last executing test programs: 2m50.445750958s ago: executing program 32 (id=33): syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x7) ioctl$BSG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000100)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000040)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = dup(r0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x2) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000080)={0xb6, 0x0, 0x5}) 2m37.919053662s ago: executing program 33 (id=416): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0600000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdir(0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x204000, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000180)=0x2, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pivot_root(&(0x7f0000002000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYBLOB="0100fdfffffffbdbdf59848d0b000c00020000000000003a6700040007800c0005002001000000000000"], 0x30}}, 0x4000c40) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x424) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) fanotify_mark(r4, 0x71, 0x40000009, r5, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b43318", 0x3c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/153, 0x99}], 0x1}, 0x0) r9 = inotify_init1(0x80800) inotify_add_watch(r9, &(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000220) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000040)={0xf0f018, 0x1}) io_submit(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) 2m31.929594339s ago: executing program 34 (id=474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x11c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xf0, 0x3, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xe8, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, {0xb0, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xa0, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x7d, 0x3, "49bba580a7a959f7d151e96394ecaacab739570097af159f98194763bf491c43e1d7ef539a61c6bebf2ba068b235e15d297457a8192cb2da52cd9e74aaabaec055b40e4a61b510cb7767ae1a734cb7572106456a366dea2eebb9e4a9d15f442279b4bedf26a29f77d55db7a95c30b70f09d34e15cbe6dc9b3f"}, @NFTA_MATCH_NAME={0xc, 0x1, 'cluster\x00'}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x188}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 2m31.735183469s ago: executing program 5 (id=482): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000003a40)=[{{&(0x7f00000004c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}, {{&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x2, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RCREATE(r3, &(0x7f00000000c0)={0x18, 0x73, 0x1, {{0x20, 0x4, 0x5}, 0x6}}, 0x18) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) 2m31.681601025s ago: executing program 5 (id=483): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, 0x11}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 2m31.48040505s ago: executing program 5 (id=488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_dev$dri(&(0x7f0000000040), 0xa715, 0x40840) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000014001100010080000000000009000000080002"], 0x1c}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000aa40)={0x28, r6, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x61}, @void, @val={0xc, 0x99, {0xfffffffb, 0x18}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x8004) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840000c1", @ANYRES16=r6, @ANYBLOB="10002dbd7000fbdbdf2534000000050020014200000005002001250000000600fd00080000000a000600505050505050000020003400fc0975d7e97ef32082d0a55463bebf85073c330f1ab01080558734651400550031c2f0eb3930c13cbb914ff3cd374f59050020015900000005002001030000000600fd0000000000"], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) 2m31.301404248s ago: executing program 5 (id=489): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x2) r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x122) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x803400, 0x0) umount2(0x0, 0x1) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 2m31.212072284s ago: executing program 35 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000004c0)=0xffffff81) tee(r1, r1, 0x5, 0xa) r2 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="19f7d49557fd84cd93ecd4"]) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000e182ad34a015ee9c00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x4a863c90, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x0, 0xffffffff, 0x3010, 0x0, 0x6, 0x6, 0x0, 0x17}}) r9 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x1, &(0x7f0000000040)={0x4b5a9da54893e123, 0xf, 0x8, 0x2, 0x4}, 0x8, 0xea, 0x8, 0x0, 0x0, 0x0, 0x0}) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x4f27, 0x5, 0x4, 0x4, 0x5, 0x6, 0x1, 0x7, 0xa, 0x100, 0x2, 0x0, 0x1, 0x8, 0x1e, 0x1, 0x0, 0xa449, 0x800003, 0x5, 0x81, 0xcaa7, 0xfffffffe, 0xec, 0xb, 0x2a4e, 0x3c, 0x8, 0x6, 0x0, 0x7f, 0x4]}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000080900020073797a3100000000050004000000030011000300686173683a6e65742c6e65740000000014000780050015004b0000000800114000000000050005000a0000000500010006"], 0x60}}, 0x0) 2m31.170284026s ago: executing program 5 (id=492): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r4, 0x2, 0x0, 0x1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000835}, 0x24040040) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x41424344, @ANYRESHEX=0x0, @ANYBLOB="51c2dac77257b23732f098d64f75707dfad52e4217566e0f976134420be876db33471ae7a11fc2ec8282a96cc8e623c2bd5869aa42cb63f6571e0865f13505ca34669acf960c175705ec36f27d2f53d898079bd77c2aa99bec2a63ffac42aa3389a826b1bb5ee23560960cc58c288932c25c5b1dfdd907cd84e8b2f513243c04a18c23708a57462edbdf0761d0018e"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x26, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000008c04"]) 2m30.697653414s ago: executing program 5 (id=501): syz_emit_ethernet(0x3a, &(0x7f00000083c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000030800450000280000000000069078ac1414bbac1414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd}', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r5, 0x0, 0x0) (async) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="2a00000006000000000000000000000001000000000000000000000200200000010000000200000000081275f567f592440df5bb5518d125b37a0b78dfe6b92d2f75e2c77bcb1d3266fa52d590d5af00b4a719047286cb38f982d727389e136dc23c6722"], 0x2a) (async) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000140)={0x2020}, 0x2020) r8 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r9 = fsmount(r8, 0x1, 0x0) (rerun: 64) fchdir(r9) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000100)="f4440f20c03504000000440f8cc066ba4267663e66460fe750bf26430858fac4a2fd252f410f2ed8f30fc7303439c74424000c000000c7442402bb000000c7442406000000000f0114244e48c2c971dd13", 0x51}], 0x1, 0x80, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) socket(0xa, 0x2400000001, 0x0) 2m30.667884456s ago: executing program 36 (id=501): syz_emit_ethernet(0x3a, &(0x7f00000083c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000030800450000280000000000069078ac1414bbac1414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd}', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r5, 0x0, 0x0) (async) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="2a00000006000000000000000000000001000000000000000000000200200000010000000200000000081275f567f592440df5bb5518d125b37a0b78dfe6b92d2f75e2c77bcb1d3266fa52d590d5af00b4a719047286cb38f982d727389e136dc23c6722"], 0x2a) (async) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000140)={0x2020}, 0x2020) r8 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r9 = fsmount(r8, 0x1, 0x0) (rerun: 64) fchdir(r9) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000100)="f4440f20c03504000000440f8cc066ba4267663e66460fe750bf26430858fac4a2fd252f410f2ed8f30fc7303439c74424000c000000c7442402bb000000c7442406000000000f0114244e48c2c971dd13", 0x51}], 0x1, 0x80, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) socket(0xa, 0x2400000001, 0x0) 1m28.360624828s ago: executing program 8 (id=1469): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000180)=""/226, 0xe2}) r1 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth0\x00'}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x31b}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x31b}) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) (async) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = eventfd2(0x8, 0x1) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) getsockopt$ax25_int(r3, 0x101, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) write$eventfd(r2, &(0x7f0000000040)=0x6, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) 1m28.358917268s ago: executing program 8 (id=1470): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000080)=0xd, 0x4) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8021}, 0x24008084) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0xd}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@deltaction={0x1c0, 0x31, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x88, 0x1, [{0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7db}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xad0a}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) socket(0xa, 0x3, 0x3a) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000080)=0xd, 0x4) (async) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8021}, 0x24008084) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0xd}, 0xc) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@deltaction={0x1c0, 0x31, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x88, 0x1, [{0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7db}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xad0a}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) 1m28.23070663s ago: executing program 8 (id=1472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000840)={[0x6e, 0xffffffff, 0x3, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffe, 0x7, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x3, 0x0, 0x4, 0xfffffffffffffffc, 0x8], 0x1, 0x3c4210}) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x11, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4$alg(r4, 0x0, 0x0, 0x80800) sendmmsg$sock(r5, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)="83", 0x1}, {&(0x7f0000000180)="86f79f88fff54497", 0x8}], 0x2}}], 0x1, 0x4080044) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r6, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r5, &(0x7f00000003c0)="a69601d330352e1877", 0x9}]) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x204, 0x2c, 0xd27, 0x30bda9, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1d0, 0x2, [@TCA_MATCHALL_ACT={0x1cc, 0x2, [@m_xt={0x1c8, 0x9, 0x0, 0x0, {{0x7}, {0x16c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x96, 0x6, {0x5, 'security\x00', 0x54, 0x8, "8652ca4d98e0222b1d238ed5b818034fbd6af025e0ef655764491bf899ba5602df8e3e36931c57b20c39a7ae1e3b402b6ff83b5151ee083dd1aff42d341e84a49f10d6c44c538953471d53790f0f003b0c3d25749b13ba095e3bb13390b932c5abd589d856a2137f91143096"}}, @TCA_IPT_TARG={0xc0, 0x6, {0x5, 'mangle\x00', 0x0, 0x80, "388b2c2326cfccd7e861e8709cafe27f57ea536e36379e9650f16662c44afc7fc369307962ac350947331455349f3c0addd90c5af0931a29b5304e741bb1b191222d0840c3e6181ce71a1b74e24809c45aa9095e1145b5ffd8b29b44704366f755a000fb4094edd032806391e70af532b5d01c3229cfebc35ca82dc1085fecd79b8e6d87ed300149831cce09bc0a5fa85ea9a0faa13c"}}, @TCA_IPT_HOOK={0x8}]}, {0x35, 0x6, "087f0161191bc0864d0fc118fb2f52fe781285fce1d6ef7e9edce461fd22dc27adb3077241aa934d65244864240608d6c2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\b\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf250100000000000000014100000018001700000011000000076574683a6261746164763000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r9, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4001) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) 1m27.980404008s ago: executing program 8 (id=1478): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) symlink(&(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000240)='./file0\x00') setpgid(0x0, r0) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x22, 0x2}]}}}}}}}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 1m27.979913278s ago: executing program 8 (id=1479): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x80000000000007, 0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = syz_io_uring_setup(0x40ce, &(0x7f00000001c0)={0x0, 0xe69c, 0x10, 0x1, 0x257, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f00000c6000/0x3000)=nil, 0x3000, 0x1000003, 0x20010, r2, 0x0) rt_tgsigqueueinfo(r0, r0, 0x36, &(0x7f0000000000)={0x6, 0x3, 0x200}) 1m26.609822676s ago: executing program 8 (id=1512): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) 1m26.539510267s ago: executing program 37 (id=1512): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) 1m24.040940897s ago: executing program 7 (id=1549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) r4 = eventfd2(0x585, 0x1) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x0, r4}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000000000000000000300"], 0x0, 0x51}, 0x28) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r6, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x24}}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="764b9e147583ddd0569ba56a5cfd", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r12) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r13, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c080}, 0x800) r14 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r15 = syz_pidfd_open(r14, 0x0) ioctl$int_in(r15, 0x5421, &(0x7f0000000280)=0x3) waitid$P_PIDFD(0x3, r15, 0x0, 0x8, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)={0xa8, r11, 0x1, 0x0, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) 1m22.910669345s ago: executing program 7 (id=1553): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xdc, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x7fffffff, 0x1, 0x8000, 0x210, 0xffffffffffffffff, 0x9, '\x00', r1, r2, 0x3, 0x2, 0x5}, 0x50) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4) 1m22.810679192s ago: executing program 7 (id=1556): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[], 0x18) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x3) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='jfs\x00', 0x8080, &(0x7f00000001c0)='discard') 1m22.730701395s ago: executing program 7 (id=1558): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4e00, 0x0) ioctl$DVD_WRITE_STRUCT(r1, 0x5390, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10000, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0, @ANYBLOB='3']) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r2 = socket$alg(0x26, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000006980)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{&(0x7f00000008c0)=@generic, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/247, 0xf7}, {&(0x7f0000000a40)=""/244, 0xf4}], 0x2, &(0x7f0000000b80)=""/93, 0x5d}, 0x6}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000c00)=""/81, 0x51}, {&(0x7f0000000c80)=""/66, 0x42}, {&(0x7f0000000d00)=""/127, 0x7f}, {&(0x7f0000000d80)=""/71, 0x47}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/9, 0x9}], 0x6, &(0x7f0000001ec0)=""/120, 0x78}, 0x5}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000001f40)=""/47, 0x2f}, {&(0x7f0000001f80)=""/203, 0xcb}, {&(0x7f0000002080)=""/190, 0xbe}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/19, 0x13}, {&(0x7f0000003180)=""/26, 0x1a}, {&(0x7f00000031c0)=""/114, 0x72}], 0x7, &(0x7f00000032c0)=""/4096, 0x1000}, 0x121e}, {{&(0x7f00000042c0)=@caif=@rfm, 0x80, &(0x7f0000006780)=[{&(0x7f0000004340)=""/255, 0xff}, {&(0x7f0000004440)=""/105, 0x69}, {&(0x7f00000044c0)=""/81, 0x51}, {&(0x7f0000004540)=""/209, 0xd1}, {&(0x7f0000004640)=""/71, 0x47}, {&(0x7f00000046c0)=""/128, 0x80}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000005740)=""/4096, 0x1000}, {&(0x7f0000006740)=""/20, 0x14}], 0x9, &(0x7f0000006840)=""/21, 0x15}, 0xffff}], 0x4, 0x1, &(0x7f00000069c0)={r3, r4+60000000}) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x14, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4441}, 0x90) rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) syz_clone(0x0, &(0x7f0000000680)="9cffc72284b76712ea4b4d97b3b4508bf97b31e1aa738b51204cda2c35c7847e7b4ba76efc27bf3d7cfb5e163ff19c928e75b58b13121519d4341d0fda8baf96ba33e9d2a1abea9b40fcad56f981f19d6948d2811b02163b5eb5e671e09bb72c47e9f54160bd5e5f94fbb9347129072030febe6a5e9d879a1646cb43f04d8a111a70a77702fec519c5ccc81b98f49a94d5151decf254a2eb731ce4c5fcddbd2dd3e606bd875d39daace98bf12b48", 0xae, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)="0b0f8b294e1bd3811ae5195806a4075868c42b7e1400fc86502ec4079e9ce4e1669b10002d10639179a789c5bb1aabbe41e4adbaccdf22b6d0747416e08d22768c4990aa080153087df39fc877e30d87c61bbe6f14132b1c2678f02e45fe4f2a9687b376ade5bdb97efd6ccb2c9936e74cc146ee2157997aa810641d17c6ffc3b41ffc7bf8bfe557f5b81169db07dc79d183bf574fb9c557122b") ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0x6) readlink(&(0x7f0000000200)='./file1\x00', &(0x7f0000000600)=""/84, 0x54) ioctl$TCFLSH(r6, 0x540b, 0x2) link(&(0x7f0000000140)='./file1\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x400) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m22.560864202s ago: executing program 7 (id=1559): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB="2e00000010"], 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r3, 0x0, &(0x7f0000579000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x8, r5, 0x0, 0x5845, 0xd0, &(0x7f0000000600)="f35b08699c18dc98b93625d23bd0a04079b8da87ab7ac27e046b61029e6c0c8e06e0351919fd66eb45448b2985c708a676f81c2500d56295b83af9e5c2dbb4154abaa1e1ec994c14fcefee6bb85cb11eb8ae0e72baa9a60e769019f18a5c3abd9ad5fbd0bdfc12225e7315f36c92d0a56bf742bc7cd244238e8e67b99352e2a095a453cc74753095a923a862b942eea60137fa50aacce86fb4309c5c995df45b7c615672a61153009664578992d803ea545a22c92227f74db2dfc9c5881fbe6f7b1bccee43530b44a81794d3b7469ee2", 0x5}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x1, 0x807c0, 0x356b76}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r4, 0x0, r6}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000001440), 0x49001, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r5, 0x0, 0x5, 0x0, &(0x7f0000000080), 0x5}) 1m20.899042993s ago: executing program 7 (id=1571): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad00000a"], 0x125) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000240)=""/2, &(0x7f0000000280)=0x2) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYRES16=r4, @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r6 = epoll_create1(0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001d}) read$char_usb(r7, &(0x7f0000000100)=""/169, 0xa9) epoll_pwait(r6, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffd, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1m20.795341889s ago: executing program 38 (id=1571): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad00000a"], 0x125) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000240)=""/2, &(0x7f0000000280)=0x2) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYRES16=r4, @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r6 = epoll_create1(0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001d}) read$char_usb(r7, &(0x7f0000000100)=""/169, 0xa9) epoll_pwait(r6, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffd, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1m1.631776441s ago: executing program 6 (id=1876): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 1m1.539188315s ago: executing program 6 (id=1877): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x20, 0x2, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000810) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB="140000003800014b99bd7004ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) listen(r2, 0x80000002) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000040)={0x0, 0x1f, &(0x7f0000000280), 0x2d}, 0x2) 1m1.537059479s ago: executing program 6 (id=1879): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r3) read$FUSE(r0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000002) pipe2$9p(&(0x7f0000000240), 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) close(0x3) (async) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) (async) syz_usb_disconnect(r3) (async) read$FUSE(r0, 0x0, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000002) (async) 58.48982807s ago: executing program 6 (id=1916): r0 = syz_open_dev$sndpcmc(&(0x7f0000001180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f00000011c0)) fsetxattr$security_ima(r0, &(0x7f0000000440), &(0x7f0000000480)=@md5={0x1, "56ea3bdba4f04f16a026b4e5fb91d21e"}, 0x11, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f72"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000004c0)={0x7, 0x2, 0x3, 0x0, 0x4}) dup3(r1, r1, 0x80000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000040)=""/149, 0x4000, 0x1000, 0x552836cb, 0x1}, 0x20) 58.377934318s ago: executing program 6 (id=1917): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x26, 0x7, r2, 0x0, &(0x7f0000579000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x0, 0x7d}, @raw32}], 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1414bb0c0002800500010000000000240002801400018008000100ac14140008000200ac1414aa0c000280050001000000000008000740000000002c000e"], 0x90}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0xc8, 0x3, 0x1, 0x101, 0x0, 0x0, {0x3}, [@CTA_TUPLE_ORIG={0xb4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0xc8}}, 0x4040) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f00000005c0)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x7ffd}) 57.82006769s ago: executing program 6 (id=1920): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x22, 0x2, 0x3) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r5}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x7c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xedc}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x2400c001) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0x5, 0x31424752, 0x5, 0xe, 0x5, 0x4, 0x2000f5e4, 0x0, 0x0, 0x1, 0x1}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0x5, 0x31424752, 0x5, 0xe, 0x5, 0x4, 0x2000f5e4, 0x0, 0x0, 0x1, 0x1}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 57.706145173s ago: executing program 39 (id=1920): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x22, 0x2, 0x3) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r5}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x7c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xedc}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x2400c001) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0x5, 0x31424752, 0x5, 0xe, 0x5, 0x4, 0x2000f5e4, 0x0, 0x0, 0x1, 0x1}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0x5, 0x31424752, 0x5, 0xe, 0x5, 0x4, 0x2000f5e4, 0x0, 0x0, 0x1, 0x1}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 50.147155355s ago: executing program 9 (id=2028): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) write$tun(r2, &(0x7f0000000600)=ANY=[], 0x32) (async, rerun: 32) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) (async, rerun: 32) open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x41) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast1}, &(0x7f0000000240)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x200, 0x7fffffff, 0xfffffffa, 0x100, r2, 0x3, '\x00', r6, r2, 0x5, 0x3, 0x1, 0x7}, 0x50) (async) close_range(r5, r5, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x0, [0x2], [0x80ffff], [], [0x6]}) 49.970149355s ago: executing program 9 (id=2032): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000240)="f7293eda8d516e660f164fd5baf80c66b838833b8466efbafc0cedb809010f00d87c00c101d10f20c0f30fc7fe0f22c0660fae38b8a3008ee8", 0xfffffffffffffe02}], 0x1, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0, 0xffffffffffffff42}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x7ff, 0x800000000000008, 0x9, 0x7fffffff, 0x6, 0x5, 0x1, 0xb608, 0x6, 0x2, 0xfffffffffffffe01, 0x7fffffffffffffff, 0xc6b, 0x3, 0x42, 0x101], 0x0, 0x1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 49.799193819s ago: executing program 9 (id=2035): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)=0x0) r5 = syz_io_uring_setup(0x34ef, &(0x7f0000000400)={0x0, 0xfffffffe, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r6, r4, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r3, 0x2003, 0x0, 0x26, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r7, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) 48.587858852s ago: executing program 9 (id=2046): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000500)="440f0966b841008ed080bb0000000091b9280900000f3266b815018ed8f2410f7cdf66baf80cb8c071eb80c3efefbafc0cb807000000ef0f20e0c1525e770f22e0b94a0200000f320f01c8b86aa24c87ef66bafc0c66b8117a66ef", 0x5b}], 0x1, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mprotect(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x2000000) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) getpeername$unix(r3, 0x0, &(0x7f0000000400)) r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000090000", @ANYRES32], 0x48) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000009441"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47.575993119s ago: executing program 9 (id=2052): r0 = socket(0x10, 0x3, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bsg/0:0:0:0\x00', 0x28903, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x6}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11f, 0x11f, 0x5, [@volatile={0xf, 0x0, 0x0, 0x9, 0x1}, @datasec={0xe, 0x5, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x1}, {0x5, 0xf, 0xd}, {0x3, 0x2, 0x800}, {0x3, 0x4, 0x4}, {0x5, 0x1, 0x2}], "4ad5c0"}, @func={0xa, 0x0, 0x0, 0xc, 0x1}, @union={0x7, 0x2, 0x0, 0x5, 0x0, 0x7, [{0x10, 0x1}, {0x8, 0x2}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0xe, 0x1}, {0xc, 0x4}, {0x6, 0x4}, {0x4, 0x4}, {0x5, 0x1}, {0x3}, {0xf, 0x4}]}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @union={0xe, 0x3, 0x0, 0x5, 0x1, 0x264, [{0xe, 0x0, 0xb}, {0xe, 0x4, 0x12}, {0x10, 0x3, 0xffff}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x4d, 0x0, 0x6f, 0x6}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000d80)=""/80, 0x13d, 0x50, 0x0, 0x7, 0x10000}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r5, 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e80)={0xffffffffffffffff, 0x80000001, 0x10}, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x83}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1c, 0x17, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0xff, 0xa6, &(0x7f0000000b40)=""/166, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1d, r3, 0x8, &(0x7f0000000e40)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, &(0x7f0000000f40)=[0x1, r6, r7, r8], 0x0, 0x10, 0x1}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x241}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r9, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r10) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r12 = accept$alg(r11, 0x0, 0x0) sendmsg$alg(r12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r12, &(0x7f0000000600), 0xfec8) recvmmsg(r12, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f0000000800)=""/49, 0x31}, {&(0x7f00000009c0)=""/222, 0xde}], 0x8, &(0x7f00000010c0)=""/130, 0x82, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b70700000000000063119f00000000000700000000000000950000000000000086b223c17fd5c6311e80752befb60f283890ff0a97195cba4872b282cd13a47f256c1748557c"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 46.500706159s ago: executing program 9 (id=2056): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000790408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x4f) 46.431847143s ago: executing program 40 (id=2056): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000790408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x4f) 42.919837737s ago: executing program 1 (id=2114): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000f000000500b4550182195f57584839e3ce0791e3c2a50446049"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001c0001000000000004086aa42d"], 0x30}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) (async) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$inet_opts(r6, 0x0, 0x1, &(0x7f0000000980)="9f", 0x1) (async) setsockopt$inet_opts(r6, 0x0, 0x1, &(0x7f0000000980)="9f", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0), 0x4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x30, r5, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x3ff, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x4000001) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x30, r5, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x3ff, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x4000001) r7 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x48000) ioctl$CEC_RECEIVE(r7, 0xc0386106, &(0x7f0000000200)={0xb, 0x1, 0x8, 0x9, 0x2, 0x3, "cd85f2fcbbee26832544bb1239d55a53", 0x0, 0x5, 0x7, 0x2b, 0xf7, 0x7, 0x9}) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000080)={0x1, 0x1fd, 0x10aa, 0x4, 0x7, 0x82, 0x4, 0x5, 0x1, 0x6, 0x7, 0x3ff, 0x1, 0x54}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000011ac0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000011ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="0800960026280000"], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x6, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x5984, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x6, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x5984, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 41.509450787s ago: executing program 1 (id=2141): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff1cac8a40fe425cdaa2e0a3d80000", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf25020000000800090002000000"], 0x1c}}, 0x40) 41.509332166s ago: executing program 1 (id=2142): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003c00070100000000000012d8cd8300000440fc800c7b89ef9caadbab9686abef00018006000600800a000008000280040072800800050005000000"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000180)=@ethtool_cmd={0x2c, 0x7, 0x0, 0x9, 0x7d, 0x5, 0x81, 0x87, 0xda, 0xf3, 0xa, 0x31, 0x6, 0x4, 0x0, 0x8001f76, [0x7fff, 0x7b0]}}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [r4, 0x0, 0x0, r5], [0x2b8]}) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept4(r2, 0x0, 0x0, 0x800) mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000000)='usrquota') 40.600116608s ago: executing program 1 (id=2155): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000100)='./file0\x00') timer_create(0x1, &(0x7f0000000680)={0x0, 0x17, 0x0, @thr={&(0x7f0000005240)="f61f71ef85db5489cf33b2bac8e5c7d6e99bfb8a19243c15147abd9037cea1", &(0x7f0000005280)="50518342142c23ca069c5dd7a16a2bca70e43de715e8f4813f4597664ca3f5aa663e680303cc60b01e12cd88220c20abc819c162fd58ab734ba71e5760524c69b7a20a1934edacfba933fed475d774ac38d55a8902172cda51ab55b778ea8badb845b513c7c5db6a307c9ab69809ab46ab133c88938d05ef27c1056a6bcb1860d45a5ef284bd3ad64a7969eb4c10a927e917707152e032118e68cb188e038c27240a87ca41c58701eda43fbad688fb2e71c43e4259831b"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x0, 0x28) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = socket$igmp6(0xa, 0x3, 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000005200), 0x20000, 0x0) recvmmsg(r1, &(0x7f0000005080)=[{{&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000002780)=[{&(0x7f0000000400)=""/206, 0xce}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/136, 0x88}, {&(0x7f00000026c0)=""/149, 0x95}, {&(0x7f0000000080)=""/57, 0x39}], 0x9}, 0xddb}, {{&(0x7f0000002840)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000580)=""/5, 0x5}], 0x1}}, {{&(0x7f0000002900)=@qipcrtr, 0x80, &(0x7f0000003d40)=[{&(0x7f0000002980)=""/232, 0xe8}, {&(0x7f0000005180)=""/99, 0x63}, {&(0x7f0000002b00)=""/43, 0x2b}, {&(0x7f0000002b40)=""/214, 0xd6}, {&(0x7f0000002c40)=""/4081, 0xff1}, {&(0x7f0000003c40)=""/201, 0xc9}], 0x6, &(0x7f0000003dc0)=""/217, 0xd9}, 0x40}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003ec0)=""/155, 0x9b}, {&(0x7f0000003f80)=""/67, 0x43}, {&(0x7f0000004000)=""/2, 0x2}], 0x3, &(0x7f0000004080)=""/4096, 0x1000}, 0x7}], 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x79) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) readv(r6, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/252, 0xfc}], 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0), 0x4) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f400", [0x0, 0x2000000000001]}}) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) 39.730068711s ago: executing program 1 (id=2171): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) finit_module(r0, 0x0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4040041) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010069703667726500001800028014000700fe8000000000000000000000000000aa08000a00", @ANYRES32=r3, @ANYBLOB="c4b5b5780b00d646265cd811c3d031912741f5b00ae8326d29513eace65c8aed155050e5a051bb47db"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x480b0) 39.477280863s ago: executing program 1 (id=2182): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="c402fd3eecae66baf80cb8246cb287ef66bafc0cec260f79c653230f20d03646d80d13460f09b98c0900000f32b8010000003e0f2a70052e644c0fc72f", 0x3d}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x3, 0x300040000000, 0x8001, 0x4000000000001002, 0x4, 0x80, 0x2, 0x7, 0xe141, 0x1f6, 0x3, 0xfffffffffffffff7, 0x4000000000c8], 0x3000, 0x280480}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005500e50125bda995000000000700000015ff6a2e5a0b1e6e1270cf4d4cad47f4f434bd13a248c743ac39f973bdeadbd8ea4e3a15887785fc9b72f3cb374478fce79b691fa03216a1364e8cac266d8d5596a3bb9c1c9f", @ANYRES32=r6], 0x18}, 0x1, 0xf0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000000)={0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000000340)={0x0, 0x2, 0x2000008, 0x2}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128)\x00'}, 0x58) bind$alg(r9, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) fcntl$lock(r10, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x2000007, 0x1}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r7], 0x26c0}}, 0x4010) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r12, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r13 = openat$cgroup_devices(r7, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r13, &(0x7f0000000200)=ANY=[@ANYBLOB="444bb4eb65f91082f17b87165d9a003a2a20ba5f56b7383a3be1e7707c94347467656e2d1201fad4080996f54bbdfd989532bb2234eed9110656"], 0xfffffffffffffc5b) 39.334704341s ago: executing program 41 (id=2182): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="c402fd3eecae66baf80cb8246cb287ef66bafc0cec260f79c653230f20d03646d80d13460f09b98c0900000f32b8010000003e0f2a70052e644c0fc72f", 0x3d}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x3, 0x300040000000, 0x8001, 0x4000000000001002, 0x4, 0x80, 0x2, 0x7, 0xe141, 0x1f6, 0x3, 0xfffffffffffffff7, 0x4000000000c8], 0x3000, 0x280480}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005500e50125bda995000000000700000015ff6a2e5a0b1e6e1270cf4d4cad47f4f434bd13a248c743ac39f973bdeadbd8ea4e3a15887785fc9b72f3cb374478fce79b691fa03216a1364e8cac266d8d5596a3bb9c1c9f", @ANYRES32=r6], 0x18}, 0x1, 0xf0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000000)={0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000000340)={0x0, 0x2, 0x2000008, 0x2}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128)\x00'}, 0x58) bind$alg(r9, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) fcntl$lock(r10, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x2000007, 0x1}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r7], 0x26c0}}, 0x4010) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r12, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r13 = openat$cgroup_devices(r7, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r13, &(0x7f0000000200)=ANY=[@ANYBLOB="444bb4eb65f91082f17b87165d9a003a2a20ba5f56b7383a3be1e7707c94347467656e2d1201fad4080996f54bbdfd989532bb2234eed9110656"], 0xfffffffffffffc5b) 8.179321767s ago: executing program 4 (id=2783): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x15031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ac4000/0x3000)=nil, 0x3000}) close_range(r0, 0xffffffffffffffff, 0x0) 8.119545709s ago: executing program 4 (id=2785): socket$pppoe(0x18, 0x1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) munlockall() pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x40001043, r0, 0x0) vmsplice(r0, &(0x7f0000000700)=[{&(0x7f0000000500)='k', 0x1}], 0x1, 0x1) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0xceaf, 0x44008002, 0x9, 0x2, 0x4, 0x6, 0x0, 0x0, 0x80, 0x800}}, 0x50) close_range(r0, r2, 0x2) 8.028104527s ago: executing program 4 (id=2788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.809493618s ago: executing program 4 (id=2791): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_team\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0x1ff, 0x7, 0x0, 0x0, 0x8, 0x6, 0x7, 0x5}}) dup2(r1, r1) 7.809227654s ago: executing program 4 (id=2792): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080089064803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r3, 0xf7ffffff}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x34, 0x33, 0xb, 0x0, 0x0, {0x7}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x13, 0x4, 0x0, 0x0, @str='fault_injection'}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r6, &(0x7f0000000d00)={0x11, 0x1c, r8, 0x1, 0x0, 0x6, @local}, 0x14) r9 = syz_open_dev$sg(&(0x7f0000000080), 0x51, 0x208682) ioctl$SG_GET_SCSI_ID(r9, 0x2276, &(0x7f0000000100)) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019", 0x21}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0xb) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in6={0xa, 0x4e22, 0x9, @remote, 0xfff}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x9, @remote, 0x1a}], 0x74) sendto$inet6(r10, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r11, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000100)={r11, &(0x7f0000000080)="b854eba8", &(0x7f0000000100), 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r11, &(0x7f0000000780)}, 0x20) r12 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r5) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x22080400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r12, 0x20, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x240040d0}, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x4}, 0x8) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a60000000000a600080008001d000000", 0x24) 6.889295796s ago: executing program 4 (id=2799): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000002c0)) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/191, 0xbf}, {&(0x7f0000000100)=""/137, 0x89}, {&(0x7f0000000200)=""/95, 0x5f}], 0x3) 1.638268086s ago: executing program 0 (id=2888): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="367740f372239f619f4607a5f73f90eef2b18787a30577b265614aa74ed45a303e32c85860a3f45a8d1d740d0cb07d9914eec088e53afeb9773d65cd7f138c20ba222be1", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x6, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000681600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x2, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @remote}}}, 0x108) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r6, 0x8008976) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) mknodat(r6, &(0x7f00000005c0)='./file1\x00', 0x8000, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r6, &(0x7f0000001900)={0x2020}, 0x206f) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) fallocate(r7, 0x0, 0xfff, 0x5) read$FUSE(r5, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r8, 0x0, 0x4}, 0x18) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYRES64=r2], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_migrate_pages_start\x00', r9, 0x0, 0x4}, 0x18) 1.589941027s ago: executing program 0 (id=2890): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x2, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r3, 0xb}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r4, 0xae80, 0x0) read(r0, &(0x7f0000000080)=""/186, 0xba) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x4fc3, 0x80, 0x0, 0x4, 0x8, 0x0, 0x8}, 0xc) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r5, &(0x7f000000a500), 0x3fffffffffffdf6, 0x800) r6 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x123f82, 0x0) ioctl$BLKPG(r6, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x20000, 0x1000, 0xd}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.3197286s ago: executing program 3 (id=2897): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xffff7fff}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r4 = syz_open_procfs$userns(r3, &(0x7f00000000c0)) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) 1.249977486s ago: executing program 3 (id=2898): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f", 0x1f) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080", @ANYRES32=0x0], 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="680003000000000000009f50a1962782f1ee7235480a6cc72984a99384095394f67109c8e807cd9becda4d4f0d5ddbbb7f26622fd07344e2acc55989499b335d00bb63a79df5e93a4cc0eca9e3d5c8cc14b9a475e9e12c05e74de05ceb574541f3e20243e90d2ef85d29753578261e758fc53669302f7075013974d0fc4ca2edfd5562f38f67ed638baab13aa18403ebda620d0e04bfc81b8620ade7fa85d6936c0ba2274358f51edf560653a27991434399b87ba5a7d04bcf6c30be06d64f5f99f7b98965002d41c8287850ecffa81e3948507fa4053fff6a7510", @ANYRES16=r0, @ANYBLOB="01002cbd7000fcdbdf25010000000000000007410000004c001800000002696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.248653068s ago: executing program 3 (id=2899): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) dup3(r0, r0, 0x0) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl') munmap(&(0x7f0000ee4000/0x1000)=nil, 0x1000) munmap(&(0x7f0000f62000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.179814566s ago: executing program 3 (id=2900): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000040000080000000e030000000000000001000000000000120000000000000082f836b4b7d023b00000db9c0c4471"], 0x0, 0x46}, 0x28) sendmmsg$unix(r1, &(0x7f000000c880)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="f0a31932", 0x4}], 0x1, 0x0, 0x0, 0x20008848}}], 0x1, 0xc000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)={r2, 0x5, 0xd0, "f85ad0a92ad678dced4c039176d3782e8f03072059c90f00719186e23864ace7fb98f8b6512dd086758cecbeb6bbe53fdebd981ed1efa6dd400ad60d42d229c2d6020e03c8dfa72ed3cd7e1fccbf7a3092a02d573535705f63afd67bb8a1059a6bea57641b27ad8d2045ef94abf0ab66ac9ebed28de6915aef1c3e9bc8428b1a52bf53aaba9ecf32db31a47c4d0a9ec3a6bfd8fb70a57c9156fbbce82998083e3b0ac97de83c7f7653637e47dcb7add8aa831fbe4f59d6219be5aadc01a24f6bcbeea4aabfa80f1eb893432d931301d5"}, 0xd8) accept4(r1, 0x0, 0x0, 0x80000) 1.178795839s ago: executing program 3 (id=2902): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a000000205800034824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00030d0000000000000069e3289b6c17a118d9", 0x58}], 0x1) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/113, 0x71}, {0x0}], 0x2, 0x3, 0xd) 649.908968ms ago: executing program 0 (id=2903): syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000080)={0x1, 0x5}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000001300)="430fc73f23d7b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0c6665660f3a0fad008000000c66b88e008ec02d1aa80000460f1c4600410f07", 0x52}], 0x1, 0x74, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000080)={0x1, 0x5}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000001300)="430fc73f23d7b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0c6665660f3a0fad008000000c66b88e008ec02d1aa80000460f1c4600410f07", 0x52}], 0x1, 0x74, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) 518.513602ms ago: executing program 2 (id=2904): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x131) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) flock(r1, 0x5) (async) chdir(&(0x7f00000000c0)='./file0\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x11c) 426.370758ms ago: executing program 2 (id=2905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0xc, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x40000, 0x0, {0x2, 0x0, 0x0, 0x8, 0xfd, 0x1, 0xfe, 0x1, 0x3400}, [@RTA_NH_ID={0x8, 0x16, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200400c8}, 0x4010) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, 0x0, &(0x7f0000000380)=""/53}, 0x20) 426.240046ms ago: executing program 0 (id=2906): syz_io_uring_setup(0x57e4, &(0x7f0000003000)={0x0, 0x7df7, 0x4, 0x1, 0x2db}, &(0x7f0000000000), &(0x7f00000030c0)) (async) r0 = syz_io_uring_setup(0x57e4, &(0x7f0000003000)={0x0, 0x7df7, 0x4, 0x1, 0x2db}, &(0x7f0000000000), &(0x7f00000030c0)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000003100), 0x1) 423.562406ms ago: executing program 0 (id=2907): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg/0:0:0:0\x00', 0x8300, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @multicast1}, {0x1, @multicast}, 0x3d, {0x2, 0xe20, @empty}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000200)={{0x2, 0x4e22, @local}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x34, {0x2, 0x4e22, @multicast2}, 'rose0\x00'}) ioctl$BSG_IO(r2, 0x2285, &(0x7f0000000340)={0x51, 0x0, 0x0, 0x3, &(0x7f0000000100)="e62f94", 0x3, 0x0, 0xa, 0x1ff, 0x60, &(0x7f0000000140), 0x0, 0x3, 0x0, 0x0, &(0x7f00000001c0)="3f62af", 0x0, 0xfffffff7, 0x10, 0x0, 0x4}) r5 = socket(0x10, 0x0, 0xfffffffd) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r6], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000b40)={0x13c4, r7, 0x600, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "e040808a9c97276c2196fbab5a3738f61414c8c4d2739cd3c9bce7271ce9130a850b"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "c816427b339060e3a6550f59b5e917b1df89dca7d1292ffb837067801025"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "75eb4e310e9f08300848aaf34cbd631258eb7762"}}, @TIPC_NLA_NODE_ID={0x78, 0x3, "ccbe8a0520a372e163743014dfb46f1fbacdadafc2219dca2c6c9c81afa75252b69d616c00c39d8fc66f015803a3f6ff683fd1813cb2527f8a1ec95221ac0f2b77b7dcdcddc73fe5246708f795383a676079b14c329bb899683098e8f5bb88d2aa824c01423b7bc9668772748fc58bb2ea0df9df"}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf7ea}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ac}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}]}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2423}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3bdda7df}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x1054, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "d517870da2ea716b4e169165cc3dfe15107c5a50bfb1c42d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x13c4}}, 0x24000094) 370.204577ms ago: executing program 2 (id=2908): r0 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0x113a, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) (async, rerun: 64) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) (rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) (async) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 369.903923ms ago: executing program 2 (id=2909): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007b19a20000000000851000000200000085"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0xff1f}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f", 0x15}], 0x1}, 0x20) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r1, 0x4100}], 0x1, 0x1) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$loop(&(0x7f0000000700), 0x47d, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x4f8500) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001280)={r2, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x3, 0x10, "fe78fc179fd1e1dab6a7bd64c6a4b4e00d9683dda3af9ea80000000000000000000000deff0000000000000000080000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800, 0x3]}}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000500)={0xffff, "916b5a612a2317030ce59904d899e4df078cd9f9d1a93c4ff5c49189e3a0e513", 0x0, 0x1}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000a280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff2000, 0x0) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x28, 0x3, 0x8000, 0x0, 0x7ff, 0x1, 0x0, 0x0, 0x0, 0x20, 0xb}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004680)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x1002, 0x16, 0x0, 0x5, 0x6, {0x1, 0x82, 0x3, 0x800000000006, 0x4, 0x8, 0x8, 0x7fe, 0x4, 0x2000, 0x7fffbfff, r7, r8, 0x81, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000540)="2ef36644f7e68f29d095abaa960000b890a4f0842f66bafc0c6d8f297812cf400f79537c66ef48b800100000000000000f23d0360fb28d379f94c63510000008b90a020000b800000100ba000000000f3066baf80cb88ef0148066bafc0c66efc7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x4000000000007, 0x4, 0x8000000000000001, 0x80000001, 0xb3, 0x200, 0x4, 0x6, 0x9, 0x100000000036, 0x9, 0x9], 0x0, 0x2a80}) 199.872092ms ago: executing program 0 (id=2910): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x8, r4, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x11, r2, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100000fee702500000000002020207b1af8ff00000000bf"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc0000) write$P9_RVERSION(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472030000000000000066646e6f3d", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',cache=readahead,k']) truncate(&(0x7f0000000080)='./file0\x00', 0x400648) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x190) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_emit_vhci(&(0x7f0000000a40)=ANY=[@ANYBLOB="040e"], 0x7) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1790) 199.317913ms ago: executing program 2 (id=2911): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x1}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x1}, 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x22000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000340)={&(0x7f00000002c0), &(0x7f00000000c0), 0x0, r7}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x3}]}) r10 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000001c0)}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 59.383737ms ago: executing program 2 (id=2912): r0 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, 0x0, 0xa17, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2686dd604dd308001406010000000000000000006ac100ffffac1414bb000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_usb_disconnect(r3) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf, 0x80, 0xff}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r3, 0xc0085508, &(0x7f0000000440)) r6 = signalfd4(r5, &(0x7f0000000240)={[0x8]}, 0x8, 0x80000) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000340)=""/15) sendmsg$nl_generic(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB="140000003800014b99bd7004ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) r7 = socket(0x2, 0x80805, 0x0) setsockopt$sock_int(r7, 0x1, 0x2b, &(0x7f0000000380)=0xbf9f, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r2) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=2913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): o dns_resolver key: bad/missing value [ 136.008188][T10438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10438 comm=syz.2.1207 [ 136.169744][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1210'. [ 136.173407][T10452] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1210'. [ 136.215776][T10459] netlink: 'syz.8.1212': attribute type 1 has an invalid length. [ 136.235729][T10459] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.240437][T10457] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.243690][T10457] bond2: (slave team0): making interface the new active one [ 136.248173][T10457] bond2: (slave team0): Enslaving as an active interface with an up link [ 136.286206][T10467] openvswitch: netlink: IPv4 tunnel dst address is zero [ 136.295647][ T5972] Bluetooth: hci3: command 0x0405 tx timeout [ 136.298204][ T5972] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.300750][ T5972] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.323622][T10478] tmpfs: Group quota inode hardlimit too large. [ 136.456068][T10495] netlink: 'syz.6.1222': attribute type 1 has an invalid length. [ 136.470132][T10495] bond2: entered promiscuous mode [ 136.472495][T10495] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.547289][T10504] binder: 10503:10504 ioctl c0306201 200000000300 returned -14 [ 136.692039][T10509] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 136.698119][T10509] UDF-fs: Scanning with blocksize 2048 failed [ 136.702048][T10509] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 136.706180][T10509] UDF-fs: Scanning with blocksize 4096 failed [ 137.487111][T10533] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 137.495300][T10533] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 137.498368][ T5983] Bluetooth: hci2: unexpected event for opcode 0x200a [ 137.498514][T10533] __nla_validate_parse: 3 callbacks suppressed [ 137.498523][T10533] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1235'. [ 137.547233][T10538] 9pnet_fd: Insufficient options for proto=fd [ 137.550108][T10539] 9pnet_fd: Insufficient options for proto=fd [ 137.601315][T10542] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 137.612584][T10542] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 137.669432][T10553] netlink: 'syz.6.1241': attribute type 11 has an invalid length. [ 137.802531][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 137.802543][ T40] audit: type=1400 audit(137.711:685): avc: denied { map } for pid=10563 comm="syz.8.1244" path="socket:[38293]" dev="sockfs" ino=38293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.833353][T10570] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1246'. [ 137.834660][T10568] macvlan2: entered promiscuous mode [ 137.838588][T10568] macvlan2: entered allmulticast mode [ 137.841081][T10568] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 137.900178][T10576] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 137.900202][T10575] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 137.904603][T10573] program syz.6.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.080161][T10587] netlink: 'syz.6.1251': attribute type 12 has an invalid length. [ 138.155270][T10595] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 138.157969][T10595] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 1th superblock [ 138.161166][T10595] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 138.163977][ T6058] udevd[6058]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 138.164437][T10595] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 2th superblock [ 138.178976][ T40] audit: type=1400 audit(138.091:686): avc: denied { write } for pid=10593 comm="syz.8.1255" path="socket:[37851]" dev="sockfs" ino=37851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 138.206483][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1256'. [ 138.210170][T10598] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 138.214140][T10598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.279621][ T40] audit: type=1400 audit(138.191:687): avc: denied { read } for pid=10607 comm="syz.2.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.284800][T10608] netlink: 'syz.2.1259': attribute type 1 has an invalid length. [ 138.302600][T10608] 8021q: adding VLAN 0 to HW filter on device bond6 [ 138.345962][T10612] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 138.352013][T10612] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 138.357064][T10612] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 138.375466][ T5983] Bluetooth: hci3: command 0x0405 tx timeout [ 138.377181][T10612] overlayfs: d_ino too big (383, ino=9223372036854777906, xinobits=2) [ 138.442541][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1261'. [ 138.456471][ T24] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 138.529404][T10614] team0: Port device team_slave_0 removed [ 138.541041][ T40] audit: type=1400 audit(138.451:688): avc: denied { write } for pid=10620 comm="syz.2.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.580537][T10625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1264'. [ 138.587227][T10625] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1264'. [ 138.625019][ T24] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 138.629332][ T24] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.632848][ T24] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.638129][ T24] usb 11-1: config 0 interface 0 has no altsetting 0 [ 138.641667][ T24] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.645509][ T24] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.649645][ T24] usb 11-1: config 0 interface 0 has no altsetting 0 [ 138.656657][ T24] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.660381][ T24] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.665045][ T24] usb 11-1: config 0 interface 0 has no altsetting 0 [ 138.669694][ T24] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.673500][ T24] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.678649][ T24] usb 11-1: config 0 interface 0 has no altsetting 0 [ 138.682566][ T24] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.685705][ T24] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.689676][ T24] usb 11-1: config 0 interface 0 has no altsetting 0 [ 138.691571][T10629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10629 comm=syz.2.1265 [ 138.695540][ T24] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.701601][ T24] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.705934][ T24] usb 11-1: config 0 interface 0 has no altsetting 0 [ 138.709074][ T24] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.712796][ T24] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.717833][ T24] usb 11-1: config 0 interface 0 has no altsetting 0 [ 138.721926][ T24] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.725957][ T24] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.729904][ T24] usb 11-1: config 0 interface 0 has no altsetting 0 [ 138.738202][ T24] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 138.742298][ T24] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 138.747457][ T24] usb 11-1: Product: syz [ 138.749264][ T24] usb 11-1: Manufacturer: syz [ 138.751787][ T24] usb 11-1: SerialNumber: syz [ 138.757936][T10636] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 138.761245][T10636] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 138.765313][ T24] usb 11-1: config 0 descriptor?? [ 138.777136][ T24] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 139.024208][T10656] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 139.024208][T10656] The task syz.6.1256 (10656) triggered the difference, watch for misbehavior. [ 139.064527][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 139.104418][ T24] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 139.234486][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 139.238569][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 139.243127][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 139.247592][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.251644][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.257009][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.260970][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.264312][ T24] usb 13-1: Using ep0 maxpacket: 8 [ 139.266746][ T24] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.271150][ T24] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 139.274064][ T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.277106][ T5971] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 139.282136][ T24] usb 13-1: config 0 descriptor?? [ 139.458003][ T5971] usb 12-1: config 0 has no interfaces? [ 139.459982][ T5971] usb 12-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 139.463640][ T5971] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.468428][ T5971] usb 12-1: config 0 descriptor?? [ 139.477763][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 139.480362][ T9] usbtmc 7-1:16.0: can't read capabilities [ 139.489487][ T24] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior2 [ 139.673467][T10655] bond0: (slave rose0): Error: Device can not be enslaved while up [ 139.678636][ T5971] usb 12-1: string descriptor 0 read error: -71 [ 139.688751][ T5971] usb 12-1: USB disconnect, device number 6 [ 139.915550][ T8034] usb 7-1: USB disconnect, device number 19 [ 140.256233][T10660] binder: 10659:10660 ioctl c0306201 200000000640 returned -22 [ 140.329966][T10666] overlay: Unknown parameter 'smackfsroot' [ 140.350141][T10666] SELinux: ebitmap start bit (67109056) is beyond the end of the bitmap (1472) [ 140.356634][T10666] SELinux: failed to load policy [ 140.468856][T10671] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 140.474603][T10671] SELinux: failed to load policy [ 140.476880][T10678] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 140.481135][T10678] SELinux: failed to load policy [ 140.583147][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1279'. [ 140.833290][ T40] audit: type=1400 audit(140.741:689): avc: denied { remount } for pid=10684 comm="syz.2.1283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 141.221232][ T8084] usb 11-1: USB disconnect, device number 21 [ 141.228406][ T8084] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 141.286563][T10703] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1289'. [ 141.412977][T10707] delete_channel: no stack [ 141.632204][T10717] loop9: detected capacity change from 0 to 127 [ 141.739789][ T40] audit: type=1326 audit(141.651:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10718 comm="syz.7.1295" exe="/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7f492e72ae09 code=0x0 [ 141.878864][ T9] usb 13-1: USB disconnect, device number 9 [ 141.941634][T10726] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1297'. [ 141.947979][T10728] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1297'. [ 142.089310][T10739] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 142.100602][T10742] netlink: 'syz.8.1301': attribute type 1 has an invalid length. [ 142.112039][ T40] audit: type=1400 audit(142.021:691): avc: denied { map } for pid=10741 comm="syz.8.1301" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 142.145082][T10744] geneve1: Caught tx_queue_len zero misconfig [ 142.147736][T10748] i2c i2c-1: Invalid block write size 34 [ 142.387580][ T5983] Bluetooth: hci2: unexpected event 0x04 length: 7 < 10 [ 142.402444][T10789] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 142.680142][T10814] IPVS: persistence engine module ip_vs_pe_s not found [ 142.709792][T10815] IPVS: persistence engine module ip_vs_pe_s not found [ 142.769355][T10832] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 142.819927][ T40] audit: type=1400 audit(142.731:692): avc: denied { ioctl } for pid=10839 comm="syz.2.1328" path="socket:[41059]" dev="sockfs" ino=41059 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.848662][ T5983] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 142.971036][ T40] audit: type=1400 audit(142.881:693): avc: denied { ioctl } for pid=10850 comm="syz.2.1331" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 143.278092][T10862] binder: 10861:10862 ioctl 6612 0 returned -22 [ 143.575373][T10882] bridge0: entered promiscuous mode [ 143.578197][T10882] macsec1: entered promiscuous mode [ 143.622000][ T40] audit: type=1400 audit(143.531:694): avc: denied { getopt } for pid=10883 comm="syz.6.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 143.631178][T10884] 9p: Unknown uid 00000000004294967295 [ 143.766397][T10887] veth0: entered promiscuous mode [ 143.767155][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1340'. [ 143.828494][T10890] veth0 (unregistering): left promiscuous mode [ 144.761411][ T40] audit: type=1400 audit(144.671:695): avc: denied { read } for pid=10901 comm="syz.2.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 144.837131][T10905] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1344'. [ 145.027084][T10916] xt_limit: Overflow, try lower: 271964/0 [ 145.030445][T10916] netlink: 'syz.2.1346': attribute type 32 has an invalid length. [ 145.036349][ T40] audit: type=1400 audit(144.951:696): avc: denied { read } for pid=10908 comm="syz.2.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.045796][T10918] SELinux: Context  is not valid (left unmapped). [ 145.052770][T10918] 9pnet_fd: Insufficient options for proto=fd [ 145.057592][T10918] overlayfs: missing 'lowerdir' [ 145.080712][T10923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10923 comm=syz.2.1350 [ 145.080744][T10922] macsec0: entered promiscuous mode [ 145.087407][T10922] macsec0: entered allmulticast mode [ 145.089883][T10922] veth1_macvtap: entered allmulticast mode [ 145.225305][T10925] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 145.259548][T10929] binder: 10926:10929 ioctl 4020ae46 200000000000 returned -22 [ 145.382714][T10933] IPVS: set_ctl: invalid protocol: 43 172.30.1.8:20004 [ 145.600763][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1358'. [ 145.612526][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1358'. [ 145.617549][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1358'. [ 145.976791][ T8084] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 146.037997][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'. [ 146.038513][T10959] netlink: 'syz.2.1363': attribute type 21 has an invalid length. [ 146.040612][T10957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17664 sclass=netlink_route_socket pid=10957 comm=syz.8.1362 [ 146.041527][T10957] netlink: 'syz.8.1362': attribute type 10 has an invalid length. [ 146.041543][T10957] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1362'. [ 146.041778][T10957] batadv0: entered promiscuous mode [ 146.044210][T10959] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1363'. [ 146.049750][T10957] batadv0: entered allmulticast mode [ 146.066267][T10957] bridge0: port 3(batadv0) entered blocking state [ 146.069095][T10957] bridge0: port 3(batadv0) entered disabled state [ 146.075014][T10957] bridge0: port 3(batadv0) entered blocking state [ 146.077677][T10957] bridge0: port 3(batadv0) entered forwarding state [ 146.090090][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1362'. [ 146.134328][ T8084] usb 12-1: Using ep0 maxpacket: 8 [ 146.141299][ T8084] usb 12-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 146.144082][ T8084] usb 12-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 146.147975][ T8084] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 33 [ 146.151045][ T8084] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 146.153959][ T8084] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.157897][ T8084] usb 12-1: config 0 descriptor?? [ 146.223776][T10974] bridge_slave_0: left allmulticast mode [ 146.225052][ T6843] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 146.226600][T10974] bridge_slave_0: left promiscuous mode [ 146.229380][ T6843] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 146.231218][T10974] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.239204][T10974] bridge_slave_1: left allmulticast mode [ 146.241510][T10974] bridge_slave_1: left promiscuous mode [ 146.243667][T10974] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.251431][T10974] bond0: (slave bond_slave_0): Releasing backup interface [ 146.257840][T10974] bond0: (slave bond_slave_1): Releasing backup interface [ 146.267601][T10974] team0: Port device team_slave_1 removed [ 146.271355][T10974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.274575][T10974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.279162][T10974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.282301][T10974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.364408][ T5721] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 146.381125][T10978] lo speed is unknown, defaulting to 1000 [ 146.473837][ T40] audit: type=1400 audit(146.381:697): avc: denied { create } for pid=10981 comm="syz.6.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 146.536769][ T5721] usb 13-1: config index 0 descriptor too short (expected 1120, got 96) [ 146.540218][ T5721] usb 13-1: config 1 has an invalid interface number: 0 but max is -1 [ 146.543567][ T5721] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.548019][ T5721] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 146.551677][ T5721] usb 13-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.564062][ T5721] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 146.568185][ T5721] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 146.571490][ T5721] usb 13-1: Product: syz [ 146.573273][ T5721] usb 13-1: Manufacturer: syz [ 146.589236][ T5721] cdc_wdm 13-1:1.0: probe with driver cdc_wdm failed with error -22 [ 147.071187][T10992] bond8: entered allmulticast mode [ 147.194186][T11000] nbd_handle_cmd: 56 callbacks suppressed [ 147.194205][T11000] block nbd2: Attempted send on invalid socket [ 147.199031][T11000] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 147.202875][T11000] SQUASHFS error: Failed to read block 0x0: -5 [ 147.205718][T11000] unable to read squashfs_super_block [ 147.305364][T11005] usb usb8: usbfs: process 11005 (syz.2.1377) did not claim interface 0 before use [ 147.503669][T11023] vlan2: entered promiscuous mode [ 147.506030][ T40] audit: type=1400 audit(147.421:698): avc: denied { setattr } for pid=11024 comm="syz.2.1382" name="RAW" dev="sockfs" ino=39820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.664228][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1384'. [ 148.083178][T11046] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 148.086976][T11046] block device autoloading is deprecated and will be removed. [ 148.755147][ T5721] usb 12-1: USB disconnect, device number 7 [ 148.785099][T11055] program syz.7.1389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.894343][ T40] audit: type=1400 audit(148.801:699): avc: denied { setattr } for pid=11061 comm="syz.6.1390" name="[io_uring]" dev="anon_inodefs" ino=42805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 148.929745][T11072] __nla_validate_parse: 1 callbacks suppressed [ 148.929756][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1392'. [ 148.944569][ T40] audit: type=1400 audit(148.851:700): avc: denied { setattr } for pid=11073 comm="syz.7.1393" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 148.963064][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1394'. [ 148.967006][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1394'. [ 148.969825][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1394'. [ 149.000866][T11081] netlink: 'syz.7.1395': attribute type 1 has an invalid length. [ 149.003353][T11081] netlink: 'syz.7.1395': attribute type 4 has an invalid length. [ 149.006036][T11081] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1395'. [ 149.060550][ T24] usb 13-1: USB disconnect, device number 10 [ 149.118995][T11095] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 149.218491][T11102] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1401'. [ 149.221432][T11102] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1401'. [ 149.225916][ T40] audit: type=1400 audit(149.141:701): avc: denied { bind } for pid=11099 comm="syz.7.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 149.273643][T11107] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 149.328817][ T40] audit: type=1400 audit(149.241:702): avc: denied { create } for pid=11111 comm="syz.7.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 149.406590][T11120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17664 sclass=netlink_route_socket pid=11120 comm=syz.7.1406 [ 149.412359][T11120] netlink: 'syz.7.1406': attribute type 10 has an invalid length. [ 149.417158][T11120] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1406'. [ 149.420064][T11120] batadv0: entered promiscuous mode [ 149.421833][T11120] batadv0: entered allmulticast mode [ 149.424220][T11120] bridge0: port 3(batadv0) entered blocking state [ 149.426771][T11120] bridge0: port 3(batadv0) entered disabled state [ 149.434301][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1405'. [ 149.435940][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1406'. [ 149.566124][T11130] net_ratelimit: 1 callbacks suppressed [ 149.566140][T11130] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 149.637500][ T40] audit: type=1326 audit(149.551:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.6.1411" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b39b8ec29 code=0x0 [ 149.684393][ T24] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 149.704711][ T6846] batman_adv: batadv0: IGMP Querier appeared [ 149.706615][ T6846] batman_adv: batadv0: MLD Querier appeared [ 149.785222][T11143] program syz.8.1412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.836215][ T24] usb 12-1: config index 0 descriptor too short (expected 1120, got 96) [ 149.839891][ T24] usb 12-1: config 1 has an invalid interface number: 0 but max is -1 [ 149.843422][ T24] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.847927][ T24] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 149.851815][ T24] usb 12-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.858889][ T24] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.861939][ T24] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.864860][ T24] usb 12-1: Product: syz [ 149.866401][ T24] usb 12-1: Manufacturer: syz [ 149.876417][ T24] cdc_wdm 12-1:1.0: probe with driver cdc_wdm failed with error -22 [ 150.187851][T11161] IPv6: sit1: Disabled Multicast RS [ 150.190903][T11161] sit1: entered allmulticast mode [ 150.485435][T11175] team0: Caught tx_queue_len zero misconfig [ 150.490512][ T40] audit: type=1400 audit(150.401:704): avc: denied { mounton } for pid=11177 comm="syz.6.1422" path="/176/bus" dev="tmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 150.493093][T11178] /dev/nullb0: Can't open blockdev [ 150.623052][ T6852] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.629060][ T6852] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.632061][ T6852] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.636296][ T6852] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.870400][ T40] audit: type=1326 audit(150.781:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11207 comm="syz.8.1431" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdce478ec29 code=0x0 [ 150.972196][ T6843] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 150.979249][ T6843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.981749][ T6843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.474399][ T8034] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 151.670399][T11245] macsec0: entered promiscuous mode [ 151.672436][T11245] macsec0: entered allmulticast mode [ 151.674779][T11245] veth1_macvtap: entered allmulticast mode [ 151.746376][T11249] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.420534][ T24] usb 12-1: USB disconnect, device number 8 [ 152.656408][T11278] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 152.661107][ T40] audit: type=1326 audit(152.571:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11277 comm="syz.7.1452" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f492e78ec29 code=0x0 [ 152.684504][T11281] netlink: 'syz.6.1453': attribute type 1 has an invalid length. [ 152.696362][T11281] bond3: entered promiscuous mode [ 152.698180][T11281] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.794838][T11273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2322 sclass=netlink_route_socket pid=11273 comm=syz.8.1450 [ 152.841143][T11296] raw_sendmsg: syz.6.1457 forgot to set AF_INET. Fix it! [ 153.135097][ T9] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 153.157668][T11308] mac80211_hwsim hwsim22 wlan1: Caught tx_queue_len zero misconfig [ 153.232183][T11316] netlink: 'syz.8.1465': attribute type 10 has an invalid length. [ 153.238990][T11316] veth0_macvtap: left promiscuous mode [ 153.304935][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 153.309854][ T9] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 153.313901][ T9] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 153.318723][ T9] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 153.322843][ T9] usb 11-1: config 0 interface 0 has no altsetting 0 [ 153.328225][ T9] usb 11-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 153.332025][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.337454][ T9] usb 11-1: Product: syz [ 153.339288][ T9] usb 11-1: Manufacturer: syz [ 153.341274][ T9] usb 11-1: SerialNumber: syz [ 153.346448][ T9] usb 11-1: config 0 descriptor?? [ 153.515317][T11327] pim6reg13: entered allmulticast mode [ 153.618529][ T9] usb 11-1: Can not set alternate setting to 1, error: -71 [ 153.621597][ T9] synaptics_usb 11-1:0.0: probe with driver synaptics_usb failed with error -71 [ 153.635394][ T9] usb 11-1: USB disconnect, device number 22 [ 153.878534][T11362] : renamed from wg2 (while UP) [ 153.943657][T11369] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 153.947686][T11369] syzkaller0: group set to 0 [ 153.951466][ T40] audit: type=1400 audit(153.861:707): avc: denied { ioctl } for pid=11370 comm="syz.7.1484" path="socket:[43329]" dev="sockfs" ino=43329 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.973721][T11369] overlayfs: overlapping lowerdir path [ 154.024134][T11371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11371 comm=syz.7.1484 [ 154.169879][ T40] audit: type=1400 audit(154.081:708): avc: denied { connect } for pid=11382 comm="syz.7.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 154.171262][T11383] overlayfs: conflicting options: nfs_export=on,index=off [ 154.493039][T11405] /dev/sg0: Can't lookup blockdev [ 154.494806][T11400] kvm: pic: non byte write [ 154.664143][T11416] __nla_validate_parse: 14 callbacks suppressed [ 154.664156][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1497'. [ 154.691474][T11418] block nbd2: Attempted send on invalid socket [ 154.695720][T11418] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.698873][T11418] vxfs: unable to read disk superblock at 1 [ 154.702639][T11418] block nbd2: Attempted send on invalid socket [ 154.705323][T11418] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.709136][T11418] vxfs: unable to read disk superblock at 8 [ 154.711176][T11418] vxfs: can't find superblock. [ 154.746293][ T40] audit: type=1400 audit(154.655:709): avc: denied { mount } for pid=11421 comm="syz.2.1499" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 154.759461][ T40] audit: type=1400 audit(154.665:710): avc: denied { unmount } for pid=5966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 154.876470][T11357] syz_tun (unregistering): left allmulticast mode [ 154.892575][T11440] binder: BINDER_SET_CONTEXT_MGR already set [ 154.897193][T11440] binder: 11439:11440 ioctl 4018620d 200000000040 returned -16 [ 154.960890][ T40] audit: type=1400 audit(154.865:711): avc: denied { write } for pid=11439 comm="syz.6.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.192667][T11461] ipip0: entered promiscuous mode [ 155.324998][T11469] /dev/nullb0: Can't open blockdev [ 155.370083][T11472] ubi31: attaching mtd0 [ 155.374967][T11472] ubi31: scanning is finished [ 155.376504][T11472] ubi31: empty MTD device detected [ 155.426477][ T5978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.431789][ T5978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.436891][ T5978] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.442356][ T5978] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.448234][ T5978] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.452971][T11472] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 155.456316][T11472] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 155.459252][T11472] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 155.462131][T11472] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 155.465434][T11472] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 155.468331][T11472] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 155.470915][T11472] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3667272364 [ 155.474093][T11472] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 155.478196][T11481] ubi31: background thread "ubi_bgt31d" started, PID 11481 [ 155.489568][T11477] lo speed is unknown, defaulting to 1000 [ 155.582665][T11477] chnl_net:caif_netlink_parms(): no params data found [ 155.601171][T11489] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.605013][T11489] block device autoloading is deprecated and will be removed. [ 155.606061][T11486] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.611442][T11486] block device autoloading is deprecated and will be removed. [ 155.679360][T11477] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.682354][T11477] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.685641][T11477] bridge_slave_0: entered allmulticast mode [ 155.688533][T11477] bridge_slave_0: entered promiscuous mode [ 155.691779][T11477] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.694220][T11477] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.696651][T11477] bridge_slave_1: entered allmulticast mode [ 155.699438][T11477] bridge_slave_1: entered promiscuous mode [ 155.739640][T11477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.747500][T11477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.803190][T11477] team0: Port device team_slave_0 added [ 155.809416][T11477] team0: Port device team_slave_1 added [ 155.872295][T11477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.875773][T11477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.885738][T11477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.886785][T11477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.886818][T11477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.886834][T11477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.892812][T11497] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 155.948570][T11477] hsr_slave_0: entered promiscuous mode [ 155.952102][T11477] hsr_slave_1: entered promiscuous mode [ 155.955511][T11477] debugfs: 'hsr0' already exists in 'hsr' [ 155.957890][T11477] Cannot create hsr debugfs directory [ 156.042732][T11503] 9pnet_fd: Insufficient options for proto=fd [ 156.042778][ T40] audit: type=1400 audit(155.945:712): avc: denied { mounton } for pid=11498 comm="syz.7.1522" path="/259/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 156.179426][T11477] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 156.185901][T11477] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 156.191928][T11477] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 156.198230][T11477] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 156.273965][T11477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.290894][T11477] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.306935][ T6843] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.310009][ T6843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.315986][ T6843] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.318838][ T6843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.329667][T11514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11514 comm=syz.2.1523 [ 156.334769][T11514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11514 comm=syz.2.1523 [ 156.340111][T11514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=11514 comm=syz.2.1523 [ 156.346529][T11514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2590 sclass=netlink_route_socket pid=11514 comm=syz.2.1523 [ 156.462401][T11477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.653542][T11477] veth0_vlan: entered promiscuous mode [ 156.661645][T11477] veth1_vlan: entered promiscuous mode [ 156.687504][T11477] veth0_macvtap: entered promiscuous mode [ 156.694889][T11477] veth1_macvtap: entered promiscuous mode [ 156.709897][T11477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.721321][T11477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.730607][ T6837] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.733525][ T6837] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.740853][ T6837] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.744117][ T6837] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.797788][ T6851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.801099][ T6851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.822661][ T6837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.826920][ T6837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.837659][ T40] audit: type=1400 audit(156.745:713): avc: denied { mounton } for pid=11477 comm="syz-executor" path="/syzkaller.A0pYAa/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=45658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 156.883666][T11545] ksmbd: Unknown IPC event: 1, ignore. [ 156.903821][ T40] audit: type=1400 audit(156.805:714): avc: denied { set_context_mgr } for pid=11546 comm="syz.7.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 156.952977][T11557] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1533'. [ 156.971968][T11559] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 156.982271][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1534'. [ 156.997481][ T40] audit: type=1400 audit(156.905:715): avc: denied { ioctl } for pid=11560 comm="syz.7.1535" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 157.008169][T11561] netlink: 'syz.7.1535': attribute type 10 has an invalid length. [ 157.010514][T11561] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1535'. [ 157.013349][T11561] team0: entered promiscuous mode [ 157.015754][T11561] team_slave_0: entered promiscuous mode [ 157.018027][T11561] team_slave_1: entered promiscuous mode [ 157.020608][T11561] bridge0: port 4(team0) entered blocking state [ 157.023144][T11561] bridge0: port 4(team0) entered disabled state [ 157.026367][T11561] team0: entered allmulticast mode [ 157.028182][T11561] team_slave_0: entered allmulticast mode [ 157.030518][T11561] team_slave_1: entered allmulticast mode [ 157.077198][ T5978] Bluetooth: hci2: unexpected event for opcode 0x203d [ 157.102403][T11570] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1537'. [ 157.179970][T11581] netlink: 'syz.9.1537': attribute type 10 has an invalid length. [ 157.185563][T11581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.189909][T11581] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 157.266651][T11585] can: request_module (can-proto-3) failed. [ 157.291205][ T40] audit: type=1400 audit(157.195:716): avc: denied { write } for pid=11591 comm="syz.9.1541" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 157.292732][T11592] usb usb8: usbfs: process 11592 (syz.9.1541) did not claim interface 0 before use [ 157.317317][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'. [ 157.372564][T11595] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1542'. [ 157.420487][T11594] hsr_slave_1 (unregistering): left promiscuous mode [ 157.494471][ T5978] Bluetooth: hci3: command tx timeout [ 157.567511][T11615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1546'. [ 157.994360][ T60] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 158.146657][ T60] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 158.149939][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.152752][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.156258][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 158.159143][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.162025][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.165482][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 158.168361][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.171116][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.174631][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 158.177522][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.180281][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.183648][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 158.186949][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.189727][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.193067][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 158.196469][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.199161][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.202508][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 158.205598][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.208475][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.211842][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 158.215425][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.218300][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.221947][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 158.225829][ T60] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 158.228821][ T60] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 158.231707][ T60] usb 7-1: Product: syz [ 158.233406][ T60] usb 7-1: Manufacturer: syz [ 158.235602][ T60] usb 7-1: SerialNumber: syz [ 158.239642][ T60] usb 7-1: config 0 descriptor?? [ 158.246771][ T60] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 158.445565][ T60] usb 7-1: USB disconnect, device number 20 [ 158.450255][ T60] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 158.579916][ C2] vcan0: j1939_tp_rxtimer: 0xffff888037c04800: rx timeout, send abort [ 158.582652][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888037c04800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 158.803507][ T5983] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 158.806998][ T5983] CPU: 3 UID: 0 PID: 5983 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 158.807017][ T5983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.807029][ T5983] Workqueue: hci3 hci_rx_work [ 158.807072][ T5983] Call Trace: [ 158.807079][ T5983] [ 158.807086][ T5983] dump_stack_lvl+0x16c/0x1f0 [ 158.807107][ T5983] sysfs_warn_dup+0x7f/0xa0 [ 158.807136][ T5983] sysfs_create_dir_ns+0x24b/0x2b0 [ 158.807158][ T5983] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 158.807178][ T5983] ? find_held_lock+0x2b/0x80 [ 158.807202][ T5983] ? do_raw_spin_unlock+0x172/0x230 [ 158.807225][ T5983] kobject_add_internal+0x2c4/0x9b0 [ 158.807259][ T5983] kobject_add+0x16e/0x240 [ 158.807278][ T5983] ? __pfx_kobject_add+0x10/0x10 [ 158.807303][ T5983] ? do_raw_spin_unlock+0x172/0x230 [ 158.807322][ T5983] ? kobject_put+0xab/0x5a0 [ 158.807348][ T5983] device_add+0x288/0x1aa0 [ 158.807373][ T5983] ? __pfx_dev_set_name+0x10/0x10 [ 158.807390][ T5983] ? __pfx_device_add+0x10/0x10 [ 158.807416][ T5983] ? mgmt_send_event_skb+0x2fb/0x460 [ 158.807436][ T5983] hci_conn_add_sysfs+0x17e/0x230 [ 158.807457][ T5983] le_conn_complete_evt+0x1075/0x1d70 [ 158.807475][ T5983] ? preempt_count_sub+0xb0/0x160 [ 158.807501][ T5983] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 158.807517][ T5983] ? hci_event_packet+0x459/0x11c0 [ 158.807538][ T5983] hci_le_conn_complete_evt+0x23c/0x370 [ 158.807561][ T5983] hci_le_meta_evt+0x357/0x5e0 [ 158.807580][ T5983] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 158.807600][ T5983] hci_event_packet+0x682/0x11c0 [ 158.807613][ T5983] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 158.807634][ T5983] ? __pfx_hci_event_packet+0x10/0x10 [ 158.807654][ T5983] ? kcov_remote_start+0x3c9/0x6d0 [ 158.807688][ T5983] ? lockdep_hardirqs_on+0x7c/0x110 [ 158.807723][ T5983] hci_rx_work+0x2c5/0x16b0 [ 158.807745][ T5983] ? rcu_is_watching+0x12/0xc0 [ 158.807771][ T5983] process_one_work+0x9cc/0x1b70 [ 158.807796][ T5983] ? __pfx_process_one_work+0x10/0x10 [ 158.807824][ T5983] ? assign_work+0x1a0/0x250 [ 158.807845][ T5983] worker_thread+0x6c8/0xf10 [ 158.807866][ T5983] ? __kthread_parkme+0x19e/0x250 [ 158.807891][ T5983] ? __pfx_worker_thread+0x10/0x10 [ 158.807909][ T5983] kthread+0x3c2/0x780 [ 158.807926][ T5983] ? __pfx_kthread+0x10/0x10 [ 158.807943][ T5983] ? rcu_is_watching+0x12/0xc0 [ 158.807959][ T5983] ? __pfx_kthread+0x10/0x10 [ 158.807976][ T5983] ret_from_fork+0x56a/0x730 [ 158.807991][ T5983] ? __pfx_kthread+0x10/0x10 [ 158.808008][ T5983] ret_from_fork_asm+0x1a/0x30 [ 158.808034][ T5983] [ 158.808115][ T5983] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 158.856734][T11653] /dev/sg0: Can't lookup blockdev [ 158.859529][ T5983] Bluetooth: hci3: failed to register connection device [ 158.864570][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.942678][T11658] nbd: couldn't find device at index -1605786504 [ 158.977706][T11663] JFS: discard option not supported on device [ 158.980529][T11663] block nbd7: Attempted send on invalid socket [ 158.983169][T11663] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.987433][T11663] block nbd7: Attempted send on invalid socket [ 158.990036][T11663] I/O error, dev nbd7, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.998801][T11663] Mount JFS Failure: -5 [ 159.015690][T11668] xfrm0: Master is either lo or non-ether device [ 159.131963][T11678] evm: overlay not supported [ 159.142565][T11677] overlayfs: failed to get index nlink (file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa, err=-61) [ 159.574439][ T5983] Bluetooth: hci3: command tx timeout [ 159.839116][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 159.839131][ T40] audit: type=1400 audit(159.745:718): avc: denied { setattr } for pid=11680 comm="syz.9.1560" name="video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 159.843621][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1561'. [ 159.851777][ T40] audit: type=1400 audit(159.745:719): avc: denied { read } for pid=11680 comm="syz.9.1560" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 159.851817][ T40] audit: type=1400 audit(159.745:720): avc: denied { open } for pid=11680 comm="syz.9.1560" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 159.933778][T11689] .: renamed from bond0 (while UP) [ 160.599149][T11696] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1572'. [ 160.614373][ T5983] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.646724][T11701] input: syz1 as /devices/virtual/input/input20 [ 160.661087][T11705] /dev/sg0: Can't lookup blockdev [ 160.913235][ T40] audit: type=1400 audit(160.815:721): avc: denied { bind } for pid=11723 comm="syz.9.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.921804][ T40] audit: type=1400 audit(160.815:722): avc: denied { bind } for pid=11723 comm="syz.9.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.191844][T11741] dlm: no locking on control device [ 161.210369][ T5983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.215300][ T5983] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.219401][ T5983] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.222849][ T5983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.228852][ T5983] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.256399][T11743] lo speed is unknown, defaulting to 1000 [ 161.358306][T11763] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 161.375608][T11763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.411667][T11743] chnl_net:caif_netlink_parms(): no params data found [ 161.468741][ T53] Process accounting resumed [ 161.490802][T11773] Process accounting resumed [ 161.520608][T11743] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.523251][T11743] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.525682][T11743] bridge_slave_0: entered allmulticast mode [ 161.528257][T11743] bridge_slave_0: entered promiscuous mode [ 161.529109][T11780] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 161.531253][T11743] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.539865][T11743] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.542844][T11743] bridge_slave_1: entered allmulticast mode [ 161.545504][T11743] bridge_slave_1: entered promiscuous mode [ 161.589741][T11743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.595714][T11743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.629685][T11743] team0: Port device team_slave_0 added [ 161.633060][T11743] team0: Port device team_slave_1 added [ 161.664557][ T5983] Bluetooth: hci3: command tx timeout [ 161.691771][T11743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.694792][T11743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.705235][T11743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.712889][T11743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.716124][T11743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.728270][T11743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.760360][T11790] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1588'. [ 161.768999][T11790] /dev/nullb0: Can't open blockdev [ 161.792403][T11743] hsr_slave_0: entered promiscuous mode [ 161.795870][T11743] hsr_slave_1: entered promiscuous mode [ 161.798944][T11743] debugfs: 'hsr0' already exists in 'hsr' [ 161.801351][T11743] Cannot create hsr debugfs directory [ 161.869271][T11798] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1591'. [ 161.978804][T11815] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1596'. [ 163.019134][T11823] ref_ctr increment failed for inode: 0xa4 offset: 0x7 ref_ctr_offset: 0x1600 of mm: 0xffff88802cd660c0 [ 163.254426][ T5978] Bluetooth: hci1: command tx timeout [ 163.744424][ T5978] Bluetooth: hci3: command tx timeout [ 165.107994][T11862] syzkaller0: entered promiscuous mode [ 165.110337][T11862] syzkaller0: entered allmulticast mode [ 165.156154][T11870] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1607'. [ 165.245377][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1609'. [ 165.249189][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1609'. [ 165.307108][ T40] audit: type=1400 audit(165.215:723): avc: denied { ioctl } for pid=11894 comm="syz.2.1611" path="socket:[48245]" dev="sockfs" ino=48245 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 165.340921][ T5978] Bluetooth: hci1: command tx timeout [ 165.362390][T11898] VFS: Mount too revealing [ 165.387501][T11743] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.393493][T11743] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 165.398736][T11743] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.406496][T11743] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.448250][T11743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.451280][ T24] IPVS: starting estimator thread 0... [ 165.460115][T11743] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.477757][ T6838] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.480427][ T6838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.493619][ T6838] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.496710][ T6838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.545537][T11916] IPVS: using max 39 ests per chain, 93600 per kthread [ 165.581042][T11918] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 165.669966][T11743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.700586][T11743] veth0_vlan: entered promiscuous mode [ 165.709979][T11743] veth1_vlan: entered promiscuous mode [ 165.728623][T11743] veth0_macvtap: entered promiscuous mode [ 165.732525][T11743] veth1_macvtap: entered promiscuous mode [ 165.742762][T11743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.744212][ T40] audit: type=1400 audit(165.645:724): avc: denied { read } for pid=11938 comm="syz.6.1618" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 165.751528][T11743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.752705][ T40] audit: type=1400 audit(165.655:725): avc: denied { open } for pid=11938 comm="syz.6.1618" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 165.762832][ T40] audit: type=1400 audit(165.655:726): avc: denied { ioctl } for pid=11938 comm="syz.6.1618" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 165.772195][ T6843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.776527][ T6843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.781115][ T6843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.785993][ T6843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.814534][ T5978] Bluetooth: hci3: command 0x0406 tx timeout [ 165.833903][ T6851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.837236][ T6851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.870479][ T6843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.873183][ T6843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.064213][T11968] ip6erspan0: entered allmulticast mode [ 166.552858][ T40] audit: type=1400 audit(166.455:727): avc: denied { setattr } for pid=11991 comm="syz.2.1626" name="SCO" dev="sockfs" ino=47891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.599477][T11996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.606519][T11996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.657711][T12005] netlink: 'syz.2.1630': attribute type 1 has an invalid length. [ 166.688949][T12005] bond9: (slave geneve2): making interface the new active one [ 166.692621][T12005] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 166.727077][T12014] lo speed is unknown, defaulting to 1000 [ 166.882679][ T40] audit: type=1400 audit(166.785:728): avc: denied { append } for pid=12028 comm="syz.0.1637" name="001" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 166.907885][ T40] audit: type=1400 audit(166.815:729): avc: denied { map } for pid=12028 comm="syz.0.1637" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 167.058752][T12045] No buffer was provided with the request [ 167.244141][ T40] audit: type=1400 audit(167.145:730): avc: denied { ioctl } for pid=12067 comm="syz.6.1644" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 167.263872][T12071] binder: 12070:12071 ioctl 400c620e 200000000640 returned -22 [ 167.379996][ T40] audit: type=1400 audit(167.295:731): avc: denied { accept } for pid=12084 comm="syz.6.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 167.405403][T12085] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 167.414499][ T5983] Bluetooth: hci1: command 0x040f tx timeout [ 167.592123][ T40] audit: type=1400 audit(167.495:732): avc: denied { ioctl } for pid=12103 comm="syz.6.1653" path="socket:[49665]" dev="sockfs" ino=49665 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 168.239883][T12166] devpts: Bad value for 'max' [ 168.407497][T12185] virtiofs: Unknown parameter '4A/҈T@|ɗd' [ 168.498286][T12197] unknown channel width for channel at 909000KHz? [ 168.501824][T12197] : renamed from bridge_slave_0 (while UP) [ 168.509058][T12197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=12197 comm=syz.0.1674 [ 168.587813][T12200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.818862][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1690'. [ 168.822314][T12250] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1690'. [ 168.843322][T12250] @0: renamed from syz_tun (while UP) [ 169.028150][T12266] mkiss: ax0: crc mode is auto. [ 169.221075][T12275] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 169.223427][T12275] overlayfs: failed to set xattr on upper [ 169.225409][T12275] overlayfs: ...falling back to redirect_dir=nofollow. [ 169.227843][T12275] overlayfs: ...falling back to index=off. [ 169.229723][T12275] overlayfs: ...falling back to uuid=null. [ 169.231647][T12275] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 169.313198][T12292] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1702'. [ 169.325508][ T5983] Bluetooth: hci2: unexpected event for opcode 0x080b [ 169.325531][T12297] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1703'. [ 169.328260][ T5983] Bluetooth: hci2: unexpected event for opcode 0x0c7d [ 169.494691][ T5983] Bluetooth: hci1: command 0x040f tx timeout [ 169.939487][T12334] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 170.044385][ T8332] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 170.204997][ T8332] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 170.208570][ T8332] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.212708][ T8332] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 170.216797][ T8332] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.221227][ T8332] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.228472][ T8332] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 170.232297][ T8332] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 170.232319][ T8332] usb 7-1: Product: syz [ 170.232333][ T8332] usb 7-1: Manufacturer: syz [ 170.246981][ T8332] cdc_wdm 7-1:1.0: skipping garbage [ 170.247001][ T8332] cdc_wdm 7-1:1.0: skipping garbage [ 170.250016][ T8332] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 170.250036][ T8332] cdc_wdm 7-1:1.0: Unknown control protocol [ 170.356598][T12348] netlink: 830 bytes leftover after parsing attributes in process `syz.9.1718'. [ 170.362225][T12348] usb usb8: usbfs: process 12348 (syz.9.1718) did not claim interface 0 before use [ 170.412373][T12350] (syz.9.1719,12350,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 170.416438][T12350] (syz.9.1719,12350,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 170.446156][T12328] cdc_wdm 7-1:1.0: Error submitting int urb - -90 [ 170.458882][T12328] program syz.2.1712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.515563][T12364] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 170.519726][T12364] netlink: 'syz.2.1712': attribute type 58 has an invalid length. [ 170.598076][T12369] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 170.611926][ T9037] usb 7-1: USB disconnect, device number 21 [ 170.638367][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 170.638383][ T40] audit: type=1400 audit(170.545:740): avc: denied { bind } for pid=12370 comm="syz.9.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 170.684459][ T5983] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 170.844415][ T8332] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 170.909672][ T6851] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 170.916673][ T40] audit: type=1400 audit(170.825:741): avc: denied { read } for pid=12378 comm="syz.0.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.974657][ T8332] usb 11-1: device descriptor read/64, error -71 [ 171.202891][T12393] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 171.224388][ T8332] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 171.354511][ T8332] usb 11-1: device descriptor read/64, error -71 [ 171.379333][T12396] syzkaller1: entered promiscuous mode [ 171.381089][T12396] syzkaller1: entered allmulticast mode [ 171.384073][T12397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.464497][ T8332] usb usb11-port1: attempt power cycle [ 171.575011][ T5978] Bluetooth: hci1: command 0x040f tx timeout [ 171.599805][T12407] mkiss: ax0: crc mode is auto. [ 171.749686][ T40] audit: type=1800 audit(171.655:742): pid=12415 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1733" name="bus" dev="9p" ino=71827959 res=0 errno=0 [ 171.754898][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1735'. [ 171.781210][T12420] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 171.783458][T12420] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 171.786583][T12420] vhci_hcd vhci_hcd.0: Device attached [ 171.804439][ T8332] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 171.825525][ T8332] usb 11-1: device descriptor read/8, error -71 [ 171.844914][ T40] audit: type=1400 audit(171.755:743): avc: denied { create } for pid=12426 comm="syz.0.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 171.852387][ T40] audit: type=1400 audit(171.755:744): avc: denied { setattr } for pid=12426 comm="syz.0.1736" name="NETROM" dev="sockfs" ino=51505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 171.906707][ T40] audit: type=1400 audit(171.815:745): avc: denied { name_connect } for pid=12431 comm="syz.0.1737" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 172.055257][ T24] usb 55-1: new high-speed USB device number 2 using vhci_hcd [ 172.064426][ T8332] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 172.084931][ T8332] usb 11-1: device descriptor read/8, error -71 [ 172.195725][ T8332] usb usb11-port1: unable to enumerate USB device [ 172.576614][T12422] vhci_hcd: connection reset by peer [ 172.578684][ T6831] vhci_hcd: stop threads [ 172.580254][ T6831] vhci_hcd: release socket [ 172.583541][ T6831] vhci_hcd: disconnect device [ 172.936983][ T40] audit: type=1400 audit(172.845:746): avc: denied { accept } for pid=12456 comm="syz.2.1746" path="socket:[52262]" dev="sockfs" ino=52262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 173.053852][ T40] audit: type=1400 audit(172.955:747): avc: denied { bind } for pid=12458 comm="syz.2.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 173.106680][T12459] cdrom: dropping to single frame dma [ 173.115615][T12461] fuse: Bad value for 'user_id' [ 173.117944][T12461] fuse: Bad value for 'user_id' [ 173.121787][ T40] audit: type=1400 audit(173.025:748): avc: denied { nlmsg_write } for pid=12458 comm="syz.2.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 173.443386][T12352] ceph: No mds server is up or the cluster is laggy [ 173.443403][T12361] ceph: No mds server is up or the cluster is laggy [ 173.545908][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1752'. [ 173.619866][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1754'. [ 173.623438][T12485] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1754'. [ 173.635646][T12489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1755'. [ 173.645968][ T6843] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 173.650598][ T6843] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 173.679268][ T8332] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 173.717902][T12495] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 173.756213][T12500] tmpfs: Group quota block hardlimit too large. [ 173.797824][ T40] audit: type=1400 audit(173.705:749): avc: denied { remount } for pid=12502 comm="syz.6.1762" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 173.875980][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1764'. [ 173.879602][T12513] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.882638][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1764'. [ 173.927308][T12516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1765'. [ 173.930313][T12516] netlink: 'syz.2.1765': attribute type 7 has an invalid length. [ 173.933046][T12516] netlink: 'syz.2.1765': attribute type 8 has an invalid length. [ 173.935586][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'. [ 174.033181][T12542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.040553][T12543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.167863][T12557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.172100][T12547] team0: Port device team_slave_0 removed [ 174.194993][ T8332] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 174.229936][T12553] xt_socket: unknown flags 0xe4 [ 174.314800][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 174.316019][T12568] binder: 12567:12568 ioctl c0105303 200000000000 returned -22 [ 174.434412][ T1468] usb 14-1: new full-speed USB device number 2 using dummy_hcd [ 174.587787][ T1468] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.590903][ T1468] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.595353][ T1468] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 174.598051][ T1468] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.673973][T12601] team0: Device gtp0 is of different type [ 174.806944][ T1468] usb 14-1: usb_control_msg returned -32 [ 174.808741][ T1468] usbtmc 14-1:16.0: can't read capabilities [ 174.837836][ T9] usb 14-1: USB disconnect, device number 2 [ 174.887928][T12627] netlink: 'syz.6.1796': attribute type 21 has an invalid length. [ 174.906525][T12627] tipc: Enabled bearer , priority 10 [ 174.959227][ T8084] hid (null): invalid report_count 21855 [ 174.961244][ T8084] hid (null): bogus close delimiter [ 174.962849][ T8084] hid (null): unknown global tag 0xa9 [ 174.967448][ T8084] hid (null): unknown global tag 0xe [ 174.969215][ T8084] hid (null): invalid report_size 48620 [ 174.976525][ T8084] hid (null): unknown global tag 0xc [ 174.980275][ T8084] hid (null): invalid report_size 2106 [ 174.982408][ T8084] hid (null): unknown global tag 0xe [ 174.986292][ T8084] hid (null): unknown global tag 0xe [ 174.988399][ T8084] hid (null): unknown global tag 0xe [ 174.990333][ T8084] hid (null): unknown global tag 0xc [ 174.992082][ T8084] hid (null): global environment stack underflow [ 174.994046][ T8084] hid (null): global environment stack underflow [ 174.997670][ T8084] hid (null): invalid report_size 806174500 [ 174.999542][ T8084] hid (null): global environment stack underflow [ 175.001514][ T8084] hid (null): report_id 0 is invalid [ 175.003144][ T8084] hid (null): global environment stack underflow [ 175.005704][ T8084] hid (null): report_id 50816 is invalid [ 175.007474][ T8084] hid (null): unknown global tag 0xe [ 175.009137][ T8084] hid (null): unknown global tag 0xe [ 175.010793][ T8084] hid (null): unknown global tag 0xc [ 175.012455][ T8084] hid (null): invalid report_count -365346048 [ 175.014366][ T8084] hid (null): unknown global tag 0xd [ 175.016018][ T8084] hid (null): report_id 2507479533 is invalid [ 175.017842][ T8084] hid (null): unknown global tag 0xe [ 175.019489][ T8084] hid (null): unknown global tag 0x6e [ 175.021113][ T8084] hid (null): unknown global tag 0xfe [ 175.022800][ T8084] hid (null): unknown global tag 0xe [ 175.024429][ T8084] hid (null): unknown global tag 0xb0 [ 175.026160][ T8084] hid (null): unknown global tag 0xd [ 175.027782][ T8084] hid (null): unknown global tag 0x23 [ 175.029459][ T8084] hid (null): invalid report_count -554666574 [ 175.031302][ T8084] hid (null): report_id 1677412036 is invalid [ 175.033255][ T8084] hid (null): unknown global tag 0xd [ 175.037813][ T8084] hid-generic C380:0004:000A.0004: reserved main item tag 0xe [ 175.040088][ T8084] hid-generic C380:0004:000A.0004: unknown main item tag 0x6 [ 175.042405][ T8084] hid-generic C380:0004:000A.0004: unknown main item tag 0x1 [ 175.044855][ T8084] hid-generic C380:0004:000A.0004: unknown main item tag 0x1 [ 175.047149][ T8084] hid-generic C380:0004:000A.0004: unknown main item tag 0x2 [ 175.049398][ T8084] hid-generic C380:0004:000A.0004: unknown main item tag 0x7 [ 175.051661][ T8084] hid-generic C380:0004:000A.0004: unexpected long global item [ 175.054326][ T8084] hid-generic C380:0004:000A.0004: probe with driver hid-generic failed with error -22 [ 175.154520][T12647] SELinux: Context system_u:object_r:gpg_helper_exec_t:s0 is not valid (left unmapped). [ 175.356756][T12661] netlink: 'syz.0.1805': attribute type 3 has an invalid length. [ 175.452377][T12675] netlink: 'syz.6.1812': attribute type 30 has an invalid length. [ 175.505581][ T5978] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 175.642019][T12694] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 175.648216][T12694] overlayfs: missing 'lowerdir' [ 175.893489][T12709] bond2: entered promiscuous mode [ 175.896400][T12709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.920618][T12707] ./cgroup: Can't lookup blockdev [ 175.962185][T12715] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer. [ 176.089075][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 176.089092][ T40] audit: type=1400 audit(175.995:753): avc: denied { mount } for pid=12723 comm="syz.9.1826" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 176.363602][T12739] /dev/sg0: Can't lookup blockdev [ 177.184367][ T24] vhci_hcd: vhci_device speed not set [ 177.211531][T12747] syzkaller1: entered promiscuous mode [ 177.213392][T12747] syzkaller1: entered allmulticast mode [ 177.432092][T12762] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 177.444467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 177.464971][T12762] bond0: (slave batadv0): Releasing backup interface [ 177.470968][T12764] netlink: 'syz.6.1839': attribute type 10 has an invalid length. [ 177.476540][T12762] bridge_slave_0: left allmulticast mode [ 177.478861][T12762] bridge_slave_0: left promiscuous mode [ 177.481243][T12762] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.490867][T12762] bridge_slave_1: left allmulticast mode [ 177.493289][T12762] bridge_slave_1: left promiscuous mode [ 177.496052][T12762] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.503154][T12762] bond0: (slave bond_slave_0): Releasing backup interface [ 177.511378][T12762] bond0: (slave bond_slave_1): Releasing backup interface [ 177.522586][T12762] team0: Port device team_slave_0 removed [ 177.531017][T12762] team0: Port device team_slave_1 removed [ 177.533988][T12762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.537974][T12762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.542743][T12762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.547344][T12762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.562773][T12764] 8021q: adding VLAN 0 to HW filter on device . [ 177.569052][T12764] team0: Port device . added [ 177.625597][ T40] audit: type=1326 audit(177.535:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12769 comm="syz.9.1840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb251b8ec29 code=0x7ffc0000 [ 177.640070][ T40] audit: type=1326 audit(177.535:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12769 comm="syz.9.1840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb251b8ec29 code=0x7ffc0000 [ 177.651599][ T40] audit: type=1326 audit(177.535:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12769 comm="syz.9.1840" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb251b8ec29 code=0x7ffc0000 [ 177.661410][ T40] audit: type=1326 audit(177.535:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12769 comm="syz.9.1840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb251b8ec29 code=0x7ffc0000 [ 177.671322][ T40] audit: type=1326 audit(177.535:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12769 comm="syz.9.1840" exe="/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fb251b8ec29 code=0x7ffc0000 [ 177.680876][ T40] audit: type=1326 audit(177.535:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12769 comm="syz.9.1840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb251b8ec29 code=0x7ffc0000 [ 177.692664][ T40] audit: type=1326 audit(177.535:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12769 comm="syz.9.1840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb251b8ec29 code=0x7ffc0000 [ 177.700872][ T40] audit: type=1326 audit(177.535:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12769 comm="syz.9.1840" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb251b8d590 code=0x7ffc0000 [ 177.709103][ T40] audit: type=1326 audit(177.535:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12769 comm="syz.9.1840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb251b8ec29 code=0x7ffc0000 [ 177.867723][T12773] tmpfs: Group quota block hardlimit too large. [ 177.894482][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 177.925073][ T5978] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 177.976863][T12777] /dev/sg0: Can't lookup blockdev [ 178.164865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 178.191759][T12779] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.196589][T12779] FAT-fs (loop6): unable to read boot sector [ 178.310461][T12783] __nla_validate_parse: 7 callbacks suppressed [ 178.310478][T12783] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1845'. [ 178.655943][T12798] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1851'. [ 178.693959][T12776] orangefs_mount: mount request failed with -4 [ 178.822930][T12812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1857'. [ 178.827188][T12813] nftables ruleset with unbound set [ 178.920658][T12820] unknown channel width for channel at 909000KHz? [ 178.972628][T12816] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 178.992338][T12821] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12821 comm=syz.6.1860 [ 178.996494][T12821] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12821 comm=syz.6.1860 [ 179.198466][T12842] /dev/sg0: Can't lookup blockdev [ 179.384073][T12848] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 179.386829][T12848] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 179.390694][T12848] vhci_hcd vhci_hcd.0: Device attached [ 179.392824][T12850] vhci_hcd: connection closed [ 179.398067][ T6837] vhci_hcd: stop threads [ 179.401892][ T6837] vhci_hcd: release socket [ 179.403830][ T6837] vhci_hcd: disconnect device [ 179.929671][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1872'. [ 180.069719][T12867] FAULT_INJECTION: forcing a failure. [ 180.069719][T12867] name failslab, interval 1, probability 0, space 0, times 0 [ 180.074146][T12867] CPU: 0 UID: 0 PID: 12867 Comm: syz.0.1875 Not tainted syzkaller #0 PREEMPT(full) [ 180.074161][T12867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 180.074168][T12867] Call Trace: [ 180.074172][T12867] [ 180.074177][T12867] dump_stack_lvl+0x16c/0x1f0 [ 180.074203][T12867] should_fail_ex+0x512/0x640 [ 180.074223][T12867] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 180.074256][T12867] should_failslab+0xc2/0x120 [ 180.074274][T12867] __kmalloc_cache_noprof+0x6a/0x3e0 [ 180.074297][T12867] ? rcu_is_watching+0x12/0xc0 [ 180.074315][T12867] ? vhost_task_create+0xe5/0x2e0 [ 180.074334][T12867] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 180.074356][T12867] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 180.074382][T12867] vhost_task_create+0xe5/0x2e0 [ 180.074397][T12867] ? __pfx_vhost_task_create+0x10/0x10 [ 180.074420][T12867] ? __pfx_vhost_task_fn+0x10/0x10 [ 180.074450][T12867] kvm_mmu_post_init_vm+0x1b7/0x380 [ 180.074471][T12867] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 180.074490][T12867] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 180.074508][T12867] kvm_vcpu_ioctl+0x5eb/0x1690 [ 180.074524][T12867] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 180.074539][T12867] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 180.074553][T12867] ? do_vfs_ioctl+0x128/0x14f0 [ 180.074570][T12867] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 180.074587][T12867] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 180.074609][T12867] ? hook_file_ioctl_common+0x145/0x410 [ 180.074625][T12867] ? selinux_file_ioctl+0x180/0x270 [ 180.074640][T12867] ? selinux_file_ioctl+0xb4/0x270 [ 180.074677][T12867] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 180.074692][T12867] __x64_sys_ioctl+0x18e/0x210 [ 180.074710][T12867] do_syscall_64+0xcd/0x4e0 [ 180.074726][T12867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.074737][T12867] RIP: 0033:0x7f985178ec29 [ 180.074747][T12867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.074758][T12867] RSP: 002b:00007f985261c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.074769][T12867] RAX: ffffffffffffffda RBX: 00007f98519d5fa0 RCX: 00007f985178ec29 [ 180.074776][T12867] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 180.074782][T12867] RBP: 00007f985261c090 R08: 0000000000000000 R09: 0000000000000000 [ 180.074788][T12867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.074795][T12867] R13: 00007f98519d6038 R14: 00007f98519d5fa0 R15: 00007ffe12aabda8 [ 180.074808][T12867] [ 180.504742][ T8084] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 180.556136][T12892] /dev/sg0: Can't lookup blockdev [ 180.645156][ T8084] usb 11-1: device descriptor read/64, error -71 [ 180.680507][T12894] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 180.894461][ T8084] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 181.010265][T12908] FAULT_INJECTION: forcing a failure. [ 181.010265][T12908] name failslab, interval 1, probability 0, space 0, times 0 [ 181.014209][T12908] CPU: 1 UID: 0 PID: 12908 Comm: syz.0.1888 Not tainted syzkaller #0 PREEMPT(full) [ 181.014223][T12908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.014242][T12908] Call Trace: [ 181.014247][T12908] [ 181.014252][T12908] dump_stack_lvl+0x16c/0x1f0 [ 181.014270][T12908] should_fail_ex+0x512/0x640 [ 181.014284][T12908] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 181.014303][T12908] should_failslab+0xc2/0x120 [ 181.014316][T12908] __kmalloc_cache_noprof+0x6a/0x3e0 [ 181.014333][T12908] ? rcu_is_watching+0x12/0xc0 [ 181.014347][T12908] ? vhost_task_create+0xe5/0x2e0 [ 181.014359][T12908] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 181.014375][T12908] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 181.014393][T12908] vhost_task_create+0xe5/0x2e0 [ 181.014404][T12908] ? __pfx_vhost_task_create+0x10/0x10 [ 181.014419][T12908] ? __pfx_vhost_task_fn+0x10/0x10 [ 181.014436][T12908] kvm_mmu_post_init_vm+0x1b7/0x380 [ 181.014451][T12908] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 181.014467][T12908] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 181.014485][T12908] kvm_vcpu_ioctl+0x5eb/0x1690 [ 181.014501][T12908] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 181.014516][T12908] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.014530][T12908] ? do_vfs_ioctl+0x128/0x14f0 [ 181.014547][T12908] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 181.014564][T12908] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 181.014586][T12908] ? hook_file_ioctl_common+0x145/0x410 [ 181.014601][T12908] ? selinux_file_ioctl+0x180/0x270 [ 181.014617][T12908] ? selinux_file_ioctl+0xb4/0x270 [ 181.014652][T12908] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 181.014673][T12908] __x64_sys_ioctl+0x18e/0x210 [ 181.014691][T12908] do_syscall_64+0xcd/0x4e0 [ 181.014707][T12908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.014718][T12908] RIP: 0033:0x7f985178ec29 [ 181.014727][T12908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.014737][T12908] RSP: 002b:00007f985261c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.014748][T12908] RAX: ffffffffffffffda RBX: 00007f98519d5fa0 RCX: 00007f985178ec29 [ 181.014755][T12908] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 181.014761][T12908] RBP: 00007f985261c090 R08: 0000000000000000 R09: 0000000000000000 [ 181.014767][T12908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.014773][T12908] R13: 00007f98519d6038 R14: 00007f98519d5fa0 R15: 00007ffe12aabda8 [ 181.014787][T12908] [ 181.074485][ T8084] usb 11-1: device descriptor read/64, error -71 [ 181.211959][T12915] binder: Unknown parameter '00000000000000000000' [ 181.214389][ T40] kauditd_printk_skb: 114 callbacks suppressed [ 181.214400][ T40] audit: type=1400 audit(181.115:877): avc: denied { remount } for pid=12914 comm="syz.0.1890" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 181.224634][ T8084] usb usb11-port1: attempt power cycle [ 181.229528][T12915] netlink: 'syz.0.1890': attribute type 1 has an invalid length. [ 181.244417][ T24] usb 14-1: new low-speed USB device number 3 using dummy_hcd [ 181.396314][ T24] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 181.400182][ T24] usb 14-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 181.403336][ T24] usb 14-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 181.410005][ T24] usb 14-1: string descriptor 0 read error: -22 [ 181.412121][ T24] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.416898][ T24] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.421753][T12909] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 181.575957][ T8084] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 181.595754][ T8084] usb 11-1: device descriptor read/8, error -71 [ 181.632958][ T24] cdc_ncm 14-1:1.0: bind() failure [ 181.641106][ T24] cdc_ncm 14-1:1.1: CDC Union missing and no IAD found [ 181.644031][ T24] cdc_ncm 14-1:1.1: bind() failure [ 181.654875][T12929] tmpfs: Bad value for 'mpol' [ 181.654887][ T24] usb 14-1: USB disconnect, device number 3 [ 181.724867][T12928] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 181.728134][T12928] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 181.730082][T12928] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 181.734323][T12928] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 181.737989][T12928] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 181.740029][T12928] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.742460][T12928] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 181.747661][T12928] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 181.796969][T12933] veth0_vlan: left promiscuous mode [ 181.834471][ T8084] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 181.855080][ T8084] usb 11-1: device descriptor read/8, error -71 [ 181.896823][T12940] FAULT_INJECTION: forcing a failure. [ 181.896823][T12940] name failslab, interval 1, probability 0, space 0, times 0 [ 181.902132][T12940] CPU: 1 UID: 0 PID: 12940 Comm: syz.0.1898 Not tainted syzkaller #0 PREEMPT(full) [ 181.902156][T12940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.902168][T12940] Call Trace: [ 181.902174][T12940] [ 181.902181][T12940] dump_stack_lvl+0x16c/0x1f0 [ 181.902210][T12940] should_fail_ex+0x512/0x640 [ 181.902231][T12940] ? __kmalloc_noprof+0xbf/0x510 [ 181.902253][T12940] ? lsm_blob_alloc+0x68/0x90 [ 181.902271][T12940] should_failslab+0xc2/0x120 [ 181.902295][T12940] __kmalloc_noprof+0xd2/0x510 [ 181.902312][T12940] ? __pfx_perf_event_init_task+0x10/0x10 [ 181.902343][T12940] ? audit_alloc+0xa2/0x7b0 [ 181.902372][T12940] lsm_blob_alloc+0x68/0x90 [ 181.902393][T12940] security_task_alloc+0x2d/0x260 [ 181.902412][T12940] copy_process+0x2205/0x7690 [ 181.902448][T12940] ? __pfx_copy_process+0x10/0x10 [ 181.902476][T12940] ? lockdep_init_map_type+0x5c/0x280 [ 181.902497][T12940] ? lockdep_init_map_type+0x5c/0x280 [ 181.902515][T12940] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 181.902539][T12940] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 181.902568][T12940] vhost_task_create+0x1d2/0x2e0 [ 181.902587][T12940] ? __pfx_vhost_task_create+0x10/0x10 [ 181.902612][T12940] ? __pfx_vhost_task_fn+0x10/0x10 [ 181.902664][T12940] kvm_mmu_post_init_vm+0x1b7/0x380 [ 181.902688][T12940] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 181.902715][T12940] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 181.902746][T12940] kvm_vcpu_ioctl+0x5eb/0x1690 [ 181.902773][T12940] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 181.902799][T12940] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.902822][T12940] ? do_vfs_ioctl+0x128/0x14f0 [ 181.902849][T12940] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 181.902877][T12940] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 181.902913][T12940] ? hook_file_ioctl_common+0x145/0x410 [ 181.902940][T12940] ? selinux_file_ioctl+0x180/0x270 [ 181.902965][T12940] ? selinux_file_ioctl+0xb4/0x270 [ 181.902991][T12940] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 181.903017][T12940] __x64_sys_ioctl+0x18e/0x210 [ 181.903045][T12940] do_syscall_64+0xcd/0x4e0 [ 181.903070][T12940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.903089][T12940] RIP: 0033:0x7f985178ec29 [ 181.903105][T12940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.903122][T12940] RSP: 002b:00007f985261c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.903143][T12940] RAX: ffffffffffffffda RBX: 00007f98519d5fa0 RCX: 00007f985178ec29 [ 181.903154][T12940] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 181.903165][T12940] RBP: 00007f985261c090 R08: 0000000000000000 R09: 0000000000000000 [ 181.903175][T12940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.903185][T12940] R13: 00007f98519d6038 R14: 00007f98519d5fa0 R15: 00007ffe12aabda8 [ 181.903209][T12940] [ 181.966453][ T8084] usb usb11-port1: unable to enumerate USB device [ 182.388533][T12977] bridge3: entered promiscuous mode [ 182.390838][T12977] bridge3: entered allmulticast mode [ 182.455628][T12979] /dev/sg0: Can't lookup blockdev [ 182.517734][T12982] FAULT_INJECTION: forcing a failure. [ 182.517734][T12982] name failslab, interval 1, probability 0, space 0, times 0 [ 182.521760][T12982] CPU: 1 UID: 0 PID: 12982 Comm: syz.2.1908 Not tainted syzkaller #0 PREEMPT(full) [ 182.521775][T12982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.521782][T12982] Call Trace: [ 182.521786][T12982] [ 182.521790][T12982] dump_stack_lvl+0x16c/0x1f0 [ 182.521808][T12982] should_fail_ex+0x512/0x640 [ 182.521823][T12982] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 182.521837][T12982] should_failslab+0xc2/0x120 [ 182.521850][T12982] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 182.521862][T12982] ? alloc_vmap_area+0x59b/0x29c0 [ 182.521875][T12982] ? alloc_vmap_area+0x648/0x29c0 [ 182.521892][T12982] alloc_vmap_area+0x648/0x29c0 [ 182.521912][T12982] ? __pfx_alloc_vmap_area+0x10/0x10 [ 182.521930][T12982] __get_vm_area_node+0x1ca/0x330 [ 182.521948][T12982] __vmalloc_node_range_noprof+0x271/0x14b0 [ 182.521965][T12982] ? vhost_task_create+0x1d2/0x2e0 [ 182.521977][T12982] ? local_lock_release+0x99/0x140 [ 182.521994][T12982] ? vhost_task_create+0x1d2/0x2e0 [ 182.522005][T12982] ? rcu_read_unlock+0x17/0x60 [ 182.522020][T12982] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 182.522042][T12982] ? vhost_task_create+0x1d2/0x2e0 [ 182.522052][T12982] __vmalloc_node_noprof+0xad/0xf0 [ 182.522068][T12982] ? vhost_task_create+0x1d2/0x2e0 [ 182.522080][T12982] copy_process+0x2c70/0x7690 [ 182.522106][T12982] ? __pfx_copy_process+0x10/0x10 [ 182.522124][T12982] ? lockdep_init_map_type+0x5c/0x280 [ 182.522136][T12982] ? lockdep_init_map_type+0x5c/0x280 [ 182.522146][T12982] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 182.522162][T12982] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 182.522180][T12982] vhost_task_create+0x1d2/0x2e0 [ 182.522191][T12982] ? __pfx_vhost_task_create+0x10/0x10 [ 182.522206][T12982] ? __pfx_vhost_task_fn+0x10/0x10 [ 182.522223][T12982] kvm_mmu_post_init_vm+0x1b7/0x380 [ 182.522238][T12982] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 182.522260][T12982] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 182.522289][T12982] kvm_vcpu_ioctl+0x5eb/0x1690 [ 182.522317][T12982] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 182.522341][T12982] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 182.522362][T12982] ? do_vfs_ioctl+0x128/0x14f0 [ 182.522381][T12982] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 182.522398][T12982] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 182.522420][T12982] ? hook_file_ioctl_common+0x145/0x410 [ 182.522435][T12982] ? selinux_file_ioctl+0x180/0x270 [ 182.522450][T12982] ? selinux_file_ioctl+0xb4/0x270 [ 182.522467][T12982] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 182.522482][T12982] __x64_sys_ioctl+0x18e/0x210 [ 182.522500][T12982] do_syscall_64+0xcd/0x4e0 [ 182.522516][T12982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.522527][T12982] RIP: 0033:0x7fe1d278ec29 [ 182.522536][T12982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.522547][T12982] RSP: 002b:00007fe1d35b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.522558][T12982] RAX: ffffffffffffffda RBX: 00007fe1d29d5fa0 RCX: 00007fe1d278ec29 [ 182.522564][T12982] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 182.522570][T12982] RBP: 00007fe1d35b4090 R08: 0000000000000000 R09: 0000000000000000 [ 182.522577][T12982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.522583][T12982] R13: 00007fe1d29d6038 R14: 00007fe1d29d5fa0 R15: 00007ffebe18d488 [ 182.522596][T12982] [ 182.522816][T12982] syz.2.1908: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 182.641331][T12982] CPU: 1 UID: 0 PID: 12982 Comm: syz.2.1908 Not tainted syzkaller #0 PREEMPT(full) [ 182.641352][T12982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.641367][T12982] Call Trace: [ 182.641373][T12982] [ 182.641380][T12982] dump_stack_lvl+0x16c/0x1f0 [ 182.641408][T12982] warn_alloc+0x248/0x3a0 [ 182.641430][T12982] ? __pfx_warn_alloc+0x10/0x10 [ 182.641449][T12982] ? kfree+0x2b4/0x4d0 [ 182.641480][T12982] ? __get_vm_area_node+0x208/0x330 [ 182.641510][T12982] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 182.641528][T12982] ? local_lock_release+0x99/0x140 [ 182.641545][T12982] ? vhost_task_create+0x1d2/0x2e0 [ 182.641557][T12982] ? rcu_read_unlock+0x17/0x60 [ 182.641572][T12982] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 182.641593][T12982] ? vhost_task_create+0x1d2/0x2e0 [ 182.641604][T12982] __vmalloc_node_noprof+0xad/0xf0 [ 182.641619][T12982] ? vhost_task_create+0x1d2/0x2e0 [ 182.641632][T12982] copy_process+0x2c70/0x7690 [ 182.641653][T12982] ? __pfx_copy_process+0x10/0x10 [ 182.641671][T12982] ? lockdep_init_map_type+0x5c/0x280 [ 182.641683][T12982] ? lockdep_init_map_type+0x5c/0x280 [ 182.641693][T12982] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 182.641709][T12982] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 182.641726][T12982] vhost_task_create+0x1d2/0x2e0 [ 182.641737][T12982] ? __pfx_vhost_task_create+0x10/0x10 [ 182.641752][T12982] ? __pfx_vhost_task_fn+0x10/0x10 [ 182.641770][T12982] kvm_mmu_post_init_vm+0x1b7/0x380 [ 182.641784][T12982] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 182.641800][T12982] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 182.641818][T12982] kvm_vcpu_ioctl+0x5eb/0x1690 [ 182.641834][T12982] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 182.641848][T12982] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 182.641862][T12982] ? do_vfs_ioctl+0x128/0x14f0 [ 182.641891][T12982] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 182.641911][T12982] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 182.641934][T12982] ? hook_file_ioctl_common+0x145/0x410 [ 182.641949][T12982] ? selinux_file_ioctl+0x180/0x270 [ 182.641964][T12982] ? selinux_file_ioctl+0xb4/0x270 [ 182.641981][T12982] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 182.641996][T12982] __x64_sys_ioctl+0x18e/0x210 [ 182.642014][T12982] do_syscall_64+0xcd/0x4e0 [ 182.642030][T12982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.642041][T12982] RIP: 0033:0x7fe1d278ec29 [ 182.642050][T12982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.642060][T12982] RSP: 002b:00007fe1d35b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.642071][T12982] RAX: ffffffffffffffda RBX: 00007fe1d29d5fa0 RCX: 00007fe1d278ec29 [ 182.642078][T12982] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 182.642084][T12982] RBP: 00007fe1d35b4090 R08: 0000000000000000 R09: 0000000000000000 [ 182.642090][T12982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.642096][T12982] R13: 00007fe1d29d6038 R14: 00007fe1d29d5fa0 R15: 00007ffebe18d488 [ 182.642112][T12982] [ 182.642129][T12982] Mem-Info: [ 182.763493][T12982] active_anon:30304 inactive_anon:0 isolated_anon:0 [ 182.763493][T12982] active_file:18122 inactive_file:41225 isolated_file:0 [ 182.763493][T12982] unevictable:2792 dirty:1556 writeback:0 [ 182.763493][T12982] slab_reclaimable:10130 slab_unreclaimable:84678 [ 182.763493][T12982] mapped:26472 shmem:19825 pagetables:1865 [ 182.763493][T12982] sec_pagetables:320 bounce:0 [ 182.763493][T12982] kernel_misc_reclaimable:0 [ 182.763493][T12982] free:408750 free_pcp:17462 free_cma:0 [ 182.781430][T12982] Node 0 active_anon:119968kB inactive_anon:0kB active_file:69836kB inactive_file:164696kB unevictable:7632kB isolated(anon):0kB isolated(file):0kB mapped:105288kB dirty:5672kB writeback:0kB shmem:74548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16592kB pagetables:7180kB sec_pagetables:1280kB all_unreclaimable? yes Balloon:0kB [ 182.794181][T12982] Node 1 active_anon:1248kB inactive_anon:0kB active_file:2652kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:600kB dirty:552kB writeback:0kB shmem:4752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 182.805967][T12982] Node 0 DMA free:7468kB boost:2048kB min:2388kB low:2472kB high:2556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4436kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:180kB local_pcp:36kB free_cma:0kB [ 182.817839][T12982] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 182.820192][T12982] Node 0 DMA32 free:74596kB boost:36864kB min:64380kB low:71256kB high:78132kB reserved_highatomic:2048KB free_highatomic:244KB active_anon:115440kB inactive_anon:0kB active_file:69832kB inactive_file:164696kB unevictable:7632kB writepending:5668kB present:2080628kB managed:1263420kB mlocked:0kB bounce:0kB free_pcp:25404kB local_pcp:2248kB free_cma:0kB [ 182.834433][T12982] lowmem_reserve[]: 0 0 0 0 0 [ 182.836393][T12982] Node 1 Normal free:1553720kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1248kB inactive_anon:0kB active_file:2652kB inactive_file:204kB unevictable:3536kB writepending:552kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:43280kB local_pcp:6940kB free_cma:0kB [ 182.849051][T12982] lowmem_reserve[]: 0 0 0 0 0 [ 182.851112][T12982] Node 0 DMA: 9*4kB (UME) 21*8kB (UM) 10*16kB (UME) 6*32kB (UME) 4*64kB (UME) 4*128kB (U) 8*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 0*2048kB 0*4096kB = 7468kB [ 182.857660][T12982] Node 0 DMA32: 73*4kB (UH) 190*8kB (UME) 15*16kB (UMEH) 133*32kB (UMEH) 100*64kB (UMEH) 51*128kB (UME) 14*256kB (UME) 45*512kB (ME) 16*1024kB (UM) 4*2048kB (UM) 1*4096kB (M) = 74532kB [ 182.865143][T12982] Node 1 Normal: 32*4kB (UME) 29*8kB (UME) 35*16kB (UME) 51*32kB (UME) 33*64kB (UME) 36*128kB (UME) 15*256kB (UME) 3*512kB (ME) 9*1024kB (UME) 5*2048kB (UME) 371*4096kB (UME) = 1553720kB [ 182.872822][T12982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.876574][T12982] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 182.880209][T12982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.884067][T12982] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 182.887890][T12982] 79168 total pagecache pages [ 182.889804][T12982] 0 pages in swap cache [ 182.891529][T12982] Free swap = 124996kB [ 182.893223][T12982] Total swap = 124996kB [ 182.895059][T12982] 1048443 pages RAM [ 182.896647][T12982] 0 pages HighMem/MovableOnly [ 182.898573][T12982] 283275 pages reserved [ 182.900307][T12982] 0 pages cma reserved [ 183.171233][T12992] ucma_write: process 300 (syz.9.1911) changed security contexts after opening file descriptor, this is not allowed. [ 183.183510][T12993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56318 sclass=netlink_route_socket pid=12993 comm=syz.2.1912 [ 183.297613][ T40] audit: type=1400 audit(183.205:878): avc: denied { setattr } for pid=13003 comm="syz.6.1916" name="pcmC0D0c" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 183.362052][T13002] netlink: 'syz.9.1915': attribute type 10 has an invalid length. [ 183.370157][T13002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.374046][T13002] team0: Port device bond0 added [ 183.374854][ T7799] overlayfs: failed lookup in lower (newroot/327, name='bus', err=-40): overlapping layers [ 183.380442][ T7799] overlayfs: failed lookup in lower (newroot/327, name='bus', err=-40): overlapping layers [ 183.734455][ T5978] Bluetooth: hci3: command 0x0406 tx timeout [ 183.807022][ T6843] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.816142][ T5978] Bluetooth: hci1: command 0x040f tx timeout [ 183.916000][ T6843] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.040631][ T6843] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.131201][ T6843] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.135986][T13016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.216718][ T40] audit: type=1400 audit(184.125:879): avc: denied { shutdown } for pid=13021 comm="syz.2.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 184.240034][ T40] audit: type=1400 audit(184.125:880): avc: denied { map } for pid=13021 comm="syz.2.1925" path="socket:[56348]" dev="sockfs" ino=56348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 184.319886][ T5983] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.327501][ T5983] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.333463][ T5983] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.340031][ T5983] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.344682][ T5983] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.506071][ T40] audit: type=1400 audit(184.415:881): avc: denied { ioctl } for pid=13029 comm="syz.2.1927" path="socket:[56360]" dev="sockfs" ino=56360 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 184.528537][T13020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=13020 comm=syz.9.1922 [ 184.607696][T13039] /dev/sg0: Can't lookup blockdev [ 184.658031][ T40] audit: type=1326 audit(184.565:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13035 comm="syz.2.1929" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1d278ec29 code=0x0 [ 184.972444][ T6843] team0: Port device . removed [ 184.975619][ T6843] . (unregistering): Released all slaves [ 184.984215][ T6843] bond1 (unregistering): Released all slaves [ 185.074378][ T6843] bond2 (unregistering): Released all slaves [ 185.175044][ T6843] bond3 (unregistering): Released all slaves [ 185.181248][ T6843] bond0 (unregistering): Released all slaves [ 185.189822][ T6843] bond4 (unregistering): Released all slaves [ 185.222760][T13026] lo speed is unknown, defaulting to 1000 [ 185.246735][T13051] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1931'. [ 185.277089][ T6843] tipc: Disabling bearer [ 185.288157][ T6843] tipc: Left network mode [ 185.376781][T13057] FAULT_INJECTION: forcing a failure. [ 185.376781][T13057] name failslab, interval 1, probability 0, space 0, times 0 [ 185.382127][T13057] CPU: 0 UID: 0 PID: 13057 Comm: syz.9.1932 Not tainted syzkaller #0 PREEMPT(full) [ 185.382150][T13057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.382162][T13057] Call Trace: [ 185.382170][T13057] [ 185.382178][T13057] dump_stack_lvl+0x16c/0x1f0 [ 185.382208][T13057] should_fail_ex+0x512/0x640 [ 185.382231][T13057] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 185.382255][T13057] should_failslab+0xc2/0x120 [ 185.382278][T13057] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 185.382296][T13057] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 185.382331][T13057] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 185.382356][T13057] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 185.382385][T13057] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 185.382420][T13057] mmu_topup_memory_caches+0x25/0x170 [ 185.382442][T13057] kvm_mmu_load+0xd6/0x23c0 [ 185.382460][T13057] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 185.382479][T13057] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 185.382498][T13057] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 185.382522][T13057] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 185.382543][T13057] ? __pfx_kvm_mmu_load+0x10/0x10 [ 185.382561][T13057] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 185.382589][T13057] ? kvm_check_and_inject_events+0x71c/0x1310 [ 185.382639][T13057] vcpu_run+0x35a3/0x55a0 [ 185.382664][T13057] ? __lock_acquire+0xb97/0x1ce0 [ 185.382697][T13057] ? __pfx_vcpu_run+0x10/0x10 [ 185.382724][T13057] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 185.382747][T13057] ? __local_bh_enable_ip+0xa4/0x120 [ 185.382775][T13057] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 185.382798][T13057] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 185.382831][T13057] kvm_vcpu_ioctl+0x5eb/0x1690 [ 185.382856][T13057] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 185.382879][T13057] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 185.382915][T13057] ? do_vfs_ioctl+0x128/0x14f0 [ 185.382943][T13057] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 185.382968][T13057] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 185.383027][T13057] ? hook_file_ioctl_common+0x145/0x410 [ 185.383052][T13057] ? selinux_file_ioctl+0x180/0x270 [ 185.383076][T13057] ? selinux_file_ioctl+0xb4/0x270 [ 185.383101][T13057] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 185.383126][T13057] __x64_sys_ioctl+0x18e/0x210 [ 185.383154][T13057] do_syscall_64+0xcd/0x4e0 [ 185.383180][T13057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.383198][T13057] RIP: 0033:0x7fb251b8ec29 [ 185.383212][T13057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.383229][T13057] RSP: 002b:00007fb2529d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.383255][T13057] RAX: ffffffffffffffda RBX: 00007fb251dd5fa0 RCX: 00007fb251b8ec29 [ 185.383267][T13057] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 185.383279][T13057] RBP: 00007fb2529d4090 R08: 0000000000000000 R09: 0000000000000000 [ 185.383289][T13057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.383305][T13057] R13: 00007fb251dd6038 R14: 00007fb251dd5fa0 R15: 00007fffc1200378 [ 185.383329][T13057] [ 185.467158][T13064] ubi31: detaching mtd0 [ 185.531913][T13064] ubi31: mtd0 is detached [ 185.552744][T13026] chnl_net:caif_netlink_parms(): no params data found [ 185.704199][T13077] /dev/sg0: Can't lookup blockdev [ 185.722826][T13026] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.727271][T13026] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.730632][T13026] bridge_slave_0: entered allmulticast mode [ 185.735527][T13026] bridge_slave_0: entered promiscuous mode [ 185.746856][T13026] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.759695][T13026] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.762688][T13026] bridge_slave_1: entered allmulticast mode [ 185.769132][T13026] bridge_slave_1: entered promiscuous mode [ 185.825950][ T5983] Bluetooth: hci3: command 0x0406 tx timeout [ 185.829777][T13026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.843111][ T6843] hsr_slave_0: left promiscuous mode [ 185.848105][ T6843] hsr_slave_1: left promiscuous mode [ 185.848982][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 185.877839][ T6843] veth1_macvtap: left allmulticast mode [ 185.879589][ T6843] veth1_macvtap: left promiscuous mode [ 185.881176][ T6843] veth0_macvtap: left promiscuous mode [ 185.883230][ T6843] veth1_vlan: left promiscuous mode [ 185.885097][ T6843] veth0_vlan: left promiscuous mode [ 185.894751][ T5983] Bluetooth: hci1: command 0x040f tx timeout [ 185.897439][ T40] audit: type=1400 audit(185.805:883): avc: denied { append } for pid=13092 comm="syz.9.1941" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 185.900475][T13093] program syz.9.1941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.903899][ T40] audit: type=1400 audit(185.805:884): avc: denied { open } for pid=13092 comm="syz.9.1941" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 186.008529][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 186.012591][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 186.016151][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 186.020733][ T9] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.026197][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.030777][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 186.036570][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 186.039969][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 186.045145][ T9] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.049896][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.054609][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 186.060605][ T9] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 186.063662][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 186.068035][ T9] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.072710][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.077526][ T9] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 186.085498][ T9] usb 7-1: string descriptor 0 read error: -22 [ 186.088350][ T9] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 186.092216][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.107782][ T9] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 186.309765][ T9] usb 7-1: USB disconnect, device number 22 [ 186.378614][ T5983] Bluetooth: hci2: command tx timeout [ 186.389043][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 186.879386][T13101] netlink: 'syz.2.1943': attribute type 17 has an invalid length. [ 186.881834][T13101] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1943'. [ 187.177285][T13026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.181054][T13091] .: renamed from bond0 (while UP) [ 187.188396][T13093] ip6gretap1: entered promiscuous mode [ 187.190238][T13093] ip6gretap1: entered allmulticast mode [ 187.196237][T13101] macvtap0: entered allmulticast mode [ 187.198264][T13101] veth0_macvtap: entered allmulticast mode [ 187.200945][T13101] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 187.219078][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1944'. [ 187.233524][ T5983] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 187.280181][T13026] team0: Port device team_slave_0 added [ 187.285271][T13026] team0: Port device team_slave_1 added [ 187.328687][T13026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.331120][T13026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.341118][T13026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.348085][T13026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.351037][T13026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.361720][T13026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.416218][T13124] binder: 13123:13124 ioctl c0306201 2000000003c0 returned -14 [ 187.420173][T13124] binder: 13123:13124 ioctl c0306201 2000000005c0 returned -14 [ 187.423600][T13126] tipc: Failed to remove unknown binding: 66,1,1/2886997039:3234074725/3234074727 [ 187.429275][T13126] tipc: Failed to remove unknown binding: 66,1,1/2886997039:3234074725/3234074727 [ 187.461077][ T40] audit: type=1400 audit(187.365:885): avc: denied { sys_admin } for pid=13125 comm="syz.2.1950" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 187.485838][T13026] hsr_slave_0: entered promiscuous mode [ 187.491275][T13026] hsr_slave_1: entered promiscuous mode [ 187.493337][T13026] debugfs: 'hsr0' already exists in 'hsr' [ 187.496489][T13026] Cannot create hsr debugfs directory [ 187.720068][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1953'. [ 187.783104][T13145] trusted_key: encrypted_key: insufficient parameters specified [ 187.791677][T13149] overlayfs: missing 'workdir' [ 187.974615][ T5983] Bluetooth: hci1: command 0x040f tx timeout [ 188.112144][T13178] No source specified [ 188.169408][T13182] fuse: Bad value for 'fd' [ 188.200749][T13185] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 188.204448][T13185] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 188.250062][T13026] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 188.261127][T13026] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 188.269823][T13026] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 188.275506][T13026] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.281061][ T40] audit: type=1400 audit(188.185:886): avc: denied { sqpoll } for pid=13192 comm="syz.2.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 188.339329][T13026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.349686][T13026] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.357196][ T6852] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.359236][ T6852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.365871][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.367912][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.459120][ T5983] Bluetooth: hci2: command tx timeout [ 188.518142][T13026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.548114][ T40] audit: type=1400 audit(188.455:887): avc: denied { associate } for pid=13228 comm="syz.2.1972" name="cgroup.controllers" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 188.566796][T13230] : renamed from bridge_slave_0 (while UP) [ 188.578358][ T40] audit: type=1400 audit(188.485:888): avc: denied { unmount } for pid=13228 comm="syz.2.1972" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 188.726436][T13026] veth0_vlan: entered promiscuous mode [ 188.732719][T13026] veth1_vlan: entered promiscuous mode [ 188.751812][T13026] veth0_macvtap: entered promiscuous mode [ 188.759557][T13026] veth1_macvtap: entered promiscuous mode [ 188.779163][T13026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.786134][T13026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.796028][ T6846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.799820][ T6846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.804115][ T6846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.809343][ T6846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.890480][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.893809][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.930487][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.933077][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.992999][T13270] netlink: 'syz.2.1976': attribute type 27 has an invalid length. [ 189.182404][T13270] vxcan1: left promiscuous mode [ 189.279255][T13270] veth0_macvtap: left allmulticast mode [ 189.281401][T13270] macvtap0: left allmulticast mode [ 189.285979][T13270] veth1_macvtap: left allmulticast mode [ 189.288415][T13270] macsec0: left promiscuous mode [ 189.290650][T13270] macsec0: left allmulticast mode [ 189.303147][T13270] ip6erspan0: left promiscuous mode [ 189.307529][T13270] xfrm1: left allmulticast mode [ 189.314775][T13270] bond3: left promiscuous mode [ 189.321365][T13270] erspan2: left promiscuous mode [ 189.328320][T13270] gretap1: left promiscuous mode [ 189.332481][T13270] bond8: left allmulticast mode [ 189.339266][T13270] bridge3: left promiscuous mode [ 189.340920][T13270] bridge3: left allmulticast mode [ 189.347735][ T6843] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.351258][ T6843] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.355162][ T6843] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.358772][ T6843] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.364839][ T6843] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.368346][ T6843] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.385185][ T6843] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.388670][ T6843] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.613967][T13323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1985'. [ 189.625091][ T40] audit: type=1400 audit(189.525:889): avc: denied { ioctl } for pid=13321 comm="syz.2.1985" path="socket:[58542]" dev="sockfs" ino=58542 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 189.651625][T13326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1987'. [ 189.704876][T13341] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1990'. [ 189.708139][T13341] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1990'. [ 189.759975][T13356] overlayfs: workdir and upperdir must be separate subtrees [ 189.760775][T13350] tmpfs: Invalid uid '0x00000000ffffffff' [ 189.812811][T13364] netlink: 'syz.9.1996': attribute type 1 has an invalid length. [ 189.816997][T13364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.867496][T13371] netlink: 'syz.2.1998': attribute type 13 has an invalid length. [ 189.902017][T13375] ipvlan2: entered promiscuous mode [ 189.904732][T13375] bridge0: port 3(ipvlan2) entered blocking state [ 189.906802][T13375] bridge0: port 3(ipvlan2) entered disabled state [ 189.908905][T13375] ipvlan2: entered allmulticast mode [ 189.910487][T13375] bridge0: entered allmulticast mode [ 189.913541][T13375] ipvlan2: left allmulticast mode [ 189.916041][T13375] bridge0: left allmulticast mode [ 190.038585][T13386] ip6erspan0: entered promiscuous mode [ 190.290262][T13406] vlan1: entered promiscuous mode [ 190.292535][T13406] vlan1: entered allmulticast mode [ 190.294895][T13406] veth0_vlan: entered allmulticast mode [ 190.446722][ T40] audit: type=1400 audit(190.355:890): avc: denied { setopt } for pid=13416 comm="syz.4.2005" lport=36976 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 190.452588][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2005'. [ 190.506189][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2007'. [ 190.509850][ T40] audit: type=1400 audit(190.415:891): avc: denied { name_bind } for pid=13421 comm="syz.0.2007" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 190.517050][T13422] SELinux: policydb string length 134217736 does not match expected length 8 [ 190.520391][T13422] SELinux: failed to load policy [ 190.544409][ T5978] Bluetooth: hci2: command tx timeout [ 190.578591][ T40] audit: type=1400 audit(190.485:892): avc: denied { append } for pid=13429 comm="syz.0.2010" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 190.689735][ T5978] Bluetooth: hci3: unexpected event for opcode 0x041b [ 190.696179][ T40] audit: type=1326 audit(190.605:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13439 comm="syz.9.2013" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb251b8ec29 code=0x0 [ 190.698614][T13442] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13442 comm=syz.2.2014 [ 190.770900][T13451] blkio.reset_stats is deprecated [ 190.773631][T13451] netlink: 'syz.0.2016': attribute type 11 has an invalid length. [ 190.777483][T13451] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2016'. [ 190.799389][T13453] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 190.813909][T13454] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 190.873402][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2020'. [ 190.877444][T13464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2020'. [ 190.881069][T13464] netlink: 'syz.0.2020': attribute type 12 has an invalid length. [ 191.061619][ T40] audit: type=1400 audit(190.965:894): avc: denied { connect } for pid=13477 comm="syz.2.2023" lport=45687 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 191.230761][ T5972] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.237120][ T5972] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.241059][ T5972] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.246997][ T5972] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.250660][ T5972] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.280929][T13480] lo speed is unknown, defaulting to 1000 [ 191.334409][ T5978] Bluetooth: hci1: command 0x040f tx timeout [ 191.456849][T13480] chnl_net:caif_netlink_parms(): no params data found [ 191.482019][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2025'. [ 191.501813][T13486] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 191.618185][T13480] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.623942][T13480] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.628830][T13480] bridge_slave_0: entered allmulticast mode [ 191.632784][T13480] bridge_slave_0: entered promiscuous mode [ 191.638427][T13480] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.641716][T13480] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.648093][T13480] bridge_slave_1: entered allmulticast mode [ 191.652431][T13480] bridge_slave_1: entered promiscuous mode [ 191.706761][T13505] input: syz0 as /devices/virtual/input/input21 [ 191.753287][T13480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.762896][T13507] netlink: 'syz.4.2030': attribute type 1 has an invalid length. [ 191.766519][T13507] netlink: 'syz.4.2030': attribute type 3 has an invalid length. [ 191.768660][T13480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.769864][T13507] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2030'. [ 191.777717][T13507] NCSI netlink: No device for ifindex 0 [ 191.840721][T13507] sd 0:0:0:0: PR command failed: 1026 [ 191.843122][T13507] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 191.850581][T13507] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 191.876407][T13514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=13514 comm=syz.0.2031 [ 191.969638][T13480] team0: Port device team_slave_0 added [ 191.972892][T13480] team0: Port device team_slave_1 added [ 192.006191][T13526] binder: 13524:13526 unknown command 0 [ 192.010217][T13526] binder: 13524:13526 ioctl c0306201 200000000080 returned -22 [ 192.018080][T13526] overlayfs: missing 'lowerdir' [ 192.022996][T13526] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 192.029660][T13526] overlayfs: failed to set xattr on upper [ 192.031705][T13526] overlayfs: ...falling back to redirect_dir=nofollow. [ 192.034103][T13526] overlayfs: ...falling back to index=off. [ 192.036918][T13526] overlayfs: ...falling back to uuid=null. [ 192.047403][T13480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.050252][T13480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.059645][T13480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.065217][T13480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.067492][T13480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.078132][T13480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.093214][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'. [ 192.098510][T13528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2037'. [ 192.114415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 192.120948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 192.140888][T13528] geneve2: entered promiscuous mode [ 192.143296][T13528] geneve2: entered allmulticast mode [ 192.149741][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2037'. [ 192.264366][ T6034] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 192.267373][T13528] hsr_slave_1 (unregistering): left promiscuous mode [ 192.275399][T13480] hsr_slave_0: entered promiscuous mode [ 192.277668][T13480] hsr_slave_1: entered promiscuous mode [ 192.279891][T13480] debugfs: 'hsr0' already exists in 'hsr' [ 192.282106][T13480] Cannot create hsr debugfs directory [ 192.371855][T13532] netlink: 'syz.0.2038': attribute type 21 has an invalid length. [ 192.429905][ T6034] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 192.433419][ T6034] usb 14-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 192.439035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 192.443740][ T6034] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 192.451567][ T6034] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 192.455317][ T6034] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 192.461021][ T6034] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 192.461036][ T6034] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 192.461047][ T6034] usb 14-1: Product: syz [ 192.461055][ T6034] usb 14-1: Manufacturer: syz [ 192.478237][ T6034] cdc_wdm 14-1:1.0: skipping garbage [ 192.480541][ T6034] cdc_wdm 14-1:1.0: skipping garbage [ 192.482334][ T6034] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 192.487919][ T6034] cdc_wdm 14-1:1.0: Unknown control protocol [ 192.543743][T13538] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 192.614901][ T5983] Bluetooth: hci2: command tx timeout [ 192.668311][ T6837] bond5 (unregistering): (slave gretap1): Releasing active interface [ 192.678916][ T6034] usb 14-1: USB disconnect, device number 4 [ 192.730692][ T6837] bond9 (unregistering): (slave geneve2): Releasing active interface [ 192.891535][T13554] ALSA: seq fatal error: cannot create timer (-16) [ 192.948399][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 192.948409][ T40] audit: type=1400 audit(192.855:896): avc: denied { prog_load } for pid=13551 comm="syz.4.2044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 193.087666][ T6837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.092837][ T6837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.099144][ T6837] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 193.103550][ T6837] bond0 (unregistering): Released all slaves [ 193.114757][ T6837] bond1 (unregistering): Released all slaves [ 193.126183][ T6837] bond2 (unregistering): Released all slaves [ 193.202283][T13560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.227000][ T6837] bond3 (unregistering): Released all slaves [ 193.237020][ T6837] bond4 (unregistering): Released all slaves [ 193.249946][ T6837] bond5 (unregistering): Released all slaves [ 193.326354][ T40] audit: type=1400 audit(193.235:897): avc: denied { read } for pid=13561 comm="syz.9.2046" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 193.328963][T13563] program syz.9.2046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.338911][ T40] audit: type=1400 audit(193.235:898): avc: denied { map_create } for pid=13561 comm="syz.9.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 193.345602][ T5978] Bluetooth: hci4: command tx timeout [ 193.358251][ T6837] bond6 (unregistering): Released all slaves [ 193.366141][ T6837] bond7 (unregistering): Released all slaves [ 193.373068][ T6837] bond8 (unregistering): Released all slaves [ 193.380261][ T6837] bond9 (unregistering): Released all slaves [ 193.388013][ T6837] bond10 (unregistering): Released all slaves [ 193.423664][T13556] block nbd4: shutting down sockets [ 193.500393][ T6837] tipc: Disabling bearer [ 193.515363][ T6837] tipc: Left network mode [ 193.567737][ T6837] IPVS: stopping backup sync thread 6190 ... [ 193.810821][ T6837] batadv_slave_0: left promiscuous mode [ 193.822466][ T6837] hsr_slave_0: left promiscuous mode [ 194.069359][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.072005][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.441605][ T6837] team0 (unregistering): Port device team_slave_1 removed [ 195.120427][T13480] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 195.127514][T13480] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.133697][T13480] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 195.139327][T13480] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.164687][T13611] netlink: 'syz.4.2054': attribute type 29 has an invalid length. [ 195.169841][ T40] audit: type=1400 audit(195.075:899): avc: denied { read } for pid=13610 comm="syz.4.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 195.181308][T13611] netlink: 'syz.4.2054': attribute type 29 has an invalid length. [ 195.184120][T13611] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8215 sclass=netlink_xfrm_socket pid=13611 comm=syz.4.2054 [ 195.203383][T13480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.217748][T13480] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.226653][ T6846] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.229105][ T6846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.243050][ T6831] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.245505][ T6831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.401664][T13480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.414360][ T5978] Bluetooth: hci4: command 0x041b tx timeout [ 195.437854][T13480] veth0_vlan: entered promiscuous mode [ 195.452340][T13480] veth1_vlan: entered promiscuous mode [ 195.487172][T13480] veth0_macvtap: entered promiscuous mode [ 195.490690][T13480] veth1_macvtap: entered promiscuous mode [ 195.499346][T13480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.503258][T13480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.516310][ T6846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.520690][ T6846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.520714][ T6846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.523956][ T6846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.543463][ T5983] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.553235][ T5983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.561381][ T5983] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.567379][ T5983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.571666][ T5983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.601033][ T6831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.605115][ T6831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.626232][T13630] lo speed is unknown, defaulting to 1000 [ 195.635203][ T6843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.639433][ T6843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.749297][T13630] chnl_net:caif_netlink_parms(): no params data found [ 195.869134][ T40] audit: type=1400 audit(195.775:900): avc: denied { prog_run } for pid=13654 comm="syz.2.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 195.880854][T13630] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.883072][T13630] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.885602][T13630] bridge_slave_0: entered allmulticast mode [ 195.889137][T13630] bridge_slave_0: entered promiscuous mode [ 195.892758][T13630] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.895551][T13630] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.897675][T13630] bridge_slave_1: entered allmulticast mode [ 195.901052][T13630] bridge_slave_1: entered promiscuous mode [ 195.963956][T13630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.966972][ T40] audit: type=1400 audit(195.875:901): avc: denied { map_read map_write } for pid=13667 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 195.972682][T13630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.979008][ T40] audit: type=1400 audit(195.885:902): avc: denied { create } for pid=13667 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 195.987643][ T40] audit: type=1400 audit(195.885:903): avc: denied { write } for pid=13667 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 195.995046][ T40] audit: type=1400 audit(195.885:904): avc: denied { connect } for pid=13667 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 196.002424][ T40] audit: type=1400 audit(195.885:905): avc: denied { setopt } for pid=13667 comm="syz.4.2066" laddr=fe80::b lport=46200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 196.012216][T13671] __nla_validate_parse: 2 callbacks suppressed [ 196.012230][T13671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2067'. [ 196.040782][T13630] team0: Port device team_slave_0 added [ 196.046024][T13630] team0: Port device team_slave_1 added [ 196.102571][T13630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.107725][T13630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.118194][T13630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.127230][T13630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.128130][T13679] overlayfs: missing 'lowerdir' [ 196.129595][T13630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.140101][T13630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.148026][T13679] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 196.150464][T13679] syzkaller0: owner set to 0 [ 196.208509][T13630] hsr_slave_0: entered promiscuous mode [ 196.211776][T13630] hsr_slave_1: entered promiscuous mode [ 196.408812][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'. [ 196.512907][ T10] IPVS: starting estimator thread 0... [ 196.538696][T13712] netlink: 'syz.2.2074': attribute type 15 has an invalid length. [ 196.542077][T13712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2074'. [ 196.576054][T13716] openvswitch: netlink: Invalid VLAN frame [ 196.617380][T13709] IPVS: using max 41 ests per chain, 98400 per kthread [ 196.793481][T13630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.798969][T13630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 196.803567][T13630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 196.809937][T13630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 196.862891][T13630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.878991][T13630] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.885769][ T6831] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.888756][ T6831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.897968][ T6850] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.901046][ T6850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.054877][T13630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.083303][T13630] veth0_vlan: entered promiscuous mode [ 197.089540][T13630] veth1_vlan: entered promiscuous mode [ 197.121647][T13630] veth0_macvtap: entered promiscuous mode [ 197.127349][T13630] veth1_macvtap: entered promiscuous mode [ 197.139667][T13630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.148314][T13630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.155633][ T6838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.162581][ T6838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.166794][ T6838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.176849][ T6838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.213114][ T6850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.220601][ T6850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.250543][ T6831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.252961][ T6831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.374796][T13765] No source specified [ 197.508289][ T5983] Bluetooth: hci4: command 0x041b tx timeout [ 197.626386][T13799] [U] v3f"S/4:XTzWtlW= [ 197.654561][ T5983] Bluetooth: hci0: command tx timeout [ 197.715138][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2092'. [ 197.720992][ T5983] Bluetooth: hci4: unexpected event for opcode 0x0c7d [ 197.721084][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2092'. [ 197.742020][T13807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=13807 comm=syz.1.2092 [ 197.809443][T13819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2094'. [ 197.823611][T13819] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.887546][T13824] delete_channel: no stack [ 198.052846][ T5983] Bluetooth: hci0: connection err: -111 [ 198.054650][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 198.054665][ T40] audit: type=1400 audit(197.955:916): avc: denied { append } for pid=13842 comm="syz.4.2099" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 198.067367][ T40] audit: type=1400 audit(197.965:917): avc: denied { bind } for pid=13842 comm="syz.4.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 198.116097][T13846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2100'. [ 198.120096][T13846] syz_tun: entered promiscuous mode [ 198.123795][T13846] syz_tun: entered allmulticast mode [ 198.190609][ T5983] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 198.190663][ T5983] Bluetooth: hci2: Dropping invalid advertising data [ 198.198771][ T5983] Bluetooth: hci2: Malformed LE Event: 0x02 [ 198.268313][T13860] IPVS: persistence engine module ip_vs_pe_s not found [ 198.293930][ T40] audit: type=1400 audit(198.195:918): avc: denied { ioctl } for pid=13854 comm="syz.4.2103" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 198.360521][ T40] audit: type=1400 audit(198.265:919): avc: denied { read } for pid=13871 comm="syz.1.2106" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 198.364893][ T5983] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 198.371105][ T40] audit: type=1400 audit(198.265:920): avc: denied { open } for pid=13871 comm="syz.1.2106" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 198.371133][ T40] audit: type=1400 audit(198.265:921): avc: denied { ioctl } for pid=13871 comm="syz.1.2106" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 198.389590][ T5983] CPU: 2 UID: 0 PID: 5983 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 198.389617][ T5983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 198.389633][ T5983] Workqueue: hci0 hci_rx_work [ 198.389664][ T5983] Call Trace: [ 198.389671][ T5983] [ 198.389679][ T5983] dump_stack_lvl+0x16c/0x1f0 [ 198.389711][ T5983] sysfs_warn_dup+0x7f/0xa0 [ 198.389758][ T5983] sysfs_create_dir_ns+0x24b/0x2b0 [ 198.389785][ T5983] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 198.389809][ T5983] ? find_held_lock+0x2b/0x80 [ 198.389836][ T5983] ? do_raw_spin_unlock+0x172/0x230 [ 198.389860][ T5983] kobject_add_internal+0x2c4/0x9b0 [ 198.389889][ T5983] kobject_add+0x16e/0x240 [ 198.389915][ T5983] ? __pfx_kobject_add+0x10/0x10 [ 198.389942][ T5983] ? do_raw_spin_unlock+0x172/0x230 [ 198.389964][ T5983] ? kobject_put+0xab/0x5a0 [ 198.389996][ T5983] device_add+0x288/0x1aa0 [ 198.390023][ T5983] ? __pfx_dev_set_name+0x10/0x10 [ 198.390042][ T5983] ? __pfx_device_add+0x10/0x10 [ 198.390067][ T5983] ? mgmt_send_event_skb+0x2fb/0x460 [ 198.390095][ T5983] hci_conn_add_sysfs+0x17e/0x230 [ 198.390120][ T5983] le_conn_complete_evt+0x1075/0x1d70 [ 198.390147][ T5983] ? preempt_count_sub+0xb0/0x160 [ 198.390178][ T5983] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 198.390199][ T5983] ? hci_event_packet+0x459/0x11c0 [ 198.390226][ T5983] hci_le_conn_complete_evt+0x23c/0x370 [ 198.390252][ T5983] hci_le_meta_evt+0x357/0x5e0 [ 198.390273][ T5983] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 198.390295][ T5983] hci_event_packet+0x682/0x11c0 [ 198.390315][ T5983] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 198.390338][ T5983] ? __pfx_hci_event_packet+0x10/0x10 [ 198.390361][ T5983] ? kcov_remote_start+0x3c9/0x6d0 [ 198.390381][ T5983] ? lockdep_hardirqs_on+0x7c/0x110 [ 198.390424][ T5983] hci_rx_work+0x2c5/0x16b0 [ 198.390448][ T5983] ? rcu_is_watching+0x12/0xc0 [ 198.390502][ T5983] process_one_work+0x9cc/0x1b70 [ 198.390537][ T5983] ? __pfx_process_one_work+0x10/0x10 [ 198.390567][ T5983] ? assign_work+0x1a0/0x250 [ 198.390604][ T5983] worker_thread+0x6c8/0xf10 [ 198.390633][ T5983] ? __kthread_parkme+0x19e/0x250 [ 198.390662][ T5983] ? __pfx_worker_thread+0x10/0x10 [ 198.390684][ T5983] kthread+0x3c2/0x780 [ 198.390704][ T5983] ? __pfx_kthread+0x10/0x10 [ 198.390725][ T5983] ? rcu_is_watching+0x12/0xc0 [ 198.390746][ T5983] ? __pfx_kthread+0x10/0x10 [ 198.390767][ T5983] ret_from_fork+0x56a/0x730 [ 198.390784][ T5983] ? __pfx_kthread+0x10/0x10 [ 198.390802][ T5983] ret_from_fork_asm+0x1a/0x30 [ 198.390836][ T5983] [ 198.390935][ T5983] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 198.415805][T13874] /dev/sg0: Can't lookup blockdev [ 198.417454][ T5983] Bluetooth: hci0: failed to register connection device [ 198.648205][ T40] audit: type=1400 audit(198.555:922): avc: denied { create } for pid=13891 comm="syz.1.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 198.808154][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2113'. [ 199.058566][ T40] audit: type=1400 audit(198.965:923): avc: denied { read write } for pid=13900 comm="syz.4.2115" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 199.062023][T13901] input: syz1 as /devices/virtual/input/input22 [ 199.066549][ T40] audit: type=1400 audit(198.965:924): avc: denied { open } for pid=13900 comm="syz.4.2115" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 199.066577][ T40] audit: type=1400 audit(198.965:925): avc: denied { ioctl } for pid=13900 comm="syz.4.2115" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 199.105470][ T53] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 199.276431][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.280937][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.285385][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.287958][T13904] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2116'. [ 199.290989][ T53] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.297816][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.304094][ T53] usb 6-1: config 0 descriptor?? [ 199.333328][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2117'. [ 199.539704][T13914] fuse: Bad value for 'fd' [ 199.725639][T13898] netlink: 'syz.1.2114': attribute type 150 has an invalid length. [ 199.734485][ T5983] Bluetooth: hci0: command tx timeout [ 199.737110][ T53] usbhid 6-1:0.0: can't add hid device: -71 [ 199.739480][ T53] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 199.748777][ T53] usb 6-1: USB disconnect, device number 12 [ 199.797378][ T5983] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 199.798912][T13936] fuse: Bad value for 'fd' [ 199.800394][ T5983] CPU: 3 UID: 0 PID: 5983 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 199.800411][ T5983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 199.800420][ T5983] Workqueue: hci2 hci_rx_work [ 199.800439][ T5983] Call Trace: [ 199.800443][ T5983] [ 199.800448][ T5983] dump_stack_lvl+0x16c/0x1f0 [ 199.800466][ T5983] sysfs_warn_dup+0x7f/0xa0 [ 199.800482][ T5983] sysfs_create_dir_ns+0x24b/0x2b0 [ 199.800498][ T5983] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 199.800512][ T5983] ? find_held_lock+0x2b/0x80 [ 199.800530][ T5983] ? do_raw_spin_unlock+0x172/0x230 [ 199.800543][ T5983] kobject_add_internal+0x2c4/0x9b0 [ 199.800563][ T5983] kobject_add+0x16e/0x240 [ 199.800579][ T5983] ? __pfx_kobject_add+0x10/0x10 [ 199.800596][ T5983] ? do_raw_spin_unlock+0x172/0x230 [ 199.800608][ T5983] ? kobject_put+0xab/0x5a0 [ 199.800628][ T5983] device_add+0x288/0x1aa0 [ 199.800645][ T5983] ? __pfx_dev_set_name+0x10/0x10 [ 199.800655][ T5983] ? __pfx_device_add+0x10/0x10 [ 199.800672][ T5983] ? mgmt_send_event_skb+0x2fb/0x460 [ 199.800688][ T5983] hci_conn_add_sysfs+0x17e/0x230 [ 199.800703][ T5983] le_conn_complete_evt+0x1075/0x1d70 [ 199.800715][ T5983] ? preempt_count_sub+0xb0/0x160 [ 199.800732][ T5983] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 199.800744][ T5983] ? hci_event_packet+0x459/0x11c0 [ 199.800762][ T5983] hci_le_conn_complete_evt+0x23c/0x370 [ 199.800777][ T5983] hci_le_meta_evt+0x357/0x5e0 [ 199.800790][ T5983] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 199.800804][ T5983] hci_event_packet+0x682/0x11c0 [ 199.800815][ T5983] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 199.800829][ T5983] ? __pfx_hci_event_packet+0x10/0x10 [ 199.800842][ T5983] ? kcov_remote_start+0x3c9/0x6d0 [ 199.800860][ T5983] ? lockdep_hardirqs_on+0x7c/0x110 [ 199.800880][ T5983] hci_rx_work+0x2c5/0x16b0 [ 199.800895][ T5983] ? rcu_is_watching+0x12/0xc0 [ 199.800912][ T5983] process_one_work+0x9cc/0x1b70 [ 199.800932][ T5983] ? __pfx_process_one_work+0x10/0x10 [ 199.800949][ T5983] ? assign_work+0x1a0/0x250 [ 199.800963][ T5983] worker_thread+0x6c8/0xf10 [ 199.800980][ T5983] ? __kthread_parkme+0x19e/0x250 [ 199.800999][ T5983] ? __pfx_worker_thread+0x10/0x10 [ 199.801012][ T5983] kthread+0x3c2/0x780 [ 199.801023][ T5983] ? __pfx_kthread+0x10/0x10 [ 199.801035][ T5983] ? rcu_is_watching+0x12/0xc0 [ 199.801049][ T5983] ? __pfx_kthread+0x10/0x10 [ 199.801060][ T5983] ret_from_fork+0x56a/0x730 [ 199.801070][ T5983] ? __pfx_kthread+0x10/0x10 [ 199.801082][ T5983] ret_from_fork_asm+0x1a/0x30 [ 199.801102][ T5983] [ 199.801116][ T5983] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 199.848400][T13939] /dev/sg0: Can't lookup blockdev [ 199.851114][ T5983] Bluetooth: hci2: failed to register connection device [ 199.944658][T13943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13943 comm=syz.2.2133 [ 199.989236][T13948] tipc: MTU too low for tipc bearer [ 199.992424][T13948] openvswitch: netlink: Key type 31 is not supported [ 200.032644][T13951] mkiss: ax0: crc mode is auto. [ 200.126490][ T5983] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 200.230372][T13958] fuse: Bad value for 'fd' [ 200.301340][ T5983] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 200.352576][T13968] /dev/sg0: Can't lookup blockdev [ 200.547664][T13970] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 200.550437][T13970] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.553629][T13970] vhci_hcd vhci_hcd.0: Device attached [ 200.560199][T13970] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 200.562945][T13970] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.566691][T13970] vhci_hcd vhci_hcd.0: Device attached [ 200.569661][T13970] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 200.582738][T13973] vhci_hcd: connection closed [ 200.582963][ T6846] vhci_hcd: stop threads [ 200.582991][T13975] vhci_hcd: connection closed [ 200.585621][ T6846] vhci_hcd: release socket [ 200.590091][ T6846] vhci_hcd: disconnect device [ 200.591750][ T6846] vhci_hcd: stop threads [ 200.593586][ T6846] vhci_hcd: release socket [ 200.595710][ T6846] vhci_hcd: disconnect device [ 201.026324][T13992] random: crng reseeded on system resumption [ 201.034637][T13992] gfs2: gfs2 mount does not exist [ 201.073717][T13997] netlink: 'syz.4.2151': attribute type 2 has an invalid length. [ 201.124062][T14004] Trying to write to read-only block-device nullb0 [ 201.483670][T14045] __nla_validate_parse: 1 callbacks suppressed [ 201.483682][T14045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2163'. [ 201.694913][ T840] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 201.814994][ T5978] Bluetooth: hci0: command tx timeout [ 201.865079][ T840] usb 9-1: Using ep0 maxpacket: 32 [ 201.869068][ T840] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 201.876666][ T840] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 201.880545][ T840] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 201.884099][ T840] usb 9-1: Product: syz [ 201.885909][ T840] usb 9-1: Manufacturer: syz [ 201.888047][ T840] usb 9-1: SerialNumber: syz [ 201.892875][ T840] usb 9-1: config 0 descriptor?? [ 201.896033][T14042] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 201.972294][T14069] ceph: Path missing in source [ 202.056639][T14081] Bluetooth: MGMT ver 1.23 [ 202.110291][ T54] usb 9-1: USB disconnect, device number 3 [ 202.183281][T14093] dlm: no locking on control device [ 202.208856][T14097] netlink: 'syz.4.2175': attribute type 2 has an invalid length. [ 202.213986][T14097] netlink: 'syz.4.2175': attribute type 1 has an invalid length. [ 202.218127][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2175'. [ 202.377779][T14120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2181'. [ 202.412048][T14116] configfs: Unknown parameter 'nfs_export' [ 202.444023][T14123] netlink: 'syz.4.2181': attribute type 10 has an invalid length. [ 202.449328][T14123] hsr_slave_0: left promiscuous mode [ 202.452484][T14123] hsr_slave_1: left promiscuous mode [ 202.602278][T14136] netlink: 'syz.2.2190': attribute type 1 has an invalid length. [ 202.608503][ T5978] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 202.611752][T14138] veth0: entered promiscuous mode [ 202.630251][T14136] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 202.641020][T14136] netlink: 'syz.2.2190': attribute type 10 has an invalid length. [ 202.644633][T14136] mac80211_hwsim hwsim33 wlan1: left allmulticast mode [ 202.666275][ T5983] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.673772][ T5983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.677826][ T5983] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.682172][ T5983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.688557][ T5983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.689287][T14139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2191'. [ 202.719332][T14143] lo speed is unknown, defaulting to 1000 [ 202.864973][T14163] netlink: 'syz.2.2196': attribute type 21 has an invalid length. [ 202.869514][T14163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2196'. [ 202.878696][T14143] chnl_net:caif_netlink_parms(): no params data found [ 202.994886][T14143] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.997813][T14143] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.000766][T14175] Bluetooth: MGMT ver 1.23 [ 203.000795][T14143] bridge_slave_0: entered allmulticast mode [ 203.003338][T14175] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 203.006810][T14143] bridge_slave_0: entered promiscuous mode [ 203.013256][T14143] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.022592][T14143] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.027746][T14143] bridge_slave_1: entered allmulticast mode [ 203.031314][T14143] bridge_slave_1: entered promiscuous mode [ 203.080516][T14143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.082417][ T5983] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 203.085580][T14143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.088553][ T5983] CPU: 0 UID: 0 PID: 5983 Comm: kworker/u33:8 Not tainted syzkaller #0 PREEMPT(full) [ 203.088577][ T5983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.088589][ T5983] Workqueue: hci4 hci_rx_work [ 203.088636][ T5983] Call Trace: [ 203.088643][ T5983] [ 203.088651][ T5983] dump_stack_lvl+0x16c/0x1f0 [ 203.088679][ T5983] sysfs_warn_dup+0x7f/0xa0 [ 203.088707][ T5983] sysfs_create_dir_ns+0x24b/0x2b0 [ 203.088730][ T5983] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 203.088750][ T5983] ? find_held_lock+0x2b/0x80 [ 203.088768][ T5983] ? do_raw_spin_unlock+0x172/0x230 [ 203.088781][ T5983] kobject_add_internal+0x2c4/0x9b0 [ 203.088799][ T5983] kobject_add+0x16e/0x240 [ 203.088815][ T5983] ? __pfx_kobject_add+0x10/0x10 [ 203.088831][ T5983] ? do_raw_spin_unlock+0x172/0x230 [ 203.088843][ T5983] ? kobject_put+0xab/0x5a0 [ 203.088861][ T5983] device_add+0x288/0x1aa0 [ 203.088878][ T5983] ? __pfx_dev_set_name+0x10/0x10 [ 203.088888][ T5983] ? __pfx_device_add+0x10/0x10 [ 203.088903][ T5983] ? mgmt_send_event_skb+0x2fb/0x460 [ 203.088919][ T5983] hci_conn_add_sysfs+0x17e/0x230 [ 203.088937][ T5983] le_conn_complete_evt+0x1075/0x1d70 [ 203.088949][ T5983] ? preempt_count_sub+0xb0/0x160 [ 203.088965][ T5983] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 203.088977][ T5983] ? hci_event_packet+0x459/0x11c0 [ 203.088994][ T5983] hci_le_conn_complete_evt+0x23c/0x370 [ 203.089009][ T5983] hci_le_meta_evt+0x357/0x5e0 [ 203.089023][ T5983] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 203.089042][ T5983] hci_event_packet+0x682/0x11c0 [ 203.089059][ T5983] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 203.089081][ T5983] ? __pfx_hci_event_packet+0x10/0x10 [ 203.089101][ T5983] ? kcov_remote_start+0x3c9/0x6d0 [ 203.089121][ T5983] ? lockdep_hardirqs_on+0x7c/0x110 [ 203.089160][ T5983] hci_rx_work+0x2c5/0x16b0 [ 203.089182][ T5983] ? rcu_is_watching+0x12/0xc0 [ 203.089208][ T5983] process_one_work+0x9cc/0x1b70 [ 203.089239][ T5983] ? __pfx_process_one_work+0x10/0x10 [ 203.089258][ T5983] ? assign_work+0x1a0/0x250 [ 203.089270][ T5983] worker_thread+0x6c8/0xf10 [ 203.089286][ T5983] ? __kthread_parkme+0x19e/0x250 [ 203.089302][ T5983] ? __pfx_worker_thread+0x10/0x10 [ 203.089314][ T5983] kthread+0x3c2/0x780 [ 203.089325][ T5983] ? __pfx_kthread+0x10/0x10 [ 203.089336][ T5983] ? rcu_is_watching+0x12/0xc0 [ 203.089350][ T5983] ? __pfx_kthread+0x10/0x10 [ 203.089361][ T5983] ret_from_fork+0x56a/0x730 [ 203.089372][ T5983] ? __pfx_kthread+0x10/0x10 [ 203.089382][ T5983] ret_from_fork_asm+0x1a/0x30 [ 203.089402][ T5983] [ 203.089417][ T5983] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 203.132731][T14182] /dev/sg0: Can't lookup blockdev [ 203.135695][ T5983] Bluetooth: hci4: failed to register connection device [ 203.210293][T14143] team0: Port device team_slave_0 added [ 203.215434][T14143] team0: Port device team_slave_1 added [ 203.223720][T14184] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2201'. [ 203.259380][T14138] veth0: left promiscuous mode [ 203.262993][T14143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.266068][T14143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.276858][T14143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.280843][ T54] IPVS: starting estimator thread 0... [ 203.282281][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 203.282291][ T40] audit: type=1400 audit(203.195:940): avc: denied { create } for pid=14190 comm="syz.2.2202" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 203.282400][T14143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.282412][T14143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.282459][T14143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.308888][ T40] audit: type=1400 audit(203.195:941): avc: denied { read } for pid=14190 comm="syz.2.2202" name="file0" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 203.317841][ T40] audit: type=1400 audit(203.195:942): avc: denied { open } for pid=14190 comm="syz.2.2202" path="/45/file0" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 203.325675][ T40] audit: type=1400 audit(203.215:943): avc: denied { unlink } for pid=13480 comm="syz-executor" name="file0" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 203.369019][T14143] hsr_slave_0: entered promiscuous mode [ 203.371294][T14143] hsr_slave_1: entered promiscuous mode [ 203.373523][T14143] debugfs: 'hsr0' already exists in 'hsr' [ 203.376048][T14192] IPVS: using max 27 ests per chain, 64800 per kthread [ 203.379103][T14143] Cannot create hsr debugfs directory [ 203.420561][T14209] netlink: 'syz.2.2206': attribute type 10 has an invalid length. [ 203.445443][T14209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.450181][T14209] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 203.739483][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'. [ 203.882310][ T40] audit: type=1400 audit(203.785:944): avc: denied { name_bind } for pid=14231 comm="syz.4.2210" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 203.893229][ T40] audit: type=1400 audit(203.785:945): avc: denied { node_bind } for pid=14231 comm="syz.4.2210" saddr=fe80::bb src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 203.915146][T14232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2210'. [ 203.921467][ T40] audit: type=1400 audit(203.825:946): avc: denied { map } for pid=14231 comm="syz.4.2210" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 203.932292][ T40] audit: type=1400 audit(203.825:947): avc: denied { execute } for pid=14231 comm="syz.4.2210" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 203.964508][ T40] audit: type=1400 audit(203.845:948): avc: denied { read write } for pid=14226 comm="syz.2.2209" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 203.974611][ T40] audit: type=1400 audit(203.845:949): avc: denied { open } for pid=14226 comm="syz.2.2209" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 204.000738][T14239] erofs (device loop4): cannot find valid erofs superblock [ 204.040596][T14143] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 204.049983][T14143] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 204.057501][T14143] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 204.072440][T14143] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 204.143932][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2212'. [ 204.159958][T14143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.178401][T14255] libceph: resolve ' [ 204.178401][T14255] -&fYǝa2i [ 204.178401][T14255] .?&*&' (ret=-3): failed [ 204.180986][T14143] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.189123][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.191399][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.198286][ T6850] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.200619][ T6850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.389772][T14143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.429504][T14143] veth0_vlan: entered promiscuous mode [ 204.435730][T14143] veth1_vlan: entered promiscuous mode [ 204.454721][T14143] veth0_macvtap: entered promiscuous mode [ 204.459044][T14143] veth1_macvtap: entered promiscuous mode [ 204.471955][T14143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.482836][T14143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.494466][ T6831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.498401][ T6831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.505763][ T6831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.509026][ T6831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.784390][ T5978] Bluetooth: hci0: command tx timeout [ 204.905505][T14245] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.914364][T14245] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.916265][T14245] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 204.923545][T14245] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 204.928263][T14245] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 204.937347][T14245] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 204.941500][T14245] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 204.951676][T14245] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 204.968262][T14245] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 204.971351][T14245] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 204.973866][T14245] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 204.984058][T14245] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 205.023145][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.027253][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.058978][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.061509][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.147563][T14305] netlink: 'syz.3.2185': attribute type 10 has an invalid length. [ 205.154037][T14305] team0: Cannot enslave team device to itself [ 205.590843][T14336] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2222'. [ 205.821628][T14344] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 205.854670][ T5721] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 206.214527][ T5978] Bluetooth: hci1: command 0x040f tx timeout [ 206.354133][T14356] netlink: 'syz.4.2229': attribute type 12 has an invalid length. [ 206.357505][T14356] netlink: 'syz.4.2229': attribute type 29 has an invalid length. [ 206.429592][T14359] tmpfs: Unknown parameter ') t' [ 206.431398][T14359] tmpfs: Unknown parameter ') t' [ 206.433244][T14359] tmpfs: Unknown parameter ') t' [ 206.435280][T14359] tmpfs: Unknown parameter ') t' [ 206.437180][T14359] tmpfs: Unknown parameter ') t' [ 206.438956][T14359] tmpfs: Unknown parameter ') t' [ 206.440698][T14359] tmpfs: Unknown parameter ') t' [ 206.442427][T14359] tmpfs: Unknown parameter ') t' [ 206.447265][T14359] tmpfs: Unknown parameter ') t' [ 206.449032][T14359] tmpfs: Unknown parameter ') t' [ 206.451610][T14359] tmpfs: Unknown parameter ') t' [ 206.453460][T14359] tmpfs: Unknown parameter ') t' [ 206.455363][T14359] tmpfs: Unknown parameter ') t' [ 206.459338][T14359] tmpfs: Unknown parameter ') t' [ 206.461192][T14359] tmpfs: Unknown parameter ') t' [ 206.462938][T14359] tmpfs: Unknown parameter ') t' [ 206.465089][T14359] tmpfs: Unknown parameter ') t' [ 206.467126][T14359] tmpfs: Unknown parameter ') t' [ 206.469031][T14359] tmpfs: Unknown parameter ') t' [ 206.470820][T14359] tmpfs: Unknown parameter ') t' [ 206.473603][T14359] tmpfs: Unknown parameter ') t' [ 206.478177][T14359] tmpfs: Unknown parameter ') t' [ 206.480029][T14359] tmpfs: Unknown parameter ') t' [ 206.481913][T14359] tmpfs: Unknown parameter ') t' [ 206.483949][T14359] tmpfs: Unknown parameter ') t' [ 206.486927][T14359] tmpfs: Unknown parameter ') t' [ 206.764032][T14398] netlink: 'syz.4.2238': attribute type 1 has an invalid length. [ 206.784878][T14398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.827137][T14398] veth3: entered promiscuous mode [ 206.865811][T14403] __nla_validate_parse: 1 callbacks suppressed [ 206.865827][T14403] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2238'. [ 206.934469][ T5978] Bluetooth: hci2: command 0x0406 tx timeout [ 207.014813][ T5978] Bluetooth: hci4: command 0x041b tx timeout [ 207.014957][ T5983] Bluetooth: hci0: command 0x040f tx timeout [ 207.060726][T14422] netlink: 'syz.0.2245': attribute type 1 has an invalid length. [ 207.063906][ T5983] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 207.075496][T14422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.091139][T14422] bond2: (slave geneve3): making interface the new active one [ 207.095314][T14422] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 207.158668][T14429] binder: 14428:14429 ioctl c018620c 200000000240 returned -22 [ 207.230518][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2251'. [ 207.230670][T14441] kernel read not supported for file /policy (pid: 14441 comm: syz.4.2249) [ 207.239760][T14433] TCP: TCP_TX_DELAY enabled [ 207.294776][T14443] netlink: 'syz.0.2252': attribute type 1 has an invalid length. [ 207.297860][T14443] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2252'. [ 207.537178][T14463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65534 sclass=netlink_route_socket pid=14463 comm=syz.3.2258 [ 207.656750][T14477] netlink: 'syz.4.2263': attribute type 1 has an invalid length. [ 207.660884][T14477] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 207.696547][T14484] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2264'. [ 207.753703][T14487] netlink: 'syz.4.2265': attribute type 12 has an invalid length. [ 207.758492][T14487] ubi31: attaching mtd0 [ 207.759996][T14487] ubi31 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 208.044884][T14501] input: syz1 as /devices/virtual/input/input24 [ 208.066193][T14501] input: failed to attach handler mousedev to device input24, error: -4 [ 208.370365][T14464] orangefs_mount: mount request failed with -4 [ 208.403492][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 208.403505][ T40] audit: type=1400 audit(208.305:958): avc: denied { setopt } for pid=14502 comm="syz.0.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.412627][ T40] audit: type=1400 audit(208.305:959): avc: denied { ioctl } for pid=14502 comm="syz.0.2269" path="socket:[65291]" dev="sockfs" ino=65291 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.441321][T14505] netlink: 94 bytes leftover after parsing attributes in process `syz.0.2270'. [ 208.531804][ T40] audit: type=1400 audit(208.435:960): avc: denied { setattr } for pid=14511 comm="syz.3.2272" name="" dev="pipefs" ino=65300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 208.610135][T14516] overlayfs: failed to resolve './file0': -2 [ 208.613980][T14516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2274'. [ 208.618527][T14516] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (133) [ 208.885240][ T40] audit: type=1400 audit(208.795:961): avc: denied { connect } for pid=14530 comm="syz.3.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.910885][ T40] audit: type=1400 audit(208.795:962): avc: denied { ioctl } for pid=14530 comm="syz.3.2280" path="socket:[64437]" dev="sockfs" ino=64437 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.947885][T14537] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2281'. [ 209.014496][ T5983] Bluetooth: hci2: command 0x0406 tx timeout [ 209.094562][ T5983] Bluetooth: hci0: command 0x040f tx timeout [ 209.094596][ T5978] Bluetooth: hci4: command 0x041b tx timeout [ 209.844911][T14547] netlink: 'syz.3.2282': attribute type 1 has an invalid length. [ 209.892696][T14547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.918146][T14547] bond1: (slave geneve2): making interface the new active one [ 209.921528][T14547] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 209.989094][T14552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64528 sclass=netlink_route_socket pid=14552 comm=syz.0.2284 [ 211.030765][T14587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2291'. [ 211.055764][T14587] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.094474][ T5978] Bluetooth: hci2: command 0x0406 tx timeout [ 211.175043][ T5978] Bluetooth: hci0: command 0x040f tx timeout [ 211.176898][ T5978] Bluetooth: hci4: command 0x041b tx timeout [ 211.371255][T14599] libceph: resolve '40' (ret=-3): failed [ 211.460667][T14607] [U] ^R [ 211.462268][T14606] [U] ^R [ 211.760651][T14623] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2303'. [ 211.764668][T14623] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2303'. [ 211.897371][T14635] /dev/sg0: Can't lookup blockdev [ 212.048662][T14642] netlink: 'syz.4.2310': attribute type 2 has an invalid length. [ 212.051183][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2310'. [ 212.054703][T14642] netlink: 'syz.4.2310': attribute type 2 has an invalid length. [ 212.057387][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2310'. [ 212.126767][ T40] audit: type=1400 audit(212.035:963): avc: denied { append } for pid=14648 comm="syz.3.2313" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 212.127334][T14649] netlink: 'syz.3.2313': attribute type 1 has an invalid length. [ 212.195644][T14657] fuse: Bad value for 'group_id' [ 212.197812][T14657] fuse: Bad value for 'group_id' [ 212.292684][T14664] bridge_slave_0: left allmulticast mode [ 212.294800][T14664] bridge_slave_0: left promiscuous mode [ 212.296649][T14664] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.303743][T14664] bridge_slave_1: left allmulticast mode [ 212.306434][T14664] bridge_slave_1: left promiscuous mode [ 212.308966][T14664] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.338455][T14664] bond0: (slave bond_slave_0): Releasing backup interface [ 212.349268][T14664] bond0: (slave bond_slave_1): Releasing backup interface [ 212.365532][T14664] team0: Port device team_slave_0 removed [ 212.386905][T14664] team0: Port device team_slave_1 removed [ 212.389114][T14664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.391556][T14664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.394946][T14664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.397344][T14664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.493286][T14677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2321'. [ 212.727322][T14680] sp0: Synchronizing with TNC [ 212.915110][T14683] random: crng reseeded on system resumption [ 212.925294][T14683] bridge3: entered allmulticast mode [ 213.174639][ T5978] Bluetooth: hci2: command 0x0406 tx timeout [ 213.254821][ T5978] Bluetooth: hci4: command 0x041b tx timeout [ 213.254922][ T5972] Bluetooth: hci0: command 0x040f tx timeout [ 213.259176][T14698] loop9: detected capacity change from 0 to 7 [ 213.264761][T14698] Dev loop9: unable to read RDB block 7 [ 213.266716][T14698] loop9: unable to read partition table [ 213.268659][T14698] loop9: partition table beyond EOD, truncated [ 213.270817][T14698] loop_reread_partitions: partition scan of loop9 (s xC) failed (rc=-5) [ 213.357974][ T6058] Dev loop9: unable to read RDB block 7 [ 213.360560][ T6058] loop9: unable to read partition table [ 213.363185][ T6058] loop9: partition table beyond EOD, truncated [ 213.394649][T14708] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 213.398640][T14706] binder: 14705:14706 ioctl c0306201 0 returned -14 [ 213.401574][T14707] binder: 14705:14707 ioctl c0306201 2000000001c0 returned -14 [ 214.140108][T14734] could not allocate digest TFM handle sha384-ce [ 214.146411][ T40] audit: type=1400 audit(214.055:964): avc: denied { read } for pid=14733 comm="syz.4.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 214.161623][ T40] audit: type=1400 audit(214.065:965): avc: denied { setopt } for pid=14738 comm="syz.3.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.172526][ T40] audit: type=1400 audit(214.065:966): avc: denied { bind } for pid=14738 comm="syz.3.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.181409][ T40] audit: type=1400 audit(214.065:967): avc: denied { listen } for pid=14738 comm="syz.3.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.200121][ T40] audit: type=1400 audit(214.105:968): avc: denied { write } for pid=14738 comm="syz.3.2338" path="socket:[68089]" dev="sockfs" ino=68089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.205790][T14742] vlan2: entered promiscuous mode [ 214.210849][T14742] bridge0: entered promiscuous mode [ 214.330671][ T5972] Bluetooth: hci0: unexpected event for opcode 0x200a [ 214.364096][ T40] audit: type=1400 audit(214.265:969): avc: denied { ioctl } for pid=14746 comm="syz.3.2341" path="socket:[68819]" dev="sockfs" ino=68819 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 214.438181][ T40] audit: type=1400 audit(214.345:970): avc: denied { ioctl } for pid=14750 comm="syz.3.2343" path="socket:[68831]" dev="sockfs" ino=68831 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 214.481921][T14754] cgroup2: Unknown parameter 'memory_(' [ 214.498359][T14754] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2344'. [ 214.830697][T14758] virtio-fs: tag not found [ 214.835015][T14758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2345'. [ 214.838398][T14759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2345'. [ 214.849504][ T40] audit: type=1400 audit(214.755:971): avc: denied { connect } for pid=14760 comm="syz.0.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 214.883249][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2347'. [ 214.896005][T14763] dlm: non-version read from control device 0 [ 214.903374][ T40] audit: type=1400 audit(214.805:972): avc: denied { setattr } for pid=14762 comm="syz.0.2347" name="file1" dev="overlay" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 214.956059][ T40] audit: type=1400 audit(214.865:973): avc: denied { write } for pid=14768 comm="syz.0.2349" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 215.019206][T14779] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 215.021322][T14779] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 215.024012][T14779] vhci_hcd vhci_hcd.0: Device attached [ 215.034013][T14779] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 215.036666][T14779] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 215.041743][T14779] vhci_hcd vhci_hcd.0: Device attached [ 215.122209][T14787] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 215.124418][T14787] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 215.127115][T14787] vhci_hcd vhci_hcd.0: Device attached [ 215.204452][ T5721] vhci_hcd: vhci_device speed not set [ 215.264666][ T5721] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 215.343622][T14791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2354'. [ 215.344414][ T5972] Bluetooth: hci4: command 0x041b tx timeout [ 215.352034][T14793] fuse: Unknown parameter 'fsmagic' [ 215.426801][T14805] IPv6: sit1: Disabled Multicast RS [ 215.429667][T14805] sit1: entered allmulticast mode [ 215.586710][T14808] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 215.778528][T14829] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 215.781425][T14829] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 215.817780][T14832] syz.4.2366 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 215.850198][T14788] vhci_hcd: connection closed [ 215.852782][ T6838] vhci_hcd: stop threads [ 215.856872][ T6838] vhci_hcd: release socket [ 215.858995][ T6838] vhci_hcd: disconnect device [ 215.875217][ T7850] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 216.046175][ T7850] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 216.048906][ T7850] usb 8-1: config 0 has no interface number 0 [ 216.051061][ T7850] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 216.055353][ T7850] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 216.058726][ T7850] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 216.062402][ T7850] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 216.066865][ T7850] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 216.070186][ T7850] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 216.074199][ T7850] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 216.077435][ T7850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.081225][ T7850] usb 8-1: config 0 descriptor?? [ 216.083305][T14815] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 216.086132][T14815] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 216.091347][ T7850] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 216.216123][T14845] binder: 14844:14845 ioctl c018620c 200000000000 returned -1 [ 216.216165][T14846] binder: 14844:14846 ioctl c018620c 200000000000 returned -1 [ 216.291391][ T8332] usb 8-1: USB disconnect, device number 5 [ 216.295030][ T8332] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 216.753906][T14871] fuse: Unknown parameter 'grou00000000000000000000' [ 216.831687][T14877] zonefs (nbd3) ERROR: Not a zoned block device [ 216.843718][T14875] Device name not specified. [ 216.843718][T14875] [ 216.892197][T14883] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2383'. [ 216.927442][T14887] sch_fq: defrate 0 ignored. [ 217.014774][T14887] kvm: kvm [14884]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 217.017896][T14895] tipc: Can't bind to reserved service type 1 [ 217.018100][T14887] kvm: kvm [14884]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 217.027809][T14897] 9p: Unknown access argument 18446744073709551615: -34 [ 217.039396][T14887] kvm: kvm [14884]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 217.065256][T14887] kvm: kvm [14884]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 217.069121][T14887] kvm: kvm [14884]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 217.158218][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2391'. [ 217.301447][T14915] netlink: 'syz.4.2394': attribute type 30 has an invalid length. [ 217.321147][T14917] binder: 14916:14917 unknown command 0 [ 217.322897][T14917] binder: 14916:14917 ioctl c0306201 200000000080 returned -22 [ 217.335599][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2391'. [ 217.339543][T14907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2391'. [ 217.351987][T14922] fuse: Unknown parameter 'grou00000000000000000000' [ 217.408669][T14926] lo speed is unknown, defaulting to 1000 [ 217.419753][T14928] fuse: Bad value for 'fd' [ 217.480923][T14933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.522172][T14932] overlayfs: missing 'lowerdir' [ 217.731449][T14944] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2402'. [ 217.764200][T14947] binder: Unknown parameter 'euid<00000000000000000000' [ 217.769807][T14947] binder: Unknown parameter 'uid>00000000000000000000' [ 217.773152][T14947] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 217.805865][T14954] ubi31: attaching mtd0 [ 217.807586][T14954] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 217.891880][T14967] ata1.00: invalid multi_count 128 ignored [ 218.055441][T14978] netlink: 'syz.4.2413': attribute type 1 has an invalid length. [ 218.058708][T14978] netlink: 'syz.4.2413': attribute type 2 has an invalid length. [ 218.064552][ T5978] Bluetooth: hci0: command 0x040f tx timeout [ 218.107565][T14980] futex_wake_op: syz.4.2414 tries to shift op by 32; fix this program [ 218.168696][T14984] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 218.407587][T15004] fuse: Unknown parameter 'group_i00000000000000000000' [ 218.488335][T15008] mkiss: ax0: crc mode is auto. [ 218.554533][T15024] afs: Bad value for 'source' [ 218.709399][T15038] : entered promiscuous mode [ 218.752608][T15044] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 218.771803][T15044] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15044 comm=syz.2.2436 [ 218.850657][T15055] 9pnet_fd: Insufficient options for proto=fd [ 218.953013][T15063] /dev/sg0: Can't lookup blockdev [ 218.990643][T15048] block nbd0: shutting down sockets [ 219.030152][T15067] fuse: Unknown parameter 'group_id00000000000000000000' [ 219.070047][T15070] loop6: detected capacity change from 0 to 2560 [ 219.072712][T15070] buffer_io_error: 11 callbacks suppressed [ 219.072720][T15070] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.077947][T15070] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.080476][T15070] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.082884][T15070] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.085765][T15070] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.089077][T15070] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.092292][T15070] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.096769][T15070] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.099613][T15070] ldm_validate_partition_table(): Disk read failed. [ 219.101998][T15070] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.104954][T15070] Buffer I/O error on dev loop6, logical block 0, async page read [ 219.107686][T15070] Dev loop6: unable to read RDB block 0 [ 219.109788][T15070] loop6: unable to read partition table [ 219.112287][T15070] loop_reread_partitions: partition scan of loop6 (3 Ϙ) failed (rc=-5) [ 219.120447][ C3] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 219.121028][ C2] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 219.124367][ C3] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 219.132438][ C2] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 219.135657][ C2] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 219.138620][ C2] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 219.141554][ C2] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 67 prio class 2 [ 219.144972][ C2] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 67 prio class 2 [ 219.181893][T15078] batman_adv: batadv0: Adding interface: gretap1 [ 219.185087][T15078] batman_adv: batadv0: Interface activated: gretap1 [ 219.280637][T15092] netlink: 'syz.4.2453': attribute type 3 has an invalid length. [ 219.280998][T15093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2452'. [ 219.283443][T15092] netlink: 'syz.4.2453': attribute type 1 has an invalid length. [ 219.288148][T15093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2452'. [ 219.290923][T15092] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2453'. [ 219.296920][T15092] NCSI netlink: No device for ifindex 33022 [ 219.306240][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 219.306249][ T40] audit: type=1400 audit(219.215:998): avc: denied { ioctl } for pid=15094 comm="syz.2.2454" path="/dev/video8" dev="devtmpfs" ino=976 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 219.313241][T15095] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2454'. [ 219.336607][ T40] audit: type=1400 audit(219.245:999): avc: denied { watch watch_reads } for pid=15096 comm="syz.0.2455" path="/proc/512" dev="proc" ino=70730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 219.390697][T15105] netlink: 'syz.4.2459': attribute type 1 has an invalid length. [ 219.400996][T15107] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 219.406816][T15107] overlayfs: overlapping lowerdir path [ 219.503090][T15118] erspan0: entered promiscuous mode [ 219.515920][ T40] audit: type=1400 audit(219.425:1000): avc: denied { bind } for pid=15117 comm="syz.2.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 219.545213][T15113] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15113 comm=syz.0.2462 [ 219.550016][ T40] audit: type=1400 audit(219.455:1001): avc: denied { lock } for pid=15112 comm="syz.0.2462" path="socket:[70755]" dev="sockfs" ino=70755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 219.559059][ T40] audit: type=1400 audit(219.455:1002): avc: denied { setopt } for pid=15124 comm="syz.2.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 219.581297][T15128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2468'. [ 219.608686][T15128] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15128 comm=syz.2.2468 [ 219.609722][T15113] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1543 sclass=netlink_audit_socket pid=15113 comm=syz.0.2462 [ 219.791798][T15138] veth0_to_team: entered promiscuous mode [ 219.800000][T15138] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 219.856889][ T40] audit: type=1400 audit(219.765:1003): avc: denied { mounton } for pid=15142 comm="syz.2.2473" path="/proc/251/cgroup" dev="proc" ino=69358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 220.228227][T15177] ip6erspan0: entered promiscuous mode [ 220.293835][ T40] audit: type=1400 audit(220.195:1004): avc: denied { getopt } for pid=15190 comm="syz.4.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 220.426019][T15197] 9pnet_fd: Insufficient options for proto=fd [ 220.547339][ T40] audit: type=1400 audit(220.455:1005): avc: denied { bind } for pid=15216 comm="syz.4.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 220.571174][T15217] netfs: Couldn't get user pages (rc=-14) [ 220.718392][T15237] fuse: Unknown parameter 'gd' [ 220.718412][ T40] audit: type=1400 audit(220.625:1006): avc: denied { mounton } for pid=15236 comm="syz.4.2498" path="/171/file0" dev="tmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 220.725771][T15237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2498'. [ 220.780621][ T40] audit: type=1400 audit(220.685:1007): avc: denied { create } for pid=15248 comm="syz.4.2504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 220.844170][T15261] tipc: Started in network mode [ 220.849612][T15261] tipc: Node identity de56fc35447c, cluster identity 4711 [ 220.852015][T15261] tipc: Enabled bearer , priority 0 [ 220.857117][T15261] syzkaller0: entered promiscuous mode [ 220.858969][T15261] syzkaller0: entered allmulticast mode [ 220.985445][T15272] tipc: Resetting bearer [ 221.061491][T15274] xt_socket: unknown flags 0xd0 [ 221.065294][T15260] tipc: Resetting bearer [ 221.076545][T15260] tipc: Disabling bearer [ 221.094048][ T5972] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 221.149689][T15283] fuse: Bad value for 'user_id' [ 221.151767][T15283] fuse: Bad value for 'user_id' [ 221.174588][ T6034] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 221.197412][T15288] netlink: 'syz.4.2516': attribute type 1 has an invalid length. [ 221.222771][T15288] bond5: (slave bridge4): making interface the new active one [ 221.225506][T15288] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 221.264353][ T5972] Bluetooth: hci4: command 0x041b tx timeout [ 221.327272][ T6034] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 221.327881][T15292] input: syz0 as /devices/virtual/input/input27 [ 221.333881][ T6034] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.337184][ T6034] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 221.340253][ T6034] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.344835][ T6034] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17408, setting to 1024 [ 221.352669][ T6034] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 221.356546][ T6034] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 221.359867][ T6034] usb 7-1: Product: syz [ 221.361912][ T6034] usb 7-1: Manufacturer: syz [ 221.372608][ T6034] cdc_wdm 7-1:1.0: skipping garbage [ 221.376993][ T6034] cdc_wdm 7-1:1.0: skipping garbage [ 221.384867][ T6034] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 221.391754][ T6034] cdc_wdm 7-1:1.0: Unknown control protocol [ 221.536128][T15312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.580995][ T5971] usb 7-1: USB disconnect, device number 23 [ 221.667461][T15322] fuse: Bad value for 'fd' [ 222.193123][T15336] mkiss: ax0: crc mode is auto. [ 222.197242][T15336] netlink: 'syz.2.2530': attribute type 21 has an invalid length. [ 222.299550][T15338] overlayfs: unescaped trailing colons in lowerdir mount option. [ 222.340236][T15341] __nla_validate_parse: 3 callbacks suppressed [ 222.340253][T15341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2532'. [ 222.383147][T15343] fuse: Bad value for 'fd' [ 222.459276][T15350] misc userio: The device must be registered before sending interrupts [ 222.687048][T15370] fuse: Bad value for 'fd' [ 222.756293][T15376] cgroup: Name too long [ 223.003164][T15403] fuse: Bad value for 'fd' [ 223.105835][T15415] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 223.135908][T15413] IPv6: NLM_F_CREATE should be specified when creating new route [ 223.223307][T15428] fuse: Bad value for 'fd' [ 223.256157][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2565'. [ 223.260102][T15436] program syz.2.2566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.270605][T15436] netlink: 'syz.2.2566': attribute type 10 has an invalid length. [ 223.273109][T15436] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2566'. [ 223.351451][T15448] Bluetooth: hci0: invalid len left 7, exp >= 17 [ 223.396354][T15451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2572'. [ 223.412340][T15451] No buffer was provided with the request [ 223.417827][T15453] IPv6: NLM_F_REPLACE set, but no existing node found! [ 223.425269][T15451] bridge5: port 1(bond6) entered blocking state [ 223.427436][T15451] bridge5: port 1(bond6) entered disabled state [ 223.429538][T15451] bond6: entered allmulticast mode [ 223.432480][T15451] bond6: entered promiscuous mode [ 223.447858][T15451] bridge5: port 2(geneve2) entered blocking state [ 223.450144][T15451] bridge5: port 2(geneve2) entered disabled state [ 223.452271][T15451] geneve2: entered allmulticast mode [ 223.455053][T15451] geneve2: entered promiscuous mode [ 223.485439][T15458] fuse: Bad value for 'fd' [ 223.494942][T15461] CUSE: info not properly terminated [ 223.507043][T15460] SELinux: policydb magic number 0x14 does not match expected magic number 0xf97cff8c [ 223.510042][T15460] SELinux: failed to load policy [ 223.527227][T15463] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 223.537143][T15463] cramfs: wrong magic [ 223.589233][T15467] tmpfs: Unknown parameter 'gd' [ 223.753415][T15475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2580'. [ 223.812582][T15482] futex_wake_op: syz.3.2583 tries to shift op by 32; fix this program [ 223.898435][T15491] tmpfs: Bad value for 'mpol' [ 223.901456][T15493] tmpfs: Bad value for 'mpol' [ 223.977984][T15499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2589'. [ 224.553378][T15517] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 224.565557][T15517] bridge3: entered promiscuous mode [ 224.774490][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.837759][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 224.837769][ T40] audit: type=1400 audit(224.745:1019): avc: denied { unmount } for pid=13026 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 224.865272][T15520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15520 comm=syz.4.2594 [ 224.976921][T15532] program syz.3.2598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.989692][T15534] fuse: Invalid rootmode [ 225.221546][ T40] audit: type=1400 audit(225.125:1020): avc: denied { listen } for pid=15561 comm="syz.3.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.317032][T15576] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2612'. [ 225.343760][T15581] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 225.360222][ T40] audit: type=1326 audit(225.265:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15579 comm="syz.2.2614" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f5578ec29 code=0x0 [ 225.409553][ T40] audit: type=1400 audit(225.315:1022): avc: denied { setattr } for pid=15567 comm="syz.3.2611" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 225.476343][T15590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.488955][ T40] audit: type=1400 audit(225.395:1023): avc: denied { execute } for pid=15579 comm="syz.2.2614" path="/proc/369/net/snmp" dev="proc" ino=4026533812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 225.721958][T15606] openvswitch: netlink: Key type 30 is not supported [ 225.761941][ T5972] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 225.784479][ T5972] Bluetooth: hci2: Malformed HCI Event [ 225.784722][T15610] trusted_key: encrypted_key: keylen parameter is missing [ 225.909386][T15619] program syz.4.2620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.229219][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2630'. [ 226.232555][T15656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.233122][T15657] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 226.239544][T15657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.260575][T15659] kernel read not supported for file /file1 (pid: 15659 comm: syz.3.2628) [ 226.267930][ T40] audit: type=1800 audit(226.175:1024): pid=15659 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2628" name="file1" dev="mqueue" ino=73349 res=0 errno=0 [ 226.278406][ T40] audit: type=1400 audit(226.195:1025): avc: denied { accept } for pid=15655 comm="syz.0.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 226.301316][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2631'. [ 226.319402][T15664] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2632'. [ 226.351621][T15669] netlink: 'syz.2.2633': attribute type 21 has an invalid length. [ 226.382767][T15673] batman_adv: batadv0: Adding interface: dummy0 [ 226.385626][T15673] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.394645][T15673] batman_adv: batadv0: Interface activated: dummy0 [ 226.408082][ T40] audit: type=1400 audit(226.315:1026): avc: denied { map } for pid=15672 comm="syz.2.2635" path="socket:[74382]" dev="sockfs" ino=74382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 226.417692][ T40] audit: type=1400 audit(226.315:1027): avc: denied { read } for pid=15672 comm="syz.2.2635" path="socket:[74382]" dev="sockfs" ino=74382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 226.435846][T15673] batadv0: mtu less than device minimum [ 226.439577][T15673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 226.444969][T15673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 226.450374][T15673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 226.455724][T15673] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 226.477251][ T5972] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 226.540174][T15676] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 226.544488][T15676] netlink: 'syz.2.2636': attribute type 10 has an invalid length. [ 226.547938][T15676] mac80211_hwsim hwsim33 wlan1: left allmulticast mode [ 226.769958][ T40] audit: type=1400 audit(226.675:1028): avc: denied { write } for pid=15688 comm="syz.2.2639" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 226.908382][T15699] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 227.058307][T15699] team0: Port device team_slave_0 removed [ 227.148552][ T8332] hid (null): unknown global tag 0xd [ 227.151089][ T8332] hid (null): unknown global tag 0xc [ 227.153736][ T8332] hid (null): invalid report_count -1984377176 [ 227.156982][ T8332] hid (null): unknown global tag 0xd [ 227.159244][ T8332] hid (null): unknown global tag 0xd [ 227.162010][ T8332] hid (null): global environment stack underflow [ 227.170193][ T8332] hid-generic 0203:0040:FFFFFFF8.0005: unknown main item tag 0x2 [ 227.173787][ T8332] hid-generic 0203:0040:FFFFFFF8.0005: unknown global tag 0xd [ 227.178858][ T8332] hid-generic 0203:0040:FFFFFFF8.0005: item 0 2 1 13 parsing failed [ 227.182785][ T8332] hid-generic 0203:0040:FFFFFFF8.0005: probe with driver hid-generic failed with error -22 [ 227.251602][T15717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15717 comm=syz.2.2648 [ 227.290765][T15720] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 227.332254][T15724] overlayfs: missing 'workdir' [ 227.483492][T15738] __nla_validate_parse: 5 callbacks suppressed [ 227.483507][T15738] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2654'. [ 227.500129][T15733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2651'. [ 227.510423][T15733] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.556184][T15751] nbd: must specify a size in bytes for the device [ 227.810856][T15774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=15774 comm=syz.3.2663 [ 227.910783][T15794] netlink: 'syz.3.2670': attribute type 1 has an invalid length. [ 227.955276][T15794] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.987394][T15794] veth3: entered promiscuous mode [ 227.992324][T15794] bond3: (slave veth3): Enslaving as an active interface with a down link [ 228.003323][T15794] bond3: entered allmulticast mode [ 228.182273][T15829] tipc: Started in network mode [ 228.184829][T15829] tipc: Node identity 86632ff253, cluster identity 4711 [ 228.188042][T15829] tipc: Enabled bearer , priority 0 [ 228.191863][T15829] tipc: Enabled bearer , priority 30 [ 228.202261][T15833] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 228.205054][T15833] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.209181][T15833] vhci_hcd vhci_hcd.0: Device attached [ 228.212261][T15834] usbip_core: unknown command [ 228.214397][T15834] vhci_hcd: unknown pdu 0 [ 228.219507][T15834] usbip_core: unknown command [ 228.222183][ T6843] vhci_hcd: stop threads [ 228.227917][ T6843] vhci_hcd: release socket [ 228.229337][ T6843] vhci_hcd: disconnect device [ 228.229721][T15832] input: syz1 as /devices/virtual/input/input28 [ 228.290277][ T5972] Bluetooth: hci0: unexpected event 0x06 length: 8 > 3 [ 228.347817][T15852] fuse: Unknown parameter 'user00000000000000000000' [ 228.373292][T15854] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 228.376374][T15854] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.380768][T15854] vhci_hcd vhci_hcd.0: Device attached [ 228.384193][T15855] vhci_hcd: unknown pdu 1 [ 228.386719][ T6850] vhci_hcd: stop threads [ 228.388178][ T6850] vhci_hcd: release socket [ 228.390090][ T6850] vhci_hcd: disconnect device [ 228.430228][T15866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2692'. [ 228.434588][T15866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2692'. [ 228.466923][ T6850] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xf8 [ 229.270230][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2698'. [ 229.273197][T15888] netlink: 'syz.3.2698': attribute type 30 has an invalid length. [ 229.283779][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.288642][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.292230][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.296186][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.317080][ T8332] tipc: Node number set to 3580047346 [ 229.355548][T15888] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.360433][T15888] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.387480][T15903] tipc: Enabled bearer , priority 10 [ 229.391503][T15903] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 229.394934][T15903] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 229.419374][T15908] overlay: Bad value for 'workdir' [ 229.424964][T15910] program syz.0.2706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.467956][T15888] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.474079][T15888] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.489183][T15918] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004 [ 229.574405][ T6034] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 229.577161][T15922] 9p: Unknown Cache mode or invalid value fs [ 229.628924][T15888] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.636013][T15888] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.704964][ T8332] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 229.719270][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2713'. [ 229.723080][T15927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2713'. [ 229.746568][ T6034] usb 8-1: Invalid ep0 maxpacket: 64 [ 229.749911][T15888] tipc: Resetting bearer [ 229.768846][T15928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2712'. [ 229.771708][T15928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2712'. [ 229.776001][T15888] tipc: Disabling bearer [ 229.779458][T15888] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.783953][T15888] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.794890][ T5978] Bluetooth: hci2: unexpected event for opcode 0x0c1c [ 229.800217][ T5978] Bluetooth: hci2: unexpected event for opcode 0x0c1c [ 229.832355][T15933] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2715'. [ 229.849282][ T40] kauditd_printk_skb: 162 callbacks suppressed [ 229.849297][ T40] audit: type=1400 audit(229.755:1191): avc: denied { load_policy } for pid=15932 comm="syz.4.2715" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 229.866604][ T8332] usb 7-1: Using ep0 maxpacket: 16 [ 229.870800][ T8332] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.872563][ T6838] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.874404][ T8332] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.874421][ T8332] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 229.874445][ T8332] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 229.877216][ T6838] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.880526][ T8332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.881991][ T8332] usb 7-1: config 0 descriptor?? [ 229.896239][ T6034] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 229.909102][ T40] audit: type=1400 audit(229.815:1192): avc: denied { read } for pid=15932 comm="syz.4.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.917559][ T6852] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.920660][ T6852] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.923681][ T6852] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.927368][ T6852] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.936750][ T6852] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.940081][ T6852] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.960043][T15933] SELinux: failed to load policy [ 230.026057][ T40] audit: type=1400 audit(229.935:1193): avc: denied { create } for pid=15935 comm="syz.4.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 230.033482][ T40] audit: type=1400 audit(229.935:1194): avc: denied { setopt } for pid=15935 comm="syz.4.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 230.040810][ T40] audit: type=1400 audit(229.935:1195): avc: denied { nlmsg_write } for pid=15935 comm="syz.4.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 230.048789][ T40] audit: type=1400 audit(229.935:1196): avc: denied { connect } for pid=15935 comm="syz.4.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 230.074427][ T6034] usb 8-1: Invalid ep0 maxpacket: 64 [ 230.077001][ T6034] usb usb8-port1: attempt power cycle [ 230.127425][ T40] audit: type=1400 audit(230.035:1197): avc: denied { create } for pid=15943 comm="syz.4.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 230.135189][ T40] audit: type=1400 audit(230.035:1198): avc: denied { write } for pid=15943 comm="syz.4.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 230.167889][ T40] audit: type=1400 audit(230.075:1199): avc: denied { remount } for pid=15946 comm="syz.4.2719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 230.215909][ T40] audit: type=1400 audit(230.125:1200): avc: denied { create } for pid=15948 comm="syz.4.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 230.320142][ T8332] usbhid 7-1:0.0: can't add hid device: -71 [ 230.322812][ T8332] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 230.329264][ T8332] usb 7-1: USB disconnect, device number 24 [ 230.398006][T15963] Sensor A: ================= START STATUS ================= [ 230.401304][T15963] Sensor A: Test Pattern: 75% Colorbar [ 230.405296][T15963] Sensor A: Show Information: All [ 230.405868][ T840] tipc: Node number set to 2586508341 [ 230.406845][T15963] Sensor A: Vertical Flip: false [ 230.410698][T15963] Sensor A: Horizontal Flip: true [ 230.412265][T15963] Sensor A: Brightness: 128 [ 230.413898][T15963] Sensor A: Contrast: 128 [ 230.415543][T15963] Sensor A: Hue: 127 [ 230.416790][T15963] Sensor A: Saturation: 128 [ 230.418241][T15963] Sensor A: ================== END STATUS ================== [ 230.434450][ T6034] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 230.456300][ T6034] usb 8-1: Invalid ep0 maxpacket: 64 [ 230.492369][T15966] netlink: 'syz.4.2725': attribute type 4 has an invalid length. [ 230.493972][T15967] tipc: Enabling of bearer rejected, failed to enable media [ 230.507481][T15967] tipc: Enabling of bearer rejected, failed to enable media [ 230.512522][T15967] tipc: Enabling of bearer rejected, failed to enable media [ 230.536513][ T5978] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 230.540330][ T5978] Bluetooth: hci1: Injecting HCI hardware error event [ 230.544659][ T5983] Bluetooth: hci1: hardware error 0x00 [ 230.594608][ T6034] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 230.615226][ T6034] usb 8-1: Invalid ep0 maxpacket: 64 [ 230.617666][ T6034] usb usb8-port1: unable to enumerate USB device [ 230.682816][T15977] net_ratelimit: 15 callbacks suppressed [ 230.682832][T15977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.744329][ T60] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 230.795045][T15983] netlink: 'syz.4.2729': attribute type 1 has an invalid length. [ 230.852599][T15990] fuse: Unknown parameter 'user_i00000000000000000000' [ 230.897850][ T60] usb 8-1: Invalid ep0 maxpacket: 64 [ 231.007317][ T6852] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.010310][ T6852] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.015139][ T6852] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.018575][ T6852] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.024358][ T60] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 231.089047][T16010] fuse: Unknown parameter 'user_i00000000000000000000' [ 231.178215][ T60] usb 8-1: Invalid ep0 maxpacket: 64 [ 231.180782][ T60] usb usb8-port1: attempt power cycle [ 231.514428][ T60] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 231.535075][ T60] usb 8-1: Invalid ep0 maxpacket: 64 [ 231.684392][ T60] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 231.706743][ T60] usb 8-1: Invalid ep0 maxpacket: 64 [ 231.709505][ T60] usb usb8-port1: unable to enumerate USB device [ 231.734415][ T5978] Bluetooth: hci0: command 0x040f tx timeout [ 232.132211][T16058] tipc: Started in network mode [ 232.135315][T16058] tipc: Node identity , cluster identity 4711 [ 232.137885][T16058] tipc: Failed to obtain node identity [ 232.140321][T16058] tipc: Enabling of bearer rejected, failed to enable media [ 232.209606][T16066] syzkaller1: entered promiscuous mode [ 232.212086][T16066] syzkaller1: entered allmulticast mode [ 232.392634][T16074] netlink: 'syz.2.2761': attribute type 2 has an invalid length. [ 232.396407][T16074] netlink: 'syz.2.2761': attribute type 1 has an invalid length. [ 232.489167][T16078] IPVS: sync thread started: state = MASTER, mcast_ifn = xfrm0, syncid = 4, id = 0 [ 232.615788][ T5983] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 232.782813][T16089] vhci_hcd vhci_hcd.0: port 0 already used [ 233.047939][T16095] sg_write: data in/out 1937072651/251 bytes for SCSI command 0x0-- guessing data in; [ 233.047939][T16095] program syz.3.2767 not setting count and/or reply_len properly [ 233.088233][T16097] __nla_validate_parse: 5 callbacks suppressed [ 233.088248][T16097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2768'. [ 233.171476][T16102] fuse: Unknown parameter 'user_id00000000000000000000' [ 233.242508][T16104] kernel profiling enabled (shift: 63) [ 233.245784][T16104] profiling shift: 63 too large [ 233.271028][T16109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2773'. [ 233.484349][ T6034] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 233.508994][T16127] fuse: Bad value for 'fd' [ 233.634423][ T6034] usb 8-1: Using ep0 maxpacket: 32 [ 233.638270][ T6034] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.642067][ T6034] usb 8-1: config 0 has no interfaces? [ 233.644896][ T6034] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 233.648094][ T6034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.653542][ T6034] usb 8-1: config 0 descriptor?? [ 233.697729][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2786'. [ 233.701562][T16151] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2786'. [ 233.719880][T16153] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 233.722940][T16148] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 233.743490][T16155] netlink: 'syz.2.2787': attribute type 1 has an invalid length. [ 233.747489][T16155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2787'. [ 233.756965][ T6838] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.757116][T16155] netlink: 'syz.2.2787': attribute type 1 has an invalid length. [ 233.761156][ T6852] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.762760][T16155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2787'. [ 233.766307][ T6852] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.766341][ T6852] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.783398][T16155] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 233.864453][T16162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.905666][T16104] kvm: emulating exchange as write [ 233.976304][ T29] usb 8-1: USB disconnect, device number 14 [ 234.013162][T16168] netlink: 'syz.4.2792': attribute type 1 has an invalid length. [ 234.016583][T16168] netlink: 'syz.4.2792': attribute type 4 has an invalid length. [ 234.077242][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2792'. [ 234.134403][ T5983] Bluetooth: hci0: command 0x040f tx timeout [ 234.605378][T16174] support for the xor transformation has been removed. [ 234.816197][T16178] geneve2: entered promiscuous mode [ 234.817965][T16178] geneve2: entered allmulticast mode [ 234.855509][ T40] kauditd_printk_skb: 69 callbacks suppressed [ 234.855520][ T40] audit: type=1400 audit(234.765:1270): avc: denied { setopt } for pid=16183 comm="syz.3.2798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 235.097802][T16195] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.101012][T16195] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.190227][T16195] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.193634][T16195] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.251282][T16195] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.254756][T16195] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.309122][T16195] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.313070][T16195] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.420332][ T6851] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.423704][ T6851] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.435245][ T6843] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.438019][ T6843] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.446769][ T6843] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.449848][ T6843] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.459274][ T6851] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.462278][ T6851] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.506560][T16200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'. [ 235.573860][T16200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'. [ 235.876153][ T40] audit: type=1400 audit(235.785:1271): avc: denied { create } for pid=16253 comm="syz.0.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.883844][ T40] audit: type=1400 audit(235.785:1272): avc: denied { setopt } for pid=16255 comm="syz.3.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 236.008374][ T40] audit: type=1400 audit(235.915:1273): avc: denied { read write } for pid=16266 comm="syz.2.2813" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 236.018876][ T40] audit: type=1400 audit(235.915:1274): avc: denied { open } for pid=16266 comm="syz.2.2813" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 236.032329][ T40] audit: type=1400 audit(235.915:1275): avc: denied { write } for pid=16266 comm="syz.2.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 236.113730][T16288] netlink: 'syz.2.2814': attribute type 4 has an invalid length. [ 236.122306][T16288] netlink: 'syz.2.2814': attribute type 4 has an invalid length. [ 236.130210][ T40] audit: type=1400 audit(236.035:1276): avc: denied { getopt } for pid=16287 comm="syz.2.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 236.193509][ T40] audit: type=1400 audit(236.095:1277): avc: denied { read } for pid=16292 comm="syz.2.2815" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 236.194154][T16294] sd 0:0:0:0: PR command failed: 1026 [ 236.202203][ T40] audit: type=1400 audit(236.095:1278): avc: denied { open } for pid=16292 comm="syz.2.2815" path="/193/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 236.204680][T16294] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 236.204721][T16294] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 236.220666][ T40] audit: type=1400 audit(236.095:1279): avc: denied { ioctl } for pid=16292 comm="syz.2.2815" path="/193/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 236.484025][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2818'. [ 236.529075][T16304] netlink: 'syz.2.2819': attribute type 1 has an invalid length. [ 236.792153][T16323] 9pnet_virtio: no channels available for device syz [ 236.792311][T16323] 9pnet_virtio: no channels available for device syz [ 236.792448][T16323] 9pnet_virtio: no channels available for device syz [ 236.792593][T16323] 9pnet_virtio: no channels available for device syz [ 236.792731][T16323] 9pnet_virtio: no channels available for device syz [ 236.792878][T16323] 9pnet_virtio: no channels available for device syz [ 236.793019][T16323] 9pnet_virtio: no channels available for device syz [ 236.793157][T16323] 9pnet_virtio: no channels available for device syz [ 236.793300][T16323] 9pnet_virtio: no channels available for device syz [ 236.793440][T16323] 9pnet_virtio: no channels available for device syz [ 236.793700][T16323] 9pnet_virtio: no channels available for device syz [ 236.793975][T16323] 9pnet_virtio: no channels available for device syz [ 236.794898][T16323] 9pnet_virtio: no channels available for device syz [ 236.795546][T16323] 9pnet_virtio: no channels available for device syz [ 236.795806][T16323] 9pnet_virtio: no channels available for device syz [ 236.795960][T16323] 9pnet_virtio: no channels available for device syz [ 236.796096][T16323] 9pnet_virtio: no channels available for device syz [ 236.796231][T16323] 9pnet_virtio: no channels available for device syz [ 236.796365][T16323] 9pnet_virtio: no channels available for device syz [ 236.796506][T16323] 9pnet_virtio: no channels available for device syz [ 236.796643][T16323] 9pnet_virtio: no channels available for device syz [ 236.796781][T16323] 9pnet_virtio: no channels available for device syz [ 236.796920][T16323] 9pnet_virtio: no channels available for device syz [ 236.797056][T16323] 9pnet_virtio: no channels available for device syz [ 236.797200][T16323] 9pnet_virtio: no channels available for device syz [ 236.797340][T16323] 9pnet_virtio: no channels available for device syz [ 236.797474][T16323] 9pnet_virtio: no channels available for device syz [ 236.797614][T16323] 9pnet_virtio: no channels available for device syz [ 236.797757][T16323] 9pnet_virtio: no channels available for device syz [ 236.797896][T16323] 9pnet_virtio: no channels available for device syz [ 236.798046][T16323] 9pnet_virtio: no channels available for device syz [ 236.798216][T16323] 9pnet_virtio: no channels available for device syz [ 236.893617][T16331] netlink: 'syz.3.2826': attribute type 1 has an invalid length. [ 236.909483][T16331] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.940283][T16331] bond4: (slave veth5): Enslaving as an active interface with a down link [ 236.947288][T16331] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.950811][T16331] bond4: (slave team0): making interface the new active one [ 236.954019][T16331] team0: entered promiscuous mode [ 236.956404][T16331] team_slave_0: entered promiscuous mode [ 236.958811][T16331] team_slave_1: entered promiscuous mode [ 236.961635][T16331] bond4: (slave team0): Enslaving as an active interface with an up link [ 237.157624][ T34] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 237.162585][T16356] mkiss: ax0: crc mode is auto. [ 237.176384][ T34] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 237.209492][T16364] netlink: 'syz.3.2834': attribute type 1 has an invalid length. [ 237.236116][T16364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=16364 comm=syz.3.2834 [ 237.276747][ T1336] hid-generic 0005:00B6:0009.0007: unknown main item tag 0x0 [ 237.280060][ T1336] hid-generic 0005:00B6:0009.0007: unknown main item tag 0x0 [ 237.284086][ T1336] hid-generic 0005:00B6:0009.0007: unknown main item tag 0x0 [ 237.288545][ T1336] hid-generic 0005:00B6:0009.0007: unknown main item tag 0x0 [ 237.291892][ T1336] hid-generic 0005:00B6:0009.0007: unknown main item tag 0x0 [ 237.295422][ T1336] hid-generic 0005:00B6:0009.0007: unknown main item tag 0x0 [ 237.297785][T16374] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 237.298783][ T1336] hid-generic 0005:00B6:0009.0007: unknown main item tag 0x0 [ 237.303216][T16374] hugetlbfs: Bad value 'e' for mount option 'size' [ 237.303216][T16374] [ 237.305515][ T1336] hid-generic 0005:00B6:0009.0007: unknown main item tag 0x0 [ 237.310481][ T1336] hid-generic 0005:00B6:0009.0007: unknown main item tag 0x0 [ 237.356515][ T1336] hid-generic 0005:00B6:0009.0007: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 237.482063][T16377] team0: Port device team_slave_0 removed [ 238.487336][T16399] binder: Bad value for 'max' [ 238.624883][T16401] nbd3: detected capacity change from 0 to 63 [ 238.632344][ T5972] block nbd3: Receive control failed (result -32) [ 238.632939][ T6058] block nbd3: Send control failed (result -32) [ 238.639445][ T6058] block nbd3: Request send failed, requeueing [ 238.648668][ T6058] block nbd3: Dead connection, failed to find a fallback [ 238.655875][ T150] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.661292][ T150] buffer_io_error: 11 callbacks suppressed [ 238.661306][ T150] Buffer I/O error on dev nbd3, logical block 0, async page read [ 238.661896][ T6058] block nbd3: shutting down sockets [ 238.674548][ T6058] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.678375][ T6058] Buffer I/O error on dev nbd3, logical block 1, async page read [ 238.681578][ T6058] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.687389][ T6058] Buffer I/O error on dev nbd3, logical block 2, async page read [ 238.691272][ T6058] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.696951][ T6058] Buffer I/O error on dev nbd3, logical block 3, async page read [ 238.700344][ T6058] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.704094][ T6058] Buffer I/O error on dev nbd3, logical block 0, async page read [ 238.714547][ T6058] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.718463][ T6058] Buffer I/O error on dev nbd3, logical block 1, async page read [ 238.721993][ T6058] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.722420][T16412] fuse: Unknown parameter '0x0000000000000004' [ 238.725130][ T6058] Buffer I/O error on dev nbd3, logical block 2, async page read [ 238.725224][ T6058] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.725238][ T6058] Buffer I/O error on dev nbd3, logical block 3, async page read [ 238.738549][ T6058] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.742057][ T6058] Buffer I/O error on dev nbd3, logical block 0, async page read [ 238.744759][ T6058] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.747523][ T6058] Buffer I/O error on dev nbd3, logical block 1, async page read [ 238.751206][ T6058] ldm_validate_partition_table(): Disk read failed. [ 238.753646][T16416] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.754471][ T6058] Dev nbd3: unable to read RDB block 0 [ 238.758453][ T6058] nbd3: unable to read partition table [ 238.763979][ T6058] ldm_validate_partition_table(): Disk read failed. [ 238.768719][ T6058] Dev nbd3: unable to read RDB block 0 [ 238.771326][ T6058] nbd3: unable to read partition table [ 238.809326][T16416] kvm: pic: level sensitive irq not supported [ 238.809749][T16416] kvm: pic: non byte read [ 238.907276][T16426] program syz.0.2855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.912809][T16426] openvswitch: netlink: Tunnel attr 9 has unexpected len 0 expected 2 [ 239.040296][T16446] fuse: Unknown parameter 'fd0x0000000000000004' [ 239.077854][T16452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16452 comm=syz.0.2862 [ 239.082699][T16452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16452 comm=syz.0.2862 [ 239.088174][T16452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16452 comm=syz.0.2862 [ 239.093004][T16452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16452 comm=syz.0.2862 [ 239.098892][T16452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16452 comm=syz.0.2862 [ 239.103883][T16452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16452 comm=syz.0.2862 [ 239.109162][T16452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16452 comm=syz.0.2862 [ 239.114065][T16452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16452 comm=syz.0.2862 [ 239.119574][T16452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16452 comm=syz.0.2862 [ 239.218960][T16472] netlink: 'syz.2.2865': attribute type 12 has an invalid length. [ 239.221646][T16472] __nla_validate_parse: 1 callbacks suppressed [ 239.221655][T16472] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2865'. [ 239.224904][T16475] loop6: detected capacity change from 0 to 7 [ 239.230874][T16475] Dev loop6: unable to read RDB block 7 [ 239.233189][T16475] loop6: unable to read partition table [ 239.237375][T16475] loop6: partition table beyond EOD, truncated [ 239.242023][T16475] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 239.505374][T16486] loop7: detected capacity change from 0 to 7 [ 239.549740][T16486] Dev loop7: unable to read RDB block 7 [ 239.551518][T16486] loop7: unable to read partition table [ 239.553322][T16486] loop7: partition table beyond EOD, truncated [ 239.555471][T16486] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 239.566029][T16486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.709053][T16506] tipc: Enabled bearer , priority 10 [ 239.881067][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 239.881079][ T40] audit: type=1400 audit(239.785:1330): avc: denied { ioctl } for pid=16512 comm="syz.2.2876" path="socket:[76597]" dev="sockfs" ino=76597 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 239.910924][T16518] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2878'. [ 239.956146][T16525] 9pnet_virtio: no channels available for device syz [ 239.963118][ T40] audit: type=1400 audit(239.865:1331): avc: denied { ioctl } for pid=16524 comm="syz.2.2880" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 239.975928][ T40] audit: type=1400 audit(239.865:1332): avc: denied { set_context_mgr } for pid=16524 comm="syz.2.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 240.001496][T16529] 9pnet_virtio: no channels available for device syz [ 240.084583][T16546] program syz.0.2886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.089858][ T40] audit: type=1400 audit(239.995:1333): avc: denied { create } for pid=16544 comm="syz.0.2886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 240.136964][T16548] fuse: Unknown parameter '6w@r#aF?򱇇weaJNZ0>2X`Zt }:w' [ 240.155834][ T40] audit: type=1400 audit(240.065:1334): avc: denied { map } for pid=16549 comm="syz.3.2889" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 240.199478][ T40] audit: type=1400 audit(240.105:1335): avc: denied { map } for pid=16551 comm="syz.2.2887" path="/dev/sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 240.208502][ T40] audit: type=1400 audit(240.105:1336): avc: denied { read } for pid=16551 comm="syz.2.2887" name="usbmon9" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 240.219842][ T40] audit: type=1400 audit(240.105:1337): avc: denied { open } for pid=16551 comm="syz.2.2887" path="/dev/usbmon9" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 240.256556][T16562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2891'. [ 240.294136][ T40] audit: type=1400 audit(240.195:1338): avc: denied { write } for pid=16552 comm="syz.0.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 240.297627][T16563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2890'. [ 240.552310][T16587] /dev/sg0: Can't lookup blockdev [ 240.597928][ T40] audit: type=1400 audit(240.505:1339): avc: denied { getopt } for pid=16589 comm="syz.3.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 240.634075][T16592] vxcan1 speed is unknown, defaulting to 1000 [ 240.639283][T16592] vxcan1 speed is unknown, defaulting to 1000 [ 240.641767][T16592] vxcan1 speed is unknown, defaulting to 1000 [ 240.728749][T16592] infiniband syz2: set active [ 240.730896][T16592] infiniband syz2: added vxcan1 [ 240.731813][ T8332] vxcan1 speed is unknown, defaulting to 1000 [ 240.758432][T16592] RDS/IB: syz2: added [ 240.760756][T16592] smc: adding ib device syz2 with port count 1 [ 240.763529][T16592] smc: ib device syz2 port 1 has pnetid [ 240.768603][T16592] vxcan1 speed is unknown, defaulting to 1000 [ 240.774840][ T6034] vxcan1 speed is unknown, defaulting to 1000 [ 240.899454][T16592] vxcan1 speed is unknown, defaulting to 1000 [ 241.000951][T16592] vxcan1 speed is unknown, defaulting to 1000 [ 241.110247][T16592] vxcan1 speed is unknown, defaulting to 1000 [ 241.192667][T16592] vxcan1 speed is unknown, defaulting to 1000 [ 241.273198][T16592] vxcan1 speed is unknown, defaulting to 1000 [ 241.387611][T16592] vxcan1 speed is unknown, defaulting to 1000 [ 241.496068][T16592] vxcan1 speed is unknown, defaulting to 1000 [ 241.603001][T16592] vxcan1 speed is unknown, defaulting to 1000 [ 241.736070][T16632] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 241.740426][T16632] SELinux: failed to load policy Connection to localhost closed by remote host. [ 241.983428][T14780] vhci_hcd: connection reset by peer [ 241.983697][T14783] vhci_hcd: connection closed [ 241.991233][ T6995] vhci_hcd: stop threads [ 241.996645][ T6995] vhci_hcd: release socket [ 241.998568][ T6995] vhci_hcd: disconnect device [ 242.001599][ T6995] vhci_hcd: stop threads [ 242.003359][ T6995] vhci_hcd: release socket [ 242.011119][ T6995] vhci_hcd: disconnect device [ 242.074426][ T5721] vhci_hcd: vhci_device speed not set [ 243.350774][ T8084] usb usb42-port1: attempt power cycle [ 243.920125][ T8084] usb usb42-port1: unable to enumerate USB device [ 248.094582][ T12] team0: left promiscuous mode [ 248.096525][ T12] team_slave_0: left promiscuous mode [ 248.098662][ T12] team_slave_1: left promiscuous mode [ 255.500757][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.503460][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 VM DIAGNOSIS: 16:39:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000000272711 RBX=0000000000000000 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52d29 RDI=ffffffff8c163380 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005582efc46be0 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000002300 Opmask03=0000000000000000 Opmask04=00000000fffffeff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 31459e1e25e14682 e08506892d85625b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a096fa7f39d4248a fd144752e771d989 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3846719bd29cbe10 ccef448b9e8d9f97 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e725ce7c9ec8163f 26e3a377aca53199 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7378faf09dfe60d1 3e6da22d518f0e9c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f1bbce8eb1126306 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54e83c4891ad6d2 3e303e8aeeae5b6b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 792fa46c00000000 dcd24e2ee024a94c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 84b567d2570a668d 28d8bd214b0e868a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 84d1fcd2afaac085 9f420efed425ed1c ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636f732065736165 6c6572203a646368 5f69636876205d35 39393654205b5d00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6365732065736165 6665722030646362 5563636276205735 3333365420515700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3174726f702d3234 6273752062737520 5d3438303854205b 5d3532313032392e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d7265702074656b 636f735f676c613d 7373616c63742074 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6d64617379733a 725f6d6461737973 3a746f6f723d7478 65746e6f63742074 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6d64617379733a 725f6d6461737973 3a746f6f723d7478 65746e6f63732022 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303039322e332e7a 7973223d6d6d6f63 2039383536313d64 69702020726f6620 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865746e6f637320 3536373d6f6e6920 227366706d747665 64223d7665642022 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000020b52b RBX=0000000000000001 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52d29 RDI=ffffffff8c163380 RBP=ffffed1003bd2488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801de92440 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005582efc46be0 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcfeffc8 Opmask01=000000000000003f Opmask02=000000000101003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f658b771e29299d8 aaa934cb3200d436 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c83605128d0cd1b3 40efeb1f6237f247 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 82942e0c37f54bc1 363b50524f11028a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3c5dd40fa7302f0d 2599b92347f3d2b6 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e4523d323eb4606b 34a1780bf0064420 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ea64f78adfe7fa0b 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d2a3c18edbe51d48 39ebc051a4d328cc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b353493f00000000 396bc406b064b3da ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fef1139de73c7fbd 0d9dec6a1f440604 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6bfd9576779639dd 1e5d4c398e013728 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030306231303030 3030303230786c77 003800303d73656d 616e66692e74656e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000d0d5f0c0d0d0d 0d0d0d0f0d45514a 0005000d004e5850 5c535b5413495853 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6474656e0002000f 0000006d69737665 6474656e0001000e 803e002c0000006d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8041000400000003 000300080000326d 697376656474656e 0002000f0000006d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697376656474656e 0001000e803e002c 0000006d69737665 6474656e0039000e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000326d69737665 6474656e0038000f 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e002400000000 0008000500000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000022817d RBX=0000000000000002 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52d29 RDI=ffffffff8c163380 RBP=ffffed1003bd2910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801de94880 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005582efc46be0 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000002aeefff0 Opmask01=0000000000000007 Opmask02=00000000d3010007 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7ddd8bfa4ae10293 85d522ad85c5d615 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9666a2624f514efd 5e3736aa80374101 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1ca6e275dbc6e003 421f87bb3f7a1e71 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 35c94b1ab2ea18f7 241c4b72901e3e40 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c8de757fbbd10a2e 9fd222e38cc12fb1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc4ece04a2ba8d36 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a3b732f36503468f adc08b03aef3f5a3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ecd3e27100000000 6cfacfe61e9b37f9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b4a3edae3cb535e7 56db9fd2ea951fa9 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c7ff8b88defc972c cb11e979b24458dc ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6120676e69746963 696c6f73203a7325 0000000000000000 73646e6f63657320 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4405424b4c514c46 4c494a56051f5600 0000000000000000 56414b4a46405605 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3701013563538263 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6130010001005f00 0000ff133ddc0302 39773b3a3633211c 1a0f0c060379010e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0101910101740050 de528ead34827e94 6130010001005f00 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff133ddc0302 39773b3a3633211c 1a0f0c060379010e 3701013563538263 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001d1545 RBX=0000000000000003 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52d29 RDI=ffffffff8c163380 RBP=ffffed1003c55000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2a8000 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005582efc46be0 CR3=000000004fcea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000004000010015 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000001100010015 0000000900000050 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000600000048 0000000000000006 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 00001fff01000045 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000f00000054 0000000000000050 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000c 0000000400000024 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004400010015 0000000200000048 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6168730073257325 7325204650420050 5241006e65706f5f 667062203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6474656e0002000f 0000006d69737665 6474656e0001000e 803e002c0000006d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8041000400000003 000300080000366d 697376656474656e 0002000f0000006d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697376656474656e 0001000e803e002c 0000006d69737665 6474656e0039000e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000366d69737665 6474656e0038000f 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e002400000000 0008000500000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000