last executing test programs: 27.120179193s ago: executing program 1 (id=28): r0 = openat(0xffffffffffffffff, &(0x7f0000000780)='./tracing\x00', 0x41, 0xb6) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e7522"], 0x24) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@deltaction={0x18, 0x31, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000064001600202abd70001ddcdf250a1810fe", @ANYRES32=r3, @ANYBLOB="1400010000000000000000000000ffff64010100080009000700000014000600830000000e0000007f00000010000000"], 0x48}, 0x1, 0x1000000}, 0x4040809) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) getpriority(0x2, 0x0) write(r4, &(0x7f0000000180)='-:s/p ', 0x6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) r5 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route_sched(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001600)=@deltfilter={0x840, 0x2d, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xd, 0xffe0}, {0xffe0, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x810, 0x2, [@TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x32006d63, 0xfff7f00a, 0xff, 0x101, 0x8, 0x200, 0xbb, 0x2, 0x3, 0xfffffffb, 0x3f, 0x3, 0x5, 0xfffffff9, 0x0, 0x7, 0x5, 0x7, 0xfffffffa, 0x800, 0x7fff, 0x4, 0x1, 0x1, 0x519f, 0x0, 0x6, 0x0, 0x8, 0x3, 0x1, 0x4, 0x4, 0x5, 0xfffffff7, 0x7fff, 0x1, 0x8, 0x7, 0x3b1f, 0x5, 0x9, 0xb, 0x5, 0x400, 0x4, 0x3, 0xffffffff, 0x8, 0xffffffff, 0x3, 0x68, 0x4, 0x1, 0x7, 0x5, 0x853d642, 0x3, 0x7, 0x8, 0x64b1, 0xf59, 0xa, 0x2, 0x1, 0x4, 0x36, 0x6, 0xa, 0x5, 0x4, 0x7fff, 0x7, 0x10001, 0xa, 0x200, 0x8, 0x9, 0x10, 0x3ff, 0x9, 0x9, 0x70, 0x4, 0xd, 0x1, 0xffffb0d4, 0x2, 0x1ff, 0x7, 0x3, 0x7, 0x1, 0x1, 0x1, 0x3, 0x4, 0xc, 0x8, 0xfffffffa, 0x8aa0, 0xe0f, 0x9, 0x3, 0x1000, 0xffff, 0x10000, 0x8000, 0xd, 0x5, 0xff, 0xf, 0xd0a3, 0x80, 0x7, 0x5b72, 0x0, 0x5, 0xfffffff7, 0x6, 0x7, 0x1ff, 0x5, 0x4, 0x2, 0xb52b, 0xfffffffe, 0x3, 0x3ff, 0x1, 0x2dd9, 0x8001, 0x8, 0x5, 0x0, 0x7, 0x81, 0x2, 0x3, 0xe8d6, 0xffff, 0xc0eb, 0x6, 0x1, 0x7, 0x4b0, 0x8, 0x3cf1a96c, 0x6, 0x6, 0x80000000, 0x9, 0xfffffcea, 0x9, 0x10000, 0x6ce9, 0x9, 0x4e5, 0x7, 0x369c, 0x3f99, 0xffffffff, 0x4, 0x8, 0x3, 0xff, 0x1, 0x0, 0x5, 0x2, 0x5000000, 0x62, 0x10001, 0xcf8c, 0x3f18476d, 0x1f300220, 0x3, 0x4224, 0x1, 0x1, 0x2, 0x4, 0xfffffff7, 0x80000000, 0x5, 0xe, 0x5, 0x1, 0xdf60da4, 0x3, 0x82d0, 0x6, 0x4, 0x800, 0x100, 0x80000001, 0x6, 0x3, 0x7, 0x80000001, 0x7fffffff, 0x3, 0xffffffff, 0x7, 0x2, 0xfffffffd, 0x4, 0x9, 0x6, 0x0, 0xfffffe00, 0x39, 0x2, 0x8000, 0x80, 0x3, 0x4, 0x9, 0x8, 0x4, 0x3, 0x9, 0x100, 0x7, 0x2, 0x7, 0x2, 0x9, 0x19000000, 0x5, 0x4, 0x9, 0x3, 0x80000000, 0x2, 0x2, 0x7, 0x0, 0x7, 0xfff, 0xc83b, 0x401, 0xe4f0, 0xd09, 0x80000001, 0xfffffff7, 0x7812, 0x80, 0xfffffffc, 0x7, 0x0, 0xfffffffc, 0x81, 0xffff, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x0, 0x0, 0xc4e4, 0xfffffc01, 0x459, 0x6, 0x4, 0xc, 0x3, 0x1, 0xde8, 0x4, 0x6, 0x7, 0x2, 0x7, 0x3, 0x2, 0x5, 0x339c04a7, 0x1, 0x9, 0x0, 0x5, 0x4, 0x1, 0x6, 0x5, 0x5, 0x9, 0x9, 0x2, 0x0, 0x80000001, 0x9, 0x84b250eb, 0x2, 0x5, 0x3, 0x4, 0x2f5, 0x10, 0x5, 0x7a4e, 0x5, 0xb9, 0xffffffff, 0x8, 0x8000, 0x8, 0x8, 0xff, 0xff, 0x4, 0x40, 0x7, 0x17, 0x80, 0x3, 0x4, 0x5, 0x7b34, 0x2ce, 0xb8, 0x3ff, 0xb46, 0x4, 0x8, 0x1, 0x2fce, 0x0, 0x5, 0x3, 0x4, 0x8, 0x5, 0x1, 0x0, 0xf, 0x2c8, 0x2, 0xffffffc0, 0x5ed96db, 0x400, 0x7, 0x6, 0x400, 0x1, 0x6, 0x0, 0x5, 0x2, 0x3ff, 0x1ff, 0x8163, 0x4306ded, 0x1de7, 0x831, 0x5, 0xffffffff, 0x7, 0x5, 0x10000, 0xfffffffc, 0x6cf, 0xf, 0x1, 0x1, 0x401, 0x8000, 0x80, 0xe, 0x6, 0x6, 0x4, 0x7, 0x7fffffff, 0xd5f3, 0x0, 0x14, 0xc23, 0xd, 0x1, 0x3, 0x1, 0x9, 0x8, 0xf, 0x800, 0x1, 0xffff, 0x9, 0xfffffff7, 0x4, 0x6, 0xc3, 0x5, 0x3, 0x2, 0x10000, 0xfff, 0x8, 0x32f4, 0x9, 0x2, 0x4, 0x0, 0xa, 0x5, 0x0, 0x3, 0x9, 0x79a9, 0x8, 0x7, 0x6, 0x3, 0x1, 0x3e91, 0x6, 0x5, 0x6, 0xfffffff9, 0x0, 0x7, 0x5, 0x360c4ca1, 0x5, 0x40f, 0x8, 0x7ff, 0x7, 0x2, 0x1, 0xff, 0x96, 0x1, 0x2, 0xc95af3b, 0x6813, 0x4, 0x9, 0x3f, 0x5, 0x8, 0x7, 0x8, 0x1a74, 0x10000, 0x101, 0x8, 0x2, 0x13, 0x6, 0xff, 0x1, 0x0, 0x4, 0x9, 0xa, 0x7, 0x9, 0xffffff00, 0x9, 0x7, 0x1, 0x0, 0x1, 0x0, 0xfffffff8, 0x1000, 0x100000, 0x80000000, 0xffffffff, 0x80000001, 0x3ed, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0xb, 0x5, 0xb, 0xd, 0x8, 0x4, 0x0, 0x1000, 0x4, 0x8, 0x5, 0x2, 0x4, 0x1, 0x0, 0xdcc, 0x7, 0x5, 0x5, 0x2, 0x10, 0x2, 0x217, 0x3ff, 0x200000, 0xd, 0xa990, 0x1, 0x9, 0x4, 0x2932, 0x5dd, 0x1ff, 0xe3]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x20000814}, 0x8000) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r7}, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) r9 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x3}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000440)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r9, r10, r10}, &(0x7f0000000540)=""/220, 0xdc, &(0x7f00000000c0)={&(0x7f0000000340)={'sha3-224\x00'}}) ioctl$LOOP_SET_FD(r8, 0x4c00, r0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r8}, 0x8) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', '\x00', '\x00', [0x0, 0x3]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x178) 26.580182234s ago: executing program 1 (id=34): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e40)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0x4}}}, 0x24}}, 0x4000041) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={r5, 0xd}, 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000740)={r5, @in6={{0xa, 0x4e22, 0x77, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x400}}}, 0x84) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=@gettfilter={0x4c, 0x2e, 0x300, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x3, 0xd}, {0x5, 0xfff1}, {0x0, 0x8}}, [{0x8, 0xb, 0x8}, {0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040040}, 0x84) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r6, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r6, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xcc, &(0x7f0000000840)=""/204, 0x0, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r10, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000002300000008000300", @ANYRES32=r12, @ANYBLOB="05001f0002000000080021"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r10, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000002400000008000300", @ANYRES32=r12], 0x1c}}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r9, 0x0, 0x10001, 0x0, 0x0, 0x1000, 0x26}) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000000180)={0x8, r8}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000040)=ANY=[@ANYBLOB="3300000007000000000000000000000008000000000000006e4b87409e35f6919318802ebf98282ff798eab905008b88fab3cc"]) 26.510000707s ago: executing program 1 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0xc, 0x0, 0x8}}]}}]}, 0x44}}, 0x4c840) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") write(0xffffffffffffffff, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0x35) ioctl(r2, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001320000000000000000000000000000000600000000000000") 26.259764632s ago: executing program 1 (id=37): syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0xa0, 0x40, 0xb8, 0x40, 0x10c4, 0x81e8, 0x4b04, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xc, 0x40, 0x7, "", [{{0x9, 0x4, 0x80, 0x7, 0x0, 0xae, 0x81, 0x13, 0x6}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x5e, &(0x7f00000000c0)=@string={0x5e, 0x3, "c471b4a54debdb6026693c6edf24c4fac6860b0cf5c828489b1447bdccd1f00bcec3605e0d9028fc5a0231b1a4fedf9dbe8c8a1bc569483ab1857296680b72e4abd418279db1279411c0926024a532318d203c2b7a9da47e459bb464"}}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 25.128270885s ago: executing program 1 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x124) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1394483, 0x0) r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_io_uring_setup(0xefd, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, 0x0, r3, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x8, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x1ff, 0x81, 0xfffffff6}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r7, r8, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r5, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002200)={0x10, 0x0, r9}, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 25.020012094s ago: executing program 1 (id=48): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=r0, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xdd}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4800) 16.55999717s ago: executing program 2 (id=138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r2, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000003c0)={&(0x7f0000000340)=[r3, 0x0], 0x0, 0x2}) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000841}, 0x24004000) 16.559560079s ago: executing program 2 (id=139): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x80, &(0x7f0000000200)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x4a, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x4}}]}], "2c9f"}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2bf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf2597e7b3f5b34867ba33c798050000"], 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x2404c995) r1 = socket(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 16.48002773s ago: executing program 2 (id=140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000020c0), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000440)={0x14, r1, 0xb11, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4090) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0) 16.478595396s ago: executing program 2 (id=141): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x801070cf, 0x0) (async) ioctl$IOC_PR_RELEASE(r1, 0x801070cf, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000001002abd7000000000000200000009ffffff8700000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40091}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000001002abd7000000000000200000009ffffff8700000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40091}, 0x0) 16.389972658s ago: executing program 2 (id=142): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) setns(0xc9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r4, &(0x7f0000000000)='3', 0x4e) mount$afs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000580)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000200)) splice(r1, 0x0, r0, 0x0, 0x0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 16.255946589s ago: executing program 2 (id=143): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='&', 0x1}], 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x200, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@tracing={r3, 0xfffffffffffffffe}}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x6, 0x1ff, 0x0, 0x8009}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe02000000020000", 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 15.790197553s ago: executing program 3 (id=147): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0xfffffffe, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1, 0xb}}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_LABELS={0x14, 0x7, "e3ccd1c5b8fbe60833617f2f4a63b45b"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x10000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004000000000000000000000085000000ad0040009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x3, 0x1, 0x0, 0x0, 0x0, {0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x404}, @CTA_MARK_MASK={0x8}, @CTA_MARK_MASK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3bd466bd2e4bc9ac) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010425bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03170000000000001c00128009000100766c616e000000000c0002800600010004000000080005004d4c7d584a0b7463835e5b7904490f1f5c016f96529062d6320dd0e23d8bc71f5d6ad5c91f0670adf3124fee2f002c79bca8cfe6900ff78e7260f5e15a3822632ed7d67eb8a662b88b38", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)=@ethtool_eeprom={0xb, 0x41c, 0x80000001, 0xe5, "804502933b5b0af363b6cefafc71c3e20352f658866e8e483be5ae6b9d9c4ff4f5dac22c4080346d8a929ae4674455be70166dd419643036720453af12b27e83f83200c7dffc289912d1adafb8d4bb19c8ac8715f811cef3c4b63e2568094bdd7272477d8e2f0226e59a6968507cdf923378f000134968fe043219dec914da2cb32e45f8e47601918c3c5136e9769f47dfddcd49b9f7c30211035ed440bdd4b2dafb1ed36f11127c54e77e0736e4938d07c5f1de043cd9582f4556a45e4d192f4ac309b2d53c3e9bd1346a82413c8c9aefe60d00c9dc0dd15f4fdf2a9b6bf356cd94485920"}}) 15.7300643s ago: executing program 3 (id=148): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={@ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x25}, 0x6, 0x6, 0x0, 0x100, 0x4, 0x540000, r2}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r2}) connect$packet(r0, &(0x7f0000000080)={0x11, 0x1c, r2, 0x1, 0xe2, 0x6, @local}, 0x14) 15.727676097s ago: executing program 3 (id=149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x10000000) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x88, 0x68, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x2, 0x0, 0x20}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5}}, @NHA_FDB={0x4}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xd}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xcf}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_FDB={0x4}, @NHA_GROUP={0x24, 0x2, [{0x0, 0x4}, {0x0, 0x5}, {0x0, 0x3}, {0x0, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0) write(r10, &(0x7f0000000240)='prev_c)', 0x7) writev(r10, &(0x7f0000000440)=[{&(0x7f0000000040)}, {&(0x7f0000000140)="796e70acc679e9d4bce415b92e50724190cfdd6988358714542c5eab3bdb9588c953cf612a08114765fd629d760fbb1eb18881b37551729baf418b9d473b881d16d3aa5958c47ebacac3a5c939e1cc787e68359d594f2ed9c6bde6c5868283d1bb661faea6c1cf346f50905ad94c1dfce54d6977a5310b37a9", 0x79}, {&(0x7f0000000300)="32193a8850ecd8c26ce74d8ba0d68468239682bbe7b3f30f66ef1208bcda057b5793e1800b0d7a27282c8b899ec2fa534f2ae0b823dbcb8781decf3341ec791158fa46bcd831a4c189ea1f9b4b9bd9b2262f8eafdc807121933c2c1285ef08e489087c2351ea80f889b68da5c6725619c9bed0d5838f4e485e8f3671d69f853d8f5a4cae2d43a7b9329344e6ced8a8c816abdce4d1a3939f48fdfb7c2cea38dad5a58ce6ec79c01596b3340904a3f22a628c8be842cbfd55348263c02a2a74ac558152a440f7b878fa00b0427011573cf99fe86557088ea30187b3600ae3", 0xde}, {&(0x7f0000000400)="4571e26afb787dbb5fe64f13a5a1cb5a358ca453590282644ba4685c3b89a0abbf92bad007d8a83eb19e47df", 0x2c}], 0x4) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2, 0x0, 0x70000, 0x1000, &(0x7f0000fda000/0x1000)=nil}) 15.509845301s ago: executing program 3 (id=150): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x402400, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000040)) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5dbae2f2de3105000800000000002d2700000000", @ANYRES64=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRESOCT=r2, @ANYBLOB="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"], 0x1c}}, 0x4) write$nci(r3, &(0x7f0000000300)=ANY=[], 0x5) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x0, 0x0, 0x4}}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x9, 0x20000000, 0x7, 0x81}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) (async) r7 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) (async) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) listen(r7, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00000001c0)=0x8000, 0x4) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r8, @ANYRES16=r1, @ANYRESOCT=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xfffffffd, 0x9, 0x6, 0x28085, 0xffffffffffffffff, 0x8, '\x00', r10, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0xd}, 0x50) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 15.340098138s ago: executing program 3 (id=151): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) setns(0xc9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r4, &(0x7f0000000000)='3', 0x4e) mount$afs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000580)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000200)) splice(r1, 0x0, r0, 0x0, 0x0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 15.220193401s ago: executing program 3 (id=152): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000150a010400000000000000000100000a0900e60073797a3200000000ff030000000000046e0b1c2395ee3295fd7b06dbe7b423a40219fb7c11ba389741e5e2b09895af51c76b531029cb364a3bcd8ae4c84b68173290189a088633e73cf277c1bbb25461ecf814931840e3f0ddd18438d4c442164840a65ef856c8cb3f4a7e491f4cd0018548828487a21267ca0bafc15c8962fcc56b9a96558c5b584f9bb91491d00ebb91c615c8572a406b190f34c15b06163fd5f51dfbab68ae4b3646f76c8f73439f0b0c2220ffdd2cde77a5e619f47506529126d3f09fd648f95b0322f630ffd22dbd52731379be"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xaa00, 0x0) write$tun(r6, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], 0x10e8) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) 10.259125929s ago: executing program 0 (id=163): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x8) (async) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x8) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.253291662s ago: executing program 0 (id=164): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}, 0x1, 0x0, 0x0, 0x50}, 0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}, 0x1, 0x0, 0x0, 0x50}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback, 0x3}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback, 0x3}, r1}}, 0x30) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket(0x2, 0x4, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000380)) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f0000000340)=0x4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400009987e88860c3083bdd82d0c98cc26956dfd19567cc4009f39bf0829c7d2b629f4780c5025659f021bb5bb80c8569ef030ed15fb7c888936d16dcf0210b50e970c6a82f7831830039833d3132fa", @ANYRES16=r9, @ANYBLOB="0700000000000000040005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xd0005001}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x1403, 0x800, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20001044}, 0x4004) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xd0005001}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x1403, 0x800, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20001044}, 0x4004) 9.96995223s ago: executing program 0 (id=165): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x3}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2ff, 0x0, 0x0, 0x89, 0x0, @rand_addr, @empty}, {{0x4, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2}}}}, 0x36) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x800600, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x300, 0x18}, './file0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) setns(0xc9, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x3}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2ff, 0x0, 0x0, 0x89, 0x0, @rand_addr, @empty}, {{0x4, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2}}}}, 0x36) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x800600, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x300, 0x18}, './file0\x00'}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) 9.95253718s ago: executing program 32 (id=48): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=r0, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xdd}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4800) 9.74959152s ago: executing program 0 (id=167): mount$afs(&(0x7f0000000000)=@cell={0x25, 'syz0:', 'syz0', '.readonly'}, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x14882, 0x0) chroot(&(0x7f0000000040)='./file0\x00') 9.589922305s ago: executing program 0 (id=168): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) setns(0xc9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r4, &(0x7f0000000000)='3', 0x4e) mount$afs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000580)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000200)) splice(r1, 0x0, r0, 0x0, 0x0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 9.459193732s ago: executing program 0 (id=169): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x804, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7}, 0xe) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x4b, &(0x7f0000000040)=0x5, 0x4) (async) shutdown(r1, 0x1) (async) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x42, 0x0) (async) r2 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000011c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffff}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}]}, 0x44}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) 3.684851596s ago: executing program 4 (id=173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) read$FUSE(r2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000240), &(0x7f0000000340)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r7, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f00000005c0)={@random="cd25bedc5420", @empty, @void, {@x25={0x805, {0x0, 0x9e, 0x1}}}}, 0x0) pwritev(r3, &(0x7f0000000740)=[{&(0x7f0000000200)='3', 0x1}], 0x1, 0x800, 0x0) close(0x3) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x8) 3.507835508s ago: executing program 4 (id=174): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x1f2, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv4={0x800, @igmp={{0x43, 0x4, 0x0, 0x3d, 0x1e4, 0x67, 0x0, 0x8a, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x34, 0xa4, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x42}}, {@local}, {@rand_addr=0x64010101, 0x80}, {@remote, 0xbb8}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @timestamp_prespec={0x44, 0x54, 0x5a, 0x3, 0x3, [{@private=0xa010100, 0x3}, {@private=0xa010101, 0xb}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x2}, {@rand_addr=0x64010101, 0xfffffff8}, {@empty, 0x6}, {@rand_addr=0x64010101, 0x5}, {@rand_addr=0x64010101, 0x549}, {@local, 0xbf}, {@rand_addr=0x64010101}, {@remote, 0x2}]}, @noop, @rr={0x7, 0xb, 0xfb, [@rand_addr=0x64010101, @empty]}, @timestamp_prespec={0x44, 0x34, 0x40, 0x3, 0x9, [{@broadcast, 0x7f}, {@rand_addr=0x64010101, 0x7ff}, {@loopback, 0x10001}, {@remote, 0x8d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@rand_addr=0x64010101, 0x2}]}, @lsrr={0x83, 0x23, 0x25, [@dev={0xac, 0x14, 0x14, 0x11}, @empty, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback, @dev={0xac, 0x14, 0x14, 0x29}]}, @timestamp_prespec={0x44, 0x4, 0x18, 0x3, 0x3}, @ssrr={0x89, 0x7, 0xdb, [@multicast2]}]}}, {0x15, 0x6, 0x0, @loopback, "c3214d101846ca232a3b7cdac5b2a33e469c9292048e930c8db64d97859523d59145a6e200d0379f5770785c5f082a85a283a481656660d2122302b1f174cee476f6e988f59233a4d34cdde189a986d6fccd6e92bbf55fff7340923215fcef1e899f8da7b45bbe9a7c158a3dc4859c73ec27607d58479ccdb71d35d4bf98977b0dc1d3b200edf0b021f3178439201bb5fd84bc8022c5e96a01c3cad6d653c97f754e0c4ce9696f176d9b7d58bb95f19251f469b262be8da065591d27c072fc20a86ee0c9516874b468d00b48711885ab"}}}}}, 0x0) r1 = syz_clone(0x83060080, 0x0, 0x5c, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r4, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) listen(r5, 0x7fff) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) fchdir(0xffffffffffffffff) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)={{0x12, 0x1, 0x341, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x80, 0x90, 0x6, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x76, 0x9, 0x9, {0xa, 0x25, 0x25, 0x6, 0x81, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x6, 0x7, {0xa, 0x25, 0x25, 0x8, 0x0, 0x1}}}}}}}}]}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_AUDIO(r6, 0x80345621, &(0x7f0000000400)) r7 = syz_open_procfs(r1, &(0x7f0000000180)='environ\x00') read$FUSE(r7, &(0x7f00000004c0)={0x2020}, 0x2020) 479.34587ms ago: executing program 33 (id=143): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='&', 0x1}], 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x200, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@tracing={r3, 0xfffffffffffffffe}}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x6, 0x1ff, 0x0, 0x8009}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe02000000020000", 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 419.467002ms ago: executing program 4 (id=176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000280)=0x100000001, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x34, r3, 0x905, 0x0, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000001d00)=[{&(0x7f00000000c0)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000d00)='P', 0x1}], 0x1, &(0x7f0000000340)=[@init={0x14, 0x84, 0x0, {0x31, 0x9, 0x4, 0xa0}}, @dstaddrv6={0x1c, 0x84, 0x8, @loopback}], 0x30, 0x24004884}], 0x1, 0x4040044) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "6929f36fc4b6f237", "e90bc9543df980c0475cb298b27afaaba0240efc1fa4631f2cbeee9e95a9665f", "d56f41e8", "4195549b2e8ed008"}, 0x38) chdir(&(0x7f0000000140)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = fcntl$dupfd(r6, 0x0, r5) write$ppp(r8, 0x0, 0x1f) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) madvise(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 129.286315ms ago: executing program 4 (id=177): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="71a7d4cd630ad2721b29f04ec08aabf278c890609cd8e138b96c47202da0d88cd7fd39a571ec6f2f406831bf26cd6bc158c4eee4ce276d05a8d4a87903048a6e5f762773e96ce36602d6382472e3c7b267ec4bec0bf1b54088ad5df5e05da52a90e634710b4889bab84d52d908dd7937f46d28cb866c712a784796d97784a434a9129695d11b77b1081f5f855241844013998091eab020fe45cec6d083a050e8a384be07752bf77cba5ec3074448165e529023bedbe38a51aed7b78b8aecb0b2098ecea31b437961cf", 0xc9}], 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000003340)=0x9, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x3, 0x4) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) 113.952811ms ago: executing program 34 (id=152): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000150a010400000000000000000100000a0900e60073797a3200000000ff030000000000046e0b1c2395ee3295fd7b06dbe7b423a40219fb7c11ba389741e5e2b09895af51c76b531029cb364a3bcd8ae4c84b68173290189a088633e73cf277c1bbb25461ecf814931840e3f0ddd18438d4c442164840a65ef856c8cb3f4a7e491f4cd0018548828487a21267ca0bafc15c8962fcc56b9a96558c5b584f9bb91491d00ebb91c615c8572a406b190f34c15b06163fd5f51dfbab68ae4b3646f76c8f73439f0b0c2220ffdd2cde77a5e619f47506529126d3f09fd648f95b0322f630ffd22dbd52731379be"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xaa00, 0x0) write$tun(r6, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], 0x10e8) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) 69.571136ms ago: executing program 4 (id=179): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 0s ago: executing program 4 (id=180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000400)=0xf) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x1000}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140)="1c9106d1895723539a543c90d8171ac2cf21fe2744a64de306c4a7c6647b90e94a5b12dd062c6e3d15e5640d83e0e68f9c00c20c992a123a1e8e8b10ca3688183f3b706905b2db79e89096705340e52045b51c2aec199db2bb62e3eed763c1d6171d77cafed2198df9cf6610976f8d27a221b0c800d0909d09ea79a6e7cdb2599f50bc7eba6b753c1e756a0f8b60c9dd30218d22fcdd2d176044586a97b419e1ae001a44acc8025c9796a31c67e077abe79a5ae379097d8ac1f12ee32a93cbe7018434bd2faf96c3f610dece3c4e0531ac81c50ad587e23e64208b5edb8f969bc9bcb06e4fc202ff886c26ae4f7c1ed5106428dd", 0xf4, r7}, 0x68) kernel console output (not intermixed with test programs): [ 28.973241][ T43] audit: type=1400 audit(1790998316.765:115): avc: denied { siginh } for pid=5626 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:50366' (ED25519) to the list of known hosts. [ 30.198467][ T43] audit: type=1400 audit(1790998317.985:116): avc: denied { name_bind } for pid=5636 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 30.224266][ T43] audit: type=1400 audit(1790998318.015:117): avc: denied { execute } for pid=5637 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 30.224553][ T43] audit: type=1400 audit(1790998318.015:118): avc: denied { execute_no_trans } for pid=5637 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 32.387719][ T43] audit: type=1400 audit(1790998320.175:119): avc: denied { mounton } for pid=5637 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.391183][ T43] audit: type=1400 audit(1790998320.185:120): avc: denied { mount } for pid=5637 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.392873][ T5637] cgroup: Unknown subsys name 'net' [ 32.394301][ T43] audit: type=1400 audit(1790998320.185:121): avc: denied { unmount } for pid=5637 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.523412][ T43] audit: type=1400 audit(1790998320.315:122): avc: denied { write } for pid=5639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.523588][ T43] audit: type=1400 audit(1790998320.315:123): avc: denied { create } for pid=5639 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.523932][ T43] audit: type=1400 audit(1790998320.315:124): avc: denied { write open } for pid=5639 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb0.ipv4ll" dev="tmpfs" ino=1877 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.524239][ T43] audit: type=1400 audit(1790998320.315:125): avc: denied { append } for pid=5639 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.ipv4ll" dev="tmpfs" ino=1877 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.571673][ T5637] cgroup: Unknown subsys name 'cpuset' [ 32.574660][ T5637] cgroup: Unknown subsys name 'rlimit' [ 32.806597][ T5654] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.514005][ T5637] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.861244][ T43] kauditd_printk_skb: 35 callbacks suppressed [ 36.861261][ T43] audit: type=1400 audit(1790998324.655:161): avc: denied { execmem } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.056545][ T43] audit: type=1400 audit(1790998324.845:162): avc: denied { create } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.056953][ T43] audit: type=1400 audit(1790998324.845:163): avc: denied { read write } for pid=5719 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.057360][ T43] audit: type=1400 audit(1790998324.845:164): avc: denied { open } for pid=5719 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.068884][ T43] audit: type=1400 audit(1790998324.855:165): avc: denied { ioctl } for pid=5720 comm="syz-executor" path="socket:[1886]" dev="sockfs" ino=1886 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.077494][ T5721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.078485][ T5721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.078767][ T5721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.079295][ T5721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.080037][ T5721] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.080253][ T5721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.080431][ T5721] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.080673][ T5721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.081691][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.082411][ T5721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.083772][ T5721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.086542][ T5721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.086993][ T5082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.089499][ T43] audit: type=1400 audit(1790998324.885:166): avc: denied { read } for pid=5719 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.089769][ T43] audit: type=1400 audit(1790998324.885:167): avc: denied { open } for pid=5719 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.091198][ T43] audit: type=1400 audit(1790998324.885:168): avc: denied { mounton } for pid=5719 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.094733][ T5082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.094993][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.100409][ T43] audit: type=1400 audit(1790998324.885:169): avc: denied { module_request } for pid=5719 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.109673][ T5725] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.111116][ T5728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.117352][ T5728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.129587][ T43] audit: type=1400 audit(1790998324.925:170): avc: denied { sys_module } for pid=5720 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 37.134650][ T5728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.135838][ T5728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.657866][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.657947][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.658065][ T5726] bridge_slave_0: entered allmulticast mode [ 37.659630][ T5726] bridge_slave_0: entered promiscuous mode [ 37.663299][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.663721][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.663825][ T5726] bridge_slave_1: entered allmulticast mode [ 37.665256][ T5726] bridge_slave_1: entered promiscuous mode [ 37.751433][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.778351][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.788923][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.789148][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.789416][ T5720] bridge_slave_0: entered allmulticast mode [ 37.790745][ T5720] bridge_slave_0: entered promiscuous mode [ 37.804120][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.804166][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.804229][ T5731] bridge_slave_0: entered allmulticast mode [ 37.804974][ T5731] bridge_slave_0: entered promiscuous mode [ 37.810661][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.810735][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.810796][ T5720] bridge_slave_1: entered allmulticast mode [ 37.811573][ T5720] bridge_slave_1: entered promiscuous mode [ 37.818110][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.818152][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.818202][ T5731] bridge_slave_1: entered allmulticast mode [ 37.818937][ T5731] bridge_slave_1: entered promiscuous mode [ 37.827200][ T5726] team0: Port device team_slave_0 added [ 37.829222][ T5726] team0: Port device team_slave_1 added [ 37.871881][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.873003][ T5720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.876636][ T5720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.884733][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.885190][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.885200][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.885213][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.917883][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.917901][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.917923][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.950425][ T5720] team0: Port device team_slave_0 added [ 37.952234][ T5731] team0: Port device team_slave_0 added [ 37.953783][ T5720] team0: Port device team_slave_1 added [ 37.955581][ T5731] team0: Port device team_slave_1 added [ 38.025922][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.025933][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.025946][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.026670][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.026682][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.026700][ T5720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.033648][ T5726] hsr_slave_0: entered promiscuous mode [ 38.034867][ T5726] hsr_slave_1: entered promiscuous mode [ 38.049912][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.049924][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.049936][ T5720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.054711][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.054721][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.054733][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.060795][ T5719] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.060923][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.060983][ T5719] bridge_slave_0: entered allmulticast mode [ 38.061720][ T5719] bridge_slave_0: entered promiscuous mode [ 38.063927][ T5719] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.063967][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.064122][ T5719] bridge_slave_1: entered allmulticast mode [ 38.065339][ T5719] bridge_slave_1: entered promiscuous mode [ 38.129526][ T5720] hsr_slave_0: entered promiscuous mode [ 38.130005][ T5720] hsr_slave_1: entered promiscuous mode [ 38.130343][ T5720] debugfs: 'hsr0' already exists in 'hsr' [ 38.130399][ T5720] Cannot create hsr debugfs directory [ 38.149873][ T5731] hsr_slave_0: entered promiscuous mode [ 38.150723][ T5731] hsr_slave_1: entered promiscuous mode [ 38.151244][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 38.151260][ T5731] Cannot create hsr debugfs directory [ 38.152905][ T5719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.168398][ T5719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.243969][ T5719] team0: Port device team_slave_0 added [ 38.268135][ T5719] team0: Port device team_slave_1 added [ 38.325336][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.325347][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.325360][ T5719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.348688][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.348702][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.348721][ T5719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.433947][ T5719] hsr_slave_0: entered promiscuous mode [ 38.434642][ T5719] hsr_slave_1: entered promiscuous mode [ 38.434977][ T5719] debugfs: 'hsr0' already exists in 'hsr' [ 38.434989][ T5719] Cannot create hsr debugfs directory [ 38.500876][ T5726] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.506485][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.529197][ T5726] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.534953][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.539586][ T5726] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.545184][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.546303][ T5726] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.550407][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.630856][ T5720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.633685][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.643218][ T5720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.648176][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.651972][ T5720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.655445][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.664947][ T5720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.668254][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.721342][ T5731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.725255][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.725922][ T5731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.730884][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.740033][ T5731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.745876][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.748244][ T5731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.752205][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.795451][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.811669][ T5719] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.813852][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.814811][ T5719] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.817117][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.817561][ T5719] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.821008][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.827149][ T5719] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.830826][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.856498][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.874342][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.874459][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.883762][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.883920][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.908338][ T5720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.951281][ T5720] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.969488][ T558] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.969538][ T558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.976186][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.977807][ T558] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.977852][ T558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.010254][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.023325][ T558] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.023372][ T558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.037323][ T558] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.037405][ T558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.044812][ T5719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.067385][ T5719] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.074269][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.074314][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.081466][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.081512][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.140642][ T66] Bluetooth: hci3: command tx timeout [ 39.140649][ T5725] Bluetooth: hci1: command tx timeout [ 39.140884][ T5728] Bluetooth: hci2: command tx timeout [ 39.140969][ T5082] Bluetooth: hci0: command tx timeout [ 39.263753][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.297888][ T5726] veth0_vlan: entered promiscuous mode [ 39.304967][ T5726] veth1_vlan: entered promiscuous mode [ 39.326947][ T5726] veth0_macvtap: entered promiscuous mode [ 39.332878][ T5726] veth1_macvtap: entered promiscuous mode [ 39.343038][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.347644][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.352394][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.364930][ T5720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.381695][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.381853][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.436878][ T5719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.437974][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.437990][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.438068][ T5731] veth0_vlan: entered promiscuous mode [ 39.447750][ T5720] veth0_vlan: entered promiscuous mode [ 39.452345][ T5731] veth1_vlan: entered promiscuous mode [ 39.464667][ T558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.464681][ T558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.474370][ T5720] veth1_vlan: entered promiscuous mode [ 39.502137][ T5731] veth0_macvtap: entered promiscuous mode [ 39.517217][ T5720] veth0_macvtap: entered promiscuous mode [ 39.518294][ T5726] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.523642][ T5731] veth1_macvtap: entered promiscuous mode [ 39.533179][ T5720] veth1_macvtap: entered promiscuous mode [ 39.537235][ T5719] veth0_vlan: entered promiscuous mode [ 39.544737][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.555541][ T5719] veth1_vlan: entered promiscuous mode [ 39.557099][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.560567][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.564789][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.627546][ T558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.627565][ T558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.627825][ T5719] veth0_macvtap: entered promiscuous mode [ 39.650877][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.650891][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.651751][ T5719] veth1_macvtap: entered promiscuous mode [ 39.674310][ T5870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=5870 comm=syz.3.4 [ 39.675128][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.685476][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.689823][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.689840][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.709142][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.709160][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.722518][ T5794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.722753][ T5794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.722781][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.722798][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.771003][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.771025][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.779436][ T5537] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.779462][ T5537] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.779479][ T5537] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.779496][ T5537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.779513][ T5537] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.779530][ T5537] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.779548][ T5537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.779564][ T5537] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.779583][ T5537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.779599][ T5537] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.801044][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.801062][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.844610][ T5877] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.844625][ T5877] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.844689][ T5877] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.851001][ T35] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 39.895115][ T5811] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 39.917523][ T5886] Bluetooth: MGMT ver 1.23 [ 39.968429][ T5902] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 39.968781][ T5902] SELinux: failed to load policy [ 40.027799][ T5909] capability: warning: `syz.3.12' uses deprecated v2 capabilities in a way that may be insecure [ 40.032728][ T5911] overlayfs: missing 'lowerdir' [ 40.086292][ T5923] openvswitch: netlink: IP tunnel dst address not specified [ 40.086309][ T5923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 40.111501][ T35] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 40.111850][ T5916] Zero length message leads to an empty skb [ 40.151324][ T5811] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 40.174200][ T5925] openvswitch: netlink: IP tunnel dst address not specified [ 40.174217][ T5925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 40.393765][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 40.629784][ T35] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 40.662220][ T5811] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 40.672115][ T5875] ceph: No mds server is up or the cluster is laggy [ 40.673542][ T5879] ceph: No mds server is up or the cluster is laggy [ 40.676193][ T5935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'. [ 40.796858][ T5942] FAULT_INJECTION: forcing a failure. [ 40.796858][ T5942] name failslab, interval 1, probability 0, space 0, times 1 [ 40.796888][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 40.796907][ T5942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.796916][ T5942] Call Trace: [ 40.796923][ T5942] [ 40.796931][ T5942] dump_stack_lvl+0x100/0x190 [ 40.796963][ T5942] should_fail_ex.cold+0x5/0xa [ 40.796990][ T5942] should_failslab+0xc2/0x120 [ 40.797016][ T5942] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 40.797041][ T5942] ? sock_alloc_inode+0x26/0x2c0 [ 40.797072][ T5942] ? __pfx_sock_alloc_inode+0x10/0x10 [ 40.797103][ T5942] sock_alloc_inode+0x26/0x2c0 [ 40.797130][ T5942] ? __pfx_sock_alloc_inode+0x10/0x10 [ 40.797156][ T5942] alloc_inode+0x68/0x250 [ 40.797185][ T5942] sock_alloc+0x44/0x280 [ 40.797212][ T5942] ? security_socket_create+0x7f/0x250 [ 40.797235][ T5942] __sock_create+0xc2/0x860 [ 40.797259][ T5942] __sys_socket+0x14d/0x260 [ 40.797279][ T5942] ? __pfx___sys_socket+0x10/0x10 [ 40.797307][ T5942] __x64_sys_socket+0x72/0xb0 [ 40.797327][ T5942] ? lockdep_hardirqs_on+0x7d/0x110 [ 40.797346][ T5942] do_syscall_64+0x123/0x790 [ 40.797368][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.797388][ T5942] RIP: 0033:0x7fcf0919e159 [ 40.797403][ T5942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.797418][ T5942] RSP: 002b:00007fcf0a028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 40.797435][ T5942] RAX: ffffffffffffffda RBX: 00007fcf09425fa0 RCX: 00007fcf0919e159 [ 40.797447][ T5942] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 40.797457][ T5942] RBP: 00007fcf0923506b R08: 0000000000000000 R09: 0000000000000000 [ 40.797467][ T5942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.797478][ T5942] R13: 00007fcf09426038 R14: 00007fcf09425fa0 R15: 00007ffe250388b8 [ 40.797501][ T5942] [ 40.797510][ T5942] socket: no more sockets [ 40.891386][ T5944] /dev/sg0: Can't lookup blockdev [ 40.929982][ T5946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21'. [ 40.943063][ T5948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=5948 comm=syz.1.22 [ 41.106152][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 41.107746][ T5959] veth1: entered promiscuous mode [ 41.108068][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 41.113120][ T5954] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 41.219525][ T5082] Bluetooth: hci1: command tx timeout [ 41.219543][ T5728] Bluetooth: hci0: command tx timeout [ 41.493363][ T5988] netlink: 'syz.3.31': attribute type 9 has an invalid length. [ 41.605523][ T6000] syzkaller0: entered promiscuous mode [ 41.605543][ T6000] syzkaller0: entered allmulticast mode [ 41.755656][ T6012] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 41.978350][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 41.978790][ T6025] hsr_slave_0: left promiscuous mode [ 41.982636][ T6025] hsr_slave_1: left promiscuous mode [ 42.014248][ T6017] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 42.014265][ T6017] device-mapper: ioctl: error adding target to table [ 42.053306][ T43] kauditd_printk_skb: 89 callbacks suppressed [ 42.053324][ T43] audit: type=1400 audit(1790998329.845:260): avc: denied { bind } for pid=6026 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.058906][ T43] audit: type=1400 audit(1790998329.845:261): avc: denied { write } for pid=6028 comm="syz.1.37" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.099185][ T5082] Bluetooth: hci2: command tx timeout [ 42.126097][ T43] audit: type=1400 audit(1790998329.915:262): avc: denied { create } for pid=6032 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.132454][ T43] audit: type=1400 audit(1790998329.925:263): avc: denied { allowed } for pid=6032 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 42.137623][ T43] audit: type=1400 audit(1790998329.925:264): avc: denied { create } for pid=6032 comm="syz.0.40" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.138250][ T43] audit: type=1400 audit(1790998329.925:265): avc: denied { map } for pid=6032 comm="syz.0.40" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.138327][ T43] audit: type=1400 audit(1790998329.925:266): avc: denied { read write } for pid=6032 comm="syz.0.40" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.143626][ T43] audit: type=1400 audit(1790998329.935:267): avc: denied { setopt } for pid=6032 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.143979][ T43] audit: type=1400 audit(1790998329.935:268): avc: denied { write } for pid=6032 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.154033][ T43] audit: type=1400 audit(1790998329.945:269): avc: denied { create } for pid=6032 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 42.299267][ T5811] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 42.419561][ T5082] Bluetooth: hci3: command tx timeout [ 42.451707][ T5811] usb 6-1: unable to get BOS descriptor or descriptor too short [ 42.451735][ T5811] usb 6-1: New USB device found, idVendor=10c4, idProduct=81e8, bcdDevice=4b.04 [ 42.453989][ T5811] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 42.454027][ T5811] usb 6-1: config 4 has no interface number 0 [ 42.454041][ T5811] usb 6-1: config 4 interface 128 has no altsetting 0 [ 42.457840][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.457856][ T5811] usb 6-1: Product: syz [ 42.457863][ T5811] usb 6-1: Manufacturer: syz [ 42.457870][ T5811] usb 6-1: SerialNumber: syz [ 42.672235][ T5811] cp210x 6-1:4.128: cp210x converter detected [ 42.672925][ T5811] cp210x 6-1:4.128: failed to get vendor val 0x370b size 1: -71 [ 42.672939][ T5811] cp210x 6-1:4.128: querying part number failed [ 42.677050][ T5811] usb 6-1: cp210x converter now attached to ttyUSB0 [ 42.683268][ T5811] usb 6-1: USB disconnect, device number 2 [ 42.690285][ T5811] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 42.690632][ T5811] cp210x 6-1:4.128: device disconnected [ 42.909620][ T5869] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 43.049137][ T5869] usb 5-1: device descriptor read/64, error -71 [ 43.289112][ T5869] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 43.299267][ T5082] Bluetooth: hci0: command tx timeout [ 43.299312][ T5082] Bluetooth: hci1: command tx timeout [ 43.419190][ T5869] usb 5-1: device descriptor read/64, error -71 [ 43.530447][ T5869] usb usb5-port1: attempt power cycle [ 43.810243][ T6079] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 43.854824][ T6081] geneve2: entered promiscuous mode [ 43.872268][ T5869] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 43.889849][ T5869] usb 5-1: device descriptor read/8, error -71 [ 43.891519][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.51'. [ 44.159118][ T5869] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 44.179919][ T5728] Bluetooth: hci2: command tx timeout [ 44.190011][ T5869] usb 5-1: device descriptor read/8, error -71 [ 44.299449][ T5869] usb usb5-port1: unable to enumerate USB device [ 44.509181][ T5728] Bluetooth: hci3: command tx timeout [ 44.973522][ T6111] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 44.973539][ T6111] device-mapper: ioctl: error adding target to table [ 45.216801][ T6134] Bluetooth: MGMT ver 1.23 [ 45.381103][ T5728] Bluetooth: hci1: command tx timeout [ 45.381135][ T5728] Bluetooth: hci0: command tx timeout [ 45.482752][ T6143] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 45.482798][ T6143] Error validating options; rc = [-22] [ 45.524569][ T6145] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6145 comm=syz.2.60 [ 46.099427][ T5094] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 46.259410][ T5094] usb 5-1: Using ep0 maxpacket: 8 [ 46.260136][ T5094] usb 5-1: New USB device found, idVendor=1fb9, idProduct=0404, bcdDevice=85.e6 [ 46.261045][ T5094] usb 5-1: config 6 has an invalid interface number: 26 but max is 0 [ 46.261066][ T5094] usb 5-1: config 6 has no interface number 0 [ 46.261099][ T5094] usb 5-1: config 6 interface 26 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 46.261121][ T5094] usb 5-1: config 6 interface 26 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 46.261144][ T5094] usb 5-1: config 6 interface 26 altsetting 0 endpoint 0x7 has invalid maxpacket 57511, setting to 1024 [ 46.265280][ T5094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.265294][ T5094] usb 5-1: Product: 놕᫫Ṏ媕冦ﶚ覬瓛䛜皦ì‘⊒쟆䴧㾠䧟ä’謚䩬↤禼ꇞ槦唲➙㹖훆凘មả䤽桱橋炬ïŸî”¢êº‘嬮⺡켋놈푳㭤ꡚ奓謑æ®éª†í„±å†ç·ºá·½é©Ÿá»µç•â€åŠ„盃â¨á’¢è‡£ï¹ˆç‹¹ç¿‚税 [ 46.265307][ T5094] usb 5-1: Manufacturer: ⩨롮澹꡵䙤ꕺ㡿é­ãˆ¦æ¸¤í—²ì‹ì‰¾ç§§çƒ‹ê¡µç«¯ä…ºã¼„ш岌ç¶ê«”ã¿æ§œêŽªè•ê »Å¡æ‡»ç€æ¡ªï©¥é·‹å¦’åœï¨§è¦ªæ™—㱭⿕瞛港ҿẄî¦è¨¸ë¬¥ã”´Æ‰æº€ïº¢ì—ì‚﫰掠㇑ꕎ臨줧较ë´â– ê®¤ [ 46.265319][ T5094] usb 5-1: SerialNumber: syz [ 46.393785][ T6179] overlayfs: unescaped trailing colons in lowerdir mount option. [ 46.496737][ T5094] cp210x 5-1:6.26: cp210x converter detected [ 46.497033][ T5094] cp210x 5-1:6.26: failed to get vendor val 0x370b size 1: -71 [ 46.497046][ T5094] cp210x 5-1:6.26: querying part number failed [ 46.500940][ T5094] usb 5-1: cp210x converter now attached to ttyUSB0 [ 46.511095][ T5094] usb 5-1: USB disconnect, device number 6 [ 46.523014][ T5094] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 46.523596][ T5094] cp210x 5-1:6.26: device disconnected [ 46.995150][ T6181] FAULT_INJECTION: forcing a failure. [ 46.995150][ T6181] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.995209][ T6181] CPU: 2 UID: 0 PID: 6181 Comm: syz.3.73 Not tainted syzkaller #0 PREEMPT(full) [ 46.995222][ T6181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.995229][ T6181] Call Trace: [ 46.995233][ T6181] [ 46.995237][ T6181] dump_stack_lvl+0x100/0x190 [ 46.995256][ T6181] should_fail_ex.cold+0x5/0xa [ 46.995272][ T6181] _copy_from_user+0x2e/0xd0 [ 46.995286][ T6181] restore_altstack+0x98/0x170 [ 46.995302][ T6181] ? __pfx_restore_altstack+0x10/0x10 [ 46.995319][ T6181] ? _raw_spin_unlock_irq+0x23/0x50 [ 46.995335][ T6181] ? lockdep_hardirqs_on+0x7d/0x110 [ 46.995347][ T6181] ? _raw_spin_unlock_irq+0x2e/0x50 [ 46.995364][ T6181] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 46.995383][ T6181] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 46.995403][ T6181] do_syscall_64+0x123/0x790 [ 46.995416][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.995427][ T6181] RIP: 0033:0x7f0b5ad3f4d9 [ 46.995436][ T6181] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 46.995446][ T6181] RSP: 002b:00007f0b5bb7e340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 46.995457][ T6181] RAX: ffffffffffffffda RBX: 00007f0b5b025fa0 RCX: 00007f0b5ad3f4d9 [ 46.995464][ T6181] RDX: 00007f0b5bb7e340 RSI: 00007f0b5bb7e470 RDI: 0000000000000021 [ 46.995471][ T6181] RBP: 00007f0b5ae3506b R08: 0000000000000000 R09: 0000000000000000 [ 46.995477][ T6181] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 46.995483][ T6181] R13: 00007f0b5b026038 R14: 00007f0b5b025fa0 R15: 00007fff55e331a8 [ 46.995496][ T6181] [ 47.047027][ T6183] ima: policy update failed [ 47.064948][ T43] kauditd_printk_skb: 69 callbacks suppressed [ 47.064962][ T43] audit: type=1400 audit(1790998334.855:339): avc: denied { unmount } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 47.117951][ T43] audit: type=1400 audit(1790998334.905:340): avc: denied { watch watch_reads } for pid=6187 comm="syz.0.76" path="/15" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 47.125671][ T6188] FAULT_INJECTION: forcing a failure. [ 47.125671][ T6188] name failslab, interval 1, probability 0, space 0, times 0 [ 47.125692][ T6188] CPU: 1 UID: 0 PID: 6188 Comm: syz.0.76 Not tainted syzkaller #0 PREEMPT(full) [ 47.125704][ T6188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.125712][ T6188] Call Trace: [ 47.125716][ T6188] [ 47.125720][ T6188] dump_stack_lvl+0x100/0x190 [ 47.125740][ T6188] should_fail_ex.cold+0x5/0xa [ 47.125755][ T6188] should_failslab+0xc2/0x120 [ 47.125772][ T6188] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 47.125788][ T6188] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 47.125802][ T6188] ? ima_queue_key+0xd0/0x4e0 [ 47.125818][ T6188] kstrdup+0x51/0xe0 [ 47.125831][ T6188] ima_queue_key+0xd0/0x4e0 [ 47.125845][ T6188] ima_post_key_create_or_update+0xa4/0x130 [ 47.125860][ T6188] security_key_post_create_or_update+0x1ed/0x200 [ 47.125875][ T6188] __key_create_or_update+0x799/0xe30 [ 47.125892][ T6188] ? __pfx___key_create_or_update+0x10/0x10 [ 47.125908][ T6188] ? lookup_user_key+0x3f3/0x1300 [ 47.125929][ T6188] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 47.125946][ T6188] key_create_or_update+0x42/0x60 [ 47.125963][ T6188] __do_sys_add_key+0x2e8/0x460 [ 47.125998][ T6188] ? __pfx___do_sys_add_key+0x10/0x10 [ 47.126022][ T6188] do_syscall_64+0x123/0x790 [ 47.126036][ T6188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.126048][ T6188] RIP: 0033:0x7fcf0919e159 [ 47.126059][ T6188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.126069][ T6188] RSP: 002b:00007fcf0a028028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 47.126080][ T6188] RAX: ffffffffffffffda RBX: 00007fcf09425fa0 RCX: 00007fcf0919e159 [ 47.126087][ T6188] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 47.126093][ T6188] RBP: 00007fcf0923506b R08: ffffffffffffffff R09: 0000000000000000 [ 47.126099][ T6188] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 47.126106][ T6188] R13: 00007fcf09426038 R14: 00007fcf09425fa0 R15: 00007ffe250388b8 [ 47.126120][ T6188] [ 47.126902][ T43] audit: type=1804 audit(1790998334.915:341): pid=6188 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_key cause=ENOMEM comm="syz.0.76" name="_tid" res=0 errno=-12 [ 47.221678][ T43] audit: type=1400 audit(1790998335.015:342): avc: denied { read } for pid=6189 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.254206][ T6194] netlink: 'syz.0.78': attribute type 21 has an invalid length. [ 47.254228][ T6194] __nla_validate_parse: 1 callbacks suppressed [ 47.254237][ T6194] netlink: 156 bytes leftover after parsing attributes in process `syz.0.78'. [ 47.262457][ T43] audit: type=1400 audit(1790998335.055:343): avc: denied { setopt } for pid=6195 comm="syz.3.79" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.262485][ T43] audit: type=1400 audit(1790998335.055:344): avc: denied { ioctl } for pid=6195 comm="syz.3.79" path="socket:[8109]" dev="sockfs" ino=8109 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.263580][ T6196] pim6reg: entered allmulticast mode [ 47.264400][ T6201] team0: entered allmulticast mode [ 47.264415][ T6201] team_slave_0: entered allmulticast mode [ 47.264427][ T6201] team_slave_1: entered allmulticast mode [ 47.264647][ T6202] pim6reg: left allmulticast mode [ 47.293918][ T6204] sctp: [Deprecated]: syz.0.80 (pid 6204) Use of int in max_burst socket option deprecated. [ 47.293918][ T6204] Use struct sctp_assoc_value instead [ 47.300835][ T6195] team0: left allmulticast mode [ 47.300849][ T6195] team_slave_0: left allmulticast mode [ 47.300864][ T6195] team_slave_1: left allmulticast mode [ 47.366039][ T43] audit: type=1400 audit(2000000000.090:345): avc: denied { mounton } for pid=6210 comm="syz.3.83" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 47.366147][ T6211] tmpfs: Unknown parameter 'h' [ 47.366916][ T6211] syzkaller0: entered promiscuous mode [ 47.366933][ T6211] syzkaller0: entered allmulticast mode [ 47.368951][ T43] audit: type=1400 audit(2000000000.090:346): avc: denied { read } for pid=6210 comm="syz.3.83" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.369553][ T6211] program syz.3.83 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.384391][ T43] audit: type=1400 audit(2000000000.110:347): avc: denied { create } for pid=6210 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.384736][ T43] audit: type=1400 audit(2000000000.110:348): avc: denied { write } for pid=6210 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.459177][ T5728] Bluetooth: hci0: command tx timeout [ 47.465934][ T6216] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 47.640894][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c0b4c00: rx timeout, send abort [ 47.642158][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802c0b4c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 47.713142][ T6220] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 47.713161][ T6220] device-mapper: ioctl: error adding target to table [ 47.764952][ T6225] netlink: 172 bytes leftover after parsing attributes in process `syz.2.88'. [ 47.764973][ T6225] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 47.859693][ T6232] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 47.993567][ T6241] random: crng reseeded on system resumption [ 48.001576][ T6241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95'. [ 48.001603][ T6241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95'. [ 48.004899][ T6241] geneve2: entered promiscuous mode [ 48.043974][ T6241] nvme nvme0: failed to connect socket: -111 [ 48.049961][ T6241] nvme_fabrics: unknown parameter or missing value 'Í¿((µb­0—cÊ¿¨©’;…º ¨Px Ì.y"§è­rÖؾÒÕrØÐÌ-ªv³¤znC„à®$ȸx"íÃ5|Krkdø¸× åá(.‘¤HfP3™M ' in ctrl creation request [ 48.067817][ T6249] netlink: 92 bytes leftover after parsing attributes in process `syz.2.93'. [ 48.082369][ T6252] FAULT_INJECTION: forcing a failure. [ 48.082369][ T6252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.082400][ T6252] CPU: 1 UID: 0 PID: 6252 Comm: syz.3.97 Not tainted syzkaller #0 PREEMPT(full) [ 48.082421][ T6252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.082432][ T6252] Call Trace: [ 48.082439][ T6252] [ 48.082446][ T6252] dump_stack_lvl+0x100/0x190 [ 48.082480][ T6252] should_fail_ex.cold+0x5/0xa [ 48.082503][ T6252] strncpy_from_user+0x3b/0x2d0 [ 48.082531][ T6252] do_getname+0x78/0x390 [ 48.082553][ T6252] __x64_sys_symlink+0x57/0xb0 [ 48.082580][ T6252] do_syscall_64+0x123/0x790 [ 48.082603][ T6252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.082622][ T6252] RIP: 0033:0x7f0b5ad9e159 [ 48.082637][ T6252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.082651][ T6252] RSP: 002b:00007f0b58ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 48.082665][ T6252] RAX: ffffffffffffffda RBX: 00007f0b5b026090 RCX: 00007f0b5ad9e159 [ 48.082675][ T6252] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000200000000940 [ 48.082686][ T6252] RBP: 00007f0b5ae3506b R08: 0000000000000000 R09: 0000000000000000 [ 48.082697][ T6252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.082708][ T6252] R13: 00007f0b5b026128 R14: 00007f0b5b026090 R15: 00007fff55e331a8 [ 48.082732][ T6252] [ 48.122161][ T6251] bond1: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 48.161048][ T6264] syz.0.99 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.359197][ T5812] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 48.373924][ T6272] tipc: MTU too low for tipc bearer [ 48.386038][ T6270] tmpfs: Group quota inode hardlimit too large. [ 48.451349][ T6278] e1000e 0000:00:02.0 eth1: removed PHC [ 48.522617][ T5812] usb 7-1: unable to get BOS descriptor or descriptor too short [ 48.522642][ T5812] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 48.523443][ T5812] usb 7-1: config 142 has an invalid descriptor of length 0, skipping remainder of the config [ 48.523455][ T5812] usb 7-1: config 142 has 0 interfaces, different from the descriptor's value: 1 [ 48.525729][ T5812] usb 7-1: string descriptor 0 read error: -22 [ 48.525784][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=224, SerialNumber=3 [ 48.564083][ T6278] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 48.736772][ T5812] usb 7-1: USB disconnect, device number 2 [ 48.796855][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 48.881301][ T6312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=6312 comm=syz.0.109 [ 49.014765][ T6316] 9p: Bad value for 'rfdno' [ 49.311827][ T6330] netlink: 'syz.2.113': attribute type 1 has an invalid length. [ 49.344869][ T6330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.169938][ T6377] FAULT_INJECTION: forcing a failure. [ 50.169938][ T6377] name failslab, interval 1, probability 0, space 0, times 0 [ 50.169984][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.2.120 Not tainted syzkaller #0 PREEMPT(full) [ 50.169998][ T6377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.170005][ T6377] Call Trace: [ 50.170009][ T6377] [ 50.170014][ T6377] dump_stack_lvl+0x100/0x190 [ 50.170057][ T6377] should_fail_ex.cold+0x5/0xa [ 50.170078][ T6377] ? lock_acquire+0x1d1/0x380 [ 50.170108][ T6377] should_failslab+0xc2/0x120 [ 50.170140][ T6377] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 50.170164][ T6377] ? zswap_store+0xc6d/0x2e70 [ 50.170186][ T6377] zswap_store+0xc6d/0x2e70 [ 50.170215][ T6377] ? __pfx_zswap_store+0x10/0x10 [ 50.170235][ T6377] ? lock_acquire+0x1d1/0x380 [ 50.170256][ T6377] ? do_raw_spin_lock+0x128/0x260 [ 50.170280][ T6377] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 50.170296][ T6377] ? find_held_lock+0x2b/0x80 [ 50.170311][ T6377] ? swap_writeout+0xdd8/0x1b20 [ 50.170322][ T6377] ? swap_writeout+0xdd8/0x1b20 [ 50.170335][ T6377] swap_writeout+0xde0/0x1b20 [ 50.170350][ T6377] shrink_folio_list+0x4ffb/0x5e40 [ 50.170371][ T6377] ? __pfx_shrink_folio_list+0x10/0x10 [ 50.170406][ T6377] ? __lock_acquire+0x5c0/0x1f40 [ 50.170418][ T6377] ? __css_rstat_updated+0x1ce/0x590 [ 50.170434][ T6377] ? __pfx___css_rstat_updated+0x10/0x10 [ 50.170449][ T6377] reclaim_folio_list+0xe9/0x5e0 [ 50.170466][ T6377] ? __pfx_reclaim_folio_list+0x10/0x10 [ 50.170481][ T6377] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 50.170501][ T6377] ? lru_gen_update_size+0x431/0xe20 [ 50.170518][ T6377] ? lru_gen_del_folio+0x382/0x5f0 [ 50.170533][ T6377] reclaim_pages+0x428/0x5e0 [ 50.170550][ T6377] ? __pfx_reclaim_pages+0x10/0x10 [ 50.170565][ T6377] ? find_held_lock+0x2b/0x80 [ 50.170581][ T6377] ? madvise_cold_or_pageout_pte_range+0xb8e/0x27b0 [ 50.170603][ T6377] madvise_cold_or_pageout_pte_range+0x15b5/0x27b0 [ 50.170625][ T6377] ? rcu_read_unlock+0x17/0x60 [ 50.170635][ T6377] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 50.170652][ T6377] ? __mod_zone_page_state+0xdb/0x190 [ 50.170672][ T6377] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 50.170689][ T6377] walk_pgd_range+0xbef/0x1e00 [ 50.170705][ T6377] ? find_held_lock+0x2b/0x80 [ 50.170726][ T6377] ? __pfx_walk_pgd_range+0x10/0x10 [ 50.170739][ T6377] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 50.170758][ T6377] __walk_page_range+0x171/0x850 [ 50.170777][ T6377] walk_page_range_vma_unsafe+0x209/0x8f0 [ 50.170791][ T6377] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 50.170807][ T6377] ? find_held_lock+0x2b/0x80 [ 50.170823][ T6377] ? mlock_drain_local+0x254/0x4e0 [ 50.170833][ T6377] ? mlock_drain_local+0x254/0x4e0 [ 50.170846][ T6377] walk_page_range_vma+0x63/0x90 [ 50.170860][ T6377] madvise_pageout+0x29e/0x5b0 [ 50.170875][ T6377] ? __lock_acquire+0x5c0/0x1f40 [ 50.170887][ T6377] ? __pfx_madvise_pageout+0x10/0x10 [ 50.170903][ T6377] ? lock_acquire+0x1d1/0x380 [ 50.170920][ T6377] ? find_held_lock+0x2b/0x80 [ 50.170935][ T6377] ? mt_find+0x728/0x9b0 [ 50.170956][ T6377] ? mt_find+0x728/0x9b0 [ 50.170970][ T6377] madvise_vma_behavior+0x48b/0x2350 [ 50.170990][ T6377] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 50.171011][ T6377] ? find_vma_prev+0xd8/0x150 [ 50.171030][ T6377] ? find_vma+0xbf/0x140 [ 50.171043][ T6377] ? __pfx_find_vma+0x10/0x10 [ 50.171061][ T6377] madvise_walk_vmas+0x30e/0xc50 [ 50.171080][ T6377] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 50.171106][ T6377] ? __pfx_futex_wake_mark+0x10/0x10 [ 50.171121][ T6377] ? lock_acquire+0x1d1/0x380 [ 50.171136][ T6377] madvise_do_behavior+0x1ea/0x510 [ 50.171155][ T6377] ? __pfx_madvise_do_behavior+0x10/0x10 [ 50.171173][ T6377] ? down_read+0x13b/0x4c0 [ 50.171193][ T6377] do_madvise+0x238/0x290 [ 50.171210][ T6377] ? __pfx_do_madvise+0x10/0x10 [ 50.171227][ T6377] ? do_futex+0x190/0x440 [ 50.171251][ T6377] ? selinux_file_ioctl+0xb6/0x290 [ 50.171269][ T6377] __x64_sys_madvise+0xa9/0x110 [ 50.171285][ T6377] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.171296][ T6377] do_syscall_64+0x123/0x790 [ 50.171309][ T6377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.171320][ T6377] RIP: 0033:0x7f68c999e159 [ 50.171329][ T6377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.171339][ T6377] RSP: 002b:00007f68ca7e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 50.171351][ T6377] RAX: ffffffffffffffda RBX: 00007f68c9c25fa0 RCX: 00007f68c999e159 [ 50.171357][ T6377] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 50.171364][ T6377] RBP: 00007f68c9a3506b R08: 0000000000000000 R09: 0000000000000000 [ 50.171370][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.171376][ T6377] R13: 00007f68c9c26038 R14: 00007f68c9c25fa0 R15: 00007ffd3ab93f18 [ 50.171390][ T6377] [ 50.223144][ T6377] 0: reclassify loop, rule prio 0, protocol 03 [ 50.657692][ T6382] netlink: 'syz.3.122': attribute type 8 has an invalid length. [ 50.806940][ T6388] ip_tables: iptables: counters copy to user failed while replacing table [ 50.854449][ T6390] syz.3.125 uses obsolete (PF_INET,SOCK_PACKET) [ 50.991736][ T6392] ======================================================= [ 50.991736][ T6392] WARNING: The mand mount option has been deprecated and [ 50.991736][ T6392] and is ignored by this kernel. Remove the mand [ 50.991736][ T6392] option from the mount to silence this warning. [ 50.991736][ T6392] ======================================================= [ 51.211241][ T6410] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=102 sclass=netlink_tcpdiag_socket pid=6410 comm=syz.2.132 [ 51.479895][ T6423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.135'. [ 51.523713][ T6419] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 51.884403][ T6445] sd 0:0:0:0: PR command failed: 1026 [ 51.884428][ T6445] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 51.884450][ T6445] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 51.884482][ T6446] sd 0:0:0:0: PR command failed: 1026 [ 51.884508][ T6446] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 51.884525][ T6446] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 51.884764][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 51.884776][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 51.888572][ T6445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6445 comm=syz.2.141 [ 51.888671][ T6446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6446 comm=syz.2.141 [ 51.965972][ T6448] FAULT_INJECTION: forcing a failure. [ 51.965972][ T6448] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 51.966006][ T6448] CPU: 1 UID: 0 PID: 6448 Comm: syz.2.142 Not tainted syzkaller #0 PREEMPT(full) [ 51.966027][ T6448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.966038][ T6448] Call Trace: [ 51.966045][ T6448] [ 51.966052][ T6448] dump_stack_lvl+0x100/0x190 [ 51.966083][ T6448] should_fail_ex.cold+0x5/0xa [ 51.966114][ T6448] ? prepare_alloc_pages+0x16d/0x5b0 [ 51.966141][ T6448] should_fail_alloc_page+0xeb/0x140 [ 51.966168][ T6448] prepare_alloc_pages+0x1f0/0x5b0 [ 51.966199][ T6448] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 51.966221][ T6448] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 51.966270][ T6448] ? rcu_is_watching+0x13/0xc0 [ 51.966296][ T6448] ? trace_hrtimer_start+0x77/0x220 [ 51.966324][ T6448] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 51.966355][ T6448] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 51.966375][ T6448] ? find_held_lock+0x2b/0x80 [ 51.966400][ T6448] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 51.966419][ T6448] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 51.966442][ T6448] ? rcu_is_watching+0x13/0xc0 [ 51.966466][ T6448] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 51.966486][ T6448] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.966505][ T6448] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 51.966531][ T6448] ? __schedule+0x126b/0x6920 [ 51.966561][ T6448] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 51.966584][ T6448] ? policy_nodemask+0xed/0x4f0 [ 51.966610][ T6448] alloc_pages_mpol+0x201/0x550 [ 51.966636][ T6448] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 51.966662][ T6448] ? avc_has_perm_noaudit+0x145/0x470 [ 51.966693][ T6448] alloc_pages_noprof+0x1a/0x160 [ 51.966710][ T6448] anon_pipe_prefill_and_lock+0x102/0x580 [ 51.966738][ T6448] ? __pfx_anon_pipe_prefill_and_lock+0x10/0x10 [ 51.966767][ T6448] ? inode_has_perm.isra.0+0x14a/0x1a0 [ 51.966793][ T6448] anon_pipe_write+0x164/0x1b50 [ 51.966824][ T6448] ? __pfx_anon_pipe_write+0x10/0x10 [ 51.966846][ T6448] ? selinux_file_permission+0x8f/0x6d0 [ 51.966872][ T6448] ? bpf_lsm_file_permission+0x9/0x10 [ 51.966894][ T6448] ? security_file_permission+0x76/0x210 [ 51.966918][ T6448] ? rw_verify_area+0xce/0x6d0 [ 51.966937][ T6448] vfs_write+0x6af/0x1050 [ 51.966958][ T6448] ? __pfx_anon_pipe_write+0x10/0x10 [ 51.966983][ T6448] ? __pfx_vfs_write+0x10/0x10 [ 51.967000][ T6448] ? find_held_lock+0x2b/0x80 [ 51.967041][ T6448] ksys_write+0x1f8/0x250 [ 51.967059][ T6448] ? __pfx_ksys_write+0x10/0x10 [ 51.967085][ T6448] do_syscall_64+0x123/0x790 [ 51.967112][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.967131][ T6448] RIP: 0033:0x7f68c999e159 [ 51.967148][ T6448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.967165][ T6448] RSP: 002b:00007f68ca7e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.967185][ T6448] RAX: ffffffffffffffda RBX: 00007f68c9c25fa0 RCX: 00007f68c999e159 [ 51.967196][ T6448] RDX: 00000000ffffff0c RSI: 0000200000000000 RDI: 0000000000000005 [ 51.967208][ T6448] RBP: 00007f68c9a3506b R08: 0000000000000000 R09: 0000000000000000 [ 51.967219][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.967231][ T6448] R13: 00007f68c9c26038 R14: 00007f68c9c25fa0 R15: 00007ffd3ab93f18 [ 51.967255][ T6448] [ 52.162671][ T43] kauditd_printk_skb: 103 callbacks suppressed [ 52.162688][ T43] audit: type=1400 audit(2000000004.889:452): avc: denied { create } for pid=6451 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 52.401860][ T43] audit: type=1400 audit(2000000005.129:453): avc: denied { create } for pid=6456 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.423106][ T6459] netlink: 'syz.3.146': attribute type 27 has an invalid length. [ 52.442289][ T6459] bond0: (slave bond_slave_1): Releasing backup interface [ 52.548338][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 52.903336][ T6486] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6486 comm=syz.3.150 [ 52.904477][ T43] audit: type=1400 audit(2000000005.629:454): avc: denied { name_bind } for pid=6485 comm="syz.3.150" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 52.905848][ T43] audit: type=1400 audit(2000000005.629:455): avc: denied { listen } for pid=6485 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.907868][ T6487] netlink: 'syz.3.150': attribute type 10 has an invalid length. [ 52.907883][ T6487] netlink: 40 bytes leftover after parsing attributes in process `syz.3.150'. [ 52.919871][ T6487] dummy0: entered promiscuous mode [ 53.002034][ T6501] FAULT_INJECTION: forcing a failure. [ 53.002034][ T6501] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 53.002069][ T6501] CPU: 3 UID: 0 PID: 6501 Comm: syz.3.151 Not tainted syzkaller #0 PREEMPT(full) [ 53.002092][ T6501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.002105][ T6501] Call Trace: [ 53.002112][ T6501] [ 53.002122][ T6501] dump_stack_lvl+0x100/0x190 [ 53.002158][ T6501] should_fail_ex.cold+0x5/0xa [ 53.002180][ T6501] ? prepare_alloc_pages+0x16d/0x5b0 [ 53.002210][ T6501] should_fail_alloc_page+0xeb/0x140 [ 53.002238][ T6501] prepare_alloc_pages+0x1f0/0x5b0 [ 53.002265][ T6501] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 53.002288][ T6501] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 53.002317][ T6501] ? __lock_acquire+0x5c0/0x1f40 [ 53.002338][ T6501] ? __lock_acquire+0x5c0/0x1f40 [ 53.002363][ T6501] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 53.002389][ T6501] ? lock_acquire+0x1d1/0x380 [ 53.002407][ T6501] ? finish_task_switch.isra.0+0x149/0x10d0 [ 53.002430][ T6501] ? find_held_lock+0x2b/0x80 [ 53.002457][ T6501] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 53.002477][ T6501] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 53.002497][ T6501] ? rcu_is_watching+0x13/0xc0 [ 53.002531][ T6501] ? trace_sched_exit_tp+0x120/0x160 [ 53.002563][ T6501] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 53.002589][ T6501] ? policy_nodemask+0xed/0x4f0 [ 53.002621][ T6501] alloc_pages_mpol+0x201/0x550 [ 53.002652][ T6501] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 53.002682][ T6501] ? avc_has_perm_noaudit+0x145/0x470 [ 53.002716][ T6501] alloc_pages_noprof+0x1a/0x160 [ 53.002740][ T6501] anon_pipe_prefill_and_lock+0x102/0x580 [ 53.002767][ T6501] ? futex_unqueue+0x13d/0x2c0 [ 53.002810][ T6501] ? __pfx_anon_pipe_prefill_and_lock+0x10/0x10 [ 53.002847][ T6501] ? inode_has_perm.isra.0+0x14a/0x1a0 [ 53.002879][ T6501] anon_pipe_write+0x164/0x1b50 [ 53.002917][ T6501] ? __pfx_anon_pipe_write+0x10/0x10 [ 53.002944][ T6501] ? selinux_file_permission+0x8f/0x6d0 [ 53.002970][ T6501] ? bpf_lsm_file_permission+0x9/0x10 [ 53.002998][ T6501] ? security_file_permission+0x76/0x210 [ 53.003025][ T6501] ? rw_verify_area+0xce/0x6d0 [ 53.003045][ T6501] vfs_write+0x6af/0x1050 [ 53.003066][ T6501] ? __pfx_anon_pipe_write+0x10/0x10 [ 53.003092][ T6501] ? __pfx_vfs_write+0x10/0x10 [ 53.003107][ T6501] ? find_held_lock+0x2b/0x80 [ 53.003147][ T6501] ksys_write+0x1f8/0x250 [ 53.003165][ T6501] ? __pfx_ksys_write+0x10/0x10 [ 53.003190][ T6501] do_syscall_64+0x123/0x790 [ 53.003213][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.003232][ T6501] RIP: 0033:0x7f0b5ad9e159 [ 53.003249][ T6501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.003269][ T6501] RSP: 002b:00007f0b5bb7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.003296][ T6501] RAX: ffffffffffffffda RBX: 00007f0b5b025fa0 RCX: 00007f0b5ad9e159 [ 53.003310][ T6501] RDX: 00000000ffffff0c RSI: 0000200000000000 RDI: 0000000000000005 [ 53.003325][ T6501] RBP: 00007f0b5ae3506b R08: 0000000000000000 R09: 0000000000000000 [ 53.003337][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.003347][ T6501] R13: 00007f0b5b026038 R14: 00007f0b5b025fa0 R15: 00007fff55e331a8 [ 53.003373][ T6501] [ 53.273673][ T6510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.153'. [ 53.391269][ T5728] Bluetooth: hci3: command 0x0401 tx timeout [ 54.137746][ T6529] [U]  [ 54.629145][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 54.769255][ T25] usb 5-1: device descriptor read/64, error -71 [ 55.019182][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 55.149229][ T25] usb 5-1: device descriptor read/64, error -71 [ 55.271291][ T25] usb usb5-port1: attempt power cycle [ 55.619589][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 55.639565][ T25] usb 5-1: device descriptor read/8, error -71 [ 55.909176][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 55.929625][ T25] usb 5-1: device descriptor read/8, error -71 [ 56.041692][ T25] usb usb5-port1: unable to enumerate USB device [ 57.841820][ T6547] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 58.061408][ T6550] netlink: 36 bytes leftover after parsing attributes in process `syz.0.163'. [ 58.085024][ T6553] netlink: 'syz.0.164': attribute type 1 has an invalid length. [ 58.092446][ T6554] netlink: 'syz.0.164': attribute type 1 has an invalid length. [ 58.391921][ T6558] syzkaller1: entered promiscuous mode [ 58.391941][ T6558] syzkaller1: entered allmulticast mode [ 58.393612][ T6558] autofs4:pid:6558:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 58.393634][ T6558] autofs4:pid:6558:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 58.395336][ T43] audit: type=1400 audit(2000000011.119:456): avc: denied { append } for pid=6557 comm="syz.0.165" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 58.398707][ T43] audit: type=1400 audit(2000000011.119:457): avc: denied { execute } for pid=6562 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 58.398838][ T6558] autofs4:pid:6558:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 58.398859][ T6558] autofs4:pid:6558:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 58.400454][ T43] audit: type=1400 audit(2000000011.129:458): avc: denied { execute_no_trans } for pid=6562 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 58.498374][ T5082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.501479][ T5082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.502052][ T5082] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.502642][ T5082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.502969][ T5082] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.615983][ T43] audit: type=1400 audit(2000000011.339:459): avc: denied { write } for pid=6569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.674408][ T6577] kAFS: unable to lookup cell 'syz0' [ 58.706683][ T43] audit: type=1400 audit(2000000011.429:460): avc: denied { write } for pid=6580 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.757339][ T6584] FAULT_INJECTION: forcing a failure. [ 58.757339][ T6584] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 58.757370][ T6584] CPU: 3 UID: 0 PID: 6584 Comm: syz.0.168 Not tainted syzkaller #0 PREEMPT(full) [ 58.757389][ T6584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.757398][ T6584] Call Trace: [ 58.757405][ T6584] [ 58.757412][ T6584] dump_stack_lvl+0x100/0x190 [ 58.757444][ T6584] should_fail_ex.cold+0x5/0xa [ 58.757466][ T6584] ? prepare_alloc_pages+0x16d/0x5b0 [ 58.757494][ T6584] should_fail_alloc_page+0xeb/0x140 [ 58.757521][ T6584] prepare_alloc_pages+0x1f0/0x5b0 [ 58.757555][ T6584] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 58.757577][ T6584] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 58.757603][ T6584] ? do_raw_spin_unlock+0x145/0x1e0 [ 58.757628][ T6584] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 58.757659][ T6584] ? rcu_is_watching+0x13/0xc0 [ 58.757686][ T6584] ? trace_hrtimer_start+0x77/0x220 [ 58.757716][ T6584] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 58.757741][ T6584] ? find_held_lock+0x2b/0x80 [ 58.757767][ T6584] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 58.757791][ T6584] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 58.757814][ T6584] ? rcu_is_watching+0x13/0xc0 [ 58.757848][ T6584] ? trace_sched_exit_tp+0x120/0x160 [ 58.757876][ T6584] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.757902][ T6584] ? policy_nodemask+0xed/0x4f0 [ 58.757961][ T6584] alloc_pages_mpol+0x201/0x550 [ 58.757992][ T6584] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 58.758023][ T6584] ? avc_has_perm_noaudit+0x145/0x470 [ 58.758055][ T6584] alloc_pages_noprof+0x1a/0x160 [ 58.758109][ T6584] anon_pipe_prefill_and_lock+0x102/0x580 [ 58.758139][ T6584] ? futex_unqueue+0x13d/0x2c0 [ 58.758167][ T6584] ? __pfx_anon_pipe_prefill_and_lock+0x10/0x10 [ 58.758199][ T6584] ? inode_has_perm.isra.0+0x14a/0x1a0 [ 58.758229][ T6584] anon_pipe_write+0x164/0x1b50 [ 58.758265][ T6584] ? __pfx_anon_pipe_write+0x10/0x10 [ 58.758290][ T6584] ? selinux_file_permission+0x8f/0x6d0 [ 58.758318][ T6584] ? bpf_lsm_file_permission+0x9/0x10 [ 58.758345][ T6584] ? security_file_permission+0x76/0x210 [ 58.758372][ T6584] ? rw_verify_area+0xce/0x6d0 [ 58.758394][ T6584] vfs_write+0x6af/0x1050 [ 58.758417][ T6584] ? __pfx_anon_pipe_write+0x10/0x10 [ 58.758446][ T6584] ? __pfx_vfs_write+0x10/0x10 [ 58.758464][ T6584] ? find_held_lock+0x2b/0x80 [ 58.758516][ T6584] ksys_write+0x1f8/0x250 [ 58.758547][ T6584] ? __pfx_ksys_write+0x10/0x10 [ 58.758580][ T6584] do_syscall_64+0x123/0x790 [ 58.758606][ T6584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.758629][ T6584] RIP: 0033:0x7fcf0919e159 [ 58.758647][ T6584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.758664][ T6584] RSP: 002b:00007fcf0a028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.758685][ T6584] RAX: ffffffffffffffda RBX: 00007fcf09425fa0 RCX: 00007fcf0919e159 [ 58.758698][ T6584] RDX: 00000000ffffff0c RSI: 0000200000000000 RDI: 0000000000000005 [ 58.758710][ T6584] RBP: 00007fcf0923506b R08: 0000000000000000 R09: 0000000000000000 [ 58.758722][ T6584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.758735][ T6584] R13: 00007fcf09426038 R14: 00007fcf09425fa0 R15: 00007ffe250388b8 [ 58.758763][ T6584] [ 58.836641][ T43] audit: type=1400 audit(2000000011.559:461): avc: denied { write } for pid=6585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.902290][ T43] audit: type=1400 audit(2000000011.629:462): avc: denied { write } for pid=6589 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.992790][ T43] audit: type=1400 audit(2000000011.719:463): avc: denied { write } for pid=6591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.998383][ T5794] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.043360][ T43] audit: type=1400 audit(2000000011.769:464): avc: denied { write } for pid=6594 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.101719][ T43] audit: type=1400 audit(2000000011.829:465): avc: denied { write } for pid=6596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.156934][ T5794] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.286233][ T5794] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.402445][ T5794] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.636751][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.636794][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.636850][ T6563] bridge_slave_0: entered allmulticast mode [ 59.643777][ T6563] bridge_slave_0: entered promiscuous mode [ 59.645406][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.645448][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.645541][ T6563] bridge_slave_1: entered allmulticast mode [ 59.649132][ T6563] bridge_slave_1: entered promiscuous mode [ 59.806561][ T6563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.820356][ T5794] bridge_slave_1: left allmulticast mode [ 59.820400][ T5794] bridge_slave_1: left promiscuous mode [ 59.822638][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.843494][ T5794] bridge_slave_0: left allmulticast mode [ 59.843523][ T5794] bridge_slave_0: left promiscuous mode [ 59.844540][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.265106][ T5794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.268264][ T5794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.290469][ T5794] bond0 (unregistering): Released all slaves [ 60.334499][ T6563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.476628][ T6563] team0: Port device team_slave_0 added [ 60.477874][ T6563] team0: Port device team_slave_1 added [ 60.589714][ T5082] Bluetooth: hci4: command tx timeout [ 60.595456][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.595472][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.595492][ T6563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.601405][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.601420][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.601440][ T6563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.753607][ T5438] 8021q: adding VLAN 0 to HW filter on device eth1 [ 60.783741][ T6563] hsr_slave_0: entered promiscuous mode [ 60.784685][ T6563] hsr_slave_1: entered promiscuous mode [ 60.785356][ T6563] debugfs: 'hsr0' already exists in 'hsr' [ 60.785373][ T6563] Cannot create hsr debugfs directory [ 60.882573][ T5794] hsr_slave_0: left promiscuous mode [ 60.883396][ T5794] hsr_slave_1: left promiscuous mode [ 60.884215][ T5794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.884240][ T5794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.886330][ T5794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.886347][ T5794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.907756][ T5794] veth1_macvtap: left promiscuous mode [ 60.907805][ T5794] veth0_macvtap: left promiscuous mode [ 60.907889][ T5794] veth1_vlan: left promiscuous mode [ 60.907959][ T5794] veth0_vlan: left promiscuous mode [ 61.526084][ T5794] team0 (unregistering): Port device team_slave_1 removed [ 61.587856][ T5794] team0 (unregistering): Port device team_slave_0 removed [ 62.422565][ T5438] 8021q: adding VLAN 0 to HW filter on device eth2 [ 62.595857][ T6563] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.612374][ T6563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.613252][ T6563] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.627868][ T6563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.628900][ T6563] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.641872][ T6563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.642794][ T6563] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.646598][ T6563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.660128][ T5082] Bluetooth: hci4: command tx timeout [ 62.681976][ T5438] 8021q: adding VLAN 0 to HW filter on device eth3 [ 62.758042][ T6563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.770569][ T6563] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.777548][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.777727][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.788112][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.788163][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.853143][ T5438] 8021q: adding VLAN 0 to HW filter on device eth4 [ 63.174155][ T6563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.327236][ T6563] veth0_vlan: entered promiscuous mode [ 63.333628][ T6563] veth1_vlan: entered promiscuous mode [ 63.346320][ T6563] veth0_macvtap: entered promiscuous mode [ 63.353658][ T6563] veth1_macvtap: entered promiscuous mode [ 63.367122][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.376718][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.431263][ T5794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.431291][ T5794] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.431312][ T5794] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.431329][ T5794] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.517753][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.517773][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.567805][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.567828][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.582633][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 63.582651][ T43] audit: type=1400 audit(2000000016.309:475): avc: denied { mounton } for pid=6563 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 63.632639][ T6662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=6662 comm=syz.4.166 [ 63.633471][ T6662] openvswitch: netlink: Geneve opt len 30 is not a multiple of 4. [ 63.634098][ T6662] netlink: 'syz.4.166': attribute type 1 has an invalid length. [ 64.049104][ T43] audit: type=1400 audit(2000000016.769:476): avc: denied { create } for pid=6669 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.049873][ T43] audit: type=1400 audit(2000000016.779:477): avc: denied { write } for pid=6669 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.050040][ T6670] netlink: 88 bytes leftover after parsing attributes in process `syz.4.171'. [ 64.089772][ T43] audit: type=1400 audit(2000000016.819:478): avc: denied { bind } for pid=6669 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.090139][ T43] audit: type=1400 audit(2000000016.819:479): avc: denied { setopt } for pid=6669 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.652840][ T6676] FAULT_INJECTION: forcing a failure. [ 64.652840][ T6676] name failslab, interval 1, probability 0, space 0, times 0 [ 64.652864][ T6676] CPU: 3 UID: 0 PID: 6676 Comm: syz.4.173 Not tainted syzkaller #0 PREEMPT(full) [ 64.652878][ T6676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.652885][ T6676] Call Trace: [ 64.652890][ T6676] [ 64.652895][ T6676] dump_stack_lvl+0x100/0x190 [ 64.652917][ T6676] should_fail_ex.cold+0x5/0xa [ 64.652933][ T6676] should_failslab+0xc2/0x120 [ 64.652950][ T6676] __kmalloc_noprof+0xfc/0x840 [ 64.652964][ T6676] ? _raw_spin_unlock+0x28/0x50 [ 64.652981][ T6676] ? unregister_netdevice_many_notify+0x903/0x2150 [ 64.653013][ T6676] unregister_netdevice_many_notify+0x903/0x2150 [ 64.653035][ T6676] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 64.653055][ T6676] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 64.653073][ T6676] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 64.653090][ T6676] ? linkwatch_fire_event+0x211/0x270 [ 64.653104][ T6676] ? netif_carrier_off+0xa8/0xc0 [ 64.653129][ T6676] unregister_netdevice_queue+0x30b/0x3c0 [ 64.653147][ T6676] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 64.653164][ T6676] ? linkwatch_schedule_work+0x16f/0x1a0 [ 64.653177][ T6676] ? linkwatch_fire_event+0x74/0x270 [ 64.653192][ T6676] __tun_detach+0x1386/0x1850 [ 64.653206][ T6676] ? locks_remove_file+0xd1/0x600 [ 64.653222][ T6676] ? __pfx_tun_chr_close+0x10/0x10 [ 64.653236][ T6676] tun_chr_close+0xc2/0x220 [ 64.653250][ T6676] ? __pfx_tun_chr_close+0x10/0x10 [ 64.653263][ T6676] __fput+0x3ff/0xb50 [ 64.653283][ T6676] fput_close_sync+0x118/0x250 [ 64.653300][ T6676] ? __pfx_fput_close_sync+0x10/0x10 [ 64.653322][ T6676] __x64_sys_close+0x8b/0x120 [ 64.653332][ T6676] do_syscall_64+0x123/0x790 [ 64.653346][ T6676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.653358][ T6676] RIP: 0033:0x7fa27f79e159 [ 64.653369][ T6676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.653379][ T6676] RSP: 002b:00007fa2806c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 64.653391][ T6676] RAX: ffffffffffffffda RBX: 00007fa27fa25fa0 RCX: 00007fa27f79e159 [ 64.653399][ T6676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 64.653405][ T6676] RBP: 00007fa27f83506b R08: 0000000000000000 R09: 0000000000000000 [ 64.653428][ T6676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.653434][ T6676] R13: 00007fa27fa26038 R14: 00007fa27fa25fa0 R15: 00007ffdf4113938 [ 64.653456][ T6676] [ 64.749157][ T5082] Bluetooth: hci4: command tx timeout [ 64.834757][ T6682] bridge0: port 3(syz_tun) entered blocking state [ 64.845857][ T6682] bridge0: port 3(syz_tun) entered disabled state [ 64.846174][ T6682] syz_tun: entered allmulticast mode [ 64.864402][ T6682] syz_tun: entered promiscuous mode [ 64.865023][ T6682] bridge0: port 3(syz_tun) entered blocking state [ 64.865108][ T6682] bridge0: port 3(syz_tun) entered forwarding state [ 64.888141][ T6682] pim6reg: entered allmulticast mode [ 64.889538][ T6682] team0: entered allmulticast mode [ 64.889555][ T6682] team_slave_0: entered allmulticast mode [ 64.889598][ T6682] team_slave_1: entered allmulticast mode [ 64.889999][ T6682] pim6reg: left allmulticast mode [ 64.943777][ T43] audit: type=1400 audit(2000000017.669:480): avc: denied { listen } for pid=6681 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.199209][ T5826] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 65.329126][ T5826] usb 9-1: device descriptor read/64, error -71 [ 65.569270][ T5826] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 65.699417][ T5826] usb 9-1: device descriptor read/64, error -71 [ 65.809467][ T5826] usb usb9-port1: attempt power cycle [ 66.149132][ T5826] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 66.169772][ T5826] usb 9-1: device descriptor read/8, error -71 [ 66.419290][ T5826] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 66.439765][ T5826] usb 9-1: device descriptor read/8, error -71 [ 66.562422][ T5826] usb usb9-port1: unable to enumerate USB device [ 66.819351][ T5082] Bluetooth: hci4: command tx timeout [ 67.852045][ T6681] team0: left allmulticast mode [ 67.852065][ T6681] team_slave_0: left allmulticast mode [ 67.852081][ T6681] team_slave_1: left allmulticast mode [ 68.005626][ T5728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.008994][ T5728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.009609][ T5728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.011056][ T5728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.011449][ T5728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.106282][ T43] audit: type=1400 audit(2000000020.829:481): avc: denied { write } for pid=6685 comm="syz.4.176" path="socket:[15585]" dev="sockfs" ino=15585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.355169][ T5082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.364121][ T5082] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.365702][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.371649][ T5082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.378182][ T5082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.381689][ T5082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.409234][ T5811] BUG: unable to handle page fault for address: fffff52000a2bb8c [ 68.411876][ T5811] #PF: supervisor read access in kernel mode [ 68.414065][ T5811] #PF: error_code(0x0000) - not-present page [ 68.417496][ T5811] PGD 17fff5067 P4D 17fff5067 PUD 1d6ac067 PMD 28853067 PTE 0 [ 68.419859][ T5811] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 68.421663][ T5811] CPU: 1 UID: 0 PID: 5811 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 68.424911][ T5811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.428379][ T5811] Workqueue: events_power_efficient fb_flashcursor [ 68.431008][ T5811] RIP: 0010:sys_imageblit+0x16c1/0x1d60 [ 68.433189][ T5811] Code: 7c cd 00 48 89 fe 48 c1 ee 03 80 3c 1e 00 0f 85 aa 05 00 00 4d 63 f6 48 8b 8c cc 88 00 00 00 4f 8d 34 f7 4c 89 f6 48 c1 ee 03 <80> 3c 1e 00 0f 85 1b 03 00 00 49 89 0e 41 89 c6 8d 4d fd 41 c1 ee [ 68.439650][ T5811] RSP: 0018:ffffc900031bf880 EFLAGS: 00010a02 [ 68.441846][ T5811] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0001000000010000 [ 68.444830][ T5811] RDX: 0000000000000000 RSI: 1ffff92000a2bb8c RDI: ffffc900031bf908 [ 68.447402][ T5811] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000003 [ 68.449968][ T5811] R10: 0000000000000004 R11: 0000000000000001 R12: ffff8880241f1e01 [ 68.452425][ T5811] R13: ffffc900031bf908 R14: ffffc9000515dc60 R15: ffffc9000515dc60 [ 68.454975][ T5811] FS: 0000000000000000(0000) GS:ffff8880d5c4f000(0000) knlGS:0000000000000000 [ 68.457927][ T5811] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.460834][ T5811] CR2: fffff52000a2bb8c CR3: 0000000053ebf000 CR4: 0000000000352ef0 [ 68.463976][ T5811] Call Trace: [ 68.465173][ T5811] [ 68.466219][ T5811] ? __pfx_sys_imageblit+0x10/0x10 [ 68.467992][ T5811] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 68.469978][ T5811] soft_cursor+0x524/0xa10 [ 68.471555][ T5811] bit_cursor+0xd3a/0x14e0 [ 68.473481][ T5811] ? __pfx_bit_cursor+0x10/0x10 [ 68.475565][ T5811] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.478330][ T5811] ? get_color+0x1da/0x450 [ 68.480659][ T5811] ? __pfx_bit_cursor+0x10/0x10 [ 68.483244][ T5811] fb_flashcursor+0x338/0x430 [ 68.485790][ T5811] process_one_work+0xac7/0x1b10 [ 68.487946][ T5811] ? __pfx_process_one_work+0x10/0x10 [ 68.490465][ T5811] ? lock_acquire+0x1d1/0x380 [ 68.492619][ T5811] ? __pfx_fb_flashcursor+0x10/0x10 [ 68.494871][ T5811] worker_thread+0x5ef/0xe50 [ 68.496874][ T5811] ? __pfx_worker_thread+0x10/0x10 [ 68.499072][ T5811] ? kthread+0x13a/0x450 [ 68.501020][ T5811] ? __pfx_worker_thread+0x10/0x10 [ 68.503329][ T5811] kthread+0x373/0x450 [ 68.505099][ T5811] ? __pfx_kthread+0x10/0x10 [ 68.507121][ T5811] ret_from_fork+0x730/0xd60 [ 68.509386][ T5811] ? __pfx_ret_from_fork+0x10/0x10 [ 68.512109][ T5811] ? __switch_to+0x800/0x10f0 [ 68.514468][ T5811] ? __pfx_kthread+0x10/0x10 [ 68.516651][ T5811] ret_from_fork_asm+0x1a/0x30 [ 68.518756][ T5811] [ 68.520085][ T5811] Modules linked in: [ 68.521901][ T5811] CR2: fffff52000a2bb8c [ 68.523697][ T5811] ---[ end trace 0000000000000000 ]--- [ 68.526486][ T5811] RIP: 0010:sys_imageblit+0x16c1/0x1d60 [ 68.526525][ T5811] Code: 7c cd 00 48 89 fe 48 c1 ee 03 80 3c 1e 00 0f 85 aa 05 00 00 4d 63 f6 48 8b 8c cc 88 00 00 00 4f 8d 34 f7 4c 89 f6 48 c1 ee 03 <80> 3c 1e 00 0f 85 1b 03 00 00 49 89 0e 41 89 c6 8d 4d fd 41 c1 ee [ 68.526550][ T5811] RSP: 0018:ffffc900031bf880 EFLAGS: 00010a02 [ 68.526569][ T5811] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0001000000010000 [ 68.526584][ T5811] RDX: 0000000000000000 RSI: 1ffff92000a2bb8c RDI: ffffc900031bf908 [ 68.526597][ T5811] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000003 [ 68.526610][ T5811] R10: 0000000000000004 R11: 0000000000000001 R12: ffff8880241f1e01 [ 68.526623][ T5811] R13: ffffc900031bf908 R14: ffffc9000515dc60 R15: ffffc9000515dc60 [ 68.526638][ T5811] FS: 0000000000000000(0000) GS:ffff8880d5c4f000(0000) knlGS:0000000000000000 [ 68.526678][ T5811] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.526695][ T5811] CR2: fffff52000a2bb8c CR3: 0000000053ebf000 CR4: 0000000000352ef0 [ 68.526711][ T5811] Kernel panic - not syncing: Fatal exception [ 68.570438][ T5811] Kernel Offset: disabled [ 68.572329][ T5811] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:32:36 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff88802b238000 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff825fadac RDI=ffff88802b2384c4 RBP=ffff88801ea80dc0 RSP=ffffc90003fcf570 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=ffff888030fc3800 R12=ffffc90003fcf668 R13=0000000000000cc0 R14=ffff888025693900 R15=0000000000000000 RIP=ffffffff81eff439 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557393c500 ffffffff 00c00000 GS =0000 ffff8880d5b4f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc9db95100 CR3=0000000051e49000 CR4=00352ef0 DR0=0000000000000000 DR1=000000000000aee9 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656e72656b2f3065 6c69662f32362f2e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6469702f62616c73 2f6c656e72656b2f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe25038da6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe25038da6 00007ffe25038dac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcf0923564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcf0923568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcf092357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcf09235680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b17ff5 RDI=ffffffff9bc75f60 RBP=ffffffff9bc75f20 RSP=ffffc900031bef98 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=000000000000005d R14=0000000000000005 R15=ffffc900031bf2b0 RIP=ffffffff85b1801f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c4f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffff52000a2bb8c CR3=0000000053ebf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000080000000 Opmask02=00000000ffff7fdf Opmask03=0000000022080800 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556351171f10 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556351169150 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55321f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 17005c1217005c18 101c1f115c434943 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 494349435c434943 4943071614011207 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3130323a33696368 2f336963682f6874 6f6f7465756c622f 6c6175747269762f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e33034ef543b0644 0000556607233247 00000000000000d1 0000000000000034 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c3032785c 3032785c3032785c 3032785c3032785c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c3032785c 3032785c3032785c 3032785c3032785c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c3032785c 3032785c3032785c 3032785c3032785c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032785c3032785c 3032785c4b534944 445241483032785c 554d45513d434e45 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=8000000000000000 RBX=ffff888036e63200 RCX=ffffffff8bca71e2 RDX=ffff88802b230000 RSI=ffffffff8bca6f24 RDI=ffff88802b230000 RBP=0000000000000000 RSP=ffffc90005fd6de0 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000001 R11=0000000000000000 R12=ffff888033d8ee80 R13=0000000000000009 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff820c4868 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d4f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbcab5e94e8 CR3=00000000490a4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000088 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000033e8 00000000001cdc18 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=00007ffc8a8d8f20 RSP=00007ffc8a8d8d20 R8 =0000000000000007 R9 =00007ffc8a8d8dc8 R10=0000000000000009 R11=0000000000000246 R12=0000000000000025 R13=00007ffc8a8d8df0 R14=0000000000000000 R15=00007f97ce8db000 RIP=00007f97ce8ef7de RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f97ce903260 CR3=000000005dfc4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000e30 0000000000001000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97ce911310 00007f97ce8db000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000