Released all slaves [ 347.108146][T14283] loop5: detected capacity change from 0 to 7 [ 347.108826][T14283] Dev loop5: unable to read RDB block 7 [ 347.112504][T14283] loop5: unable to read partition table [ 347.114105][T14283] loop5: partition table beyond EOD, truncated [ 347.116168][T14283] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 347.127024][ T5828] bond2 (unregistering): Released all slaves [ 347.193748][T14241] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.197173][T14241] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.200890][T14241] bridge_slave_0: entered allmulticast mode [ 347.206238][T14241] bridge_slave_0: entered promiscuous mode [ 347.220260][T14241] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.225666][T14241] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.228277][T14241] bridge_slave_1: entered allmulticast mode [ 347.231527][T14241] bridge_slave_1: entered promiscuous mode [ 347.302714][T14241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.315395][T14241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.381730][T14290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.399739][ T9] usb 5-1: New USB device found, idVendor=1bc7, idProduct=0021, bcdDevice=5a.56 [ 347.402688][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.405060][ T9] usb 5-1: Product: љ [ 347.447208][ T9] usb 5-1: can't set config #8, error -71 [ 347.452663][ T9] usb 5-1: USB disconnect, device number 4 [ 347.471161][ T42] audit: type=1400 audit(5358345191.416:22929): avc: denied { write } for pid=14288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.472675][T14295] __nla_validate_parse: 6 callbacks suppressed [ 347.472686][T14295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2163'. [ 347.494075][T14241] team0: Port device team_slave_0 added [ 347.501812][T14241] team0: Port device team_slave_1 added [ 347.554407][T14241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.556612][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.565535][T14241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.580239][T14241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.587528][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.607052][T14241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.610310][ T42] audit: type=1400 audit(5358345191.556:22930): avc: denied { ioctl } for pid=14305 comm="syz.9.2165" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x6f40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 347.636410][ T42] audit: type=1400 audit(5358345191.586:22931): avc: denied { write } for pid=14304 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.666152][T14309] loop5: detected capacity change from 0 to 7 [ 347.670748][T14309] Dev loop5: unable to read RDB block 7 [ 347.672678][T14309] loop5: unable to read partition table [ 347.676538][T14309] loop5: partition table beyond EOD, truncated [ 347.679929][T14309] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 347.697742][ T5730] Bluetooth: hci2: command tx timeout [ 347.709437][ T42] audit: type=1400 audit(5358345191.666:22932): avc: denied { watch_reads } for pid=14310 comm="syz.0.2167" path="/108" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 347.731277][T14311] binder_alloc: 14310: binder_alloc_buf size 8 failed, no address space [ 347.739539][ T5438] 8021q: adding VLAN 0 to HW filter on device eth6 [ 347.739988][T14311] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 347.748037][ T6089] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 347.814970][T14241] hsr_slave_0: entered promiscuous mode [ 347.817349][T14241] hsr_slave_1: entered promiscuous mode [ 347.819968][T14241] debugfs: 'hsr0' already exists in 'hsr' [ 347.821766][T14241] Cannot create hsr debugfs directory [ 347.849024][ T5828] hsr_slave_0: left promiscuous mode [ 347.851400][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2169'. [ 347.854934][ T5828] hsr_slave_1: left promiscuous mode [ 347.858585][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.861515][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.866646][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.871512][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.884948][ T5828] veth1_macvtap: left promiscuous mode [ 347.887184][ T5828] veth0_macvtap: left promiscuous mode [ 347.889788][ T5828] veth1_vlan: left promiscuous mode [ 347.892077][ T5828] veth0_vlan: left promiscuous mode [ 347.897692][ T6089] usb 11-1: Using ep0 maxpacket: 32 [ 347.901512][ T6089] usb 11-1: unable to get BOS descriptor or descriptor too short [ 347.906619][ T6089] usb 11-1: config 14 has an invalid interface number: 57 but max is 1 [ 347.910356][ T6089] usb 11-1: config 14 has an invalid interface number: 228 but max is 1 [ 347.913061][ T6089] usb 11-1: config 14 has no interface number 0 [ 347.914984][ T6089] usb 11-1: config 14 has no interface number 1 [ 347.917031][ T6089] usb 11-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 347.920646][ T6089] usb 11-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 347.924375][ T6089] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 347.928235][ T6089] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 347.932348][ T6089] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 347.935847][ T6089] usb 11-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.941212][ T6089] usb 11-1: config 14 interface 57 has no altsetting 0 [ 347.943312][ T6089] usb 11-1: config 14 interface 228 has no altsetting 0 [ 347.946964][ T6089] usb 11-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 347.950899][ T6089] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.953717][ T6089] usb 11-1: Product: syz [ 347.955055][ T6089] usb 11-1: Manufacturer: syz [ 347.958198][ T6089] usb 11-1: SerialNumber: syz [ 348.142508][ T5828] team0 (unregistering): Port device team_slave_1 removed [ 348.150979][ T5828] team0 (unregistering): Port device team_slave_0 removed [ 348.405789][ T6089] legousbtower 11-1:14.57: interrupt endpoints not found [ 348.445092][ T42] audit: type=1400 audit(5358345192.396:22933): avc: denied { write } for pid=14336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.501370][ T42] audit: type=1400 audit(5358345192.456:22934): avc: denied { write } for pid=14341 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.543760][ T5438] 8021q: adding VLAN 0 to HW filter on device eth7 [ 348.624266][T14349] loop5: detected capacity change from 0 to 7 [ 348.628676][T14349] Dev loop5: unable to read RDB block 7 [ 348.630725][T14349] loop5: unable to read partition table [ 348.633161][T14349] loop5: partition table beyond EOD, truncated [ 348.635261][T14349] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 348.797339][ T5438] 8021q: adding VLAN 0 to HW filter on device eth8 [ 348.821619][ T6089] legousbtower 11-1:14.228: get version request failed: -71 [ 348.823999][ T6089] legousbtower 11-1:14.228: probe with driver legousbtower failed with error -71 [ 348.847938][ T6089] usb 11-1: USB disconnect, device number 10 [ 349.034905][ T5438] 8021q: adding VLAN 0 to HW filter on device eth9 [ 349.125583][T14241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 349.130224][T14241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 349.133151][T14241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.138016][T14241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 349.143441][T14241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 349.150658][T14241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 349.154873][T14241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 349.164609][T14241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.229185][T14241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.240135][T14241] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.248612][ T8886] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.251197][ T8886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.259327][ T8886] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.261683][ T8886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.264965][T14380] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2179'. [ 349.599212][T14241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.644594][T14241] veth0_vlan: entered promiscuous mode [ 349.650240][T14241] veth1_vlan: entered promiscuous mode [ 349.684513][T14420] loop5: detected capacity change from 0 to 7 [ 349.684541][T14241] veth0_macvtap: entered promiscuous mode [ 349.696844][T14420] Dev loop5: unable to read RDB block 7 [ 349.700185][T14241] veth1_macvtap: entered promiscuous mode [ 349.700679][T14420] loop5: unable to read partition table [ 349.704646][T14420] loop5: partition table beyond EOD, truncated [ 349.709657][T14420] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 349.789707][ T5730] Bluetooth: hci2: command tx timeout [ 349.796757][T14241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.801418][T14241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.829846][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.842565][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.854541][T14434] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2187'. [ 349.952751][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.960465][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.015796][ T8872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.020308][ T8872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.086336][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.092452][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.866578][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2190'. [ 350.880602][T14484] loop5: detected capacity change from 0 to 7 [ 350.891673][T14484] Dev loop5: unable to read RDB block 7 [ 350.893438][T14484] loop5: unable to read partition table [ 350.895283][T14484] loop5: partition table beyond EOD, truncated [ 350.901565][T14484] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 351.231662][T14514] ip_tables: iptables: counters copy to user failed while replacing table [ 351.277565][ T9] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 351.427637][ T9] usb 7-1: Invalid ep0 maxpacket: 16 [ 351.445004][T14536] loop5: detected capacity change from 0 to 7 [ 351.449649][T14536] Dev loop5: unable to read RDB block 7 [ 351.453905][T14536] loop5: unable to read partition table [ 351.456384][T14536] loop5: partition table beyond EOD, truncated [ 351.466661][T14536] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 351.530912][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 351.530924][ T42] audit: type=1326 audit(5358345195.486:22965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14542 comm="syz.6.2205" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc1299e0d9 code=0x0 [ 351.557853][ T9] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 351.586650][T14551] loop4: detected capacity change from 0 to 7 [ 351.640873][ T2108] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.646899][ T2108] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.650263][T14551] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.657655][T14551] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.663921][T14551] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.668363][T14551] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.671598][T14551] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.675317][T14551] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.680671][T14551] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.684555][T14551] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.688966][T14551] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.692907][T14551] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.696229][T14551] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.701029][T14551] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.704262][T14551] ldm_validate_partition_table(): Disk read failed. [ 351.706884][T14551] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.710722][T14551] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.713630][T14551] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.716397][T14551] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.718831][T14551] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 351.721784][T14551] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.724107][T14551] Dev loop4: unable to read RDB block 0 [ 351.725839][T14551] loop4: unable to read partition table [ 351.727860][ T9] usb 7-1: Invalid ep0 maxpacket: 16 [ 351.729063][T14551] loop4: partition table beyond EOD, truncated [ 351.730715][ T9] usb usb7-port1: attempt power cycle [ 351.738338][T14551] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 351.858887][ T5730] Bluetooth: hci2: command tx timeout [ 351.894984][ T42] audit: type=1400 audit(5358345195.846:22966): avc: denied { setopt } for pid=14559 comm="syz.0.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 351.895450][T14560] Cannot find del_set index 1 as target [ 352.088377][ T9] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 352.091323][ T42] audit: type=1400 audit(5358345196.046:22967): avc: denied { getopt } for pid=14563 comm="syz.0.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 352.103040][T14564] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 352.108924][ T9] usb 7-1: Invalid ep0 maxpacket: 16 [ 352.118999][T14564] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.122507][T14564] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.175306][T14567] netlink: 'syz.0.2214': attribute type 21 has an invalid length. [ 352.232946][T14575] loop5: detected capacity change from 0 to 7 [ 352.239128][T14575] Dev loop5: unable to read RDB block 7 [ 352.241383][T14575] loop5: unable to read partition table [ 352.243908][T14575] loop5: partition table beyond EOD, truncated [ 352.246579][T14575] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 352.257540][ T9] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 352.278022][ T9] usb 7-1: Invalid ep0 maxpacket: 16 [ 352.282195][ T9] usb usb7-port1: unable to enumerate USB device [ 352.479444][T14577] loop2: detected capacity change from 0 to 7 [ 352.504469][T14577] Dev loop2: unable to read RDB block 7 [ 352.509158][T14577] loop2: AHDI p1 p2 p3 [ 352.511047][T14577] loop2: partition table partially beyond EOD, truncated [ 352.515135][T14586] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 352.521502][T14577] loop2: p1 start 1601398130 is beyond EOD, truncated [ 352.528348][T14577] loop2: p2 start 1702059890 is beyond EOD, truncated [ 352.618644][T14590] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 352.623280][T14590] syzkaller1: owner set to 805 [ 352.671241][T14597] overlayfs: failed to resolve './file0': -2 [ 352.725913][T14601] loop5: detected capacity change from 0 to 7 [ 352.730511][T14601] Dev loop5: unable to read RDB block 7 [ 352.732425][T14601] loop5: unable to read partition table [ 352.734370][T14601] loop5: partition table beyond EOD, truncated [ 352.736362][T14601] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 352.818123][ T42] audit: type=1400 audit(5358345196.766:22968): avc: denied { ioctl } for pid=14609 comm="syz.6.2228" path="socket:[51415]" dev="sockfs" ino=51415 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 352.818368][T14610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2228'. [ 352.840434][T14610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2228'. [ 352.849991][ T42] audit: type=1400 audit(5358345196.806:22969): avc: denied { write } for pid=14607 comm="syz.9.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 352.909102][T14608] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 352.914922][T14608] bond7 (unregistering): Released all slaves [ 352.997797][T14608] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 353.005480][T14608] bond7 (unregistering): Released all slaves [ 353.052377][ T42] audit: type=1400 audit(5358345197.006:22970): avc: denied { bind } for pid=14629 comm="syz.6.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 353.190061][T14633] loop5: detected capacity change from 0 to 7 [ 353.194537][T14633] Dev loop5: unable to read RDB block 7 [ 353.196892][T14633] loop5: unable to read partition table [ 353.201357][T14633] loop5: partition table beyond EOD, truncated [ 353.204163][T14633] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 353.279703][T14639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.284969][T14639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.309240][ T42] audit: type=1400 audit(5358345197.266:22971): avc: denied { read } for pid=14634 comm="syz.6.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 353.517575][ T41] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 353.679460][ T41] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.683643][ T41] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.691340][ T41] usb 14-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 353.694275][ T41] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.696814][ T41] usb 14-1: Product: syz [ 353.698330][ T41] usb 14-1: Manufacturer: syz [ 353.699825][ T41] usb 14-1: SerialNumber: syz [ 353.937823][ T5730] Bluetooth: hci2: command tx timeout [ 353.966866][ T50] usb 14-1: USB disconnect, device number 13 [ 354.216604][T14656] xt_hashlimit: size too large, truncated to 1048576 [ 354.274314][T14658] ntfs3(nbd6): try to read out of volume at offset 0x0 [ 354.307878][T14660] loop5: detected capacity change from 0 to 7 [ 354.310464][T14660] Dev loop5: unable to read RDB block 7 [ 354.312434][T14660] loop5: unable to read partition table [ 354.314274][T14660] loop5: partition table beyond EOD, truncated [ 354.316679][T14662] netlink: 'syz.6.2244': attribute type 1 has an invalid length. [ 354.317681][T14660] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 354.339429][T14662] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 354.376382][ T5730] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.394737][T14674] xt_time: unknown flags 0x78 [ 354.464904][T14678] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 354.650897][T14690] netlink: 'syz.6.2254': attribute type 1 has an invalid length. [ 354.653393][T14690] netlink: 756 bytes leftover after parsing attributes in process `syz.6.2254'. [ 354.660180][T14689] netlink: 'syz.6.2254': attribute type 1 has an invalid length. [ 354.662656][T14689] netlink: 756 bytes leftover after parsing attributes in process `syz.6.2254'. [ 354.699667][T14693] loop5: detected capacity change from 0 to 7 [ 354.702190][T14693] Dev loop5: unable to read RDB block 7 [ 354.706412][T14693] loop5: unable to read partition table [ 354.710283][T14693] loop5: partition table beyond EOD, truncated [ 354.712252][T14693] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 354.849717][T14708] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 354.856038][ T42] audit: type=1400 audit(5358345198.806:22972): avc: denied { setopt } for pid=14709 comm="syz.9.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 354.900532][T14710] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 355.074726][T14722] loop5: detected capacity change from 0 to 7 [ 355.081867][T14722] Dev loop5: unable to read RDB block 7 [ 355.084959][T14722] loop5: unable to read partition table [ 355.088026][T14722] loop5: partition table beyond EOD, truncated [ 355.088415][ T73] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 355.093112][T14722] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 355.257734][ T73] usb 11-1: Using ep0 maxpacket: 8 [ 355.262481][ T73] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 355.266975][ T73] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 355.270769][ T73] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.274676][ T73] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.279351][ T73] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 355.282270][ T73] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.342329][ T42] audit: type=1400 audit(5358345199.296:22973): avc: denied { write } for pid=14734 comm="syz.2.2268" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 355.343866][T14736] dns_resolver: Unsupported content type (234) [ 355.349501][ T42] audit: type=1400 audit(5358345199.296:22974): avc: denied { unlink } for pid=14734 comm="syz.2.2268" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 355.400342][T14740] overlay: Unknown parameter 'euid' [ 355.451810][T14743] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:0 [ 355.489602][ T73] usb 11-1: GET_CAPABILITIES returned 0 [ 355.491390][ T73] usbtmc 11-1:16.0: can't read capabilities [ 355.646491][T14757] loop5: detected capacity change from 0 to 7 [ 355.652226][T14757] Dev loop5: unable to read RDB block 7 [ 355.653993][T14757] loop5: unable to read partition table [ 355.655933][T14757] loop5: partition table beyond EOD, truncated [ 355.659335][T14757] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 355.699027][ C0] usbtmc 11-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 355.724958][ T73] usb 11-1: USB disconnect, device number 11 [ 355.749174][T14761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2277'. [ 355.799879][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2276'. [ 355.929070][T14771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2280'. [ 355.932107][T14771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2280'. [ 356.009477][T14786] loop5: detected capacity change from 0 to 7 [ 356.016581][T14786] Dev loop5: unable to read RDB block 7 [ 356.024895][T14786] loop5: unable to read partition table [ 356.027795][T14786] loop5: partition table beyond EOD, truncated [ 356.030542][T14786] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 356.096520][T14792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2286'. [ 356.144988][T14795] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 356.163691][T14797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2289'. [ 356.249675][T14803] tipc: Started in network mode [ 356.251900][T14803] tipc: Node identity 4, cluster identity 4711 [ 356.254591][T14803] tipc: Node number set to 4 [ 356.322546][T14808] bpf: Bad value for 'uid' [ 356.329021][T14811] loop5: detected capacity change from 0 to 7 [ 356.331756][T14811] Dev loop5: unable to read RDB block 7 [ 356.333617][T14811] loop5: unable to read partition table [ 356.335486][T14811] loop5: partition table beyond EOD, truncated [ 356.339313][T14811] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 356.435898][T14818] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 356.483046][T14825] ip6erspan0: entered promiscuous mode [ 356.537160][T14828] device-mapper: ioctl: Invalid target message parameters. [ 356.542284][T14828] xt_connbytes: Forcing CT accounting to be enabled [ 356.544449][T14828] set match dimension is over the limit! [ 356.615847][T14831] input: syz0 as /devices/virtual/input/input11 [ 356.620346][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 356.620357][ T42] audit: type=1400 audit(5358345200.576:22985): avc: denied { read } for pid=5121 comm="acpid" name="event4" dev="devtmpfs" ino=3253 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.636091][ T42] audit: type=1400 audit(5358345200.576:22986): avc: denied { open } for pid=5121 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3253 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.643722][ T42] audit: type=1400 audit(5358345200.576:22987): avc: denied { ioctl } for pid=5121 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3253 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.797326][T14841] Dev loop5: unable to read RDB block 7 [ 356.801194][T14841] loop5: unable to read partition table [ 356.803461][T14841] loop5: partition table beyond EOD, truncated [ 356.805758][T14841] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 356.846935][ T42] audit: type=1400 audit(5358345200.796:22988): avc: denied { unmount } for pid=12801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 356.873587][ T42] audit: type=1400 audit(5358345200.826:22989): avc: denied { write } for pid=14844 comm="syz.9.2305" name="kvm_hv_stimer_cleanup" dev="tracefs" ino=52761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 356.889386][ T42] audit: type=1400 audit(5358345200.836:22990): avc: denied { add_name } for pid=14844 comm="syz.9.2305" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 356.908664][ T42] audit: type=1400 audit(5358345200.846:22991): avc: denied { create } for pid=14844 comm="syz.9.2305" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 356.918898][ T42] audit: type=1400 audit(5358345200.866:22992): avc: denied { read } for pid=14844 comm="syz.9.2305" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 356.992347][T14859] netlink: 'syz.0.2310': attribute type 4 has an invalid length. [ 357.078478][T14864] 9p filesystem being mounted at /26/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 357.123496][T14866] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 357.308168][ T42] audit: type=1400 audit(5358345201.266:22993): avc: denied { mounton } for pid=14873 comm="syz.2.2314" path="/27/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 357.317024][T14875] MTRR 2 not used [ 357.320976][ T42] audit: type=1400 audit(5358345201.266:22994): avc: denied { read write } for pid=14873 comm="syz.2.2314" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 357.364730][T14880] set_capacity_and_notify: 1 callbacks suppressed [ 357.364742][T14880] loop5: detected capacity change from 0 to 7 [ 357.371495][T14880] Dev loop5: unable to read RDB block 7 [ 357.373281][T14880] loop5: unable to read partition table [ 357.375123][T14880] loop5: partition table beyond EOD, truncated [ 357.377076][T14880] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 357.478598][T14897] MTRR 2 not used [ 357.480268][T14894] xt_hashlimit: size too large, truncated to 1048576 [ 357.692879][T14913] loop5: detected capacity change from 0 to 7 [ 357.695779][T14913] Dev loop5: unable to read RDB block 7 [ 357.699022][T14913] loop5: unable to read partition table [ 357.700956][T14913] loop5: partition table beyond EOD, truncated [ 357.703002][T14913] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 357.745667][T14915] netlink: 'syz.6.2328': attribute type 1 has an invalid length. [ 357.755233][T14915] netlink: 'syz.6.2328': attribute type 1 has an invalid length. [ 357.758576][T14915] netlink: 'syz.6.2328': attribute type 2 has an invalid length. [ 357.792459][T14920] overlayfs: failed to resolve './file1': -2 [ 357.804028][T14920] overlayfs: overlapping lowerdir path [ 357.967543][ T50] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 358.036046][T14932] Mass Storage Function, version: 2009/09/11 [ 358.040561][T14932] LUN: removable file: (no medium) [ 358.100984][T14937] netlink: 'syz.6.2334': attribute type 2 has an invalid length. [ 358.120950][ T50] usb 14-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 358.123975][ T50] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.134454][ T50] usb 14-1: Product: syz [ 358.135911][ T50] usb 14-1: Manufacturer: syz [ 358.138135][ T50] usb 14-1: SerialNumber: syz [ 358.214129][T14946] SELinux: policydb version 1737317562 does not match my version range 15-35 [ 358.217008][T14946] SELinux: failed to load policy [ 358.299478][T14950] loop5: detected capacity change from 0 to 7 [ 358.314237][T14950] Dev loop5: unable to read RDB block 7 [ 358.316865][T14950] loop5: unable to read partition table [ 358.320697][T14950] loop5: partition table beyond EOD, truncated [ 358.323307][T14950] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 358.543982][T14975] netlink: 'syz.6.2344': attribute type 10 has an invalid length. [ 358.561809][T14975] team0: Port device veth0 added [ 358.574114][T14975] netlink: 'syz.6.2344': attribute type 10 has an invalid length. [ 358.608268][ T50] rtl8150 14-1:1.0: couldn't reset the device [ 358.610311][ T50] rtl8150 14-1:1.0: probe with driver rtl8150 failed with error -5 [ 358.637200][ T50] usb 14-1: USB disconnect, device number 14 [ 358.642493][T14981] jffs2: notice: (14981) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 358.657253][T14981] jffs2 filesystem being mounted at /281/mnt supports timestamps until 2106-02-07 (0xffffffff) [ 358.753710][T14988] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 358.816860][T14991] loop5: detected capacity change from 0 to 7 [ 358.820047][T14991] Dev loop5: unable to read RDB block 7 [ 358.821900][T14991] loop5: unable to read partition table [ 358.823791][T14991] loop5: partition table beyond EOD, truncated [ 358.830077][T14991] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 358.874108][T14993] ================================================================== [ 358.876660][T14993] BUG: KASAN: invalid-free in f_uac2_opts_c_srate_store+0x1d4/0x260 [ 358.879404][T14993] Free of addr ffff8880528c0f20 by task syz.0.2349/14993 [ 358.881795][T14993] [ 358.882567][T14993] CPU: 3 UID: 0 PID: 14993 Comm: syz.0.2349 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.882585][T14993] Tainted: [L]=SOFTLOCKUP [ 358.882589][T14993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 358.882598][T14993] Call Trace: [ 358.882613][T14993] [ 358.882618][T14993] dump_stack_lvl+0x100/0x190 [ 358.882682][T14993] print_report+0x13d/0x4b0 [ 358.882712][T14993] ? __virt_addr_valid+0x239/0x430 [ 358.882744][T14993] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 358.882762][T14993] kasan_report_invalid_free+0xb8/0x190 [ 358.882796][T14993] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 358.882816][T14993] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 358.882833][T14993] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 358.882850][T14993] check_slab_allocation+0xe1/0xf0 [ 358.882865][T14993] ? f_uac2_opts_c_srate_store+0x160/0x260 [ 358.882882][T14993] kfree+0x1b6/0x6c0 [ 358.882894][T14993] ? __asan_memcpy+0x3c/0x60 [ 358.882908][T14993] f_uac2_opts_c_srate_store+0x1d4/0x260 [ 358.882926][T14993] ? __pfx_f_uac2_opts_c_srate_store+0x10/0x10 [ 358.882943][T14993] ? configfs_write_iter+0x388/0x4e0 [ 358.882968][T14993] configfs_write_iter+0x302/0x4e0 [ 358.882982][T14993] vfs_write+0x6ac/0x1050 [ 358.883001][T14993] ? __pfx_configfs_write_iter+0x10/0x10 [ 358.883018][T14993] ? __pfx_vfs_write+0x10/0x10 [ 358.883042][T14993] ksys_write+0x12a/0x250 [ 358.883054][T14993] ? __pfx_ksys_write+0x10/0x10 [ 358.883067][T14993] do_syscall_64+0x115/0x870 [ 358.883127][T14993] ? clear_bhb_loop+0x70/0xc0 [ 358.883141][T14993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.883155][T14993] RIP: 0033:0x7efeeb59e0d9 [ 358.883166][T14993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.883178][T14993] RSP: 002b:00007efeec543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.883190][T14993] RAX: ffffffffffffffda RBX: 00007efeeb825fa0 RCX: 00007efeeb59e0d9 [ 358.883198][T14993] RDX: 0000000000000021 RSI: 0000200000000040 RDI: 0000000000000003 [ 358.883206][T14993] RBP: 00007efeeb635024 R08: 0000000000000000 R09: 0000000000000000 [ 358.883213][T14993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.883219][T14993] R13: 00007efeeb826038 R14: 00007efeeb825fa0 R15: 00007fffed6467b8 [ 358.883229][T14993] [ 358.883233][T14993] [ 358.958535][T14993] Allocated by task 14993: [ 358.960128][T14993] kasan_save_stack+0x30/0x50 [ 358.962018][T14993] kasan_save_track+0x14/0x30 [ 358.963728][T14993] __kasan_kmalloc+0xaa/0xb0 [ 358.965294][T14993] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 358.967313][T14993] kstrdup+0x51/0xe0 [ 358.968573][T14993] f_uac2_opts_c_srate_store+0x113/0x260 [ 358.970339][T14993] configfs_write_iter+0x302/0x4e0 [ 358.971970][T14993] vfs_write+0x6ac/0x1050 [ 358.973345][T14993] ksys_write+0x12a/0x250 [ 358.974706][T14993] do_syscall_64+0x115/0x870 [ 358.976193][T14993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.978057][T14993] [ 358.978826][T14993] The buggy address belongs to the object at ffff8880528c0f00 [ 358.978826][T14993] which belongs to the cache kmalloc-64 of size 64 [ 358.983263][T14993] The buggy address is located 32 bytes inside of [ 358.983263][T14993] 34-byte region [ffff8880528c0f00, ffff8880528c0f22) [ 358.987829][T14993] [ 358.988775][T14993] The buggy address belongs to the physical page: [ 358.991256][T14993] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x528c0 [ 358.991451][T14995] input: syz0 as /devices/virtual/input/input13 [ 358.994638][T14993] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 358.994658][T14993] page_type: f5(slab) [ 358.994676][T14993] raw: 00fff00000000000 ffff88801bc428c0 dead000000000100 dead000000000122 [ 358.994694][T14993] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 359.006168][T14993] page dumped because: kasan: bad access detected [ 359.008158][T14993] page_owner tracks the page as allocated [ 359.010077][T14993] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6029, tgid 6029 (modprobe), ts 57900494833, free_ts 57364166403 [ 359.016725][T14993] post_alloc_hook+0xfd/0x120 [ 359.018296][T14993] get_page_from_freelist+0xf48/0x3530 [ 359.020093][T14993] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 359.022169][T14993] new_slab+0xa2/0x640 [ 359.023667][T14993] refill_objects+0xe3/0x410 [ 359.025482][T14993] __pcs_replace_empty_main+0x376/0x680 [ 359.027629][T14993] __kmalloc_noprof+0x66d/0x820 [ 359.029529][T14993] tomoyo_encode2+0xfb/0x3c0 [ 359.031175][T14993] tomoyo_encode+0x29/0x50 [ 359.031188][T14993] tomoyo_realpath_from_path+0x18c/0x690 [ 359.031200][T14993] tomoyo_check_open_permission+0x2af/0x3c0 [ 359.031218][T14993] tomoyo_file_open+0x6b/0x90 [ 359.038706][T14993] security_file_open+0xb5/0x1e0 [ 359.040446][T14993] do_dentry_open+0x588/0x14d0 [ 359.042100][T14993] vfs_open+0x82/0x3f0 [ 359.043469][T14993] path_openat+0x2873/0x4280 [ 359.044981][T14993] page last free pid 5721 tgid 5721 stack trace: [ 359.047188][T14993] free_pages_prepare+0x586/0xd80 [ 359.048953][T14993] __free_contig_range_common+0x14f/0x250 [ 359.050756][T14993] free_pages_bulk+0x12a/0x200 [ 359.052579][T14993] vm_area_free_pages+0xad/0x2b0 [ 359.054300][T14993] vfree+0x107/0x750 [ 359.055558][T14993] kcov_close+0x34/0x60 [ 359.057062][T14993] __fput+0x3ff/0xb50 [ 359.058335][T14993] task_work_run+0x150/0x240 [ 359.059930][T14993] do_exit+0x951/0x2ae0 [ 359.061218][T14993] do_group_exit+0xd5/0x2a0 [ 359.062669][T14993] __x64_sys_exit_group+0x3e/0x50 [ 359.064255][T14993] x64_sys_call+0x102c/0x1530 [ 359.065745][T14993] do_syscall_64+0x115/0x870 [ 359.067213][T14993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.069069][T14993] [ 359.069836][T14993] Memory state around the buggy address: [ 359.071586][T14993] ffff8880528c0e00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 359.074213][T14993] ffff8880528c0e80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 359.077040][T14993] >ffff8880528c0f00: 00 00 00 00 02 fc fc fc fc fc fc fc fc fc fc fc [ 359.079866][T14993] ^ [ 359.081851][T14993] ffff8880528c0f80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 359.084689][T14993] ffff8880528c1000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 359.087191][T14993] ================================================================== [ 359.092803][T14993] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 359.095443][T14993] CPU: 3 UID: 0 PID: 14993 Comm: syz.0.2349 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.099617][T14993] Tainted: [L]=SOFTLOCKUP [ 359.101327][T14993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 359.105224][T14993] Call Trace: [ 359.106530][T14993] [ 359.107657][T14993] dump_stack_lvl+0x100/0x190 [ 359.109396][T14993] vpanic+0x552/0x970 [ 359.110958][T14993] ? __pfx_vpanic+0x10/0x10 [ 359.112691][T14993] ? mark_held_locks+0x40/0x70 [ 359.114522][T14993] panic+0xd1/0xe0 [ 359.115893][T14993] ? __pfx_panic+0x10/0x10 [ 359.117456][T14993] ? preempt_schedule_common+0x42/0xc0 [ 359.119496][T14993] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 359.121673][T14993] check_panic_on_warn.cold+0x19/0x34 [ 359.123570][T14993] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 359.125597][T14993] end_report.part.0+0x3a/0x90 [ 359.127385][T14993] kasan_report_invalid_free.cold+0xd/0x12 [ 359.129476][T14993] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 359.131526][T14993] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 359.133448][T14993] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 359.135281][T14993] check_slab_allocation+0xe1/0xf0 [ 359.136889][T14993] ? f_uac2_opts_c_srate_store+0x160/0x260 [ 359.138731][T14993] kfree+0x1b6/0x6c0 [ 359.140036][T14993] ? __asan_memcpy+0x3c/0x60 [ 359.141497][T14993] f_uac2_opts_c_srate_store+0x1d4/0x260 [ 359.143274][T14993] ? __pfx_f_uac2_opts_c_srate_store+0x10/0x10 [ 359.145200][T14993] ? configfs_write_iter+0x388/0x4e0 [ 359.146855][T14993] configfs_write_iter+0x302/0x4e0 [ 359.148478][T14993] vfs_write+0x6ac/0x1050 [ 359.149847][T14993] ? __pfx_configfs_write_iter+0x10/0x10 [ 359.151635][T14993] ? __pfx_vfs_write+0x10/0x10 [ 359.153358][T14993] ksys_write+0x12a/0x250 [ 359.154718][T14993] ? __pfx_ksys_write+0x10/0x10 [ 359.156249][T14993] do_syscall_64+0x115/0x870 [ 359.157697][T14993] ? clear_bhb_loop+0x70/0xc0 [ 359.159194][T14993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.161075][T14993] RIP: 0033:0x7efeeb59e0d9 [ 359.162621][T14993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.169153][T14993] RSP: 002b:00007efeec543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 359.171738][T14993] RAX: ffffffffffffffda RBX: 00007efeeb825fa0 RCX: 00007efeeb59e0d9 [ 359.174540][T14993] RDX: 0000000000000021 RSI: 0000200000000040 RDI: 0000000000000003 [ 359.177000][T14993] RBP: 00007efeeb635024 R08: 0000000000000000 R09: 0000000000000000 [ 359.179459][T14993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.181924][T14993] R13: 00007efeeb826038 R14: 00007efeeb825fa0 R15: 00007fffed6467b8 [ 359.184388][T14993] [ 359.186018][T14993] Kernel Offset: disabled [ 359.187376][T14993] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:07:09 Registers: info registers vcpu 0 CPU#0 RAX=00000000001bc5f1 RBX=ffffffff8e891480 RCX=ffffffff8bbab335 RDX=0000000000000000 RSI=ffffffff8e1a8d91 RDI=ffffffff8c400380 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bba98ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c347b93 CR3=0000000043ea4000 CR4=00352ef0 DR0=0000000000000008 DR1=0000000000000002 DR2=0000000000000404 DR3=ffffffffefffff14 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b57eaa RDX=ffff88801eaea540 RSI=ffffffff81b57ece RDI=ffff88801eaea540 RBP=0000000000000001 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=0000000000000000 RIP=ffffffff81b57ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efc1381fff8 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 676e697a65657266 5f746e657261702e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8b73fb06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8b73fb06 00007ffc8b73fb0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2c6c35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2c6c35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2c6c357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2c6c35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff82839964 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff91218fd0 RBP=ffff888036ca3720 RSP=ffffc9000661f600 R8 =0000000000000000 R9 =ffffed1006d946e4 R10=ffff888036ca3727 R11=0000000000000000 R12=ffffe8fefc69a7d0 R13=ffff888036ca3000 R14=0000607e266ae7c0 R15=ffffe8fefc69a7c0 RIP=ffffffff827ae95d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007efc138416c0 ffffffff 00c00000 GS =0000 ffff8880d5fec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff5764f020 CR3=0000000052d8b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a336b5 RDI=ffffffff9b9f7ec0 RBP=ffffffff9b9f7e80 RSP=ffffc9000364f5b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b6ea22c R15=ffffffff85a33650 RIP=ffffffff85a336df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007efeec5436c0 ffffffff 00c00000 GS =0000 ffff8880d60ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2e123ffc CR3=000000003e492000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffed646ca6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffed646ca6 00007fffed646cac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeeb635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeeb635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeeb6357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeeb635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeeb7f25f8 00007efeeb7f25c8 00007efeeb7f2600 00007efeeb7f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000