last executing test programs: 5.271964376s ago: executing program 1 (id=2814): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, 0x0, 0x4008040) pipe(0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x800) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, 0x0) r2 = syz_pidfd_open(0x0, 0x0) setns(r2, 0x6a000000) mkdirat(0xffffffffffffffff, 0x0, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000180)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x2}, 0xe) listen(r3, 0x90004) syz_emit_vhci(0x0, 0x16) ppoll(&(0x7f00000000c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0) 4.352377452s ago: executing program 1 (id=2816): syz_emit_ethernet(0x68, &(0x7f0000001240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x2, '\x00', {0x5, 0x6, "6f21ef", 0x37ba, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00', [], "97c7"}}}}}}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000000), 0x2000000, &(0x7f00000000c0)={[{@workdir}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4.271156678s ago: executing program 1 (id=2817): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4a02, 0x3}, 0xb, 0x0) landlock_restrict_self(r0, 0x0) setreuid(0xee01, 0xffffffffffffffff) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184520, 0x0) 4.270504741s ago: executing program 1 (id=2818): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000008c0)='.log\x00', 0xc41a60eaf80abb32, 0x2) r1 = openat(r0, 0x0, 0x1, 0x8) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000980)=ANY=[@ANYBLOB="7472170b733d76697274696f2c6163636573733d636c69656e742c76657273696f6e3d3970323030302e752c00105400913089725ab1189d121da4ee20393cce86"]) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1/file0/file0\x00', 0x400080, 0x3b6) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) readv(r3, &(0x7f0000001180)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) write$binfmt_misc(r3, &(0x7f0000000140)="acf755168162acd37c5653c84a88b0258c2698e1ae0a3d5f3eff43f2bcfc44679377bf871dc682dcc7cbba28ae6a01df18eeff69a3b42dcad2793767e09c03159b748b8c255a11004ff3b8ccbf0a1936da2d64310b6822efbf5902ffd8f5dec89326aee0ddd7ed3404dd89ff33ab851ed8c4ea475ddc209aefd1bbbe9d", 0x7d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfffffffc}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xd}]}, 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x4}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x8, 0x10, 0x6, 0xffffff01, {{0xa, 0x4, 0x2, 0x5, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x13, 0xac, [@multicast1, @loopback, @empty, @private=0xa010102]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000880)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x308, r8, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x78, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x54, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x38, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}, {0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x64, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x40008}, 0x8800) 4.105513007s ago: executing program 1 (id=2820): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="03000000000000000000070000000e0001006e6500000f0002006e657464657673696d30000008028a00", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='io_uring_req_failed\x00', r5, 0x0, 0x2000000000003}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x74d, &(0x7f00000003c0)={0x0, 0x7591, 0x800, 0x1, 0x3b2}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r6, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f0000000040)='.\x00', 0x2) landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x2}, 0x18, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="03000000000000000000070000000e0001006e6500000f0002006e657464657673696d30000008028a00", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) getpid() (async) syz_pidfd_open(r3, 0x0) (async) setns(r4, 0x24020000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='io_uring_req_failed\x00', r5, 0x0, 0x2000000000003}, 0x18) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) (async) syz_io_uring_setup(0x74d, &(0x7f00000003c0)={0x0, 0x7591, 0x800, 0x1, 0x3b2}, &(0x7f0000000340), &(0x7f0000000380)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) (async) io_uring_enter(r6, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) 3.512669448s ago: executing program 1 (id=2830): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000480)={0x7ff, 0x2, 0x1dad9f8604b238cb, "0600836a330000000000000007000200268d09ff07690000010040c39b08fc00", 0x48524742}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x5c25, 0x1f, 0x1, 0x0, 0x2, 0x7, 0xc, 0x10001, 0x7ffd, 0xfe, 0x2, 0x1, 0x200004, 0x403, 0x6, 0x9, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0xfd, 0xb27, 0x0, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x10000, 0xfffffff3]}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r2], &(0x7f00000003c0)=[0x2], &(0x7f0000000100)=[r3], &(0x7f0000000180), 0x0, 0x8000000000009}) msgget(0x2, 0x198) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee4, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESOCT], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r6 = socket$kcm(0xa, 0x2, 0x3a) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042c"], 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6cb1339feb010029000000320a0000007f0000ffe60000020000000000"], &(0x7f0000000040)=""/243, 0x1a, 0xf3, 0x1}, 0x28) sendmsg$nl_route_sched(r7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = getpgid(0x0) fcntl$setownex(r9, 0xf, &(0x7f0000000140)={0x1, r10}) sendmmsg$unix(r8, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="c0e1e26fc2bcf6c01ae53756d2f73272753bb0ba0d6de8a4e7de406ea5cf740e39ee360e38909ac261820d5511c51ad23548da4dfa7c2f636ea7ca5bdaadc5d3b392f97c6ca14cba7a4cb32a0bfd0f826dbcc83e0fc964df676b372d0bb8a89c24a075d3ad1228247bb905ae6393eb5c3b699cdbafd7240e31ba96a85a318ccc30409fdf5934b2fec0ce055e363bcc6ff6ca4aba97f59d76fa3e2830d7aa3caf5d6c4c3979085adbe439b187623c398598dfcac13492fc3b51613e17ef4840ab762e4e7cae6780805559623f93ff2e1379c9bb6f4ef447e123f1e311fa885ec92d5d5813cf7fe113cf10", 0xea}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000240)="c12b311a", 0x4}, {&(0x7f0000000740)="5336918304b84e95e85655c882ff214497233af82429e436dc56747987e25d129e4d3822943bf441a65a1f2d96206f6c6bd76050aed68a31026d4cea751291a466cefbf5b120f1ac9ecac0", 0x4b}, {&(0x7f00000007c0)="cd3649f1bdd706f5481c34b1003d28259a1832a811d87512677c370a8687cbdcc941ca494344b63449874bc13b18f39f9df1daaccddffbab4202728bbe45a03281628559ca57b55e3187d361b6cb3951d7ef5c2677e479e87a4023b313c648e78266cc282ae14d9724b21b63f4d544c4d0decd0fd433ac31da5fcb4d0ef366f009e96cedb18deb713d6d979d80fbf3d7126e6b80f41a6eaad89d", 0x9a}, {&(0x7f0000000880)="d0653008286efc2108cada796d8d11165226282b3356acd7981e207f0a0061953f329273bc64dabd3b4e46a00b07e8a82a42978e755d70bde8dd9bef1bed2b666110319a474505d9ebddbf242f32f8c7e16fb60fa84624b87626d366be67d5c1eaff89c99cd3924980cb7aeb9975ff06e41c64233fa9934db13707954a9cf77e06222a970b37338700742f3c2cb2bc2b814415c6020c5d48a56abcb8c57d139584ff3cea1837c8ac50536e7e7b510590c95c7eafe1ff797c0922a704d914be", 0xbf}, {&(0x7f0000000300)="963ec76933c3acf3e3366b0dc16f00b9fb5fe49073a4e39ebf67a9490d76ec76007dc09b6f187461c11774fd66e9715274ce3fa8ee", 0x35}, {&(0x7f0000001a00)="9fa1349216953cd7d76956c73aa7599340c7245713cc8ce7b66178f6d51315213d78868dcbb4ec0003370fe0c3001a6bfc93ff1e6ecaccc8e23c19403bf5de76159ac4829328a4687725fc01252240e98b825a488be5c898c933422011b61f32ad2b3cb855c89f134a8384541f55add955716a7f9207dbfdffd51dd365154e391a10d3efcac788e43ea8bb62e38b71da1b3d72a1107106e97f3d35", 0x9b}], 0x8, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="3400000000005a000100000001000000", @ANYRES32=r9, @ANYRES32=r7, @ANYRES32, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x4848}}, {{&(0x7f0000001c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001cc0)="421980f9ab1ab84ecea7efc83f7ed9312cb773ce585f72cc14d2396e70bb39f791a06495d92517bb98f40a2072b3062c20cc680cca372a9d0772823783c782", 0x3f}], 0x1, 0x0, 0x0, 0xc0}}, {{&(0x7f0000001d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003180)=[{&(0x7f0000001dc0)="f3b3fd94602eb4e330b389d85bde911b4cf63ddb87695e8c206e888995b55f30091b1efc44dbe7a4f67b8169fa87122aa0158d50a384488776792317d0adc5c6010925a6762c29201ab9a2839e1f158f9085090952b5d7cd147d681338a63b323fd01666cd7630fa41eb120579798eab476b9210d34eada14504562114ef3aa1606e17f92d917e73372a586e63ba59", 0x8f}, {&(0x7f0000001e80)="b4a58b117498bdc76480f0e81547f73f66f4e6d1accc244fd3d1b1e580b18e9543015b19e77752573abe7231a78303baa8f3004e5f9d3146237061587de097e19a1bab89fc75ed6f17792f9ea7aae43c5c81466fb52b4e60b5f48f2480b683d00a4b6ac6e793f1528de0069e51f9a3eec6a3fb35b1e7ab3fbd283b4d32e896cfb0fc6a7d011af87feca3e92fce5be3d5da7b8442cb42179248a4c7075670", 0x9e}, {&(0x7f0000001f40)="9e397a3456", 0x5}, {&(0x7f0000001f80)="ebdadd0fe41363b641d2d55eb5346df517058adf8ec40b9fb787c6125cde782ae79fba6627af07e833be4b88941e977cd3d67130502f107de7153ee5aa077aaa6d65e7ee22f48349144cfd7d815aa01c3e69c75abfc7cafa2bea85fee8c24b4afc32edba1572c141887ddfa9e7dd29fb31a7647e5e29c6ce15bbac4eebeb4692e1519cbdeb8ba309ad1e89ba072fb40480ae061c2a24fc6b78d5056d1494dd9369ccc0a5aa41c89e6ce75490ed3ecfbecbfd61ffaa3901", 0xb7}, {&(0x7f0000002040)}, {&(0x7f0000002080)="6bdf4a761d2de68812cec9ab3c0c052aad724b38fbbfec1fa092b70622d466dd9f1f0d1587ad1946bad03e21b8a37592bb5c14c6c901eb674fedf64c2f8a6eec0e809f12dcf1a55ee225478965bcb567b12eed19847eb85e986cdb679e9a2bf0980837d7ca5b1ad342c1a000e53baa430f685186c530d6b31eede2709c1dd7a902a721128936a23a6c4d0cc2c2fde3dc2688e3a4f578118f3781d3ed999584f4fa7db7edeb2e8e5bc8ed71", 0xab}, {&(0x7f0000002140)="a618a264cfe81c487c4a9a7cca933e55adbe6446", 0x14}, {&(0x7f0000002180)="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", 0x1000}], 0x8, 0x0, 0x0, 0x44010}}], 0x3, 0x20040004) lsm_set_self_attr(0x66, 0x0, 0x22, 0x0) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f00000bd000), 0x492492492492846, 0x0) 3.350131709s ago: executing program 32 (id=2830): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000480)={0x7ff, 0x2, 0x1dad9f8604b238cb, "0600836a330000000000000007000200268d09ff07690000010040c39b08fc00", 0x48524742}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x5c25, 0x1f, 0x1, 0x0, 0x2, 0x7, 0xc, 0x10001, 0x7ffd, 0xfe, 0x2, 0x1, 0x200004, 0x403, 0x6, 0x9, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0xfd, 0xb27, 0x0, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x10000, 0xfffffff3]}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r2], &(0x7f00000003c0)=[0x2], &(0x7f0000000100)=[r3], &(0x7f0000000180), 0x0, 0x8000000000009}) msgget(0x2, 0x198) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee4, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESOCT], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r6 = socket$kcm(0xa, 0x2, 0x3a) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042c"], 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6cb1339feb010029000000320a0000007f0000ffe60000020000000000"], &(0x7f0000000040)=""/243, 0x1a, 0xf3, 0x1}, 0x28) sendmsg$nl_route_sched(r7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = getpgid(0x0) fcntl$setownex(r9, 0xf, &(0x7f0000000140)={0x1, r10}) sendmmsg$unix(r8, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="c0e1e26fc2bcf6c01ae53756d2f73272753bb0ba0d6de8a4e7de406ea5cf740e39ee360e38909ac261820d5511c51ad23548da4dfa7c2f636ea7ca5bdaadc5d3b392f97c6ca14cba7a4cb32a0bfd0f826dbcc83e0fc964df676b372d0bb8a89c24a075d3ad1228247bb905ae6393eb5c3b699cdbafd7240e31ba96a85a318ccc30409fdf5934b2fec0ce055e363bcc6ff6ca4aba97f59d76fa3e2830d7aa3caf5d6c4c3979085adbe439b187623c398598dfcac13492fc3b51613e17ef4840ab762e4e7cae6780805559623f93ff2e1379c9bb6f4ef447e123f1e311fa885ec92d5d5813cf7fe113cf10", 0xea}, {&(0x7f0000000a00)="2110d63d0b21a043b16aa01aa8a0b8bf5272befa38b70dfaf19b05edb7ef206283e221e96bd65dbf5d96e01e78d7ceecd62805ddf044092806f6d18737834d82bc8254b4acac80777b3d8b5d41106f5c9d3bebf42dda32ac4d79b69ddfeb9dddaf4d47b374954c0d70934e65a32f4278c5f945ac2b5fdf31eee9a8938d2ae8249a29b5b5b384cd9c4ae11a4dcb83c654c0ed6419b8cfcdd83057b04c296fe2967610658523f21a4298d3aedb6aafc359f268334aa5050c2b6eec0fd6f3760fb4ae42dbdb0627009d41d10a87efdaa5980e3a818bd112de207df6d32931f2cb9903bebc35b254d699de821cb25bca72a4706d630608e13ec4ec0c0db30fb42f8144b1a7127a8442167ddbb97041bfb87c7eefdd2f5c8a2d4932c361fade53706ee51629dfb8e4fdfa79f47f8c35fe950acabe6bdce8e8e0ef1036c1e069e467e86f3e5e322620a66a330897413e4747f78ae61d1858749c1b78afa1cc9794327217101e6e4a4b3b754a5e435296b15272009a0d2896e357090430ae349dfa023aab386e815de56c4c1992d086d4fcd0b898a963a4ecc2bd5e370d439d5b20958b6e9323acf405ca4a0893c558178549905c4ac3f87e9f5fbb8f534efb8f94bbc06974d6ef13e315d68f4d537a0e2182c75c4b677c51d9d512c5664cc38d9e3e39836a75eb28acc2b5448b288ebfda4cfd26d0effdd491ad0b4cdc42ebb7b901ad71e0642d50c279336262064bdc408cdabef40f135fb4fe4b7158c0f222c921f5b60487bcfa1dbfc0466d15c238f543b9ae918c582d3493647afa4ad8ef75919539dd3835985737d437f159b3c47bdeef46386bbb8b39ef254c46d8a8d3c4ab680860232839f8b84e8619c9496c4f5384e4d50a572657462c11504bfb41b613d654228479fef4a3b4a0e44e260b6ce6d963b0165fc6670d7343ea1a0809227e8d3bec5e0f506c39389bc36a85adca7d32c65a87508726b217c4be31a543b562f9dda3fd388dcbadcf4fdeb8f12ad10d81baaf21014ef21403bf37e1e1a5f7451cf112001b011f7620f4e0b3184753f2fe26e7842dbaf585f20df4d851fda271c30d8b5612f0eed446defbb8ad9a7a13f316a42a09335dede71f7138fac2ebf43a1d99cf163b5f513f1c7be0b0cdc7612f2f378f58cfd83d3cb61a9746b4048f46776bc63fac04ce71e696aca6a2621902029de34017d61c23e045a56967f3fc22a1ed4be640cd506d0105b719678c412a57e5907fb36742ea12e714a89cddbe399b0eb5c23b2351c02190dd81fad7c1dd95c0ff6d62dfe3b4ea61c4b80b73545617c1e23c7f6cd1407bdb2c5850501a09735905b684ed88b1e83d8f0119e03c9442e5c8d29bc29cfd760811c75696276393ebcc931ce4d4b100fd1256ec2c0bb8b929307ee6bb3f2d9690bdb6dd75b0ddc554b6ecddbe7dae2d387d0f38dcde619149947833853f8d86d34cf0d74632cd0dd083d5b14faa64992df64741563b7c67ec943eec49337d3573eb471b44b35185851520f0117217a5693f6d4e0b00e59aa422b805928e81c8dfa957210101b51766699ad15a0f1b4e29816460a30f8ae267cb340290097e85e79181aaf4cebb16b101aa9a3e18c1c6c1f8d9e38981f72edfa28b9d7327895827aa4c9de0966dca2866e3f7cf87cbba6b68cdf68c6dfabbcdf698c599b41aa544148933e9639b8f837d6e756f911d875484ff1dfbb9226a96813faf3c3b0ecbb286fc516d65216a4d3cef29e2eead4ec203527e696c7c861864cb87bf9974954f241ec2d3066e69cf88f6e5f42e8318b098c7d85c02ebca2464075917f7197197bd2bd9b60fa5bb19991b9fe69d034cb77890a5394010700b0911a05e1ff943521e20194fd7f62c88eee330014cf3b41654913f6061a46386a0163f663167f8598186c1410926cc1ed2ddad8b859b76a130a6fa92c50f416e795989a6a0ee1607d71cdf7397262f0d70ff91ef7829efbee2536d9e2fec55e6c73d0aeb7e353ca671c5a144b9b02ebe387263dbb0dea4f06d5f512c270ed8916713e7c5416e6267110b2f108e70989e0d0d6fe1bc95604aae7c7d300c0489da69bd3cc6dc92233f6eeb8b5e261108fb1635a7f1274df6df5a23d90fa7002f1f0f78127aa20f3d2b44fe2a3f47013c8685c6aa6b7484d65a072f9117291d304c0b0763b635aa5f4508e817f3657544cfdae8f5e1c9e0560099d70b164a518a84eb35de3ce4130b5d7fce26cd9dd3fb3d9e25f6750f20f756a80b4d2507901f5c07d59f702fe28372cd3206ef3e27f91a727ed5bd145e9f7569b963a0a29b7061970662ed190c6ec29107ed2c5fd2dfc4432aa9330b391b0c4f19721bf0ff13c34b5d48c56cae9ddb06fe9820f0b4716b06b74e7c03249e7b14c0d0a229535550773d04f25d78bd4d478e6153e13e75422b386df6e08f98e4cc72ae3f9b70d763d3109e7960417cf1cc58704bec23b68b8504fc5587a2541b1851750c5555f0aa86b4a8ce7a8075a02bf8036f7c72299603074799465d7ba6f93a8a973a02cf331e4b605e8619c9eae33b19f4b3b9a1adba8176f4d4bcffe34425e4d115d00bc60f892531ef9492ddfceb447137b59fc7731518cce932d60fb0fd38934923ec600826e58feaa56f1c746bde53947060a753eccacdf348921c39a68f09da094b5d22cb95cdd685f65da0426f72455eb50a7d37edfff065c4e75337412d3dd0dde9d6e489c92d4e8b3a2d686849111c8801a77b5f94b921c5f26d455ff9c4543b1182461e80e4fb7e1f02d502dac9f672282e24c98a8dd319eef34121266222adee9cb4de0de4f7966f00abe64665ca7e4762650017a350005f4439f79f3741097dc98fef7b8ac349c6e1ba952ebd8313281de98f59ad1e70e3ff7d242a7e550390a9eacc8808a8c48db1284b1907d2a1dc408e2c1cf4e6647766606c26f93d940a6bf6475287f7fb6dcfd0840be21ecb22fcb67b4d7fe673ed01d5faec7266d5ae3f858fbadc275e1a0ddb3d809586a97227b2925914c000774c06820871c4bc6baeb6a3ff78528d9b055199f57e1fd9264517ad5ead2d869034ac59bac4d0e2a13f5b73d113fcc343b57905de01390d7c0ecc5999e925a534457b8d6fda30798fd746ec8e773d94922473349d21bd6eae90570332df8470e7d96575a47639580a2f9111e296fc96abf6e06e80f942e7f01945e8e947ff03e58873c6d645788ec9a5aa2a6dc5402c065ddd59e754a8ac0f34180cf3a0283f5d86b25cbf8112d48a6621dbecd16b6cb87161d10669f3982fc916e1ad18a08c90ff6068e689de3575ecdf078d5e71d730d0d7ac5849afc8190e684bcef4dc1314bf44ddd960d2c951d6a484f5cdf4879fe50545775e9bfcd8b6861fd61857ce57559872778364b9c8bd88111873ddabe4b365fb36c1127276ed25ab77bc7735d2c1e922afc58ae5e8af6b489df2400a837b791d9070649756b658285d04ea0b7341ee0d4e02ed9a15a3f35c433f59411a9f23cf21e03ad8cc7ba113dfd70a59ce38b47c0fa76c1b90792525d9b8d5e1112a49d8bb022c43d5411c9102485ae3e9e3370eac50d72bbed4a20f1538d339314ef0bdd8f3cd7a3545043fe48e8a32994bbcd61e3b8fba2e555398f0ee1e484133898c25b5f43a03af2fab69c0eb5a5ff99387342916e134e3a724c5a4af0f8d3ce5a6ceb1072697daecf6abdd5ed01c6ac776e399522c92a8fee3d5923da2f5cf55729a5d74fbe63b65fd32143ed7871c0930c3cd612ba6c3820f277fdce47f80a0b17a492440fa57eaa405fed85511451f8bf473551dde6d3477336fb7e504a245f405cd91ace19e2ab8c783652d0c59766590f74512d6db461204846205194e7e6ea2d5ac60c2c8354d70043fd18d21222c40e69da687831ea08c3164a65e20d1a9fb2f809260a82784d2073f6615be84039d8ce5cd8331b4eea4ff0b9e9963e8160fe55e533a8a2e3cf83ade077facdc6097086d5c517b3193b721231c570c805af8dcaa3d4a86598677745f0621a7a92d035e0efe6994c112426657975040681380761107fb7acb916cc5a895980003bcec473fd1cb420559bceb09652ef9c3aecb8c456261aab4f284fed19b29a72b14f4ac32ff61071752cf9e80f649e8ee109ab76590f4bda43027c70b6de4dfe8863b597f9a2dd95f770376d60825e9f177d4a43c6e2c46b8036c0f83cca4497f1f55d896e28386232085bb0a0413119feec32bf41ec95dfb1d2a5b53b95ab1c1f5f1068f751d4ad94ec04eaf2484f31c58ed53581393ac2e965c046736674843806e86146842cbf0c4761212c2e18fdc147401233b84db5911f28f0b7edf87713718fd8073f72de6717c527bf8a7a27bfe41d2e13ad8f38f106ac17bf1540b89900264f73bb770ab333e4d5571316b8065302fa2e3408625c45a9c4a417a884e146457a2cfdc9e89e1ca3fffd9e389bddbb0b9c17516d081e9e8471da2b1ead0e2ea5b4774b8b543a5e1a34712cfb23450cae9e735ae91b38113bbf8e0efdc6f2239b1989a749ce26ad5d7d799aac986b737438017741ad00a546147f273ed60d51027d1ce172b2a8e95aab2789bfabc1a7cc9d37c1ee9845535c39291211d4162bb25579be24b6d229c0740d23afa623c3f164789cc07eedf4c98a3c169a37e10cb43713681c724620514ea6cd8ad3d484dff33f6066d83b847dc401e1c57f46c0cb914fa17cbee5d96559424cd5df6130dc45d423b2d7b5676bc230919c9cebce4de7868bdf6931c42ce67d91126b485bf82f758e3def47e3a7eb36b30b56f1df116fd2615f474cac3653ae4a4639e5efac2abdc590ada821ba9477e85bfea55e41d1613f14763380a0b6375af3145c8be949991fb113bbb1a41aa69ba78e037afd8e751c970a3f5e76a52492158eff0994ab89414402e4e307d6c7099ad8672fe77144c5979748cf55ec775eb369c2b6256893278cc1eae8d6746db1fc70eb1c7afc83584353c54f4b6b9db790f2ddb1921b64c58867c95eaa87525b223819d95beb075632b7ef15622a1c9aa5a1b53b407b19e7d39cb917188e18fb658cc9220e3e2b67d2a8d097352e0542fbb45b89801d8dd5812e819b9ea0feed68e53e71a9c397b8c157b3ba425e0a7fc3522bc103df20b14ec8cf020aa04cf2254a6230bd4eb3923d4a36b914c4195fb0ccae31f145282016e066759cee41a6c169ab75b7a36a30a3f7c56d497a1ee2101bd2b27c557ee068158cdfa85fdb88039c2472db5cf5002a6447a0870b3dbd43add116752bc28d7ef34fe9232abcdd16f6c54483c1994329d21f98d30574ff95789362cbfed2b1cdb625dd313007860bb198687a9cb41e8bc71ff51d47a158e5418d99aaee477c637b64f0fed97a9b8e932668cb2bb2ae93af1526cc1411fef39dab9e116d5248f3435d3539d1414b70a2f2c7b85d6c9caa7c8613c23017d897272495bf360009f0180c3cd06e40271711e01deef9cba29c5358521fabc49e939ca92fe612606837bf5c7d448e7494b7b46edff827473d3394e92050b16dd7d5f9cf4233fcbf2a6a78ceb47d16a5decf079d79d340f694ef0cc9dbcedf2b2776229a77cb9bc72d08596f212f7a0bbb8f0bda2099f2d15e59a9d9b9b625f0ede35be82c9240db32ff6247ef8bcdbe3914358cf276578d11c4cb9f764cd16503170ce6717f319739e0d203da2d5aedc0fe3ad6d5442d3de7280146d693789b0a9a584d71b203bc65323778b40fc3e348d6e8cc8b18200aee76a2d9eba6236b801a8d9ccb04546cf6b188822cfd832dbcd75abd830f562", 0x1000}, {&(0x7f0000000240)="c12b311a", 0x4}, {&(0x7f0000000740)="5336918304b84e95e85655c882ff214497233af82429e436dc56747987e25d129e4d3822943bf441a65a1f2d96206f6c6bd76050aed68a31026d4cea751291a466cefbf5b120f1ac9ecac0", 0x4b}, {&(0x7f00000007c0)="cd3649f1bdd706f5481c34b1003d28259a1832a811d87512677c370a8687cbdcc941ca494344b63449874bc13b18f39f9df1daaccddffbab4202728bbe45a03281628559ca57b55e3187d361b6cb3951d7ef5c2677e479e87a4023b313c648e78266cc282ae14d9724b21b63f4d544c4d0decd0fd433ac31da5fcb4d0ef366f009e96cedb18deb713d6d979d80fbf3d7126e6b80f41a6eaad89d", 0x9a}, {&(0x7f0000000880)="d0653008286efc2108cada796d8d11165226282b3356acd7981e207f0a0061953f329273bc64dabd3b4e46a00b07e8a82a42978e755d70bde8dd9bef1bed2b666110319a474505d9ebddbf242f32f8c7e16fb60fa84624b87626d366be67d5c1eaff89c99cd3924980cb7aeb9975ff06e41c64233fa9934db13707954a9cf77e06222a970b37338700742f3c2cb2bc2b814415c6020c5d48a56abcb8c57d139584ff3cea1837c8ac50536e7e7b510590c95c7eafe1ff797c0922a704d914be", 0xbf}, {&(0x7f0000000300)="963ec76933c3acf3e3366b0dc16f00b9fb5fe49073a4e39ebf67a9490d76ec76007dc09b6f187461c11774fd66e9715274ce3fa8ee", 0x35}, {&(0x7f0000001a00)="9fa1349216953cd7d76956c73aa7599340c7245713cc8ce7b66178f6d51315213d78868dcbb4ec0003370fe0c3001a6bfc93ff1e6ecaccc8e23c19403bf5de76159ac4829328a4687725fc01252240e98b825a488be5c898c933422011b61f32ad2b3cb855c89f134a8384541f55add955716a7f9207dbfdffd51dd365154e391a10d3efcac788e43ea8bb62e38b71da1b3d72a1107106e97f3d35", 0x9b}], 0x8, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="3400000000005a000100000001000000", @ANYRES32=r9, @ANYRES32=r7, @ANYRES32, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x4848}}, {{&(0x7f0000001c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001cc0)="421980f9ab1ab84ecea7efc83f7ed9312cb773ce585f72cc14d2396e70bb39f791a06495d92517bb98f40a2072b3062c20cc680cca372a9d0772823783c782", 0x3f}], 0x1, 0x0, 0x0, 0xc0}}, {{&(0x7f0000001d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003180)=[{&(0x7f0000001dc0)="f3b3fd94602eb4e330b389d85bde911b4cf63ddb87695e8c206e888995b55f30091b1efc44dbe7a4f67b8169fa87122aa0158d50a384488776792317d0adc5c6010925a6762c29201ab9a2839e1f158f9085090952b5d7cd147d681338a63b323fd01666cd7630fa41eb120579798eab476b9210d34eada14504562114ef3aa1606e17f92d917e73372a586e63ba59", 0x8f}, {&(0x7f0000001e80)="b4a58b117498bdc76480f0e81547f73f66f4e6d1accc244fd3d1b1e580b18e9543015b19e77752573abe7231a78303baa8f3004e5f9d3146237061587de097e19a1bab89fc75ed6f17792f9ea7aae43c5c81466fb52b4e60b5f48f2480b683d00a4b6ac6e793f1528de0069e51f9a3eec6a3fb35b1e7ab3fbd283b4d32e896cfb0fc6a7d011af87feca3e92fce5be3d5da7b8442cb42179248a4c7075670", 0x9e}, {&(0x7f0000001f40)="9e397a3456", 0x5}, {&(0x7f0000001f80)="ebdadd0fe41363b641d2d55eb5346df517058adf8ec40b9fb787c6125cde782ae79fba6627af07e833be4b88941e977cd3d67130502f107de7153ee5aa077aaa6d65e7ee22f48349144cfd7d815aa01c3e69c75abfc7cafa2bea85fee8c24b4afc32edba1572c141887ddfa9e7dd29fb31a7647e5e29c6ce15bbac4eebeb4692e1519cbdeb8ba309ad1e89ba072fb40480ae061c2a24fc6b78d5056d1494dd9369ccc0a5aa41c89e6ce75490ed3ecfbecbfd61ffaa3901", 0xb7}, {&(0x7f0000002040)}, {&(0x7f0000002080)="6bdf4a761d2de68812cec9ab3c0c052aad724b38fbbfec1fa092b70622d466dd9f1f0d1587ad1946bad03e21b8a37592bb5c14c6c901eb674fedf64c2f8a6eec0e809f12dcf1a55ee225478965bcb567b12eed19847eb85e986cdb679e9a2bf0980837d7ca5b1ad342c1a000e53baa430f685186c530d6b31eede2709c1dd7a902a721128936a23a6c4d0cc2c2fde3dc2688e3a4f578118f3781d3ed999584f4fa7db7edeb2e8e5bc8ed71", 0xab}, {&(0x7f0000002140)="a618a264cfe81c487c4a9a7cca933e55adbe6446", 0x14}, {&(0x7f0000002180)="e397bd2e3f2c9b8beba78fd7fe4b0b5be04804561db4dcfccb2bff0b85d5196fe8a87d983cf5990a5378a43fed4bf6232686dc48f56e2a7d5bec4db5a34fafb312a8f7eaa0f59fa813a410fa3fb0fc5c9edf751e56d025c424845882e730bd6aa342f0da4885b75481719724c28f6f6d058db02855ebe9abb4196302d2d6446471accfa4ac6f3dbce4b5bd4cc4742f365ca8282eed70b24f4d50a6b93e0ff4b7d5785b4d5e10d69c4f82d62f55307225fd44b1a2f3be0b7ee656a2c2fc0b3ab5948bb989f86866b2675fef3c4a4ce91ae0a6444a71ec463cf753ddefdd74be81055d25f2edc3a6c2f74ab961f095bd77cabd526768a4f8376a708491cc4b6ea382702c5183af89dec6e9cb55e11913a50833c6cdac2642da7196ae09816cb1f249023c879f3201da7a4d85a028c33ee0caa770479367df1e093b3bf089e97ee4de3bf99d8a7eeb0a2643ca76b0d4f7133171d1bdb8b6b04cf6ff90578d21029819896a192704eeae7f2cb30d8667dec486cd67ec46c15abcc1960675b72b5c2f13b0cf78c6c1d33e3ba25832c09ed3a5641be5d15d83d615a88f219d973b915c1de5baf7f899adbe5577fd1805770bb3a4f518ed046533ab032c21f63d6bb8203e43fe81e01476aff37911ffd7c3d53ba0fbdba77f4597f021536e6fdc5d28dbbf3e896991fb5103f15f050cddf6f83d3963f591ce546140ede8e2c198c85f19929eff1408688934e1ad80ece253119f79358e1934f34ba6b670ec7377f4a2494742a014da6ee93fbd4ebc37ed26612a03d939be5b8ccb965f6e48025815ae6d6f26705db903bff3c421dda0bf7205c66128d675681dbc41b7e4a811b3e4acdaabeea011ea54429cf386d78ea3987ce2e11ee087cd0401bad97f3838e2a0d7c76c0366a4e1dfcbae3566d5f3c0ad4f82b6eff9c5e7f03e2f2b8958fb826f51e64e5b0686c6fd2ceab9b98a614e9497303b920311c71d5ed242aef9e548c3e1aef694d06172bcb9b41d9b50e385acd9beaeef6c546ccac02bc8567be4d61c2846e7709f8816bc017ca6dea032e30b948583e86c77da444b9f539819441bd1aecdb594b154a2a5f1b0c3c41738f20bed5d5d4340f2d213e6708a84707cf81c09a62a33be87829ba6b306a5ad37bf600e82ef8c8d120121aae1939b3d9aababa7678728cc2681014fc3e018cf3897158d792ac18dd802b13b296449b2aaec2e1588378e7a5924f1fc822a833a892ac689b40d72bc4c382d2fb333a29058fa548bc6e51da580bacede7b075e1f60fb2180a16edc4bf90cc1fdd4e971565fdd3e922dbeaf8c8343d3fa6572f6ff08d0798383582019bf3d774923e94a101782502db1b9a5ab2b16b6cbddfef5bb804d2787677c5e801622cd787b4a2310080fe1dcec6f7e6832154008fcce21893c82aac18c62cd41fd0becd2aa0cc87c376e7567b16b3edf64108802a01650b01ebb268552c3cd82b6b9d650f5dde4ba55a3ab2c2ba15cc4210749c2daea9c834840ce58aaa206db3ecd1a8cc80775148994e83bcec179f61f0d53249c4099a71a91a3e8e1cb7dba9a7be3423dabc2da6800f72e1f172ad696418ce61dd7e43695fdfdcd8fbdc5a8af4d7098b2f317f6b17ecd0fd0f7ae8796bb226dec02efd97d7e5c7f8ea01edc010c85643de94f617776aa8ef0c8df3a04fdcbb4c2f6c71115d2e305f4569524f5a0ff14b1491b07b3ed7d532f71f83204147f143da9c1d8b3b0fe330ecf9a2d792f1770a55c362e9d2024eef46be20261f5ee7caee12017d1b65e6492db68434f22536f3485261d0bacd4900fe8685408fa38d68c639629cacc05a5a3446f4fa7816e5a454f1035f9e29cd57be6932ef572738a6e902ec840017c6ada1b0db031ebc8758b3166815a646814401a418ef2fbcf9732a7a7a8f794296dbeb62df0d16358f277345addc3ec3f719e767cd15d406d930502c3fbcd74ed548c62581ca9aa28fc71a148612fb106a4f8c37c4d2a4af4239f57a04eb5128c50ff5d85c088b866040188408a842926c307b76c455d025b494556b987f88c0323b8b256b73cb639f5190ca971fd43e76b3c82d0ee49e69d823f3483a43279763261a12d456b31433347df3919d3083bc5192b751ae7480e9378037b972abfa1c65dd1b6dc0e22f3c3651f3880f410488c234268eb87221db8e22a842fed843057e83002279180435bc0d673aeab1af9b75f49f09a655d4d4b593b0a9082206a0451d967aa51c3eaeed592a136d722de69d958833fc571f4c443acbaa3040426f5770d5c3e9adfcd79a3fa23df166cfcdad9fc9692015965f909c8e57898ea7192346bf9328b33906271eabd199f79a019f5e8267924f26d02e70d2591a1fd0ab046fe9fbb1b45d6bc2b146b29e29d4d5b117953a4cddbdc02459a2f5b1b2812088e847207c0404599f508312288f0bb233be288ecf9c89c56ccfd423e6ffb117729022a7f3cb97f4f76562b3523ff8947290f29c4008d9e303536b8b7983087ca65370776276dac4b7cc765f20dd44d918e3c0bbad9dad7b6ba2d304d52d8153ce2b8675d8c8637cf02fd32371c6bd75fc8e162063c1194810482af275eaa4e0786f97669c97dcdf2a88f69a8b0a70f5e7034dcc89f403f99d0f6a972ec35877144419bd36219e0294969c9c550d89435dedf626538d2b559dc3a24edab1c129f1f484c3d1470b4aa4819fede5a35c0ed78c89aeea4febefff29fb2fd1b1be37a3503985865ec67f8334d8f7ff50a124acb888d91b6eadc0863d3bc63be0b0b0c123f6a240726ce54379f77f3475b99b07f0a56d0472ed44a9bb903fe977645478593ff319621c50df7155f71f0769f093ba65055ca30dd1ea716a4e048af4f89a4afcfb17c67929fb876c13de0bff38e82d17c657882b7f2a2364f5d7f11f80643e4f4487112cff1c2649f2d913a4352beb3a7b1432a09760486a264b1929d3801f626cd377f44db613e9b822f9a706733fb145db1d71045f623279367526d6d302610ebeb9303a5b808769e8235c2aab3ac2d22f57fd2c354ce98b74a802f7d66e007f4e57c2d763050e9d008a5d371e80fe3b29b61bc0de653a980ffc53a11c6df72ecb28fec939193d6891ff984bcd3b8425ec95ab1aaa5edf093831b00895828c6277084647f0386b2d3d0bae6e509a8d16b7e6c20d71c1c1710deb9edce1c783de104d890453458d2a27738903b30ac0d24230423ac1b1da6016ffb27e508da616b9aa0ec08321340877e960b6102f7539d8d596ad73ae8d1dc65f2c78213f4d93da6be1cacfad359d74e3b3433e9cbd1ed110d689bef04a30e28a3b26d54e933e46ac3797fcc2fbcc5643ad9c7482abb275bd6af7a1219f534b2b764d59f3a713bcb5e238d0d5b163567b5e3fca93ce1e9c5c349bed2e856c9779871a4631a0abaa92c4ed4c08606b52221e0f85fc8e6430579fe32f8df77477b57ac5a6b5f78ad2f6954649d4ffb5a280f23aa45a3a8122cf128bc8a3b06c2bfa76ac9fe6f8ba578aa84fb146eb3416b1851de68bb8dfffa26de41ba28735eefe259052e55e6e6dc321769f01bfb72469ea66697b767e1dfc2d782e5e755edbe5ab3c53ec90573118bfc56faab9c9b0c8145f26d956b185677a950dbef77fe928aa21da06d1c5ac35baea176b1db1938ffa3468d69c5216b7b08b766fdd2f14e9383bac7e9fd680ed61b60b14e769384c8aced13a43efd1448e1219671100475b3c47d7617dc388fed7668f0d357d5f3a645e6a71ca0eabe8250c6c45cb995465fbc26e09e8452fc94b40c227116e703baea30570bcb4ee4b3a3535b62ebb847bf5ae2ef86961ec349545f709461a7e2ebbedf557fbd29853faf4a87c4e363ac967c54d1568e94a63096e1c400d989f781511e762b9281244a6dd8c9ad26fdc19b96b7be70af727c279d0e92a3f87c04c3544214110881479840febc999cfb3780b06d4609a41971cb566916bb7075e74317867e8028cecec236a144eb3e20b70c0a9e1b34bddb9cbbf6add68ec247b97970acc672d99ac7e333cabe8ec2bad226cdc0bfca4ac9fafcc13d0f389f4929deceb367d50e206c3183377d5750e68eabaeb4c77510d99d01511334d7f88f9a8015c775c9b46992f9c4b050c1b0bcc8ba2859db815a47a8da2f4a9a1d3407d17b93a6f2b18b95606530a311c5803f8ab5283f198bef36115e336f8217284ff22186a30dabadf1f573c4667965c8145e46c15e1ac7ba8888a8ccbca59ef94b188f922690b23f5457f0ef69c91ac950216926b53880e53cae731f2e5fd062481fa294f680a4b3b4ec7a5a96ed09eb73d3b01dbfa18dbe37eb9bfcdd4db8f4c40a5b2bf610ef1cd10a9a88e0a41d7e301c510c15f50a25a07952bd4b10f72caa3809ea7359a834b7027afcb1d54aedb22a137e9e02ad58b5ccde4d23e6b9010858788c647726ac2a8bd17fa62464265da4dca40c7d6c481fac68887de21af35c67d49e1c4a338d665047512d03abd68a193d9eb534912378c5409b3b622cdae8bb6c01b6c3a0a2c5c2b19195476c0f839a54365a8fef199a6c7bc5e1f28859040737a33ce35888037ff27fcae0921c9d03b79ffdbae9e43ddf6bdbb43ad03bbcbba42d687abbb2780ad86f90195e3440abd5b673c515053ce80cfc11dae002cd0b0c9a7ec004cfc9ef51c67a904a88aa087984837c16c377fe40d9ca2a4fb1cd5f928f723f5eb743769ae684a1311ba05a87affc4c9f83c201a17b4de17ea676b26e6f8340878c4aebe62a87f836f4ee46cfc0a8e3081bb0df9f888f54cec7f1757e5593af0a2fa04d0cdc09bd82b5388808e6d36e1b3f1ef6e13b956295da0da0bb62228da53b17e2e20acc68203aaa687173ba50070e292147f428bcc5f38f0489ea64280d2bea5cf80b59c924e6ad0f892cc0810d699cc283efa0cee7b6386169089d2f9d1086cbefb24339426ee8b0b5eb6ab1f3322605d106b4a1d921b71d187e14c66f537636a41c2b76ea8d0376e3fd08e9d4025b53392209ae4e6605bb3e7ba82450ab65a119b00dd75a1f8d83344bb409b03be02722c14992b8997bcb8f1c912f2a07b8eac2a75230f3630f1320f0aa3afae73fec43568b229b7c3430edad40ae8cf3dbb2f00a4568abcfc8dfd824a80426c33abe0a1489575b7f1390dac5404d97bc072b3a3575983f429aa2923ef7206e411a3b49e92ac1b146bf94b3fff7c28aec4ab87ec1dfb2e0c5f75fadd1582cb345b4699f2e1bc395cb73b353e5cc6285bf10a41ef8ca73aa771da28328ec1180c2f8c9a91cf113ca2d3f269ceea3e72d38f46e412a1305f5455a140676850a78bdbcee546c955d2c9fd5bd4fd2369d3f5a826d57fe096078643bf4bbceb2a6eae718b6d1df7e5851d3486f789ac0a98b9ac50ce4cf6a75bdd10159f2990b983eea17e167fba296305f27c426702f0c92b3bbd2a7eda2dcae569d326a8cd77b1367e623c577e1236baf1eb341886b65ec72f1175cd470ea56dc2709e6607255b3c8dce7ae02e5256a78dad47956e4add3efb38c8585a5d4df05878d155e4156100eba48040460c44a0ca12d32057e56d7b2b8b421cd8b5cdd52a14644b04b96464deeec34cba35d59567765cf3012e0b8fd319b94272751b883114274fbc8d47d359eb02cad4c983a9ced9cf816d8f740200f04a6b3da73c803b6470c6f5cbf274c2ed6a9d78ca9e003e5167728032b45909f9ff920d5b698d607473009233dac687cca627fbbce530768c5df20f6c0d1d44411c22ba9a33effe2d29b391bce12285c49fc859d522cf6336a6290c9a9", 0x1000}], 0x8, 0x0, 0x0, 0x44010}}], 0x3, 0x20040004) lsm_set_self_attr(0x66, 0x0, 0x22, 0x0) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f00000bd000), 0x492492492492846, 0x0) 1.55086945s ago: executing program 2 (id=2852): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES64=r1, @ANYRES16=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRES8=r1, @ANYRES32=r0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d0d982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1ddf76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e71bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a35d8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba98526110bfdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043894b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f520d1584b4335eabdb20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x101, 0x3, 0x100, 0x10000000, {0x3f, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r3, 0x902, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0xffffffff80000000, 0xfffc, 0x2, 0x6b, 0x2, 0x0, 0x0, 0x0, 0x933}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r4, 0x40140921, 0x20000300) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r5, 0x2, &(0x7f0000000140)=[&(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x0, r6, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x2, r6, 0x0, 0x0, 0x100000}]) 1.412133472s ago: executing program 2 (id=2853): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c244", 0x3e}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac4824362864", 0x1f}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x120, 0x29, 0x4, {0x4, 0x20, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x130, 0x29, 0x36, {0x5e, 0x22, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0x95, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e03"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x7}}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast2]}}}], 0x310}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.367202769s ago: executing program 4 (id=2831): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.273209307s ago: executing program 4 (id=2854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000db06460c5c62ae14effd17f763b8bc65d3b4b7a26b2de2513d7f35c5a905ec30ef6b9974579eb9bf6acac7e9ed8ee2398ccc0d9e62d6f23588170a5f9e4b04b47c92b06f52f6f6ad1fff944fdaf0688167147bbd4f7ba97a503a881061f961902352fc9369e0977ce5f7795839bc5e831905a3235d089510263544e84c9b05c1aa3b6e78254cdf346e93b13fcb183639e050bc81adc65cd7223311783e44a552e1ec"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000980)=0x4000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0xd22, 0x101800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x1, r4, 0xd, 0x2, 0x27f, 0x400, 0x6}) io_setup(0xc, &(0x7f0000000080)) bind$packet(r2, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'wg2\x00', 0x100}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xe8ea8a637bf18d52) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x1279, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x14, "c7b1b13ed2e938e795537a4a8e4d2a6a76f59b4726e2a31f7550117fdb447254e4876e0d9b38547238b64406d97ce03e2288d9696320da0fca872fcda71705fd", "5371df8e3d0d3fd7eda2c2109dcfe8b886678e547cb7f2c883dc9b1c697896f827f07f26cf48c98032bb92c33b584c69f7284d9895620400f1164c58fbaf8018", "6be165db8b11d27610679cac3ba7c16926dec789bb4cb1f3a40f6be6dc0b919b", [0x3, 0x5]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x3}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) r8 = socket$kcm(0x2, 0xa, 0x2) close_range(r7, r8, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) 1.164566873s ago: executing program 3 (id=2855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x4000000) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000080)=""/86, &(0x7f0000000000)=0x56) 1.163514437s ago: executing program 2 (id=2857): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000840)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x40000002, 0x0, 0x82}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.101422485s ago: executing program 3 (id=2858): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000440)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000580)={0x200, 0x1, &(0x7f0000000180)=[r7], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r9, r9, r8], &(0x7f0000000340), 0x0, 0xba}) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@deltaction={0xf0, 0x31, 0x218, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x44, 0x1, [{0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x24c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x31, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x885}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000100)) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r13 = dup3(r12, r11, 0x0) r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r14, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r14, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0xe, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@handle={0x73682a85, 0x100a, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1a}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.099844436s ago: executing program 4 (id=2860): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000000), 0x226043, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x305, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x18) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000040)={0x70, 0x1}) 1.026845126s ago: executing program 3 (id=2861): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x70}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x20000800) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f0000000000)=""/96, 0x60, 0x0) 1.026510019s ago: executing program 4 (id=2862): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) read(r2, 0x0, 0x0) move_mount(r0, 0x0, r0, 0x0, 0x46) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) (async) syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) (async) read(r2, 0x0, 0x0) (async) move_mount(r0, 0x0, r0, 0x0, 0x46) (async) 958.423083ms ago: executing program 3 (id=2864): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fc00000) (async, rerun: 64) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) (async) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) syz_clone(0x80000000, &(0x7f0000000180)="8ee1ca065b80c1d560c260d91a562715b71057a3ab8d5b2b35580c11f08863b23b1970462324de89dbb9032bfb77993b42658f76a60ba15303bd4e10bc5e397abeb60fb1590c9061fedd11ceb18f8b99b72a0beb4cfc35b22f28859342119b4f9f91fc8a842dd502de167411e906800dc18f8f1e24b01948933d57a40eb96a60731ec3201211c2988d0d72489ea647b316dd4c081b81dbcd6a1248b0a798a68c0cdae9593e11e53267c44d3741e626cec3360a84235a6a", 0xb7, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000400)="c1b6635ffcc2538ec90b79b32ccb10bb3be2091efeba086a29c77e46e0265e64e57519989ead21339a3f087bb471d8afcde083c573547fec2951a48ff4f88955854ca249ab51c45cecfe6e6dc09d30b4373ff4223b531a002f004d460ca21cec44bee8c366e4c7928c41e3b0ae154c2ba2f882ecc90e7ae6bb55455d6faa58e984066873305de6425d9ebcaeaabc74e05568e5949c4c4a69cc389ab89f66c8694ea5120d216056787edd9fc722") (async) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x18}}}}}}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x6, 0x0, 0x9, 0xc04}, {0x4714, 0x1, 0x6, 0x5}]}, 0x10) (async) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f84814000000da6a0602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x24044810) (async) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) 866.683981ms ago: executing program 4 (id=2865): mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='qnx4\x00', 0x208004, 0x0) syz_clone3(&(0x7f0000000300)={0x20000, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000200), {0x40}, &(0x7f0000000240), 0x0, &(0x7f0000000280)=""/5, &(0x7f00000002c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x8}, 0x58) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) statx(r1, &(0x7f0000000380)='./cgroup\x00', 0x4000, 0x400, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000004c0)={0xd8, 0x90c2, {r0}, {r2}, 0x2, 0x7fff}) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='gid_map\x00') ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000100)={0x1, 0x81, 0x1, 0x3, 0x80000000, 0x5}) 861.475777ms ago: executing program 4 (id=2867): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) io_setup(0x3ff, &(0x7f0000000500)=0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) (async) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)=ANY=[], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)=ANY=[], 0x0) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) (async) r4 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) ioctl$CDROM_LAST_WRITTEN(r5, 0x5395, &(0x7f0000001d00)) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000001100)={&(0x7f0000001200)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0xf5ff, 0x1, &(0x7f0000001140)="b5"}], 0x2}) io_submit(r2, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) (async) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) syz_open_dev$dmmidi(&(0x7f00000000c0), 0x2, 0x212101) dup3(r0, r1, 0x80000) (async) r6 = dup3(r0, r1, 0x80000) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x0) (async) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="4d26742c968a56b7d471d9600fefd8bbd2c8238661e7c55aa62809aa45883c7b9d34a22b253e445096827971efc949326623b100dc7289c718cdf15a2e4477f6d776800b35b374471b67a22bf3595a2bbc27e555b5bfea732fd612ea5fa3b3b407b13b756db2ef0568ca714dcc2b47eaa073cd2ad5eac2bc2793d311f34dc031267b26e1f782132fc04453f39aeb31119f222e59337a5d2dbc4dc39e78bc51e6f1892420c1fb544f9f451375816189117edeb66d281cbd0874cface92fbb3313175232da71032614", 0xc8) (async) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="4d26742c968a56b7d471d9600fefd8bbd2c8238661e7c55aa62809aa45883c7b9d34a22b253e445096827971efc949326623b100dc7289c718cdf15a2e4477f6d776800b35b374471b67a22bf3595a2bbc27e555b5bfea732fd612ea5fa3b3b407b13b756db2ef0568ca714dcc2b47eaa073cd2ad5eac2bc2793d311f34dc031267b26e1f782132fc04453f39aeb31119f222e59337a5d2dbc4dc39e78bc51e6f1892420c1fb544f9f451375816189117edeb66d281cbd0874cface92fbb3313175232da71032614", 0xc8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000000100), 0x0, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000160000000a20000000080a050000000000000000000200000a0900010073797a3000000000140000001100010000000000000000000a00000a"], 0x48}}, 0x44040) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000160000000a20000000080a050000000000000000000200000a0900010073797a3000000000140000001100010000000000000000000a00000a"], 0x48}}, 0x44040) sendmmsg$inet6(r0, &(0x7f0000004d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000e00000000290000003700000096001a00000000009c0443b24aa1e3e2db365c8266270c2b62a61fe986acdd62f04414c18a52fcc4ac3aaaeb7aa2ed811b2f49c0d46f3c1bbae7ad49a3b86781eeb5833d59a523caf6179e7263268ced73f847f6b8c9653d955f8fecf6ab2374c8d0ec535d46561a16ed65a7276a0eccaaf58dd0b5feb2c4"], 0x18}}], 0x1, 0x20000000) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="040e04032420"], 0x7) (async) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="040e04032420"], 0x7) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@private, @initdev}, &(0x7f0000000180)=0xc) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x7fff, 0x7fff}}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0xffff}, 0x8) r8 = syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x832c01) write$char_usb(r8, &(0x7f0000000040)="e2", 0xff0f) 791.506185ms ago: executing program 2 (id=2868): syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e05003e20"], 0x8) (async) r0 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f0000000080)={0x18, 0x0, r4, {0x7}}, 0x18) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) getdents64(r2, &(0x7f00000000c0)=""/4096, 0x1000) (async) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSRS485(r5, 0x5437, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000010c0)={0xaf3, 0x2, 0xffff, 0x8, 0x7, 0xfdba, 0x4, 0x10000}, &(0x7f0000001100)={0x80000001, 0x5, 0x7, 0x2, 0x1, 0x4, 0x8, 0x1c75}, &(0x7f0000001140)={0x8, 0xb63b, 0x1, 0x3, 0x7fff, 0xfffffffffffff779, 0x100, 0xb}, &(0x7f0000001180)={0x77359400}, &(0x7f0000001200)={&(0x7f00000011c0)={[0x4]}, 0x8}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r7, 0x305, 0x0, 0x40000, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) 790.978368ms ago: executing program 0 (id=2869): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r2, 0x2, 0x10001, 0x4}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={r3}, 0x8) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xd) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r4, &(0x7f00000004c0)='./file0\x00', 0x2) 790.579442ms ago: executing program 3 (id=2870): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12121, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) (async) r1 = io_uring_setup(0x5013, &(0x7f0000000140)={0x0, 0x3bf8, 0x3681, 0xfffffffd, 0x40273}) io_uring_enter(r1, 0x0, 0x0, 0xf, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000000)='ramfs\x00', 0x0, &(0x7f00000000c0)='rdma') 727.44721ms ago: executing program 0 (id=2871): r0 = socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x800000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = creat(&(0x7f0000000440)='./bus\x00', 0x6f) r3 = socket$nl_generic(0x10, 0x3, 0x10) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYRES16=r3], 0x102) 723.51186ms ago: executing program 3 (id=2872): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000001100)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@bridge_getvlan={0x18, 0x72, 0x313, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x400c000) r5 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}]}, 0x38}}, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x9, @raw_data="8ff1418bc959a937387ca5d16ed0adafe8a9513a164056db534f8bcb568ad5a35b260b1db29d654acadb3455fb663fbbfc7263c1eb2ba445ebb087ffba37a02841427bc9e919941f2b8521bbae541da8e154303a0111e433c6de4b5c795340940baab0f63819c73f0dd71a8e307a98cc91692dd08c6b72b89c29e5651d69937e788207a17a1192d58353de293dbc831b2e6a2e90cddc38929c41ba04581f445e7b449d346e83ab266811ea5a9208ca5c55f43800bb52d20be08ec35b9648160fe09410a0ff02527c"}) 513.975752ms ago: executing program 0 (id=2873): getrandom(&(0x7f0000000000)=""/12, 0xc, 0x1) 513.633675ms ago: executing program 0 (id=2874): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f00000000c0)=[{}], r4, 0x0, '\x00', 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000000c0), &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x6, 0x5, 0x0, 0x0, r4}) (async) landlock_restrict_self(r1, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}}}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0xa83c, 0x484582) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000300)={0x1, 0x77, 0x0, 0x0}) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r10, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414902, 0x80) (async, rerun: 32) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) (async, rerun: 32) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r11, 0x10001, 0x0) (async) setsockopt$inet_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000001c0), 0x3) 191.226239ms ago: executing program 0 (id=2875): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_MCE_KILL(0x41, 0x1, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) (async) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 117.978996ms ago: executing program 2 (id=2876): r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x6, 0xc4003) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000140)=0xfffffff9, 0x4) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0}, [@tmpl={0x84, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x3, 0x9, 0x10001, 0x6, 0x7}, {{@in6=@empty, 0x4d6, 0x3c}, 0x2, @in6=@local, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x5}]}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000c80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6030031100642b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/3, 0x3, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) close(0x3) (async) close(0x3) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f0000000000)=""/234, 0xffffffffffffff6c}], 0x2) (async) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f0000000000)=""/234, 0xffffffffffffff6c}], 0x2) 116.768352ms ago: executing program 0 (id=2877): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) (async, rerun: 32) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000240)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000280)={'trans=virtio,', {[{@directio}]}}) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) r3 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)={[{0x2b, 'cpuset'}]}, 0x8) (async) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0x756}) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}], 0x18}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000000)=0x4) (async) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000240)=0x1) ioctl$KVM_GET_MP_STATE(r7, 0x8004ae98, &(0x7f0000000040)) 0s ago: executing program 2 (id=2878): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000880), 0x4e00, 0x0) ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 197.648915][T12376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.651308][T12377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.654387][T12376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.656824][T12377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.659838][T12376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.662561][T12377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.665346][T12377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.667857][T12376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.672362][T12376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.675715][T12376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.679083][T12376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.682204][T12377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.684561][T12376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.687691][T12377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.690867][T12376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.693772][T12377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.696421][T12377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.698843][T12377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.700797][ T902] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 197.701974][T12377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.706788][T12377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.709299][T12377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.712430][T12376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.715184][T12376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.717626][T12377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.720252][T12377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.723723][T12377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.726138][T12377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.761533][T12388] CIFS mount error: No usable UNC path provided in device string! [ 197.761533][T12388] [ 197.765937][T12388] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 197.925227][T12398] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1938'. [ 197.936965][T12400] bridge0: entered allmulticast mode [ 198.165893][T12412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1943'. [ 198.232455][T12415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.292868][T12421] gfs2: error -5 reading superblock [ 198.299791][T12423] 9pnet_fd: p9_fd_create_unix (12423): problem connecting socket: ./file0: -111 [ 198.305568][T12424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1942'. [ 198.464473][T12461] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 198.716677][ T5941] Bluetooth: hci1: command tx timeout [ 198.996765][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'. [ 199.000744][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1958'. [ 199.012070][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'. [ 199.012338][ T91] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.018058][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1958'. [ 199.019069][ T91] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.025495][ T91] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.030194][ T91] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.744406][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.802916][ T40] audit: type=1400 audit(2000000054.326:736): avc: denied { ioctl } for pid=12507 comm="syz.1.1966" path="socket:[47951]" dev="sockfs" ino=47951 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.853487][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'. [ 199.882115][T12512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1965'. [ 200.078266][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 200.088149][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 200.091180][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 200.094168][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 200.940941][ T5941] Bluetooth: hci1: command tx timeout [ 200.986322][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'. [ 200.990111][T12597] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 201.007897][T12602] program syz.1.1982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.012975][T12602] netlink: 'syz.1.1982': attribute type 22 has an invalid length. [ 201.015791][T12602] netlink: 'syz.1.1982': attribute type 22 has an invalid length. [ 201.020163][ T40] audit: type=1400 audit(2000000055.467:737): avc: denied { bind } for pid=12601 comm="syz.1.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.146263][T12617] tmpfs: Unknown parameter 'oaJfzL沨cpNт%ZR@gq'm+@Pa MimZ ]Aov+xjG*/.!+?T0hu!JO.7-Uh'pᨎ]8;#`' [ 201.184066][T12617] netlink: 'syz.1.1988': attribute type 21 has an invalid length. [ 201.229489][T12624] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 201.233351][T12624] cramfs: wrong magic [ 201.341317][T12626] openvswitch: netlink: Message has 2688 unknown bytes. [ 201.407326][ T40] audit: type=1400 audit(2000000055.832:738): avc: denied { read } for pid=12636 comm="syz.1.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 201.417075][ T40] audit: type=1400 audit(2000000055.841:739): avc: denied { ioctl } for pid=12630 comm="syz.0.1992" path="socket:[51329]" dev="sockfs" ino=51329 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 201.605693][T12652] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 201.630290][ T40] audit: type=1400 audit(2000000056.037:740): avc: denied { write } for pid=12651 comm="syz.1.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 201.790240][ T40] audit: type=1326 audit(2000000056.187:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12664 comm="syz.3.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8878f7c9 code=0x50000 [ 201.801990][ T40] audit: type=1326 audit(2000000056.187:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12664 comm="syz.3.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fab88746c3d code=0x50000 [ 201.810919][ T40] audit: type=1326 audit(2000000056.187:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12664 comm="syz.3.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fab887c3f09 code=0x50000 [ 201.820194][ T40] audit: type=1326 audit(2000000056.187:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12664 comm="syz.3.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fab887463b7 code=0x50000 [ 202.271584][T12691] tty tty24: ldisc open failed (-12), clearing slot 23 [ 202.395124][ T40] kauditd_printk_skb: 6128 callbacks suppressed [ 202.395135][ T40] audit: type=1326 audit(2000000056.748:6873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12664 comm="syz.3.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8878f7c9 code=0x50000 [ 202.414919][ T40] audit: type=1326 audit(2000000056.757:6874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12664 comm="syz.3.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8878f7c9 code=0x50000 [ 202.423641][ T40] audit: type=1326 audit(2000000056.757:6875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12664 comm="syz.3.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8878f7c9 code=0x50000 [ 202.432887][ T40] audit: type=1326 audit(2000000056.757:6876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12664 comm="syz.3.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8878f7c9 code=0x50000 [ 202.440550][ T40] audit: type=1326 audit(2000000056.757:6877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12664 comm="syz.3.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8878f7c9 code=0x50000 [ 202.447668][ T40] audit: type=1326 audit(2000000056.757:6878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12664 comm="syz.3.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8878f7c9 code=0x50000 [ 202.455846][ T40] audit: type=1326 audit(2000000056.757:6879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12664 comm="syz.3.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8878f7c9 code=0x50000 [ 202.463173][ T40] audit: type=1326 audit(2000000056.757:6880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12664 comm="syz.3.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8878f7c9 code=0x50000 [ 202.470771][ T40] audit: type=1326 audit(2000000056.757:6881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12664 comm="syz.3.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8878f7c9 code=0x50000 [ 202.482432][ T40] audit: type=1326 audit(2000000056.757:6882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12664 comm="syz.3.2003" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8878f7c9 code=0x50000 [ 202.560754][T12713] input: syz1 as /devices/virtual/input/input26 [ 202.579761][ T10] Process accounting resumed [ 202.589994][T12715] ip6t_REJECT: ECHOREPLY is not supported [ 202.629494][T12713] Process accounting resumed [ 202.748112][T12724] bridge: RTM_NEWNEIGH with invalid ether address [ 202.849801][T12727] ubi31: attaching mtd0 [ 202.852612][T12727] ubi31: scanning is finished [ 202.854164][T12727] ubi31: empty MTD device detected [ 203.019584][T12727] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 203.022817][T12727] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 203.025943][T12727] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 203.029324][T12727] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 203.032606][T12727] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 203.035470][T12727] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 203.042099][T12727] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1080586147 [ 203.046227][T12727] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 203.052290][T12751] ubi31: background thread "ubi_bgt31d" started, PID 12751 [ 203.088476][T12750] lo speed is unknown, defaulting to 1000 [ 203.166118][ T5941] Bluetooth: hci1: command tx timeout [ 203.303243][T12760] vxcan3: entered promiscuous mode [ 203.306043][T12760] vxcan3: entered allmulticast mode [ 203.564033][T12761] lo speed is unknown, defaulting to 1000 [ 203.637575][T12771] ref_ctr increment failed for inode: 0xa28 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888027276e40 [ 204.057301][T12786] __nla_validate_parse: 77 callbacks suppressed [ 204.057319][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'. [ 204.068292][T12772] lo speed is unknown, defaulting to 1000 [ 204.071950][T12786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2037'. [ 204.104052][T12782] netlink: 'syz.0.2036': attribute type 10 has an invalid length. [ 204.146715][T12792] ubi: mtd0 is already attached to ubi31 [ 204.964830][T12827] netlink: 'syz.2.2047': attribute type 12 has an invalid length. [ 205.226313][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.229022][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.404975][T12863] macvlan0: left promiscuous mode [ 205.406914][T12863] netlink: 'syz.2.2055': attribute type 1 has an invalid length. [ 205.409525][T12863] netlink: 'syz.2.2055': attribute type 2 has an invalid length. [ 205.686821][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 205.689933][T12875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2063'. [ 205.892399][ T1209] Bluetooth: hci4: Frame reassembly failed (-84) [ 205.895221][ T1209] Bluetooth: hci4: Frame reassembly failed (-84) [ 206.751103][T12896] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 207.141893][T12905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.197161][T12911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2075'. [ 207.471484][T12918] lo speed is unknown, defaulting to 1000 [ 207.576463][T12922] lo speed is unknown, defaulting to 1000 [ 207.665486][T12935] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 207.775289][T12948] netlink: 'syz.2.2085': attribute type 10 has an invalid length. [ 207.778657][T12948] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2085'. [ 207.782822][T12948] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 207.862059][T12940] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 208.041992][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 208.294928][T12963] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 208.342582][T12967] mkiss: ax0: crc mode is auto. [ 208.588242][T12967] sp0: Synchronizing with TNC [ 208.706489][T12970] syzkaller0: entered promiscuous mode [ 208.708327][T12970] syzkaller0: entered allmulticast mode [ 208.814493][ T40] kauditd_printk_skb: 29473 callbacks suppressed [ 208.814508][ T40] audit: type=1400 audit(2000000062.760:36356): avc: denied { read } for pid=12971 comm="syz.0.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 208.893088][T12978] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2095'. [ 208.896304][T12978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2095'. [ 208.899781][T12978] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2095'. [ 209.054732][T12996] netlink: 'syz.3.2100': attribute type 10 has an invalid length. [ 209.056903][T12995] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 209.071346][T12996] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 209.075818][T12996] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 209.082706][T12996] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 209.225505][T13021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13021 comm=syz.3.2105 [ 209.349240][T13031] syz.0.2107 (13031): drop_caches: 2 [ 209.355158][T13026] syz.0.2107 (13026): drop_caches: 2 [ 209.381814][T13035] netlink: 'syz.3.2110': attribute type 10 has an invalid length. [ 209.385619][T13035] bond0: (slave wlan1): Opening slave failed [ 209.472133][T13044] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2114'. [ 209.493255][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2115'. [ 209.549939][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2118'. [ 209.599502][ T40] audit: type=1400 audit(2000000063.490:36357): avc: denied { ioctl } for pid=13063 comm="syz.3.2122" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 209.643111][T13070] random: crng reseeded on system resumption [ 209.653955][T13070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.658282][T13070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.689290][T13075] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2127'. [ 209.924392][ T6002] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 210.010913][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 210.072070][T13097] netlink: 'syz.3.2133': attribute type 10 has an invalid length. [ 210.080136][T13097] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.084562][ T6002] usb 7-1: Using ep0 maxpacket: 32 [ 210.088508][T13097] bond0: (slave team0): Enslaving as an active interface with an up link [ 210.093309][ T6002] usb 7-1: config 0 has an invalid interface number: 247 but max is 0 [ 210.096813][ T6002] usb 7-1: config 0 has no interface number 0 [ 210.099310][ T6002] usb 7-1: config 0 interface 247 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 23 [ 210.113273][ T6002] usb 7-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 210.116394][ T6002] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 210.119587][ T6002] usb 7-1: Product: syz [ 210.121028][ T6002] usb 7-1: Manufacturer: syz [ 210.123834][ T6002] usb 7-1: config 0 descriptor?? [ 210.127938][T13071] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 210.180997][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 210.184632][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.189432][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.194284][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 210.199581][ T10] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 210.203855][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.209851][ T10] usb 6-1: config 0 descriptor?? [ 210.349378][ T834] usb 7-1: USB disconnect, device number 15 [ 210.655397][ T10] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 210.659223][ T10] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 210.663003][ T10] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 210.666194][ T10] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 210.669241][ T10] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 210.674747][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input27 [ 210.688811][ T10] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 210.692406][ T10] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 210.812904][T13126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2143'. [ 210.866694][T13079] netlink: 'syz.1.2124': attribute type 2 has an invalid length. [ 210.869943][T13079] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2124'. [ 210.880022][ T9] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 210.884655][ T6021] usb 6-1: USB disconnect, device number 14 [ 210.887461][ T9] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 210.891366][ T9] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 210.895409][ T9] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 210.940249][T13132] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13132 comm=syz.2.2145 [ 211.001634][T13130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.088385][T13133] lo speed is unknown, defaulting to 1000 [ 211.221966][ T902] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 211.381790][ T902] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 211.385973][ T902] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 211.390431][ T902] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.397960][ T902] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 211.402243][ T902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.405645][ T902] usb 7-1: Product: syz [ 211.407370][ T902] usb 7-1: Manufacturer: syz [ 211.409375][ T902] usb 7-1: SerialNumber: syz [ 211.416001][ T902] hub 7-1:1.0: bad descriptor, ignoring hub [ 211.418654][ T902] hub 7-1:1.0: probe with driver hub failed with error -5 [ 211.633652][ T902] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 211.765768][T13130] 9pnet_fd: p9_fd_create_tcp (13130): problem connecting socket to 127.0.0.1 [ 211.807122][T13159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=13159 comm=syz.3.2154 [ 211.871462][T13167] netlink: 'syz.0.2157': attribute type 17 has an invalid length. [ 211.874316][T13167] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2157'. [ 211.879750][T13167] macvtap0: entered allmulticast mode [ 211.886044][T13167] veth0_macvtap: entered allmulticast mode [ 211.890301][T13167] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 211.896671][T13171] netlink: 'syz.0.2157': attribute type 17 has an invalid length. [ 211.899497][T13171] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2157'. [ 211.931058][T13165] sit0: entered promiscuous mode [ 211.940881][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 211.944517][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 211.956327][ T6021] usb 7-1: USB disconnect, device number 16 [ 211.963601][ T6021] usblp0: removed [ 212.189165][T13183] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 212.318527][ T40] audit: type=1400 audit(2000000066.033:36358): avc: denied { map } for pid=13188 comm="syz.0.2163" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.319758][ T902] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 212.492888][ T902] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 212.496949][ T902] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.504533][ T902] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 212.508389][ T902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.511753][ T902] usb 7-1: Product: syz [ 212.514120][ T902] usb 7-1: Manufacturer: syz [ 212.516201][ T902] usb 7-1: SerialNumber: syz [ 212.522361][ T902] hub 7-1:1.0: bad descriptor, ignoring hub [ 212.526000][ T902] hub 7-1:1.0: probe with driver hub failed with error -5 [ 212.663380][ T40] audit: type=1400 audit(2000000066.360:36359): avc: denied { map } for pid=13201 comm="syz.0.2166" path="socket:[53117]" dev="sockfs" ino=53117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 212.673201][ T40] audit: type=1400 audit(2000000066.360:36360): avc: denied { read } for pid=13201 comm="syz.0.2166" path="socket:[53117]" dev="sockfs" ino=53117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 212.739970][ T902] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 212.758910][ T902] usb 7-1: USB disconnect, device number 17 [ 212.764765][ T902] usblp0: removed [ 212.780294][ T40] audit: type=1400 audit(2000000066.473:36361): avc: denied { connect } for pid=13204 comm="syz.3.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 212.789959][T13205] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 212.939048][ T40] audit: type=1400 audit(2000000066.613:36362): avc: denied { append } for pid=13209 comm="syz.3.2169" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 213.073901][T13224] binder: 13222:13224 ioctl c0306201 2000000003c0 returned -22 [ 213.227861][T13234] xt_connbytes: Forcing CT accounting to be enabled [ 213.231503][T13234] set match dimension is over the limit! [ 213.240109][T13234] netlink: 'syz.1.2177': attribute type 5 has an invalid length. [ 213.269625][T13237] geneve1: entered allmulticast mode [ 213.449436][T13248] tmpfs: Unknown parameter 'm' [ 213.641307][T13259] tipc: Invalid UDP bearer configuration [ 213.641348][T13259] tipc: Enabling of bearer rejected, failed to enable media [ 213.692141][T13261] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 213.710789][T13261] syzkaller0: entered promiscuous mode [ 213.713612][T13261] syzkaller0: entered allmulticast mode [ 213.736769][ T40] audit: type=1400 audit(2000000067.361:36363): avc: denied { getopt } for pid=13260 comm="syz.2.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 213.785849][T13266] vhci_hcd vhci_hcd.0: port 0 already used [ 213.797526][T13266] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 213.800369][T13266] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 213.805196][T13266] vhci_hcd vhci_hcd.0: Device attached [ 213.808404][T13270] vhci_hcd: connection closed [ 213.810350][ T1209] vhci_hcd: stop threads [ 213.814159][ T1209] vhci_hcd: release socket [ 213.816078][ T1209] vhci_hcd: disconnect device [ 214.256121][ T40] audit: type=1326 audit(2000000067.847:36364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13277 comm="syz.2.2191" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81ee78f7c9 code=0x0 [ 214.313839][ T40] audit: type=1326 audit(2000000067.903:36365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13277 comm="syz.2.2191" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81ee78f7c9 code=0x0 [ 214.476091][T13296] openvswitch: netlink: Flow key attr not present in new flow. [ 214.563086][ T40] audit: type=1400 audit(2000000068.128:36366): avc: denied { setattr } for pid=13304 comm="syz.3.2199" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 214.770330][ T6021] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 214.939892][ T6021] usb 7-1: Invalid ep0 maxpacket: 32 [ 214.956834][T13325] ALSA: seq fatal error: cannot create timer (-22) [ 215.028442][ T40] audit: type=1400 audit(2000000068.567:36367): avc: denied { append } for pid=13326 comm="syz.0.2207" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 215.089609][ T6021] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 215.186373][T13336] netlink: 'syz.0.2210': attribute type 4 has an invalid length. [ 215.190760][T13336] __nla_validate_parse: 6 callbacks suppressed [ 215.190770][T13336] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2210'. [ 215.197680][T13336] wlan1: mtu less than device minimum [ 215.250031][ T6021] usb 7-1: Invalid ep0 maxpacket: 32 [ 215.255413][ T6021] usb usb7-port1: attempt power cycle [ 215.257376][T13335] lo speed is unknown, defaulting to 1000 [ 215.553443][T13342] cgroup: Invalid name [ 215.559597][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2211'. [ 215.635244][ T6021] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 215.667946][ T6021] usb 7-1: Invalid ep0 maxpacket: 32 [ 215.745010][ T40] audit: type=1400 audit(2000000069.240:36368): avc: denied { mount } for pid=13361 comm="syz.1.2215" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 215.827919][ T6021] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 215.833782][T13370] fuse: Unknown parameter 'groupnid' [ 215.836785][T13370] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2217'. [ 215.849719][ T6021] usb 7-1: Invalid ep0 maxpacket: 32 [ 215.852089][ T6021] usb usb7-port1: unable to enumerate USB device [ 215.872096][ T40] audit: type=1400 audit(2000000069.362:36369): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 215.951169][T13382] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2221'. [ 215.954255][T13382] 0X: renamed from caif0 [ 215.958513][T13382] 0X: entered allmulticast mode [ 215.960197][T13382] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 215.992964][T13386] afs: Unknown parameter '' [ 216.163515][T13393] lo speed is unknown, defaulting to 1000 [ 216.219105][ T12] bridge_slave_1: left allmulticast mode [ 216.221312][ T12] bridge_slave_1: left promiscuous mode [ 216.225112][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.236930][ T12] bridge_slave_0: left allmulticast mode [ 216.239440][ T12] bridge_slave_0: left promiscuous mode [ 216.242099][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.243802][T13409] netlink: 'syz.3.2229': attribute type 2 has an invalid length. [ 216.296723][ T12] veth0_to_bond: left allmulticast mode [ 216.298685][ T12] veth0_to_bond: left promiscuous mode [ 216.300569][ T12] bridge3: port 2(veth0_to_bond) entered disabled state [ 216.304255][ T12] gretap0: left allmulticast mode [ 216.305954][ T12] gretap0: left promiscuous mode [ 216.307659][ T12] bridge3: port 1(gretap0) entered disabled state [ 216.315020][ T12] batman_adv: batadv0: Interface deactivated: gretap2 [ 216.409671][ T12] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 216.459777][T13415] sctp: [Deprecated]: syz.3.2231 (pid 13415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.459777][T13415] Use struct sctp_sack_info instead [ 216.519371][ T12] batman_adv: batadv0: Removing interface: gretap2 [ 216.717332][T13417] fuse: Unknown parameter 'group_id00000000000000000000' [ 217.022052][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.027094][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.030998][ T12] bond0 (unregistering): Released all slaves [ 217.035633][ T12] bond1 (unregistering): Released all slaves [ 217.128841][ T12] bond2 (unregistering): Released all slaves [ 217.135516][ T12] bond3 (unregistering): Released all slaves [ 217.221861][T13423] netlink: 'syz.0.2234': attribute type 1 has an invalid length. [ 217.256246][T13423] bond4: entered promiscuous mode [ 217.258504][T13423] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.294301][ T12] tipc: Disabling bearer [ 217.304759][ T12] tipc: Left network mode [ 217.332304][ T12] IPVS: stopping backup sync thread 10800 ... [ 217.343745][ T6021] IPVS: starting estimator thread 0... [ 217.442458][T13430] IPVS: using max 48 ests per chain, 115200 per kthread [ 217.633186][T13443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13443 comm=syz.3.2241 [ 217.665824][T13449] netlink: 'syz.3.2242': attribute type 4 has an invalid length. [ 217.744810][T13453] nftables ruleset with unbound chain [ 217.836627][ T12] hsr_slave_0: left promiscuous mode [ 217.842834][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.853445][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.867853][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.884121][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.914585][ T12] veth1_macvtap: left promiscuous mode [ 217.917280][ T12] veth0_macvtap: left promiscuous mode [ 217.919600][ T12] veth1_vlan: left promiscuous mode [ 217.921952][ T12] veth0_vlan: left promiscuous mode [ 218.732686][T13440] lo speed is unknown, defaulting to 1000 [ 218.851857][ T40] audit: type=1400 audit(2000000072.139:36370): avc: denied { listen } for pid=13482 comm="syz.1.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.853181][T13483] overlay: ./bus is not a directory [ 218.860388][ T40] audit: type=1400 audit(2000000072.139:36371): avc: denied { listen } for pid=13482 comm="syz.1.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 218.930294][T13441] lo speed is unknown, defaulting to 1000 [ 218.986613][ T40] audit: type=1400 audit(2000000072.261:36372): avc: denied { call } for pid=13484 comm="syz.1.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 219.072604][ T7095] smc: removing ib device syz1 [ 219.144776][ T834] libceph: connect (1)[c::]:6789 error -101 [ 219.147810][ T834] libceph: mon0 (1)[c::]:6789 connect error [ 219.192111][T13493] ceph: No mds server is up or the cluster is laggy [ 219.533587][ T40] audit: type=1326 audit(2000000072.784:36373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13513 comm="syz.1.2260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816c78f7c9 code=0x7fc00000 [ 219.555167][T13516] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2261'. [ 219.567963][T13516] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2261'. [ 219.902773][T13532] bond1 (unregistering): Released all slaves [ 219.928610][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 219.928622][ T40] audit: type=1400 audit(2000000073.149:36377): avc: denied { write } for pid=13531 comm="syz.3.2267" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 219.946866][T13535] netlink: 'syz.1.2268': attribute type 11 has an invalid length. [ 220.119306][ T12] IPVS: stop unused estimator thread 0... [ 220.258293][T13548] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 220.282063][T13550] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2271'. [ 220.282085][T13548] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2271'. [ 220.285586][T13550] 0: renamed from hsr0 [ 220.293984][T13550] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.298617][T13550] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.298648][T13550] 0: entered allmulticast mode [ 220.298661][T13550] hsr_slave_0: entered allmulticast mode [ 220.298674][T13550] hsr_slave_1: entered allmulticast mode [ 220.300536][T13550] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 220.301347][T13548] 1: renamed from 70 (while UP) [ 220.302251][T13550] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2271'. [ 220.303026][T13548] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check. [ 220.353471][T13560] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 220.430408][T13563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2276'. [ 220.468346][ T40] audit: type=1400 audit(2000000073.654:36378): avc: denied { mount } for pid=13561 comm="syz.3.2276" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 220.478594][ T40] audit: type=1400 audit(2000000073.663:36379): avc: denied { unmount } for pid=13561 comm="syz.3.2276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 220.488298][T13563] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13563 comm=syz.3.2276 [ 220.540474][T13568] netlink: 'syz.3.2279': attribute type 21 has an invalid length. [ 220.545028][T13568] netlink: 'syz.3.2279': attribute type 6 has an invalid length. [ 220.548435][T13568] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2279'. [ 220.633060][ T5941] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 220.636438][ T5941] CPU: 2 UID: 0 PID: 5941 Comm: kworker/u33:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.636468][ T5941] Tainted: [L]=SOFTLOCKUP [ 220.636474][ T5941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 220.636488][ T5941] Workqueue: hci1 hci_rx_work [ 220.636535][ T5941] Call Trace: [ 220.636541][ T5941] [ 220.636549][ T5941] dump_stack_lvl+0x16c/0x1f0 [ 220.636571][ T5941] sysfs_warn_dup+0x7f/0xa0 [ 220.636606][ T5941] sysfs_create_dir_ns+0x24b/0x2b0 [ 220.636629][ T5941] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 220.636649][ T5941] ? find_held_lock+0x2b/0x80 [ 220.636670][ T5941] ? do_raw_spin_unlock+0x172/0x230 [ 220.636695][ T5941] kobject_add_internal+0x2c4/0x9b0 [ 220.636718][ T5941] kobject_add+0x16e/0x240 [ 220.636737][ T5941] ? __pfx_kobject_add+0x10/0x10 [ 220.636757][ T5941] ? do_raw_spin_unlock+0x172/0x230 [ 220.636781][ T5941] ? kobject_put+0xab/0x590 [ 220.636806][ T5941] device_add+0x288/0x1950 [ 220.636823][ T5941] ? __pfx_dev_set_name+0x10/0x10 [ 220.636842][ T5941] ? __pfx_device_add+0x10/0x10 [ 220.636889][ T5941] ? mgmt_send_event_skb+0x2fb/0x460 [ 220.636923][ T5941] hci_conn_add_sysfs+0x17e/0x230 [ 220.636942][ T5941] le_conn_complete_evt+0x11ed/0x1f20 [ 220.636974][ T5941] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 220.637011][ T5941] hci_le_conn_complete_evt+0x23c/0x370 [ 220.637042][ T5941] hci_le_meta_evt+0x357/0x5e0 [ 220.637056][ T5941] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 220.637080][ T5941] hci_event_packet+0x685/0x11c0 [ 220.637113][ T5941] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 220.637131][ T5941] ? __pfx_hci_event_packet+0x10/0x10 [ 220.637157][ T5941] ? kcov_remote_start+0x384/0x670 [ 220.637177][ T5941] ? lockdep_hardirqs_on+0x7c/0x110 [ 220.637203][ T5941] hci_rx_work+0x2c9/0xeb0 [ 220.637235][ T5941] process_one_work+0x9ba/0x1b20 [ 220.637269][ T5941] ? __pfx_process_one_work+0x10/0x10 [ 220.637307][ T5941] ? assign_work+0x1a0/0x250 [ 220.637332][ T5941] worker_thread+0x6c8/0xf10 [ 220.637370][ T5941] ? __kthread_parkme+0x19e/0x250 [ 220.637394][ T5941] ? __pfx_worker_thread+0x10/0x10 [ 220.637423][ T5941] kthread+0x3c5/0x780 [ 220.637445][ T5941] ? __pfx_kthread+0x10/0x10 [ 220.637470][ T5941] ? rcu_is_watching+0x12/0xc0 [ 220.637491][ T5941] ? __pfx_kthread+0x10/0x10 [ 220.637516][ T5941] ret_from_fork+0x983/0xb10 [ 220.637536][ T5941] ? __pfx_ret_from_fork+0x10/0x10 [ 220.637555][ T5941] ? rcu_is_watching+0x12/0xc0 [ 220.637575][ T5941] ? __switch_to+0x7af/0x10d0 [ 220.637599][ T5941] ? __pfx_kthread+0x10/0x10 [ 220.637620][ T5941] ret_from_fork_asm+0x1a/0x30 [ 220.637660][ T5941] [ 220.637684][ T5941] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 220.732947][ T5941] Bluetooth: hci1: failed to register connection device [ 220.818820][ T40] audit: type=1400 audit(2000000073.981:36380): avc: denied { setattr } for pid=13583 comm="syz.2.2284" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 220.820811][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2284'. [ 220.832672][T13584] netlink: 'syz.2.2284': attribute type 7 has an invalid length. [ 220.843620][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2284'. [ 220.843651][ T8206] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.847523][T13584] netlink: 'syz.2.2284': attribute type 7 has an invalid length. [ 220.856432][ T8206] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.861479][ T8206] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.865589][ T8206] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.922886][ T40] audit: type=1400 audit(2000000074.084:36381): avc: denied { map } for pid=13583 comm="syz.2.2284" path="socket:[57425]" dev="sockfs" ino=57425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 221.530651][T13606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=13606 comm=syz.1.2291 [ 221.535944][T13606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=99 sclass=netlink_route_socket pid=13606 comm=syz.1.2291 [ 221.543056][T13606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=124 sclass=netlink_route_socket pid=13606 comm=syz.1.2291 [ 221.548379][T13606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=155 sclass=netlink_route_socket pid=13606 comm=syz.1.2291 [ 221.703625][T13618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2295'. [ 222.154850][T13648] overlayfs: failed to resolve './file1/file0': -2 [ 222.226188][T13656] veth0_to_bridge: entered promiscuous mode [ 222.332919][T13655] veth0_to_bridge: left promiscuous mode [ 222.682892][T13671] binder: 13670:13671 unknown command 0 [ 222.685146][T13671] binder: 13670:13671 ioctl c0306201 200000000080 returned -22 [ 222.771945][T13680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2314'. [ 222.902984][ T40] audit: type=1400 audit(2000000075.935:36382): avc: denied { read } for pid=13689 comm="syz.0.2317" name="file0" dev="9p" ino=72095689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 223.340543][T13703] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2322'. [ 223.663709][T13715] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2327'. [ 223.842836][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'. [ 223.998350][ T7155] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 224.073904][T13735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2332'. [ 224.103428][T13743] openvswitch: netlink: Message has 592 unknown bytes. [ 224.106562][T13743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.161983][ T7155] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.166905][ T7155] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 224.171783][ T7155] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 224.176545][ T7155] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.182112][ T7155] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.185793][ T7155] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.191659][ T7155] usb 7-1: config 0 descriptor?? [ 224.194756][T13721] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.376237][T13747] binder: 13746:13747 ioctl c0306201 200000000480 returned -22 [ 224.458485][T13757] vlan0: entered promiscuous mode [ 224.460246][T13757] bridge0: entered promiscuous mode [ 224.508487][T13759] nbd: must specify a size in bytes for the device [ 224.575883][ T40] audit: type=1400 audit(2000000077.488:36383): avc: denied { execute_no_trans } for pid=13766 comm="syz.1.2342" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=57292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 224.633637][ T7155] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 224.648264][ T7155] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 224.916944][T13784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25621 sclass=netlink_route_socket pid=13784 comm=syz.0.2346 [ 224.917987][ T7155] usb 7-1: USB disconnect, device number 22 [ 224.924315][T13783] netlink: 'syz.0.2346': attribute type 1 has an invalid length. [ 224.927509][T13783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 225.135474][T13788] overlayfs: empty lowerdir [ 225.175794][T13790] misc userio: The device must be registered before sending interrupts [ 225.181914][T13790] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 225.514617][T13806] 8021q: adding VLAN 0 to HW filter on device bond39 [ 225.533105][T13806] bond39: (slave ip6gretap1): making interface the new active one [ 225.538253][T13806] bond39: (slave ip6gretap1): Enslaving as an active interface with an up link [ 225.577280][T13812] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 225.580994][T13812] SELinux: failed to load policy [ 225.814744][ T40] audit: type=1400 audit(2000000078.647:36384): avc: denied { lock } for pid=13826 comm="syz.2.2363" path="socket:[60480]" dev="sockfs" ino=60480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 226.015130][T13844] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 226.057025][T13847] __nla_validate_parse: 4 callbacks suppressed [ 226.057040][T13847] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2371'. [ 226.139734][T13856] netlink: 'syz.3.2373': attribute type 1 has an invalid length. [ 226.147025][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2373'. [ 226.165703][T13856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2373'. [ 226.258066][T13864] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 226.258428][T13868] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 226.972889][T13888] No source specified [ 227.003664][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2382'. [ 227.120516][T13901] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 227.125229][T13901] overlayfs: overlapping lowerdir path [ 227.131714][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.133788][T13901] hpfs: Bad magic ... probably not HPFS [ 227.325308][T13912] nfs: Unknown parameter '' [ 227.325308][T13913] nfs: Unknown parameter '' [ 227.385382][ T40] audit: type=1400 audit(2000000080.124:36385): avc: denied { accept } for pid=13911 comm="syz.2.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.461279][T13919] Bluetooth: MGMT ver 1.23 [ 227.465331][T13919] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 227.505090][T13927] lo speed is unknown, defaulting to 1000 [ 227.508270][T13927] lo speed is unknown, defaulting to 1000 [ 227.510718][T13927] lo speed is unknown, defaulting to 1000 [ 227.620394][T13927] infiniband syz2: set active [ 227.623968][T13927] infiniband syz2: added lo [ 227.624058][ T47] lo speed is unknown, defaulting to 1000 [ 227.645083][T13927] RDS/IB: syz2: added [ 227.647028][T13927] smc: adding ib device syz2 with port count 1 [ 227.650069][T13927] smc: ib device syz2 port 1 has pnetid S (user defined) [ 227.652627][ T834] lo speed is unknown, defaulting to 1000 [ 227.654990][T13927] lo speed is unknown, defaulting to 1000 [ 227.702443][ T40] audit: type=1400 audit(2000000080.424:36386): avc: denied { write } for pid=13939 comm="syz.1.2399" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 227.704658][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2399'. [ 227.745300][ T40] audit: type=1400 audit(2000000080.461:36387): avc: denied { create } for pid=13942 comm="syz.1.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 227.762212][T13927] lo speed is unknown, defaulting to 1000 [ 227.873009][T13927] lo speed is unknown, defaulting to 1000 [ 227.978807][T13927] lo speed is unknown, defaulting to 1000 [ 228.043736][T13947] cgroup: none used incorrectly [ 228.299657][T13952] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 228.303167][T13952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.350917][ T834] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 228.386535][ T40] audit: type=1400 audit(2000000081.060:36388): avc: denied { remount } for pid=13957 comm="syz.3.2405" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 228.391041][T13958] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2405'. [ 228.395396][ T40] audit: type=1400 audit(2000000081.060:36389): avc: denied { read } for pid=13957 comm="syz.3.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 228.474666][T13961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2407'. [ 228.479674][T13961] cgroup: noprefix used incorrectly [ 228.513080][ T834] usb 5-1: unable to get BOS descriptor or descriptor too short [ 228.523219][ T834] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 228.526688][ T834] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 228.529974][ T834] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 228.535892][ T834] usb 5-1: config 129 has no interface number 0 [ 228.538519][ T834] usb 5-1: config 129 has no interface number 1 [ 228.541217][ T834] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 228.547256][ T834] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 228.551882][ T834] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 228.557624][ T834] usb 5-1: config 129 interface 135 has no altsetting 0 [ 228.560613][ T834] usb 5-1: config 129 interface 5 has no altsetting 0 [ 228.566842][ T834] usb 5-1: string descriptor 0 read error: -22 [ 228.569221][ T834] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 228.572928][ T834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.588018][ T834] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.590824][ T834] usb 5-1: MIDIStreaming interface descriptor not found [ 228.702736][T13975] bond40: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 228.709559][T13975] bond40 (unregistering): Released all slaves [ 228.850790][T13988] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 229.330438][T14013] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2419'. [ 229.423737][ T40] audit: type=1326 audit(2000000082.032:36390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14017 comm="syz.2.2420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ee78f7c9 code=0x7ffc0000 [ 229.433579][ T40] audit: type=1326 audit(2000000082.032:36391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14017 comm="syz.2.2420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ee78f7c9 code=0x7ffc0000 [ 229.445699][ T40] audit: type=1326 audit(2000000082.032:36392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14017 comm="syz.2.2420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ee78f7c9 code=0x7ffc0000 [ 229.455852][ T40] audit: type=1326 audit(2000000082.032:36393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14017 comm="syz.2.2420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ee78f7c9 code=0x7ffc0000 [ 229.819899][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2423'. [ 231.300341][T13990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.330587][ T9] usb 5-1: USB disconnect, device number 11 [ 231.419007][ T5941] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 231.549793][T14052] ip6gretap1: entered promiscuous mode [ 231.551650][T14052] ip6gretap1: entered allmulticast mode [ 231.590805][T14050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2431'. [ 231.674683][ T7155] hid (null): unknown global tag 0xe [ 231.679028][T14057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2433'. [ 231.687301][ T7155] hid-generic 0003:FFFFFFF9:0003.0008: unknown global tag 0xe [ 231.691043][ T7155] hid-generic 0003:FFFFFFF9:0003.0008: item 0 2 1 14 parsing failed [ 231.694836][ T7155] hid-generic 0003:FFFFFFF9:0003.0008: probe with driver hid-generic failed with error -22 [ 231.703079][T14059] xfrm0 speed is unknown, defaulting to 1000 [ 231.707201][T14059] xfrm0 speed is unknown, defaulting to 1000 [ 231.710859][T14059] xfrm0 speed is unknown, defaulting to 1000 [ 231.762710][T14064] random: crng reseeded on system resumption [ 231.780112][T14068] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 231.841347][T14059] infiniband syP: set down [ 231.843347][ T6002] xfrm0 speed is unknown, defaulting to 1000 [ 231.845915][T14059] infiniband syP: added xfrm0 [ 231.859547][T14076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.873908][T14059] RDS/IB: syP: added [ 231.875789][T14059] smc: adding ib device syP with port count 1 [ 231.878336][T14059] smc: ib device syP port 1 has no pnetid [ 231.881217][ T34] xfrm0 speed is unknown, defaulting to 1000 [ 231.884694][T14059] xfrm0 speed is unknown, defaulting to 1000 [ 232.029887][ T6002] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 232.040495][T14079] lo speed is unknown, defaulting to 1000 [ 232.063350][T14059] xfrm0 speed is unknown, defaulting to 1000 [ 232.201029][ T6002] usb 5-1: Using ep0 maxpacket: 32 [ 232.204461][ T6002] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 232.207526][ T6002] usb 5-1: config 0 has no interface number 0 [ 232.209845][ T6002] usb 5-1: config 0 interface 247 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 23 [ 232.215304][ T6002] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 232.217321][T14059] xfrm0 speed is unknown, defaulting to 1000 [ 232.218883][ T6002] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 232.224118][ T6002] usb 5-1: Product: syz [ 232.225871][ T6002] usb 5-1: Manufacturer: syz [ 232.229476][ T6002] usb 5-1: config 0 descriptor?? [ 232.232116][T14064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 232.319580][T14059] xfrm0 speed is unknown, defaulting to 1000 [ 232.417091][T14059] xfrm0 speed is unknown, defaulting to 1000 [ 232.568794][ T6002] usb 5-1: USB disconnect, device number 12 [ 232.846961][ T40] kauditd_printk_skb: 152 callbacks suppressed [ 232.846973][ T40] audit: type=1400 audit(2000000085.230:36546): avc: denied { validate_trans } for pid=14107 comm="syz.3.2448" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 232.852703][T14100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2446'. [ 232.863956][ T40] audit: type=1400 audit(2000000085.230:36547): avc: denied { getopt } for pid=14107 comm="syz.3.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 232.885371][ T40] audit: type=1400 audit(2000000085.249:36548): avc: denied { map } for pid=14099 comm="syz.2.2446" path="socket:[58322]" dev="sockfs" ino=58322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 233.073474][T14123] netlink: 'syz.2.2453': attribute type 10 has an invalid length. [ 233.077022][T14123] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2453'. [ 233.528057][T14141] lo speed is unknown, defaulting to 1000 [ 233.540719][T14146] openvswitch: netlink: IPv4 tun info is not correct [ 233.624148][T14141] xfrm0 speed is unknown, defaulting to 1000 [ 233.643618][ T40] audit: type=1400 audit(2000000085.969:36549): avc: denied { setopt } for pid=14147 comm="syz.1.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 234.067043][T14180] mmap: syz.2.2469 (14180): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 234.315264][T14201] SELinux: policydb string length 1962934280 does not match expected length 8 [ 234.321049][T14201] SELinux: failed to load policy [ 234.439427][ T40] audit: type=1400 audit(2000000086.717:36550): avc: denied { read } for pid=14215 comm="syz.2.2482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 234.462289][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2483'. [ 234.468779][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2480'. [ 234.482572][T14214] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 235.055444][T14253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2494'. [ 235.259586][ T7155] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 235.444380][ T7155] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 235.447850][ T7155] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 235.451342][ T7155] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 235.455144][ T7155] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 235.459341][ T7155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 235.464045][ T7155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 235.468314][ T7155] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 235.477169][ T7155] usb 6-1: string descriptor 0 read error: -22 [ 235.479895][ T7155] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 235.483525][ T7155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.489844][ T7155] usb 6-1: config 0 descriptor?? [ 235.494181][ T7155] hub 6-1:0.0: bad descriptor, ignoring hub [ 235.497317][ T7155] hub 6-1:0.0: probe with driver hub failed with error -5 [ 235.501356][ T7155] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input31 [ 235.513619][T14266] openvswitch: netlink: IP tunnel dst address not specified [ 235.517175][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2498'. [ 235.745364][T14271] @: renamed from vlan0 (while UP) [ 235.942555][ T47] usb 6-1: USB disconnect, device number 15 [ 236.163940][T14289] comedi: No check for data length of config insn id -2 is implemented [ 236.167455][T14289] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 236.171538][T14289] comedi: Assuming n=15 is correct [ 236.369259][ T40] audit: type=1400 audit(2000000088.521:36551): avc: denied { mounton } for pid=14294 comm="syz.1.2506" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 236.374086][T14295] NILFS (nbd1): device size too small [ 236.465804][T14300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2508'. [ 236.465821][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2508'. [ 236.598848][ T40] audit: type=1400 audit(2000000088.736:36552): avc: denied { ioctl } for pid=14303 comm="syz.1.2509" path="socket:[61285]" dev="sockfs" ino=61285 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 236.638497][T14306] binder: 14305:14306 ioctl c0306201 200000000240 returned -11 [ 236.755208][T14314] ptrace attach of "/syz-executor exec"[12225] was attempted by ""[14314] [ 236.831276][T14320] 9pnet_virtio: no channels available for device syz [ 236.837223][ T40] audit: type=1400 audit(2000000088.961:36553): avc: denied { setattr } for pid=14319 comm="syz.3.2515" name="/" dev="9p" ino=72095495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.867411][T14324] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 236.881865][T14324] CUSE: unknown device info "&b%ZW)3\my " [ 236.884150][T14324] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 236.889310][T14324] CUSE: DEVNAME unspecified [ 237.847414][T14330] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1542 sclass=netlink_tcpdiag_socket pid=14330 comm=syz.2.2518 [ 237.919015][ T5295] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.922918][ T5295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.928527][ T5295] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.931504][ T5295] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.934499][ T5295] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.126458][T14341] __nla_validate_parse: 2 callbacks suppressed [ 238.126474][T14341] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2521'. [ 238.165378][T14341] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2521'. [ 238.243496][T14334] lo speed is unknown, defaulting to 1000 [ 238.300441][T13350] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.305246][T13350] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 238.374831][T14334] xfrm0 speed is unknown, defaulting to 1000 [ 238.377448][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'. [ 238.380514][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'. [ 238.444954][T13350] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.449413][T13350] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 238.468098][T14352] sp0: Synchronizing with TNC [ 238.549296][T13350] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.554198][T13350] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 238.576107][T14351] [U] `` [ 238.595360][T14334] chnl_net:caif_netlink_parms(): no params data found [ 238.659538][T13350] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.663561][T13350] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 238.686870][T14334] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.689518][T14334] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.692270][T14334] bridge_slave_0: entered allmulticast mode [ 238.695729][T14334] bridge_slave_0: entered promiscuous mode [ 238.699368][T14334] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.703253][T14334] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.705695][T14334] bridge_slave_1: entered allmulticast mode [ 238.708447][T14334] bridge_slave_1: entered promiscuous mode [ 238.727270][T14334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.734048][T14334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.754751][T14334] team0: Port device team_slave_0 added [ 238.758809][T14334] team0: Port device team_slave_1 added [ 238.774870][T14334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.777179][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.777197][T14334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.778491][T14334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.793431][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.802072][T14334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.823113][T14334] hsr_slave_0: entered promiscuous mode [ 238.825727][T14334] hsr_slave_1: entered promiscuous mode [ 238.828058][T14334] debugfs: 'hsr0' already exists in 'hsr' [ 238.830026][T14334] Cannot create hsr debugfs directory [ 238.839751][T14372] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 238.844445][ T40] audit: type=1400 audit(2000000090.840:36554): avc: denied { relabelto } for pid=14371 comm="syz.3.2528" name="167" dev="tmpfs" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:clock_device_t:s0" [ 238.855948][ T40] audit: type=1400 audit(2000000090.850:36555): avc: denied { associate } for pid=14371 comm="syz.3.2528" name="167" dev="tmpfs" ino=886 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:clock_device_t:s0" [ 238.861626][T14372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2528'. [ 238.965214][T13350] tipc: Resetting bearer [ 239.105147][T14381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14381 comm=syz.3.2530 [ 239.120449][ T7155] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 239.169548][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2530'. [ 239.264805][T13350] tipc: Disabling bearer [ 239.286365][ T7155] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.290392][ T7155] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.294413][ T7155] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.299493][ T7155] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.304674][ T7155] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.309140][ T7155] usb 7-1: config 0 descriptor?? [ 239.402844][T13350] bond4 (unregistering): (slave geneve3): Releasing active interface [ 239.554821][T13350] bridge0 (unregistering): left allmulticast mode [ 239.756471][ T7155] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 240.072490][T13349] smc: removing ib device syz0 [ 240.075824][T13350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.117013][T13350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.136210][ T5295] Bluetooth: hci4: command tx timeout [ 240.141185][T13350] bond0 (unregistering): Released all slaves [ 240.224989][T13350] bond1 (unregistering): Released all slaves [ 240.231470][T13350] bond2 (unregistering): Released all slaves [ 240.320655][T13350] bond3 (unregistering): Released all slaves [ 240.331235][T13350] bond4 (unregistering): Released all slaves [ 240.406633][T14392] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2533'. [ 240.523555][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'. [ 240.526407][T14401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2537'. [ 240.529970][T14401] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2537'. [ 240.535877][T14403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=14403 comm=syz.0.2537 [ 240.582561][T14407] syzkaller1: entered promiscuous mode [ 240.585144][T14407] syzkaller1: entered allmulticast mode [ 240.824171][T14334] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 240.831979][T14334] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 240.839208][T14334] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 240.849520][T14334] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 240.918418][T14334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.933357][T14334] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.943338][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.946590][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.957125][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.960301][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.126827][T14334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.178677][ C3] plantronics 0003:047F:FFFF.0009: usb_submit_urb(ctrl) failed: -1 [ 241.203784][T14334] veth0_vlan: entered promiscuous mode [ 241.213842][T14334] veth1_vlan: entered promiscuous mode [ 241.239934][T14334] veth0_macvtap: entered promiscuous mode [ 241.246246][T14334] veth1_macvtap: entered promiscuous mode [ 241.260008][T14334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.270332][T14334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.281376][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.285124][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.289461][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.294866][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.328553][T14439] netlink: 'syz.0.2545': attribute type 2 has an invalid length. [ 241.333292][T14439] netlink: 'syz.0.2545': attribute type 1 has an invalid length. [ 241.337794][T14439] netlink: 'syz.0.2545': attribute type 1 has an invalid length. [ 241.366306][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.369667][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.390697][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.394111][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.499834][ T5295] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 241.504280][ T5295] CPU: 3 UID: 0 PID: 5295 Comm: kworker/u33:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.504312][ T5295] Tainted: [L]=SOFTLOCKUP [ 241.504320][ T5295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 241.504334][ T5295] Workqueue: hci4 hci_rx_work [ 241.504379][ T5295] Call Trace: [ 241.504386][ T5295] [ 241.504396][ T5295] dump_stack_lvl+0x16c/0x1f0 [ 241.504420][ T5295] sysfs_warn_dup+0x7f/0xa0 [ 241.504457][ T5295] sysfs_create_dir_ns+0x24b/0x2b0 [ 241.504485][ T5295] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 241.504511][ T5295] ? find_held_lock+0x2b/0x80 [ 241.504536][ T5295] ? do_raw_spin_unlock+0x172/0x230 [ 241.504569][ T5295] kobject_add_internal+0x2c4/0x9b0 [ 241.504599][ T5295] kobject_add+0x16e/0x240 [ 241.504622][ T5295] ? __pfx_kobject_add+0x10/0x10 [ 241.504646][ T5295] ? do_raw_spin_unlock+0x172/0x230 [ 241.504708][ T5295] ? kobject_put+0xab/0x590 [ 241.504737][ T5295] device_add+0x288/0x1950 [ 241.504761][ T5295] ? __pfx_dev_set_name+0x10/0x10 [ 241.504782][ T5295] ? __pfx_device_add+0x10/0x10 [ 241.504802][ T5295] ? mgmt_send_event_skb+0x2fb/0x460 [ 241.504840][ T5295] hci_conn_add_sysfs+0x17e/0x230 [ 241.504862][ T5295] le_conn_complete_evt+0x11ed/0x1f20 [ 241.504898][ T5295] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 241.504943][ T5295] hci_le_conn_complete_evt+0x23c/0x370 [ 241.504994][ T5295] hci_le_meta_evt+0x357/0x5e0 [ 241.505014][ T5295] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 241.505048][ T5295] hci_event_packet+0x685/0x11c0 [ 241.505079][ T5295] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 241.505099][ T5295] ? __pfx_hci_event_packet+0x10/0x10 [ 241.505133][ T5295] ? kcov_remote_start+0x384/0x670 [ 241.505171][ T5295] ? lockdep_hardirqs_on+0x7c/0x110 [ 241.505201][ T5295] hci_rx_work+0x2c9/0xeb0 [ 241.505235][ T5295] process_one_work+0x9ba/0x1b20 [ 241.505291][ T5295] ? __pfx_process_one_work+0x10/0x10 [ 241.505335][ T5295] ? assign_work+0x1a0/0x250 [ 241.505364][ T5295] worker_thread+0x6c8/0xf10 [ 241.505404][ T5295] ? __pfx_worker_thread+0x10/0x10 [ 241.505432][ T5295] kthread+0x3c5/0x780 [ 241.505459][ T5295] ? __pfx_kthread+0x10/0x10 [ 241.505487][ T5295] ? rcu_is_watching+0x12/0xc0 [ 241.505510][ T5295] ? __pfx_kthread+0x10/0x10 [ 241.505539][ T5295] ret_from_fork+0x983/0xb10 [ 241.505560][ T5295] ? __pfx_ret_from_fork+0x10/0x10 [ 241.505582][ T5295] ? __switch_to+0x7af/0x10d0 [ 241.505606][ T5295] ? __pfx_kthread+0x10/0x10 [ 241.505632][ T5295] ret_from_fork_asm+0x1a/0x30 [ 241.505672][ T5295] [ 241.602432][ T5295] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 241.608705][ T5295] Bluetooth: hci4: failed to register connection device [ 241.666897][T14450] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96 [ 241.774459][ T40] audit: type=1400 audit(2000000093.580:36556): avc: denied { audit_control } for pid=14455 comm="syz.3.2550" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 241.827700][T14459] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 242.068099][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.074928][ T5941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.079802][ T5941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.080855][ T6002] usb 7-1: USB disconnect, device number 23 [ 242.085107][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.088600][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 242.115368][T14481] lo speed is unknown, defaulting to 1000 [ 242.124761][T14480] netlink: 'syz.0.2558': attribute type 6 has an invalid length. [ 242.183734][ T40] audit: type=1400 audit(2000000093.963:36557): avc: denied { accept } for pid=14484 comm="syz.0.2559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 242.207174][T14481] xfrm0 speed is unknown, defaulting to 1000 [ 242.351146][ T5295] Bluetooth: hci4: command tx timeout [ 242.364324][T14492] evm: overlay not supported [ 242.425890][ T40] audit: type=1326 audit(2000000094.188:36558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14498 comm="syz.0.2563" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb31e58f7c9 code=0x0 [ 242.491662][T14481] chnl_net:caif_netlink_parms(): no params data found [ 242.579951][T14481] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.582313][T14481] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.584801][T14481] bridge_slave_0: entered allmulticast mode [ 242.588226][T14481] bridge_slave_0: entered promiscuous mode [ 242.593360][T14481] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.595760][T14481] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.599587][T14481] bridge_slave_1: entered allmulticast mode [ 242.601737][ T40] audit: type=1400 audit(2000000094.347:36559): avc: denied { map } for pid=14513 comm="syz.1.2566" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 242.613967][T14481] bridge_slave_1: entered promiscuous mode [ 242.645882][T14481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.654843][T14481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.679838][T14481] team0: Port device team_slave_0 added [ 242.686281][T14481] team0: Port device team_slave_1 added [ 242.703797][T14481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.706040][T14481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.715483][T14481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.721101][T14481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.723260][T14481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.731444][T14481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.755933][T14481] hsr_slave_0: entered promiscuous mode [ 242.759177][T14481] hsr_slave_1: entered promiscuous mode [ 242.761325][T14481] debugfs: 'hsr0' already exists in 'hsr' [ 242.763122][T14481] Cannot create hsr debugfs directory [ 242.833245][T14521] xt_connbytes: Forcing CT accounting to be enabled [ 242.858057][T14481] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.861884][T14481] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 242.867405][T14481] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 242.871078][T14481] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0 [ 242.955899][T14481] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.959311][T14481] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 242.963297][T14481] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 242.966602][T14481] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0 [ 243.088410][T14481] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.092777][T14481] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 243.097108][T14481] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 243.101689][T14481] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0 [ 243.176877][ T5295] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 243.225654][T14481] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.229436][T14481] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 243.232979][T14481] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 243.236368][T14481] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0 [ 243.374889][T14481] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 243.380303][T14481] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 243.385007][T14481] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 243.389627][T14481] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 243.414536][T14481] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.417666][T14481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.421060][T14481] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.424079][T14481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.476402][T14481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.485317][T14550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14550 comm=syz.0.2575 [ 243.489939][T14550] __nla_validate_parse: 15 callbacks suppressed [ 243.489954][T14550] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2575'. [ 243.492962][ T7095] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.500877][ T7095] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.515253][T14550] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2575'. [ 243.517131][T14481] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.529255][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.531969][ T7092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.544613][ T7095] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.547795][ T7095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.689785][T14481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.710022][T14481] veth0_vlan: entered promiscuous mode [ 243.718504][T14481] veth1_vlan: entered promiscuous mode [ 243.731279][T14481] veth0_macvtap: entered promiscuous mode [ 243.738620][T14481] veth1_macvtap: entered promiscuous mode [ 243.747308][T14481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.755869][T14481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.766338][ T8205] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.769378][ T8205] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.774481][ T8205] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.778559][ T8205] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.832826][ T8205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.836530][ T8205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.847568][ T6021] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 243.869993][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.872606][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.010534][ T6021] usb 5-1: config 1 interface 0 has no altsetting 0 [ 244.014070][ T6021] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.40 [ 244.016855][ T6021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.019340][ T6021] usb 5-1: Product: 蜇ꩤਖ᳚ꋃ쁞雄傐 [ 244.021366][ T6021] usb 5-1: Manufacturer: 쀚ᴃᥭ棄귲ឭ裘洣獲忸商믓ᦲ녘貗染熒섅뺷쓤ꓙﶓ쿆宸鍣曠锰⿝瞝ធꧨᢋ錁귭蒞䭾籣狧镈ڿ禮䞀视ົ䚜㏗債褵꾦丙ﲶ矟剝쎞ᑧ㋩⳽쳮蝃ꏗ㗛刬麌詶㾒㦡婠킵쪑죓㐾ᲂꂓ皷⺧䭏焫懌絜䦞幗瘍ᇞ벶⒞僅솞얻룉㼲䌭箷挃싅팮縀阙⺳폢޴▣뉚첢ꆶ吾㹧 [ 244.033505][ T6021] usb 5-1: SerialNumber: 躗岭쓂束嚘̞苋ặ㰠摟竄ꦩ멎鼀㓢齵苔嶔⋤Ļ參毻悸鳁ꕼ旺陸⪌潞⺌崸朌窯᧯鑃䞔撳ᵑ셉ࢆ햀屫簦憕͋딋ũ蟍㳠㋦얠枽됲⫷බꠥ愫ॳ獧玍딬䟷䨅঴쑿躚ﳤ祾䷿㯋ꭽ蒪鬥阶तꫝ龒샒厥뮖꼆內䝟ꇉ鼲멷㐥緷똗ﻰᑌ롌ꘉ띹솹긢棹㽔瑖庒臣팁횔ￔ篃鈍尢 [ 244.070624][T14569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14569 comm=syz.2.2580 [ 244.070732][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2580'. [ 244.078913][T14570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2580'. [ 244.093278][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2580'. [ 244.093484][ T61] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.096312][T14570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2580'. [ 244.099488][ T61] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.099516][ T61] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.099544][ T61] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.111204][T14575] pim6reg9: entered allmulticast mode [ 244.120735][T14577] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2583'. [ 244.140899][T14580] trusted_key: encrypted_key: insufficient parameters specified [ 244.146228][T14580] input: syz0 as /devices/virtual/input/input33 [ 244.156207][T14580] trusted_key: encrypted_key: insufficient parameters specified [ 244.263926][T14553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.267932][T14553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.268492][T14554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.276090][T14554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.328584][ T5941] Bluetooth: hci3: command tx timeout [ 244.338161][ T40] audit: type=1400 audit(2000000095.974:36560): avc: denied { ioctl } for pid=14552 comm="syz.0.2576" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 244.411415][ T40] audit: type=1326 audit(2000000096.039:36561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14597 comm="syz.3.2589" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab8878f7c9 code=0x0 [ 244.439377][ T6021] usbhid 5-1:1.0: can't add hid device: -71 [ 244.441571][ T6021] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 244.445271][ T6021] usb 5-1: USB disconnect, device number 13 [ 244.471494][T14601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14601 comm=syz.3.2589 [ 244.476570][T14601] netlink: 'syz.3.2589': attribute type 1 has an invalid length. [ 244.570640][ T40] audit: type=1400 audit(2000000096.189:36562): avc: denied { setattr } for pid=14608 comm="syz.2.2593" name="NETLINK" dev="sockfs" ino=65295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 244.574965][ T5941] Bluetooth: hci4: command tx timeout [ 244.658953][T14617] netlink: 'syz.1.2597': attribute type 2 has an invalid length. [ 244.662595][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2597'. [ 244.704323][T14615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2596'. [ 244.767398][T14619] netlink: 'syz.2.2596': attribute type 1 has an invalid length. [ 244.770648][T14619] netlink: 'syz.2.2596': attribute type 1 has an invalid length. [ 244.789716][ T40] audit: type=1804 audit(2000000096.404:36563): pid=14627 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2599" name="/newroot/17/file0" dev="tmpfs" ino=108 res=1 errno=0 [ 244.795322][T14626] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 244.801712][T14626] ref_ctr decrement failed for inode: 0x6c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880374d6200 [ 244.805068][T14626] uprobe: syz.1.2599:14626 failed to unregister, leaking uprobe [ 245.066867][T14634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2602'. [ 245.209747][T14637] PM: Enabling pm_trace changes system date and time during resume. [ 245.209747][T14637] PM: Correct system time has to be restored manually after resume. [ 245.376692][ T40] audit: type=1400 audit(2000000096.955:36564): avc: denied { listen } for pid=14642 comm="syz.3.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 245.382626][T14646] binder: 14645:14646 ioctl 4018620d 0 returned -22 [ 245.626438][ T5941] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 245.629662][ T5941] CPU: 1 UID: 0 PID: 5941 Comm: kworker/u33:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.629682][ T5941] Tainted: [L]=SOFTLOCKUP [ 245.629686][ T5941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 245.629695][ T5941] Workqueue: hci3 hci_rx_work [ 245.629724][ T5941] Call Trace: [ 245.629730][ T5941] [ 245.629738][ T5941] dump_stack_lvl+0x16c/0x1f0 [ 245.629760][ T5941] sysfs_warn_dup+0x7f/0xa0 [ 245.629787][ T5941] sysfs_create_dir_ns+0x24b/0x2b0 [ 245.629813][ T5941] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 245.629834][ T5941] ? find_held_lock+0x2b/0x80 [ 245.629849][ T5941] ? do_raw_spin_unlock+0x172/0x230 [ 245.629866][ T5941] kobject_add_internal+0x2c4/0x9b0 [ 245.629883][ T5941] kobject_add+0x16e/0x240 [ 245.629897][ T5941] ? __pfx_kobject_add+0x10/0x10 [ 245.629912][ T5941] ? do_raw_spin_unlock+0x172/0x230 [ 245.629929][ T5941] ? kobject_put+0xab/0x590 [ 245.629945][ T5941] device_add+0x288/0x1950 [ 245.629957][ T5941] ? __pfx_dev_set_name+0x10/0x10 [ 245.629970][ T5941] ? __pfx_device_add+0x10/0x10 [ 245.629981][ T5941] ? mgmt_send_event_skb+0x2fb/0x460 [ 245.630001][ T5941] hci_conn_add_sysfs+0x17e/0x230 [ 245.630013][ T5941] le_conn_complete_evt+0x11ed/0x1f20 [ 245.630033][ T5941] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 245.630053][ T5941] hci_le_conn_complete_evt+0x23c/0x370 [ 245.630073][ T5941] hci_le_meta_evt+0x357/0x5e0 [ 245.630083][ T5941] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 245.630101][ T5941] hci_event_packet+0x685/0x11c0 [ 245.630117][ T5941] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 245.630128][ T5941] ? __pfx_hci_event_packet+0x10/0x10 [ 245.630146][ T5941] ? kcov_remote_start+0x384/0x670 [ 245.630159][ T5941] ? lockdep_hardirqs_on+0x7c/0x110 [ 245.630174][ T5941] hci_rx_work+0x2c9/0xeb0 [ 245.630193][ T5941] process_one_work+0x9ba/0x1b20 [ 245.630214][ T5941] ? __pfx_process_one_work+0x10/0x10 [ 245.630233][ T5941] ? assign_work+0x1a0/0x250 [ 245.630248][ T5941] worker_thread+0x6c8/0xf10 [ 245.630268][ T5941] ? __kthread_parkme+0x19e/0x250 [ 245.630281][ T5941] ? __pfx_worker_thread+0x10/0x10 [ 245.630296][ T5941] kthread+0x3c5/0x780 [ 245.630310][ T5941] ? __pfx_kthread+0x10/0x10 [ 245.630325][ T5941] ? rcu_is_watching+0x12/0xc0 [ 245.630338][ T5941] ? __pfx_kthread+0x10/0x10 [ 245.630352][ T5941] ret_from_fork+0x983/0xb10 [ 245.630364][ T5941] ? __pfx_ret_from_fork+0x10/0x10 [ 245.630376][ T5941] ? rcu_is_watching+0x12/0xc0 [ 245.630388][ T5941] ? __switch_to+0x7af/0x10d0 [ 245.630402][ T5941] ? __pfx_kthread+0x10/0x10 [ 245.630416][ T5941] ret_from_fork_asm+0x1a/0x30 [ 245.630439][ T5941] [ 245.630453][ T5941] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 245.701059][T14672] overlayfs: failed to clone upperpath [ 245.704360][ T5941] Bluetooth: hci3: failed to register connection device [ 245.749622][T14672] overlayfs: failed to clone lowerpath [ 245.772643][T14674] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.022595][T14689] qrtr: Invalid version 0 [ 246.064447][ T40] audit: type=1400 audit(2000000097.591:36565): avc: denied { transfer } for pid=14690 comm="syz.3.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 246.065532][T14691] efs: Unknown parameter 'acl' [ 246.070484][ T40] audit: type=1400 audit(2000000097.591:36566): avc: denied { read } for pid=14690 comm="syz.3.2623" path="socket:[63399]" dev="sockfs" ino=63399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 246.083739][T14692] binder: BINDER_SET_CONTEXT_MGR already set [ 246.086321][T14692] binder: 14690:14692 ioctl 4018620d 200000000680 returned -16 [ 246.575464][T14709] bridge1: entered promiscuous mode [ 246.608243][T14722] netlink: 'syz.1.2627': attribute type 23 has an invalid length. [ 246.800399][ T5941] Bluetooth: hci4: command tx timeout [ 246.848741][T14748] usb usb1: usbfs: process 14748 (syz.2.2638) did not claim interface 0 before use [ 246.857268][T14748] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 246.895209][ T5941] Bluetooth: hci3: command tx timeout [ 246.923364][T14761] xt_hashlimit: max too large, truncated to 1048576 [ 247.050496][T14767] virtio-fs: tag not found [ 247.124657][T14775] tmpfs: Unknown parameter '@' [ 247.395701][ T9430] vhci_hcd: connection reset by peer [ 247.397976][ T7092] vhci_hcd: stop threads [ 247.397995][ T7092] vhci_hcd: release socket [ 247.401100][ T7092] vhci_hcd: disconnect device [ 247.441050][ T40] audit: type=1400 audit(2000000098.882:36567): avc: denied { read write } for pid=14791 comm="syz.2.2654" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 247.441428][ T40] audit: type=1400 audit(2000000098.882:36568): avc: denied { open } for pid=14791 comm="syz.2.2654" path="/25/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 247.472860][ T24] vhci_hcd: vhci_device speed not set [ 247.560504][ T5295] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 247.566691][ T5295] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.572067][ T5295] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.577128][ T5295] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.582274][ T5295] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.602533][T14809] netlink: 'syz.2.2660': attribute type 11 has an invalid length. [ 247.626635][T14806] lo speed is unknown, defaulting to 1000 [ 247.671715][T14817] netlink: 'syz.2.2664': attribute type 9 has an invalid length. [ 247.736444][T14822] overlayfs: failed to resolve './file2': -2 [ 247.788751][T14806] xfrm0 speed is unknown, defaulting to 1000 [ 248.000863][T14806] chnl_net:caif_netlink_parms(): no params data found [ 248.048437][ T5295] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 248.093453][T14806] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.096648][T14806] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.099794][T14806] bridge_slave_0: entered allmulticast mode [ 248.103822][T14806] bridge_slave_0: entered promiscuous mode [ 248.110541][T14806] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.111111][T14849] fuse: Unknown parameter 'grou](00000000000000000000' [ 248.113602][T14806] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.119525][T14806] bridge_slave_1: entered allmulticast mode [ 248.123407][T14806] bridge_slave_1: entered promiscuous mode [ 248.150709][T14806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.157455][T14806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.183586][T14806] team0: Port device team_slave_0 added [ 248.188359][T14806] team0: Port device team_slave_1 added [ 248.210796][T14806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.213240][T14806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.222834][T14806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.227478][T14806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.229628][T14806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.238929][T14806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.262916][T14806] hsr_slave_0: entered promiscuous mode [ 248.265540][T14806] hsr_slave_1: entered promiscuous mode [ 248.267709][T14806] debugfs: 'hsr0' already exists in 'hsr' [ 248.269571][T14806] Cannot create hsr debugfs directory [ 248.355763][ T834] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 248.406944][T14806] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.410674][T14806] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 248.523997][ T834] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 7852, setting to 1024 [ 248.528096][ T834] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 248.531512][ T834] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.536844][T14806] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.540474][T14806] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 248.545903][ T834] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 248.548790][ T834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 248.551388][ T834] usb 7-1: Product: syz [ 248.552827][ T834] usb 7-1: Manufacturer: syz [ 248.554528][ T834] usb 7-1: SerialNumber: syz [ 248.560839][T14845] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 248.757229][T14806] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.761346][T14806] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 248.782999][ T834] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 248.787703][ T834] usb 7-1: USB disconnect, device number 24 [ 248.791401][ T834] usblp0: removed [ 248.874997][T14806] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.879385][T14806] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 249.088855][T14806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.097402][T14806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.103990][T14806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.109344][ T5295] Bluetooth: hci3: command tx timeout [ 249.111204][T14806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.138570][T14806] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.141819][T14806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.199299][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.239124][T14806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.253976][T14806] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.263011][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.265263][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.272351][ T7095] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.275450][ T7095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.439375][T14894] qnx4: unable to read the superblock [ 249.449906][T14806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.501156][T14806] veth0_vlan: entered promiscuous mode [ 249.510741][T14806] veth1_vlan: entered promiscuous mode [ 249.540954][T14806] veth0_macvtap: entered promiscuous mode [ 249.545254][T14806] veth1_macvtap: entered promiscuous mode [ 249.555313][T14806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.563479][T14806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.571055][ T7095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.574928][ T7095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.579217][ T7095] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.583234][ T7095] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.632350][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.641521][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.671002][ T7095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.673915][ T7095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.759969][T14905] overlayfs: missing 'lowerdir' [ 249.793514][ T5295] Bluetooth: hci2: command tx timeout [ 249.831779][T14907] __nla_validate_parse: 12 callbacks suppressed [ 249.831799][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2684'. [ 249.838625][T14907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2684'. [ 249.849065][T14907] geneve2: entered promiscuous mode [ 249.851069][T14907] geneve2: entered allmulticast mode [ 249.930468][T14915] 9pnet_virtio: no channels available for device syz [ 250.066571][T14921] netlink: 'syz.3.2690': attribute type 1 has an invalid length. [ 250.070491][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2690'. [ 250.181247][T14930] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2693'. [ 250.491979][T14947] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 250.494884][T14947] SELinux: failed to load policy [ 250.587390][T14960] netlink: 'syz.2.2703': attribute type 4 has an invalid length. [ 250.590754][T14960] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2703'. [ 250.601295][T14960] netlink: 'syz.2.2703': attribute type 4 has an invalid length. [ 250.604608][T14960] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2703'. [ 250.609935][ T40] audit: type=1400 audit(2000000101.836:36569): avc: denied { nosuid_transition } for pid=14954 comm="syz.3.2702" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 250.611224][T14960] netlink: 'syz.2.2703': attribute type 4 has an invalid length. [ 250.617050][ T40] audit: type=1400 audit(2000000101.836:36570): avc: denied { transition } for pid=14954 comm="syz.3.2702" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=68180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 250.622297][T14960] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2703'. [ 250.632696][ T40] audit: type=1400 audit(2000000101.836:36571): avc: denied { entrypoint } for pid=14954 comm="syz.3.2702" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=68180 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 250.634154][T14960] netlink: 'syz.2.2703': attribute type 4 has an invalid length. [ 250.643757][ T40] audit: type=1400 audit(2000000101.836:36572): avc: denied { share } for pid=14954 comm="syz.3.2702" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 250.646869][T14960] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2703'. [ 250.654073][ T40] audit: type=1400 audit(2000000101.836:36573): avc: denied { noatsecure } for pid=14954 comm="syz.3.2702" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 250.659465][T14960] netlink: 'syz.2.2703': attribute type 4 has an invalid length. [ 250.669565][T14960] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2703'. [ 250.674194][T14960] netlink: 'syz.2.2703': attribute type 4 has an invalid length. [ 250.677411][T14960] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2703'. [ 250.681601][T14960] netlink: 'syz.2.2703': attribute type 4 has an invalid length. [ 250.685232][T14960] netlink: 'syz.2.2703': attribute type 4 has an invalid length. [ 250.690694][T14965] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.694136][T14965] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.713802][ T40] audit: type=1400 audit(2000000101.939:36574): avc: denied { setopt } for pid=14962 comm="syz.0.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 250.957020][T14979] binder: 14978:14979 ioctl c0306201 200000000240 returned -11 [ 250.974151][T14982] gfs2: error -5 reading superblock [ 251.167102][ T40] audit: type=1400 audit(2000000102.360:36575): avc: denied { remount } for pid=14991 comm="syz.2.2712" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 251.229307][T14994] bond1: peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 251.238701][T14994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.733924][T15026] blktrace: Concurrent blktraces are not allowed on sg0 [ 251.755007][T15017] hsr_slave_1 (unregistering): left promiscuous mode [ 251.813707][T15022] cgroup: No subsys list or none specified [ 251.908805][T15030] comedi comedi0: Minor 3 specified more than once! [ 251.912352][T15031] comedi comedi0: Minor 3 specified more than once! [ 251.983645][ T40] audit: type=1400 audit(2000000103.117:36576): avc: denied { setopt } for pid=15033 comm="syz.3.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 252.017907][ T5295] Bluetooth: hci2: command tx timeout [ 252.060955][T15043] f2fs: Unknown parameter 'aclinderfs/binder0' [ 252.061078][ T40] audit: type=1400 audit(2000000103.202:36577): avc: denied { lock } for pid=15038 comm="syz.2.2723" path="socket:[66128]" dev="sockfs" ino=66128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 252.254130][T15052] xt_socket: unknown flags 0x20 [ 252.677504][T15082] program syz.3.2739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.895916][T15086] xt_hashlimit: max too large, truncated to 1048576 [ 253.246301][T15123] binder: 15122:15123 ioctl c0306201 200000000240 returned -11 [ 253.524600][ T5295] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 253.529299][ T5295] CPU: 2 UID: 0 PID: 5295 Comm: kworker/u33:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.529330][ T5295] Tainted: [L]=SOFTLOCKUP [ 253.529337][ T5295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 253.529350][ T5295] Workqueue: hci2 hci_rx_work [ 253.529399][ T5295] Call Trace: [ 253.529406][ T5295] [ 253.529412][ T5295] dump_stack_lvl+0x16c/0x1f0 [ 253.529442][ T5295] sysfs_warn_dup+0x7f/0xa0 [ 253.529474][ T5295] sysfs_create_dir_ns+0x24b/0x2b0 [ 253.529496][ T5295] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 253.529519][ T5295] ? find_held_lock+0x2b/0x80 [ 253.529543][ T5295] ? do_raw_spin_unlock+0x172/0x230 [ 253.529572][ T5295] kobject_add_internal+0x2c4/0x9b0 [ 253.529600][ T5295] kobject_add+0x16e/0x240 [ 253.529621][ T5295] ? __pfx_kobject_add+0x10/0x10 [ 253.529644][ T5295] ? do_raw_spin_unlock+0x172/0x230 [ 253.529671][ T5295] ? kobject_put+0xab/0x590 [ 253.529697][ T5295] device_add+0x288/0x1950 [ 253.529716][ T5295] ? __pfx_dev_set_name+0x10/0x10 [ 253.529736][ T5295] ? __pfx_device_add+0x10/0x10 [ 253.529753][ T5295] ? mgmt_send_event_skb+0x2fb/0x460 [ 253.529796][ T5295] hci_conn_add_sysfs+0x17e/0x230 [ 253.529816][ T5295] le_conn_complete_evt+0x11ed/0x1f20 [ 253.529849][ T5295] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 253.529882][ T5295] hci_le_conn_complete_evt+0x23c/0x370 [ 253.529913][ T5295] hci_le_meta_evt+0x357/0x5e0 [ 253.529927][ T5295] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 253.529956][ T5295] hci_event_packet+0x685/0x11c0 [ 253.529983][ T5295] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 253.530002][ T5295] ? __pfx_hci_event_packet+0x10/0x10 [ 253.530031][ T5295] ? kcov_remote_start+0x384/0x670 [ 253.530053][ T5295] ? lockdep_hardirqs_on+0x7c/0x110 [ 253.530077][ T5295] hci_rx_work+0x2c9/0xeb0 [ 253.530106][ T5295] process_one_work+0x9ba/0x1b20 [ 253.530141][ T5295] ? __pfx_process_one_work+0x10/0x10 [ 253.530172][ T5295] ? assign_work+0x1a0/0x250 [ 253.530260][ T5295] worker_thread+0x6c8/0xf10 [ 253.530297][ T5295] ? __pfx_worker_thread+0x10/0x10 [ 253.530345][ T5295] kthread+0x3c5/0x780 [ 253.530369][ T5295] ? __pfx_kthread+0x10/0x10 [ 253.530390][ T5295] ? rcu_is_watching+0x12/0xc0 [ 253.530411][ T5295] ? __pfx_kthread+0x10/0x10 [ 253.530435][ T5295] ret_from_fork+0x983/0xb10 [ 253.530454][ T5295] ? __pfx_ret_from_fork+0x10/0x10 [ 253.530474][ T5295] ? __switch_to+0x7af/0x10d0 [ 253.530495][ T5295] ? __pfx_kthread+0x10/0x10 [ 253.530517][ T5295] ret_from_fork_asm+0x1a/0x30 [ 253.530562][ T5295] [ 253.530620][ T5295] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 253.642179][ T5295] Bluetooth: hci2: failed to register connection device [ 253.700037][T15154] bond1 (unregistering): Released all slaves [ 253.897025][T15173] @: renamed from vlan0 (while UP) [ 254.238390][ T40] audit: type=1400 audit(2000000105.231:36578): avc: denied { connect } for pid=15185 comm="syz.3.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 254.242922][ T5295] Bluetooth: hci2: command tx timeout [ 254.276858][T15184] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 255.147711][T15227] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 255.214517][T15233] veth0: entered promiscuous mode [ 255.222165][T15233] __nla_validate_parse: 65 callbacks suppressed [ 255.222180][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2779'. [ 255.322079][T15235] nfs4: Bad value for 'source' [ 255.658272][T15263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2785'. [ 255.729589][T15263] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15263 comm=syz.1.2785 [ 255.781778][T15266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2790'. [ 255.845367][ T7155] libceph: connect (1)[c::]:6789 error -101 [ 255.848904][ T7155] libceph: mon0 (1)[c::]:6789 connect error [ 256.038605][T15281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2793'. [ 256.137480][ T7155] libceph: connect (1)[c::]:6789 error -101 [ 256.140830][ T7155] libceph: mon0 (1)[c::]:6789 connect error [ 256.322153][T15288] validate_nla: 57 callbacks suppressed [ 256.322164][T15288] netlink: 'syz.3.2796': attribute type 1 has an invalid length. [ 256.327021][T15288] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2796'. [ 256.466834][ T5295] Bluetooth: hci2: command tx timeout [ 256.620848][ T40] audit: type=1400 audit(2000000107.465:36579): avc: denied { getopt } for pid=15292 comm="syz.3.2798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 256.681135][ T902] libceph: connect (1)[c::]:6789 error -101 [ 256.684261][ T902] libceph: mon0 (1)[c::]:6789 connect error [ 256.727483][T15301] batman_adv: batadv0: Adding interface: vlan0 [ 256.729712][T15301] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.739370][T15301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.743889][T15301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.747659][T15301] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 257.205934][T15323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2807'. [ 257.378791][T15329] loop4: detected capacity change from 0 to 7 [ 257.394360][T15329] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 257.397034][T15329] loop4: partition table partially beyond EOD, truncated [ 257.400388][T15329] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 257.421233][T15329] loop3: detected capacity change from 0 to 7 [ 257.425847][T15329] Dev loop3: unable to read RDB block 7 [ 257.428507][T15329] loop3: unable to read partition table [ 257.431986][T15329] loop3: partition table beyond EOD, truncated [ 257.434612][T15329] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 257.472134][ T6002] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 257.655312][ T6002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.659607][ T6002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.662846][ T6002] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.667542][ T6002] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.670468][ T6002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.676580][ T6002] usb 7-1: config 0 descriptor?? [ 257.931932][ T40] audit: type=1400 audit(2000000108.681:36580): avc: denied { append } for pid=15335 comm="syz.3.2813" name="file0" dev="fuse" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 258.095969][ T7155] libceph: connect (1)[c::]:6789 error -101 [ 258.098862][ T7155] libceph: mon0 (1)[c::]:6789 connect error [ 258.112883][ T6002] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 258.573667][ T6002] usb 7-1: USB disconnect, device number 25 [ 258.734089][T15349] overlay: Bad value for 'workdir' [ 258.740161][T15349] netlink: 'syz.1.2816': attribute type 10 has an invalid length. [ 258.742853][T15349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2816'. [ 258.746541][T15349] dummy0: entered promiscuous mode [ 258.751081][T15349] bridge0: port 3(dummy0) entered blocking state [ 258.753329][T15349] bridge0: port 3(dummy0) entered disabled state [ 258.756371][T15349] dummy0: entered allmulticast mode [ 258.762169][T15349] bridge0: port 3(dummy0) entered blocking state [ 258.764293][T15349] bridge0: port 3(dummy0) entered forwarding state [ 258.856462][ T40] audit: type=1400 audit(2000000109.551:36581): avc: denied { unlink } for pid=15352 comm="syz.1.2818" name="file0" dev="9p" ino=72095689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 258.961168][T14334] overlayfs: failed lookup in lower (newroot/54, name='bus', err=-40): overlapping layers [ 258.966419][T14334] overlayfs: failed lookup in lower (newroot/54, name='bus', err=-40): overlapping layers [ 259.025479][T15269] ceph: No mds server is up or the cluster is laggy [ 259.212862][T15361] overlayfs: conflicting lowerdir path [ 259.223959][T15361] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2822'. [ 259.226888][T15363] tmpfs: Bad value for 'gid' [ 259.229864][T15363] tmpfs: Bad value for 'gid' [ 259.492209][T15375] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 259.508380][T15377] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 259.569474][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2829'. [ 259.576467][T15380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2828'. [ 259.780574][T15387] netlink: 'syz.2.2832': attribute type 10 has an invalid length. [ 259.908370][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.913242][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.916292][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.920589][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.923776][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.962568][T15393] lo speed is unknown, defaulting to 1000 [ 260.071536][T15393] xfrm0 speed is unknown, defaulting to 1000 [ 260.234437][T15414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15414 comm=syz.3.2838 [ 260.266547][T15393] chnl_net:caif_netlink_parms(): no params data found [ 260.359834][T15393] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.363164][T15393] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.366408][T15393] bridge_slave_0: entered allmulticast mode [ 260.370791][T15393] bridge_slave_0: entered promiscuous mode [ 260.376207][T15393] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.379463][T15393] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.382942][T15393] bridge_slave_1: entered allmulticast mode [ 260.386877][T15393] bridge_slave_1: entered promiscuous mode [ 260.416894][T15393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.424898][T15393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.453880][T15393] team0: Port device team_slave_0 added [ 260.459294][T15393] team0: Port device team_slave_1 added [ 260.485078][T15393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.488478][T15393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.500109][T15393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.506549][T15393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.510544][T15393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.521723][T15393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.565472][T15393] hsr_slave_0: entered promiscuous mode [ 260.568800][T15393] hsr_slave_1: entered promiscuous mode [ 260.571760][T15393] debugfs: 'hsr0' already exists in 'hsr' [ 260.574643][T15393] Cannot create hsr debugfs directory [ 260.805758][T15428] __nla_validate_parse: 2 callbacks suppressed [ 260.805776][T15428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2842'. [ 260.821279][T15428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2842'. [ 260.825733][T15430] overlayfs: failed to resolve './file1/file0': -2 [ 260.832269][T15393] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 260.854986][T15393] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 260.861633][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2842'. [ 260.866095][T15432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2842'. [ 260.869185][T15393] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 260.871220][T15432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2842'. [ 260.876853][T15432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2842'. [ 260.880899][T15432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2842'. [ 260.906400][T15393] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 260.911691][T15435] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2844'. [ 261.066737][T15393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.085107][T15393] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.098027][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.101237][ T7092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.110052][ T7092] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.113138][ T7092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.228907][T15459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2849'. [ 261.283241][T15393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.286504][T15462] comedi comedi3: dt2817: I/O port conflict (0x9,5) [ 261.394273][T15467] 9pnet: Could not find request transport: v [ 261.417633][T15471] 9pnet: Could not find request transport: v [ 261.505599][T15393] veth0_vlan: entered promiscuous mode [ 261.513774][T15393] veth1_vlan: entered promiscuous mode [ 261.540772][T15393] veth0_macvtap: entered promiscuous mode [ 261.547483][T15393] veth1_macvtap: entered promiscuous mode [ 261.561020][T15393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.569002][T15393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.574645][T13348] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.578074][T13348] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.582682][T13348] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.586000][T13348] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.634728][ T8205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.642941][ T8205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.661479][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.664218][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.932963][ T40] audit: type=1400 audit(2000000112.431:36582): avc: denied { getopt } for pid=15487 comm="syz.3.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 262.114009][ T5295] Bluetooth: hci0: command tx timeout [ 262.152218][T15514] netlink: 'syz.3.2864': attribute type 10 has an invalid length. [ 262.153105][T15513] netlink: 'syz.3.2864': attribute type 10 has an invalid length. [ 262.155714][T15514] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2864'. [ 262.159498][T15513] batadv0: entered allmulticast mode [ 262.169320][T15513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.173127][T15513] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 262.176260][T15514] batadv0: entered promiscuous mode [ 262.189471][T15514] bond0: (slave batadv0): Releasing backup interface [ 262.221621][T15520] 9pnet_fd: p9_fd_create_tcp (15520): problem connecting socket to 127.0.0.1 [ 262.234467][T15514] bridge0: port 3(batadv0) entered blocking state [ 262.237583][T15514] bridge0: port 3(batadv0) entered disabled state [ 262.289693][ T5295] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 262.416627][T15533] overlayfs: failed to decode file handle (len=1, type=0, flags=0, err=-22) [ 262.626924][ T902] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 262.627162][ T61] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 262.635399][ T61] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 262.804412][ T902] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 262.809985][ T902] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 262.814502][ T902] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.826285][ T902] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 262.830239][ T902] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.835419][ T902] usb 9-1: Product: syz [ 262.837583][ T902] usb 9-1: Manufacturer: syz [ 262.839997][ T902] usb 9-1: SerialNumber: syz [ 262.912188][ T902] hub 9-1:1.0: bad descriptor, ignoring hub [ 262.926334][ T902] hub 9-1:1.0: probe with driver hub failed with error -5 [ 262.977934][T15551] tipc: Trying to set illegal importance in message [ 262.992218][ T6004] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 262.997543][ T6004] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 263.000780][ T6004] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 263.015224][ T6004] hid-generic 0006:0004:0009.000B: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 263.091357][ T902] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 263.110100][T15554] ------------[ cut here ]------------ [ 263.112318][T15554] WARNING: arch/x86/kvm/lapic.c:3483 at kvm_apic_accept_events+0x444/0x4c0, CPU#0: syz.0.2877/15554 [ 263.116040][T15554] Modules linked in: [ 263.117338][ T40] audit: type=1400 audit(2000000113.534:36583): avc: denied { write } for pid=5922 comm="syz-executor" path="pipe:[7347]" dev="pipefs" ino=7347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 263.117781][T15554] CPU: 0 UID: 0 PID: 15554 Comm: syz.0.2877 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.129429][T15554] Tainted: [L]=SOFTLOCKUP [ 263.130859][T15554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 263.134420][T15554] RIP: 0010:kvm_apic_accept_events+0x444/0x4c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 263.136841][T15554] Code: 34 03 00 00 02 00 00 00 e9 ae fd ff ff 4c 89 ef e8 41 ea df 00 e9 33 fc ff ff e8 07 ea df 00 e9 17 fd ff ff e8 dd df 76 00 90 <0f> 0b 90 e9 24 fd ff ff e8 1f ea df 00 e9 de fb ff ff e8 e5 e9 df [ 263.143194][T15554] RSP: 0018:ffffc90004997c38 EFLAGS: 00010293 [ 263.145175][T15554] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff814721e7 [ 263.147763][T15554] RDX: ffff8880292da4c0 RSI: ffffffff814724c3 RDI: 0000000000000005 [ 263.150230][T15554] RBP: ffff88805870de00 R08: 0000000000000005 R09: 0000000000000002 [ 263.152858][T15554] R10: 0000000000000002 R11: 00000000f279ea15 R12: 0000000000000001 [ 263.155572][T15554] R13: ffff88805870dee0 R14: ffff888060208030 R15: 0000000000000001 [ 263.158472][T15554] FS: 00007f115ba816c0(0000) GS:ffff8880d6969000(0000) knlGS:0000000000000000 [ 263.161748][T15554] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.164422][T15554] CR2: 0000000000000000 CR3: 0000000050449000 CR4: 0000000000352ef0 [ 263.167533][T15554] Call Trace: [ 263.168925][T15554] [ 263.170191][T15554] kvm_arch_vcpu_ioctl_get_mpstate+0x103/0x3f0 [ 263.172965][T15554] kvm_vcpu_ioctl+0x7b8/0x1660 [ 263.175020][T15554] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 263.177250][T15554] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 263.179798][T15554] ? do_vfs_ioctl+0x128/0x14f0 [ 263.181626][T15554] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 263.183373][T15554] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 263.185604][T15554] ? hook_file_ioctl_common+0x144/0x410 [ 263.187462][T15554] ? selinux_file_ioctl+0x180/0x270 [ 263.189258][T15554] ? selinux_file_ioctl+0xb4/0x270 [ 263.190998][T15554] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 263.192768][T15554] __x64_sys_ioctl+0x18e/0x210 [ 263.194547][T15554] do_syscall_64+0xcd/0xf80 [ 263.196064][T15554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.198049][T15554] RIP: 0033:0x7f115ab8f7c9 [ 263.199565][T15554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.206446][T15554] RSP: 002b:00007f115ba81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.209208][T15554] RAX: ffffffffffffffda RBX: 00007f115ade5fa0 RCX: 00007f115ab8f7c9 [ 263.212140][T15554] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 0000000000000009 [ 263.215562][T15554] RBP: 00007f115ac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 263.218215][T15554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.220882][T15554] R13: 00007f115ade6038 R14: 00007f115ade5fa0 R15: 00007fff77ccce28 [ 263.223729][T15554] [ 263.224804][T15554] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 263.227067][T15554] CPU: 0 UID: 0 PID: 15554 Comm: syz.0.2877 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.230389][T15554] Tainted: [L]=SOFTLOCKUP [ 263.231751][T15554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 263.235125][T15554] Call Trace: [ 263.236153][T15554] [ 263.237078][T15554] dump_stack_lvl+0x3d/0x1f0 [ 263.238539][T15554] vpanic+0x640/0x6f0 [ 263.239777][T15554] ? kvm_apic_accept_events+0x444/0x4c0 [ 263.241525][T15554] panic+0xca/0xd0 [ 263.242728][T15554] ? __pfx_panic+0x10/0x10 [ 263.244216][T15554] ? check_panic_on_warn+0x1f/0xb0 [ 263.245882][T15554] check_panic_on_warn+0xab/0xb0 [ 263.247571][T15554] __warn+0x108/0x3c0 [ 263.249269][T15554] __report_bug+0x2a0/0x520 [ 263.251248][T15554] ? kvm_apic_accept_events+0x444/0x4c0 [ 263.253532][T15554] ? __pfx___report_bug+0x10/0x10 [ 263.255638][T15554] ? __pfx___might_resched+0x10/0x10 [ 263.257891][T15554] ? kvm_apic_accept_events+0x444/0x4c0 [ 263.260198][T15554] report_bug+0xb2/0x220 [ 263.262005][T15554] ? kvm_apic_accept_events+0x444/0x4c0 [ 263.264239][T15554] handle_bug+0x127/0x260 [ 263.266073][T15554] exc_invalid_op+0x17/0x50 [ 263.267997][T15554] asm_exc_invalid_op+0x1a/0x20 [ 263.270090][T15554] RIP: 0010:kvm_apic_accept_events+0x444/0x4c0 [ 263.272070][T15554] Code: 34 03 00 00 02 00 00 00 e9 ae fd ff ff 4c 89 ef e8 41 ea df 00 e9 33 fc ff ff e8 07 ea df 00 e9 17 fd ff ff e8 dd df 76 00 90 <0f> 0b 90 e9 24 fd ff ff e8 1f ea df 00 e9 de fb ff ff e8 e5 e9 df [ 263.278368][T15554] RSP: 0018:ffffc90004997c38 EFLAGS: 00010293 [ 263.280374][T15554] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff814721e7 [ 263.282927][T15554] RDX: ffff8880292da4c0 RSI: ffffffff814724c3 RDI: 0000000000000005 [ 263.285446][T15554] RBP: ffff88805870de00 R08: 0000000000000005 R09: 0000000000000002 [ 263.288177][T15554] R10: 0000000000000002 R11: 00000000f279ea15 R12: 0000000000000001 [ 263.290877][T15554] R13: ffff88805870dee0 R14: ffff888060208030 R15: 0000000000000001 [ 263.293535][T15554] ? kvm_apic_accept_events+0x167/0x4c0 [ 263.295842][T15554] ? kvm_apic_accept_events+0x443/0x4c0 [ 263.298199][T15554] ? kvm_apic_accept_events+0x443/0x4c0 [ 263.300056][T15554] kvm_arch_vcpu_ioctl_get_mpstate+0x103/0x3f0 [ 263.301880][T15554] kvm_vcpu_ioctl+0x7b8/0x1660 [ 263.303302][T15554] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 263.304814][T15554] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 263.306547][T15554] ? do_vfs_ioctl+0x128/0x14f0 [ 263.307962][T15554] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 263.309619][T15554] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 263.312406][T15554] ? hook_file_ioctl_common+0x144/0x410 [ 263.314889][T15554] ? selinux_file_ioctl+0x180/0x270 [ 263.317166][T15554] ? selinux_file_ioctl+0xb4/0x270 [ 263.319387][T15554] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 263.321746][T15554] __x64_sys_ioctl+0x18e/0x210 [ 263.323768][T15554] do_syscall_64+0xcd/0xf80 [ 263.325768][T15554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.328277][T15554] RIP: 0033:0x7f115ab8f7c9 [ 263.330195][T15554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.336509][T15554] RSP: 002b:00007f115ba81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.339174][T15554] RAX: ffffffffffffffda RBX: 00007f115ade5fa0 RCX: 00007f115ab8f7c9 [ 263.341779][T15554] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 0000000000000009 [ 263.344574][T15554] RBP: 00007f115ac13f91 R08: 0000000000000000 R09: 0000000000000000 [ 263.347136][T15554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.349677][T15554] R13: 00007f115ade6038 R14: 00007f115ade5fa0 R15: 00007fff77ccce28 [ 263.352259][T15554] [ 263.353990][T15554] Kernel Offset: disabled [ 263.355366][T15554] Rebooting in 86400 seconds..