last executing test programs: 3m0.137307914s ago: executing program 1 (id=434): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) (async, rerun: 32) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x43403d05, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00000069703665728c70616e0000001400028008000400000000200600020030000000"], 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc000) (async, rerun: 64) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) (async, rerun: 32) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x402, 0x4, 0x32315852, 0x2, 0x6, 0x46, 0x2, 0x3, 0x1, 0x7, 0x0, 0x7}}) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x4000) 3m0.079494411s ago: executing program 1 (id=435): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$sndseq(r1, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {0x6}, @addr={0x7, 0x3}}, {0xd, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0xc}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x3, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 3m0.078788556s ago: executing program 1 (id=437): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x4, 0x70bd25, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x1, 0x0, 0xc, 0x1}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x2400c840) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$rose(0xffffffffffffffff, 0x104, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001000000050008000000000006"], 0x7c}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)) read$dsp(r5, &(0x7f0000000440)=""/171, 0xab) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 2m59.808902871s ago: executing program 1 (id=441): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={0x3}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0x4004550d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x0, 0x20000820}, 0x890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{}], 0x1}, 0x24044880) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001014010029bd70000300000000000000010000000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0xc0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file2\x00', &(0x7f0000000140), 0x10000, &(0x7f0000000380)={[{@volatile}, {@nfs_export_on}, {@nfs_export_on}, {@redirect_dir_nofollow}, {@redirect_dir_follow}, {@redirect_dir_on}, {@verity_on}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@local}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000400)=0x7ff, 0x4) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r4, 0x7ac, &(0x7f0000000bc0)={0x0, 0x0, 0x9}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r6) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)={0x14, 0x0, 0x111, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0xfb, 0x3d, 0x0, 0x5, "a78286ff0bb71d71c908d1a5dbe98116", "16baacc335a2d61a67fd586bde164d04ec71571a4e1d3b757cb558830bcbc31d95a0e6c45e104b1b"}, 0x3d, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x80024, 0x0) 2m59.747728769s ago: executing program 1 (id=444): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x20000001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095", @ANYRES32=0x0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000100)=ANY=[@ANYRES64], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x80) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000280)='./file0\x00') rename(&(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$security_evm(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240), &(0x7f00000003c0)=@v2={0x5, 0x3, 0x15, 0x5}, 0x9, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m55.396544196s ago: executing program 1 (id=490): r0 = socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x2b, 0x3, 0x4, 0x8, @dev={0xfe, 0x80, '\x00', 0xe}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8041, 0x80, 0x80000001, 0xfffffffa}}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={r1, @remote, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xc) (async) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x1}, @hci={0x1f, 0x2, 0x4}, @xdp={0x2c, 0x9, r1, 0x20}, 0x1, 0x0, 0x0, 0x0, 0xaa, &(0x7f0000000100)='nr0\x00', 0x2, 0x9, 0xfeff}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xbe}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(r5) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000003c0)={0x0, @broadcast}, &(0x7f0000000400)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x134, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000600)={'tunl0\x00', r1, 0x20, 0x1, 0xffffff7f, 0x2, {{0x34, 0x4, 0x0, 0x1c, 0xd0, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @remote, {[@lsrr={0x83, 0x17, 0x77, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010102, @remote]}, @timestamp_prespec={0x44, 0x3c, 0x95, 0x3, 0xf, [{@broadcast, 0x1a2962f0}, {@multicast1, 0x4}, {@multicast2, 0x10}, {@private=0xa010100, 0x3}, {@private=0xa010100, 0x80}, {@loopback}, {@empty}]}, @timestamp={0x44, 0x8, 0x20, 0x0, 0x7, [0x7]}, @timestamp_prespec={0x44, 0x24, 0x9, 0x3, 0x3, [{@loopback, 0x1}, {@broadcast, 0x40}, {@local, 0x1}, {@local, 0x4}]}, @ssrr={0x89, 0xf, 0xfa, [@rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x94, 0xb, "3315546cdcac31343f"}, @rr={0x7, 0x23, 0xe4, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @empty, @empty, @empty, @empty]}]}}}}}) fcntl$getown(r5, 0x9) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10010, r0, 0x2ab8d000) (async) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x19c, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x433c652ab066547f}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24040000}, 0x10040851) (async) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000a00)={0x0, 0xf6, "2ad78ea5e16c93b0bc87b4fd40fde16eb789c784b8acd609522eb2cf2303db953c455ffbb1d6ac9626c8ae5008b5afaf83eb79032927fc9d2de9504fc66fd97f07e7d74ef23604b5078c13d388d025520c5f7b91c226e2421a04cf13876e98a81ff70880bcec33891cea407ad1ec223e37fc839b5a3324631e58368ae6d327c7dcfc295a3809f75c1a56da3cf010026a1589a929f4aef1bb4213c7fca8642faac5b813752a2ce144bd711a1c5b276ee7d31be1aeee5377950248525e04e2882b18ed3e6d8404aab2e6911846f018ebad4a64fcc76759a1f6570dc8a9ef0fc4b62069aa757424b8203730d8b5f573232038a1e5b9d1be"}, &(0x7f0000000b00)=0xfe) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000b40)={r11, 0x3093}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCSFLAGS(r10, 0x40047459, &(0x7f0000000b80)=0x422012) (async) ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f0000000bc0)=0x1) (async) bind$inet(r10, &(0x7f0000000c00)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) (async) ioctl$SNDRV_PCM_IOCTL_PAUSE(r10, 0x40044145, &(0x7f0000000c40)=0x7) (async) recvmsg$qrtr(r10, &(0x7f0000002f00)={&(0x7f0000000c80), 0xc, &(0x7f0000000d80)=[{&(0x7f0000000cc0)=""/183, 0xb7}], 0x1, &(0x7f0000000dc0)=[{0x1010, 0x0, 0x0, ""/4096}, {0xf8, 0x0, 0x0, ""/231}, {0x1010, 0x0, 0x0, ""/4096}], 0x2118}, 0x38, 0x0) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000002f40)={0x4, [0x7f, 0x3, 0x3, 0x2]}, &(0x7f0000002f80)=0xc) read$sequencer(r10, &(0x7f0000002fc0)=""/136, 0x88) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000003080)=0x401) 2m55.323987162s ago: executing program 32 (id=490): r0 = socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x2b, 0x3, 0x4, 0x8, @dev={0xfe, 0x80, '\x00', 0xe}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8041, 0x80, 0x80000001, 0xfffffffa}}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={r1, @remote, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xc) (async) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x1}, @hci={0x1f, 0x2, 0x4}, @xdp={0x2c, 0x9, r1, 0x20}, 0x1, 0x0, 0x0, 0x0, 0xaa, &(0x7f0000000100)='nr0\x00', 0x2, 0x9, 0xfeff}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xbe}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(r5) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000003c0)={0x0, @broadcast}, &(0x7f0000000400)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x134, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000600)={'tunl0\x00', r1, 0x20, 0x1, 0xffffff7f, 0x2, {{0x34, 0x4, 0x0, 0x1c, 0xd0, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @remote, {[@lsrr={0x83, 0x17, 0x77, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010102, @remote]}, @timestamp_prespec={0x44, 0x3c, 0x95, 0x3, 0xf, [{@broadcast, 0x1a2962f0}, {@multicast1, 0x4}, {@multicast2, 0x10}, {@private=0xa010100, 0x3}, {@private=0xa010100, 0x80}, {@loopback}, {@empty}]}, @timestamp={0x44, 0x8, 0x20, 0x0, 0x7, [0x7]}, @timestamp_prespec={0x44, 0x24, 0x9, 0x3, 0x3, [{@loopback, 0x1}, {@broadcast, 0x40}, {@local, 0x1}, {@local, 0x4}]}, @ssrr={0x89, 0xf, 0xfa, [@rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x94, 0xb, "3315546cdcac31343f"}, @rr={0x7, 0x23, 0xe4, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @empty, @empty, @empty, @empty]}]}}}}}) fcntl$getown(r5, 0x9) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10010, r0, 0x2ab8d000) (async) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x19c, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x433c652ab066547f}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x24040000}, 0x10040851) (async) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000a00)={0x0, 0xf6, "2ad78ea5e16c93b0bc87b4fd40fde16eb789c784b8acd609522eb2cf2303db953c455ffbb1d6ac9626c8ae5008b5afaf83eb79032927fc9d2de9504fc66fd97f07e7d74ef23604b5078c13d388d025520c5f7b91c226e2421a04cf13876e98a81ff70880bcec33891cea407ad1ec223e37fc839b5a3324631e58368ae6d327c7dcfc295a3809f75c1a56da3cf010026a1589a929f4aef1bb4213c7fca8642faac5b813752a2ce144bd711a1c5b276ee7d31be1aeee5377950248525e04e2882b18ed3e6d8404aab2e6911846f018ebad4a64fcc76759a1f6570dc8a9ef0fc4b62069aa757424b8203730d8b5f573232038a1e5b9d1be"}, &(0x7f0000000b00)=0xfe) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000b40)={r11, 0x3093}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCSFLAGS(r10, 0x40047459, &(0x7f0000000b80)=0x422012) (async) ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f0000000bc0)=0x1) (async) bind$inet(r10, &(0x7f0000000c00)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) (async) ioctl$SNDRV_PCM_IOCTL_PAUSE(r10, 0x40044145, &(0x7f0000000c40)=0x7) (async) recvmsg$qrtr(r10, &(0x7f0000002f00)={&(0x7f0000000c80), 0xc, &(0x7f0000000d80)=[{&(0x7f0000000cc0)=""/183, 0xb7}], 0x1, &(0x7f0000000dc0)=[{0x1010, 0x0, 0x0, ""/4096}, {0xf8, 0x0, 0x0, ""/231}, {0x1010, 0x0, 0x0, ""/4096}], 0x2118}, 0x38, 0x0) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000002f40)={0x4, [0x7f, 0x3, 0x3, 0x2]}, &(0x7f0000002f80)=0xc) read$sequencer(r10, &(0x7f0000002fc0)=""/136, 0x88) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000003080)=0x401) 2m24.948514586s ago: executing program 2 (id=957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a0e3a000000000a0000010900010073797a31000000001c000480180001800d00010073796e70726f7879000000000400028009020000000000000000000014000000080a0102000000000000000001000004140000001100010000000000000000000100000a7486d168b8f6ef49acc5e13ae3e53d533b19631327691d44192c3e433945f046d5db75e5f4ed83b74f16314ee08f38242b75a152239375db856207"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 2m24.948270074s ago: executing program 2 (id=958): r0 = socket$inet6(0xa, 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r2, 0x200}], 0x1, 0xdb3) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)) (async) shutdown(r4, 0x0) (async) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x101) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)={0x2000200b}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000640)=0x6d93, 0x4) (async) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4f03, 0x41d, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x17}, 0x2004c0c1) 2m24.854048536s ago: executing program 2 (id=960): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001600)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000600)="ef3d2b2ab3", 0x5}, 0x68) socket(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x62881, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x2000000, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x5102f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m24.844740953s ago: executing program 2 (id=963): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000300), &(0x7f00000004c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) chdir(&(0x7f0000000180)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m24.748130328s ago: executing program 2 (id=964): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000002400010329bd7000ffdbdf251f000000188bb74937a9150c78fd427fe732ac88df489a12250b912810336621ed0bc4f8c2022164f53bf98c00de993b1c87442dbaf55e3af9943d0bc5027f3f297b05a6cdf9dcb02c43330273cf394b01c58d75a3ccc743e68ef0a27b549678"], 0x14}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x5, 0x3, 0x1f, 0x19, "b142d31d60c353d9c5dae3d88c04aac2484939b27c2c66bf87342a265c4573ce39be8ca941145539985a7a9adc7910b9863d472c053b9fedce22ceafc80693eb", "a9a6bd8eac2d4eaabae3f3bd2a6d5c23f3ac82d466edbafb071d7101c208dd3f", [0xf77d, 0x9]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) landlock_restrict_self(r2, 0x4) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ff070000780000001400040073797a6b616c6c65723000000000000008000500070000000a0018000303030303030000b144ba76"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) removexattr(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000040)=@known='user.syz\x00') fstat(r2, &(0x7f0000000140)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 2m24.677867624s ago: executing program 2 (id=967): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xfffffffffffffcaa}, {0xc}}}]}]}, 0xe94}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m13.657106687s ago: executing program 0 (id=1147): truncate(&(0x7f0000000100)='./file0\x00', 0x8762) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x15, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x240448d4}, 0x200088c0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) fcntl$addseals(r0, 0x409, 0xb) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) open_by_handle_at(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1cc20000004e000000090000000000000009dd00000000000007000000f5ff0000125a0000"], 0x1110a0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB]) 2m13.656814035s ago: executing program 0 (id=1148): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x5) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xc0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r3], 0x44}}, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m13.478807073s ago: executing program 0 (id=1150): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x0, 0xfe01, 0x0, 0x0, 0x0, "f6a6946c9832508c"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0x3d51c, 0x0, 0x2d, 0x9, 0x1a, "0012412d08d500201e850a21077b0a00e0edff"}) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0x3d51c, 0x0, 0x2d, 0x9, 0x1a, "0012412d08d500201e850a21077b0a00e0edff"}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000040)=0xd) (async) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000040)=0xd) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000500)={0x9, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a4a2297653ac0c62201010000881a8789adddd1ca89ebd8632972a4f65ad1505ed06b6785508eb1dee994d18b084ef189ce72b079ed03ef849c46e3dedf604c01fae7c32f782dd9a45993a0798444d6ba181f2546b88893bf12575b27c1af55a55c55ca8855d5dc89db3e110430d10f429cc423ff64acc9fdb59a76caf809", 0xa4}], 0x1) (async) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a4a2297653ac0c62201010000881a8789adddd1ca89ebd8632972a4f65ad1505ed06b6785508eb1dee994d18b084ef189ce72b079ed03ef849c46e3dedf604c01fae7c32f782dd9a45993a0798444d6ba181f2546b88893bf12575b27c1af55a55c55ca8855d5dc89db3e110430d10f429cc423ff64acc9fdb59a76caf809", 0xa4}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m13.318212407s ago: executing program 0 (id=1153): r0 = creat(0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000380)='./file1\x00') mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x52}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) r6 = memfd_secret(0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace(0x420e, r7) stat(&(0x7f0000001a80)='./file1/../file0\x00', &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r5, &(0x7f0000001b40)='./bus\x00', 0x2000, 0x20, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001d40)=[{{&(0x7f00000001c0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000280)="b19feb705e6a3bdb04b910c670d1e01fff75d1a239679c5452904f5e6d7c2e04e987f504a87f178cbb049ecd34c37595e7f5da71ced98f24caa1b319ee7800b3970a0f53fbe13a2258f4cd5855e9558b6662f72d3286", 0x56}, {&(0x7f0000000100)="60a6b584683912867c6c35da428646ef06b606287b8735b154c212e235e97128861b1fb0b441f7d4ecfd216becb5ab539d53d58a", 0x34}, {&(0x7f0000000440)="a1bdc8a797f043516b95d531c55c84bc39492866e8410fb0d831bf6a58", 0x1d}, {&(0x7f0000000580)="066a5b403ff2b4b2b0361a3e4c55a8ad709f4f1e73e11b9f4db0a06c415f3628dac6d96f0162cfd920d582e8a819d3a62a0b54e3d6e46bd0a5871d164abf96c4a3b464526cc2c7989c4598dc4c601fd651d7ea00ab8001f80f7cb8fc64cac620f38a9392560aa94cb7ea193e49aa21e4a7a5058d3dac437c80f0738c81e50e6363b79ce2ff5e21327c9c3ead4a6a99e757c14046d52ae1cad773615f9cb7ccb856", 0xa1}, {&(0x7f0000000640)="139584c23e7d6d595665011b253bd81a44497d17ee9be6c6aa367a3df0f5dc9415e77f51bff5333693df1bb7be965a4fa63b70c0f253bcf8ae7603548636b0d930b4d693efa00ee5a390de9c41be709bb5c39e48451a0c4c7701b3c761069a06ba16a75d20601606c22b28d388ad5b6b86d9bec4d055afd98c9b7313b9723e9eeed71ee0aa51915687aba29daba17eb01966716572ae3bbf8c832120f371", 0x9e}, {&(0x7f0000000700)="347cd7e62ed5c409ff61f2faddea702e4a871fa1d332a9f1b70732922d681c848ba51cfb64492b740634137b9bf4cc6b1f088964cdac70ffcb2f614b175adf2249fffb88", 0x44}, {&(0x7f0000000840)="5692b427230cd4e4da0cd2c4c9bfec3658388e33296f8cc6f5f90773618a7d80962f0d7e57413355094e70887b4f44de2a36840191f7dd1181e09ed0a73efa5443d93a64c4e6f985142c743b565ec267f9097403ac98082928365f3a62a66caa71af299b5e968aabba6ad62f87bdf964cff81c45fe38eca2228544d2a8ebd090b4b0143944ce3b7549405d9764d6673f824a60da284bbf3da16f", 0x9a}, {&(0x7f0000000900)="eb745f8ece924700b793aa8ba382727dfe261bf8aac8445a744816a05db7dcfb48e0011c113f5b691bd86b1a54e45508a5992ed531a0675d551e2963e2fd3855bc127efe996477d2e24bdb", 0x4b}, {&(0x7f00000007c0)="f2cc9cd08b8aaa2e0eda540af62e3bf9285fe7b65589d371596ca0fb30c48e1aa483a61c895aed5758dc", 0x2a}], 0x9, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r3, r2, r3, r3, r5, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r3, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}], 0x98, 0x800}}, {{&(0x7f0000000d80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000e00)="3fe000795b27bbaee4", 0x9}, {&(0x7f0000000e40)="a05d153100b18328e9e69b1d582f5be72c414bc6db72f585d7513d74a82a187dfecda2b591156aaf2423a46f791877dc2dc3d53966cef9dabcdd352a0978f5668f8bccc81bc79f315280965518d75ccd0fbea5ab27fa90680496299be4f6a8f7a8a23c16bbf4531bc83ed27ccd1fe84d825e", 0x72}, {&(0x7f0000000ec0)="645baaf02b8d0cec521276045b0a9caed4419aca6d91e6a4e2aaae9c6b4124a643ed1f1c2f5dfaa7c2358400aec8e92be24c7256194623bdaa8e8cb25ecb3b5267d7d22170688bf2753748d5b522d8035ca9c3e7342d3f95dd1ebb149dd518c78b54a7eed5f283717fd669265be83387baeaa8aa2cb161e964daf76e6cccdfee97a158366c56a51fe177eae269e14ca0d1376b7e4686d123c67d044c940e", 0x9e}, {&(0x7f0000000f80)="38699f1a241e9cdf368ecb326f25cca958a9e0c3923431ddc0d029f4d6d3fa92c9ccdb80e8338ec78eb94239156c17ce785e94a57ba1f50b3b5b81e80d3ec440c37d0a9fffbff1f0b33b474604d7f373b03fdeb3e4e8b99b21487b2809c18db7d898903476f24b98a95f751a48eeed1c036dc92b642064aef1d9d8b9f24be2e1ffd473fe2a4661fd582e051ce16d3b2b76b03631f37bc87116f03ca269e506d50e92a44ddd20165f59c21ac0f666fcc104b5cfd4364e251a22f7b78876d88dae61c04209ad26270d441e5f79f6645126e5173f9c28", 0xd5}, {&(0x7f0000001080)="e623c895ffc49cfdea41ea4f389787c99061818634c095acc1d5c468e0dde2d0e36dca75f65840126b1c91a225cf6d88d7241f71f5c9fb0a40da5ecea990637f7b792ff697d4bdf826b6375803cde247fe993336e71db260b50be784cbfe369cf02c324d42554c1848d4855053601b027ddcb996190ef04768ad64a5bc58ee4dd8e07c920cdf4ae8f988901b278c13d11820151ddd", 0x95}, {&(0x7f0000001140)="67fcbc34a4f00ac274d7234a54aebde6f6bf4aff556d995a148065a4810e12811252540954431ebecb67edaac70867cb937a465fccd7727168bf9278b825da5af0d7d077c9aa3fffaddc2001cc95ca586cf4e05de022a038912653c12425accf482b2ed4f05209d2bce189a19e9da83f4602469d97d0800219e6d2917f2aa7e96f405a3172f542155643bf4cc186276d7ee2462df4d3521918b923ec4ef9b4e9d55251bfe2baac8c43ecc1f489bc554fb22fb051521a0f39e9a1d418291e8ea8a0d0e3e9baed32bc3f6c050016d6b553b8ec773d2aebdfad86d396149ae2268383c61a0b2277269807ca70c78b48e429b108c788c4593825", 0xf8}, {&(0x7f0000001240)="ecb8d889a292d94c23505969d3a14214ecf0d8", 0x13}, {&(0x7f0000001280)="427da46832b7997cb61038b76b7d36448b65c6a04b79d5b5956973e3454ed6ff1cf154c84534d1f912adf282ba7c180b722d2b48867394b9e3e79c3946dcb2f2810c47691542e95f22f668f0b9b1cdc53620447e45d092116ae0450c0606aba4bc2a591b514f6101c2fd6b0edac81eef7d343a195f4197f356883c7785ffb57b148d375189559cd87004b6b2be482c224eb77c7c1aed7510cf4199c4dba816aa185cfee60ac8f0aba366b859dae33b67f2cbd80f1fb0f55db237d3dcc51b78e98b1f1b81", 0xc4}, {&(0x7f0000001480)="1ec0f33ac0ac8276297d55581a0cbbc31b51498c6cdbf491a014693fdb9000febd263b6691875225040fd7701927d9b39e0b99aac175d1af59c9314ff132a1676dd579fc09a238e3acabc749a29ecfa7c6af04538d0383c50acadbb926bb4ef6b16e2c8381d48db78363c2aeacb7930cb276a5bad1cca375a19c8d55b75c588bb4cf01c538103f44afaeb5b03774d8b7c0826d4a17ad9fa78d103576b2179fe512770e61531f8818fef8c57e9c39101ac8ee6cc47376a65c9836dd01128bd0a95686cf", 0xc3}], 0x9, &(0x7f0000001700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r0, r5, r5, r0, 0xffffffffffffffff, 0xffffffffffffffff, r6, r0]}}], 0x70, 0x41}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001780)="e9fb7fe64315d36a5d3af0453319c93614867f9c268543f37f13af766f5324cc4ac0c6e91d5cb013f29d0868554f30c62647556a095df7d3632e85e023753d22f3773f45cca4d7", 0x47}, {&(0x7f0000001800)="efcd437909eff692f39cc0f8dd3d057ff7b63ea62d0bb4cd79a7c28ca7e5ebf20233296c322fb30aed345b1db522185e4e9a51dde1d3b425a640126bbadfa586ca00c257392775854008c85c8296c104546142fe528038755eefe0b3903115872110c544dc730227b30973c57dfff8a1af0355ba31416c70aa0cd977cf794804205f7272664d93139f561dbdc56a37be40e538191efc21282f", 0x99}, {&(0x7f00000018c0)="9f360e8fca4fc68009c8d989aebc68c07b3737536859cc75b4dbeb68b884c79502058facf1c83e6884b2abc38b40b822e0edbb55971647b2512cc024246c8dc57cb65777f032c73fae4f562fcc5c7b4186be2a05d9404b7452c00e26fc05890e4177ca6e32fe1f2ff9fd58b6d2178dbb95da91bee0d071c4497638414be88c3472cde68b98a12dfd0fe23abd0a0827c3f591b9", 0x93}, {&(0x7f00000015c0)="23650ae4a5287736e5cdf351727871f2b748a55e1987c3", 0x17}, {&(0x7f0000001980)="1cd96f9d7fcfcc9970366696500698dde6c977a751a37e11380f5042062a877490f61afa649125206b4f203123f160c4942384e360d60a64d7b4cff541c91f41977d06c74fee4680e33a523def0db9879cd0689618f15aae2e750b6bf9545d4fe4bc53ab4ec32b48", 0x68}], 0x5, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x24, 0x1, 0x1, [r0, r10, r1, r0, r0]}}], 0x48, 0x800}}], 0x3, 0x20000011) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r11 = syz_open_dev$evdev(&(0x7f0000001400), 0x1, 0x2001) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000004c0)={[0x7, 0x418, 0x0, 0x7, 0x3, 0x5, 0x2, 0x9, 0x3, 0x5, 0x4, 0x5, 0x40000000000, 0xffffffffffff77b6, 0x5, 0x4191], 0x10000, 0x300002}) ioctl$EVIOCGPROP(r11, 0x80404509, &(0x7f0000001440)=""/1) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r12, &(0x7f0000000040)=0x1c9, 0x3f) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x8d7}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)='\a', 0x1}], 0x1}, 0x4048043) 2m13.226698174s ago: executing program 0 (id=1154): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="043e110bb4"], 0x14) fanotify_init(0xf00, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80, 0x2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r6, &(0x7f0000000180)='blkio.bfq.io_queued\x00', 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x4196, 0x3, 0x6, 0x1}}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) 2m12.797715848s ago: executing program 0 (id=1156): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x13d, 0x9}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x80000000, 0x100) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000480)={0x2, [[0x7, 0x0, 0xfffffffe, 0x4, 0x84, 0x6, 0x8, 0x4], [0x9, 0x3ff, 0xfffff30c, 0x80000000, 0x8, 0x5, 0x82, 0x7], [0x7, 0x40, 0x7, 0x3, 0x7, 0xfff, 0x2, 0xe527]], '\x00', [{0x0, 0x7, 0x1, 0x1, 0x1}, {0xe876, 0x0, 0x1}, {0x9204, 0x6909ac90, 0x1, 0x1, 0x1}, {0xc5b, 0xff, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x2715016c, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x5, 0x0, 0x1, 0x1}, {0x3, 0x7fffffff, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x6, 0x5e0b, 0x1, 0x1}, {0x5, 0xf, 0x1, 0x0, 0x0, 0x1}, {0xfffff800, 0x62d, 0x0, 0x0, 0x0, 0x1}], '\x00', 0x4}) fchmod(r0, 0x128) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40820, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000180)=0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xb}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @remote}}}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x18, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0xa4}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 2m12.759831434s ago: executing program 33 (id=1156): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x13d, 0x9}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x80000000, 0x100) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000480)={0x2, [[0x7, 0x0, 0xfffffffe, 0x4, 0x84, 0x6, 0x8, 0x4], [0x9, 0x3ff, 0xfffff30c, 0x80000000, 0x8, 0x5, 0x82, 0x7], [0x7, 0x40, 0x7, 0x3, 0x7, 0xfff, 0x2, 0xe527]], '\x00', [{0x0, 0x7, 0x1, 0x1, 0x1}, {0xe876, 0x0, 0x1}, {0x9204, 0x6909ac90, 0x1, 0x1, 0x1}, {0xc5b, 0xff, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x2715016c, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x5, 0x0, 0x1, 0x1}, {0x3, 0x7fffffff, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x6, 0x5e0b, 0x1, 0x1}, {0x5, 0xf, 0x1, 0x0, 0x0, 0x1}, {0xfffff800, 0x62d, 0x0, 0x0, 0x0, 0x1}], '\x00', 0x4}) fchmod(r0, 0x128) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40820, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000180)=0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xb}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @remote}}}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x18, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0xa4}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 2m9.652923512s ago: executing program 34 (id=967): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xfffffffffffffcaa}, {0xc}}}]}]}, 0xe94}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.114232374s ago: executing program 4 (id=2805): pwritev2(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000140)="3467eb5ca3d62a7d7f4e1c7d5a6871c2e11ee51552dffd8ed91be1485429a3d4f6fbd327ce10a5e6066e7c1fd2d9bb1f530504e2eaa9bda5237e5452a5f1c13a48d252411b4bb222ad3c37b4e7ab199b7cd9843001aaa7f22c02b3fd6915f9c284b210cb671d7963d0c501ef59e13d992cdf41ce4eed09d0f677513766e6501e62c5dc25b7373683c9173575342d071b7ebd8e43d4a64b0389a6c583523048b92a2bc31074288900f1509ca81df1c9b3f59673d6872082251ad2d9b90272438e933b82f63d0b21566f378f3c6f30d64cec1ffd1bbc3c70a4c83d658ee88b87dbe201e7d6d51e15e5548d495b8d3054b6f30d5b6f664523", 0xf7}, {&(0x7f0000000240)="44bd0395f08e07bf0056954176416084e8f5a6a2abe6f2f53a8187abfc56d01d8525bb7a91de743f0a6dab561030cf83892fee8c2511405e02cc6ef366361069556df4ca6e3cd52aa648f0c9c836364a89414dd436ac7777241e8deed62ae81e82937144b7fcb81f3893b8b996d10b06ed5199a323c4d84e99ccc88d0b49f11b39aea01e7df86cb66651c7442a9836d78193aa5d95b80ff7c5508096440256af3f9651ebb0bd91560bfd961a14920ab64529406fc2dd", 0xb6}, {&(0x7f0000000300)="2885f73de26bbb231a1d5b721586d13f880acac1c36d4df17b870aa3233a6a96224e393ccea493672205513bcc34ff0be83e4398adeb04e5b94df388083d6bc3e6af9fe43322c2ad52c44be0f78882b3bf2568474a779fe25c83f15e6818c683bf6fa9896b2a3734b8c116881d60896c5ba7da25f8b70b24fdf371768e3372e7e1986fc209d2250a6f35e35acb40e238720e5b50ab9fcb69de652cc34c91", 0x9e}, {&(0x7f00000003c0)="ce64edef08c4b4e340becb6b1463d4c8f4b7735578059cdcfbe25b3dd1fd709851fa84e94d178b2927856b98de8b6239e19c33b8f13f8d64264e6a872d9715870ca7", 0x42}, {&(0x7f0000000440)="94bdb3ae3f3a32468f8fac0546fe5a0da86daa7cfb5bf59ff4c89f8d75139bb73abe845861d72905e917904d5a85bc06e5da089b500d6cba89c242df8e8a472253", 0x41}], 0x5, 0xa, 0x0, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000180)=0x64, 0x4) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='\xa3X\xbf){P\xbd&\xfa\xd5\xc7\x1a^L\x8c\nc\b\x03\x00\x00\x00\x00\x00\x00\x0018-\xf9\x18\xfb\xb1\xf9\xff\xff\xff\xff\xff\xff\xffN\x8db\xc9\x0fJ\x00d%\xb6wV\"UP\x00-\x1c\xb2\xa2\x17Z\xd7', &(0x7f00000000c0)='\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mincore(&(0x7f0000009000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/68) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.023635785s ago: executing program 4 (id=2810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x1000, 0x4e22, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x4, 0x0, 0x0, 0x6, 0x0, 0x10000000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x34ff, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) setns(r4, 0x24020000) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f0000000140)="f30f0926640f01cbb9090200000f3265360fc7717e660f3815e966b8da000f00d8c4e11f5d3bb9a40a00000f322e260ffbfcc4e259b803", 0x37}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.74460598s ago: executing program 4 (id=2815): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0x2}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 4.63378288s ago: executing program 4 (id=2817): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x27, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @remote, @val, {@llc_tr={0x11, {@llc={0x4, 0x42, 'E', "97eb9a2254c6ab1014101a5aba50"}}}}}, 0x0) (async) r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x7dcc0000) (async) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000001480)=[{0x1, 0xbe11, 0x0, 0x0}], 0x1}) 3.867416137s ago: executing program 3 (id=2824): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x1a) r2 = syz_io_uring_setup(0x887, &(0x7f00000001c0)={0x0, 0x5d2d, 0x1000, 0x1, 0xbfdffffc}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e24, 0x9, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x1, 0xadd, 0x20, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x7889, 0x4, 0x81}}) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="e4858388e9a984d2c86b3719da709ac3c02586783f5d9fe8b7a3831937e0c7e62502464b4cc9489951b231e54ec6a78a3f81a7313b7676ec422e9d8030d0986bb829df24a3a07db702eaa426d3f9db984b3688f80f649feb786ef353319abe81a491a77f6116b92cf8489eab16885b10c7e3c739a9b8858054597ff9eeee80b9fd263159f840e298f47a6e84f2a9c9f806ec2812e6be476355f426a3e105e5ac9bfa748f3d33a51283c0e9ce06d03f9559cd60c5681907191a22", 0xba}], 0x1, &(0x7f0000000180)=[@ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xba}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)="bc37b324e2546bc30994181c0c2f6d3a1cf3fe3963a029641161c06c35b26754b37d65b3f116ce27c753250f64433c1b4d3cecefbb8b6251408f14126345f2108bead462c7bdb31b7d4439393af7e4d847ef6685907998ac3149f4b5c5a3101b6e6e84b69c8ece866d98f57900297fec3901f0bfa5fd881b4da159f850d9d6395068c2f9459404d8b2eb24e9a7cb1f093679d5541910fd030838ebb7431ef89ba80de5365c9e2cd5eda5baef2285859e2bd0453f733810e91758fd", 0xbb}, {&(0x7f00000002c0)="f651451c660a9e1822b024cd", 0xc}, {&(0x7f0000000300)="6e918439726dbef9e2c491f9356c4c08ee5bcf0c096517dba5b178bf44a0556a95cffb25111ed6b31cb1126228d58d2efd50cca3e5395c84f9a2cacfa55fb79a98c83b2a0464be388a", 0x49}, {&(0x7f0000000380)}], 0x4, &(0x7f0000000440)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x604681c1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x48}}, {{&(0x7f00000004c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000600)="f0f11324233a3ec599cabb8bf57c00e86bf4154fc693c3c7bb889694c5e615b35345bc046450a49a1dce9841ea411a4340c27041f06535fe85c8d67ca754a65ed9b2af1e4c3f207989830ca4364addcb19440e522ad85dbc06b98b51f149c4d25f6ea3226d599c3a3f13434e5402335095d02981f6d38dc19c20d306281b31dc64b3231f5ca0deab2c61ef0dbaf87a5f12f79b77191642a3e94fab", 0x9b}, {&(0x7f0000000500)="68f9c2dd85d86b0d2c409d746b115a4b26780137f97a2291c127a28879b169fc25d6beee4ef514009f8fb042e36b5a68b725", 0x32}, {&(0x7f00000006c0)="50958e02558be6caddb664a61bef8cefde0b0a496bd384646661e7b3a596cd5147c6833df8fe620d39564aede409384001c84a05fa4137fbbeafd0e297c4b5c5913f5e5688db2a166e43b31a185c27b14c02eb7517327f912aade2f345218d61b0029db445c481e0fa025677ccab9575eea6a3574cccac902aa1b7b8ea9af400eb0b3cfaabdcdbc49bb849ae23bd29cff8278da01b702137cf8a2a84bbb637b69289f2ea15d2ec458d420ac7d661b03e9805ad701b90238d6bfca11b5a5c", 0xbe}, {&(0x7f0000000540)="0f1b46db3447ae9067b34953354b47033a125bd6a8c20197ce1dd93319cc13ffadbf263c", 0x24}], 0x4, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @multicast1}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@rr={0x7, 0x17, 0x9c, [@private=0xa010101, @multicast2, @broadcast, @rand_addr=0x64010100, @loopback]}, @timestamp_addr={0x44, 0x34, 0x29, 0x1, 0x7, [{@remote, 0x3}, {@multicast2, 0xbe}, {@broadcast, 0x80000000}, {@broadcast, 0x6}, {@private=0xa010101, 0x400}, {@rand_addr=0x64010102, 0x800}]}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa96}}, @ip_retopts={{0x58, 0x0, 0x7, {[@generic={0x89, 0xb, "00733b1be32e8d07e4"}, @ssrr={0x89, 0x7, 0xfc, [@multicast1]}, @rr={0x7, 0x27, 0x2f, [@rand_addr=0x64010101, @broadcast, @multicast2, @multicast1, @local, @remote, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @cipso={0x86, 0xf, 0x3, [{0x6, 0x2}, {0x1, 0x7, "6124159a1e"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xf5, 0x3, 0x5, [{@rand_addr=0x64010102, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x101}, {@multicast1, 0x8}]}, @timestamp_addr={0x44, 0x54, 0x68, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x3}, {@rand_addr=0x64010100, 0x614}, {@loopback, 0x7}, {@remote, 0x5}, {@rand_addr=0x64010102, 0x1}, {@multicast1, 0x1}, {@private=0xa010101, 0x4}, {@remote, 0xfffff189}, {@private=0xa010100, 0xfffffff9}, {@multicast2, 0x4}]}, @lsrr={0x83, 0xb, 0x64, [@dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64010101]}, @end, @noop, @ra={0x94, 0x4}, @rr={0x7, 0x1f, 0xf0, [@multicast2, @multicast2, @loopback, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x39}, @remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6c, 0x0, 0x4, [0x1, 0x80000001]}, @rr={0x7, 0x17, 0xc7, [@loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010102]}, @noop, @rr={0x7, 0x27, 0x12, [@broadcast, @private=0xa010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast2, @local]}, @ssrr={0x89, 0x1b, 0xea, [@empty, @private=0xa010102, @multicast1, @rand_addr=0x64010101, @local, @loopback]}, @timestamp_prespec={0x44, 0x54, 0x7, 0x3, 0xb, [{@rand_addr=0x64010102, 0x1}, {@remote, 0xfffffffc}, {@remote, 0x5}, {@private=0xa010100, 0x4}, {@local, 0x80000001}, {@multicast2, 0x35}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x8}, {@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x4}]}, @rr={0x7, 0x7, 0xcc, [@dev={0xac, 0x14, 0x14, 0x19}]}]}}}], 0x2e0}}], 0x3, 0x10005) 2.893254068s ago: executing program 3 (id=2834): syz_emit_ethernet(0x256, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 2.822174786s ago: executing program 3 (id=2835): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x5) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0xc00c890) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000003c0)={r2, 0x5, 0x0, r2}) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x9, 0x3, r2}) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000400)=[@cpuid={0x14, 0x18, {0x5d2d, 0xd}}, @wrmsr={0x1e, 0x20, {0x40000242, 0x2}}, @rdmsr={0x32, 0x18, {0x60b}}, @wr_crn={0x46, 0x20, {0x3, 0x20a4}}, @code={0xa, 0x6d, {"66baf80cb8aca75786ef66bafc0cedc442a5390bb95c0800000f32c4a1fdda930a000000b9600b00000f32c4e17e12711e3e41f448b800400000000000000f23d80f21f835000000d00f23f8c4a319223c6bfc66470f64b67db60000"}}, @code={0xa, 0x90, {"0f2285c7442400fe000000c744240200000080c7442406000000000f011c2448b879890000000000000f23c80f21f835000010000f23f8f30fc7712b6764670f793648b800000000000000800f23c80f21f8350400a0000f23f836f30fc73472b9080800000f3266baf80cb802340982ef66bafc0cb042ee66b8ba000f00d0"}}, @rdmsr={0x32, 0x18, {0xa78}}, @code={0xa, 0x5f, {"66baf80cb80201ad8cef66bafc0c66ed0f090fc7add5000000450f2e720067460f01d13e3e2667363666410f388016440f20c0350c000000440f22c0c4817c52bc15920300006740d9f90fc77700"}}, @uexit={0x0, 0x18, 0x200}, @rdmsr={0x32, 0x18, {0x320}}, @uexit={0x0, 0x18, 0x9}, @rdmsr={0x32, 0x18, {0x400}}, @rdmsr={0x32, 0x18, {0x26b}}, @cpuid={0x14, 0x18, {0xffff, 0x9}}, @wr_crn={0x46, 0x20, {0x3, 0xa}}, @code={0xa, 0x67, {"48b895000000000000000f23d00f21f835200000000f23f8f3420fc730650f01d1440f20c03502000000440f22c0c402250ab29c1f85ec263e0faea000800000c4a10d5e0d42cd5d690f3066b88a008ee0f010747737"}}, @cpuid={0x14, 0x18, {0x4}}, @wrmsr={0x1e, 0x20, {0x944, 0x3}}, @uexit={0x0, 0x18, 0x8}, @wrmsr={0x1e, 0x20, {0x40d}}, @cpuid={0x14, 0x18, {0x8, 0x9}}, @wr_crn={0x46, 0x20, {0x3, 0xffffffffffffffff}}, @rdmsr={0x32, 0x18, {0x383}}], 0x3bb}) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="baf80c66b8989fbb8a66efbafc0c66b87c7c000066ef66b9f30a000066b8c98a000066ba000000000f30640f07baf80c66b880cae38566efbafc0c66ed0f0766660fc4af00503bb83d008ed866660f38825e6a0f4d54006766c7442400570000006766c7442402746300006766c744240600000000670f011424", 0x7a}], 0x1, 0x50, &(0x7f0000000180)=[@vmwrite={0x8, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, @cr0={0x0, 0x80000000}], 0x2) 2.706337101s ago: executing program 3 (id=2839): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) socket$kcm(0x21, 0x5, 0x2) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, 0x0, 0x4004101) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0/../file0\x00', 0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x53, 0xa, 0x0, "3258c546dacccfae1e008faa00000000f4ff4000"}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000340)="18000000010003", 0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x0, 0x0, 0x320000) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04230d00c80001021f"], 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000100)}, 0x10) 2.566595171s ago: executing program 3 (id=2842): r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000400)="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", 0x1000, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000080)=' )^\xf8,\x00', &(0x7f00000000c0)) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0xffffffffffffffe5, 0xffffffffffffffff, 0x1}) faccessat2(r3, &(0x7f00000001c0)='./file0\x00', 0x15f, 0x1080) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.256095353s ago: executing program 3 (id=2847): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x409, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x28820, 0x80c2}}, 0x20}}, 0x0) 2.148390366s ago: executing program 35 (id=2847): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x409, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x28820, 0x80c2}}, 0x20}}, 0x0) 1.99367424s ago: executing program 5 (id=2851): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', 0x101642, 0x1ff) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) read(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000002840)='./file0\x00', 0x101642, 0x1ff) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) read(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) (async) 1.865626804s ago: executing program 5 (id=2853): socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0xba, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f0000000040)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = fsopen(&(0x7f0000000100)='udf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) open(0x0, 0x1a1342, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22300, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) (async, rerun: 64) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) ptrace(0x10, r6) (async) tkill(r6, 0x3c) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4004}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mmap(&(0x7f0000df5000/0x4000)=nil, 0x4000, 0x1000005, 0x12, r5, 0x0) msync(&(0x7f000032e000/0x2000)=nil, 0x2000, 0x6) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@redirect_dir_off}, {@redirect_dir_nofollow}], [{@smackfsroot={'smackfsroot', 0x3d, 'sysfs\x00'}}, {@measure}, {@appraise}, {@euid_gt}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, '}#+'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/kvm\x00'}}, {@subj_type={'subj_type', 0x3d, '{#'}}, {@flag='nomand'}]}) chdir(&(0x7f00000000c0)='./bus\x00') 1.748852895s ago: executing program 6 (id=2855): add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000002c0)="969f8b3a0e993ca79ddbe2c34e63bd8c58af79be657466892500561a989b6923121fdee86ac6245eb4bd432a286f67711d35725b3bc85b8dbbc16d32cbf22a0d90db3783c52da3ff9c536e9512addfa68955d72a92928687bd4935e2b9c1e4afaa3e1647d28e761db00022b69322a89709694485b3627c12182227e49347b02b61462a490ff1bc29d435b070b6586d6996e5098ca1dd823bee4fad1086cece8ca6c8b87457dbdf482b9372221d357ac488d6166866753397c1bcd5be4c2585f4baf91900854a1e607b5fd9cfa5bc5eea2ca9d2fd1128", 0xd6, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r0}, &(0x7f0000000600)=""/100, 0x64, &(0x7f00000000c0)={&(0x7f0000000400)={'xxhash64-generic\x00'}, &(0x7f00000005c0)="090004b11a47", 0x6}) 1.595478142s ago: executing program 5 (id=2856): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}], {0x14}}, 0x74}}, 0x0) sendto$inet6(r0, &(0x7f0000000100)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0004010a0000000d0085a168216b46d32345653600648d040012000a00050049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004d1ddf66ed538f252325000"/120, 0x78, 0x0, 0x0, 0x0) mount$afs(&(0x7f0000000140)=@cell={0x25, '', 'syz1', '.backup'}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}], {0x14}}, 0x74}}, 0x0) (async) sendto$inet6(r0, &(0x7f0000000100)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0004010a0000000d0085a168216b46d32345653600648d040012000a00050049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004d1ddf66ed538f252325000"/120, 0x78, 0x0, 0x0, 0x0) (async) mount$afs(&(0x7f0000000140)=@cell={0x25, '', 'syz1', '.backup'}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x41, 0x0) (async) 1.595159361s ago: executing program 4 (id=2857): r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x2, 0x1a1880) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, &(0x7f00000003c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 1.486604084s ago: executing program 6 (id=2858): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = socket$inet6(0xa, 0x3, 0x8) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) read(r2, &(0x7f00000000c0)=""/201, 0xc9) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0xe}}], 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @val=@netfilter={0x3, 0x0, 0x3, 0x1}}, 0x20) syz_emit_ethernet(0x11dc0, &(0x7f0000000100)=ANY=[], 0x0) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0xb0d5, 0x80, 0x3, 0x12}, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x402d, 0x0, 0x0, 0x1000004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x7fff}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r7, 0x89ed, 0x0) 1.484958414s ago: executing program 4 (id=2859): r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0xd2bb, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000780)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x40, 0x0, @fd_index=0x2, 0xcab, 0x0, 0x1000, 0x1}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 1.37710471s ago: executing program 5 (id=2860): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) (async) r1 = syz_io_uring_complete(0x0) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) (rerun: 64) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x6}, {0x20, 0x3}}, 0x24, 0x1) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000340), 0x8) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)='%-5lx \x00'}, 0x20) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x1b, 0x4, 0x8000, 0xf, 0x20218, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x17, 0x1a, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', r3, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000f40)={0x1, 0x0, 0x8, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000000d80)=[r4, r5, r6, r7, r8, r9], &(0x7f0000000dc0)=[{0x0, 0x5, 0x1, 0x8}, {0x0, 0x4, 0x6, 0xe}, {0x4, 0x4, 0xc, 0x7}, {0x4, 0x3, 0x1, 0x1}, {0x3, 0x5, 0x8, 0x8}, {0x2, 0x2, 0xc, 0x9}, {0x2, 0x2, 0xc, 0xa}, {0x0, 0x2, 0x9, 0xc}, {0x3, 0x5, 0x0, 0x5}], 0x10, 0x5}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r10, 0x18000000000002a0, 0x1e6, 0x0, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62c67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0x18, 0x90, &(0x7f0000000080)="8db34ba5243006fcba88cea791c46a5f875f11ca7a619ebd", &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebb1137981c43c1baa182bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x50) (async, rerun: 64) r11 = accept$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, &(0x7f0000000380)=0x6e) recvmsg$unix(r11, &(0x7f0000000680)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f00000004c0)=""/113, 0x71}, {&(0x7f0000000540)=""/162, 0xa2}], 0x3, &(0x7f0000000640)=[@cred={{0x1c}}], 0x20}, 0x140) 1.246535672s ago: executing program 5 (id=2861): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = dup2(r0, r0) ppoll(&(0x7f00000002c0)=[{r0, 0x1628}, {r1, 0x828c}], 0x2, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000340)={[0x559]}, 0x8) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000a80)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @local}, 0x20, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)='macvlan1\x00', 0x74d, 0xff, 0x3}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="02", 0x1}], 0x1}}], 0x1, 0x8810) accept$packet(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) write$P9_RSTATu(r0, &(0x7f0000000540)={0x41c, 0x7d, 0x0, {{0x500, 0x2db, 0x0, 0x5000000, {0xcdb74b01717932d9, 0x400}, 0x10000000, 0x0, 0x0, 0x8000fe, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\xff\xff\xff0\xff\xce\xbc\x92\x00\x00\x00', 0x120, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05>\x00\x1e\x00\x00\x18{\x82O^\x97\xe5p\xbeg\xb0^\xb0V\xca|=9\x00\xb5\x00\x00;Y_\xcb\x14\x03\x03\x00\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x1a\xb4\x94\xcc\xe37A\x95\xcc\x90U\xd1\xc8~x\xcdY\x96\xd9\x967\x87\xe7\xb6\x98\"l5\xf0\x17K\r\xf3\xf8\x91\xcf\x99lI\b\xe889d\x01,\xe2\x15]\xd6\xb3\xf4kb\xcay$\xeba\x13\x90\x98\xb2\"\xbc\xf4/\xeah1Z\x81ju\x16i\xd6%\xe5\xe4\xe4_\x96?\x1e\xe2\x1e\xb7N\xf3\xcd\xf9\x8f7\xb2?\r\xac\xc9\xd9\xe5\xd4\xbe\xbf\x91J\x8d,\x9f\x19fxu\xd1\r\xeb\xddkT\x03\xf6j\xe8}\x8a/\x067\xcdH\x82\x8f,W\xc3,\x19\xc3#9(O\xa5\x14\xa9#l\x1b\x17\xe7R\x93^J\xf4v\x86\xa6\xcfHC\x10\xec\xd1\xe8\x98l\x12_\xb7B\xfd2\xfc]\x87\xe0\x8aj\x8e\r\x94X\x02\xd7\x7f\x15\xb4G\t\x8b\xd5c\x9c\x0e\xba\\o\xd2\x132\xf6\xddX\x8b\x17\"=\xa7l-\xf5\x91\v_\xf9\xfc\x01\x9f\xd9&', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x157, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85+\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00\xd0\x02\xaf\x02k\x9en\r\xca\x00\x89\xfdL\xd0\x9c\xf8\r\xbb\xe9Q\xb2\x1f5y\x8b\n\xb6hx\xc0\x9d\"\x8b7\x88\\\x10\x8a\xcb\xee\xcd\xbe\x06Kz\xd8\xd79\x9f\xd5\x18j\'t\x8f$\x88\'\x06\x8f\x89\x0fOPZ\x04\xc4$\xd7%\xc8\x1exa\xe1 --\xc4\xc94\x1dWH\xff\x9eS\x9e\rIT\x8fz\x1c\xcf^\xac\x9a\xa0\x92L\a\x00\x00\x00\xf3|c\xccjn1\xa7}\x1f\xad\x05\x83h\xae\xd5\xe3\xc1M\x89\x96\x87\n\v\t\xd0l\x97\x04\x98\v\xb4GxB\xb1\xed.\x8f%\x01\xb2_\xbc\\^\xe6}\x8bnN\xc7G\xe9]\x03\xf6x\xd7\x1a-\xa34\x92\xf8\xd4\x87\xeeB|Y\xf6\xe7\ni\xa9J}\x987\xd6\x02c\xd68\aM\xfa\x04\xa4V\x04\tD\xb7\x02\"gFh\xc7D\xb7\xba\xda\xad4uXO 5|\x84 \xc1IO\x8d\r4 *\xfb5\xccVp\xe2@\xbe\xba\x96SS\xaf\xe9F\xc0\xc1\xb5\t\x1d9U\xc8\xc8_\xf1\xc7q|\n'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcf\x01.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb49\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff, 0xee00}}, 0x41c) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x2) getsockopt$ax25_int(r4, 0x101, 0x9, &(0x7f00000001c0), &(0x7f0000000000)=0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) pwritev(r5, &(0x7f00000015c0)=[{&(0x7f0000000100)="b1eb0faad279bff5667d14bacf38e966e6598ea9ed29956ea33530ce8dfb81e5f13d9549ce1dc3f17d5d7895bee8edf8612ece5a4461a49838b97826b6e8308ebfb1280c27d4dfb1946cd1c915e1467ea6bcd035eab0b6b72879d77dac8e9ca892b00bbc4c73cc786bf349336dfbff65b8c8fcdcff53f37f146b2d5edf81255d2ca2a65a3e", 0x85}, {&(0x7f0000000380)="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", 0x151}, {&(0x7f0000000040)="0fa2cc5a6fe366245e552cfac04315d89bc0444de4cc2cbd7bfb144f753e75a4f25c416ae1775845fd2d5500734da85575869d0b45d8ea32084275890addf0295131ab63776ec882d260052a65dd2e4f05b25b2848d6", 0x56}, {&(0x7f0000000a00)="84164a930bc417c6433647f2f46426ab704dc1fd01640985ef0426b26fa1350d7e1f30f0d9bbcc05cd012aca96f74be1b2ae1bc7ea71a534ef6b45609dd22a907c0430d589c32fe00b091c", 0x4b}, {&(0x7f0000000980)="61ff31ffee444184cf9ee0555b011f8a3046d6be4ba6732dc2c4dd36d5c57bc1b61f43205ba8f877cec7433504f78c76219a6da16e94261d101365119dde455d5e3269593919bfa05c0fa8996f", 0x4d}], 0x5, 0x4, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101d40, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x8f) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b1b, &(0x7f0000000040)) 715.263699ms ago: executing program 6 (id=2862): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @empty, 0x0}, &(0x7f0000000040)=0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11, r1}, {0x0, 0x1, 0x400008, 0x0, 0x3, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0x7}}, 0xe8) syz_emit_ethernet(0x76, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x40, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @local, [{0x1f, 0x4, "ebd8d807549a706e4c890f753ab70f5ea60030e60395303cabd90d08ae6c2653"}, {0x4}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) pidfd_send_signal(r2, 0x57c565ce, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x14000) syz_genetlink_get_family_id$nbd(&(0x7f0000002200), 0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x88) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') lstat(&(0x7f0000000380)='./file0\x00', 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000080)={'wlan1\x00'}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@initdev, @multicast1, @local}, &(0x7f0000000100)=0xc) 714.855076ms ago: executing program 5 (id=2863): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000024c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xf4a, 0x3a, '&\\', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) syz_usb_connect(0x3, 0x2d, &(0x7f0000008ec0)={{0x12, 0x1, 0x110, 0x2b, 0x95, 0xd9, 0x8, 0x4e2, 0x1412, 0xca10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0xfa, 0xa0, 0xbf, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x8, 0x6, 0x62, 0x0, [], [{{0x9, 0x5, 0x9, 0x1, 0x200, 0x4, 0x8, 0xf8}}]}}]}}]}}, 0x0) syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x8, 0x2, 0x200, 0xa7, 0x9, 0x4}, {0x9, 0x5, 0x0, 0x2, 0x0, 0xf8, 0x0, 0x5}, {0x9, 0x5, 0x0, 0x3, 0x10, 0x5d, 0xc, 0x1}}}}}}]}}, 0x0) 554.921468ms ago: executing program 6 (id=2864): bpf$TOKEN_CREATE(0x24, &(0x7f0000001300), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f0000001280)=[{&(0x7f0000000000)="7be5dbe1d6b1ff9f0e7d7b5dc0d24fe63661e850136c561c4ed71f21f0aca1eb0a5b4913ebfefa2a0d516b442610799dd9a0aba114db00fbe6472e79421b50f01664bebaf7e88d", 0x47}, {&(0x7f0000000080)="c67c1fb5aecb880a8050ff777601598b61d1ec19af8df08671d139f14e6e1e8e", 0x20}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000000180)="84caa34320fc111a562dec4a2b5b450715f6340bafb333b5c922724728f843144d9eadf6d01f8e18fcca19283a04d87270331cb63494ad18ee6fea89325b21ba2b708d75972a27fb3592b11eebc578afab51ded1e36d91f0e9bfd470", 0x5c}, {&(0x7f0000001240)="b547f2cfb020a2e1334a94da6f5663f55da812a945a0648ce3ab693763ba3cfff498d44fb742f8225a1cebfc7a50f633592ad5e6fe1b7b40f847e904050e79", 0x3f}], 0x5) 423.48758ms ago: executing program 6 (id=2865): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000ecff009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018800000000000001400000014000000040000000200000001000006040000000f0000000700000000612e00"], 0x0, 0x30, 0x0, 0x1, 0x6}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/tcp6\x00') getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) rt_sigaction(0x14, &(0x7f0000000140)={0x0, 0x40000000, 0x0, {[0xd]}}, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x404800, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) timer_create(0x6, 0x0, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x40000}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000400)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @void}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 0s ago: executing program 6 (id=2866): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) r4 = open(0x0, 0x109042, 0x0) pwritev(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) kernel console output (not intermixed with test programs): ed send on invalid socket [ 197.252608][T12938] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.257771][ T6061] udevd[6061]: setting mode of /dev/gsmtty60 to 020600 failed: No such file or directory [ 197.258628][T12938] block nbd6: Attempted send on invalid socket [ 197.269071][ T6061] udevd[6061]: setting owner of /dev/gsmtty60 to uid=0, gid=0 failed: No such file or directory [ 197.274781][T12938] I/O error, dev nbd6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.361828][ T5383] Dev loop6: unable to read RDB block 7 [ 197.363960][ T5383] loop6: unable to read partition table [ 197.365869][ T5383] loop6: partition table beyond EOD, truncated [ 197.531550][T12960] fuse: Bad value for 'fd' [ 197.583533][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2079'. [ 197.586652][T12967] .: renamed from bond0 [ 197.588220][T12968] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2079'. [ 197.591432][T12968] netlink: 'syz.6.2079': attribute type 11 has an invalid length. [ 197.594252][T12968] netlink: 'syz.6.2079': attribute type 13 has an invalid length. [ 197.608587][ T5383] Dev loop6: unable to read RDB block 7 [ 197.610409][ T5383] loop6: unable to read partition table [ 197.612269][ T5383] loop6: partition table beyond EOD, truncated [ 197.629243][T12967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.655567][T12967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.664085][T12967] netlink: 'syz.3.2080': attribute type 21 has an invalid length. [ 197.803419][ T5383] Dev loop6: unable to read RDB block 7 [ 197.805206][ T5383] loop6: unable to read partition table [ 197.807163][ T5383] loop6: partition table beyond EOD, truncated [ 197.905761][T12990] overlayfs: failed to clone upperpath [ 197.909178][ T5383] Dev loop6: unable to read RDB block 7 [ 197.920480][ T5383] loop6: unable to read partition table [ 197.922508][ T5383] loop6: partition table beyond EOD, truncated [ 197.986620][ T5383] Dev loop6: unable to read RDB block 7 [ 197.988460][ T5383] loop6: unable to read partition table [ 197.998963][ T5383] loop6: partition table beyond EOD, truncated [ 198.081368][ T5383] Dev loop6: unable to read RDB block 7 [ 198.083449][ T5383] loop6: unable to read partition table [ 198.085561][ T5383] loop6: partition table beyond EOD, truncated [ 198.228673][ T5383] Dev loop6: unable to read RDB block 7 [ 198.230466][ T5383] loop6: unable to read partition table [ 198.232434][ T5383] loop6: partition table beyond EOD, truncated [ 198.249648][T13012] netlink: 'syz.5.2090': attribute type 11 has an invalid length. [ 198.319448][ T5383] Dev loop6: unable to read RDB block 7 [ 198.321351][ T5383] loop6: unable to read partition table [ 198.338716][ T5383] loop6: partition table beyond EOD, truncated [ 198.445732][ T5383] Dev loop6: unable to read RDB block 7 [ 198.447730][ T5383] loop6: unable to read partition table [ 198.449741][ T5383] loop6: partition table beyond EOD, truncated [ 198.493184][ T5383] Dev loop6: unable to read RDB block 7 [ 198.494980][ T5383] loop6: unable to read partition table [ 198.497084][ T5383] loop6: partition table beyond EOD, truncated [ 198.548427][ T5383] Dev loop6: unable to read RDB block 7 [ 198.550272][ T5383] loop6: unable to read partition table [ 198.552162][ T5383] loop6: partition table beyond EOD, truncated [ 198.579063][T13038] 9pnet_virtio: no channels available for device syz [ 198.615033][T13038] overlayfs: failed to resolve './file1': -2 [ 198.623324][T13040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.722438][T13042] netlink: 'syz.5.2101': attribute type 11 has an invalid length. [ 198.759394][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2102'. [ 198.762477][T13046] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 198.816134][T13050] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2105'. [ 199.123872][T13076] netlink: 'syz.3.2113': attribute type 2 has an invalid length. [ 199.313189][ T5383] Dev loop6: unable to read RDB block 7 [ 199.315057][ T5383] loop6: unable to read partition table [ 199.317681][ T5383] loop6: partition table beyond EOD, truncated [ 199.377127][T13088] program syz.6.2116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.392169][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2116'. [ 199.409442][T13089] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2117'. [ 199.449343][ T5383] Dev loop6: unable to read RDB block 7 [ 199.454566][ T5383] loop6: unable to read partition table [ 199.456564][ T5383] loop6: partition table beyond EOD, truncated [ 199.640320][T13104] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2121'. [ 199.645429][T13108] program syz.5.2123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.645630][ T5383] Dev loop6: unable to read RDB block 7 [ 199.651689][ T5383] loop6: unable to read partition table [ 199.654334][ T5383] loop6: partition table beyond EOD, truncated [ 199.789706][ T5383] Dev loop6: unable to read RDB block 7 [ 199.791496][ T5383] loop6: unable to read partition table [ 199.793449][ T5383] loop6: partition table beyond EOD, truncated [ 200.193563][ T5383] Dev loop6: unable to read RDB block 7 [ 200.195253][ T5383] loop6: unable to read partition table [ 200.197598][ T5383] loop6: partition table beyond EOD, truncated [ 200.442026][ T1348] IPVS: starting estimator thread 0... [ 200.524960][T13165] usb usb8: usbfs: process 13165 (syz.3.2141) did not claim interface 0 before use [ 200.529022][T13161] IPVS: using max 27 ests per chain, 64800 per kthread [ 200.574807][T13167] tmpfs: Bad value for 'mpol' [ 200.673767][ T1475] usb 8-1: USB disconnect, device number 25 [ 200.810383][ T5333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.815329][ T5333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.819790][ T5333] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.823918][ T5333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.827098][ T5333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.053243][T13171] chnl_net:caif_netlink_parms(): no params data found [ 201.188046][T13171] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.192055][T13171] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.194906][T13171] bridge_slave_0: entered allmulticast mode [ 201.198452][T13171] bridge_slave_0: entered promiscuous mode [ 201.202763][T13171] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.205426][T13171] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.208325][T13171] bridge_slave_1: entered allmulticast mode [ 201.211561][T13171] bridge_slave_1: entered promiscuous mode [ 201.272948][T13171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.296847][T13187] netlink: 'syz.5.2146': attribute type 1 has an invalid length. [ 201.301407][ T9876] tipc: Disabling bearer [ 201.313729][T13171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.362605][T13187] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 201.369338][T13187] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 201.415261][T13171] team0: Port device team_slave_0 added [ 201.419439][T13190] netlink: 'syz.4.2147': attribute type 1 has an invalid length. [ 201.420200][T13171] team0: Port device team_slave_1 added [ 201.441317][T13190] bond7: entered promiscuous mode [ 201.443380][T13190] 8021q: adding VLAN 0 to HW filter on device bond7 [ 201.504460][T13193] cgroup: Name too long [ 201.659017][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2148'. [ 201.662060][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2148'. [ 202.029704][ T40] kauditd_printk_skb: 5107 callbacks suppressed [ 202.029720][ T40] audit: type=1400 audit(1758693273.711:111244): avc: denied { recv } for pid=13186 comm="syz.5.2146" daddr=255.255.255.255 dest=20000 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.041731][ T40] audit: type=1400 audit(1758693273.711:111245): avc: denied { recv } for pid=13186 comm="syz.5.2146" daddr=255.255.255.255 dest=20000 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.051020][ T40] audit: type=1400 audit(1758693273.711:111246): avc: denied { recv } for pid=13186 comm="syz.5.2146" daddr=255.255.255.255 dest=20000 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.060593][ T40] audit: type=1400 audit(1758693273.711:111247): avc: denied { recv } for pid=13186 comm="syz.5.2146" daddr=255.255.255.255 dest=20000 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.069967][ T40] audit: type=1400 audit(1758693273.711:111248): avc: denied { recv } for pid=13186 comm="syz.5.2146" daddr=255.255.255.255 dest=20000 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.079494][ T40] audit: type=1400 audit(1758693273.711:111249): avc: denied { recv } for pid=13186 comm="syz.5.2146" daddr=255.255.255.255 dest=20000 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.088693][ T40] audit: type=1400 audit(1758693273.711:111250): avc: denied { recv } for pid=13186 comm="syz.5.2146" daddr=255.255.255.255 dest=20000 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.095092][T13187] audit: audit_backlog=65 > audit_backlog_limit=64 [ 202.098368][ T40] audit: type=1400 audit(1758693273.711:111251): avc: denied { recv } for pid=13186 comm="syz.5.2146" daddr=255.255.255.255 dest=20000 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 202.100465][T13187] audit: audit_lost=94 audit_rate_limit=0 audit_backlog_limit=64 [ 202.282058][T13171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.284268][T13171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.292324][T13171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.298385][T13171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.300957][T13171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.309228][T13171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.401474][T13171] hsr_slave_0: entered promiscuous mode [ 202.404557][T13171] hsr_slave_1: entered promiscuous mode [ 202.407416][T13171] debugfs: 'hsr0' already exists in 'hsr' [ 202.409757][T13171] Cannot create hsr debugfs directory [ 202.756259][ T29] SELinux: failure in sel_netif_sid_slow(), invalid network interface (131) [ 202.874603][ T5984] Bluetooth: hci4: command tx timeout [ 202.994926][ T1236] bond6 (unregistering): (slave bridge0): Releasing active interface [ 203.238758][ T1236] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.243939][ T1236] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.250660][ T1236] . (unregistering): (slave batadv0): Releasing backup interface [ 203.254517][ T1236] . (unregistering): Released all slaves [ 203.263364][ T1236] bond1 (unregistering): Released all slaves [ 203.275639][ T1236] bond2 (unregistering): Released all slaves [ 203.374469][ T1236] bond3 (unregistering): Released all slaves [ 203.384534][ T1236] bond4 (unregistering): Released all slaves [ 203.386249][T13217] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 203.390948][T13217] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 203.405361][T13217] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 203.408123][T13217] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 203.425396][T13217] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 203.486057][ T1236] bond5 (unregistering): Released all slaves [ 203.492602][ T1236] bond6 (unregistering): Released all slaves [ 203.656057][ T1236] tipc: Disabling bearer [ 203.660778][ T1236] tipc: Disabling bearer [ 203.672281][ T1236] tipc: Left network mode [ 203.758508][T13313] overlayfs: failed to resolve './file0': -2 [ 204.026168][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.197755][T13373] trusted_key: encrypted_key: insufficient parameters specified [ 204.211173][T13373] overlay: ./bus is not a directory [ 204.658541][ T5984] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.001114][ T1236] team0 (unregistering): Port device team_slave_1 removed [ 205.166021][ T1236] team0 (unregistering): Port device team_slave_0 removed [ 205.177406][T13414] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 205.179478][T13411] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 205.188379][T13411] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2176'. [ 205.230479][T13417] (syz.5.2175,13417,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 205.256728][T13421] IPVS: rr: FWM 3 0x00000003 - no destination available [ 205.269283][ T1332] IPVS: starting estimator thread 0... [ 205.371498][T13423] IPVS: using max 45 ests per chain, 108000 per kthread [ 205.387691][T13431] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2175'. [ 205.452450][ T5333] Bluetooth: hci0: command 0x0405 tx timeout [ 205.452771][ T5984] Bluetooth: hci4: command 0x040f tx timeout [ 205.793506][T13408] tc_dump_action: action bad kind [ 205.802043][T13171] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 205.816981][T13171] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 205.826044][T13171] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 205.837996][T13171] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 205.860954][T13437] i2c i2c-1: Invalid block write size 34 [ 206.011485][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 206.072822][T13171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.097044][T13171] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.113913][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.117037][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.154122][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.157161][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.213755][ T8628] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 206.247411][ T1236] IPVS: stop unused estimator thread 0... [ 206.248584][T13466] tipc: Enabling of bearer rejected, failed to enable media [ 206.387699][ T8628] usb 11-1: Using ep0 maxpacket: 8 [ 206.400742][ T8628] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 206.404899][ T8628] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 206.408444][ T8628] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 206.412030][ T8628] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.417408][ T8628] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.420560][ T8628] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.685611][ T8628] usb 11-1: usb_control_msg returned -71 [ 206.687946][ T8628] usbtmc 11-1:16.0: can't read capabilities [ 206.706391][T13499] overlayfs: failed to resolve './file0': -2 [ 206.708402][ T8628] usb 11-1: USB disconnect, device number 10 [ 206.963255][T13171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.048389][T13171] veth0_vlan: entered promiscuous mode [ 207.069812][ T40] kauditd_printk_skb: 2252 callbacks suppressed [ 207.069823][ T40] audit: type=1400 audit(1758693278.713:113503): avc: denied { prog_load } for pid=13529 comm="syz.4.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 207.081962][ T40] audit: type=1400 audit(1758693278.713:113504): avc: denied { map } for pid=13527 comm="syz.6.2192" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 207.088850][T13171] veth1_vlan: entered promiscuous mode [ 207.097263][ T40] audit: type=1400 audit(1758693278.713:113505): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=10.0.2.2 src=43448 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 207.108213][ T40] audit: type=1400 audit(1758693278.713:113506): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=10.0.2.2 src=43448 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 207.115905][ T40] audit: type=1400 audit(1758693278.723:113507): avc: denied { bpf } for pid=13529 comm="syz.4.2194" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 207.126160][ T40] audit: type=1400 audit(1758693278.723:113508): avc: denied { create } for pid=13529 comm="syz.4.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.134675][ T40] audit: type=1400 audit(1758693278.723:113509): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53028 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 207.144034][ T40] audit: type=1400 audit(1758693278.733:113510): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=43448 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 207.153064][ T40] audit: type=1400 audit(1758693278.733:113511): avc: denied { ioctl } for pid=13529 comm="syz.4.2194" path="socket:[53383]" dev="sockfs" ino=53383 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.162598][ T40] audit: type=1400 audit(1758693278.743:113512): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53028 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 207.164472][T13171] veth0_macvtap: entered promiscuous mode [ 207.192098][T13171] veth1_macvtap: entered promiscuous mode [ 207.214954][T13171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.234900][T13171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.250391][ T1244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.253205][ T1244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.257475][ T1244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.263630][ T1244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.364533][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.368034][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.392799][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.395493][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.539794][ T5984] Bluetooth: hci4: command 0x040f tx timeout [ 207.597726][T13574] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 207.689877][T13584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2201'. [ 207.758687][T13589] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.902746][T13598] gfs2: not a GFS2 filesystem [ 207.931754][T13605] netlink: 'syz.4.2205': attribute type 1 has an invalid length. [ 207.960648][T13605] 8021q: adding VLAN 0 to HW filter on device bond8 [ 208.028759][T13605] bond8: (slave veth15): Enslaving as an active interface with a down link [ 208.175340][T13713] overlayfs: failed to resolve './file0': -2 [ 208.178962][T13713] FAULT_INJECTION: forcing a failure. [ 208.178962][T13713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.194239][T13713] CPU: 2 UID: 0 PID: 13713 Comm: syz.3.2209 Not tainted syzkaller #0 PREEMPT(full) [ 208.194254][T13713] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 208.194261][T13713] Call Trace: [ 208.194265][T13713] [ 208.194269][T13713] dump_stack_lvl+0x16c/0x1f0 [ 208.194303][T13713] should_fail_ex+0x512/0x640 [ 208.194324][T13713] strncpy_from_user+0x3b/0x2e0 [ 208.194340][T13713] getname_flags.part.0+0x8f/0x550 [ 208.194372][T13713] getname_flags+0x93/0xf0 [ 208.194383][T13713] __x64_sys_symlink+0x58/0x90 [ 208.194397][T13713] do_syscall_64+0xcd/0x4e0 [ 208.194418][T13713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.194430][T13713] RIP: 0033:0x7f58a9d8eba9 [ 208.194439][T13713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.194449][T13713] RSP: 002b:00007f58aabb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 208.194460][T13713] RAX: ffffffffffffffda RBX: 00007f58a9fd5fa0 RCX: 00007f58a9d8eba9 [ 208.194467][T13713] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000200 [ 208.194473][T13713] RBP: 00007f58aabb7090 R08: 0000000000000000 R09: 0000000000000000 [ 208.194480][T13713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.194486][T13713] R13: 00007f58a9fd6038 R14: 00007f58a9fd5fa0 R15: 00007ffcd2640e48 [ 208.194500][T13713] [ 208.495370][T13761] overlayfs: failed to resolve './file0': -2 [ 208.647779][ T7173] IPVS: starting estimator thread 0... [ 208.734804][T13802] IPVS: using max 45 ests per chain, 108000 per kthread [ 208.795497][T13806] Cache volume key already in use (9p,syz,) [ 209.218169][T13813] Cache volume key already in use (9p,syz,) [ 209.254816][T13813] overlayfs: failed to resolve './file0': -2 [ 209.307823][T13824] FAULT_INJECTION: forcing a failure. [ 209.307823][T13824] name failslab, interval 1, probability 0, space 0, times 0 [ 209.311711][T13824] CPU: 2 UID: 0 PID: 13824 Comm: syz.3.2223 Not tainted syzkaller #0 PREEMPT(full) [ 209.311726][T13824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 209.311733][T13824] Call Trace: [ 209.311737][T13824] [ 209.311741][T13824] dump_stack_lvl+0x16c/0x1f0 [ 209.311759][T13824] should_fail_ex+0x512/0x640 [ 209.311775][T13824] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 209.311788][T13824] should_failslab+0xc2/0x120 [ 209.311801][T13824] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 209.311813][T13824] ? getname_flags.part.0+0x4c/0x550 [ 209.311831][T13824] getname_flags.part.0+0x4c/0x550 [ 209.311849][T13824] getname_flags+0x93/0xf0 [ 209.311861][T13824] __x64_sys_symlink+0x65/0x90 [ 209.311875][T13824] do_syscall_64+0xcd/0x4e0 [ 209.311891][T13824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.311902][T13824] RIP: 0033:0x7f58a9d8eba9 [ 209.311911][T13824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.311921][T13824] RSP: 002b:00007f58aab96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 209.311933][T13824] RAX: ffffffffffffffda RBX: 00007f58a9fd6090 RCX: 00007f58a9d8eba9 [ 209.311940][T13824] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000200 [ 209.311946][T13824] RBP: 00007f58aab96090 R08: 0000000000000000 R09: 0000000000000000 [ 209.311953][T13824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.311959][T13824] R13: 00007f58a9fd6128 R14: 00007f58a9fd6090 R15: 00007ffcd2640e48 [ 209.311983][T13824] [ 209.638589][ T5984] Bluetooth: hci4: command 0x040f tx timeout [ 210.015098][T13866] netlink: 'syz.4.2228': attribute type 13 has an invalid length. [ 210.078353][T13876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2231'. [ 210.081228][T13876] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2231'. [ 210.131841][T13881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2232'. [ 210.180958][T13885] block nbd5: Attempted send on invalid socket [ 210.183412][T13885] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.186794][T13885] block nbd5: Attempted send on invalid socket [ 210.188724][T13885] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.227791][T13885] bridge_slave_1: mtu less than device minimum [ 210.318577][T13892] f2fs: Unknown parameter 'discardck_acquire_returned' [ 210.322644][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2236'. [ 210.326672][T13892] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 210.329151][T13892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.453772][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'. [ 210.758272][T13931] netlink: 'syz.6.2245': attribute type 1 has an invalid length. [ 210.767958][T13931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2245'. [ 210.774541][T13926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2244'. [ 210.794094][T13926] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 210.962780][T13943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2247'. [ 211.191809][T13963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.329762][T13970] uprobe: syz.4.2254:13970 failed to unregister, leaking uprobe [ 211.399311][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2252'. [ 211.445808][T13978] vxcan1 (unregistering): left allmulticast mode [ 211.480612][T13984] bridge_slave_0: left allmulticast mode [ 211.483056][T13984] bridge_slave_0: left promiscuous mode [ 211.486076][T13984] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.511454][T13984] bridge_slave_1: left allmulticast mode [ 211.513336][T13984] bridge_slave_1: left promiscuous mode [ 211.519091][T13984] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.530697][T13984] bond0: (slave bond_slave_0): Releasing backup interface [ 211.549723][T13984] bond0: (slave bond_slave_1): Releasing backup interface [ 211.561957][T13984] team0: Port device team_slave_0 removed [ 211.571312][T13984] team0: Port device team_slave_1 removed [ 211.574160][T13984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.585864][T13984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.592167][T13984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.595401][T13984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.610464][T13995] xfs: Unknown parameter 'grpquota' [ 211.639813][T13990] team0: Mode changed to "activebackup" [ 211.726404][ T5984] Bluetooth: hci4: command 0x040f tx timeout [ 211.844560][T14007] overlay: Unknown parameter 'uid' [ 211.906038][T14013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2265'. [ 211.910427][T14013] tipc: Invalid UDP bearer configuration [ 211.910468][T14013] tipc: Enabling of bearer rejected, failed to enable media [ 212.111604][ T40] kauditd_printk_skb: 2803 callbacks suppressed [ 212.111615][ T40] audit: type=1400 audit(1758693283.733:116316): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53028 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 212.124756][ T40] audit: type=1400 audit(1758693283.733:116317): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=53028 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 212.135078][ T40] audit: type=1400 audit(1758693283.733:116318): avc: denied { create } for pid=14033 comm="syz.5.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 212.143725][ T40] audit: type=1400 audit(1758693283.733:116319): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53028 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 212.152624][ T40] audit: type=1400 audit(1758693283.733:116320): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=10.0.2.2 src=43448 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 212.161385][ T40] audit: type=1400 audit(1758693283.733:116321): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=10.0.2.2 src=43448 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 212.171878][ T40] audit: type=1400 audit(1758693283.743:116322): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53028 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 212.182166][ T40] audit: type=1400 audit(1758693283.743:116323): avc: denied { bind } for pid=14033 comm="syz.5.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 212.190965][ T40] audit: type=1400 audit(1758693283.752:116324): avc: denied { bind } for pid=14033 comm="syz.5.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 212.200993][ T40] audit: type=1400 audit(1758693283.752:116325): avc: denied { write } for pid=14033 comm="syz.5.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 212.203130][T14031] /dev/sr0: Can't open blockdev [ 212.264932][T14042] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2272'. [ 212.266422][T14043] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2272'. [ 212.268747][T14042] netlink: 'syz.5.2272': attribute type 7 has an invalid length. [ 212.268760][T14042] netlink: 'syz.5.2272': attribute type 8 has an invalid length. [ 212.268768][T14042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2272'. [ 212.285912][T14043] netlink: 'syz.5.2272': attribute type 7 has an invalid length. [ 212.289856][T14043] netlink: 'syz.5.2272': attribute type 8 has an invalid length. [ 212.482209][T14070] overlayfs: failed to resolve './file0': -2 [ 212.613360][T14085] netlink: 'syz.4.2280': attribute type 10 has an invalid length. [ 212.638318][T14081] 9pnet: Unknown protocol version 9p2000.uE^鬔j?+a9L}q7֎- [ 212.653841][T14081] overlayfs: failed to resolve './file0': -2 [ 213.137762][T14126] overlayfs: failed to clone upperpath [ 213.426286][T14150] tmpfs: Invalid uid '0x00000000ffffffff' [ 213.437549][T14150] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 213.471484][T14153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=14153 comm=syz.4.2299 [ 213.813238][ T5984] Bluetooth: hci4: command 0x040f tx timeout [ 214.083773][T14193] sctp: [Deprecated]: syz.6.2309 (pid 14193) Use of int in maxseg socket option. [ 214.083773][T14193] Use struct sctp_assoc_value instead [ 214.219592][T14206] fuse: Unknown parameter 'd' [ 214.223102][T14205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=14205 comm=syz.6.2312 [ 214.250035][T14207] netlink: 'syz.3.2313': attribute type 58 has an invalid length. [ 214.317086][T14213] netlink: 'syz.3.2315': attribute type 21 has an invalid length. [ 214.320170][T14213] netlink: 'syz.3.2315': attribute type 6 has an invalid length. [ 214.327549][T14215] netlink: 'syz.3.2315': attribute type 21 has an invalid length. [ 214.331036][T14215] netlink: 'syz.3.2315': attribute type 6 has an invalid length. [ 214.864938][T14238] tmpfs: Bad value for 'mpol' [ 215.041692][ T1144] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.159608][ T1144] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.228748][T14266] can0: slcan on ttyprintk. [ 215.242505][T14261] overlayfs: failed to resolve './file0': -2 [ 215.243087][ T1144] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.315550][ T1144] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.348696][T14264] can0 (unregistered): slcan off ttyprintk. [ 215.531648][ T1144] bridge_slave_1: left allmulticast mode [ 215.534190][ T1144] bridge_slave_1: left promiscuous mode [ 215.536677][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.569156][ T1144] bridge_slave_0: left allmulticast mode [ 215.570971][ T1144] bridge_slave_0: left promiscuous mode [ 215.572864][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.594770][T14323] __nla_validate_parse: 14 callbacks suppressed [ 215.594784][T14323] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2332'. [ 215.712104][T14333] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2333'. [ 215.842231][T14344] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 215.842231][T14344] The task syz.3.2335 (14344) triggered the difference, watch for misbehavior. [ 215.859414][ T1332] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 216.025391][ T1332] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 216.036750][ T1332] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.046631][ T1332] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.047734][T14348] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 216.063092][ T1332] usb 10-1: config 0 interface 0 has no altsetting 0 [ 216.072495][ T1332] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.078766][ T1332] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.090415][ T1332] usb 10-1: config 0 interface 0 has no altsetting 0 [ 216.098062][ T1332] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.103036][ T1332] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.106585][ T1332] usb 10-1: config 0 interface 0 has no altsetting 0 [ 216.114140][ T1332] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.117064][ T1332] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.121618][ T1332] usb 10-1: config 0 interface 0 has no altsetting 0 [ 216.127729][ T1332] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.130633][ T1332] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.134113][ T1332] usb 10-1: config 0 interface 0 has no altsetting 0 [ 216.138937][ T1332] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.141985][ T1332] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.145466][ T1332] usb 10-1: config 0 interface 0 has no altsetting 0 [ 216.150276][ T1332] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.153092][ T1332] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.156580][ T1332] usb 10-1: config 0 interface 0 has no altsetting 0 [ 216.161547][ T1332] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.164462][ T1332] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.167953][ T1332] usb 10-1: config 0 interface 0 has no altsetting 0 [ 216.175781][ T1332] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 216.179200][ T1332] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 216.182531][ T1332] usb 10-1: Product: syz [ 216.183889][ T1332] usb 10-1: Manufacturer: syz [ 216.185432][ T1332] usb 10-1: SerialNumber: syz [ 216.192307][ T1332] usb 10-1: config 0 descriptor?? [ 216.217824][ T1332] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 216.291535][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.299121][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.305235][ T1144] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 216.314154][ T1144] bond0 (unregistering): Released all slaves [ 216.322194][ T1144] bond1 (unregistering): Released all slaves [ 216.330606][ T1144] bond2 (unregistering): Released all slaves [ 216.380628][ T5333] Bluetooth: hci0: command 0x0405 tx timeout [ 216.426865][ T839] usb 10-1: USB disconnect, device number 9 [ 216.433135][ T839] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 216.445475][ T1144] : left promiscuous mode [ 216.603435][ T1144] IPVS: stopping backup sync thread 7514 ... [ 216.900426][ T1144] hsr_slave_0: left promiscuous mode [ 216.904623][ T1144] hsr_slave_1: left promiscuous mode [ 216.907039][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.910313][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.982226][ T1475] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 217.013874][T14404] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2339'. [ 217.135393][ T40] kauditd_printk_skb: 2538 callbacks suppressed [ 217.135404][ T40] audit: type=1400 audit(1758693288.748:118864): avc: denied { write } for pid=14405 comm="syz.5.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.149958][ T40] audit: type=1400 audit(1758693288.748:118865): avc: denied { read } for pid=14405 comm="syz.5.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.155003][ T1475] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 217.159345][ T40] audit: type=1400 audit(1758693288.748:118866): avc: denied { read } for pid=14405 comm="syz.5.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.160516][ T1475] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 217.171085][ T40] audit: type=1400 audit(1758693288.748:118867): avc: denied { read write } for pid=14405 comm="syz.5.2340" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.172109][ T1475] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 217.183735][ T40] audit: type=1400 audit(1758693288.748:118868): avc: denied { read write open } for pid=14405 comm="syz.5.2340" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.184193][ T1475] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 217.195574][ T40] audit: type=1400 audit(1758693288.748:118869): avc: denied { write } for pid=14405 comm="syz.5.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.197189][ T1475] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 217.202349][ T1475] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 217.208245][ T40] audit: type=1400 audit(1758693288.748:118870): avc: denied { create } for pid=14405 comm="syz.5.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.216274][ T1475] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 217.219732][ T40] audit: type=1400 audit(1758693288.748:118871): avc: denied { write } for pid=14405 comm="syz.5.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.222061][ T1475] usb 11-1: Product: syz [ 217.222072][ T1475] usb 11-1: Manufacturer: syz [ 217.232135][ T40] audit: type=1400 audit(1758693288.758:118872): avc: denied { read } for pid=14405 comm="syz.5.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.236812][ T1475] cdc_wdm 11-1:1.0: skipping garbage [ 217.240783][ T1475] cdc_wdm 11-1:1.0: skipping garbage [ 217.241301][ T40] audit: type=1400 audit(1758693288.758:118873): avc: denied { read } for pid=14405 comm="syz.5.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.255225][ T1475] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 217.257919][ T1475] cdc_wdm 11-1:1.0: Unknown control protocol [ 217.590841][T14388] 9pnet_virtio: no channels available for device syz [ 217.671688][T14388] overlayfs: failed to resolve './file0': -2 [ 217.728257][ T6039] usb 11-1: USB disconnect, device number 11 [ 217.907682][T14440] openvswitch: netlink: Invalid VLAN frame [ 217.915208][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 217.916795][T14441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 217.958099][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 218.652759][T14459] netlink: 'syz.5.2345': attribute type 20 has an invalid length. [ 218.785435][T14467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.822038][T14472] program syz.6.2349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.831941][T14462] vimc link validate: Scaler:src:16x16 (0x33524742, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 218.832247][T14467] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2348'. [ 218.843835][T14467] overlay: filesystem on ./bus is read-only [ 218.971835][T14487] tmpfs: Cannot change global quota limit on remount [ 219.033306][ T1144] IPVS: stop unused estimator thread 0... [ 219.077958][T14490] SELinux: failed to load policy [ 219.301343][T14524] fuse: Unknown parameter '0x0000000000000007' [ 219.314563][T14520] 9pnet: Could not find request transport: rdmxa [ 219.324417][T14525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.650599][T14548] syz.6.2361: vmalloc error: size 13271040, failed to allocated page array size 25920, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 219.663924][T14548] CPU: 1 UID: 0 PID: 14548 Comm: syz.6.2361 Not tainted syzkaller #0 PREEMPT(full) [ 219.663940][T14548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.663947][T14548] Call Trace: [ 219.663951][T14548] [ 219.663955][T14548] dump_stack_lvl+0x16c/0x1f0 [ 219.663999][T14548] warn_alloc+0x248/0x3a0 [ 219.664016][T14548] ? __pfx_warn_alloc+0x10/0x10 [ 219.664033][T14548] ? vicodec_start_streaming+0x841/0x10d0 [ 219.664045][T14548] ? __vmalloc_node_noprof+0xad/0xf0 [ 219.664063][T14548] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 219.664085][T14548] ? vicodec_start_streaming+0x841/0x10d0 [ 219.664099][T14548] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 219.664118][T14548] ? ___kmalloc_large_node+0xed/0x160 [ 219.664136][T14548] __kvmalloc_node_noprof+0x30a/0x620 [ 219.664147][T14548] ? vicodec_start_streaming+0x841/0x10d0 [ 219.664159][T14548] ? vicodec_start_streaming+0x841/0x10d0 [ 219.664173][T14548] ? vicodec_start_streaming+0x841/0x10d0 [ 219.664183][T14548] vicodec_start_streaming+0x841/0x10d0 [ 219.664196][T14548] ? __pfx_vicodec_start_streaming+0x10/0x10 [ 219.664208][T14548] vb2_start_streaming+0x15f/0x5a0 [ 219.664224][T14548] ? __bitmap_weight+0xd7/0x110 [ 219.664239][T14548] vb2_core_streamon+0x2a7/0x450 [ 219.664257][T14548] vb2_streamon+0x47/0xa0 [ 219.664273][T14548] v4l2_m2m_ioctl_streamon+0x97/0x130 [ 219.664290][T14548] __video_do_ioctl+0xb40/0xfc0 [ 219.664305][T14548] ? __might_fault+0xe3/0x190 [ 219.664316][T14548] ? __pfx___video_do_ioctl+0x10/0x10 [ 219.664334][T14548] video_usercopy+0x4d0/0x1720 [ 219.664349][T14548] ? __pfx___video_do_ioctl+0x10/0x10 [ 219.664362][T14548] ? selinux_kernel_read_file+0x100/0x130 [ 219.664378][T14548] ? __pfx_video_usercopy+0x10/0x10 [ 219.664402][T14548] v4l2_ioctl+0x1bd/0x250 [ 219.664413][T14548] ? __pfx_v4l2_ioctl+0x10/0x10 [ 219.664426][T14548] __x64_sys_ioctl+0x18b/0x210 [ 219.664445][T14548] do_syscall_64+0xcd/0x4e0 [ 219.664465][T14548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.664476][T14548] RIP: 0033:0x7f7e6338eba9 [ 219.664498][T14548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.664512][T14548] RSP: 002b:00007f7e64139038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.664524][T14548] RAX: ffffffffffffffda RBX: 00007f7e635d6090 RCX: 00007f7e6338eba9 [ 219.664531][T14548] RDX: 0000200000000240 RSI: 0000000040045612 RDI: 0000000000000005 [ 219.664537][T14548] RBP: 00007f7e63411e19 R08: 0000000000000000 R09: 0000000000000000 [ 219.664544][T14548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.664550][T14548] R13: 00007f7e635d6128 R14: 00007f7e635d6090 R15: 00007fff2bbea508 [ 219.664564][T14548] [ 219.664598][T14548] Mem-Info: [ 219.686768][T14555] FAULT_INJECTION: forcing a failure. [ 219.686768][T14555] name failslab, interval 1, probability 0, space 0, times 0 [ 219.687538][T14548] active_anon:20011 inactive_anon:19941 isolated_anon:0 [ 219.687538][T14548] active_file:5941 inactive_file:17337 isolated_file:0 [ 219.687538][T14548] unevictable:1768 dirty:152 writeback:0 [ 219.687538][T14548] slab_reclaimable:8797 slab_unreclaimable:77130 [ 219.687538][T14548] mapped:25949 shmem:29032 pagetables:1686 [ 219.687538][T14548] sec_pagetables:318 bounce:0 [ 219.687538][T14548] kernel_misc_reclaimable:0 [ 219.687538][T14548] free:442177 free_pcp:17081 free_cma:0 [ 219.694108][T14555] CPU: 0 UID: 0 PID: 14555 Comm: syz.3.2363 Not tainted syzkaller #0 PREEMPT(full) [ 219.694132][T14555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.694143][T14555] Call Trace: [ 219.694148][T14555] [ 219.694155][T14555] dump_stack_lvl+0x16c/0x1f0 [ 219.694181][T14555] should_fail_ex+0x512/0x640 [ 219.694202][T14555] ? fs_reclaim_acquire+0xae/0x150 [ 219.694226][T14555] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 219.694252][T14555] should_failslab+0xc2/0x120 [ 219.694269][T14555] __kmalloc_noprof+0xd2/0x510 [ 219.694289][T14555] tomoyo_realpath_from_path+0xc2/0x6e0 [ 219.694315][T14555] ? tomoyo_profile+0x47/0x60 [ 219.694333][T14555] tomoyo_path_number_perm+0x245/0x580 [ 219.694353][T14555] ? tomoyo_path_number_perm+0x237/0x580 [ 219.694376][T14555] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 219.694397][T14555] ? find_held_lock+0x2b/0x80 [ 219.694439][T14555] ? find_held_lock+0x2b/0x80 [ 219.694458][T14555] ? hook_file_ioctl_common+0x145/0x410 [ 219.694489][T14555] ? __fget_files+0x20e/0x3c0 [ 219.694512][T14555] security_file_ioctl+0x9b/0x240 [ 219.694559][T14555] __x64_sys_ioctl+0xb7/0x210 [ 219.694586][T14555] do_syscall_64+0xcd/0x4e0 [ 219.694610][T14555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.694628][T14555] RIP: 0033:0x7f58a9d8eba9 [ 219.694642][T14555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.694657][T14555] RSP: 002b:00007f58aabb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.694673][T14555] RAX: ffffffffffffffda RBX: 00007f58a9fd5fa0 RCX: 00007f58a9d8eba9 [ 219.694685][T14555] RDX: 0000200000000300 RSI: 000000008090ae81 RDI: 0000000000000005 [ 219.694695][T14555] RBP: 00007f58aabb7090 R08: 0000000000000000 R09: 0000000000000000 [ 219.694705][T14555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.694715][T14555] R13: 00007f58a9fd6038 R14: 00007f58a9fd5fa0 R15: 00007ffcd2640e48 [ 219.694738][T14555] [ 219.694796][T14555] ERROR: Out of memory at tomoyo_realpath_from_path. [ 219.696093][T14548] Node 0 active_anon:54844kB inactive_anon:79764kB active_file:23596kB inactive_file:69136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:103668kB dirty:600kB writeback:0kB shmem:87480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14480kB pagetables:6560kB sec_pagetables:1272kB all_unreclaimable? no Balloon:0kB [ 219.860156][T14548] Node 1 active_anon:25200kB inactive_anon:0kB active_file:168kB inactive_file:212kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:128kB dirty:8kB writeback:0kB shmem:28648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 219.869476][T14548] Node 0 DMA free:8000kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1032kB inactive_anon:1864kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:292kB local_pcp:104kB free_cma:0kB [ 219.878362][T14548] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 219.880434][T14548] Node 0 DMA32 free:190940kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54184kB inactive_anon:77900kB active_file:23844kB inactive_file:69136kB unevictable:3536kB writepending:848kB present:2080628kB managed:1263424kB mlocked:0kB bounce:0kB free_pcp:51688kB local_pcp:10612kB free_cma:0kB [ 219.890337][T14548] lowmem_reserve[]: 0 0 0 0 0 [ 219.891830][T14548] Node 1 Normal free:1569388kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25200kB inactive_anon:0kB active_file:168kB inactive_file:212kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:14520kB local_pcp:3756kB free_cma:0kB [ 219.901340][T14548] lowmem_reserve[]: 0 0 0 0 0 [ 219.902842][T14548] Node 0 DMA: 16*4kB (UME) 14*8kB (UME) 19*16kB (UME) 13*32kB (UME) 11*64kB (UME) 8*128kB (UME) 7*256kB (UME) 5*512kB (UM) 1*1024kB (E) 0*2048kB 0*4096kB = 8000kB [ 219.907946][T14548] Node 0 DMA32: 2514*4kB (UM) 1159*8kB (UME) 526*16kB (UME) 745*32kB (UME) 254*64kB (UME) 140*128kB (UME) 102*256kB (UM) 76*512kB (UM) 37*1024kB (UM) 1*2048kB (M) 0*4096kB = 190720kB [ 219.913517][T14548] Node 1 Normal: 49*4kB (UME) 109*8kB (UME) 58*16kB (UME) 143*32kB (UME) 85*64kB (UME) 61*128kB (UME) 41*256kB (UME) 22*512kB (UME) 12*1024kB (UM) 8*2048kB (UM) 366*4096kB (UM) = 1569388kB [ 219.919261][T14548] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 219.922189][T14548] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 219.925016][T14548] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 219.927905][T14548] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 219.931736][T14548] 52373 total pagecache pages [ 219.933800][T14548] 5 pages in swap cache [ 219.935563][T14548] Free swap = 124976kB [ 219.937375][T14548] Total swap = 124996kB [ 219.944923][T14548] 1048443 pages RAM [ 219.946667][T14548] 0 pages HighMem/MovableOnly [ 219.950178][T14548] 283274 pages reserved [ 219.951952][T14548] 0 pages cma reserved [ 220.062458][T14570] zonefs (nbd6) ERROR: Not a zoned block device [ 220.092394][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2365'. [ 220.107461][T14570] : entered promiscuous mode [ 220.126024][T14570] : left promiscuous mode [ 220.206148][T14580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.208916][T14580] IPv6: NLM_F_CREATE should be set when creating new route [ 220.211317][T14580] IPv6: NLM_F_CREATE should be set when creating new route [ 220.213718][T14580] IPv6: NLM_F_CREATE should be set when creating new route [ 220.279770][T14586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.285838][T14587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.832951][ T5333] block nbd3: Receive control failed (result -32) [ 220.839283][T14572] block nbd3: shutting down sockets [ 221.068029][T14610] use of bytesused == 0 is deprecated and will be removed in the future, [ 221.076748][T14610] use the actual size instead. [ 221.095052][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2374'. [ 221.140991][T14629] FAULT_INJECTION: forcing a failure. [ 221.140991][T14629] name failslab, interval 1, probability 0, space 0, times 0 [ 221.149294][T14629] CPU: 2 UID: 0 PID: 14629 Comm: syz.5.2372 Not tainted syzkaller #0 PREEMPT(full) [ 221.149318][T14629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.149330][T14629] Call Trace: [ 221.149336][T14629] [ 221.149342][T14629] dump_stack_lvl+0x16c/0x1f0 [ 221.149368][T14629] should_fail_ex+0x512/0x640 [ 221.149389][T14629] ? fs_reclaim_acquire+0xae/0x150 [ 221.149413][T14629] ? tomoyo_encode2+0x100/0x3e0 [ 221.149436][T14629] should_failslab+0xc2/0x120 [ 221.149455][T14629] __kmalloc_noprof+0xd2/0x510 [ 221.149478][T14629] tomoyo_encode2+0x100/0x3e0 [ 221.149505][T14629] tomoyo_encode+0x29/0x50 [ 221.149527][T14629] tomoyo_realpath_from_path+0x18f/0x6e0 [ 221.149564][T14629] ? tomoyo_profile+0x47/0x60 [ 221.149584][T14629] tomoyo_path_number_perm+0x245/0x580 [ 221.149605][T14629] ? tomoyo_path_number_perm+0x237/0x580 [ 221.149629][T14629] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 221.149653][T14629] ? find_held_lock+0x2b/0x80 [ 221.149698][T14629] ? find_held_lock+0x2b/0x80 [ 221.149718][T14629] ? hook_file_ioctl_common+0x145/0x410 [ 221.149741][T14629] ? __fget_files+0x20e/0x3c0 [ 221.149765][T14629] security_file_ioctl+0x9b/0x240 [ 221.149790][T14629] __x64_sys_ioctl+0xb7/0x210 [ 221.149818][T14629] do_syscall_64+0xcd/0x4e0 [ 221.149844][T14629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.149860][T14629] RIP: 0033:0x7fe45cd8eba9 [ 221.149875][T14629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.149892][T14629] RSP: 002b:00007fe45dbe6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.149909][T14629] RAX: ffffffffffffffda RBX: 00007fe45cfd6090 RCX: 00007fe45cd8eba9 [ 221.149920][T14629] RDX: 0000200000000300 RSI: 000000008090ae81 RDI: 0000000000000005 [ 221.149931][T14629] RBP: 00007fe45dbe6090 R08: 0000000000000000 R09: 0000000000000000 [ 221.149942][T14629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.149952][T14629] R13: 00007fe45cfd6128 R14: 00007fe45cfd6090 R15: 00007ffe084ca7e8 [ 221.149976][T14629] [ 221.149993][T14629] ERROR: Out of memory at tomoyo_realpath_from_path. [ 221.246831][T14639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=285 sclass=netlink_route_socket pid=14639 comm=syz.3.2378 [ 221.333663][T14639] netlink: 'syz.3.2378': attribute type 2 has an invalid length. [ 221.337456][T14639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.566328][T14661] geneve2: entered promiscuous mode [ 221.572376][T14661] geneve2: entered allmulticast mode [ 221.649905][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2383'. [ 221.740588][T14681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.838794][T14687] overlayfs: failed to resolve './file0': -2 [ 222.142701][T14721] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2391'. [ 222.153125][ T40] kauditd_printk_skb: 3777 callbacks suppressed [ 222.153141][ T40] audit: type=1400 audit(1758693293.747:122651): avc: denied { recv } for pid=29 comm="kworker/1:0" saddr=10.0.2.2 src=43448 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 222.169390][T14723] FAULT_INJECTION: forcing a failure. [ 222.169390][T14723] name failslab, interval 1, probability 0, space 0, times 0 [ 222.170677][ T40] audit: type=1400 audit(1758693293.747:122652): avc: denied { recv } for pid=29 comm="kworker/1:0" saddr=10.0.2.2 src=43448 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 222.182777][ T40] audit: type=1400 audit(1758693293.747:122653): avc: denied { recv } for pid=29 comm="kworker/1:0" saddr=10.0.2.2 src=43448 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 222.189435][T14723] CPU: 2 UID: 0 PID: 14723 Comm: syz.3.2392 Not tainted syzkaller #0 PREEMPT(full) [ 222.189465][T14723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 222.189474][T14723] Call Trace: [ 222.189479][T14723] [ 222.189485][T14723] dump_stack_lvl+0x16c/0x1f0 [ 222.189509][T14723] should_fail_ex+0x512/0x640 [ 222.189528][T14723] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 222.189553][T14723] should_failslab+0xc2/0x120 [ 222.189571][T14723] __kmalloc_cache_noprof+0x6a/0x3e0 [ 222.189592][T14723] ? tomoyo_path_number_perm+0x18d/0x580 [ 222.189611][T14723] ? kvm_vcpu_ioctl+0xe32/0x1690 [ 222.189633][T14723] kvm_vcpu_ioctl+0xe32/0x1690 [ 222.189654][T14723] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 222.189673][T14723] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 222.189692][T14723] ? do_vfs_ioctl+0x128/0x14f0 [ 222.189715][T14723] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 222.189736][T14723] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 222.189766][T14723] ? hook_file_ioctl_common+0x145/0x410 [ 222.189786][T14723] ? selinux_file_ioctl+0x180/0x270 [ 222.189805][T14723] ? selinux_file_ioctl+0xb4/0x270 [ 222.189829][T14723] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 222.189849][T14723] __x64_sys_ioctl+0x18b/0x210 [ 222.189873][T14723] do_syscall_64+0xcd/0x4e0 [ 222.189894][T14723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.189909][T14723] RIP: 0033:0x7f58a9d8eba9 [ 222.189921][T14723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.189935][T14723] RSP: 002b:00007f58aabb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.189950][T14723] RAX: ffffffffffffffda RBX: 00007f58a9fd5fa0 RCX: 00007f58a9d8eba9 [ 222.189960][T14723] RDX: 0000200000000300 RSI: 000000008090ae81 RDI: 0000000000000005 [ 222.189969][T14723] RBP: 00007f58aabb7090 R08: 0000000000000000 R09: 0000000000000000 [ 222.189977][T14723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.189989][T14723] R13: 00007f58a9fd6038 R14: 00007f58a9fd5fa0 R15: 00007ffcd2640e48 [ 222.190010][T14723] [ 222.250110][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 222.251845][T14737] audit: audit_backlog=65 > audit_backlog_limit=64 [ 222.254075][ C1] audit: audit_lost=95 audit_rate_limit=0 audit_backlog_limit=64 [ 222.254090][ C1] audit: backlog limit exceeded [ 222.255598][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 222.263016][T14737] audit: audit_lost=96 audit_rate_limit=0 audit_backlog_limit=64 [ 222.264644][ T40] audit: type=1400 audit(1758693293.747:122654): avc: denied { recv } for pid=29 comm="kworker/1:0" saddr=10.0.2.2 src=43448 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 222.512015][T14747] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 222.514334][T14747] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 222.519176][T14747] vhci_hcd vhci_hcd.0: Device attached [ 222.523620][T14749] vhci_hcd: connection closed [ 222.523928][ T1236] vhci_hcd: stop threads [ 222.527312][ T1236] vhci_hcd: release socket [ 222.528845][ T1236] vhci_hcd: disconnect device [ 223.068896][T14776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'. [ 223.073014][T14776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'. [ 223.078251][T14776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'. [ 223.082060][T14776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'. [ 223.087861][T14776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'. [ 223.093467][T14776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'. [ 223.097479][T14776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'. [ 223.321275][T14791] FAULT_INJECTION: forcing a failure. [ 223.321275][T14791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.325513][T14791] CPU: 3 UID: 0 PID: 14791 Comm: syz.6.2405 Not tainted syzkaller #0 PREEMPT(full) [ 223.325535][T14791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.325546][T14791] Call Trace: [ 223.325553][T14791] [ 223.325561][T14791] dump_stack_lvl+0x16c/0x1f0 [ 223.325584][T14791] should_fail_ex+0x512/0x640 [ 223.325602][T14791] _copy_to_user+0x32/0xd0 [ 223.325620][T14791] kvm_vcpu_ioctl+0xe7b/0x1690 [ 223.325638][T14791] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 223.325653][T14791] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 223.325671][T14791] ? do_vfs_ioctl+0x128/0x14f0 [ 223.325698][T14791] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 223.325724][T14791] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 223.325760][T14791] ? hook_file_ioctl_common+0x145/0x410 [ 223.325778][T14791] ? selinux_file_ioctl+0x180/0x270 [ 223.325794][T14791] ? selinux_file_ioctl+0xb4/0x270 [ 223.325810][T14791] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 223.325826][T14791] __x64_sys_ioctl+0x18b/0x210 [ 223.325844][T14791] do_syscall_64+0xcd/0x4e0 [ 223.325860][T14791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.325872][T14791] RIP: 0033:0x7f7e6338eba9 [ 223.325881][T14791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.325892][T14791] RSP: 002b:00007f7e6415a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.325903][T14791] RAX: ffffffffffffffda RBX: 00007f7e635d5fa0 RCX: 00007f7e6338eba9 [ 223.325911][T14791] RDX: 0000200000000300 RSI: 000000008090ae81 RDI: 0000000000000005 [ 223.325917][T14791] RBP: 00007f7e6415a090 R08: 0000000000000000 R09: 0000000000000000 [ 223.325924][T14791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.325931][T14791] R13: 00007f7e635d6038 R14: 00007f7e635d5fa0 R15: 00007fff2bbea508 [ 223.325945][T14791] [ 223.456552][T14800] No source specified [ 223.684303][T14819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14819 comm=syz.4.2412 [ 223.946459][T14836] block nbd3: Attempted send on invalid socket [ 223.948500][T14836] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 223.951662][T14836] XFS (nbd3): SB validate failed with error -5. [ 223.993794][ T7173] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 223.998127][ T7173] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 224.000413][ T7173] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 224.008907][ T7173] hid-generic 0003:0004:0000.000B: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 224.083082][T14856] fido_id[14856]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 224.177283][T14864] overlayfs: failed to resolve './file0': -2 [ 224.285758][T14894] xt_HMARK: spi-set and port-set can't be combined [ 224.917899][ T29] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 224.950706][T14952] overlayfs: failed to resolve './file0': -2 [ 225.094060][ T29] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.099266][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 225.103886][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 225.110926][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.120871][ T29] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.124629][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.139113][ T29] usb 10-1: config 0 descriptor?? [ 225.564635][ T29] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 225.570152][ T29] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 225.572457][ T29] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 225.574722][ T29] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 225.577144][ T29] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 225.579951][ T29] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 225.582233][ T29] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 225.603201][ T29] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 225.657375][T15002] overlayfs: failed to resolve './file0': -2 [ 225.950764][ T1332] usb 10-1: USB disconnect, device number 10 [ 226.366892][T15089] IPVS: length: 184 != 24 [ 226.606236][T15100] overlayfs: failed to resolve './file0': -2 [ 226.844998][T15133] __nla_validate_parse: 61 callbacks suppressed [ 226.845037][T15133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2461'. [ 226.910019][T15137] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2463'. [ 226.915045][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2463'. [ 226.919260][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2463'. [ 226.942123][ T5333] Bluetooth: hci0: unexpected event for opcode 0x080d [ 227.108443][T15147] delete_channel: no stack [ 227.115873][T15147] delete_channel: no stack [ 227.117844][T15147] delete_channel: no stack [ 227.119773][T15147] delete_channel: no stack [ 227.121605][T15147] delete_channel: no stack [ 227.123526][T15147] delete_channel: no stack [ 227.125427][T15147] delete_channel: no stack [ 227.127369][T15147] delete_channel: no stack [ 227.129283][T15147] delete_channel: no stack [ 227.131635][T15147] delete_channel: no stack [ 227.133698][T15147] delete_channel: no stack [ 227.135600][T15147] delete_channel: no stack [ 227.137597][T15147] delete_channel: no stack [ 227.139477][T15147] delete_channel: no stack [ 227.141615][T15147] delete_channel: no stack [ 227.143632][T15147] delete_channel: no stack [ 227.145856][T15147] delete_channel: no stack [ 227.147797][T15147] delete_channel: no stack [ 227.149762][T15147] delete_channel: no stack [ 227.153192][T15147] delete_channel: no stack [ 227.155141][T15147] delete_channel: no stack [ 227.157094][T15147] delete_channel: no stack [ 227.160971][T15147] delete_channel: no stack [ 227.162965][T15147] delete_channel: no stack [ 227.164900][T15147] delete_channel: no stack [ 227.167101][T15147] delete_channel: no stack [ 227.175775][T15147] delete_channel: no stack [ 227.177301][T15147] delete_channel: no stack [ 227.178829][T15147] delete_channel: no stack [ 227.180308][T15147] delete_channel: no stack [ 227.181970][T15147] delete_channel: no stack [ 227.183733][T15147] delete_channel: no stack [ 227.185299][T15147] delete_channel: no stack [ 227.186904][T15147] delete_channel: no stack [ 227.188422][T15147] delete_channel: no stack [ 227.190168][T15147] delete_channel: no stack [ 227.194439][T15147] delete_channel: no stack [ 227.196058][T15147] delete_channel: no stack [ 227.197864][T15147] delete_channel: no stack [ 227.199342][T15147] delete_channel: no stack [ 227.200941][T15147] delete_channel: no stack [ 227.202492][T15147] delete_channel: no stack [ 227.203975][T15147] delete_channel: no stack [ 227.206724][T15147] delete_channel: no stack [ 227.208215][T15147] delete_channel: no stack [ 227.209692][T15147] delete_channel: no stack [ 227.218226][ T40] kauditd_printk_skb: 2254 callbacks suppressed [ 227.218236][ T40] audit: type=1400 audit(1758693298.769:124906): avc: denied { recv } for pid=15150 comm="syz.4.2467" saddr=10.0.2.2 src=43448 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 227.221437][T15147] delete_channel: no stack [ 227.232382][T15147] delete_channel: no stack [ 227.235678][ T40] audit: type=1400 audit(1758693298.769:124907): avc: denied { recv } for pid=15150 comm="syz.4.2467" saddr=10.0.2.2 src=43448 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 227.242939][ C2] audit: audit_backlog=65 > audit_backlog_limit=64 [ 227.246553][ T40] audit: type=1400 audit(1758693298.769:124908): avc: denied { recv } for pid=15150 comm="syz.4.2467" saddr=10.0.2.2 src=43448 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 227.246897][ C2] audit: audit_lost=98 audit_rate_limit=0 audit_backlog_limit=64 [ 227.247500][T15147] delete_channel: no stack [ 227.247668][T15147] delete_channel: no stack [ 227.247743][T15147] delete_channel: no stack [ 227.247816][T15147] delete_channel: no stack [ 227.247893][T15147] delete_channel: no stack [ 227.247967][T15147] delete_channel: no stack [ 227.248041][T15147] delete_channel: no stack [ 227.248115][T15147] delete_channel: no stack [ 227.248193][T15147] delete_channel: no stack [ 227.248269][T15147] delete_channel: no stack [ 227.248343][T15147] delete_channel: no stack [ 227.248421][T15147] delete_channel: no stack [ 227.248499][T15147] delete_channel: no stack [ 227.248573][T15147] delete_channel: no stack [ 227.248650][T15147] delete_channel: no stack [ 227.248724][T15147] delete_channel: no stack [ 227.248863][T15147] delete_channel: no stack [ 227.263085][T13171] audit: audit_backlog=65 > audit_backlog_limit=64 [ 227.264324][ C2] audit: backlog limit exceeded [ 227.266191][T13171] audit: audit_lost=99 audit_rate_limit=0 audit_backlog_limit=64 [ 227.267083][ T40] audit: type=1400 audit(1758693298.769:124909): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53028 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 227.267109][ T40] audit: type=1400 audit(1758693298.769:124910): avc: denied { recv } for pid=15150 comm="syz.4.2467" saddr=10.0.2.2 src=43448 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 227.298042][T15153] overlayfs: failed to clone upperpath [ 227.418093][T15167] misc userio: Can't change port type on an already running userio instance [ 227.455547][T15167] overlayfs: failed to resolve './file0': -2 [ 227.535746][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2473'. [ 227.726488][T15199] veth0_vlan: left promiscuous mode [ 227.728893][T15199] veth0_vlan: entered promiscuous mode [ 227.974745][T15255] netlink: 'syz.3.2482': attribute type 10 has an invalid length. [ 228.077916][T15255] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 228.081217][T15255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.137949][T15282] overlayfs: missing 'lowerdir' [ 228.645257][T15325] tmpfs: Unknown parameter 'in3hsm?[@cvyҷ˥oDe32' [ 228.793491][T15329] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2493'. [ 229.229315][T15353] FAULT_INJECTION: forcing a failure. [ 229.229315][T15353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.235203][T15353] CPU: 0 UID: 0 PID: 15353 Comm: syz.3.2497 Not tainted syzkaller #0 PREEMPT(full) [ 229.235219][T15353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 229.235237][T15353] Call Trace: [ 229.235243][T15353] [ 229.235247][T15353] dump_stack_lvl+0x16c/0x1f0 [ 229.235281][T15353] should_fail_ex+0x512/0x640 [ 229.235304][T15353] _copy_from_user+0x2e/0xd0 [ 229.235320][T15353] copy_msghdr_from_user+0x98/0x160 [ 229.235336][T15353] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 229.235357][T15353] ___sys_sendmsg+0xfe/0x1d0 [ 229.235372][T15353] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.235403][T15353] __sys_sendmsg+0x16d/0x220 [ 229.235417][T15353] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.235440][T15353] do_syscall_64+0xcd/0x4e0 [ 229.235463][T15353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.235476][T15353] RIP: 0033:0x7f58a9d8eba9 [ 229.235485][T15353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.235496][T15353] RSP: 002b:00007f58aabb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.235507][T15353] RAX: ffffffffffffffda RBX: 00007f58a9fd5fa0 RCX: 00007f58a9d8eba9 [ 229.235514][T15353] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 229.235521][T15353] RBP: 00007f58aabb7090 R08: 0000000000000000 R09: 0000000000000000 [ 229.235527][T15353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.235534][T15353] R13: 00007f58a9fd6038 R14: 00007f58a9fd5fa0 R15: 00007ffcd2640e48 [ 229.235548][T15353] [ 229.613390][T15373] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2503'. [ 229.639108][T15377] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 229.648614][T15377] bridge0: port 3(batadv0) entered disabled state [ 229.655371][T15377] bridge_slave_0: left allmulticast mode [ 229.657199][T15377] bridge_slave_0: left promiscuous mode [ 229.659032][T15377] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.666085][T15377] bridge_slave_1: left allmulticast mode [ 229.667893][T15377] bridge_slave_1: left promiscuous mode [ 229.669766][T15377] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.678644][T15377] bond0: (slave bond_slave_0): Releasing backup interface [ 229.685079][T15377] bond0: (slave bond_slave_1): Releasing backup interface [ 229.692931][T15377] team0: Port device team_slave_1 removed [ 229.701675][T15382] netlink: 'syz.5.2504': attribute type 10 has an invalid length. [ 229.702182][T15377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.706571][T15377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.711157][T15377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.713651][T15377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.726694][T15382] mac80211_hwsim hwsim14 wlan1: left allmulticast mode [ 229.732192][T15382] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 230.101570][T15415] 9pnet_fd: Insufficient options for proto=fd [ 230.106264][T15415] 9pnet_fd: Insufficient options for proto=fd [ 230.185673][ T7173] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 230.241751][T15422] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.333086][T15422] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.344050][ T7173] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 230.347688][ T7173] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 230.350765][ T7173] usb 11-1: config 0 interface 0 has no altsetting 0 [ 230.359191][ T7173] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 230.362140][ T7173] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 230.373906][ T7173] usb 11-1: Product: syz [ 230.377917][ T7173] usb 11-1: Manufacturer: syz [ 230.379613][ T7173] usb 11-1: SerialNumber: syz [ 230.401287][ T7173] usb 11-1: config 0 descriptor?? [ 230.406334][T15441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2514'. [ 230.416606][ T7173] hub 11-1:0.0: bad descriptor, ignoring hub [ 230.418676][ T7173] hub 11-1:0.0: probe with driver hub failed with error -5 [ 230.422832][ T7173] usb 11-1: selecting invalid altsetting 0 [ 230.443239][T15422] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.467700][T15443] tmpfs: User quota block hardlimit too large. [ 230.569200][T15422] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.652820][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.680921][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.735146][ T6205] usb 11-1: USB disconnect, device number 12 [ 230.795005][T15509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15509 comm=syz.4.2519 [ 230.800932][T15509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2519'. [ 230.951160][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.956007][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.197163][T15598] block device autoloading is deprecated and will be removed. [ 231.472327][T15628] syzkaller1: entered promiscuous mode [ 231.474226][T15628] syzkaller1: entered allmulticast mode [ 231.993805][ T9087] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.000141][ T9087] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.003128][ T9087] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.006971][ T9087] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.189250][T15671] overlayfs: failed to resolve './file0': -2 [ 232.227099][ T40] kauditd_printk_skb: 2304 callbacks suppressed [ 232.227115][ T40] audit: type=1400 audit(1758693303.814:127214): avc: denied { search } for pid=15678 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.245788][ T40] audit: type=1400 audit(1758693303.814:127215): avc: denied { search } for pid=15678 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.252281][T15678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 232.255160][T15678] audit: audit_lost=100 audit_rate_limit=0 audit_backlog_limit=64 [ 232.256041][ T40] audit: type=1400 audit(1758693303.814:127216): avc: denied { search } for pid=15678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.265472][T15678] audit: backlog limit exceeded [ 232.266119][T15683] audit: audit_backlog=65 > audit_backlog_limit=64 [ 232.266130][T15683] audit: audit_lost=101 audit_rate_limit=0 audit_backlog_limit=64 [ 232.267906][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 232.270620][T15678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 232.509946][T15701] delete_channel: no stack [ 232.604437][T15713] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 232.740342][T15734] Invalid logical block size (3) [ 232.790489][T15736] Bluetooth: MGMT ver 1.23 [ 232.824453][T15750] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2556'. [ 232.831305][T15741] tmpfs: Unknown parameter 'dont_appraise' [ 232.836574][T15750] netlink: 'syz.5.2556': attribute type 1 has an invalid length. [ 232.842884][T15750] netlink: 'syz.5.2556': attribute type 4 has an invalid length. [ 232.849129][T15750] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2556'. [ 232.898902][T15750] block nbd5: Attempted send on invalid socket [ 232.901125][T15750] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 232.904378][T15750] block nbd5: Attempted send on invalid socket [ 232.906349][T15750] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.010119][T15766] netlink: 'syz.5.2561': attribute type 27 has an invalid length. [ 233.044323][T15766] sit0: left allmulticast mode [ 233.082479][T15766] batadv0: left promiscuous mode [ 233.084130][T15766] batadv0: left allmulticast mode [ 233.315072][ T13] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.322259][ T13] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.332190][ T13] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.335776][ T13] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.362998][T15794] sctp: [Deprecated]: syz.6.2568 (pid 15794) Use of int in max_burst socket option deprecated. [ 233.362998][T15794] Use struct sctp_assoc_value instead [ 233.869239][T15843] cgroup2: Unknown parameter 'euid' [ 234.008555][T15849] openvswitch: netlink: Invalid VLAN frame [ 234.084754][T15853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15853 comm=syz.3.2571 [ 234.116522][T15855] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 234.147552][T15855] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2576'. [ 234.162412][T15855] ipvlan0: entered promiscuous mode [ 234.164912][T15855] bridge0: port 1(ipvlan0) entered blocking state [ 234.167485][T15855] bridge0: port 1(ipvlan0) entered disabled state [ 234.170954][T15855] ipvlan0: entered allmulticast mode [ 234.173044][T15855] bridge0: entered allmulticast mode [ 234.175564][T15855] ipvlan0: left allmulticast mode [ 234.177168][T15855] bridge0: left allmulticast mode [ 234.267198][T15855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14542 sclass=netlink_route_socket pid=15855 comm=syz.5.2576 [ 234.387496][T15883] IPVS: rr: FWM 3 0x00000003 - no destination available [ 234.447990][T15887] nft_compat: unsupported protocol 0 [ 234.549799][ T5984] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.560515][ T5984] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.563520][ T5984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.567714][ T5984] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.571550][ T5984] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.629447][T15903] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 234.727062][T15912] Invalid logical block size (-5) [ 234.995063][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.001367][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.005489][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 235.025384][T16031] IPVS: rr: FWM 3 0x00000003 - no destination available [ 235.036463][T15894] chnl_net:caif_netlink_parms(): no params data found [ 235.095874][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.099590][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.102773][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 235.155003][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.159445][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.163690][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 235.308641][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.313960][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.318451][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 235.338603][T15894] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.345509][T15894] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.348507][T15894] bridge_slave_0: entered allmulticast mode [ 235.353384][T15894] bridge_slave_0: entered promiscuous mode [ 235.362274][T15894] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.365222][T15894] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.367567][T15894] bridge_slave_1: entered allmulticast mode [ 235.371515][T15894] bridge_slave_1: entered promiscuous mode [ 235.496158][T15894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.507660][T15894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.583896][T15894] team0: Port device team_slave_0 added [ 235.605860][T16367] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 235.616138][T15894] team0: Port device team_slave_1 added [ 235.679555][T16507] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3362589435 (3362589435 ns) > initial count (839267214 ns). Using initial count to start timer. [ 235.751390][T16555] kvm: pic: non byte read [ 235.754466][T16555] kvm: pic: level sensitive irq not supported [ 235.754733][T16555] kvm: pic: non byte read [ 235.762130][T16555] kvm: pic: level sensitive irq not supported [ 235.762466][T16555] kvm: pic: non byte read [ 235.768587][T16555] kvm: pic: level sensitive irq not supported [ 235.773554][T16555] kvm: pic: non byte read [ 235.782367][T16555] kvm: pic: level sensitive irq not supported [ 235.782616][T16555] kvm: pic: non byte read [ 235.788609][T16555] kvm: pic: level sensitive irq not supported [ 235.789034][T16555] kvm: pic: non byte read [ 235.797473][T16555] kvm: pic: level sensitive irq not supported [ 235.797815][T16555] kvm: pic: non byte read [ 235.813853][T16555] kvm: pic: level sensitive irq not supported [ 235.814275][T16555] kvm: pic: non byte read [ 235.829089][T15894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.835253][T16555] kvm: pic: level sensitive irq not supported [ 235.835614][T16555] kvm: pic: non byte read [ 235.841317][T15894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.851863][T15894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.880478][T15894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.883352][T15894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.894449][T15894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.955985][T16649] overlay: filesystem on ./bus not supported as upperdir [ 236.048138][T16657] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2601'. [ 236.214330][ T13] bond5 (unregistering): (slave geneve5): Releasing active interface [ 236.217822][T16668] QAT: Invalid ioctl -2144835806 [ 236.221865][T16668] QAT: Invalid ioctl -1067948258 [ 236.269034][ T13] bond4 (unregistering): (slave geneve3): Releasing active interface [ 236.643838][ T5333] Bluetooth: hci2: command tx timeout [ 236.655531][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2612'. [ 236.700155][ T13] bond0 (unregistering): Released all slaves [ 236.779197][ T13] bond1 (unregistering): Released all slaves [ 236.866877][ T13] bond2 (unregistering): Released all slaves [ 236.873071][ T13] bond3 (unregistering): Released all slaves [ 236.951041][ T13] bond4 (unregistering): Released all slaves [ 236.957783][ T13] bond5 (unregistering): Released all slaves [ 236.964534][ T13] bond6 (unregistering): Released all slaves [ 237.046602][ T13] bond7 (unregistering): Released all slaves [ 237.129053][ T13] bond8 (unregistering): (slave veth15): Releasing active interface [ 237.133973][ T13] bond8 (unregistering): Released all slaves [ 237.147516][T16665] tc_dump_action: action bad kind [ 237.242142][ T40] kauditd_printk_skb: 2395 callbacks suppressed [ 237.242159][ T40] audit: type=1400 audit(1758693308.820:129544): avc: denied { recv } for pid=6018 comm="kworker/1:4" saddr=10.0.2.2 src=43448 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 237.258384][ T40] audit: type=1400 audit(1758693308.820:129545): avc: denied { recv } for pid=6018 comm="kworker/1:4" saddr=10.0.2.2 src=43448 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 237.274617][ T40] audit: type=1400 audit(1758693308.830:129546): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53028 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 237.278385][T16707] mqueue: Unknown parameter 'usrquota' [ 237.286395][ T40] audit: type=1400 audit(1758693308.830:129547): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=127.0.0.1 src=53028 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 237.286441][ T40] audit: type=1400 audit(1758693308.840:129548): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53028 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 237.286483][ T40] audit: type=1400 audit(1758693308.840:129549): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=127.0.0.1 src=53028 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 237.307577][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2614'. [ 237.309313][ T5333] Bluetooth: unknown link type 153 [ 237.309358][ T5333] Bluetooth: hci4: connection err: -111 [ 237.315258][ T40] audit: type=1400 audit(1758693308.850:129550): avc: denied { create } for pid=16702 comm="syz.5.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.317996][T16707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2614'. [ 237.318434][ T40] audit: type=1400 audit(1758693308.850:129551): avc: denied { getopt } for pid=16702 comm="syz.5.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.334637][ T40] audit: type=1400 audit(1758693308.850:129552): avc: denied { create } for pid=16702 comm="syz.5.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.341198][ T40] audit: type=1400 audit(1758693308.860:129553): avc: denied { bind } for pid=16702 comm="syz.5.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.387216][T16711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2614'. [ 237.416448][T16715] netlink: 'syz.5.2615': attribute type 21 has an invalid length. [ 237.420704][T16715] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2615'. [ 237.436831][ T13] tipc: Left network mode [ 237.443992][T16715] netlink: 'syz.5.2615': attribute type 6 has an invalid length. [ 237.446405][T16715] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2615'. [ 237.462708][ T13] IPVS: stopping backup sync thread 9384 ... [ 237.488138][ T224] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.491268][ T224] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.545199][ T224] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.548632][ T224] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.566557][T15894] hsr_slave_0: entered promiscuous mode [ 237.568700][T15894] hsr_slave_1: entered promiscuous mode [ 237.571654][T15894] debugfs: 'hsr0' already exists in 'hsr' [ 237.573472][T15894] Cannot create hsr debugfs directory [ 237.796941][ T13] hsr_slave_0: left promiscuous mode [ 237.800572][ T13] hsr_slave_1: left promiscuous mode [ 238.124535][T17084] SELinux: policydb magic number 0x120 does not match expected magic number 0xf97cff8c [ 238.128863][T17084] SELinux: failed to load policy [ 238.138966][T17085] overlayfs: failed to resolve 'verity=require': -2 [ 238.496174][T17104] overlayfs: failed to resolve 'dont_measure': -2 [ 238.734615][ T5333] Bluetooth: hci2: command tx timeout [ 239.258654][T17116] sctp: [Deprecated]: syz.3.2631 (pid 17116) Use of int in max_burst socket option. [ 239.258654][T17116] Use struct sctp_assoc_value instead [ 239.350244][T17076] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 239.354126][T17076] tipc: Enabled bearer , priority 10 [ 239.456065][T17137] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17137 comm=syz.6.2632 [ 239.540705][T17165] IPVS: rr: FWM 3 0x00000003 - no destination available [ 239.855785][T17201] syzkaller1: entered promiscuous mode [ 239.859589][T17201] syzkaller1: entered allmulticast mode [ 239.961002][ T13] IPVS: stop unused estimator thread 0... [ 240.018483][T17216] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 240.021406][T17216] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 240.025693][T15894] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 240.032727][T17216] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 240.038870][T15894] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 240.043264][T17216] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2638'. [ 240.048861][T15894] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 240.056615][T15894] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.222639][T15894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.249187][T15894] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.265095][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.267342][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.277620][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.279902][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.436725][T17256] sd 0:0:0:0: PR command failed: 1026 [ 240.443531][T17256] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 240.457762][T17256] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 240.505308][T17256] IPv6: NLM_F_CREATE should be specified when creating new route [ 240.758751][T17283] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 240.767857][T17283] CIFS: Unable to determine destination address [ 240.771014][T17283] trusted_key: encrypted_key: hex blob is missing [ 240.804342][ T5333] Bluetooth: hci2: command tx timeout [ 240.840359][T15894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.966475][T17295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2647'. [ 241.122351][T17304] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2649'. [ 241.315466][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2654'. [ 241.318232][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2654'. [ 241.351972][T17330] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2655'. [ 241.358324][T17330] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2655'. [ 241.397887][T17325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2654'. [ 241.400749][T17325] bridge_slave_1: left allmulticast mode [ 241.402542][T17325] bridge_slave_1: left promiscuous mode [ 241.407364][T17325] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.434134][T17325] bridge_slave_0: left allmulticast mode [ 241.436365][T17325] bridge_slave_0: left promiscuous mode [ 241.438305][T17325] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.523366][ T1332] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 241.702711][ T1332] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.703941][T15894] veth0_vlan: entered promiscuous mode [ 241.714346][ T1332] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.718849][ T1332] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 241.721031][T15894] veth1_vlan: entered promiscuous mode [ 241.722847][ T1332] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 241.753254][ T1332] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.755996][ T1332] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.785010][ T1332] usb 8-1: config 0 descriptor?? [ 241.893688][T15894] veth0_macvtap: entered promiscuous mode [ 241.914127][T15894] veth1_macvtap: entered promiscuous mode [ 242.015957][T15894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.042044][T15894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.045029][T17372] loop2: detected capacity change from 0 to 7 [ 242.055788][ T9087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.060562][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.065187][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.067968][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.103463][T17372] Invalid logical block size (9) [ 242.122937][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.126715][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.130393][ C3] buffer_io_error: 31 callbacks suppressed [ 242.130407][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 242.156554][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.159479][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 242.171020][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.173946][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 242.177802][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.180783][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 242.185067][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.187965][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 242.232159][ T1332] hid_parser_main: 8 callbacks suppressed [ 242.232174][ T1332] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 242.243937][ T1332] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 242.246214][ T1332] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 242.253254][ T1332] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 242.256741][ T1332] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 242.269922][ T1332] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 242.272241][ T1332] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 242.281684][ T1332] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 242.284166][T17389] netlink: 'syz.6.2660': attribute type 5 has an invalid length. [ 242.287247][ T1332] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 242.289564][ T1332] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 242.304164][ T1332] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 242.309156][ T40] kauditd_printk_skb: 2953 callbacks suppressed [ 242.309164][ T40] audit: type=1400 audit(1758693313.887:132507): avc: denied { search } for pid=17387 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.323642][ T40] audit: type=1400 audit(1758693313.887:132508): avc: denied { read } for pid=17387 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.330403][ T40] audit: type=1400 audit(1758693313.887:132509): avc: denied { read open } for pid=17387 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.349487][ T40] audit: type=1400 audit(1758693313.887:132510): avc: denied { search } for pid=17387 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.355932][ T40] audit: type=1400 audit(1758693313.887:132511): avc: denied { search } for pid=17387 comm="cmp" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.362539][ T40] audit: type=1400 audit(1758693313.887:132512): avc: denied { search } for pid=17387 comm="cmp" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.371855][ T40] audit: type=1400 audit(1758693313.887:132513): avc: denied { read } for pid=17387 comm="cmp" name="resolv.conf.eth14.link" dev="tmpfs" ino=9016 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.380509][ T40] audit: type=1400 audit(1758693313.887:132514): avc: denied { read open } for pid=17387 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.eth14.link" dev="tmpfs" ino=9016 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.389815][ T40] audit: type=1400 audit(1758693313.897:132515): avc: denied { getattr } for pid=17387 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.397819][ T40] audit: type=1400 audit(1758693313.897:132516): avc: denied { getattr } for pid=17387 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.eth14.link" dev="tmpfs" ino=9016 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.427074][T17400] QAT: failed to copy from user. [ 242.479830][T17400] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 242.496753][ T1332] usb 8-1: USB disconnect, device number 26 [ 242.556734][T17415] IPVS: rr: FWM 3 0x00000003 - no destination available [ 242.678264][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.680685][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.725312][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.727905][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.884888][ T5333] Bluetooth: hci2: command tx timeout [ 242.917758][T17450] overlayfs: failed to resolve './file0': -2 [ 243.083578][T17481] binder: 17480:17481 ioctl c0306201 2000000003c0 returned -14 [ 243.140751][T17486] syzkaller1: entered promiscuous mode [ 243.142492][T17486] syzkaller1: entered allmulticast mode [ 243.693510][T17526] netlink: 'syz.4.2678': attribute type 29 has an invalid length. [ 243.700241][T17526] netlink: 'syz.4.2678': attribute type 29 has an invalid length. [ 244.089842][ C3] sr 2:0:0:0: [sr0] tag#7 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 244.093072][ C3] sr 2:0:0:0: [sr0] tag#7 CDB: Rebuild(16) 81 05 04 36 fc 23 92 71 a4 c2 2b b3 [ 244.570084][T17597] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2695'. [ 244.917490][T17630] macvlan2: entered promiscuous mode [ 244.919194][T17630] macvlan2: entered allmulticast mode [ 244.921235][T17630] veth1_vlan: entered allmulticast mode [ 244.924334][T17630] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 245.245082][T17650] macvlan0: entered promiscuous mode [ 245.251029][T17650] macvlan0: entered allmulticast mode [ 245.252824][T17650] veth1_vlan: entered allmulticast mode [ 245.255930][ T839] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 245.262267][T17648] gtp0: entered promiscuous mode [ 245.397655][T17661] 9pnet_fd: Insufficient options for proto=fd [ 245.425155][ T839] usb 9-1: Using ep0 maxpacket: 8 [ 245.439633][ T839] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 245.443856][ T839] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 245.447983][ T839] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.451922][ T839] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.457289][ T839] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.460868][ T839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.680262][ T5984] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 245.697915][ T839] usb 9-1: GET_CAPABILITIES returned 0 [ 245.699783][ T839] usbtmc 9-1:16.0: can't read capabilities [ 245.724517][T17678] netlink: 'syz.6.2716': attribute type 32 has an invalid length. [ 245.953219][ T1475] usb 9-1: USB disconnect, device number 11 [ 246.005221][ T5333] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 246.599886][T17728] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2719'. [ 246.733093][T17778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2723'. [ 247.228202][T17812] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 247.242292][T17812] bond0: (slave rose0): Releasing backup interface [ 247.288862][T17816] netlink: 'syz.3.2731': attribute type 2 has an invalid length. [ 247.292213][T17816] netlink: 'syz.3.2731': attribute type 1 has an invalid length. [ 247.301775][T17816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2731'. [ 247.318547][ T40] kauditd_printk_skb: 1402 callbacks suppressed [ 247.318563][ T40] audit: type=1400 audit(1758693318.895:133919): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53028 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 247.347353][ T40] audit: type=1400 audit(1758693318.895:133920): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=127.0.0.1 src=53028 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 247.367210][T17817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 247.369312][T17817] audit: audit_lost=125 audit_rate_limit=0 audit_backlog_limit=64 [ 247.371444][T17817] audit: backlog limit exceeded [ 247.372799][T17817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 247.374791][T17817] audit: audit_lost=126 audit_rate_limit=0 audit_backlog_limit=64 [ 247.377217][ T40] audit: type=1400 audit(1758693318.895:133921): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53028 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 247.377238][T17817] audit: backlog limit exceeded [ 247.384803][ T40] audit: type=1400 audit(1758693318.895:133922): avc: denied { recv } for pid=17806 comm="syz.4.2727" saddr=10.0.2.2 src=43448 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 247.417197][T17819] IPVS: rr: FWM 3 0x00000003 - no destination available [ 247.602055][T17825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2734'. [ 247.996874][T17846] IPVS: rr: FWM 3 0x00000003 - no destination available [ 248.197195][T17882] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2744'. [ 248.597277][T17898] dns_resolver: Unsupported content type (234) [ 248.660014][T17901] netlink: 'syz.6.2747': attribute type 1 has an invalid length. [ 248.704901][T17904] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 248.809772][T17910] netlink: 'syz.3.2751': attribute type 1 has an invalid length. [ 248.824710][T17910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.835608][T17910] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 248.839033][T17912] bond1: entered allmulticast mode [ 248.861250][ T5333] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 249.698473][ T5333] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 249.701676][ T5333] Bluetooth: hci0: Injecting HCI hardware error event [ 249.705101][ T5333] Bluetooth: hci0: hardware error 0x00 [ 249.804014][T17993] netlink: 'syz.3.2760': attribute type 1 has an invalid length. [ 249.846347][ T1475] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 249.999717][ T1475] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.003253][ T1475] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.006464][ T1475] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.010537][ T1475] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.013441][ T1475] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.018940][ T1475] usb 11-1: config 0 descriptor?? [ 250.056444][ T6018] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 250.222578][ T6018] usb 8-1: Using ep0 maxpacket: 16 [ 250.230331][ T6018] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.233747][ T6018] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 250.237895][ T6018] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 250.240955][ T6018] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.249279][ T6018] usb 8-1: config 0 descriptor?? [ 250.399859][T18008] netlink: 1792 bytes leftover after parsing attributes in process `syz.4.2763'. [ 250.435574][ T1475] hid_parser_main: 5 callbacks suppressed [ 250.435594][ T1475] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 250.441386][ T1475] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 250.443748][ T1475] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 250.446080][ T1475] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 250.449437][ T1475] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 250.451839][ T1475] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 250.454214][ T1475] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 250.457778][ T1475] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 250.460133][ T1475] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 250.468045][ T1475] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 250.496271][T18016] loop2: detected capacity change from 0 to 7 [ 250.499501][ T1475] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 250.512462][T18016] loop2: [ 250.513494][T18016] loop2: partition table partially beyond EOD, truncated [ 250.630190][ T6018] usbhid 8-1:0.0: can't add hid device: -71 [ 250.632202][ T6018] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 250.647329][ T6018] usb 8-1: USB disconnect, device number 27 [ 250.689544][ T1348] usb 11-1: USB disconnect, device number 13 [ 250.878037][T18057] netlink: 'syz.4.2767': attribute type 4 has an invalid length. [ 250.880538][T18057] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2767'. [ 250.890050][T18057] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 251.222904][T18059] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 251.779725][ T5333] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 251.813682][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2775'. [ 251.817219][T18092] IPVS: Error joining to the multicast group [ 251.968524][T18103] macvlan3: entered promiscuous mode [ 251.977204][T18103] macvlan3: entered allmulticast mode [ 251.979141][T18103] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 252.253531][T18125] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 252.256058][T18125] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 252.260073][T18125] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 252.262492][T18125] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 252.327064][ T40] kauditd_printk_skb: 15249 callbacks suppressed [ 252.327074][ T40] audit: type=1326 audit(1758693323.903:149065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18072 comm="syz.6.2771" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6338eba9 code=0x50000 [ 252.342408][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 252.345083][ C1] audit: audit_lost=163 audit_rate_limit=0 audit_backlog_limit=64 [ 252.347610][ C1] audit: backlog limit exceeded [ 252.348592][ T40] audit: type=1400 audit(1758693323.903:149066): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53028 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 252.357916][ T40] audit: type=1400 audit(1758693323.903:149067): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=53028 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 252.363330][T18134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 252.365564][ T40] audit: type=1400 audit(1758693323.903:149068): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=53028 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 252.367998][T18134] audit: audit_lost=164 audit_rate_limit=0 audit_backlog_limit=64 [ 252.375412][ T40] audit: type=1400 audit(1758693323.913:149069): avc: denied { recv } for pid=5952 comm="sshd-session" saddr=10.0.2.2 src=43448 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 252.875943][T18162] netlink: 622 bytes leftover after parsing attributes in process `syz.4.2789'. [ 252.982706][T18165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2790'. [ 253.361798][T18182] program syz.5.2793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.493010][T18191] 9pnet_fd: Insufficient options for proto=fd [ 253.805520][T18200] syz.5.2798: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 254.510133][T18234] loop2: detected capacity change from 0 to 7 [ 254.518952][T18234] Dev loop2: unable to read RDB block 7 [ 254.521352][T18234] loop2: unable to read partition table [ 254.523877][T18234] loop2: partition table beyond EOD, truncated [ 254.526495][T18234] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 254.638334][T18253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18253 comm=syz.6.2811 [ 254.781982][T18265] fuse: Bad value for 'fd' [ 254.863068][T18274] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2815'. [ 255.168488][T18297] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 255.353469][ T6018] Process accounting resumed [ 255.380913][T18306] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2820'. [ 255.533004][T18305] Process accounting resumed [ 256.010252][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.338121][ T40] kauditd_printk_skb: 57629 callbacks suppressed [ 257.338131][ T40] audit: type=1326 audit(1758693328.902:206523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.4.2817" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ca38eba9 code=0x50000 [ 257.346979][ T40] audit: type=1326 audit(1758693328.912:206524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.4.2817" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f09ca38d65f code=0x50000 [ 257.357121][ T40] audit: type=1326 audit(1758693328.912:206525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.4.2817" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f09ca38d65f code=0x50000 [ 257.364566][ T40] audit: type=1326 audit(1758693328.912:206526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.4.2817" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f09ca38d65f code=0x50000 [ 257.373878][ T40] audit: type=1326 audit(1758693328.912:206527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.4.2817" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f09ca38d65f code=0x50000 [ 257.375884][ T9734] audit: audit_backlog=65 > audit_backlog_limit=64 [ 257.381604][ T9833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 257.383309][ T40] audit: type=1326 audit(1758693328.912:206528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.4.2817" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f09ca38d65f code=0x50000 [ 257.383947][ T9734] audit: audit_lost=223 audit_rate_limit=0 audit_backlog_limit=64 [ 257.383959][ T9734] audit: backlog limit exceeded [ 257.461697][ T1236] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.465255][ T1236] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.612765][ T1236] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.615921][ T1236] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.624093][T18442] MTD: Attempt to mount non-MTD device "/dev/nbd5" [ 257.638280][T18442] cramfs: wrong magic [ 257.665701][ T5984] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.670824][ T5984] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.674189][ T5984] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.678062][ T5984] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.681617][ T5984] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.732324][ T1236] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.739231][ T1236] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.764979][T18462] IPVS: rr: FWM 3 0x00000003 - no destination available [ 257.864518][ T1236] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.868032][ T1236] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.001915][T18503] vlan2: entered promiscuous mode [ 258.003532][T18503] bridge0: entered promiscuous mode [ 258.090356][T18558] kAFS: No cell specified [ 258.448501][ T6039] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 258.621647][ T6039] usb 9-1: Using ep0 maxpacket: 16 [ 258.632615][ T6039] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.636893][ T6039] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.641094][ T6039] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 258.646699][ T6039] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 258.650552][ T6039] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.659551][ T6039] usb 9-1: config 0 descriptor?? [ 258.664941][ T1236] bond0 (unregistering): Released all slaves [ 258.754734][ T1236] bond1 (unregistering): Released all slaves [ 258.779758][T18444] chnl_net:caif_netlink_parms(): no params data found [ 258.941229][T18675] binfmt_misc: register: failed to install interpreter file ./file0 [ 259.027916][T18712] SELinux: Context {ֱ}{]O6aPlVN! [ 259.027916][T18712] [I*QkD&y٠ is not valid (left unmapped). [ 259.035197][T18712] SELinux: Context |ˈ [ 259.035197][T18712] PwvYaq9Nn is not valid (left unmapped). [ 259.040307][T18712] SELinux: Context Ȟju~Zh- ڴQ[e%]r is not valid (left unmapped). [ 259.046202][T18712] SELinux: Context ʣC V-J+[E4 3"rG(CM(:rp34o2[!+pu*'5xQmp is not valid (left unmapped). [ 259.055962][T18712] SELinux: Context Gϰ 3JoVc]Edi7c 0b 90 90 e9 06 fe ff ff 48 89 ef e8 e7 b5 9e 00 e9 aa fe ff ff [ 259.658868][ T5904] RSP: 0018:ffffc9000347f3c0 EFLAGS: 00010086 [ 259.658884][ T5904] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a4388 [ 259.669335][ T24] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 259.670553][ T5904] RDX: ffff88802e26c880 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 259.670571][ T5904] RBP: ffff8880131df738 R08: 0000000000000001 R09: 0000000000000000 [ 259.670582][ T5904] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200068fe79 [ 259.670594][ T5904] R13: 0000000000000000 R14: ffff8880131df698 R15: ffff8880131df730 [ 259.670607][ T5904] FS: 0000000000000000(0000) GS:ffff8880d67b2000(0000) knlGS:0000000000000000 [ 259.679010][T18675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.680322][ T5904] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.682528][T18675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.684199][ T5904] CR2: 00007fff2bbe9f00 CR3: 000000003ca78000 CR4: 0000000000352ef0 [ 259.708117][ T1236] veth1_macvtap: left promiscuous mode [ 259.708894][ T5904] Call Trace: [ 259.708904][ T5904] [ 259.708914][ T5904] ? __pfx_enable_work+0x10/0x10 [ 259.711830][ T1236] veth0_macvtap: left promiscuous mode [ 259.714714][ T5904] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 259.715959][ T60] usb 10-1: USB disconnect, device number 11 [ 259.718013][ T1236] veth1_vlan: left allmulticast mode [ 259.721060][ T5904] __cancel_work_sync+0xe7/0x130 [ 259.721088][ T5904] thermal_zone_device_unregister+0x28e/0x4d0 [ 259.721119][ T5904] ? __pfx_shield_remove+0x10/0x10 [ 259.723774][ T1236] veth1_vlan: left promiscuous mode [ 259.726531][ T5904] power_supply_unregister+0x10a/0x150 [ 259.729749][ T1236] veth0_vlan: left promiscuous mode [ 259.731636][ T5904] shield_remove+0x75/0x130 [ 259.757384][ T5904] ? __pfx_shield_remove+0x10/0x10 [ 259.759055][ T5904] hid_device_remove+0xd1/0x260 [ 259.760598][ T5904] ? __pfx_hid_device_remove+0x10/0x10 [ 259.762483][ T5904] device_remove+0xc8/0x170 [ 259.763929][ T5904] device_release_driver_internal+0x44b/0x620 [ 259.765874][ T5904] bus_remove_device+0x22f/0x420 [ 259.767437][ T5904] device_del+0x396/0x9f0 [ 259.768848][ T5904] ? __pfx_device_del+0x10/0x10 [ 259.770413][ T5904] ? do_raw_spin_lock+0x12c/0x2b0 [ 259.772018][ T5904] hid_destroy_device+0x19c/0x240 [ 259.773917][ T5904] usbhid_disconnect+0xa0/0xe0 [ 259.775439][ T5904] usb_unbind_interface+0x1dd/0x9e0 [ 259.777144][ T5904] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 259.778907][ T5904] ? __pfx_usb_unbind_interface+0x10/0x10 [ 259.780912][ T5904] device_remove+0x125/0x170 [ 259.782502][ T5904] device_release_driver_internal+0x44b/0x620 [ 259.785012][ T5904] bus_remove_device+0x22f/0x420 [ 259.786669][ T5904] device_del+0x396/0x9f0 [ 259.788043][ T5904] ? __pfx_device_del+0x10/0x10 [ 259.789873][ T5904] ? kobject_put+0x210/0x5a0 [ 259.791714][ T5904] usb_disable_device+0x355/0x7d0 [ 259.793755][ T5904] usb_disconnect+0x2e1/0x9c0 [ 259.795263][ T5904] hub_event+0x1c81/0x4fe0 [ 259.796766][ T5904] ? __lock_acquire+0xb97/0x1ce0 [ 259.798338][ T5904] ? __pfx_hub_event+0x10/0x10 [ 259.799848][ T5904] ? assoc_array_insert+0x1f80/0x3970 [ 259.801548][ T5904] ? rcu_is_watching+0x12/0xc0 [ 259.803029][ T5904] process_one_work+0x9cc/0x1b70 [ 259.804591][ T5904] ? __pfx_process_one_work+0x10/0x10 [ 259.806299][ T5904] ? assign_work+0x1a0/0x250 [ 259.807755][ T5904] worker_thread+0x6c8/0xf10 [ 259.809228][ T5904] ? __kthread_parkme+0x19e/0x250 [ 259.810819][ T5904] ? __pfx_worker_thread+0x10/0x10 [ 259.812462][ T5904] kthread+0x3c2/0x780 [ 259.813796][ T5904] ? __pfx_kthread+0x10/0x10 [ 259.815316][ T5904] ? rcu_is_watching+0x12/0xc0 [ 259.816924][ T5904] ? __pfx_kthread+0x10/0x10 [ 259.818412][ T5904] ret_from_fork+0x56a/0x730 [ 259.819927][ T5904] ? __pfx_kthread+0x10/0x10 [ 259.821471][ T5904] ret_from_fork_asm+0x1a/0x30 [ 259.823101][ T5904] [ 259.824196][ T5904] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 259.826756][ T5904] CPU: 1 UID: 0 PID: 5904 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 259.829857][ T5904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 259.833169][ T5904] Workqueue: usb_hub_wq hub_event [ 259.834811][ T5904] Call Trace: [ 259.835880][ T5904] [ 259.836953][ T5904] dump_stack_lvl+0x3d/0x1f0 [ 259.838414][ T5904] vpanic+0x6e8/0x7a0 [ 259.839679][ T5904] ? __pfx_vpanic+0x10/0x10 [ 259.841130][ T5904] ? enable_work+0x2f8/0x340 [ 259.842598][ T5904] panic+0xca/0xd0 [ 259.843790][ T5904] ? __pfx_panic+0x10/0x10 [ 259.845291][ T5904] ? check_panic_on_warn+0x1f/0xb0 [ 259.847236][ T5904] check_panic_on_warn+0xab/0xb0 [ 259.849004][ T5904] __warn+0xf6/0x3c0 [ 259.850288][ T5904] ? __pfx_vprintk_emit+0x10/0x10 [ 259.851935][ T5904] ? enable_work+0x2f8/0x340 [ 259.853458][ T5904] report_bug+0x3c3/0x580 [ 259.854835][ T5904] ? enable_work+0x2f8/0x340 [ 259.856397][ T5904] handle_bug+0x184/0x210 [ 259.857790][ T5904] exc_invalid_op+0x17/0x50 [ 259.859276][ T5904] asm_exc_invalid_op+0x1a/0x20 [ 259.860824][ T5904] RIP: 0010:enable_work+0x2f8/0x340 [ 259.862459][ T5904] Code: 89 ee e8 9b 50 38 00 45 84 ed 0f 85 29 fe ff ff e8 ad 55 38 00 c6 05 1d 7a 10 0f 01 90 48 c7 c7 a0 05 ac 8b e8 49 fa f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 e7 b5 9e 00 e9 aa fe ff ff [ 259.868459][ T5904] RSP: 0018:ffffc9000347f3c0 EFLAGS: 00010086 [ 259.870711][ T5904] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a4388 [ 259.873177][ T5904] RDX: ffff88802e26c880 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 259.875663][ T5904] RBP: ffff8880131df738 R08: 0000000000000001 R09: 0000000000000000 [ 259.878216][ T5904] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200068fe79 [ 259.880814][ T5904] R13: 0000000000000000 R14: ffff8880131df698 R15: ffff8880131df730 [ 259.883278][ T5904] ? __warn_printk+0x198/0x350 [ 259.884812][ T5904] ? __warn_printk+0x1a5/0x350 [ 259.886408][ T5904] ? __pfx_enable_work+0x10/0x10 [ 259.888010][ T5904] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 259.889864][ T5904] __cancel_work_sync+0xe7/0x130 [ 259.891469][ T5904] thermal_zone_device_unregister+0x28e/0x4d0 [ 259.893373][ T5904] ? __pfx_shield_remove+0x10/0x10 [ 259.894966][ T5904] power_supply_unregister+0x10a/0x150 [ 259.896811][ T5904] shield_remove+0x75/0x130 [ 259.898276][ T5904] ? __pfx_shield_remove+0x10/0x10 [ 259.899924][ T5904] hid_device_remove+0xd1/0x260 [ 259.901618][ T5904] ? __pfx_hid_device_remove+0x10/0x10 [ 259.903331][ T5904] device_remove+0xc8/0x170 [ 259.904764][ T5904] device_release_driver_internal+0x44b/0x620 [ 259.906633][ T5904] bus_remove_device+0x22f/0x420 [ 259.908470][ T5904] device_del+0x396/0x9f0 [ 259.909974][ T5904] ? __pfx_device_del+0x10/0x10 [ 259.911551][ T5904] ? do_raw_spin_lock+0x12c/0x2b0 [ 259.913372][ T5904] hid_destroy_device+0x19c/0x240 [ 259.914923][ T5904] usbhid_disconnect+0xa0/0xe0 [ 259.916485][ T5904] usb_unbind_interface+0x1dd/0x9e0 [ 259.918262][ T5904] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 259.920146][ T5904] ? __pfx_usb_unbind_interface+0x10/0x10 [ 259.922071][ T5904] device_remove+0x125/0x170 [ 259.923897][ T5904] device_release_driver_internal+0x44b/0x620 [ 259.925860][ T5904] bus_remove_device+0x22f/0x420 [ 259.927421][ T5904] device_del+0x396/0x9f0 [ 259.928809][ T5904] ? __pfx_device_del+0x10/0x10 [ 259.930347][ T5904] ? kobject_put+0x210/0x5a0 [ 259.931860][ T5904] usb_disable_device+0x355/0x7d0 [ 259.933676][ T5904] usb_disconnect+0x2e1/0x9c0 [ 259.935188][ T5904] hub_event+0x1c81/0x4fe0 [ 259.936637][ T5904] ? __lock_acquire+0xb97/0x1ce0 [ 259.938209][ T5904] ? __pfx_hub_event+0x10/0x10 [ 259.939705][ T5904] ? assoc_array_insert+0x1f80/0x3970 [ 259.941431][ T5904] ? rcu_is_watching+0x12/0xc0 [ 259.943003][ T5904] process_one_work+0x9cc/0x1b70 [ 259.944719][ T5904] ? __pfx_process_one_work+0x10/0x10 [ 259.946436][ T5904] ? assign_work+0x1a0/0x250 [ 259.947892][ T5904] worker_thread+0x6c8/0xf10 [ 259.949357][ T5904] ? __kthread_parkme+0x19e/0x250 [ 259.950934][ T5904] ? __pfx_worker_thread+0x10/0x10 [ 259.952560][ T5904] kthread+0x3c2/0x780 [ 259.953905][ T5904] ? __pfx_kthread+0x10/0x10 [ 259.955579][ T5904] ? rcu_is_watching+0x12/0xc0 [ 259.957413][ T5904] ? __pfx_kthread+0x10/0x10 [ 259.958876][ T5904] ret_from_fork+0x56a/0x730 [ 259.960329][ T5904] ? __pfx_kthread+0x10/0x10 [ 259.961796][ T5904] ret_from_fork_asm+0x1a/0x30 [ 259.963327][ T5904] [ 259.965041][ T5904] Kernel Offset: disabled [ 259.966456][ T5904] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:04:35 Registers: info registers vcpu 0 CPU#0 RAX=00000000000c8000 RBX=ffff888060cc2f30 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff888060cc2f58 RBP=0000000000000000 RSP=ffffc9000744f9b8 R8 =0000000000080000 R9 =0000000000000001 R10=0000000000000028 R11=0000000000000001 R12=ffff888060cc2f58 R13=ffff888060cc2440 R14=0000000000008000 R15=ffffffff9afcdfa0 RIP=ffffffff8197b569 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fad4b36fc80 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fad4b5c4286 CR3=0000000059b46000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000b7ed DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c4c0c004 Opmask01=0000000000000000 Opmask02=000000003f3f0103 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003a6e69622f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002a2e 2573257325003a25 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0f0e0d0c0b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561cf7e12ea8 0000561cf7e12e08 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a6e69622f3a6e69 62732f7273752f3a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 00007fad4b4bf42d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561cf7e04520 0000561cf7e04520 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561cf7e06900 0000561cf7e022c0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561cf700662d 0000561cf7e12e08 0000561cf7e12e28 6c69665f70006d72 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561cf700662d 0000561cf7e12e08 0000561cf7e12e28 6c69665f70006d72 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561cd8004902 0000561cd8ce0108 0000561cd8ce0107 4346495f5f00425d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561cf7e0f0b8 0000000000000000 000000000000000f 0000561cf700873d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561cf7e09918 0000000000000000 000000000000000f 0000000000875d81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=000000000000004c RCX=ffffffff819adfd2 RDX=ffff88802e26c880 RSI=ffffffff819adfc0 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000347f050 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff9200068fe0c R13=0000000000000000 R14=ffff88801e2ea440 R15=ffffc9000347f118 RIP=ffffffff819adfc9 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff2bbe9f00 CR3=000000003ca78000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000e0000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2bbea890 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2bbeaa16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2bbeaa16 00007fff2bbeaa1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e63412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e63412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e63412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e63412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e63412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e63412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564b755 RDI=ffffffff9b1180e0 RBP=ffffffff9b1180a0 RSP=ffffc9000062f5e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000033 R14=ffffffff9b1180a0 R15=ffffffff8564b6f0 RIP=ffffffff8564b77f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c299fff CR3=0000000033fe8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000100 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005566a922a600 00005566a922a600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe66edef20 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69617420746f4e20 333a312f72656b72 6f776b203a6d6d6f 432034303935203a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5645444f4e452d20 6f74206575642074 726f706572204449 4820747365757165 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7220444d4354534f 4820656b69727473 7265646e75685420 74757074756f206f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 742064656c696146 203a463030302e34 3132373a35353930 3a3330303020646c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65696873205d3432 542020205b5d3038 393635362e393532 20205b203a6c656e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=1ffffffff19d2558 RBX=ffffffff8ce92ac2 RCX=00000000000006dc RDX=0000000000000001 RSI=ffffffff8ce92ac1 RDI=ffffffff8ce92ac1 RBP=0000000000000026 RSP=ffffc90006547430 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000008 R11=0000000000000001 R12=ffffffff8ce92ac1 R13=dffffc0000000000 R14=0000000000000000 R15=ffffffff95ea4198 RIP=ffffffff8b90b429 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7e64138f98 CR3=0000000026848000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2bbeaa16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff2bbeaa16 00007fff2bbeaa1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e63412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e63412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e63412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e63412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e63412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e63412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e635a74a8 00007f7e635a74a0 00007f7e635a7498 00007f7e635a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e6410d100 00007f7e635a7460 00007f7e635a7478 00007f7e635a74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e635a74b8 00007f7e635a74b0 00007f7e635a74a8 00007f7e635a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000