last executing test programs: 2m12.291326367s ago: executing program 1 (id=1973): r0 = creat(&(0x7f0000000140)='./bus\x00', 0xc) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) read$FUSE(r0, &(0x7f0000001780)={0x2020}, 0x2020) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4044080) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 32) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async, rerun: 32) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netstat\x00') pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) (async) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)=0xfefffffe) (async) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) readv(r8, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/104, 0x68}, {&(0x7f0000000180)=""/155, 0x9b}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x5) 2m12.219743034s ago: executing program 1 (id=1974): syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x0, 0x4ea3, 0x9, 0x56cd, 0x5, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x49b5e351, 0xfffffffffffffffc, 0xe8de, 0xfffffffffffffff9, 0x9, 0x1ff, 0x9, 0x1, 0x8, 0x80000000, 0x4, 0x2, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0xffffffffffffffc0, 0x1, 0x1ff, 0x10000, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000000, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0xec7, 0x646, 0xc58e, 0x3, 0x11ad, 0x0, 0x6, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x4, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x4, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0xffffffffffffffff, 0x3, 0x100, 0x4, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x8, 0xcc7e, 0x8, 0x0, 0x8, 0x6, 0xfffffffffffffd96, 0x3f3, 0x1, 0x5, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0xf7, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5cf2040000000000140003006e657464657673696d3000000000000014001680100001800c0004"], 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) 2m12.053656878s ago: executing program 1 (id=1975): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000002, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]}) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000002, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]}) (async) 2m12.053317223s ago: executing program 1 (id=1976): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1edc41, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 2m11.978838298s ago: executing program 1 (id=1977): r0 = syz_io_uring_setup(0x16a4, &(0x7f0000000400)={0x0, 0x79af, 0x1000, 0x7fff, 0x400251}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1c, 0x4007, @fd=r0, 0xa, 0x0, 0x0, 0x6, 0x1, {0x6}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0xd, 0x0, 0x456}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000480)=ANY=[@ANYRES16=r5, @ANYRESHEX=r4, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRESHEX=r4], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40044) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f0000000080), &(0x7f0000000380)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000240), &(0x7f0000000280)=r7}, 0x20) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) setitimer(0x0, &(0x7f00000000c0)={{}, {0x1}}, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r10) socket$l2tp(0x2, 0x2, 0x73) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) r12 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) sendfile(r12, r12, 0x0, 0x24002de8) io_uring_enter(r0, 0x629, 0x4c1, 0x43, 0x0, 0x0) 2m11.861436485s ago: executing program 1 (id=1978): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000080)=""/203, 0xcb, 0x0, &(0x7f0000000180)=""/145, 0x91}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000811010000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) 2m11.822246623s ago: executing program 32 (id=1978): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000080)=""/203, 0xcb, 0x0, &(0x7f0000000180)=""/145, 0x91}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000811010000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) 36.83597589s ago: executing program 0 (id=3420): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x161) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff80850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000009c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = eventfd(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) prlimit64(0x0, 0x8, &(0x7f0000002000)={0x7, 0x9}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) sendmmsg$inet(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254", 0x6}], 0x1}}], 0x1, 0x4000000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 36.835255191s ago: executing program 0 (id=3421): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x6, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r0 = socket$inet(0x2, 0x800, 0xb19) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @private=0xa010101, 0x0, 0x1, [@empty]}, 0x14) 36.765877567s ago: executing program 0 (id=3423): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES8=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000004bb4401e97210cfc00000000000000001a00"/36], 0x50) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40840}, 0x20040810) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x23d7, 0x7f}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080080004608f0ff76000000bf9810000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 36.625766614s ago: executing program 0 (id=3426): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x7, @empty, 0x101}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x4000880) 36.553055512s ago: executing program 0 (id=3427): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xe0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xffffffffffffffe0, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x1, 0x800, 0x9, 0x800}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r2, &(0x7f00000023c0)={0x2020}, 0x2020) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000002000/0x4000)=nil, 0x4000}, 0x80f9351317a26c84}) 36.552670771s ago: executing program 0 (id=3428): mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x8000) mount(&(0x7f0000000580)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380)='xfs\x00', 0x10000, &(0x7f0000000080)='norecovery') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) close_range(r4, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f0000000240)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r6, @ANYRES32=r1, @ANYRES64=r1], 0x3c}}, 0x4000884) syz_emit_ethernet(0x2a, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c200000050a245d5cde0080045000014000000000002907800000000ffffffff1a00907800000000"], 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f00000000c0)={0x2, 'vlan0\x00', {0x8}, 0xfff8}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB="00000000000000001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32=r2, @ANYBLOB="46f98336ad87f5a26fb8a47403cec0c06851bf75c7b67845f1f2295e35f924029a87841316e05188d999eaccad06eac1f743bf8c6d2e0765602e05e3de564835d362c240dd33a3ba2503bf0ba6ed9a07dcad8f204f3941b2944526fde3b034c9455a8f9116f9b42b5851ab86e14802589e5645135be1f9551d63eaa7c0c7fb91fbc8ee22ab42a8973dee75e982f37f65e8f9550829d80305f5e436a64753f6d97590"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 20.021755268s ago: executing program 33 (id=3428): mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x8000) mount(&(0x7f0000000580)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380)='xfs\x00', 0x10000, &(0x7f0000000080)='norecovery') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) close_range(r4, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f0000000240)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r6, @ANYRES32=r1, @ANYRES64=r1], 0x3c}}, 0x4000884) syz_emit_ethernet(0x2a, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c200000050a245d5cde0080045000014000000000002907800000000ffffffff1a00907800000000"], 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f00000000c0)={0x2, 'vlan0\x00', {0x8}, 0xfff8}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB="00000000000000001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32=r2, @ANYBLOB="46f98336ad87f5a26fb8a47403cec0c06851bf75c7b67845f1f2295e35f924029a87841316e05188d999eaccad06eac1f743bf8c6d2e0765602e05e3de564835d362c240dd33a3ba2503bf0ba6ed9a07dcad8f204f3941b2944526fde3b034c9455a8f9116f9b42b5851ab86e14802589e5645135be1f9551d63eaa7c0c7fb91fbc8ee22ab42a8973dee75e982f37f65e8f9550829d80305f5e436a64753f6d97590"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.799411139s ago: executing program 5 (id=3676): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f0000000080)='./file0\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1000) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x40002) (async, rerun: 64) mount$nfs(&(0x7f0000000040)='/dev/dri/card#\x00', &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100), 0xa80d, &(0x7f0000000140)={[{'&\xaa*('}, {'afs\x00'}, {'\xbe'}, {'/dev/dri/card#\x00'}, {'/dev/dri/card#\x00'}, {}, {':@.!}[$$%'}, {'afs\x00'}]}) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000280)='\x00', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000200)={0x0, 0x0, 0x0, r1}) 8.680981357s ago: executing program 5 (id=3678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000010701010000000000000000070000091400078008000140000000060800014000000bfeeb3c5a4576cb245b9de9876bd6e29f127417dacb25ffe5e2744e04e37e96765a3e4bdfd1b4265a226f5cab0920ebfe168f2150ac4490ebcd81f2eb018e5e44fe2760dedf2c6747dea08d26fe786800a67d88a67eff8e745636bb1ae92fd17b98ff2a4c63dbeef80c96c59195086a36babe40de5e3a8aaabdc4b4485c11c43ffe50b5e7d24f4961d0d62557324615f41cd890de6102856e611309cb714e171dafd2e4a1"], 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x48050) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="021b9664800000000000000000000000000000000000000000000000000000254cc9a4acc0c71da304686d802b41af2ca1473fe030e180ccd36caab35d2d533fd5c85165a5e194aa4392c38d943a7553d08a8b7ffbb649ee32c0503ba710691efabcea92203ba15f83555e55d690c27e8d13d783b8c5eb86068a693ded478c96c09eee3d1b56b2a1a387d2d2e7396f6688189ee1361601", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0xc0089364, &(0x7f00000001c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000fcffffff0000000000000000b7080000020000007b8a00fe0000000087080020000000007b8af0ffffffffffffffff7fb1cb9b9e095ba707aebd0000000027000000f8ffffffbfa400000000000007040000f0ffffffb702", @ANYRES32=r2, @ANYBLOB="0000000000000040b70400000800000085000000490000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000015000100fcfffffffcdbdf350f"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=ANY=[@ANYBLOB="67fbe5a9e0dea0b9d493eba2e711016c9970b7d758e6502df263fe78bda32255d040c1da91297b98c6ed8039cd4a927f1c65447885d9fc08b89f3e6b42fc909bfdaf94fa290ea1825815294cbe0495654f91c131c3c15d853a4e8ddc39a73ce0eda22f16e1221485bb0b4025067c76ca894a469d65e6903a10cebc4275e11eb8bd0df4d2d571ba248043ac", @ANYRES16=r9, @ANYBLOB="010028bd7000fddbdf2505000000200001800d0001007564703a73797a32000000000c0002800800020008000000"], 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000b80)={0x8aa6, 0x0, '\x00', {0x0, @reserved}}) sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, r9, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x26}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x549c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffa33}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8c3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe8e5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20010000) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=@raw=[@alu={0x7, 0x0, 0xa, 0x8, 0xb, 0x40}, @ldst={0x1, 0x3, 0x4, 0x1, 0x7, 0x14, 0x8}, @jmp={0x5, 0x0, 0x4, 0x8, 0x9, 0xffffffffffffffc0, 0x1}], &(0x7f00000006c0)='syzkaller\x00', 0x7, 0x11, &(0x7f0000000700)=""/17, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x4, 0x81, 0x107}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0196741bfb0b6c85dc515d5400fcffffffffdbdf251200000008000300", @ANYRES32, @ANYBLOB="0500e40001000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0xc}}}}, [@NL80211_ATTR_SMPS_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4804) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r6}, &(0x7f0000000400), &(0x7f0000000940)=r10}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0xfc, 0x30, 0x1, 0x11, @mcast2, @dev={0xfe, 0x80, '\x00', 0x31}, 0x0, 0x7800, 0x800, 0x9}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00'], 0x34}}, 0x0) r13 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20201000}, 0xc, &(0x7f0000000180)={&(0x7f0000000d80)=@getchain={0x24, 0x66, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x1, 0x9}, {0x0, 0x7}, {0x9, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 8.679668626s ago: executing program 5 (id=3679): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x27, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000400000018110000", @ANYRES32, @ANYBLOB="00000000000000b702000014000000b7030000000000008500000083000000bf09000000000008550901651f376a2e8b00000000009500000000000000183000000500000000000000000000000c440e00040000009500000000000000b7080000000000007b8af8ff00000000b70800000f3f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018430000feffffff00000000000000008faaf0ff10000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000001c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000004c0)=[{0x1, 0x4, 0x3, 0x1}, {0x0, 0x1, 0x9}, {0x4, 0x4, 0x2}, {0x1, 0x5, 0x5, 0x9}, {0x3, 0x4, 0xb, 0x1}, {0x0, 0x2, 0x5}, {0x4, 0x1, 0x8, 0x8}, {0x5, 0x2, 0x0, 0x8}, {0x0, 0x5, 0x0, 0xb}, {0x4, 0x3, 0x8, 0x1}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000096000a00"], 0x30}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, r5, 0x504, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40004) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@union={0x8, 0x3, 0x0, 0x5, 0x1, 0x80000000, [{0xa, 0x5, 0x35f}, {0x2, 0x3, 0xe}, {0x3, 0x4, 0x40}]}, @const={0x0, 0x0, 0x0, 0xa, 0x4}, @const={0x10, 0x0, 0x0, 0xa, 0x5}, @const={0x6}, @ptr={0x3, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000006c0)=""/212, 0x7b, 0xd4, 0x1, 0x80000000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x2, 0xdf5, 0xffffffff, 0x890, 0x1, 0xffff, '\x00', r10, r11, 0x1, 0x1, 0x2, 0x2}, 0x50) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast1, 0xde0}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) (async) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x0) 8.607518706s ago: executing program 5 (id=3680): seccomp$SECCOMP_SET_MODE_FILTER(0x3, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020800000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480080007006e6174"], 0xc0}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000c40)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @map_val, @call, @exit, @tail_call]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe7f}, 0x90) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000100)={@null, @bcast, @bcast, 0x63, 0xffffffffffff0001, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 8.522464705s ago: executing program 5 (id=3681): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5883, 0x100, 0x0, 0x3}, &(0x7f0000000340), &(0x7f0000000280)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22040881}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x4000}}], 0x2, 0x0) (async) syz_io_uring_setup(0x2bb3, &(0x7f0000000180)={0x0, 0xc6a6, 0x20000, 0x3, 0x127, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000200)) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) (async) r4 = dup2(0xffffffffffffffff, r1) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000140)={'bond0\x00', {0x2, 0x0, @local}}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@host, 0x8}, 0x1, 0x0, 0x7ff}) 7.462680317s ago: executing program 5 (id=3688): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x2, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"ac19529bfb1ec8f5ad555c1352b8f67e", r5, r6, {0x100000001, 0x2}, {0x4e, 0x1}, 0x8, [0xe, 0xffffffffffff6a4a, 0x8000000000000000, 0x2263, 0x9, 0x800, 0x5, 0x81, 0x6, 0xfffffffffffffbff, 0x1f10, 0x1000, 0x41b, 0xad, 0x5, 0x4]}) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async, rerun: 64) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (rerun: 64) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 64) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300) (async, rerun: 64) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000000)=0x40, 0x4) (async) recvmmsg(r7, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0xe70}], 0x1, 0x45833af92e4b39fe, 0x0) (async) recvfrom(r0, 0x0, 0x0, 0x140, 0x0, 0x0) 7.396725226s ago: executing program 34 (id=3688): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x2, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"ac19529bfb1ec8f5ad555c1352b8f67e", r5, r6, {0x100000001, 0x2}, {0x4e, 0x1}, 0x8, [0xe, 0xffffffffffff6a4a, 0x8000000000000000, 0x2263, 0x9, 0x800, 0x5, 0x81, 0x6, 0xfffffffffffffbff, 0x1f10, 0x1000, 0x41b, 0xad, 0x5, 0x4]}) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async, rerun: 64) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (rerun: 64) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 64) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300) (async, rerun: 64) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000000)=0x40, 0x4) (async) recvmmsg(r7, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0xe70}], 0x1, 0x45833af92e4b39fe, 0x0) (async) recvfrom(r0, 0x0, 0x0, 0x140, 0x0, 0x0) 1.952649727s ago: executing program 2 (id=3759): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x4000, 0x0, 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x9, r0, 0x42e2f5d843078e1c}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000680)={&(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x2, 0x7, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000140)={&(0x7f00000000c0), &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000540)={0xd, 0x0, r3}) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000900ffffffff0029b495f229570963dcbb94b84e20d600"], 0x0) 1.829292155s ago: executing program 2 (id=3761): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000000400000050500010007000000050001000700000045f087fd8dad998bae70aa1a09e6eaca8599349967d44e1e56b4477139a299028e0cb2d5e9c54c67675a6e81c9444233dc1670"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000340)={0x8, 'dvmrp0\x00', {'pimreg\x00'}, 0x2}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtfilter={0x68, 0x28, 0xd27, 0x1000004, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {0x4}, {0x3, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x68}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = syz_io_uring_setup(0xc, &(0x7f00000002c0)={0x0, 0x29, 0x8, 0x0, 0x20b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r11, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r10, 0x1, 0x29, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="a10bc268937c6ed81d7781fb4beeec3a8ef68b2cc73c9b48d9088f9ef29e1ff8387adb4677ba1338096ff8a2b735fe6afc90711741bd87ccb3192c89c330842ddc1fcf449b360a42c94cd276220a5536af3ba5b436940f19221cbb428448919996b4eeb9694d25a4a68f3762eab6c065fd0c9b1931bfa9b06af2f5ba1385f8f4101c66010c8ffc01b2e1d153eed7c356077266c6ae33b865a51d2485b6d3f0267c54fd93f4a81be8438ba5e91f961480a554d70cf238a54adc26707ff5f3c496da01c3345a6dd54d", 0xc8}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f0000000580)=[{0x3, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x0, 0x4}, 0x0, 0xfe}, {0x3, 0x0, {0x0, 0xf0, 0x1}, {}, 0xfd, 0xfd}, {0x3, 0x3, {0x1, 0x1}, {0x0, 0xf0, 0x1}}], 0x60) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x74, r11, {0xfffd}, {0x1, 0x8}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r12 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x4, 0x34324258, 0x2, 0x6, 0x46, 0x2, 0x3, 0x1, 0x7, 0x0, 0x7}}) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.135280551s ago: executing program 6 (id=3782): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000b40)=[{&(0x7f00000006c0)=""/151, 0x97}], 0x1, 0x9, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xd4, 0x30, 0x871a15abc695fb3d, 0x70bd25, 0x0, {}, [{0xc0, 0x1, [@m_tunnel_key={0xbc, 0x1, 0x0, 0x0, {{0xf}, {0xfffffffffffffff4, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x200, 0x0, 0xf, 0x2}, 0x5}}]}, {0x6f, 0x6, "8888c532403a986c0a76a1ac652884b9ed0c2143f7045b8ac947ad45c854ea2bfdb45311923ff98386cc823cd81bce507ba4473d4b20a0c5085e7a502a74e3561c8985e7f712c6a479b7d92412b5c0ccc9e0af1dbe3ffe50f3f2d07d063fe52866944a0a64f163fb8fbb0c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4006040}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000440)=@ethtool_cmd={0x9, 0x2, 0x8f, 0x9, 0x7f, 0x2, 0x81, 0x7, 0x5, 0x62, 0xa, 0x2002, 0x0, 0x1, 0x6, 0x1002, [0x3d6b, 0x443f]}}) ioctl$TCSETS(r0, 0x80047456, 0x0) 920.240937ms ago: executing program 6 (id=3785): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000580)={0x73622a85, 0x30a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYRES16=r4], 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 835.544005ms ago: executing program 6 (id=3786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8}, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 738.58844ms ago: executing program 6 (id=3789): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x2, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {0xb, 0xffdf}, {0xfff3, 0xffff}, {0xfff7}}}, 0x24}}, 0x8c1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000440)={0x0, 0xfffffffc, 0x0, 'queue1\x00', 0x4e}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00'}) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f00000000c0)=0x2) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1, 0x40, 0x11f}}, 0x28) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x2, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {0xb, 0xffdf}, {0xfff3, 0xffff}, {0xfff7}}}, 0x24}}, 0x8c1) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000440)={0x0, 0xfffffffc, 0x0, 'queue1\x00', 0x4e}) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) (async) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00'}) (async) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f00000000c0)=0x2) (async) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1, 0x40, 0x11f}}, 0x28) (async) 738.044302ms ago: executing program 2 (id=3790): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) 737.761528ms ago: executing program 2 (id=3791): rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8, 0x80800) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="50484f4e4558db30d8494e0a545245424c4520274d6173746572c7b0f7a7ae284a1dffe5c920506c61796261636b20536e2f74"], 0xa8) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'xfrm0\x00', {}, 0x9}) close(r1) dup3(r0, r0, 0x0) r2 = gettid() r3 = getpid() preadv(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/233, 0xe9}], 0x1, 0xc, 0x2c3c) rt_tgsigqueueinfo(r3, r2, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x1}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)}, {&(0x7f0000000400)=""/118, 0x76}, {&(0x7f0000000480)=""/215, 0xffffffffffffffef}], 0x3}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(r4, 0x480) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xc9) ioctl$SIOCAX25GETINFO(r6, 0x89ed, &(0x7f0000000e00)) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0xff, 0x3}}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r7, 0x0, {0x2, 0xf0, 0x6}, 0x2}, 0x18, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x81) read$FUSE(r0, &(0x7f0000003a40)={0x2020}, 0x2020) 653.823078ms ago: executing program 6 (id=3792): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f00000001c0)='./file1\x00', 0x60) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async, rerun: 64) chdir(&(0x7f0000000140)='./bus\x00') (rerun: 64) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat$null(r5, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x48) 567.961733ms ago: executing program 2 (id=3794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="29000300010003", 0x7) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xef4f}]}}}]}]}], {0x14}}, 0x78}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) 504.261334ms ago: executing program 2 (id=3797): r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0xb, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xb, 0x1, 'police\x00'}]}, 0x30}}, 0x20040804) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x5, 0x0, 0x0, 0x0, {0x81, 0x0, 0x0, 0xd85}, {}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x84040}, 0x0) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="540005000135"], 0x6) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) prlimit64(0x0, 0xb, &(0x7f0000000180)={0x8, 0x8b}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x15, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r7 = syz_pidfd_open(r0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r7, 0xff06, 0x0) 503.713813ms ago: executing program 6 (id=3799): r0 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r0, 0x4018aee2, &(0x7f0000000140)=ANY=[]) (async) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r2, {0x2}}}, 0x24}}, 0x0) 428.776683ms ago: executing program 4 (id=3800): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) write$nbd(r2, &(0x7f0000001300)=ANY=[], 0x1010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a30"], 0x122}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x60388}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) 245.489705ms ago: executing program 4 (id=3801): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2}, 0x6) write(r0, &(0x7f0000000000)="3b000000010006", 0x7) 243.304787ms ago: executing program 3 (id=3803): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async, rerun: 64) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) close(0x3) (async) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r6) (async) getsockname$packet(r6, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r7, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0xd, r7, 0x1, 0x0, 0x6, @random="1074ee6bb1ad"}, 0x14) (async, rerun: 32) close(0x3) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r10 = dup(r1) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f0000000180)={r9, 0x2}, 0x8) (async) r11 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001540)={0x0, 0x8001}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000001080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) (async) getsockopt$bt_hci(r11, 0x84, 0x7f, &(0x7f0000000080)=""/4050, &(0x7f0000000000)=0xfd2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @raw_data="8fab22a4919a60a8ff15947fd4d4136acd173c5183068542e765568a760bc52ba2f415029101b6bbece46b1888abde160eaf178136b2f2725ac2453d1826dfefd4ba87495a9ad50dcd5ab12312644c3dc87e2ff90159e7edcc272e360a6abd4cb05e6b520f24e976ae5a5636cb72d0f1cef15f4d9b686f9888e0e3df7f97540ed0559b3b848a53800db8b960d865384aaa4133a58c5c509df2cc93e1a0d28dd15bf149becf63e2334393c8fcb7ab25a2456ef94b1af3e94c47c47c3dd703ac76fa2dfb826ee83503"}) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) (async, rerun: 32) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) write$uinput_user_dev(r10, &(0x7f00000010c0)={'syz0\x00', {0x3, 0x4, 0x1, 0x7d}, 0x37, [0x8, 0x200, 0x0, 0x4, 0xf0, 0x3, 0xc94, 0x7, 0x3, 0x8, 0x9, 0x3, 0x40, 0x65de, 0xb46, 0x5, 0xfffff001, 0x4, 0x3, 0x9, 0xb0000000, 0xffffff3d, 0x1, 0x0, 0x5, 0x3, 0x71, 0x7ad2, 0x9, 0x9dce, 0xc, 0x101, 0x1, 0x1ff, 0xc210, 0x6, 0x3f, 0x1, 0xc3d, 0x77b, 0x4, 0x1, 0x1, 0x5, 0x0, 0x7fff, 0x7, 0x40, 0x9, 0xfffffff3, 0x3bc2, 0x401, 0x3, 0x9438, 0x40, 0x5, 0x800, 0x2, 0x4, 0x9, 0x8, 0x4, 0x0, 0x7f], [0x200, 0x8, 0x8, 0x400, 0x5, 0x2b, 0x2, 0x0, 0xae59, 0x8000, 0x9, 0x6, 0x3, 0x1, 0x4, 0x6, 0x5, 0xa2000000, 0x7fff, 0xeb, 0x7, 0x40, 0x1000, 0x3fe, 0x3, 0x3, 0x0, 0xbe, 0x1, 0x89fb, 0x2, 0xfffffff1, 0x8, 0x6, 0x10, 0x9, 0x9, 0x7, 0x8, 0x5, 0xfffffffa, 0x6, 0x973c, 0x4, 0xffff, 0x8, 0x6, 0x7fffffff, 0x6, 0x6, 0x0, 0xb, 0x1, 0x6, 0xffff4f0f, 0x0, 0x6, 0x3, 0x1000, 0x1, 0x7, 0x6, 0x9, 0xffff], [0xfffffff8, 0x80000000, 0x8, 0x10000, 0x9, 0x825e, 0xbf, 0x524bcc75, 0xff, 0x7621bc45, 0x1, 0x7f, 0x30000, 0x1add, 0x6, 0x9, 0xf4, 0x8, 0xc, 0x8, 0x9, 0xd103, 0x3ff, 0x9, 0x81, 0x8, 0x8, 0x7ff, 0xcf, 0xd7, 0x3, 0x0, 0x1, 0xd29e, 0x8000, 0x6, 0x8, 0x1, 0x6, 0x0, 0x4, 0x3, 0x2, 0x4, 0x7, 0x8, 0x3, 0x10001, 0xffffff73, 0x0, 0xfffffffc, 0xd, 0x7, 0x1, 0x400, 0x2, 0x4, 0x400, 0x1000, 0x4, 0xffffffff, 0x6, 0x3, 0x7], [0xbb, 0x0, 0x10000, 0x7, 0x2000, 0xffff9a5b, 0x3, 0x7, 0x6, 0xe04, 0x80c, 0x7fffffff, 0xb, 0x9, 0xc, 0x1, 0x1, 0x1, 0x3, 0x2, 0x51b1, 0x8000, 0x9, 0x2, 0x6, 0x1ff, 0x1ff, 0xb, 0xfd5, 0x1, 0xffffffff, 0x8, 0xdb7a, 0x3, 0x4, 0x2, 0x6, 0x24, 0x3, 0x1, 0x6, 0x7f, 0x6, 0x2, 0x18, 0x1, 0xf860, 0x7, 0xfffffffc, 0xed, 0x7, 0x7, 0x5, 0x1, 0x7, 0x7fffffff, 0x800, 0x2, 0x2, 0x7aaf, 0xa3c, 0x800, 0x6, 0x8]}, 0x45c) (async) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000080900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000500400008000b400000000028000480240001800b00010074756e6e656c0000140002800800014000000000080002400000000c0900010073797a30000000001400000011ed010000000000000000000000000a"], 0xc4}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 141.177038ms ago: executing program 4 (id=3804): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x24, 0x0, 0x0, 0x0, 0x4dff, &(0x7f0000000040)='macvlan1\x00', 0x6, 0x5, 0x3}) (async) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x24, 0x0, 0x0, 0x0, 0x4dff, &(0x7f0000000040)='macvlan1\x00', 0x6, 0x5, 0x3}) socket(0x26, 0x800, 0xfffffffe) (async) r1 = socket(0x26, 0x800, 0xfffffffe) write(r1, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) ioctl$HIDIOCGNAME(r2, 0x80404806, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) 140.512721ms ago: executing program 3 (id=3805): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="67670000fcffffff850000002800000018121300", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000004e220000000000000a"], 0xb8}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x2, 0xc8}}}, 0x6) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x17, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x6, 0x3}}, 0x44) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 140.242016ms ago: executing program 4 (id=3806): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) finit_module(r0, 0x0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x3c}}, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x5b, &(0x7f0000000100), 0x1, 0x0, 0x0, 0x1f000801}, 0x40) 65.701205ms ago: executing program 3 (id=3807): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x103000) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x1f, &(0x7f0000000400)={&(0x7f0000000100)=@bridge_delneigh={0x1b, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x40, 0xc6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r4, 0x917, 0x70bd28, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1b}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}, 0x1, 0x620b}, 0x0) r5 = fsopen(&(0x7f00000000c0)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) close(0x3) 64.692749ms ago: executing program 4 (id=3808): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz1\x00', {0x9, 0xa65, 0x8, 0x7}, 0x55, [0x1, 0x7, 0x9, 0xa1, 0x5, 0x6, 0x4, 0x6, 0x8edd, 0x9, 0x4, 0xe074, 0x7, 0xffffff81, 0x80000000, 0x9, 0x8, 0x8, 0x8, 0x7, 0x6, 0x9, 0xffff0001, 0x4, 0x6, 0x0, 0x10000, 0x8, 0x8, 0x8, 0x1, 0x6, 0x1, 0xfffffffa, 0x325e, 0x5, 0xd, 0x101, 0x0, 0x1, 0x1, 0x8, 0x5, 0x903, 0x4, 0xfffffff8, 0xa, 0xfffffff8, 0x5, 0x47d1d04b, 0x4, 0x133b, 0x7b22c8a, 0x99, 0x0, 0x6, 0x3, 0x6, 0x9, 0x6, 0x1, 0xffffffff, 0x3, 0x7], [0x6ebd, 0x856, 0xfffffff9, 0x1, 0x9, 0x8, 0x2, 0xd3, 0x380000, 0x6, 0x0, 0x7, 0x7, 0x7, 0x2, 0xf34, 0x7, 0x3, 0x8, 0x9, 0x4, 0x4, 0xf, 0x59c, 0xc335, 0x6, 0xc, 0x1ff, 0x1, 0xa1, 0x1, 0x7ff, 0x10000, 0x8, 0x5, 0x8001, 0x100, 0x7, 0x1, 0x5, 0x0, 0x3ff, 0x5, 0x4, 0x8, 0xfd, 0x8000, 0x8001, 0x1000, 0x0, 0xffffffd2, 0xd, 0xfffffffb, 0x3d403d29, 0x7f, 0x1, 0x8, 0x1, 0x0, 0x3, 0xd, 0xe14, 0xa6a9, 0x7], [0x0, 0x100, 0x8, 0xfffffff8, 0x3, 0x6, 0xc, 0x1, 0x6, 0x9, 0x4, 0xffffffff, 0x0, 0xe, 0x81, 0xb7, 0x3, 0x8000, 0x9, 0x80, 0x3, 0x9, 0x10, 0x9, 0x4, 0x4, 0xfffffe00, 0x101, 0x2, 0x7, 0x3e5c, 0x3, 0x6b, 0x8001, 0x1, 0x81, 0x9, 0xe, 0x0, 0x5, 0x3, 0xc, 0x4, 0x73, 0xe, 0x7, 0x7fff, 0x6, 0x9, 0x5, 0x0, 0x9, 0xa, 0x1, 0x6, 0x1ff, 0x40, 0x3e, 0x2, 0xe, 0x3, 0x6, 0x5, 0x1], [0x800, 0x9, 0x80000000, 0xf726, 0x0, 0x2, 0x10000, 0x2, 0x35, 0x9, 0x6, 0x2000000, 0x8, 0x0, 0x400, 0x7, 0xa0, 0x401, 0x3, 0x8001, 0x7, 0x39c, 0x6, 0x7ff, 0x0, 0x8, 0x50d2, 0x92, 0x1, 0x1, 0x4, 0x6, 0x2, 0x0, 0xa111, 0x4, 0x4, 0x0, 0x6, 0x2, 0x8, 0x800, 0xd9, 0x8, 0x7, 0x1, 0x63d5, 0xc, 0x2e6, 0x9, 0x9, 0x3, 0x2, 0xc7d6, 0x1, 0x4, 0x0, 0x9, 0xef2, 0xffffff4c, 0x6ed7, 0x2, 0x5fd, 0x80000]}, 0x45c) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 63.097344ms ago: executing program 3 (id=3809): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x13c}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x20000005, @remote, 0x2}, 0x1c) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0xa, 0x1, 0x0, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x42303159}) 1.868545ms ago: executing program 3 (id=3810): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b000000070000000200000022ff000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000080)=[r5, r2, r1], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r7, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'dvmrp1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x11, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x8, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x51e}, @ldst={0x0, 0x1, 0x3, 0x1, 0x1, 0xffffffffffffffc0, 0x1}, @call={0x85, 0x0, 0x0, 0xd1}, @jmp={0x5, 0x1, 0xd, 0xb, 0x8, 0x8, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000340)='GPL\x00', 0xffffffff, 0xe, &(0x7f0000000400)=""/14, 0x41000, 0x44, '\x00', r8, 0x0, r7, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x1, 0x9ef, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[r6, r4, r6, r4, 0xffffffffffffffff, r7], &(0x7f0000000580)=[{0x5, 0x8001, 0x8, 0x9}, {0x1, 0x5, 0x1, 0x7}, {0x1, 0x1, 0xc, 0x6}, {0x5, 0x4, 0x5, 0x7}], 0x10, 0x9}, 0x94) 617.853µs ago: executing program 4 (id=3811): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000a) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0x8001, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)="f6fffdffffffffff", 0x8}, {&(0x7f0000000000)="4821cd0232189da3", 0x8}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x40000032, r2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x1c, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x400c0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r6, 0x0, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000a) (async) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) eventfd2(0x8001, 0x0) (async) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)="f6fffdffffffffff", 0x8}, {&(0x7f0000000000)="4821cd0232189da3", 0x8}], 0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) fanotify_init(0x200, 0x0) (async) fanotify_mark(r3, 0x1, 0x40000032, r2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x1c, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x400c0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) (async) sendfile(r4, r6, 0x0, 0x4) (async) 0s ago: executing program 3 (id=3812): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000ac0)=ANY=[@ANYRES8=0x0], &(0x7f0000000300)='syzkaller\x00', 0x3, 0xb9, &(0x7f00000000c0)=""/185, 0x0, 0x63, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x6840, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x408200, 0x0) kernel console output (not intermixed with test programs): ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 244.038805][ T40] audit: type=1400 audit(2000000096.288:38452): avc: denied { create } for pid=15510 comm="syz.2.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.056362][ T40] audit: type=1400 audit(2000000096.288:38453): avc: denied { write } for pid=15510 comm="syz.2.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.056391][ T40] audit: type=1400 audit(2000000096.288:38454): avc: denied { read } for pid=15510 comm="syz.2.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.056416][ T40] audit: type=1400 audit(2000000096.288:38455): avc: denied { prog_load } for pid=15510 comm="syz.2.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 244.070757][ T40] audit: type=1400 audit(2000000096.316:38456): avc: denied { read } for pid=15498 comm="syz.0.2916" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 244.087916][ T40] audit: type=1400 audit(2000000096.316:38457): avc: denied { open } for pid=15498 comm="syz.0.2916" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 244.306912][T15525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15525 comm=syz.2.2924 [ 244.353829][ T9729] em28xx 9-1:0.0: unknown em28xx chip ID (212) [ 244.626687][T15557] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2934'. [ 244.658501][T15559] netlink: 'syz.0.2935': attribute type 1 has an invalid length. [ 244.661038][T15559] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2935'. [ 244.663964][T15559] netlink: 'syz.0.2935': attribute type 1 has an invalid length. [ 244.666583][T15559] netlink: 'syz.0.2935': attribute type 2 has an invalid length. [ 244.730206][T15562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.733125][T15562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.016960][ T9729] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 245.017024][ T9729] em28xx 9-1:0.0: board has no eeprom [ 245.249518][T15451] syzkaller1: entered promiscuous mode [ 245.251739][T15451] syzkaller1: entered allmulticast mode [ 245.445620][ T9729] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 245.445647][ T9729] em28xx 9-1:0.0: dvb set to bulk mode. [ 245.452953][ T6049] em28xx 9-1:0.0: Binding DVB extension [ 245.483662][ T9729] usb 9-1: USB disconnect, device number 6 [ 245.484598][ T9729] em28xx 9-1:0.0: Disconnecting em28xx [ 245.525686][ T6049] em28xx 9-1:0.0: Registering input extension [ 245.526986][ T9729] em28xx 9-1:0.0: Closing input extension [ 245.562336][ T9729] em28xx 9-1:0.0: Freeing device [ 245.638277][T15589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=15589 comm=syz.2.2944 [ 245.900244][ T5976] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.907300][ T5976] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.910620][ T5976] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.933304][ T5976] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.937362][ T5976] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.957589][ T8338] syz_tun (unregistering): left allmulticast mode [ 245.975810][T15605] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 245.978850][T15605] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 245.986114][T15605] vhci_hcd vhci_hcd.0: Device attached [ 245.986289][T15607] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2949'. [ 245.988309][T15602] lo speed is unknown, defaulting to 1000 [ 246.003034][T15608] vhci_hcd: connection closed [ 246.003277][ T6255] vhci_hcd: stop threads [ 246.006474][ T6255] vhci_hcd: release socket [ 246.007933][ T6255] vhci_hcd: disconnect device [ 246.104749][T15602] chnl_net:caif_netlink_parms(): no params data found [ 246.185815][T15602] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.188142][T15602] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.190510][T15602] bridge_slave_0: entered allmulticast mode [ 246.196694][T15602] bridge_slave_0: entered promiscuous mode [ 246.199880][T15602] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.202191][T15602] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.204755][T15602] bridge_slave_1: entered allmulticast mode [ 246.207424][T15602] bridge_slave_1: entered promiscuous mode [ 246.245490][T15602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.251456][T15602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.288565][T15602] team0: Port device team_slave_0 added [ 246.293120][T15602] team0: Port device team_slave_1 added [ 246.329796][T15602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.332036][T15602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.342498][T15602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.347084][T15602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.349291][T15602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.360243][T15602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.400252][T15602] hsr_slave_0: entered promiscuous mode [ 246.402602][T15602] hsr_slave_1: entered promiscuous mode [ 246.404860][T15602] debugfs: 'hsr0' already exists in 'hsr' [ 246.406889][T15602] Cannot create hsr debugfs directory [ 246.602030][T15602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.704014][T15602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.797078][T15602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.837793][T15627] pim6reg: entered allmulticast mode [ 246.841021][T15627] bridge0: entered allmulticast mode [ 246.875199][T15602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.877006][T15629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2954'. [ 246.879535][ T9729] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 247.028050][T15630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2954'. [ 247.046963][T15602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 247.052571][T15602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 247.057326][ T9729] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 247.062635][T15602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 247.065164][ T9729] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 247.070440][ T9729] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.070899][T15602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 247.073283][ T9729] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.080452][T15620] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 247.095044][ T9729] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 247.141569][T15602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.149498][T15647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2957'. [ 247.157062][T15602] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.167606][ T6252] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.170503][ T6252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.180566][ T6252] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.182693][ T6252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.310919][T15602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.326881][ T3247] usb 8-1: USB disconnect, device number 22 [ 247.333789][T15602] veth0_vlan: entered promiscuous mode [ 247.339325][T15602] veth1_vlan: entered promiscuous mode [ 247.362941][T15602] veth0_macvtap: entered promiscuous mode [ 247.366933][T15602] veth1_macvtap: entered promiscuous mode [ 247.377048][T15602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.382837][T15602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.396693][ T6228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.402161][ T6228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.409286][ T6228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.413066][ T6228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.457547][ T6252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.460264][ T6252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.481315][ T6222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.483841][ T6222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.503441][T15678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.688492][T15686] binder: 15685:15686 unknown command 0 [ 247.692642][T15686] binder: 15685:15686 ioctl c0306201 2000000001c0 returned -22 [ 247.696365][T15686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'. [ 247.767730][T15688] loop9: detected capacity change from 0 to 7 [ 247.770423][T15688] loop9: p1 [ 247.771589][T15688] loop9: partition table partially beyond EOD, truncated [ 247.774095][T15688] loop9: p1 size 1919251295 extends beyond EOD, truncated [ 247.850302][T15690] netlink: 'syz.2.2969': attribute type 10 has an invalid length. [ 247.866138][T15690] team0: Device ipvlan1 failed to register rx_handler [ 247.872718][T15690] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2969'. [ 247.966323][T15701] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 248.054806][T15705] lo speed is unknown, defaulting to 1000 [ 248.133001][ T5976] Bluetooth: hci0: command tx timeout [ 248.183761][T15712] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.312857][T15712] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.398306][T15734] pim6reg: entered allmulticast mode [ 248.781460][T15757] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 248.916257][T15764] Bluetooth: MGMT ver 1.23 [ 248.920028][T15764] netlink: 'syz.0.2994': attribute type 1 has an invalid length. [ 249.000059][T15771] binder: 15770:15771 ioctl c0306201 200000000080 returned -14 [ 249.002979][T15771] binder: 15770:15771 ioctl 4004af07 200000000000 returned -22 [ 249.207676][T15791] bpf: Bad value for 'mode' [ 249.215960][T15791] vfat: Unknown parameter 'discardd/midiC#D#' [ 249.386206][T15712] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.436023][ T40] kauditd_printk_skb: 378 callbacks suppressed [ 249.436037][ T40] audit: type=1400 audit(2000000101.339:38836): avc: denied { create } for pid=15798 comm="syz.3.3005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 249.445888][ T40] audit: type=1400 audit(2000000101.339:38837): avc: denied { bind } for pid=15798 comm="syz.3.3005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 249.454410][ T40] audit: type=1400 audit(2000000101.339:38838): avc: denied { connect } for pid=15798 comm="syz.3.3005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 249.462693][ T40] audit: type=1400 audit(2000000101.339:38839): avc: denied { listen } for pid=15798 comm="syz.3.3005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 249.471144][ T40] audit: type=1400 audit(2000000101.339:38840): avc: denied { accept } for pid=15798 comm="syz.3.3005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 249.480597][ T40] audit: type=1400 audit(2000000101.339:38841): avc: denied { execmem } for pid=15798 comm="syz.3.3005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 249.487793][ T40] audit: type=1400 audit(2000000101.349:38842): avc: denied { module_request } for pid=15798 comm="syz.3.3005" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 249.496447][ T40] audit: type=1400 audit(2000000101.377:38843): avc: denied { sys_module } for pid=15798 comm="syz.3.3005" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 249.589784][ T40] audit: type=1400 audit(2000000101.480:38844): avc: denied { create } for pid=15803 comm="syz.3.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.590921][T15805] __nla_validate_parse: 36 callbacks suppressed [ 249.590936][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3006'. [ 249.606513][ T40] audit: type=1400 audit(2000000101.498:38845): avc: denied { write } for pid=15803 comm="syz.3.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.674159][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3008'. [ 249.677072][T15812] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 249.679723][T15812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.721005][T15814] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 250.352220][ T5976] Bluetooth: hci0: command tx timeout [ 250.440967][T15859] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3022'. [ 250.443863][T15859] 0: renamed from hsr0 (while UP) [ 250.447322][T15859] 0: entered allmulticast mode [ 250.450729][T15859] hsr_slave_0: entered allmulticast mode [ 250.452906][T15859] hsr_slave_1: entered allmulticast mode [ 250.454916][T15859] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 250.462131][T15861] loop7: detected capacity change from 0 to 7 [ 250.466845][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.469817][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.472952][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.476161][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.479531][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.482871][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.485557][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.489315][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.492768][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.495686][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.499058][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.502209][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.504824][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.508464][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.511116][T15861] ldm_validate_partition_table(): Disk read failed. [ 250.515352][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.518221][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.520832][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.524736][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.528184][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.531109][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 250.535652][T15861] Dev loop7: unable to read RDB block 0 [ 250.537815][T15861] loop7: unable to read partition table [ 250.539718][T15861] loop7: partition table beyond EOD, truncated [ 250.544496][T15861] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 250.860630][T15894] ata1.00: invalid cdb length 6 [ 250.864811][T15894] program syz.0.3026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.898157][ T6222] bond2: (slave ip6gretap1): link status up again after 0 ms [ 250.900755][ T6222] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 251.025738][ T6240] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 251.117753][T15712] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.143205][ T6240] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 251.241908][ T6222] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.253092][ T6252] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.283875][ T6222] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.298053][ T6228] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.304169][ T6228] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 251.421731][ T6240] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 251.549761][ T6240] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 251.564713][T15927] (syz.4.3038,15927,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 251.628677][ T5976] Bluetooth: hci1: unexpected event for opcode 0x0c1a [ 251.632788][T15930] kvm: pic: single mode not supported [ 251.633119][T15930] kvm: pic: non byte read [ 251.641567][T15930] kvm: pic: level sensitive irq not supported [ 251.641895][T15930] kvm: pic: non byte read [ 251.649667][T15930] kvm: pic: non byte read [ 251.652641][T15930] kvm: pic: level sensitive irq not supported [ 251.652988][T15930] kvm: pic: non byte read [ 251.662296][T15930] kvm: pic: non byte read [ 251.666039][T15930] kvm: pic: non byte read [ 251.669199][T15930] kvm: pic: level sensitive irq not supported [ 251.669512][T15930] kvm: pic: non byte read [ 251.674886][T15930] kvm: pic: single mode not supported [ 251.674895][T15930] kvm: pic: level sensitive irq not supported [ 251.677947][T15930] kvm: pic: non byte read [ 251.683492][T15930] kvm: pic: single mode not supported [ 251.683763][T15930] kvm: pic: non byte read [ 251.817326][T15950] input: syz1 as /devices/virtual/input/input43 [ 251.896027][T15955] ipvlan2: entered promiscuous mode [ 251.900119][T15955] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 251.902775][T15955] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 252.342390][T15991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15991 comm=syz.2.3060 [ 252.395072][ T6049] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 252.494849][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3061'. [ 252.556333][ T6049] usb 8-1: not running at top speed; connect to a high speed hub [ 252.561861][ T6049] usb 8-1: config 69 has an invalid interface number: 117 but max is 1 [ 252.564871][ T6049] usb 8-1: config 69 contains an unexpected descriptor of type 0x2, skipping [ 252.568192][ T6049] usb 8-1: config 69 contains an unexpected descriptor of type 0x1, skipping [ 252.571000][ T6049] usb 8-1: config 69 contains an unexpected descriptor of type 0x2, skipping [ 252.573920][ T6049] usb 8-1: config 69 has an invalid descriptor of length 103, skipping remainder of the config [ 252.578305][ T5970] Bluetooth: hci0: command tx timeout [ 252.578740][ T6049] usb 8-1: config 69 has 1 interface, different from the descriptor's value: 2 [ 252.583481][ T6049] usb 8-1: config 69 has no interface number 0 [ 252.585629][ T6049] usb 8-1: config 69 interface 117 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 252.590309][ T6049] usb 8-1: config 69 interface 117 has no altsetting 0 [ 252.594792][ T6049] usb 8-1: New USB device found, idVendor=19d2, idProduct=1173, bcdDevice=dd.27 [ 252.598862][ T6049] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.601494][ T6049] usb 8-1: Product: syz [ 252.603464][ T6049] usb 8-1: Manufacturer: ᳭娢鰘刂匰酚﮾ﶃ驉ۑ㞭颣̰잁繀u삝㒍뀺쟚䀰ꏡ繟缼䤜좐뗵肟ꔢ㔸↿盵坐榡鞣ꮥ薭ڵ晫ᯫ眄丰鏼詶蓂籡㭇憅㒶냦쾹辻塈ࣾ妖侮豝᲏쭕 [ 252.611818][ T6049] usb 8-1: SerialNumber: syz [ 252.799958][T16012] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3068'. [ 252.835454][ T6049] cdc_ether 8-1:69.117: skipping garbage [ 252.837331][ T6049] cdc_ether 8-1:69.117: skipping garbage [ 252.839572][ T6049] cdc_ether 8-1:69.117: skipping garbage [ 252.841363][ T6049] cdc_ether 8-1:69.117: invalid descriptor buffer length [ 252.846856][ T6049] usb 8-1: bad CDC descriptors [ 252.851592][ T6049] usb 8-1: USB disconnect, device number 23 [ 253.234555][T16017] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 253.236844][T16017] overlayfs: failed to set xattr on upper [ 253.238773][T16017] overlayfs: ...falling back to redirect_dir=nofollow. [ 253.240904][T16017] overlayfs: ...falling back to index=off. [ 253.242763][T16017] overlayfs: ...falling back to uuid=null. [ 253.244706][T16017] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 253.400698][T16023] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 253.649958][T16049] vlan2: entered promiscuous mode [ 253.651668][T16049] bridge0: entered promiscuous mode [ 253.659046][T16049] syzkaller1: entered promiscuous mode [ 253.661030][T16049] syzkaller1: entered allmulticast mode [ 253.667817][T16049] netlink: 163116 bytes leftover after parsing attributes in process `syz.4.3082'. [ 253.785671][T16054] BIDI support in bsg has been removed. [ 253.899280][T16066] IPv6: sit1: Disabled Multicast RS [ 253.902209][T16066] sit1: entered allmulticast mode [ 254.095555][T16077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16077 comm=syz.0.3093 [ 254.100520][T16077] netlink: 'syz.0.3093': attribute type 1 has an invalid length. [ 254.102439][T16068] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 254.124854][T16077] bond8: (slave bridge4): making interface the new active one [ 254.130671][T16077] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 254.263108][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3094'. [ 254.457460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 254.460320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 254.695884][T16100] Invalid option length (1048180) for dns_resolver key [ 254.812077][ T5970] Bluetooth: hci0: command 0x0419 tx timeout [ 255.058649][ T6228] net_ratelimit: 28 callbacks suppressed [ 255.058768][ T6228] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.184714][ T6228] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.313756][ T6228] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.431634][ T6228] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.547982][ T6240] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.566089][ T40] kauditd_printk_skb: 288 callbacks suppressed [ 255.566099][ T40] audit: type=1400 audit(2000000003.807:39134): avc: denied { map_create } for pid=16103 comm="syz.0.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 255.576126][ T40] audit: type=1400 audit(2000000003.816:39135): avc: denied { map_read map_write } for pid=16103 comm="syz.0.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 255.676199][ T6228] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.762388][ T40] audit: type=1400 audit(2000000003.994:39136): avc: denied { create } for pid=16111 comm="syz.0.3103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.768693][ T40] audit: type=1400 audit(2000000003.994:39137): avc: denied { setopt } for pid=16111 comm="syz.0.3103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.779548][ T40] audit: type=1400 audit(2000000003.994:39138): avc: denied { ioctl } for pid=16111 comm="syz.0.3103" path="socket:[71713]" dev="sockfs" ino=71713 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.793722][ T6240] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.813158][ T40] audit: type=1400 audit(2000000004.031:39139): avc: denied { create } for pid=16115 comm="syz.0.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 255.814701][T16116] netlink: 'syz.0.3105': attribute type 1 has an invalid length. [ 255.822143][ T40] audit: type=1400 audit(2000000004.031:39140): avc: denied { write } for pid=16115 comm="syz.0.3105" path="socket:[71716]" dev="sockfs" ino=71716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 255.837320][ T40] audit: type=1400 audit(2000000004.059:39141): avc: denied { bind } for pid=16115 comm="syz.0.3105" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 255.841038][T16116] Bluetooth: (null): Invalid header checksum [ 255.845714][ T40] audit: type=1400 audit(2000000004.059:39142): avc: denied { name_bind } for pid=16115 comm="syz.0.3105" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 255.854348][T16116] dvmrp1: entered allmulticast mode [ 255.857910][ T40] audit: type=1400 audit(2000000004.059:39143): avc: denied { node_bind } for pid=16115 comm="syz.0.3105" saddr=fe80::44 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 255.911581][ T6222] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 255.913617][ T3247] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 255.930729][T16120] input: syz1 as /devices/virtual/input/input45 [ 255.998362][ T5970] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 255.998402][ T5970] Bluetooth: hci3: unknown advertising packet type: 0x2f [ 256.001282][ T5970] Bluetooth: hci3: Dropping invalid advertising data [ 256.006434][ T5970] Bluetooth: hci3: Malformed LE Event: 0x02 [ 256.029244][ T6252] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 256.063499][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3111'. [ 256.072632][ T3247] usb 9-1: Using ep0 maxpacket: 8 [ 256.076381][ T3247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.080018][ T3247] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 256.083438][ T3247] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.093359][ T3247] usb 9-1: config 0 descriptor?? [ 256.149542][ T6240] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 256.200611][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3117'. [ 256.276486][T16170] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !fIZE,=$)%ĂL [ 256.280978][T16166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3119'. [ 256.319843][T16174] binder: 16173:16174 ioctl 400c620e 2000000000c0 returned -22 [ 256.323470][ T3247] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 256.343795][T16179] IPv6: NLM_F_CREATE should be specified when creating new route [ 256.416868][ T3247] usb 9-1: USB disconnect, device number 7 [ 256.436898][T16187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3123'. [ 256.477969][T16188] netlink: 45 bytes leftover after parsing attributes in process `syz.4.3124'. [ 256.514586][T16196] program syz.3.3126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.781176][T16212] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20001 [ 256.916384][T16212] kvm: kvm [16210]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 256.917043][T16212] kvm: kvm [16210]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 256.932881][T16212] kvm: kvm [16210]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 256.968978][T16212] kvm: kvm [16210]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 256.970928][T16212] kvm: kvm [16210]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 256.994132][T16220] cgroup: release_agent respecified [ 256.994849][T16212] kvm_intel: kvm [16210]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 257.034019][ T5970] Bluetooth: hci0: command 0x0419 tx timeout [ 257.163620][T16234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3135'. [ 257.228235][T16237] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3136'. [ 257.234615][T16237] Bluetooth: MGMT ver 1.23 [ 257.250308][T16232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3134'. [ 257.767898][T16261] binder: 16260:16261 ioctl c0306201 200000000540 returned -22 [ 257.833781][T16266] netlink: 'syz.3.3145': attribute type 1 has an invalid length. [ 257.837620][T16266] netlink: 15766 bytes leftover after parsing attributes in process `syz.3.3145'. [ 258.036284][T16277] overlayfs: missing 'lowerdir' [ 258.081670][T16282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3151'. [ 258.095939][T16286] netlink: 'syz.0.3152': attribute type 1 has an invalid length. [ 258.223986][T16302] comedi comedi0: dac02: I/O port conflict (0xfffffffffffffbff,8) [ 258.252440][ T6049] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 258.298556][ T5976] Bluetooth: min 1025 > max 0 [ 258.304228][T16307] bond3: entered promiscuous mode [ 258.307136][T16307] 8021q: adding VLAN 0 to HW filter on device bond3 [ 258.414995][ T6049] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 258.418586][ T6049] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.422791][ T6049] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.426390][ T6049] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 258.431571][ T6049] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 258.434837][ T6049] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 258.437439][ T6049] usb 8-1: Manufacturer: syz [ 258.445461][ T6049] usb 8-1: config 0 descriptor?? [ 258.498338][ T6048] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 258.544899][T16328] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 258.690852][ T6048] usb 7-1: Using ep0 maxpacket: 32 [ 258.694953][ T6048] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 258.701750][ T6048] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 258.705896][ T6048] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.709295][ T6048] usb 7-1: Product: syz [ 258.711097][ T6048] usb 7-1: Manufacturer: syz [ 258.713242][ T6048] usb 7-1: SerialNumber: syz [ 258.717650][ T6048] usb 7-1: config 0 descriptor?? [ 258.720470][T16302] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 258.727652][ T6048] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input46 [ 258.884743][ T6049] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 258.894859][ T6049] appleir 0003:05AC:8243.0005: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 259.008854][ T6048] usb 7-1: USB disconnect, device number 35 [ 259.010800][ C3] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 259.246869][ T5976] Bluetooth: hci0: command 0x0419 tx timeout [ 259.758594][ T6048] usb 8-1: USB disconnect, device number 24 [ 259.797160][T16359] Invalid source name [ 259.798791][T16359] UBIFS error (pid: 16359): cannot open "ubifs", error -22 [ 259.833433][T16362] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.376169][T16373] loop3: detected capacity change from 0 to 1 [ 260.385651][T16373] Dev loop3: unable to read RDB block 1 [ 260.388449][T16373] loop3: unable to read partition table [ 260.391594][T16373] loop3: partition table beyond EOD, truncated [ 260.395592][T16373] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 260.445286][ T5976] Bluetooth: hci4: command tx timeout [ 260.561803][ T6230] net_ratelimit: 36 callbacks suppressed [ 260.561818][ T6230] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 260.679404][ T6228] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 260.775134][T16388] ALSA: seq fatal error: cannot create timer (-19) [ 260.797155][ T6252] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 260.915267][ T6257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 261.040887][ T40] kauditd_printk_skb: 438 callbacks suppressed [ 261.040903][ T40] audit: type=1400 audit(2000000008.923:39582): avc: denied { append } for pid=16399 comm="syz.2.3184" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 261.042968][ T6252] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 261.044019][ T40] audit: type=1400 audit(2000000008.923:39583): avc: denied { read } for pid=16399 comm="syz.2.3184" dev="nsfs" ino=4026533412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 261.068340][ T40] audit: type=1400 audit(2000000008.923:39584): avc: denied { open } for pid=16399 comm="syz.2.3184" path="net:[4026533412]" dev="nsfs" ino=4026533412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 261.078562][ T40] audit: type=1400 audit(2000000008.933:39585): avc: denied { open } for pid=16399 comm="syz.2.3184" path="/dev/ttyq8" dev="devtmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 261.088580][ T40] audit: type=1400 audit(2000000008.933:39586): avc: denied { allowed } for pid=16403 comm="syz.0.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 261.089775][T16412] tmpfs: Bad value for 'mpol' [ 261.096863][ T40] audit: type=1400 audit(2000000008.979:39587): avc: denied { mounton } for pid=16411 comm="syz.2.3187" path="/62/file0" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 261.109839][ T40] audit: type=1400 audit(2000000008.989:39588): avc: denied { create } for pid=16413 comm="syz.3.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 261.118159][ T40] audit: type=1400 audit(2000000008.989:39589): avc: denied { bind } for pid=16413 comm="syz.3.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 261.171331][ T6252] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 261.174703][ T40] audit: type=1400 audit(2000000009.054:39590): avc: denied { setattr } for pid=16415 comm="syz.2.3189" name="adsp1" dev="devtmpfs" ino=1326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 261.224695][ T40] audit: type=1400 audit(2000000009.101:39591): avc: denied { setopt } for pid=16413 comm="syz.3.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 261.289165][ T6222] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 261.409506][ T6252] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 261.524115][ T6222] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 261.652336][ T6230] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 261.783299][T16426] netlink: 'syz.4.3190': attribute type 8 has an invalid length. [ 261.946780][T16439] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 261.950714][T16439] overlayfs: missing 'lowerdir' [ 262.829903][T16453] __nla_validate_parse: 10 callbacks suppressed [ 262.829918][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3196'. [ 262.861570][T16460] netlink: 'syz.0.3198': attribute type 2 has an invalid length. [ 262.885997][T16453] loop7: detected capacity change from 0 to 7 [ 262.891715][ C2] blk_print_req_error: 10 callbacks suppressed [ 262.891726][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.897441][ C2] buffer_io_error: 10 callbacks suppressed [ 262.897449][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 262.903515][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.907359][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 262.911163][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.915655][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 262.918814][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.921802][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 262.927551][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.930710][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 262.933488][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.936822][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 262.939964][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.943915][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 262.947131][T16453] ldm_validate_partition_table(): Disk read failed. [ 262.950157][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.953587][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 262.958571][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.962297][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 262.968935][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.971853][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 262.975446][T16453] Dev loop7: unable to read RDB block 0 [ 262.978194][T16453] loop7: unable to read partition table [ 262.980093][T16453] loop7: partition table beyond EOD, truncated [ 262.982647][T16453] loop_reread_partitions: partition scan of loop7 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 262.995204][T16464] ldm_validate_partition_table(): Disk read failed. [ 262.998337][T16453] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 262.998829][T16464] Dev loop7: unable to read RDB block 0 [ 263.001814][T16453] SELinux: failed to load policy [ 263.004297][T16464] loop7: unable to read partition table [ 263.006454][T16464] loop7: partition table beyond EOD, truncated [ 263.010740][ T6048] libceph: connect (1)[c::]:6789 error -101 [ 263.014395][ T6048] libceph: mon0 (1)[c::]:6789 connect error [ 263.301324][ T6048] libceph: connect (1)[c::]:6789 error -101 [ 263.304066][ T6048] libceph: mon0 (1)[c::]:6789 connect error [ 263.696848][T16453] ceph: No mds server is up or the cluster is laggy [ 264.024174][T16503] /dev/nullb0: Can't open blockdev [ 264.028417][T16499] /dev/nullb0: Can't open blockdev [ 264.234537][ T5976] Bluetooth: Wrong link type (-22) [ 264.570209][T16540] syzkaller0: entered promiscuous mode [ 264.574060][T16540] syzkaller0: entered allmulticast mode [ 264.839458][T16548] usb usb4: usbfs: process 16548 (syz.4.3227) did not claim interface 0 before use [ 264.845016][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3227'. [ 265.371899][T16588] xfrm0 speed is unknown, defaulting to 1000 [ 265.378613][T16588] xfrm0 speed is unknown, defaulting to 1000 [ 265.382182][T16588] xfrm0 speed is unknown, defaulting to 1000 [ 265.392040][T16588] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 265.410987][T16588] xfrm0 speed is unknown, defaulting to 1000 [ 265.414756][T16588] xfrm0 speed is unknown, defaulting to 1000 [ 265.418782][T16588] xfrm0 speed is unknown, defaulting to 1000 [ 265.424145][T16588] xfrm0 speed is unknown, defaulting to 1000 [ 265.428452][T16588] xfrm0 speed is unknown, defaulting to 1000 [ 265.432246][T16588] xfrm0 speed is unknown, defaulting to 1000 [ 265.437085][T16588] xfrm0 speed is unknown, defaulting to 1000 [ 265.440563][T16588] xfrm0 speed is unknown, defaulting to 1000 [ 265.631138][T16603] lo speed is unknown, defaulting to 1000 [ 265.634951][T16603] xfrm0 speed is unknown, defaulting to 1000 [ 265.678908][T16605] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3244'. [ 265.684572][T16605] IPVS: stopping backup sync thread 13348 ... [ 265.797692][T16609] dvmrp17: entered allmulticast mode [ 265.815088][T16609] dvmrp17: left allmulticast mode [ 265.960911][ T6222] net_ratelimit: 36 callbacks suppressed [ 265.960927][ T6222] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 266.078107][ T6252] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 266.171992][T16625] FAULT_INJECTION: forcing a failure. [ 266.171992][T16625] name failslab, interval 1, probability 0, space 0, times 0 [ 266.178202][T16625] CPU: 3 UID: 0 PID: 16625 Comm: syz.4.3251 Not tainted syzkaller #0 PREEMPT(full) [ 266.178228][T16625] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 266.178238][T16625] Call Trace: [ 266.178243][T16625] [ 266.178250][T16625] dump_stack_lvl+0x16c/0x1f0 [ 266.178297][T16625] should_fail_ex+0x512/0x640 [ 266.178323][T16625] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 266.178352][T16625] should_failslab+0xc2/0x120 [ 266.178372][T16625] __kmalloc_cache_noprof+0x6a/0x3e0 [ 266.178399][T16625] ? rcu_is_watching+0x12/0xc0 [ 266.178420][T16625] ? vhost_task_create+0xe5/0x2e0 [ 266.178439][T16625] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 266.178463][T16625] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 266.178496][T16625] vhost_task_create+0xe5/0x2e0 [ 266.178514][T16625] ? __pfx_vhost_task_create+0x10/0x10 [ 266.178541][T16625] ? __pfx_vhost_task_fn+0x10/0x10 [ 266.178573][T16625] kvm_mmu_post_init_vm+0x1b7/0x380 [ 266.178594][T16625] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 266.178620][T16625] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 266.178648][T16625] kvm_vcpu_ioctl+0x5eb/0x1690 [ 266.178674][T16625] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 266.178698][T16625] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 266.178721][T16625] ? do_vfs_ioctl+0x128/0x14f0 [ 266.178748][T16625] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 266.178775][T16625] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 266.178811][T16625] ? hook_file_ioctl_common+0x145/0x410 [ 266.178837][T16625] ? selinux_file_ioctl+0x180/0x270 [ 266.178861][T16625] ? selinux_file_ioctl+0xb4/0x270 [ 266.178887][T16625] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 266.178911][T16625] __x64_sys_ioctl+0x18b/0x210 [ 266.178939][T16625] do_syscall_64+0xcd/0x4c0 [ 266.178962][T16625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.178980][T16625] RIP: 0033:0x7fd59a58ebe9 [ 266.178994][T16625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.179010][T16625] RSP: 002b:00007fd59b336038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.179027][T16625] RAX: ffffffffffffffda RBX: 00007fd59a7b5fa0 RCX: 00007fd59a58ebe9 [ 266.179062][T16625] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 266.179073][T16625] RBP: 00007fd59b336090 R08: 0000000000000000 R09: 0000000000000000 [ 266.179083][T16625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.179093][T16625] R13: 00007fd59a7b6038 R14: 00007fd59a7b5fa0 R15: 00007ffcf578de58 [ 266.179120][T16625] [ 266.195700][ T6222] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 266.294147][T16627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.407462][ T40] kauditd_printk_skb: 236 callbacks suppressed [ 266.407473][ T40] audit: type=1400 audit(2000000013.946:39828): avc: denied { create } for pid=16632 comm="syz.4.3254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 266.409690][ T6228] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 266.416156][ T40] audit: type=1400 audit(2000000013.946:39829): avc: denied { ioctl } for pid=16632 comm="syz.4.3254" path="socket:[72538]" dev="sockfs" ino=72538 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 266.416212][ T40] audit: type=1400 audit(2000000013.946:39830): avc: denied { connect } for pid=16632 comm="syz.4.3254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 266.434052][ T40] audit: type=1400 audit(2000000013.946:39831): avc: denied { write } for pid=16632 comm="syz.4.3254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 266.440202][ T40] audit: type=1400 audit(2000000013.956:39832): avc: denied { ioctl } for pid=16632 comm="syz.4.3254" path="socket:[72540]" dev="sockfs" ino=72540 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 266.492491][ T40] audit: type=1400 audit(2000000014.021:39833): avc: denied { validate_trans } for pid=16638 comm="syz.4.3256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 266.531331][ T40] audit: type=1400 audit(2000000014.059:39834): avc: denied { read append } for pid=16643 comm="syz.2.3258" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.540942][ T40] audit: type=1400 audit(2000000014.059:39835): avc: denied { open } for pid=16643 comm="syz.2.3258" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.550476][ T6257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 266.553015][ T40] audit: type=1400 audit(2000000014.059:39836): avc: denied { ioctl } for pid=16643 comm="syz.2.3258" path="/dev/comedi3" dev="devtmpfs" ino=1305 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.594882][ T40] audit: type=1400 audit(2000000014.124:39837): avc: denied { create } for pid=16649 comm="syz.2.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 266.625718][T16653] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3260'. [ 266.665983][ T6228] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 266.794358][ T6222] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 266.875492][T16658] bridge0: entered promiscuous mode [ 266.877358][T16658] macsec1: entered promiscuous mode [ 266.885305][T16658] bridge0: port 3(macsec1) entered blocking state [ 266.887606][T16658] bridge0: port 3(macsec1) entered disabled state [ 266.889882][T16658] macsec1: entered allmulticast mode [ 266.892148][T16658] bridge0: entered allmulticast mode [ 266.895272][T16658] macsec1: left allmulticast mode [ 266.897477][T16658] bridge0: left allmulticast mode [ 266.900800][T16658] bridge0: left promiscuous mode [ 266.922588][ T6222] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 267.041059][ T6230] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 267.044256][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.047154][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.157897][ T6230] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 267.519196][T16669] netlink: 'syz.4.3264': attribute type 4 has an invalid length. [ 267.523817][T16669] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3264'. [ 267.580838][T16676] comedi comedi1: comedi_config --init_data is deprecated [ 267.749570][T16701] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 267.809499][T16706] hfsplus: unable to find HFS+ superblock [ 267.820639][T16706] IPv6: sit1: Disabled Multicast RS [ 267.823888][T16706] sit1: entered allmulticast mode [ 267.928189][T16711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3275'. [ 267.936221][T16711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3275'. [ 269.294543][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3281'. [ 269.301423][T16731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3281'. [ 269.305279][T16731] netlink: 'syz.2.3281': attribute type 11 has an invalid length. [ 269.332487][T16727] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 269.373104][T16729] overlay: filesystem on ./bus not supported [ 269.395621][T16735] futex_wake_op: syz.2.3284 tries to shift op by -1; fix this program [ 269.397861][T16736] comedi comedi3: comedi_config --init_data is deprecated [ 269.551252][T16745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3286'. [ 269.555047][T16745] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 269.568443][T16745] CUSE: unknown device info "&b%ZW)3\my " [ 269.570635][T16745] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 269.575448][T16745] CUSE: DEVNAME unspecified [ 269.662943][T16748] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3287'. [ 270.127469][T16763] bridge_slave_0: left allmulticast mode [ 270.129321][T16763] bridge_slave_0: left promiscuous mode [ 270.132344][T16763] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.141198][T16763] bridge_slave_1: left allmulticast mode [ 270.143521][T16763] bridge_slave_1: left promiscuous mode [ 270.145992][T16763] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.158497][T16763] bond0: (slave bond_slave_0): Releasing backup interface [ 270.169283][T16763] bond0: (slave bond_slave_1): Releasing backup interface [ 270.178441][T16763] team0: Port device team_slave_0 removed [ 270.184902][T16764] netlink: 'syz.4.3292': attribute type 10 has an invalid length. [ 270.186701][T16763] team0: Port device team_slave_1 removed [ 270.190667][T16763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.192827][T16763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.199070][T16763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.201292][T16763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.212993][T16763] bond0: (slave wlan1): Releasing backup interface [ 270.220768][T16763] bond2: (slave ip6gretap1): Removing an active aggregator [ 270.224445][T16763] bond2: (slave ip6gretap1): Releasing backup interface [ 270.257335][T16764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.261497][T16764] team0: Port device bond0 added [ 270.264978][ T5966] xfrm0 speed is unknown, defaulting to 1000 [ 270.355896][T16774] batadv_slave_1: entered promiscuous mode [ 270.358832][T16774] batadv_slave_1: left promiscuous mode [ 270.373440][T16776] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3295'. [ 270.401777][T16778] FAULT_INJECTION: forcing a failure. [ 270.401777][T16778] name failslab, interval 1, probability 0, space 0, times 0 [ 270.405807][T16778] CPU: 0 UID: 0 PID: 16778 Comm: syz.4.3296 Not tainted syzkaller #0 PREEMPT(full) [ 270.405822][T16778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 270.405829][T16778] Call Trace: [ 270.405833][T16778] [ 270.405837][T16778] dump_stack_lvl+0x16c/0x1f0 [ 270.405870][T16778] should_fail_ex+0x512/0x640 [ 270.405888][T16778] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 270.405902][T16778] should_failslab+0xc2/0x120 [ 270.405914][T16778] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 270.405925][T16778] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 270.405942][T16778] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 270.405958][T16778] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 270.405977][T16778] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 270.405998][T16778] mmu_topup_memory_caches+0x25/0x170 [ 270.406010][T16778] kvm_mmu_load+0xd6/0x23c0 [ 270.406021][T16778] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 270.406034][T16778] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 270.406046][T16778] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 270.406062][T16778] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 270.406076][T16778] ? __pfx_kvm_mmu_load+0x10/0x10 [ 270.406086][T16778] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 270.406103][T16778] ? kvm_check_and_inject_events+0x71c/0x1310 [ 270.406122][T16778] vcpu_run+0x358c/0x5580 [ 270.406138][T16778] ? __lock_acquire+0xb97/0x1ce0 [ 270.406159][T16778] ? __pfx_vcpu_run+0x10/0x10 [ 270.406176][T16778] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 270.406191][T16778] ? __local_bh_enable_ip+0xa4/0x120 [ 270.406208][T16778] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 270.406223][T16778] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 270.406243][T16778] kvm_vcpu_ioctl+0x5eb/0x1690 [ 270.406260][T16778] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 270.406274][T16778] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 270.406289][T16778] ? do_vfs_ioctl+0x128/0x14f0 [ 270.406306][T16778] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 270.406337][T16778] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 270.406359][T16778] ? hook_file_ioctl_common+0x145/0x410 [ 270.406375][T16778] ? selinux_file_ioctl+0x180/0x270 [ 270.406390][T16778] ? selinux_file_ioctl+0xb4/0x270 [ 270.406406][T16778] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 270.406421][T16778] __x64_sys_ioctl+0x18b/0x210 [ 270.406439][T16778] do_syscall_64+0xcd/0x4c0 [ 270.406453][T16778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.406469][T16778] RIP: 0033:0x7fd59a58ebe9 [ 270.406478][T16778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.406489][T16778] RSP: 002b:00007fd59b336038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.406500][T16778] RAX: ffffffffffffffda RBX: 00007fd59a7b5fa0 RCX: 00007fd59a58ebe9 [ 270.406507][T16778] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 270.406514][T16778] RBP: 00007fd59b336090 R08: 0000000000000000 R09: 0000000000000000 [ 270.406520][T16778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.406526][T16778] R13: 00007fd59a7b6038 R14: 00007fd59a7b5fa0 R15: 00007ffcf578de58 [ 270.406540][T16778] [ 270.431403][T16781] hfsplus: unable to find HFS+ superblock [ 270.573956][T16787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3300'. [ 270.585050][T16788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3300'. [ 270.720925][T16805] sd 0:0:0:0: PR command failed: 1026 [ 270.722742][T16805] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 270.724906][T16805] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 270.727617][T16805] netlink: 'syz.4.3304': attribute type 2 has an invalid length. [ 270.768930][T16813] CIFS: Unable to determine destination address [ 270.771868][T16813] kvm: Disabled LAPIC found during irq injection [ 271.546875][T16847] fuse: Bad value for 'user_id' [ 271.548466][T16847] fuse: Bad value for 'user_id' [ 271.576844][T16852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3318'. [ 271.602188][T16852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16852 comm=syz.3.3318 [ 271.608245][T16852] netlink: 'syz.3.3318': attribute type 1 has an invalid length. [ 271.803529][ T40] kauditd_printk_skb: 232 callbacks suppressed [ 271.803547][ T40] audit: type=1400 audit(2000000018.988:40070): avc: denied { create } for pid=16853 comm="syz.3.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 271.814456][ T40] audit: type=1400 audit(2000000018.988:40071): avc: denied { shutdown } for pid=16853 comm="syz.3.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 271.822532][ T40] audit: type=1400 audit(2000000018.988:40072): avc: denied { create } for pid=16853 comm="syz.3.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 271.833138][ T40] audit: type=1400 audit(2000000018.988:40073): avc: denied { read } for pid=16853 comm="syz.3.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 271.870420][ T40] audit: type=1400 audit(2000000019.054:40074): avc: denied { write } for pid=16855 comm="syz.3.3320" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 271.870614][T16856] random: crng reseeded on system resumption [ 271.880380][ T40] audit: type=1400 audit(2000000019.054:40075): avc: denied { open } for pid=16855 comm="syz.3.3320" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 271.899018][ T40] audit: type=1400 audit(2000000019.082:40076): avc: denied { firmware_load } for pid=6228 comm="kworker/u32:28" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 271.916772][ T40] audit: type=1400 audit(2000000019.100:40077): avc: denied { ioctl } for pid=16855 comm="syz.3.3320" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 271.966026][ T40] audit: type=1400 audit(2000000019.147:40078): avc: denied { unmount } for pid=15602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 271.984154][ T40] audit: type=1400 audit(2000000019.166:40079): avc: denied { map_create } for pid=16860 comm="syz.2.3321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 272.133597][T16867] syzkaller1: entered promiscuous mode [ 272.135336][T16867] syzkaller1: entered allmulticast mode [ 272.316666][ T9729] libceph: connect (1)[b::]:6789 error -101 [ 272.319302][ T9729] libceph: mon0 (1)[b::]:6789 connect error [ 272.333813][T16879] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 272.383653][T16887] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 272.394471][T16887] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 272.599636][ T6049] libceph: connect (1)[b::]:6789 error -101 [ 272.602034][ T6049] libceph: mon0 (1)[b::]:6789 connect error [ 272.761040][T16902] netlink: 'syz.0.3335': attribute type 2 has an invalid length. [ 272.806940][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3336'. [ 272.866028][ T5976] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 273.145006][ T6049] libceph: connect (1)[b::]:6789 error -101 [ 273.147440][ T6049] libceph: mon0 (1)[b::]:6789 connect error [ 273.184283][T16881] ceph: No mds server is up or the cluster is laggy [ 273.359765][T16947] syz.0.3349(16947): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 273.761072][T16967] overlayfs: missing 'lowerdir' syzkaller syzkaller login: [ 274.268192][T16974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3356'. [ 274.745767][T17014] __nla_validate_parse: 2 callbacks suppressed [ 274.745782][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3368'. [ 274.751915][T17014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3368'. [ 274.757750][T17014] netlink: 'syz.4.3368': attribute type 12 has an invalid length. [ 274.857292][T17024] 9pnet_virtio: no channels available for device syz [ 274.859680][T17024] 9pnet_virtio: no channels available for device syz [ 274.862020][T17024] 9pnet_virtio: no channels available for device syz [ 274.864608][T17024] 9pnet_virtio: no channels available for device syz [ 274.868394][T17024] 9pnet_virtio: no channels available for device syz [ 274.871899][T17024] 9pnet_virtio: no channels available for device syz [ 274.875712][T17024] 9pnet_virtio: no channels available for device syz [ 274.882054][T17024] 9pnet_virtio: no channels available for device syz [ 274.885706][T17024] 9pnet_virtio: no channels available for device syz [ 274.890011][T17024] 9pnet_virtio: no channels available for device syz [ 274.893809][T17024] 9pnet_virtio: no channels available for device syz [ 274.897131][T17024] 9pnet_virtio: no channels available for device syz [ 274.901154][T17024] 9pnet_virtio: no channels available for device syz [ 274.904444][T17024] overlay: Unknown parameter 'trans' [ 274.907174][T17024] overlay: Unknown parameter 'trans' [ 274.908434][T17022] overlayfs: workdir and upperdir must reside under the same mount [ 274.916704][T17024] overlay: Unknown parameter 'trans' [ 274.920277][T17024] overlay: Unknown parameter 'trans' [ 274.923381][T17024] overlay: Unknown parameter 'trans' [ 274.926791][T17024] overlay: Unknown parameter 'trans' [ 274.930087][T17024] overlay: Unknown parameter 'trans' [ 274.933079][T17024] overlay: Unknown parameter 'trans' [ 274.936264][T17024] overlay: Unknown parameter 'trans' [ 274.939721][T17024] overlay: Unknown parameter 'trans' [ 274.943842][T17024] overlay: Unknown parameter 'trans' [ 274.946681][T17024] overlay: Unknown parameter 'trans' [ 274.950173][T17024] overlay: Unknown parameter 'trans' [ 274.953196][T17024] overlay: Unknown parameter 'trans' [ 274.956040][T17024] overlay: Unknown parameter 'trans' [ 274.958794][T17024] overlay: Unknown parameter 'trans' [ 274.962489][T17024] overlay: Unknown parameter 'trans' [ 274.965458][T17024] overlay: Unknown parameter 'trans' [ 274.968221][T17024] overlay: Unknown parameter 'trans' [ 274.971071][T17024] overlay: Unknown parameter 'trans' [ 274.974024][T17024] overlay: Unknown parameter 'trans' [ 274.976897][T17024] overlay: Unknown parameter 'trans' [ 274.979485][T17024] overlay: Unknown parameter 'trans' [ 274.982358][T17024] overlay: Unknown parameter 'trans' [ 275.097774][T17032] 9pnet_fd: Insufficient options for proto=fd [ 275.682568][T17047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3378'. [ 275.824837][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3382'. [ 275.944234][ T67] block nbd0: Possible stuck request ffff8880283001c0: control (read@0,1024B). Runtime 30 seconds [ 275.950339][ T67] block nbd0: Possible stuck request ffff888028300380: control (read@1024,1024B). Runtime 30 seconds [ 277.078011][T17089] geneve3: entered promiscuous mode [ 277.080501][T17089] geneve3: entered allmulticast mode [ 277.158505][T17040] net_ratelimit: 13 callbacks suppressed [ 277.158517][T17040] Set syz1 is full, maxelem 65536 reached [ 277.169161][ T40] kauditd_printk_skb: 289 callbacks suppressed [ 277.169172][ T40] audit: type=1400 audit(2000000024.011:40369): avc: denied { execute } for pid=17097 comm="syz.4.3394" name="file0" dev="tmpfs" ino=1896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 277.178644][ T40] audit: type=1400 audit(2000000024.011:40370): avc: denied { execute_no_trans } for pid=17097 comm="syz.4.3394" path="/350/file0" dev="tmpfs" ino=1896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 277.180177][T17102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.186763][ T40] audit: type=1400 audit(2000000024.030:40371): avc: denied { module_request } for pid=17097 comm="syz.4.3394" kmod="net-pf-19" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 277.209136][ T40] audit: type=1400 audit(2000000024.049:40372): avc: denied { create } for pid=17105 comm="syz.2.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 277.216030][T17099] netlink: 'syz.4.3394': attribute type 10 has an invalid length. [ 277.220300][ T40] audit: type=1400 audit(2000000024.049:40373): avc: denied { read } for pid=17097 comm="syz.4.3394" dev="nsfs" ino=4026533484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 277.220343][ T40] audit: type=1400 audit(2000000024.049:40374): avc: denied { open } for pid=17097 comm="syz.4.3394" path="net:[4026533484]" dev="nsfs" ino=4026533484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 277.220382][ T40] audit: type=1400 audit(2000000024.049:40375): avc: denied { ioctl } for pid=17105 comm="syz.2.3396" path="socket:[76501]" dev="sockfs" ino=76501 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 277.220427][ T40] audit: type=1400 audit(2000000024.049:40376): avc: denied { create } for pid=17097 comm="syz.4.3394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.220468][ T40] audit: type=1400 audit(2000000024.049:40377): avc: denied { prog_load } for pid=17105 comm="syz.2.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 277.236043][T17099] batman_adv: batadv0: Adding interface: team0 [ 277.237476][ T40] audit: type=1400 audit(2000000024.049:40378): avc: denied { bind } for pid=17097 comm="syz.4.3394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.250723][T17099] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.284189][T17099] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 277.291331][T17114] syzkaller1: entered promiscuous mode [ 277.296897][T17114] syzkaller1: entered allmulticast mode [ 277.308058][T17114] overlay: filesystem on ./bus is read-only [ 277.356079][T17119] netlink: 'syz.3.3400': attribute type 5 has an invalid length. [ 277.362308][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3400'. [ 277.489353][T17130] netlink: 'syz.0.3404': attribute type 29 has an invalid length. [ 277.490686][T17127] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 277.500981][T17127] SELinux: failed to load policy [ 277.547856][T17133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3406'. [ 277.550816][T17133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3406'. [ 277.616087][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3409'. [ 277.619709][T17146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3409'. [ 277.654668][T17157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3412'. [ 278.016866][T17190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17190 comm=syz.0.3423 [ 278.029692][T17190] vlan2: entered allmulticast mode [ 278.032662][T17190] veth1: entered allmulticast mode [ 278.208050][T17195] netlink: 'syz.3.3425': attribute type 9 has an invalid length. [ 278.454836][T17207] futex_wake_op: syz.3.3430 tries to shift op by -1; fix this program [ 278.826457][T17230] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 278.829014][T17230] SELinux: failed to load policy [ 278.922641][T17239] batadv2: entered allmulticast mode [ 279.291810][T17247] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 279.295294][T17247] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 279.430960][ T5970] Bluetooth: hci0: command 0x0419 tx timeout [ 279.433684][ T5976] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 279.463780][T17251] /dev/sr0: Can't open blockdev [ 279.476188][T17259] atomic_op ffff88801f6a8998 conn xmit_atomic 0000000000000000 [ 279.595220][T17265] ptrace attach of "/syz-executor exec"[17266] was attempted by "/syz-executor exec"[17265] [ 279.633443][T17268] overlayfs: overlapping lowerdir path [ 279.873021][T17276] /dev/sg0: Can't lookup blockdev [ 281.654268][ T5976] Bluetooth: hci0: command 0x0419 tx timeout [ 283.452342][ T40] kauditd_printk_skb: 273 callbacks suppressed [ 283.452353][ T40] audit: type=1400 audit(2000000029.895:40652): avc: denied { egress } for pid=0 comm="swapper/2" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 283.462325][ T40] audit: type=1400 audit(2000000029.895:40653): avc: denied { sendto } for pid=0 comm="swapper/2" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 291.158168][ T5976] Bluetooth: hci4: command 0x0406 tx timeout [ 294.420398][ T40] audit: type=1400 audit(2000000040.156:40654): avc: denied { execute } for pid=17310 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 294.427687][ T40] audit: type=1400 audit(2000000040.156:40655): avc: denied { execute_no_trans } for pid=17310 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 294.435426][ T40] audit: type=1400 audit(2000000040.166:40656): avc: denied { execmem } for pid=17310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 294.792557][ T40] audit: type=1400 audit(2000000040.493:40657): avc: denied { ioctl } for pid=17311 comm="syz.3.3467" path="socket:[77788]" dev="sockfs" ino=77788 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 294.808063][ T40] audit: type=1400 audit(2000000040.493:40658): avc: denied { bind } for pid=17311 comm="syz.3.3467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 294.809139][T17313] __nla_validate_parse: 1 callbacks suppressed [ 294.809148][T17313] netlink: 190996 bytes leftover after parsing attributes in process `syz.3.3467'. [ 294.814908][ T40] audit: type=1400 audit(2000000040.502:40659): avc: denied { write } for pid=17311 comm="syz.3.3467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 294.830441][ T40] audit: type=1400 audit(2000000040.502:40660): avc: denied { read write } for pid=17311 comm="syz.3.3467" name="video9" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 294.841420][ T40] audit: type=1400 audit(2000000040.502:40661): avc: denied { open } for pid=17311 comm="syz.3.3467" path="/dev/video9" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 294.852846][ T40] audit: type=1400 audit(2000000040.502:40662): avc: denied { create } for pid=17312 comm="syz.2.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 294.863674][ T40] audit: type=1400 audit(2000000040.502:40663): avc: denied { create } for pid=17312 comm="syz.2.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 294.878604][T17327] fuseblk: Unknown parameter '?(P-so(8ڔIv2-' [ 294.958115][ T5970] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.967112][ T5970] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.971511][ T5970] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.977489][ T5970] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.981926][ T5970] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.040238][T17330] lo speed is unknown, defaulting to 1000 [ 295.043152][T17330] xfrm0 speed is unknown, defaulting to 1000 [ 295.175176][T17330] chnl_net:caif_netlink_parms(): no params data found [ 295.196317][T17348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3475'. [ 295.212539][T17348] IPVS: Error connecting to the multicast addr [ 295.275639][T17330] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.279168][T17330] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.283339][T17330] bridge_slave_0: entered allmulticast mode [ 295.289569][T17330] bridge_slave_0: entered promiscuous mode [ 295.303512][T17330] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.309623][T17330] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.313186][T17330] bridge_slave_1: entered allmulticast mode [ 295.319725][T17330] bridge_slave_1: entered promiscuous mode [ 295.379325][T17330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.390547][T17330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.471847][T17330] team0: Port device team_slave_0 added [ 295.475315][T17330] team0: Port device team_slave_1 added [ 295.522323][T17330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.527676][T17330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.537033][T17330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.542641][T17330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.544933][T17330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.553967][T17330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.619695][T17330] hsr_slave_0: entered promiscuous mode [ 295.622950][T17330] hsr_slave_1: entered promiscuous mode [ 295.625897][T17330] debugfs: 'hsr0' already exists in 'hsr' [ 295.632230][T17330] Cannot create hsr debugfs directory [ 295.673154][T17373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=17373 comm=syz.4.3480 [ 295.681009][T17372] netlink: 'syz.2.3481': attribute type 1 has an invalid length. [ 295.682821][T17373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=17373 comm=syz.4.3480 [ 295.781006][T17377] netlink: 696 bytes leftover after parsing attributes in process `syz.2.3482'. [ 295.784036][T17377] netlink: 696 bytes leftover after parsing attributes in process `syz.2.3482'. [ 295.876992][T17330] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 295.890527][T17330] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 295.897311][T17384] netlink: 'syz.3.3484': attribute type 7 has an invalid length. [ 295.902686][T17330] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 295.909185][T17330] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 295.925514][T17330] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.927853][T17330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.930358][T17330] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.932580][T17330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.945854][T17394] vcan1: entered allmulticast mode [ 295.993622][T17330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.009714][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.015597][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.039394][T17330] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.058421][ T6256] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.061396][ T6256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.079191][ T6215] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.082232][ T6215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.123645][T17407] /dev/nullb0: Can't open blockdev [ 296.135390][T17407] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3491'. [ 296.207622][T17415] netlink: 'syz.3.3493': attribute type 4 has an invalid length. [ 296.219066][T17415] netlink: 'syz.3.3493': attribute type 4 has an invalid length. [ 296.239795][T17330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.370272][T17428] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 296.375170][ T838] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 296.407056][T17330] veth0_vlan: entered promiscuous mode [ 296.412250][T17330] veth1_vlan: entered promiscuous mode [ 296.427625][T17330] veth0_macvtap: entered promiscuous mode [ 296.434373][T17330] veth1_macvtap: entered promiscuous mode [ 296.445200][T17330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.456218][T17330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.463976][ T6257] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.467044][ T6257] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.470857][ T6257] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.477334][ T6257] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.514513][ T838] usb 7-1: device descriptor read/64, error -71 [ 296.533041][ T6253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.536712][ T6253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.555759][ T6240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.559416][ T6240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.617170][T17438] veth1_vlan: Device is already in use. [ 296.702412][T17442] overlayfs: failed to resolve './file0': -2 [ 296.771217][ T838] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 296.840195][T17460] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 296.843073][T17460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3506'. [ 296.876318][T17463] bond4: entered promiscuous mode [ 296.878658][T17463] 8021q: adding VLAN 0 to HW filter on device bond4 [ 296.909682][ T838] usb 7-1: device descriptor read/64, error -71 [ 296.916397][T17467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17467 comm=syz.4.3508 [ 296.921414][T17467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pid=17467 comm=syz.4.3508 [ 296.987639][T17473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17473 comm=syz.5.3511 [ 296.992008][T17473] netlink: 'syz.5.3511': attribute type 1 has an invalid length. [ 297.028160][ T838] usb usb7-port1: attempt power cycle [ 297.135988][ T5970] Bluetooth: hci2: command tx timeout [ 297.390915][ T838] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 297.412796][ T838] usb 7-1: device descriptor read/8, error -71 [ 297.525004][T17510] netlink: 'syz.4.3519': attribute type 1 has an invalid length. [ 297.596949][T17522] program syz.4.3523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.598080][T17520] binder: 17518:17520 unknown command 4294967294 [ 297.602623][T17520] binder: 17518:17520 ioctl c0306201 200000000180 returned -22 [ 297.669747][ T838] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 297.691093][ T838] usb 7-1: device descriptor read/8, error -71 [ 297.753723][T17534] netlink: 'syz.5.3526': attribute type 22 has an invalid length. [ 297.756646][T17534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3526'. [ 297.764250][T17534] netlink: 'syz.5.3526': attribute type 22 has an invalid length. [ 297.764387][ T6215] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.767579][T17534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3526'. [ 297.770051][ T6215] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.777067][ T6215] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.781223][ T6215] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.808305][ T838] usb usb7-port1: unable to enumerate USB device [ 297.811449][T17536] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 297.813701][T17536] overlayfs: failed to set xattr on upper [ 297.815648][T17536] overlayfs: ...falling back to redirect_dir=nofollow. [ 297.817771][T17536] overlayfs: ...falling back to index=off. [ 297.820311][T17536] overlayfs: ...falling back to uuid=null. [ 297.826937][T17536] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 297.829464][T17536] overlayfs: failed to set xattr on upper [ 297.831271][T17536] overlayfs: ...falling back to redirect_dir=nofollow. [ 297.833488][T17536] overlayfs: ...falling back to index=off. [ 297.835376][T17536] overlayfs: ...falling back to uuid=null. [ 297.953613][T17543] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3529'. [ 297.957902][T17543] netem: unknown loss type 12 [ 297.959146][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3528'. [ 297.959774][T17543] netem: change failed [ 299.357955][ T5970] Bluetooth: hci2: command tx timeout [ 299.370523][T17576] comedi comedi3: comedi_config --init_data is deprecated [ 299.373177][T17576] comedi: valid board names for 8255 driver are: [ 299.375059][T17576] 8255 [ 299.375871][T17576] comedi: valid board names for vmk80xx driver are: [ 299.377684][T17576] vmk80xx [ 299.379815][T17576] comedi: valid board names for usbduxsigma driver are: [ 299.381785][T17576] usbduxsigma [ 299.382848][T17576] comedi: valid board names for usbduxfast driver are: [ 299.384853][T17576] usbduxfast [ 299.385848][T17576] comedi: valid board names for usbdux driver are: [ 299.387699][T17576] usbdux [ 299.388558][T17576] comedi: valid board names for ni6501 driver are: [ 299.390549][T17576] ni6501 [ 299.391483][T17576] comedi: valid board names for dt9812 driver are: [ 299.393317][T17576] dt9812 [ 299.394164][T17576] comedi: valid board names for ni_labpc_cs driver are: [ 299.396146][T17576] ni_labpc_cs [ 299.397122][T17576] comedi: valid board names for ni_daq_700 driver are: [ 299.399036][T17576] ni_daq_700 [ 299.400029][T17576] comedi: valid board names for labpc_pci driver are: [ 299.402805][T17576] labpc_pci [ 299.403751][T17576] comedi: valid board names for adl_pci9118 driver are: [ 299.405875][T17576] pci9118dg [ 299.406843][T17576] pci9118hg [ 299.407787][T17576] pci9118hr [ 299.408725][T17576] comedi: valid board names for 8255_pci driver are: [ 299.410722][T17576] 8255_pci [ 299.412184][T17576] comedi: valid board names for s526 driver are: [ 299.415194][T17576] s526 [ 299.416206][T17576] comedi: valid board names for multiq3 driver are: [ 299.418711][T17576] multiq3 [ 299.419919][T17576] comedi: valid board names for pcmuio driver are: [ 299.422302][T17576] pcmuio48 [ 299.423429][T17576] pcmuio96 [ 299.424551][T17576] comedi: valid board names for pcmmio driver are: [ 299.426676][T17576] pcmmio [ 299.427748][T17576] comedi: valid board names for pcmda12 driver are: [ 299.429814][T17576] pcmda12 [ 299.430822][T17576] comedi: valid board names for pcmad driver are: [ 299.433016][T17576] pcmad12 [ 299.434018][T17576] pcmad16 [ 299.435065][T17576] comedi: valid board names for ni_labpc driver are: [ 299.437417][T17576] lab-pc-1200 [ 299.438576][T17576] lab-pc-1200ai [ 299.439735][T17576] lab-pc+ [ 299.440730][T17576] comedi: valid board names for atmio16 driver are: [ 299.442799][T17576] atmio16 [ 299.444255][T17576] atmio16d [ 299.446075][T17576] comedi: valid board names for ni_at_ao driver are: [ 299.448334][T17576] at-ao-6 [ 299.449342][T17576] at-ao-10 [ 299.450362][T17576] comedi: valid board names for ni_at_a2150 driver are: [ 299.452555][T17576] ni_at_a2150 [ 299.453722][T17576] comedi: valid board names for adq12b driver are: [ 299.456170][T17576] adq12b [ 299.457210][T17576] comedi: valid board names for mpc624 driver are: [ 299.459383][T17576] mpc624 [ 299.460339][T17576] comedi: valid board names for c6xdigio driver are: [ 299.463360][T17576] c6xdigio [ 299.464447][T17576] comedi: valid board names for aio_iiro_16 driver are: [ 299.466932][T17576] aio_iiro_16 [ 299.468080][T17576] comedi: valid board names for aio_aio12_8 driver are: [ 299.470318][T17576] aio_aio12_8 [ 299.471442][T17576] aio_ai12_8 [ 299.472530][T17576] aio_ao12_4 [ 299.473602][T17576] comedi: valid board names for fl512 driver are: [ 299.475849][T17576] fl512 [ 299.476823][T17576] comedi: valid board names for dmm32at driver are: [ 299.478886][T17576] dmm32at [ 299.479879][T17576] comedi: valid board names for dt282x driver are: [ 299.482032][T17576] dt2821 [ 299.483037][T17576] dt2821-f [ 299.484107][T17576] dt2821-g [ 299.485144][T17576] dt2823 [ 299.486397][T17576] dt2824-pgh [ 299.487483][T17576] dt2824-pgl [ 299.488551][T17576] dt2825 [ 299.489499][T17576] dt2827 [ 299.490447][T17576] dt2828 [ 299.491422][T17576] dt2829 [ 299.492396][T17576] dt21-ez [ 299.493457][T17576] dt23-ez [ 299.494501][T17576] dt24-ez [ 299.495550][T17576] dt24-ez-pgl [ 299.496675][T17576] comedi: valid board names for dt2817 driver are: [ 299.498855][T17576] dt2817 [ 299.499812][T17576] comedi: valid board names for dt2815 driver are: [ 299.501926][T17576] dt2815 [ 299.502927][T17576] comedi: valid board names for dt2814 driver are: [ 299.505040][T17576] dt2814 [ 299.505991][T17576] comedi: valid board names for dt2811 driver are: [ 299.508716][T17576] dt2811-pgh [ 299.510280][T17576] dt2811-pgl [ 299.511554][T17576] comedi: valid board names for dt2801 driver are: [ 299.513568][T17576] dt2801 [ 299.514510][T17576] comedi: valid board names for das6402 driver are: [ 299.516693][T17576] das6402-12 [ 299.518005][T17576] das6402-16 [ 299.522694][T17576] comedi: valid board names for das1800 driver are: [ 299.524971][T17576] das-1701st [ 299.526162][T17576] das-1701st-da [ 299.527369][T17576] das-1702st [ 299.528532][T17576] das-1702st-da [ 299.530467][T17576] das-1702hr [ 299.531694][T17576] das-1702hr-da [ 299.532937][T17576] das-1701ao [ 299.534095][T17576] das-1702ao [ 299.535276][T17576] das-1801st [ 299.536439][T17576] das-1801st-da [ 299.537676][T17576] das-1802st [ 299.538882][T17576] das-1802st-da [ 299.540183][T17576] das-1802hr [ 299.541349][T17576] das-1802hr-da [ 299.542724][T17576] das-1801hc [ 299.543961][T17576] das-1802hc [ 299.545150][T17576] das-1801ao [ 299.546439][T17576] das-1802ao [ 299.547641][T17576] comedi: valid board names for das800 driver are: [ 299.550357][T17576] das-800 [ 299.551468][T17576] cio-das800 [ 299.552675][T17576] das-801 [ 299.553690][T17576] cio-das801 [ 299.554857][T17576] das-802 [ 299.556274][T17576] cio-das802 [ 299.557759][T17576] cio-das802/16 [ 299.558997][T17576] comedi: valid board names for isa-das08 driver are: [ 299.561754][T17576] isa-das08 [ 299.562952][T17576] das08-pgm [ 299.564147][T17576] das08-pgh [ 299.565289][T17576] das08-pgl [ 299.566496][T17576] das08-aoh [ 299.567595][T17576] das08-aol [ 299.568637][T17576] das08-aom [ 299.569678][T17576] das08/jr-ao [ 299.570726][T17576] das08jr-16-ao [ 299.571949][T17576] pc104-das08 [ 299.573019][T17576] das08jr/16 [ 299.574084][T17576] comedi: valid board names for das16m1 driver are: [ 299.576326][T17576] das16m1 [ 299.577338][T17576] comedi: valid board names for dac02 driver are: [ 299.579497][T17576] dac02 [ 299.580505][T17576] comedi: valid board names for rti802 driver are: [ 299.582586][T17576] rti802 [ 299.583554][T17576] comedi: valid board names for rti800 driver are: [ 299.585626][T17576] rti800 [ 299.586587][T17576] rti815 [ 299.587631][T17576] comedi: valid board names for pcm3724 driver are: [ 299.589719][T17576] pcm3724 [ 299.590702][T17576] comedi: valid board names for pcl818 driver are: [ 299.592788][T17576] pcl818l [ 299.594113][T17576] pcl818h [ 299.595206][T17576] pcl818hd [ 299.596266][T17576] pcl818hg [ 299.597298][T17576] pcl818 [ 299.598293][T17576] pcl718 [ 299.599381][T17576] pcm3718 [ 299.600385][T17576] comedi: valid board names for pcl816 driver are: [ 299.602434][T17576] pcl816 [ 299.603496][T17576] pcl814b [ 299.604655][T17576] comedi: valid board names for pcl812 driver are: [ 299.606691][T17576] pcl812 [ 299.607636][T17576] pcl812pg [ 299.608637][T17576] acl8112pg [ 299.609704][T17576] acl8112dg [ 299.610791][T17576] acl8112hg [ 299.611823][T17576] a821pgl [ 299.612799][T17576] a821pglnda [ 299.613921][T17576] a821pgh [ 299.615175][T17576] a822pgl [ 299.616190][T17576] a822pgh [ 299.617221][T17576] a823pgl [ 299.618203][T17576] a823pgh [ 299.619252][T17576] pcl813 [ 299.620168][T17576] pcl813b [ 299.621166][T17576] acl8113 [ 299.622218][T17576] iso813 [ 299.623204][T17576] acl8216 [ 299.624212][T17576] a826pg [ 299.625248][T17576] comedi: valid board names for pcl730 driver are: [ 299.627331][T17576] pcl730 [ 299.628280][T17576] iso730 [ 299.629360][T17576] acl7130 [ 299.630356][T17576] pcm3730 [ 299.631355][T17576] pcl725 [ 299.632288][T17576] p8r8dio [ 299.633407][T17576] acl7225b [ 299.634473][T17576] p16r16dio [ 299.635912][T17576] pcl733 [ 299.637057][T17576] pcl734 [ 299.638220][T17576] opmm-1616-xt [ 299.639656][T17576] pearl-mm-p [ 299.640772][T17576] ir104-pbf [ 299.641771][T17576] comedi: valid board names for pcl726 driver are: [ 299.643947][T17576] pcl726 [ 299.644993][T17576] pcl727 [ 299.645978][T17576] pcl728 [ 299.647076][T17576] acl6126 [ 299.648053][T17576] acl6128 [ 299.649166][T17576] comedi: valid board names for pcl724 driver are: [ 299.651201][T17576] pcl724 [ 299.652121][T17576] pcl722 [ 299.653049][T17576] pcl731 [ 299.653996][T17576] acl7122 [ 299.655486][T17576] acl7124 [ 299.658681][T17576] pet48dio [ 299.659788][T17576] pcmio48 [ 299.660766][T17576] onyx-mm-dio [ 299.661844][T17576] comedi: valid board names for pcl711 driver are: [ 299.663903][T17576] pcl711 [ 299.664922][T17576] pcl711b [ 299.665957][T17576] acl8112hg [ 299.667096][T17576] acl8112dg [ 299.668478][T17576] comedi: valid board names for amplc_pc263 driver are: [ 299.670670][T17576] pc263 [ 299.671543][T17576] comedi: valid board names for amplc_pc236 driver are: [ 299.673687][T17576] pc36at [ 299.674679][T17576] comedi: valid board names for amplc_dio200 driver are: [ 299.677060][T17576] pc212e [ 299.678018][T17576] pc214e [ 299.679208][T17576] pc215e [ 299.680296][T17576] pc218e [ 299.681295][T17576] pc272e [ 299.682343][T17576] comedi: valid board names for comedi_parport driver are: [ 299.684632][T17576] comedi_parport [ 299.685794][T17576] comedi: valid board names for comedi_test driver are: [ 299.688064][T17576] comedi_test [ 299.689381][T17576] comedi: valid board names for comedi_bond driver are: [ 299.691762][T17576] comedi_bond [ 299.786559][ T40] kauditd_printk_skb: 385 callbacks suppressed [ 299.786570][ T40] audit: type=1400 audit(2000000045.170:41049): avc: denied { create } for pid=17584 comm="syz.4.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 299.794917][ T40] audit: type=1400 audit(2000000045.170:41050): avc: denied { write } for pid=17584 comm="syz.4.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 299.801720][ T40] audit: type=1400 audit(2000000045.170:41051): avc: denied { connect } for pid=17584 comm="syz.4.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 299.808145][ T40] audit: type=1400 audit(2000000045.170:41052): avc: denied { name_connect } for pid=17584 comm="syz.4.3541" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 299.815055][ T40] audit: type=1400 audit(2000000045.170:41053): avc: denied { create } for pid=17584 comm="syz.4.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 299.822625][ T40] audit: type=1400 audit(2000000045.198:41054): avc: denied { recv } for pid=17584 comm="syz.4.3541" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=49782 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 299.837494][ T40] audit: type=1400 audit(2000000045.217:41055): avc: denied { unmount } for pid=15602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 299.895430][ T40] audit: type=1400 audit(2000000045.264:41056): avc: denied { egress } for pid=28 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 299.904868][ T40] audit: type=1400 audit(2000000045.264:41057): avc: denied { sendto } for pid=28 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 299.942436][ T40] audit: type=1400 audit(2000000045.310:41058): avc: denied { bpf } for pid=17589 comm="syz.3.3543" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 300.103233][T17596] fuse: Unknown parameter 'r00000ɘ%7VX`0' [ 300.105636][T17596] tc_dump_action: action bad kind [ 300.108084][T17596] overlayfs: failed to resolve './file2': -2 [ 300.134594][T17606] /dev/nullb0: Can't open blockdev [ 300.264313][T17615] can: request_module (can-proto-0) failed. [ 300.502493][T17628] syz.2.3554 (17628): drop_caches: 2 [ 300.614479][T17646] netlink: 'syz.4.3561': attribute type 12 has an invalid length. [ 300.621997][T17646] __nla_validate_parse: 2 callbacks suppressed [ 300.622007][T17646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3561'. [ 300.668767][T17648] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3561'. [ 300.723858][T17644] team0 (unregistering): Port device team_slave_0 removed [ 300.729523][T17644] team0 (unregistering): Port device team_slave_1 removed [ 300.957586][T17659] bond0: entered promiscuous mode [ 300.958708][T17657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17657 comm=syz.2.3563 [ 300.961893][T17659] bond_slave_0: entered promiscuous mode [ 300.966374][T17659] bond_slave_1: entered promiscuous mode [ 300.969586][T17659] bond0: entered allmulticast mode [ 300.975551][T17659] bond_slave_0: entered allmulticast mode [ 300.977701][T17659] bond_slave_1: entered allmulticast mode [ 301.156826][T17682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3569'. [ 301.157303][T17680] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 301.163123][T17680] binder: 17678:17680 ioctl 4018620d 200000000100 returned -1 [ 301.204023][T17690] netlink: 'syz.4.3572': attribute type 29 has an invalid length. [ 301.235987][T17693] vlan2: entered promiscuous mode [ 301.247725][T17693] vlan2: entered allmulticast mode [ 301.249422][T17693] hsr_slave_1: entered allmulticast mode [ 301.253585][T17696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3573'. [ 301.447336][T17730] block nbd4: NBD_DISCONNECT [ 301.457843][T17733] netlink: 'syz.5.3582': attribute type 1 has an invalid length. [ 301.528486][T17733] vivid-001: disconnect [ 301.530814][T17732] vivid-001: reconnect [ 301.595336][ T5970] Bluetooth: hci2: command tx timeout [ 301.670046][T17761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3589'. [ 302.517781][T17795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3599'. [ 302.524525][T17795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3599'. [ 302.556992][T17795] sctp: [Deprecated]: syz.4.3599 (pid 17795) Use of int in max_burst socket option deprecated. [ 302.556992][T17795] Use struct sctp_assoc_value instead [ 302.609745][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3602'. [ 302.638859][T17807] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3604'. [ 302.660240][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.669663][T17807] sp0: Synchronizing with TNC [ 302.679812][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.682374][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.685001][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.687293][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.689602][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.694283][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.698513][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.701205][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.705092][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.708743][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.722177][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.725883][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.729148][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.732483][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.764606][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.768310][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.773647][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.778103][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.781367][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.783966][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.786607][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.789023][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.791620][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.793999][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.796597][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.799128][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.802588][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.805145][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.807575][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.810048][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.812864][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.815431][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.817956][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.820414][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.823283][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.825813][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.828274][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.830787][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.833543][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.836052][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.838507][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.840967][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.844151][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.847390][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.850064][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.852592][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.864365][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.872776][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.879174][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.899665][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.902305][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.905732][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.912588][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.915896][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.918982][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.921342][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.923919][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.926337][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.931422][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.936406][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.942372][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.944810][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.947469][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.953038][T17809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.988574][T17822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3607'. [ 303.077084][T17838] futex_wake_op: syz.4.3611 tries to shift op by 32; fix this program [ 303.497681][T17867] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1281 sclass=netlink_tcpdiag_socket pid=17867 comm=syz.4.3618 [ 303.805227][ T5970] Bluetooth: hci2: command tx timeout [ 303.882490][T17890] Invalid source name [ 303.883997][T17890] UBIFS error (pid: 17890): cannot open "./file0", error -22 [ 303.905852][T17892] netlink: 'syz.5.3624': attribute type 1 has an invalid length. [ 303.912666][T17892] netlink: 'syz.5.3624': attribute type 4 has an invalid length. [ 304.026120][T17902] erspan0: entered promiscuous mode [ 304.178255][T17924] blk_print_req_error: 25 callbacks suppressed [ 304.178267][T17924] I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 304.184655][T17924] gfs2: error -5 reading superblock [ 304.192634][T17919] kvm: Disabled LAPIC found during irq injection [ 304.664860][T17943] sd 0:0:0:0: PR command failed: 1026 [ 304.666721][T17943] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 304.670113][T17943] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 305.145193][ T40] kauditd_printk_skb: 530 callbacks suppressed [ 305.145204][ T40] audit: type=1400 audit(2000000050.184:41589): avc: denied { read write } for pid=17998 comm="syz.4.3659" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 305.156104][ T40] audit: type=1400 audit(2000000050.193:41590): avc: denied { open } for pid=17998 comm="syz.4.3659" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 305.165151][ T40] audit: type=1400 audit(2000000050.193:41591): avc: denied { read write } for pid=18000 comm="syz.2.3660" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 305.178458][ T40] audit: type=1400 audit(2000000050.193:41592): avc: denied { open } for pid=18000 comm="syz.2.3660" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 305.187473][ T40] audit: type=1400 audit(2000000050.193:41593): avc: denied { ioctl } for pid=17998 comm="syz.4.3659" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 305.197692][ T40] audit: type=1400 audit(2000000050.193:41594): avc: denied { map_create } for pid=18000 comm="syz.2.3660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 305.205354][ T40] audit: type=1400 audit(2000000050.193:41595): avc: denied { map_read map_write } for pid=18000 comm="syz.2.3660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 305.214425][ T40] audit: type=1400 audit(2000000050.202:41596): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=49782 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 305.224735][ T40] audit: type=1400 audit(2000000050.202:41597): avc: denied { create } for pid=17998 comm="syz.4.3659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 305.233732][ T40] audit: type=1400 audit(2000000050.202:41598): avc: denied { write } for pid=17998 comm="syz.4.3659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 305.252421][ T5976] Bluetooth: unknown link type 247 [ 305.255177][ T5976] Bluetooth: hci1: connection err: -111 [ 305.367838][T18031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.371911][T18031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.398665][T18034] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 305.401989][T18034] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 305.405097][T18034] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 305.458931][T18032] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 305.939047][T18049] batadv_slave_1: entered promiscuous mode [ 305.945611][T18049] batadv_slave_1: left promiscuous mode [ 306.760776][T18075] lo speed is unknown, defaulting to 1000 [ 306.763356][T18075] xfrm0 speed is unknown, defaulting to 1000 [ 307.065774][ T5976] Bluetooth: hci2: command 0x0405 tx timeout [ 307.300398][T18087] SELinux: syz.2.3687 (18087) set checkreqprot to 1. This is no longer supported. [ 307.369153][ T6215] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.372941][ T6215] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.454235][ T6215] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.457557][ T6215] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.521227][ T6215] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.525746][ T6215] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.552012][ T5976] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.555510][ T5976] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.559386][ T5976] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.563877][ T5976] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.568005][ T5976] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.595069][T18100] lo speed is unknown, defaulting to 1000 [ 307.597581][T18100] xfrm0 speed is unknown, defaulting to 1000 [ 307.657431][T18105] vxcan1: entered allmulticast mode [ 307.714866][ T6215] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.719053][ T6215] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.727662][T18100] chnl_net:caif_netlink_parms(): no params data found [ 307.806133][T18100] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.809076][T18100] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.811605][T18100] bridge_slave_0: entered allmulticast mode [ 307.815419][T18100] bridge_slave_0: entered promiscuous mode [ 307.819566][T18100] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.822060][T18100] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.824627][T18100] bridge_slave_1: entered allmulticast mode [ 307.828674][T18100] bridge_slave_1: entered promiscuous mode [ 307.875868][T18100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.894847][T18100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.964617][T18100] team0: Port device team_slave_0 added [ 307.967836][ T6215] bridge_slave_1: left allmulticast mode [ 307.970682][ T6215] bridge_slave_1: left promiscuous mode [ 307.976133][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.985479][ T6215] bridge_slave_0: left allmulticast mode [ 307.987880][ T6215] bridge_slave_0: left promiscuous mode [ 307.990376][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.006844][ T59] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 308.102818][ T67] block nbd0: Possible stuck request ffff8880283001c0: control (read@0,1024B). Runtime 60 seconds [ 308.107364][ T67] block nbd0: Possible stuck request ffff888028300380: control (read@1024,1024B). Runtime 60 seconds [ 308.188336][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 308.192084][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 308.194944][ T59] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 308.198784][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.205723][ T59] usb 7-1: config 0 descriptor?? [ 308.359563][ T6215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.365886][ T6215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.371606][ T6215] bond0 (unregistering): Released all slaves [ 308.381301][T18100] team0: Port device team_slave_1 added [ 308.436843][T18114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.442583][T18114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.458521][T18100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.460653][T18100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.469050][T18100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.492089][T18100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.494346][T18100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.502935][T18100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.554584][T18100] hsr_slave_0: entered promiscuous mode [ 308.557059][T18100] hsr_slave_1: entered promiscuous mode [ 308.559322][T18100] debugfs: 'hsr0' already exists in 'hsr' [ 308.561237][T18100] Cannot create hsr debugfs directory [ 308.630252][T18121] __nla_validate_parse: 29 callbacks suppressed [ 308.630269][T18121] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3695'. [ 308.685834][ T59] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 308.856182][ T6215] hsr_slave_0: left promiscuous mode [ 308.859694][ T6215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.864107][ T6215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.868743][ T6215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.871738][ T6215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.877769][T18114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.889278][T18114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.891019][T18134] netlink: 'syz.3.3699': attribute type 1 has an invalid length. [ 308.901845][ T5966] usb 7-1: USB disconnect, device number 40 [ 308.946547][T18136] usb usb8: usbfs: process 18136 (syz.3.3699) did not claim interface 0 before use [ 308.961146][ T6215] veth1_macvtap: left promiscuous mode [ 308.964028][ T6215] veth0_macvtap: left promiscuous mode [ 308.966477][ T6215] veth1_vlan: left promiscuous mode [ 308.968878][ T6215] veth0_vlan: left promiscuous mode [ 309.493214][T18140] futex_wake_op: syz.2.3700 tries to shift op by 32; fix this program [ 309.808726][ T5970] Bluetooth: hci2: command tx timeout [ 309.868732][ T6042] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 310.038347][ T6042] usb 7-1: Using ep0 maxpacket: 16 [ 310.043552][ T6042] usb 7-1: config 5 has an invalid interface number: 151 but max is 1 [ 310.047467][ T6042] usb 7-1: config 5 has an invalid interface number: 5 but max is 1 [ 310.051185][ T6042] usb 7-1: config 5 has an invalid interface number: 16 but max is 1 [ 310.055033][ T6042] usb 7-1: config 5 has an invalid descriptor of length 206, skipping remainder of the config [ 310.060154][ T6042] usb 7-1: config 5 has 3 interfaces, different from the descriptor's value: 2 [ 310.063869][ T6042] usb 7-1: config 5 has no interface number 0 [ 310.066421][ T6042] usb 7-1: config 5 has no interface number 1 [ 310.068976][ T6042] usb 7-1: config 5 has no interface number 2 [ 310.071747][ T6042] usb 7-1: config 5 interface 151 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.077008][ T6042] usb 7-1: too many endpoints for config 5 interface 5 altsetting 128: 164, using maximum allowed: 30 [ 310.083522][ T6042] usb 7-1: config 5 interface 5 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 164 [ 310.088975][ T6042] usb 7-1: config 5 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 310.094855][ T6042] usb 7-1: config 5 interface 151 has no altsetting 0 [ 310.097845][ T6042] usb 7-1: config 5 interface 5 has no altsetting 0 [ 310.103471][ T6042] usb 7-1: New USB device found, idVendor=0403, idProduct=caa0, bcdDevice=95.5a [ 310.107488][ T6042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.110829][ T6042] usb 7-1: Product: syz [ 310.112749][ T6042] usb 7-1: Manufacturer: ј [ 310.114680][ T6042] usb 7-1: SerialNumber: syz [ 310.380838][ T6042] ftdi_sio 7-1:5.151: FTDI USB Serial Device converter detected [ 310.395101][ T6042] ftdi_sio ttyUSB0: unknown device type: 0x955a [ 310.426159][ T6042] ftdi_sio 7-1:5.5: FTDI USB Serial Device converter detected [ 310.429601][ T6042] ftdi_sio ttyUSB1: unknown device type: 0x955a [ 310.437814][ T6042] ftdi_sio 7-1:5.16: FTDI USB Serial Device converter detected [ 310.442303][ T6042] ftdi_sio ttyUSB2: unknown device type: 0x955a [ 310.455449][ T6042] usb 7-1: USB disconnect, device number 41 [ 310.474485][ T6042] ftdi_sio 7-1:5.151: device disconnected [ 310.483389][ T6042] ftdi_sio 7-1:5.5: device disconnected [ 310.492223][ T6042] ftdi_sio 7-1:5.16: device disconnected [ 310.803854][T18134] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 310.824591][ T40] kauditd_printk_skb: 158 callbacks suppressed [ 310.824603][ T40] audit: type=1400 audit(2000000055.497:41757): avc: denied { read write } for pid=15069 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 310.838833][ T40] audit: type=1400 audit(2000000055.506:41758): avc: denied { open } for pid=15069 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 310.851424][ T40] audit: type=1400 audit(2000000055.506:41759): avc: denied { ioctl } for pid=15069 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 310.864842][ T40] audit: type=1400 audit(2000000055.534:41760): avc: denied { prog_load } for pid=18146 comm="syz.3.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 310.870253][T18148] pim6reg: left allmulticast mode [ 310.872931][ T40] audit: type=1400 audit(2000000055.534:41761): avc: denied { bpf } for pid=18146 comm="syz.3.3703" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 310.884266][ T40] audit: type=1400 audit(2000000055.534:41762): avc: denied { perfmon } for pid=18146 comm="syz.3.3703" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 310.891825][ T40] audit: type=1400 audit(2000000055.534:41763): avc: denied { prog_run } for pid=18146 comm="syz.3.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 310.900372][ T40] audit: type=1400 audit(2000000055.534:41764): avc: denied { create } for pid=18146 comm="syz.3.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 310.908685][ T40] audit: type=1400 audit(2000000055.534:41765): avc: denied { setopt } for pid=18146 comm="syz.3.3703" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 310.913019][T18100] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 310.916004][ T40] audit: type=1400 audit(2000000055.534:41766): avc: denied { map_create } for pid=18146 comm="syz.3.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 310.931511][T18100] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 310.939229][T18100] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 310.949525][T18100] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 310.996356][T18157] tipc: Started in network mode [ 310.997955][T18157] tipc: Node identity 326981dd6ae2, cluster identity 4711 [ 310.998802][T18169] ./cgroup: Can't lookup blockdev [ 311.002165][T18157] tipc: Enabled bearer , priority 0 [ 311.013740][T18156] tipc: Disabling bearer [ 311.084371][T18100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.125645][T18100] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.141895][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.144338][ T6228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.148355][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.150834][ T6228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.244762][T18183] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3710'. [ 311.332626][T18100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.454132][T18231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3721'. [ 311.492483][T18100] veth0_vlan: entered promiscuous mode [ 311.507038][T18100] veth1_vlan: entered promiscuous mode [ 311.533642][T18100] veth0_macvtap: entered promiscuous mode [ 311.540306][T18100] veth1_macvtap: entered promiscuous mode [ 311.554166][T18100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.564579][T18100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.572640][ T6215] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.575420][ T6215] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.580445][ T6215] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.585809][ T6215] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.672138][ T6240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.675367][ T6240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.702595][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.705344][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.712755][T18246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3724'. [ 311.764642][T18246] loop2: detected capacity change from 0 to 7 [ 311.770437][T18246] Dev loop2: unable to read RDB block 7 [ 311.773151][T18246] loop2: unable to read partition table [ 311.775005][T18246] loop2: partition table beyond EOD, truncated [ 311.776881][T18246] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 311.798092][T18272] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 311.804049][T18272] Error validating options; rc = [-22] [ 312.015807][ T5970] Bluetooth: hci2: command tx timeout [ 312.097818][T18295] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3738'. [ 312.145560][T18302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18302 comm=syz.2.3741 [ 312.213417][T18307] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3743'. [ 312.215939][T18308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3743'. [ 312.495455][T18339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.747746][T18362] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3755'. [ 312.752728][T18360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3756'. [ 312.781528][T18360] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.966207][T18382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3761'. [ 313.009968][T18382] netlink: 'syz.2.3761': attribute type 1 has an invalid length. [ 313.112345][T18402] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18402 comm=syz.3.3768 [ 313.246683][T18406] lo speed is unknown, defaulting to 1000 [ 313.249279][T18406] xfrm0 speed is unknown, defaulting to 1000 [ 313.590523][T18449] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 314.019335][T18473] __nla_validate_parse: 4 callbacks suppressed [ 314.019352][T18473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'. [ 314.035282][T18473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3788'. [ 314.042097][T18473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18473 comm=syz.3.3788 [ 314.108021][T18486] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 314.241083][ T5976] Bluetooth: hci2: command tx timeout [ 314.282328][T18507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3799'. [ 314.422146][T18504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=18504 comm=syz.3.3798 [ 314.488533][T18507] team0: Port device team_slave_0 removed [ 314.577788][T18524] netlink: 'syz.3.3803': attribute type 7 has an invalid length. [ 314.580496][T18524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3803'. [ 314.645439][ T24] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 314.660432][ T34] IPVS: starting estimator thread 0... [ 314.681800][T18536] kernel read not supported for file /policy (pid: 18536 comm: syz.4.3806) [ 314.727136][ T34] IPVS: starting estimator thread 0... [ 314.752365][ T5976] Bluetooth: hci0: command 0x0419 tx timeout [ 314.752609][T18534] IPVS: using max 44 ests per chain, 105600 per kthread [ 314.752648][ T5970] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 314.795355][ T24] usb 7-1: device descriptor read/64, error -71 [ 314.800319][T18549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3812'. [ 314.826635][T18550] [ 314.827673][T18550] ====================================================== [ 314.830556][T18550] WARNING: possible circular locking dependency detected [ 314.832838][T18550] syzkaller #0 Not tainted [ 314.834762][T18550] ------------------------------------------------------ [ 314.839691][T18550] syz.4.3811/18550 is trying to acquire lock: [ 314.842569][T18550] ffff888059de0e80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 314.846073][T18550] [ 314.846073][T18550] but task is already holding lock: [ 314.848790][T18550] ffff8880124dd868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 314.852208][T18550] [ 314.852208][T18550] which lock already depends on the new lock. [ 314.852208][T18550] [ 314.856221][T18550] [ 314.856221][T18550] the existing dependency chain (in reverse order) is: [ 314.859336][T18543] IPVS: using max 55 ests per chain, 132000 per kthread [ 314.859839][T18550] [ 314.859839][T18550] -> #4 (&pipe->mutex){+.+.}-{4:4}: [ 314.859871][T18550] __mutex_lock+0x193/0x1060 [ 314.867582][T18550] pipe_lock+0x64/0x80 [ 314.869317][T18550] iter_file_splice_write+0x1ea/0x12e0 [ 314.871215][T18550] do_splice+0x1478/0x1fc0 [ 314.872710][T18550] __do_splice+0x32a/0x360 [ 314.874343][T18550] __x64_sys_splice+0x187/0x250 [ 314.876163][T18550] do_syscall_64+0xcd/0x4c0 [ 314.877759][T18550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.879867][T18550] [ 314.879867][T18550] -> #3 (sb_writers#6){.+.+}-{0:0}: [ 314.882456][T18550] mnt_want_write+0x6f/0x450 [ 314.884571][T18550] ovl_create_object+0x12c/0x300 [ 314.886811][T18550] lookup_open.isra.0+0x11d0/0x1580 [ 314.888951][T18550] path_openat+0x893/0x2cb0 [ 314.890729][T18550] do_filp_open+0x20b/0x470 [ 314.892331][T18550] do_sys_openat2+0x11b/0x1d0 [ 314.893912][T18550] __x64_sys_openat+0x174/0x210 [ 314.895750][T18550] do_syscall_64+0xcd/0x4c0 [ 314.897339][T18550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.899382][T18550] [ 314.899382][T18550] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 314.902014][T18550] down_read+0x9b/0x480 [ 314.903562][T18550] walk_component+0x345/0x5b0 [ 314.905278][T18550] path_lookupat+0x142/0x6d0 [ 314.907479][T18550] filename_lookup+0x224/0x5f0 [ 314.909168][T18550] kern_path+0x35/0x50 [ 314.910702][T18550] lookup_bdev+0xd8/0x280 [ 314.912186][T18550] resume_store+0x1d6/0x460 [ 314.913742][T18550] kobj_attr_store+0x55/0x80 [ 314.915382][T18550] sysfs_kf_write+0xf2/0x150 [ 314.916995][T18550] kernfs_fop_write_iter+0x354/0x510 [ 314.918762][T18550] vfs_write+0x7d0/0x11d0 [ 314.920263][T18550] ksys_write+0x12a/0x250 [ 314.921892][T18550] do_syscall_64+0xcd/0x4c0 [ 314.923726][T18550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.926316][T18550] [ 314.926316][T18550] -> #1 (&of->mutex){+.+.}-{4:4}: [ 314.929202][T18550] __mutex_lock+0x193/0x1060 [ 314.931253][T18550] kernfs_seq_start+0x4d/0x240 [ 314.933092][T18550] seq_read_iter+0x2be/0x12c0 [ 314.935023][T18550] kernfs_fop_read_iter+0x40f/0x5a0 [ 314.937055][T18550] copy_splice_read+0x615/0xc20 [ 314.938791][T18550] do_splice_read+0x285/0x370 [ 314.940837][T18550] splice_direct_to_actor+0x2a1/0xa30 [ 314.943162][T18550] do_splice_direct+0x174/0x240 [ 314.945337][T18550] do_sendfile+0xb06/0xe50 [ 314.947372][T18550] __x64_sys_sendfile64+0x1d8/0x220 [ 314.949694][T18550] do_syscall_64+0xcd/0x4c0 [ 314.951759][T18550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.954285][T18550] [ 314.954285][T18550] -> #0 (&p->lock){+.+.}-{4:4}: [ 314.956819][T18550] __lock_acquire+0x12a6/0x1ce0 [ 314.958570][T18550] lock_acquire+0x179/0x350 [ 314.960597][T18550] __mutex_lock+0x193/0x1060 [ 314.962143][T18550] seq_read_iter+0xe1/0x12c0 [ 314.963737][T18550] kernfs_fop_read_iter+0x40f/0x5a0 [ 314.965474][T18550] copy_splice_read+0x615/0xc20 [ 314.967121][T18550] do_splice_read+0x285/0x370 [ 314.969101][T18550] splice_file_to_pipe+0x109/0x120 [ 314.971401][T18550] do_sendfile+0x400/0xe50 [ 314.973401][T18550] __x64_sys_sendfile64+0x1d8/0x220 [ 314.975749][T18550] do_syscall_64+0xcd/0x4c0 [ 314.977841][T18550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.980486][T18550] [ 314.980486][T18550] other info that might help us debug this: [ 314.980486][T18550] [ 314.984983][T18550] Chain exists of: [ 314.984983][T18550] &p->lock --> sb_writers#6 --> &pipe->mutex [ 314.984983][T18550] [ 314.989314][T18550] Possible unsafe locking scenario: [ 314.989314][T18550] [ 314.992159][T18550] CPU0 CPU1 [ 314.994391][T18550] ---- ---- [ 314.996201][T18550] lock(&pipe->mutex); [ 314.997567][T18550] lock(sb_writers#6); [ 314.999590][T18550] lock(&pipe->mutex); [ 315.001763][T18550] lock(&p->lock); [ 315.003410][T18550] [ 315.003410][T18550] *** DEADLOCK *** [ 315.003410][T18550] [ 315.006660][T18550] 1 lock held by syz.4.3811/18550: [ 315.008689][T18550] #0: ffff8880124dd868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 315.011664][T18550] [ 315.011664][T18550] stack backtrace: [ 315.013824][T18550] CPU: 0 UID: 0 PID: 18550 Comm: syz.4.3811 Not tainted syzkaller #0 PREEMPT(full) [ 315.013846][T18550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 315.013857][T18550] Call Trace: [ 315.013864][T18550] [ 315.013872][T18550] dump_stack_lvl+0x116/0x1f0 [ 315.013896][T18550] print_circular_bug+0x275/0x350 [ 315.013923][T18550] check_noncircular+0x14c/0x170 [ 315.013951][T18550] __lock_acquire+0x12a6/0x1ce0 [ 315.013981][T18550] lock_acquire+0x179/0x350 [ 315.014006][T18550] ? seq_read_iter+0xe1/0x12c0 [ 315.014024][T18550] ? __pfx___might_resched+0x10/0x10 [ 315.014045][T18550] ? kasan_save_stack+0x42/0x60 [ 315.014062][T18550] ? kasan_save_track+0x14/0x30 [ 315.014080][T18550] ? seq_read_iter+0xe1/0x12c0 [ 315.014095][T18550] __mutex_lock+0x193/0x1060 [ 315.014116][T18550] ? seq_read_iter+0xe1/0x12c0 [ 315.014135][T18550] ? __pfx___mutex_lock+0x10/0x10 [ 315.014158][T18550] ? alloc_pages_bulk_noprof+0xa67/0x1410 [ 315.014180][T18550] ? seq_read_iter+0xe1/0x12c0 [ 315.014195][T18550] seq_read_iter+0xe1/0x12c0 [ 315.014211][T18550] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 315.014234][T18550] kernfs_fop_read_iter+0x40f/0x5a0 [ 315.014255][T18550] copy_splice_read+0x615/0xc20 [ 315.014276][T18550] ? __pfx_copy_splice_read+0x10/0x10 [ 315.014295][T18550] ? __pfx___mutex_lock+0x10/0x10 [ 315.014316][T18550] ? __fget_files+0x204/0x3c0 [ 315.014336][T18550] ? __pfx_copy_splice_read+0x10/0x10 [ 315.014353][T18550] do_splice_read+0x285/0x370 [ 315.014371][T18550] splice_file_to_pipe+0x109/0x120 [ 315.014391][T18550] do_sendfile+0x400/0xe50 [ 315.014410][T18550] ? __pfx_do_sendfile+0x10/0x10 [ 315.014427][T18550] ? __pfx___seccomp_filter+0x10/0x10 [ 315.014455][T18550] __x64_sys_sendfile64+0x1d8/0x220 [ 315.014479][T18550] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 315.014502][T18550] ? __secure_computing+0x28e/0x3b0 [ 315.014529][T18550] do_syscall_64+0xcd/0x4c0 [ 315.014549][T18550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.014567][T18550] RIP: 0033:0x7fd59a58ebe9 [ 315.014582][T18550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.014620][T18550] RSP: 002b:00007fd59b315038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 315.014638][T18550] RAX: ffffffffffffffda RBX: 00007fd59a7b6090 RCX: 00007fd59a58ebe9 [ 315.014650][T18550] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 315.014661][T18550] RBP: 00007fd59a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 315.014672][T18550] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 315.014683][T18550] R13: 00007fd59a7b6128 R14: 00007fd59a7b6090 R15: 00007ffcf578de58 [ 315.014702][T18550] [ 315.062447][ T24] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 315.067114][T18550] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 315.222915][ T24] usb 7-1: device descriptor read/64, error -71 [ 315.340463][ T24] usb usb7-port1: attempt power cycle [ 315.703994][ T24] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 315.725601][ T24] usb 7-1: device descriptor read/8, error -71 [ 316.003410][ T24] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 316.024995][ T24] usb 7-1: device descriptor read/8, error -71 [ 316.142753][ T24] usb usb7-port1: unable to enumerate USB device [ 316.473571][ T5976] Bluetooth: hci2: command tx timeout [ 316.891114][ T40] kauditd_printk_skb: 463 callbacks suppressed [ 316.891133][ T40] audit: type=1400 audit(2000000061.175:42230): avc: denied { egress } for pid=5966 comm="kworker/3:3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 316.903183][ T40] audit: type=1400 audit(2000000061.175:42231): avc: denied { sendto } for pid=5966 comm="kworker/3:3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 320.709452][ T5376] udevd[5376]: worker [9909] /devices/virtual/block/nbd0 is taking a long time [ 322.647372][ T40] audit: type=1400 audit(2000000066.553:42232): avc: denied { search } for pid=18562 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.656751][ T40] audit: type=1400 audit(2000000066.553:42233): avc: denied { search } for pid=18562 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.665199][ T40] audit: type=1400 audit(2000000066.553:42234): avc: denied { search } for pid=18562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.672405][ T40] audit: type=1400 audit(2000000066.553:42235): avc: denied { search } for pid=18562 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.681221][ T40] audit: type=1400 audit(2000000066.553:42236): avc: denied { read open } for pid=18563 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.691439][ T40] audit: type=1400 audit(2000000066.553:42237): avc: denied { getattr } for pid=18563 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.699448][ T40] audit: type=1400 audit(2000000066.563:42238): avc: denied { add_name } for pid=18562 comm="dhcpcd-run-hook" name="resolv.conf.eth3.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.707626][ T40] audit: type=1400 audit(2000000066.563:42239): avc: denied { create } for pid=18562 comm="dhcpcd-run-hook" name="resolv.conf.eth3.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 322.716891][ T40] audit: type=1400 audit(2000000066.563:42240): avc: denied { write open } for pid=18562 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth3.ipv4ll" dev="tmpfs" ino=12073 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 322.726742][ T40] audit: type=1400 audit(2000000066.563:42241): avc: denied { append } for pid=18562 comm="dhcpcd-run-hook" name="resolv.conf.eth3.ipv4ll" dev="tmpfs" ino=12073 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 VM DIAGNOSIS: 16:23:58 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643c85 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc900049df258 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9b111060 R15=ffffffff85643c20 RIP=ffffffff85643caf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd59b3156c0 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd59b314f98 CR3=000000004574c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf578e366 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf578e366 00007ffcf578e36c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd59a612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd59a612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd59a612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd59a612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd59a612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd59a612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd59a7874a8 00007fd59a7874a0 00007fd59a787498 00007fd59a787470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd59b2ed100 00007fd59a787460 00007fd59a787478 00007fd59a7874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd59a7874b8 00007fd59a7874b0 00007fd59a7874a8 00007fd59a7874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffff1100cb592b9 RBX=0000000000000004 RCX=dffffc0000000000 RDX=0000000086f00301 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffc9000333f320 RSP=ffffc9000333f1e8 R8 =0000000000000001 R9 =0000000000000008 R10=0000000000000004 R11=0000000000000000 R12=1ffff92000667e46 R13=ffff888065ac95ca R14=0000000000000001 R15=ffffffff8c1652ad RIP=ffffffff84ebde65 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007efdb8c4a300 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005586e0acd000 CR3=000000003086b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000eeb 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc02808080809c10 0002808010000ac9 c08004060140be18 0000025e00000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff040010 000c0172d60fffff ffffffff040fffff ffffffff040c8004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20dc080008007498 0000000000000000 0000000001ffffff ffffffffffe7080c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8030108000cb003 10808008000ca003 1080808008000c98 0308848008000c90 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0306b4ba08000c88 0300040610000480 8080100040801000 0acb8080040a0142 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000000008 ffffffae00000000 0300000000000016 0000000cffffffda ZMM25=f354f3b4f354f3b4 f354f3b4f354f3b4 f354f3b4f354f3b4 f354f3b4f354f3b4 f354f3b4f354f3b4 f354f3b4f354f3b4 f354f3b4f354f3b4 f354f3b4f354f3b4 ZMM26=2efb56912efb5691 2efb56912efb5691 2efb56912efb5691 2efb56912efb5691 2efb56912efb5691 2efb56912efb5691 2efb56912efb5691 2efb56912efb5691 ZMM27=02e2168602e21686 02e2168602e21686 02e2168602e21686 02e2168602e21686 02e2168602e21686 02e2168602e21686 02e2168602e21686 02e2168602e21686 ZMM28=000000b0000000af 000000ae000000ad 000000ac000000ab 000000aa000000a9 000000a8000000a7 000000a6000000a5 000000a4000000a3 000000a2000000a1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1711000017110000 1711000017110000 1711000017110000 1711000017110000 1711000017110000 1711000017110000 1711000017110000 1711000017110000 info registers vcpu 2 CPU#2 RAX=ffffea00012eda00 RBX=ffff88801b87c080 RCX=ffffffff820725f1 RDX=ffff88802bea2440 RSI=ffffffff82073add RDI=0000000000000000 RBP=0000000000000164 RSP=ffffc90006147608 R8 =0000000000000006 R9 =0000000000013da6 R10=000000000004bb68 R11=0000000000000000 R12=00007fb77be9c000 R13=ffff88804ce704e0 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff82073b03 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb77d563f98 CR3=000000003ad21000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000e58e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3ee1c0e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3ee1c0e6 00007ffd3ee1c0ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb77c812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb77c812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb77c812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb77c812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb77c812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb77c812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb77c9874a8 00007fb77c9874a0 00007fb77c987498 00007fb77c987470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb77d4ed100 00007fb77c987460 00007fb77c987478 00007fb77c9874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb77c9874b8 00007fb77c9874b0 00007fb77c9874a8 00007fb77c9874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81afa177 RDX=ffff888025300000 RSI=ffffffff81afa162 RDI=0000000000000005 RBP=ffffc90005d07100 RSP=ffffc90005d06fa0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a43b328 R12=1ffff92000ba0dfc R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81afa164 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc46b7e46c0 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd3ee1af58 CR3=0000000064eae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000e58e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf578e366 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf578e366 00007ffcf578e36c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd59a612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd59a612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd59a612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd59a612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd59a612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd59a612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000