last executing test programs: 1m10.539557012s ago: executing program 3 (id=98): writev(0xffffffffffffffff, &(0x7f0000000000), 0x41) 1m10.476260412s ago: executing program 3 (id=99): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000240)='resize', 0x0, r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x1, r4, 0xff, 0x7, 0x40000a, 0x1ff}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0xfff1, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1446}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 1m10.475675677s ago: executing program 3 (id=100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x11) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa0645c04a4f3ac71, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4, 0x5, 0x0, 0x7}, {0xff, 0x81, 0x9f, 0x4}, {0xfff, 0xa, 0xff, 0x2}, {0x7, 0x1, 0x10, 0x1}]}) 1m10.415585195s ago: executing program 3 (id=101): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd700000dcdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="30003300c0100d0008021100000108"], 0x50}, 0x1, 0x0, 0x0, 0x20040080}, 0x2c048010) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000007, {0x8000000000000040, 0xd08, 0xffffffffffffffff, 0x100, 0x84, 0x7, 0xa, 0x0, 0x11f, 0x6000, 0x10000, 0x0, r6, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300), 0x199010, 0x0) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r7 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mkdirat(r7, &(0x7f0000000340)='./file0\x00', 0xf3) setsockopt(r7, 0x5, 0x6, &(0x7f00000004c0)="b31b035633ab412efccc9fb0205172f62880b129914b4dda29cc7584e0dffaff45d221dd0e6db2c3cd925750d796fea7235044a2abd116091ed9c0ea90f7500b164a34394f89e6c76b3f6d38116336ec45eb95bcba2b3bfa38cb775ee10079c448ffcd8d05fd650b1f71bff0509a7894b923ce81ab9d76b3f26f74e63583466e0e5531b47d1b857a75c9d2ee779637558509114c38fe6b4b60c035fc96f489f38c606c3778527420f00455", 0xab) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007600090700000000000000000702e1ff", @ANYRES32=0x0, @ANYBLOB="0c000d80080003"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r9, 0x932, 0x200000000005) close_range(r0, 0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002480)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd700000dcdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="30003300c0100d0008021100000108"], 0x50}, 0x1, 0x0, 0x0, 0x20040080}, 0x2c048010) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) (async) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000007, {0x8000000000000040, 0xd08, 0xffffffffffffffff, 0x100, 0x84, 0x7, 0xa, 0x0, 0x11f, 0x6000, 0x10000, 0x0, r6, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300), 0x199010, 0x0) (async) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) (async) mkdirat(r7, &(0x7f0000000340)='./file0\x00', 0xf3) (async) setsockopt(r7, 0x5, 0x6, &(0x7f00000004c0)="b31b035633ab412efccc9fb0205172f62880b129914b4dda29cc7584e0dffaff45d221dd0e6db2c3cd925750d796fea7235044a2abd116091ed9c0ea90f7500b164a34394f89e6c76b3f6d38116336ec45eb95bcba2b3bfa38cb775ee10079c448ffcd8d05fd650b1f71bff0509a7894b923ce81ab9d76b3f26f74e63583466e0e5531b47d1b857a75c9d2ee779637558509114c38fe6b4b60c035fc96f489f38c606c3778527420f00455", 0xab) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007600090700000000000000000702e1ff", @ANYRES32=0x0, @ANYBLOB="0c000d80080003"], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) (async) ioctl$TIOCGPTPEER(r9, 0x932, 0x200000000005) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1m10.228619339s ago: executing program 3 (id=104): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) prctl$PR_SET_THP_DISABLE(0x29, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x1c, &(0x7f0000000000)=0xc, 0x0, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="140012800b0001006d6163736563"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1m8.944779241s ago: executing program 3 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18bc0000009500004000"/21], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x20, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_uring_setup(0x5d2d, &(0x7f00000002c0)={0x0, 0x43d3, 0x400, 0x2, 0x235}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x53e) accept$inet(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x11c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x4}}}, @qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x8001, 0x401, 0x1000, 0x0, 0x22c8, 0x9}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0xfffffffffffffffd, 0x9, 0xfff, 0x9, 0x10}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xe, 0x4}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x3}]}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x97, 0x2, 0xfff7, 0x8, 0x1, 0x8, 0x6, 0x5}}, {0xe, 0x2, [0x0, 0x8, 0x13, 0x1, 0x2]}}, {{0x1c, 0x1, {0x0, 0x5, 0x9f, 0x2, 0x2, 0xff, 0x7fffffff, 0x7}}, {0x12, 0x2, [0x5, 0x81, 0x1, 0x99, 0xd3, 0x401, 0x7]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8c26}]}, 0x11c}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') socket$kcm(0x10, 0x2, 0x4) 1m8.894876435s ago: executing program 32 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18bc0000009500004000"/21], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x20, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_uring_setup(0x5d2d, &(0x7f00000002c0)={0x0, 0x43d3, 0x400, 0x2, 0x235}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x53e) accept$inet(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x11c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x4}}}, @qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x8001, 0x401, 0x1000, 0x0, 0x22c8, 0x9}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0xfffffffffffffffd, 0x9, 0xfff, 0x9, 0x10}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xe, 0x4}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x3}]}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x97, 0x2, 0xfff7, 0x8, 0x1, 0x8, 0x6, 0x5}}, {0xe, 0x2, [0x0, 0x8, 0x13, 0x1, 0x2]}}, {{0x1c, 0x1, {0x0, 0x5, 0x9f, 0x2, 0x2, 0xff, 0x7fffffff, 0x7}}, {0x12, 0x2, [0x5, 0x81, 0x1, 0x99, 0xd3, 0x401, 0x7]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8c26}]}, 0x11c}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') socket$kcm(0x10, 0x2, 0x4) 54.973478939s ago: executing program 1 (id=264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x13c}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0x1ef, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfd, 0x9, 0x1900}}, 0x1c}, 0x1, 0x11}, 0x80010) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x5}, 0x50) 54.915539618s ago: executing program 1 (id=265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_open_procfs(r1, &(0x7f0000000080)='fdinfo/3\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x340, 0x340, 0x270, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0xfffc, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'vlan1\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x1d, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) pread64(r2, &(0x7f0000002c00)=""/4082, 0xff2, 0x7fffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) fstat(r2, &(0x7f0000000000)) 54.825775422s ago: executing program 1 (id=266): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x7, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x4022, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x141200) ioctl$DVB_DEMUX_DMX_GET_STC(r1, 0xc0106f32, &(0x7f0000000040)={0xfffffffc}) close(r1) syz_emit_ethernet(0x53, &(0x7f0000000100)={@remote, @broadcast, @void, {@llc={0x4, {@snap={0xab, 0xaa, "10", "46e8f8", 0x2, "d69b2f138c3360b78c4a4b781a1788ecb0f07399125427ad564f458953ce0f08cdbcb7f3eae9a7bc39b9e7eb5ecec9a6ece5a1c0d42301f16f26462046"}}}}}, &(0x7f0000000080)={0x1, 0x2, [0xcae, 0xa88, 0x32d, 0x6f0]}) (async) syz_emit_ethernet(0x53, &(0x7f0000000100)={@remote, @broadcast, @void, {@llc={0x4, {@snap={0xab, 0xaa, "10", "46e8f8", 0x2, "d69b2f138c3360b78c4a4b781a1788ecb0f07399125427ad564f458953ce0f08cdbcb7f3eae9a7bc39b9e7eb5ecec9a6ece5a1c0d42301f16f26462046"}}}}}, &(0x7f0000000080)={0x1, 0x2, [0xcae, 0xa88, 0x32d, 0x6f0]}) 54.193696265s ago: executing program 0 (id=271): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0xa, 0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x48200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x10, 0x1f, 0x46}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x13}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0xff, 0x1, 0x2f04}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000005c0)={0x49, 0x8402, 0x2}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = gettid() ptrace$peeksig(0x4209, r7, &(0x7f00000002c0)={0xf1, 0x0, 0x6}, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}]) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x9, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x2, 0x5, 0x80000000000, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0x1, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x6, 0x1}) syz_io_uring_setup(0x6475, &(0x7f0000000100)={0x0, 0x2781, 0xc2, 0x1, 0x1db}, &(0x7f00000001c0), &(0x7f0000000240)) 54.065377951s ago: executing program 0 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@request_death, @release], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0xfff2}}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x8, 0x1, 0x8, 0x12, 0x1, 0x4, 0x8369, [{0x9, 0x400, 0x6, 0xec6}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) 53.966010006s ago: executing program 1 (id=275): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400c0, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = syz_clone(0x30a400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) recvmsg$can_raw(r4, &(0x7f0000000540)={&(0x7f00000002c0)=@un=@abs, 0x80, &(0x7f0000000480)=[{&(0x7f0000000400)=""/114, 0x72}], 0x1, &(0x7f0000000500)}, 0x10002) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0xfffffffd, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xfffffffffffffff7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x4) 53.9053229s ago: executing program 0 (id=276): r0 = socket(0x2c, 0x803, 0x800001) r1 = syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0x3ccc, 0x400, 0x2, 0x12}, &(0x7f0000000d00)=0x0, &(0x7f0000000480)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x114, &(0x7f0000000180)=0xfffffffb, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r4], 0x1}) io_uring_enter(r1, 0x27b9, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffe8b}, 0x1, 0x0, 0x0, 0x40080}, 0xc010) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b63, 0x4) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000390400000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="01980000020800001800128008000100677265000c00028008000700ac141429"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100039040200"/20, @ANYRES32=r5, @ANYBLOB="40100000280012d1ce8008000100677265001c00028008000700ac1414aae39b141cff0700fa05000f7a7191c33806000000fde7ec8a880000f5d45b07073925f00000"], 0x48}}, 0x4040000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093", 0x3d}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000b00)='./file0\x00', 0x0, 0x8d0000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000600)="611c709c55b21b4a4579450aff3eca07dfedb10668917d2a3ddbc3e3b652e2f9183d9bf4d7f5f426bb9bfd8550a56783e77a291af5e73cbe32e635921b6c87ebee35cf7784c6190033227be0b0ac2b10cd902f6ba37594833de3fe85e8fb5beee63b048c699de11208b72634cfd2117782e2600fe7efb736bbff379c3a29874c4f235e8e25551a1441", 0x89}, {&(0x7f0000000540)="e8546c830c484bcf821dc8340be7092395126c28a6c897848737d5611047e6036c27e8cc16ae37ed77232e6eb8584bb4b8b3c3f8992a11391f9fac4a0e34734441e825c81bb19f3b880a0195bbbe2909815f9ad468398121d31a5d63104a29a96758520565a8d73340d2cab3", 0x6c}, {&(0x7f0000000780)="5b119b538eeb56b01999eec0c7b237c5bb0d613639a98b8f3b0e218b78cae42db33e81cef5c5c6d934ae4cced44b5662217356a109219737f86e402645a6491ec5c89bd7446cb6760b07c8ceffba07ffe7bee020125ec6898f7b31d2ecb21826c763cd78a09431e7c6c26e91f1ede55b5de0f0697950d010864b81a4232a68f42ad0e77e72cb13dff517cdd2a956fb121ea8a0752f472c", 0x97}, {&(0x7f00000006c0)="ce357f03fdc11a412a806d8643069a2cf031a56c13ca13004d6c95bd92feed8e94964808a9a49309f7b636b06c58dd6cfe1b125c7a0574a041f2bd87ad02c625d77bc1f080d61e0fb85933ce7d74c05c0b5ede3fe72ab1471f2bea12c717107bb01e9cf8a2b43c4eab114234", 0x6c}, {&(0x7f0000000880)="0f0fe8aae7946b50f19c24e54942237ade76be32ffa496ba8713e513a678e00e757f93d5230c737992c0590b8942d2c1c4a8d0338fb4cae85653942890c275885b1a67b45306a9e0d1789c61a588261360b9e41945334c09e6fdaa27f14b7790f80caefd298edc097eb6b072b8d2cddb9db863b8ac88e3e0ae8557ec61caf92a7c32bd6256119d87453d6f6a6100e35779dde7d2dc7876f3ce55cb86fcd85ba114e163b8bde6fb47023d866e54c2489203cad144ad243affe2d25ee417a0f30dd57d4bcd0308e140ce327f", 0xcb}, {&(0x7f0000000980)="cbe602c2193054b7a5815cf4ae76c9cff8d148429fafcdd789f9b4212482d9a615f94893e0c0ee87cd2e1d6f07f701c1ff04889fde8c5451ee68f5026f0adc5f70ebeaafbc33b91b08af91d9c2ec00fb4146a6d21abb3a221fe1ade7adba7cdffa02e18fddf7e66e361de0ea125e703219050297728302d1c8f9188bb02f893b2775601eca43d1ea61bb7b250687b756a1c001208196500bef5a6b1c3754b3818786b1848478e257411a8b4cac753892067b286c8dae0e0fa957374f8f798498c3686ba37864ab75d666231c81db20d80cea2048", 0xd4}], 0x6, &(0x7f0000000540)=ANY=[], 0x290}}], 0x1, 0x810) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000c00)="ebe3a0e9796cfd0600e299f4e376fdba128217083adae624d83ab111951c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730489bce7c8904c589ffaf8d981fe7e736f9e5f860ab38207636c0343cddea06c118adbe90a8f08497499a03c1671d22930b3b11402e99071a7b38f0a0570e406d1dde111f7d3c0cd52426874295b621336bb60e16a42acee58f00", 0xa6}, {&(0x7f0000000d40)="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"/276, 0x114}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0xfffffe01}], 0x18, 0x24008010}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) 53.905010912s ago: executing program 1 (id=277): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xa40, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r1 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1[\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\x00\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0\xber\xa6\xec\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\x13]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xcd\xf0\xad\x97uh\xb2\xb8\x17S~R\x19\xa9\xc3x\xb8l\xed\xbdz#6\x9f\x94\xba[xC\xed\x12}f\x0f\xc5', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000007b1148000000000085000000c4000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) fallocate(r1, 0x0, 0x0, 0x400001) close(0x3) 53.776214819s ago: executing program 0 (id=278): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2058) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, r2, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r3, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x0, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x80000000, 0x4, 0x4, 0x4, 0x2000, 0x101, r3, r4, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) mount$overlay(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x4, 0x0) setpgid(0x0, r0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./bus\x00') 53.686058349s ago: executing program 0 (id=279): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) pipe(&(0x7f0000000300)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4080, 0xff0}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0xc840) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002300)={0x6, 0x11, &(0x7f0000001100)=ANY=[@ANYBLOB="180000000200000000000000ff01000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000a2030000000000008500000083000000bf0900400000000055090100000000009500000000000000183500000400000000000000d985cffa6c73a771fb000000b7020006020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1000, &(0x7f0000001300)=""/4096, 0x1f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0x9, 0xa5b7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001240)=[r2, r1, r2, r1, r2, r2], &(0x7f0000001280), 0x10, 0x6}, 0xfffffffffffffff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002400)={{r1}, &(0x7f0000000000), &(0x7f00000023c0)=r4}, 0x20) 53.625584679s ago: executing program 1 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf250f00000008000300428d64622477949c04ec651ea3a89cebb0bab2675d04986641e132da55543db6d21530d7cc70625ebaec8f78b7ebacc4b8f6e1cb43e9a721e20c53c1c3300642492ab2966fbfd269eb0a6c6fadd08978299636cbe5dfa79410e8562bc500000000000000", @ANYRES32=r2, @ANYBLOB="08002b0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x64, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xef3, 0x72}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_4ADDR={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x28008041) 53.592165367s ago: executing program 33 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf250f00000008000300428d64622477949c04ec651ea3a89cebb0bab2675d04986641e132da55543db6d21530d7cc70625ebaec8f78b7ebacc4b8f6e1cb43e9a721e20c53c1c3300642492ab2966fbfd269eb0a6c6fadd08978299636cbe5dfa79410e8562bc500000000000000", @ANYRES32=r2, @ANYBLOB="08002b0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x64, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xef3, 0x72}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_4ADDR={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x28008041) 53.518406727s ago: executing program 0 (id=282): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x30, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = syz_io_uring_setup(0x43e, &(0x7f0000000000)={0x0, 0xfb0f, 0x800, 0x3, 0x3a6}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) (async, rerun: 32) r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) (async) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000180)={0x3, {0x5, 0x8, 0x2921576, 0x6}}) (async) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000200)={0x100, 0x10000, 0x3, 0x10001, 0x3, 0x200}) (async) r6 = fcntl$getown(r1, 0x9) capset(&(0x7f0000000240)={0x20080522, r6}, &(0x7f0000000280)={0x5339, 0xc, 0x88, 0x1, 0xbc, 0x1}) (async) r7 = fsmount(0xffffffffffffffff, 0x0, 0x3) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r7, 0xc0106441, &(0x7f00000002c0)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r7, 0xc0186445, &(0x7f0000000300)={0x3, 0x2, r8}) (async) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f0000000340)=0x4548) (async) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000380)={0x2, 0x3, 0x0, {0xe, 0x2, 0x10, 0x8000}}) capset(&(0x7f00000003c0)={0x19980330, r6}, &(0x7f0000000400)={0x8, 0x7fffffff, 0xb39, 0x5, 0x400, 0xfff}) (async) ptrace$pokeuser(0x6, r6, 0x2, 0xc041) (async, rerun: 32) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000440)="31ee0f217f006219f3a50f01f666b8060000000f23d00f21f86635000000050f23f8baf80c66b8a2e2d18266efbafc0cb80000efb825000f00d8640f01c43ed2f2", 0x41}], 0x1, 0x78, &(0x7f0000000500), 0x0) (async, rerun: 32) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r9, 0x80dc5521, &(0x7f0000000580)=""/234) (async) lgetxattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@random={'osx.', '{[}{,\x00'}, &(0x7f0000000700)=""/186, 0xba) (async) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000840)=[@text64={0x40, &(0x7f00000007c0)="400fcd64420f2de6b9800000c00f3235000400000f30f30fc734c467400f01d1c74424009f000000c744240210000080ff1c246644f466b883000f00d066b873008ee02e26260fc737", 0x49}], 0x1, 0x51, &(0x7f0000000880), 0x0) (async) io_setup(0x2a, &(0x7f00000008c0)=0x0) r12 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) io_cancel(r11, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xe0, r12, &(0x7f0000000940)="6fde3e8cf787614682d978116bdfa7fb", 0x10, 0x1f47, 0x0, 0x1, r9}, &(0x7f00000009c0)) (async, rerun: 64) sched_setattr(r6, &(0x7f0000000a00)={0x38, 0x6, 0x4, 0x2, 0x2, 0x8, 0x1, 0xdea, 0xf58, 0x8}, 0x0) (async, rerun: 64) ioctl$VIDIOC_S_DV_TIMINGS(r10, 0xc0845657, &(0x7f0000000a40)={0x0, @reserved}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000b00)={0x0, 0x0}) capset(&(0x7f0000000b80)={0x20080522, r13}, &(0x7f0000000bc0)={0xa9d, 0x705, 0xffffffff, 0x6, 0xffffffff, 0xfffffff8}) (async) mlock2(&(0x7f0000fe6000/0x4000)=nil, 0x4000, 0x1) 53.376567944s ago: executing program 34 (id=282): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x30, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = syz_io_uring_setup(0x43e, &(0x7f0000000000)={0x0, 0xfb0f, 0x800, 0x3, 0x3a6}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) (async, rerun: 32) r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) (async) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000180)={0x3, {0x5, 0x8, 0x2921576, 0x6}}) (async) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000200)={0x100, 0x10000, 0x3, 0x10001, 0x3, 0x200}) (async) r6 = fcntl$getown(r1, 0x9) capset(&(0x7f0000000240)={0x20080522, r6}, &(0x7f0000000280)={0x5339, 0xc, 0x88, 0x1, 0xbc, 0x1}) (async) r7 = fsmount(0xffffffffffffffff, 0x0, 0x3) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r7, 0xc0106441, &(0x7f00000002c0)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r7, 0xc0186445, &(0x7f0000000300)={0x3, 0x2, r8}) (async) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f0000000340)=0x4548) (async) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000380)={0x2, 0x3, 0x0, {0xe, 0x2, 0x10, 0x8000}}) capset(&(0x7f00000003c0)={0x19980330, r6}, &(0x7f0000000400)={0x8, 0x7fffffff, 0xb39, 0x5, 0x400, 0xfff}) (async) ptrace$pokeuser(0x6, r6, 0x2, 0xc041) (async, rerun: 32) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000440)="31ee0f217f006219f3a50f01f666b8060000000f23d00f21f86635000000050f23f8baf80c66b8a2e2d18266efbafc0cb80000efb825000f00d8640f01c43ed2f2", 0x41}], 0x1, 0x78, &(0x7f0000000500), 0x0) (async, rerun: 32) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r9, 0x80dc5521, &(0x7f0000000580)=""/234) (async) lgetxattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@random={'osx.', '{[}{,\x00'}, &(0x7f0000000700)=""/186, 0xba) (async) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000840)=[@text64={0x40, &(0x7f00000007c0)="400fcd64420f2de6b9800000c00f3235000400000f30f30fc734c467400f01d1c74424009f000000c744240210000080ff1c246644f466b883000f00d066b873008ee02e26260fc737", 0x49}], 0x1, 0x51, &(0x7f0000000880), 0x0) (async) io_setup(0x2a, &(0x7f00000008c0)=0x0) r12 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) io_cancel(r11, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xe0, r12, &(0x7f0000000940)="6fde3e8cf787614682d978116bdfa7fb", 0x10, 0x1f47, 0x0, 0x1, r9}, &(0x7f00000009c0)) (async, rerun: 64) sched_setattr(r6, &(0x7f0000000a00)={0x38, 0x6, 0x4, 0x2, 0x2, 0x8, 0x1, 0xdea, 0xf58, 0x8}, 0x0) (async, rerun: 64) ioctl$VIDIOC_S_DV_TIMINGS(r10, 0xc0845657, &(0x7f0000000a40)={0x0, @reserved}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000b00)={0x0, 0x0}) capset(&(0x7f0000000b80)={0x20080522, r13}, &(0x7f0000000bc0)={0xa9d, 0x705, 0xffffffff, 0x6, 0xffffffff, 0xfffffff8}) (async) mlock2(&(0x7f0000fe6000/0x4000)=nil, 0x4000, 0x1) 28.076078036s ago: executing program 2 (id=633): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newtaction={0x1190, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x117c, 0x1, [@m_nat={0x1144, 0xb, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x101, 0x10000000, 0xff, 0x7}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x200, 0x1, 0x7fffffff, 0x6}, @rand_addr=0x64010101, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x3, 0x7, 0x1, 0x4}, @broadcast, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0xffff, 0xf, 0xa, 0x8}, @empty, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x79, 0x4ae3bc68, 0x10000000, 0x2, 0x10}, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xa4c, 0x20000000, 0xa, 0x3}, @multicast2, @rand_addr=0x64010101, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x4, 0x1, 0x101, 0x40}, @rand_addr=0x64010100, @private=0xa010100, 0x0, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x34, 0x2, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1190}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r2, 0x0, 0xd, 0x0, &(0x7f0000000100)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r10, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) bind$xdp(r7, &(0x7f0000000240)={0x2c, 0x1, r9, 0x1003ffd, r10}, 0x10) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r12, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x20040054) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x40, @private2, 0x2}, 0x1c) 27.986383336s ago: executing program 2 (id=634): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = msgget$private(0x0, 0x80) msgsnd(r2, &(0x7f0000000200)={0xe1ed96096cc81815}, 0x8, 0x800) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="1748000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="1748000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 27.985846789s ago: executing program 2 (id=635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000000)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x20040000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x3e, 0x81, 0x38}}) capset(&(0x7f0000000080)={0x19980330}, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x40084146, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x4, 0x0, 0x3], 0x1, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 27.816192664s ago: executing program 2 (id=638): mkdir(&(0x7f0000002740)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="64796e2c666c6f636b3d6c6f63616c2c00afcdb06e7af51b565859496d3be1f3cb0b33ee2cd07174c8eb45605b6867cc4b1b5af990b6a2403a16b4"]) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') symlinkat(&(0x7f0000000180)='./file1\x00', r0, &(0x7f0000002340)='./file1/file0\x00') mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) getdents64(r0, &(0x7f0000002240)=""/234, 0xea) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') r1 = socket(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x4080) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 27.625662328s ago: executing program 2 (id=643): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) syz_usbip_server_init(0x3) 27.226298448s ago: executing program 2 (id=649): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x181002) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x400001, &(0x7f0000000080)={@align=0x2d, {0x4, 0xf, 0xb9, 0xd}}, 0xffffffff, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x6}) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6gre0\x00', 0x2000004}, 0x18) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="480000001000010027bd7000fbd9dfa500000000", @ANYRES32, @ANYBLOB="104e0600d5ba2259280012800900010076657468000000001800028014000100000000000206e9b43d"], 0x7c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0xb9, 0x5, 0x1, 0x2, 0xfffffffffffffffe, 0x7, 0x2, 0x5, 0x3, 0x855, 0x9, 0x10b6, 0x1, 0x5, 0x4, 0x10, {0x3, 0x4}, 0xd, 0xa}}) 27.192766774s ago: executing program 35 (id=649): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x181002) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x400001, &(0x7f0000000080)={@align=0x2d, {0x4, 0xf, 0xb9, 0xd}}, 0xffffffff, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x6}) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6gre0\x00', 0x2000004}, 0x18) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="480000001000010027bd7000fbd9dfa500000000", @ANYRES32, @ANYBLOB="104e0600d5ba2259280012800900010076657468000000001800028014000100000000000206e9b43d"], 0x7c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0xb9, 0x5, 0x1, 0x2, 0xfffffffffffffffe, 0x7, 0x2, 0x5, 0x3, 0x855, 0x9, 0x10b6, 0x1, 0x5, 0x4, 0x10, {0x3, 0x4}, 0xd, 0xa}}) 1.894714261s ago: executing program 5 (id=1104): madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mlock(&(0x7f00007c6000/0x4000)=nil, 0x4000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}, 0x40900) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r8}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x0, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) close(0x3) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff25, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="cce69c380e8149c135"], 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) ioctl$KVM_RUN(r4, 0xae80, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000240)=@phonet, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000880)=""/66, 0x42}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000900)=""/207, 0xcf}], 0x3, &(0x7f00000034c0)=""/4096, 0x1000}, 0x8000}, {{&(0x7f0000000a00)=@x25, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000a80)=""/143, 0x8f}, {&(0x7f0000000b40)=""/211, 0xd3}, {&(0x7f0000000c40)=""/36, 0x24}, {&(0x7f0000000c80)=""/46, 0x2e}, {&(0x7f0000000cc0)=""/72, 0x48}, {&(0x7f0000000d40)=""/60, 0x3c}, {&(0x7f0000000d80)=""/1, 0x1}], 0x7, &(0x7f0000000e40)=""/38, 0x26}, 0x6}, {{&(0x7f0000000e80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000f00)=""/120, 0x78}], 0x1}, 0x8}], 0x3, 0xa120, 0x0) write$FUSE_WRITE(r4, &(0x7f0000000040)={0x18, 0x0, r9, {0x5c67ce4f}}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6000001, 0x3032, 0xffffffffffffffff, 0x0) 1.674527626s ago: executing program 5 (id=1112): mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ocfs2\x00', 0x200800, 0x0) r0 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$nfs4(&(0x7f0000000040)='ocfs2\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), 0x10000c0, &(0x7f0000000340)={[{'\xa8\x95\xd3\xf37v\xc4\xefg\x99_R\xf8\xee!\xcf\xe1sBzV\xf7\xbe\xf8x\xf5\xb7\xe3\xc5\xf5\xa5jLG\xd9\xe0\xba\x97\x18W\x8b\a\xb3\xa7i\xc7\xb2\x1c\xb7\xfa!\x1dn\xa3\xff\x11\f\xbe\xec\x89\xf9>\xfd\xffq\xbc1]\x034\x9d\x1e'}], [{@dont_hash}, {@fsname={'fsname', 0x3d, 'MODULE_CHECK'}}, {@uid_lt={'uid<', r0}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_gt={'uid>', r0}}, {@uid_gt={'uid>', r1}}, {@euid_gt={'euid>', r2}}, {@smackfsdef={'smackfsdef', 0x3d, '\x02\x00\x05b\x807\xe9\te\xd9\x8c\xb0\xe8\xdf\xd0\x14'}}]}) 1.625636312s ago: executing program 5 (id=1113): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80b42, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x3}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) openat(0xffffffffffffffff, 0x0, 0x80801, 0xa) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r7], 0xb8}}, 0x2) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, &(0x7f0000001380)) 1.433297474s ago: executing program 5 (id=1114): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791090000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r0 = userfaultfd(0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)="72303a02b359274cd33db065938f360af8a403afb98cf2c17307cec32413529bdf14f521d41b3aafd718087031eda6a898155603000000000000005eef2964a7e86c0fcf2edc44c1e0d2e693a6beb94294", 0x51, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x8fc, 0x12) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000002c0)=0xe) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x104}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00002ae000/0x800000)=nil, 0x400000, 0x3, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x43, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0xfffffffffffffffa, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xdddd0000, 0x2000, 0xc, 0x9, 0x4, 0xc4, 0x0, 0x5, 0x6a, 0x2, 0x0, 0xfc}, {0x1, 0xd000, 0x6, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x4, 0x4}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x3c, 0x9}, {0x100000, 0xf000, 0x0, 0x78, 0x5, 0x0, 0x2, 0x0, 0x40, 0xfe, 0x5}, {0x4, 0x71000, 0x0, 0x4, 0x1, 0x2, 0xa1, 0x20, 0x0, 0x7}, {0x3000, 0x6000, 0xc, 0x0, 0x0, 0x7, 0xc, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000, 0x3}, {0xdddd0000}, 0xddf8ffdb, 0x0, 0x0, 0x18, 0x0, 0x801, 0xd000, [0x80000001, 0x0, 0x40000000001]}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x10840, 0x0, 0x8}, 0x18) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.286077178s ago: executing program 5 (id=1118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) (async) pipe(&(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a7, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x2, 0x0) (rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd0900010064000f00000008003100b7d7000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x4008844}, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x9, 0x80010, r1, 0x17965000) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@RTM_NEWNSID={0x14, 0x58, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2000c801}, 0x8040) (async) write(r3, &(0x7f0000000200)="1c0000001a009b8a070000003b9b701f400004000000eb3f7a7f1de2", 0x1c) 1.278015128s ago: executing program 7 (id=1120): r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xc3, 0x1}, {0x7, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xc3, 0x1}, {0x7, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000001240)={0x50, 0x0, r3, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r5, 0x401870c8, &(0x7f0000000000)) (async) ioctl$FIBMAP(r5, 0x401870c8, &(0x7f0000000000)) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000080800005a170a"]) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000080800005a170a"]) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0xfffffffc, 0x40002, 0x2, {0xd, @pix_mp={0xfffffffd, 0x5, 0x36314d59, 0x0, 0xb, [{}, {}, {0x5}, {0xfffffffd}, {}, {}, {0x100000, 0x8000002}, {0x3ff}], 0x2, 0xff, 0x6, 0x0, 0x3}}, 0x3}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0xfffffffc, 0x40002, 0x2, {0xd, @pix_mp={0xfffffffd, 0x5, 0x36314d59, 0x0, 0xb, [{}, {}, {0x5}, {0xfffffffd}, {}, {}, {0x100000, 0x8000002}, {0x3ff}], 0x2, 0xff, 0x6, 0x0, 0x3}}, 0x3}) ioctl$I2C_PEC(r0, 0x708, 0x3) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000001380)={0x0, 0x49, 0x8, &(0x7f0000001340)={0xd, "c8660972daadf38033035d21dcc910b0dbf5be74076dc3f2f67b364ef9ed965b13"}}) 1.277793042s ago: executing program 6 (id=1122): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48baba883893f7a08d14e732b07916e79a0600b9211d8117010033", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030000000000080006000001000005000d000000000008000400040000000800050004000000"], 0x48}}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r1, &(0x7f0000001440)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x9, @mcast1, 0x81}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4008005) (async) sendmmsg$inet6(r1, &(0x7f0000001440)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x9, @mcast1, 0x81}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4008005) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.202807431s ago: executing program 6 (id=1123): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) socket$netlink(0x10, 0x3, 0x14) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioperm(0x0, 0x7fff, 0x15f9) syz_clone(0x4d000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = dup(r2) accept4(r3, 0x0, 0x0, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) 1.124604895s ago: executing program 7 (id=1126): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x1}) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r1 = dup2(r0, r0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000280)={0x0, 0x2, 0x0, "adbdee06009e4aeabde9eefaff7a78cda902552f08cef4a662dd836c7451f8e5"}) r2 = syz_clone(0x4200000, &(0x7f0000001540)="7286b3a4fba55eeac3aeb76ab0a105a11cec645f1bece9889c7c203ffdd6765fa62328c3ee4987bc77c2cfee5954b15b521b61ba991dfe415b1a706a70dfb23a41cc02cfc0cd10bfa7379d042b7d3d68b028bed5c9e98d2748d761b973894d473306fedd8edc1ab4d9d114691db58e03b670b085ca0b293e1eb209bd7a7cda8c09ac94761cd3c09a2bd414e2b800b7fb6746591d5ef8e8f54c61dbad2de5e19fccd508d374887252e065205fb257044001ed2f46ed6bff48968be5c0307f494147225bdd6c0e068c403e90d5b9de972ed1d0f12980a5508f7d200ddc033e3a6bda1a591b695aaa5f892e089bb5bf151bc2fbfeff97bca13e", 0xf8, &(0x7f0000000280), &(0x7f0000000400), &(0x7f0000001640)="54d94e1316268eb905b63cd2941cf44286a42ec07a0c74bcd0a0e812023278a183b30983197b5d2440e47cad") r3 = syz_open_procfs(r2, &(0x7f0000001680)='net/l2cap\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r4 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x5, 0x2000000000001]}}) r6 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x5}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x400002, 0x0) write$vga_arbiter(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="0700636b205badea"], 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e010000000000706106e4dccb00", @ANYRES32, @ANYBLOB="800500"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0200000004000000000000000d00"/28], 0x50) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x6}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x5c, 0x0, &(0x7f0000000880)=[@increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000800)={@flat=@binder={0x73622a85, 0x100a}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/250, 0xfa, 0x2, 0x14}, @ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/183, 0xb7, 0x0, 0x11}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0x7) ioctl$TCSETSF2(r10, 0x8910, 0x0) dup3(r9, r8, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a, 0x3}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000580)) 1.043720869s ago: executing program 5 (id=1127): r0 = eventfd2(0x2, 0x800) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x0, 0x3, 0x214a}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e04830100000008090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) syz_usb_disconnect(r1) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xfcff}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x6, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000022850000000e0000003f0001000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 1.042291172s ago: executing program 7 (id=1128): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x81441, 0x82) fcntl$setstatus(r1, 0x4, 0x60c00) fsync(r1) 976.130251ms ago: executing program 7 (id=1129): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) 975.338334ms ago: executing program 7 (id=1130): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(seed-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f00000000c0)={0x30, "58db8e2886c58dedae00f13cc17206c1c0dc504ae0ebea61dbf33843be189a6a1004eea6186435b4631012686b86ccf010c0de413adc834811ebcc33107b48f6fd3178493c6e694e73fa72b695e4cf1e47e6da7e03ec772868a2c65241d21058d4b193d0e1b56474a862f8aa99283cf8f507a54735c19b92c374eb97f52788c7"}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)={0xa0042, 0x101, 0xd}, 0x18) socket$pptp(0x18, 0x1, 0x2) 865.717475ms ago: executing program 7 (id=1131): mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x44041}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x49, 0x0, &(0x7f0000000680)="755bb05395201ad875a81f08fbf73c46403cbcf9922ed5e124d4576314b9d703e2270ea77e8be9b7d6a78d90f5cd95c2293b2397fd6fbb743e63ffe5e2e2d924e7f40180f4b1704f0f", 0x0}, 0x50) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x1f, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) syz_open_dev$dri(0x0, 0x20, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000cc0)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) ioctl$EVIOCGMASK(r5, 0x5b03, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 475.799197ms ago: executing program 4 (id=1134): fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) (async) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r3, 0x4b37) (async) ioctl$KDDISABIO(r3, 0x4b37) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x4, 0x0, 0x0, 0x18, &(0x7f0000000080)="184e14be777e7807206e262943cfa0a73cdb0b8ecac46619", 0x1ff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) 475.589562ms ago: executing program 4 (id=1135): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed510000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0x40103e05, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x40000000015, 0x5, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) bind$bt_hci(r3, &(0x7f0000001280), 0x6) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x83, 0x5, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r4, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x2, 0x4, 0x2, {0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}}, 0x32) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00002ad000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r5) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000074000/0x4000)=nil, r6, 0x100000e, 0x110, r4, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x40000000, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) mprotect(&(0x7f0000300000/0x1000)=nil, 0x1000, 0x4) readv(r0, &(0x7f0000000140), 0x0) 325.734733ms ago: executing program 6 (id=1136): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r2) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0x20, r3, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44094) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES16=r2], 0x40) r5 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f00000003c0)={r4}) write$binfmt_elf64(r5, &(0x7f00000000c0)=ANY=[], 0x40) close(r5) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x8402, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x5) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r10, 0x5, &(0x7f00000000c0)='fd', 0x0, r9) execveat(r9, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000180)='team\x00']}, &(0x7f0000000340)={[&(0x7f0000000240)='[\x00', &(0x7f0000000280)='team\x00', &(0x7f00000002c0)=':#+$\x00', &(0x7f0000000300)=':@#/-.&-\x00']}, 0x400) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 325.451734ms ago: executing program 6 (id=1137): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001480)=""/4096, 0x1000, 0x5, 0xb6, 0x9, 0x1ade12f3, 0xb9a0}}, 0x120) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x400}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x8, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0x7, &(0x7f0000000200)={0x5, 0xb}) socket$igmp(0x2, 0x3, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x20) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x7, 0x1}}, 0x20) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000100)=""/193, &(0x7f0000000080)=0xc1) 225.157202ms ago: executing program 4 (id=1138): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000190a770b7fb48841d201010000000000000000000000000900020073797a3a00000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) setsockopt$ax25_int(r4, 0x101, 0xc, &(0x7f0000000040)=0x6, 0x4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) fchmod(r2, 0xa3) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd700004000000040000000800090002"], 0x48}}, 0x20000084) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x4c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$sock(r1, &(0x7f0000000700)={&(0x7f0000000480)=@l2tp={0x2, 0x0, @remote, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000500)="7a073f5dfdc000e7b2d585ad426c92a803fda1cb0c24317d21f1ce8b8bcd449bc0124c1e6911e278e91ee1739576757e7e45067ec440fe674f0b95b01db4a36d4475cbc7b925606642fbd9001213ce8bfce5a26465dae1fc21f36ae6fc863902313932c0d4a8a4c71fec337e463444a779256b45888c46c9bb1dc46a6052cf6b6915c17ae54c5302d397ba2583996db5e6841559845f217aed", 0x99}, {&(0x7f00000005c0)="f90e9ad712fa1bf9fe63025f99b1b2683ce588ec6dde37f8ebc528fdf248e146086baf72e4d56e6dba7868b64fa2276ddb02085800f8a194274f96a67ff91aee72b41fa750c5553d61c2f6d1d93eb21b1a58932fbf4d75fb6f41bf3b5b3dcce1226b44cebc9c854b6545bb30ba51a3b85bea178481250fce3ce2308d", 0x7c}, {&(0x7f00000009c0)="9034fcb4b824124db20de528bc06b584dc7dd8aae7b26be815bffa22c54cd35c647e0f75e693deddbb6878e49d511fc7ad5df0d8b2e8f1d4cc8086ee12886f339db9f4f92bfc706746b64671eb55956914360a5361c51334130058427e0cce812597afc5ea8c2ae27cf1ad36a705200e849becdef3a744acebd3946fdf1b55db9130870c76d743400f570a4cdcf5d362e10be3e52f66dbdcbaa8e3da46184de3c9b086a5b67599a6ba38a2c5bb1ac5fd0f60e64e9bb248cc1f499b7b40d89393ec0955993073e74d8e6df2be32fb4abcad2280797e6aec688032f87f8ebe6687685f53", 0xe3}, {&(0x7f0000000ac0)="6ddf9b04832728ec083f29b439dc8a2aa9810d4f730cc9c9637afcbf26e18df3044648dbd58b4ed2887d4b9d2f98fdbf9bfc94b5a419942515129c6997699467c69282a4f07d5c37202910a2d03e64ac8ced9578f0d759c452cc1012988952b9284fd18d816ea1e70e1c76094b9dfd299d3b746be7c392dd2421f5e17ba5137312329e24e3d02c9cee42179b0c2d443092a9a7bcf01486b29bd12b383f5a2268730c661134fab2daf456eda5fe13095c79a7a6e938076dd060ba5e6745e61768989bb1624cab", 0xc6}], 0x4, &(0x7f00000006c0)}, 0x24000001) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x48000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x40800) ioctl$VIDIOC_S_PARM(r8, 0xc0cc5616, &(0x7f0000000040)={0x1, @output={0x0, 0x0, {0x5}, 0x10000, 0x40}}) r9 = memfd_secret(0x80000) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r5) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a00100f66e9c55cbc393330ec45ec29ca22af596bd97ed8d49b5431e44f2fe670cffffffffffffff7fae92250913e668b0ad025cd31670455c90bfa43234437bd9", @ANYRES16=r10, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x24000050}, 0x20000000) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c0000000801040000000000000000050000060900020073797a31000000000900020073797a32000000000905000000797a310000000005000100070000000900020073797a320000000005000100070000000900020073797a32000000000900020073797a300000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x8020) 144.300801ms ago: executing program 6 (id=1139): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa806}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x440b0) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 65.728272ms ago: executing program 4 (id=1140): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) r5 = openat$cgroup(r4, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000640)='pids.current\x00', 0x275a, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000100)=""/113, 0x71}], 0x1, 0x7, 0x1) ioctl$XFS_IOC_FSGEOMETRY(r2, 0x8100587e, &(0x7f0000000180)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$CDROMREADMODE1(r7, 0x530d, &(0x7f0000000180)={0x56, 0xff, 0xfe, 0x81, 0x9a, 0x7}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}], [{@pcr={'pcr', 0x3d, 0xa}}, {@appraise}, {@subj_type={'subj_type', 0x3d, 'fd'}}, {@obj_role={'obj_role', 0x3d, '$\xe6]'}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_lt={'uid<', r1}}, {@appraise_type}]}}) 62.967974ms ago: executing program 4 (id=1141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x4004000) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000000101010100000000000000980a00000106009240000100002c0018800800034000010001080002c00001000108000240000000080800014000000000080240000800000800034000003006"], 0x50}}, 0x4000800) 2.006767ms ago: executing program 6 (id=1142): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0xa000400) unshare(0x20000000) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) 0s ago: executing program 4 (id=1143): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x91, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 0s ago: executing program 6 (id=1144): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x35, '\x00', @data=0x2, 0xfffffff7}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) kernel console output (not intermixed with test programs): . Setting the MTU to 1532 would solve the problem. [ 88.983634][ T7088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.989203][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.991686][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.999799][ T7088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.005481][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.007821][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.010438][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.012790][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.018512][ T46] veth1_macvtap: left promiscuous mode [ 89.020280][ T46] veth0_macvtap: left promiscuous mode [ 89.022078][ T46] veth1_vlan: left promiscuous mode [ 89.023750][ T46] veth0_vlan: left promiscuous mode [ 89.126600][ T46] team0 (unregistering): Port device team_slave_1 removed [ 89.133480][ T46] team0 (unregistering): Port device team_slave_0 removed [ 89.214381][ T7049] usb 7-1: reset low-speed USB device number 5 using dummy_hcd [ 89.235057][ T7049] usb 7-1: device descriptor read/8, error -71 [ 89.263701][ T7088] hsr_slave_0: entered promiscuous mode [ 89.266580][ T7088] hsr_slave_1: entered promiscuous mode [ 89.268665][ T7088] debugfs: 'hsr0' already exists in 'hsr' [ 89.270557][ T7088] Cannot create hsr debugfs directory [ 89.362086][ T7078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.411305][ T7078] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.416954][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.419580][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.448079][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.451045][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.476687][ T7088] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 89.482791][ T7088] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 89.498906][ T7088] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 89.503586][ T7088] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 89.570331][ T7088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.584505][ T7088] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.591665][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.594122][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.600576][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.602885][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.624948][ T7049] usb 7-1: reset low-speed USB device number 5 using dummy_hcd [ 89.629637][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.656096][ T7049] usb 7-1: device descriptor read/8, error -71 [ 89.665756][ T7078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.727588][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.747777][ T7088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.769881][ T7049] cdc_wdm 7-1:1.0: Error autopm - -16 [ 89.770042][ T827] usb 7-1: USB disconnect, device number 5 [ 89.805255][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.833694][ T7078] veth0_vlan: entered promiscuous mode [ 89.840465][ T7078] veth1_vlan: entered promiscuous mode [ 89.867551][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.898484][ T7078] veth0_macvtap: entered promiscuous mode [ 89.899270][ T5934] Bluetooth: hci0: command tx timeout [ 89.902910][ T7078] veth1_macvtap: entered promiscuous mode [ 89.911832][ T7078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.923644][ T7078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.942370][ T97] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.945733][ T97] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.959760][ T97] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.962606][ T97] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.002999][ T7159] Bluetooth: MGMT ver 1.23 [ 90.020994][ T7088] veth0_vlan: entered promiscuous mode [ 90.041403][ T7088] veth1_vlan: entered promiscuous mode [ 90.045733][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.045812][ T46] bridge_slave_1: left allmulticast mode [ 90.048250][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.050035][ T46] bridge_slave_1: left promiscuous mode [ 90.054613][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.058157][ T46] bridge_slave_0: left allmulticast mode [ 90.059945][ T46] bridge_slave_0: left promiscuous mode [ 90.061827][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.104202][ T7162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7162 comm=syz.2.286 [ 90.134552][ T5934] Bluetooth: hci3: command tx timeout [ 90.179452][ T46] smc: removing net device bond0 with user defined pnetid SYZ2 [ 90.183764][ T46] bond0 (unregistering): (slave vxcan3): Releasing backup interface [ 90.187727][ T46] bond0 (unregistering): Released all slaves [ 90.221637][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.226924][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.238738][ T7088] veth0_macvtap: entered promiscuous mode [ 90.254716][ T7088] veth1_macvtap: entered promiscuous mode [ 90.266167][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.276321][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.277370][ T7165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.282134][ T1147] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.286584][ T7165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.290006][ T46] tipc: Left network mode [ 90.292164][ T1147] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.295245][ T1147] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.302690][ T1147] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.380906][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.383450][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.403819][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.414161][ T10] usb 9-1: USB disconnect, device number 3 [ 90.416738][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.431933][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.288'. [ 90.442206][ T7177] netlink: 32 bytes leftover after parsing attributes in process `syz.4.289'. [ 90.446496][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 90.451369][ T7177] Invalid source name [ 90.453045][ T7177] UBIFS error (pid: 7177): cannot open "./file0", error -22 [ 90.565790][ T46] hsr_slave_0: left promiscuous mode [ 90.570572][ T46] hsr_slave_1: left promiscuous mode [ 90.572751][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.575475][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.583485][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.586034][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.594425][ T46] veth1_macvtap: left promiscuous mode [ 90.596321][ T46] veth0_macvtap: left promiscuous mode [ 90.598142][ T46] veth1_vlan: left promiscuous mode [ 90.599833][ T46] veth0_vlan: left promiscuous mode [ 90.604318][ T827] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 90.711906][ T46] team0 (unregistering): Port device team_slave_1 removed [ 90.720482][ T46] team0 (unregistering): Port device team_slave_0 removed [ 90.734337][ T827] usb 7-1: device descriptor read/64, error -71 [ 90.844850][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 90.974321][ T827] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 91.015406][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 91.018337][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.021552][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.025995][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.032464][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.037983][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.040912][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.104382][ T827] usb 7-1: device descriptor read/64, error -71 [ 91.218212][ T827] usb usb7-port1: attempt power cycle [ 91.245892][ T10] usb 9-1: GET_CAPABILITIES returned 0 [ 91.247731][ T10] usbtmc 9-1:16.0: can't read capabilities [ 91.456810][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.461145][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.464945][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.468609][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.472374][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.477509][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.481328][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.484950][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.487857][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.491560][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.494973][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.497789][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.500618][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.505565][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.509344][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.513118][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 91.546743][ T5990] usb 9-1: USB disconnect, device number 4 [ 91.560491][ T827] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 91.584862][ T827] usb 7-1: device descriptor read/8, error -71 [ 91.791243][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 91.794668][ T7220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.293'. [ 91.824334][ T827] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 91.847836][ T827] usb 7-1: device descriptor read/8, error -71 [ 91.954470][ T827] usb usb7-port1: unable to enumerate USB device [ 91.974793][ T5934] Bluetooth: hci0: command tx timeout [ 91.974880][ T7214] : entered promiscuous mode [ 91.980405][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 91.983488][ T7220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.293'. [ 92.034405][ T7229] capability: warning: `syz.6.296' uses 32-bit capabilities (legacy support in use) [ 92.097413][ T7241] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 92.112179][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 92.112190][ T40] audit: type=1400 audit(1771460954.775:482): avc: denied { listen } for pid=7246 comm="syz.5.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.125532][ T40] audit: type=1400 audit(1771460954.775:483): avc: denied { append } for pid=7246 comm="syz.5.298" name="dvr0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 92.132830][ T40] audit: type=1400 audit(1771460954.785:484): avc: denied { getopt } for pid=7246 comm="syz.5.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.140136][ T40] audit: type=1400 audit(1771460954.785:485): avc: denied { read } for pid=7246 comm="syz.5.298" lport=41406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.153376][ T40] audit: type=1400 audit(1771460954.815:486): avc: denied { unmount } for pid=7088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 92.157416][ T7252] No buffer was provided with the request [ 92.166771][ T40] audit: type=1400 audit(1771460954.835:487): avc: denied { create } for pid=7253 comm="syz.5.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 92.223189][ T7257] netlink: 'syz.5.303': attribute type 16 has an invalid length. [ 92.224316][ T5934] Bluetooth: hci3: command tx timeout [ 92.226183][ T7257] netlink: 'syz.5.303': attribute type 17 has an invalid length. [ 92.252320][ T7262] loop6: detected capacity change from 0 to 524287999 [ 92.258623][ T7262] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.261791][ T7262] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.264095][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.265081][ T7262] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.267839][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.270332][ T7262] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.275391][ T7262] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.278560][ T7262] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.281188][ T7262] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.285862][ T7262] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.288468][ T7262] ldm_validate_partition_table(): Disk read failed. [ 92.291179][ T7262] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.296658][ T7262] Buffer I/O error on dev loop6, logical block 0, async page read [ 92.300107][ T7262] Dev loop6: unable to read RDB block 0 [ 92.302248][ T7262] loop6: unable to read partition table [ 92.304817][ T7262] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 92.326724][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.331533][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.364994][ T6048] ldm_validate_partition_table(): Disk read failed. [ 92.369742][ T6048] Dev loop6: unable to read RDB block 0 [ 92.372169][ T6048] loop6: unable to read partition table [ 92.377282][ T7263] ldm_validate_partition_table(): Disk read failed. [ 92.380448][ T7263] Dev loop6: unable to read RDB block 0 [ 92.382854][ T7263] loop6: unable to read partition table [ 92.385581][ T7263] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 92.420434][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.434423][ T97] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.438130][ T7268] netlink: 'syz.6.302': attribute type 12 has an invalid length. [ 92.441441][ T97] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.445244][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.495103][ T40] audit: type=1804 audit(1771460955.165:488): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.306" name="/newroot/7/file0" dev="tmpfs" ino=53 res=1 errno=0 [ 92.496307][ T7270] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 92.507038][ T7270] ref_ctr increment failed for inode: 0x35 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888033546e40 [ 92.512830][ T7269] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 92.518109][ T7269] ref_ctr decrement failed for inode: 0x35 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888033546e40 [ 92.523556][ T7269] uprobe: syz.5.306:7269 failed to unregister, leaking uprobe [ 92.576708][ T7282] tmpfs: Unknown parameter 'mpolY»' [ 92.707486][ T7301] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.315'. [ 92.834336][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 92.855167][ T7317] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 92.874903][ T40] audit: type=1400 audit(1771460955.545:489): avc: denied { bind } for pid=7316 comm="syz.4.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.880934][ T40] audit: type=1400 audit(1771460955.545:490): avc: denied { name_bind } for pid=7316 comm="syz.4.319" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 92.888798][ T40] audit: type=1400 audit(1771460955.545:491): avc: denied { node_bind } for pid=7316 comm="syz.4.319" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 92.974312][ T10] usb 10-1: device descriptor read/64, error -71 [ 93.067277][ T7334] Cannot find add_set index 0 as target [ 93.082188][ T7334] XFS (nbd4): SB validate failed with error -5. [ 93.216213][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 93.354310][ T10] usb 10-1: device descriptor read/64, error -71 [ 93.464492][ T10] usb usb10-port1: attempt power cycle [ 93.624406][ T837] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 93.794362][ T837] usb 9-1: Using ep0 maxpacket: 8 [ 93.797473][ T837] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 6 [ 93.800369][ T837] usb 9-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.806044][ T837] usb 9-1: config 0 interface 0 has no altsetting 0 [ 93.808260][ T837] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 93.811131][ T837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.814366][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 93.815920][ T837] usb 9-1: config 0 descriptor?? [ 93.820723][ T837] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 93.844756][ T10] usb 10-1: device descriptor read/8, error -71 [ 94.033167][ T837] usb 9-1: USB disconnect, device number 5 [ 94.054502][ T5934] Bluetooth: hci0: command tx timeout [ 94.089871][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.336'. [ 94.092776][ T7428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.336'. [ 94.114327][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 94.135583][ T10] usb 10-1: device descriptor read/8, error -71 [ 94.254456][ T10] usb usb10-port1: unable to enumerate USB device [ 94.304293][ T5934] Bluetooth: hci3: command tx timeout [ 94.802451][ T7460] can0: slcan on pty28. [ 94.875712][ T7453] can0 (unregistered): slcan off pty28. [ 94.927946][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.347'. [ 94.932297][ T7475] program syz.4.347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.992720][ T7487] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 95.000162][ T7487] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 95.005651][ T7487] cramfs: wrong magic [ 95.018553][ T7487] trusted_key: encrypted_key: insufficient parameters specified [ 95.657141][ T7516] netlink: 36 bytes leftover after parsing attributes in process `syz.5.356'. [ 95.735627][ T7515] netlink: 36 bytes leftover after parsing attributes in process `syz.5.356'. [ 95.745095][ T827] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 95.916477][ T7532] sp0: Synchronizing with TNC [ 96.094340][ T827] usb 7-1: device not accepting address 10, error -71 [ 96.123879][ T7546] netlink: 52 bytes leftover after parsing attributes in process `syz.2.363'. [ 96.134801][ T5934] Bluetooth: hci0: command tx timeout [ 96.374979][ T5934] Bluetooth: hci3: command tx timeout [ 96.724335][ T827] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 96.876364][ T827] usb 7-1: unable to get BOS descriptor or descriptor too short [ 96.879811][ T827] usb 7-1: not running at top speed; connect to a high speed hub [ 96.883423][ T827] usb 7-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.888066][ T827] usb 7-1: config 1 interface 0 has no altsetting 0 [ 96.892038][ T827] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.895741][ T827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.898789][ T827] usb 7-1: Product: syz [ 96.900298][ T827] usb 7-1: Manufacturer: syz [ 96.902094][ T827] usb 7-1: SerialNumber: syz [ 96.935771][ T7557] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 97.039451][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 97.080505][ T7585] fuse: Bad value for 'user_id' [ 97.082191][ T7585] fuse: Bad value for 'user_id' [ 97.106372][ T7566] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 97.114692][ T7587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.118546][ T7587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.219345][ T7601] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.378'. [ 97.288988][ T827] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 97.297135][ T827] usb 7-1: USB disconnect, device number 11 [ 97.328360][ T7598] /dev/sr0: Can't open blockdev [ 97.337058][ T7613] IPVS: set_ctl: invalid protocol: 137 10.1.1.5:20001 [ 97.343922][ T7613] IPVS: rr: FWM 3 0x00000003 - no destination available [ 97.352183][ T7613] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65047 sclass=netlink_xfrm_socket pid=7613 comm=syz.4.381 [ 97.390022][ T7619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.383'. [ 97.648350][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 97.648361][ T40] audit: type=1400 audit(1771460960.315:513): avc: denied { connect } for pid=7624 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 97.746329][ T7626] 8021q: VLANs not supported on gre0 [ 97.797855][ T40] audit: type=1400 audit(1771460960.465:514): avc: denied { setopt } for pid=7630 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 97.931314][ T40] audit: type=1400 audit(1771460960.595:515): avc: denied { setopt } for pid=7636 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.048238][ T7648] netlink: 'syz.4.390': attribute type 11 has an invalid length. [ 98.050777][ T7648] netlink: 132 bytes leftover after parsing attributes in process `syz.4.390'. [ 98.352996][ T7654] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 98.403336][ T7668] 9p: Unknown Cache mode or invalid value fs [ 98.459997][ T40] audit: type=1400 audit(1771460961.125:516): avc: denied { load_policy } for pid=7669 comm="syz.6.398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 98.462603][ T7671] SELinux: ebitmap: map size 402653248 does not match my size 64 (high bit was 0) [ 98.475176][ T7671] SELinux: failed to load policy [ 98.531083][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.401'. [ 98.575531][ T7670] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 98.592527][ T7683] fuse: Bad value for 'user_id' [ 98.594867][ T7683] fuse: Bad value for 'user_id' [ 98.597916][ T40] audit: type=1800 audit(1771460961.265:517): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.402" name="/newroot/99/file0" dev="tmpfs" ino=566 res=0 errno=0 [ 98.612957][ T40] audit: type=1400 audit(1771460961.265:518): avc: denied { read } for pid=7679 comm="syz.2.402" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.622254][ T40] audit: type=1400 audit(1771460961.265:519): avc: denied { open } for pid=7679 comm="syz.2.402" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.631080][ T40] audit: type=1400 audit(1771460961.265:520): avc: denied { ioctl } for pid=7679 comm="syz.2.402" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.637194][ T7686] bond1: Removing last ns target with arp_interval on [ 98.637472][ T7689] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 98.637472][ T7689] program syz.2.404 not setting count and/or reply_len properly [ 98.655493][ T7686] bond2: Removing last ns target with arp_interval on [ 98.661833][ T7692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.405'. [ 98.693925][ T7700] netlink: 'syz.5.406': attribute type 4 has an invalid length. [ 98.700441][ T40] audit: type=1400 audit(1771460961.365:521): avc: denied { write } for pid=7694 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 98.709467][ T40] audit: type=1400 audit(1771460961.375:522): avc: denied { read } for pid=7694 comm="syz.2.408" path="socket:[21015]" dev="sockfs" ino=21015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 98.822393][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.406'. [ 99.014362][ T5934] Bluetooth: hci0: command tx timeout [ 99.244556][ T59] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 99.395529][ T59] usb 9-1: Using ep0 maxpacket: 8 [ 99.404296][ T59] usb 9-1: no configurations [ 99.405874][ T59] usb 9-1: can't read configurations, error -22 [ 99.490003][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'. [ 99.529507][ T34] libceph: connect (1)[c::]:6789 error -101 [ 99.532166][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 99.534287][ T59] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 99.685358][ T59] usb 9-1: Using ep0 maxpacket: 8 [ 99.687516][ T59] usb 9-1: no configurations [ 99.689169][ T59] usb 9-1: can't read configurations, error -22 [ 99.691372][ T59] usb usb9-port1: attempt power cycle [ 99.795171][ T34] libceph: connect (1)[c::]:6789 error -101 [ 99.797184][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 99.805525][ T6179] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 99.965630][ T6179] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.970507][ T6179] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.980701][ T6179] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.983799][ T6179] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.993115][ T7730] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.997141][ T6179] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.034382][ T59] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 100.054768][ T59] usb 9-1: Using ep0 maxpacket: 8 [ 100.057490][ T59] usb 9-1: no configurations [ 100.059104][ T59] usb 9-1: can't read configurations, error -22 [ 100.194322][ T59] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 100.215099][ T59] usb 9-1: Using ep0 maxpacket: 8 [ 100.217102][ T59] usb 9-1: no configurations [ 100.217104][ T6179] usb 7-1: USB disconnect, device number 12 [ 100.218588][ T59] usb 9-1: can't read configurations, error -22 [ 100.222734][ T59] usb usb9-port1: unable to enumerate USB device [ 100.315356][ T34] libceph: connect (1)[c::]:6789 error -101 [ 100.317413][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 100.341327][ T7727] ceph: No mds server is up or the cluster is laggy [ 100.710252][ T7767] hfsplus: unable to find HFS+ superblock [ 100.766475][ T7767] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 100.798034][ T7772] xt_l2tp: v2 doesn't support IP mode [ 100.958802][ T7783] xt_hashlimit: invalid rate [ 100.969901][ T7783] netlink: 'syz.5.424': attribute type 1 has an invalid length. [ 101.292984][ T7795] mmap: syz.2.427 (7795) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.611365][ T7810] openvswitch: netlink: Message has 8 unknown bytes. [ 101.613660][ T7810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.656923][ T7815] IPVS: set_ctl: invalid protocol: 145 127.0.0.1:20001 [ 101.724291][ T34] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 101.785001][ T7826] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 101.788017][ T7826] block device autoloading is deprecated and will be removed. [ 101.874325][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 101.877829][ T34] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.881097][ T34] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.884642][ T34] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.889173][ T34] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.889393][ T7832] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.893347][ T34] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.896580][ T7832] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.898671][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.905714][ T7832] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.911291][ T7832] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.913517][ T7832] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.917913][ T7832] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.922188][ T7832] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.924160][ T7832] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.927544][ T7832] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.931559][ T7832] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.933780][ T7832] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 101.940096][ T7832] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.107421][ T34] usb 11-1: GET_CAPABILITIES returned 0 [ 102.109342][ T34] usbtmc 11-1:16.0: can't read capabilities [ 102.274556][ T34] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 102.369585][ T7803] kvm: kvm [7802]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 102.373233][ T7803] kvm: kvm [7802]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 102.434368][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 102.438128][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 102.440344][ T34] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 102.443347][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.448805][ T34] usb 10-1: config 0 descriptor?? [ 102.469968][ T5998] usb 11-1: USB disconnect, device number 2 [ 102.859435][ T34] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 102.867232][ T7867] netlink: 384 bytes leftover after parsing attributes in process `syz.4.446'. [ 102.883411][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 102.883423][ T40] audit: type=1400 audit(1771460965.545:532): avc: denied { ioctl } for pid=7866 comm="syz.4.446" path="socket:[24897]" dev="sockfs" ino=24897 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.953332][ T40] audit: type=1400 audit(1771460965.615:533): avc: denied { listen } for pid=7874 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.969698][ T40] audit: type=1400 audit(1771460965.635:534): avc: denied { accept } for pid=7877 comm="syz.4.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.976083][ T40] audit: type=1400 audit(1771460965.645:535): avc: denied { shutdown } for pid=7877 comm="syz.4.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.982390][ T40] audit: type=1400 audit(1771460965.645:536): avc: denied { mount } for pid=7879 comm="syz.2.450" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 102.994342][ T40] audit: type=1400 audit(1771460965.645:537): avc: denied { connect } for pid=7879 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.002213][ T40] audit: type=1400 audit(1771460965.665:538): avc: denied { unmount } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 103.070756][ T1204] usb 10-1: USB disconnect, device number 6 [ 103.081023][ T40] audit: type=1400 audit(1771460965.745:539): avc: denied { block_suspend } for pid=7889 comm="syz.4.453" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.182631][ T7905] Invalid source name [ 103.185274][ T7905] UBIFS error (pid: 7905): cannot open "ubifs", error -22 [ 103.244064][ T7915] netlink: 'syz.2.459': attribute type 21 has an invalid length. [ 103.244114][ T7919] netlink: 'syz.2.459': attribute type 21 has an invalid length. [ 103.247210][ T7915] netlink: 156 bytes leftover after parsing attributes in process `syz.2.459'. [ 103.249882][ T40] audit: type=1400 audit(1771460965.915:540): avc: denied { nlmsg_write } for pid=7911 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 103.261852][ T7919] netlink: 156 bytes leftover after parsing attributes in process `syz.2.459'. [ 103.356762][ T7927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.652060][ T7932] infiniband syz2: set active [ 103.655802][ T7932] infiniband syz2: added bond_slave_1 [ 103.686718][ T7932] RDS/IB: syz2: added [ 103.689194][ T7932] smc: adding ib device syz2 with port count 1 [ 103.691429][ T7932] smc: ib device syz2 port 1 has no pnetid [ 103.845292][ T40] audit: type=1400 audit(1771461222.515:541): avc: denied { write } for pid=7954 comm="syz.6.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 103.864193][ T7960] No source specified [ 103.870704][ T7955] bridge_slave_0 (unregistering): left allmulticast mode [ 103.872968][ T7955] bridge_slave_0 (unregistering): left promiscuous mode [ 103.876407][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.905778][ T5926] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.974504][ T5926] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.974529][ T5934] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.976511][ T5926] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.128162][ T7989] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 104.196693][ T7994] syzkaller0: entered promiscuous mode [ 104.198513][ T7994] syzkaller0: entered allmulticast mode [ 104.416844][ T8028] IPv4: Oversized IP packet from 127.202.26.0 [ 104.457052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 104.524476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.554421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.623745][ T8051] bad cache= option: nonw [ 104.623745][ T8051] [ 104.627726][ T8051] CIFS: VFS: bad cache= option: nonw [ 104.629576][ T8051] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 104.639058][ T8051] CIFS mount error: No usable UNC path provided in device string! [ 104.639058][ T8051] [ 104.642449][ T8051] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 104.684315][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 104.693638][ T8056] can: request_module (can-proto-0) failed. [ 104.724528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.758337][ T8061] sg_read: process 351 (syz.4.489) changed security contexts after opening file descriptor, this is not allowed. [ 104.834331][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 104.837546][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 104.839705][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 104.842808][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.847589][ T24] usb 7-1: config 0 descriptor?? [ 105.004574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.007278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.255496][ T24] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 105.315823][ T8024] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 105.354446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.454341][ T8032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.457260][ T8032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.525100][ T8089] openvswitch: : Dropping previously announced user features [ 105.599571][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.6.501'. [ 105.791051][ T8108] netlink: 'syz.4.504': attribute type 9 has an invalid length. [ 105.910109][ T8119] netlink: 100 bytes leftover after parsing attributes in process `syz.4.506'. [ 105.979178][ T5926] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.055286][ T5937] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.058002][ T5934] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.059986][ T5926] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.123327][ T8130] sctp: [Deprecated]: syz.5.507 (pid 8130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.123327][ T8130] Use struct sctp_sack_info instead [ 106.898593][ T8137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.510'. [ 107.000117][ T8145] 8021q: adding VLAN 0 to HW filter on device bond3 [ 107.003334][ T8146] binder: 8144:8146 ioctl c00c620f 200000000500 returned -22 [ 107.005361][ T8145] binder: 8144:8145 ioctl c00c620f 200000000500 returned -22 [ 107.217341][ T8181] geneve2: entered promiscuous mode [ 107.219963][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.222928][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.226581][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.229717][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.266645][ T8185] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 107.268831][ T8185] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 107.272448][ T8185] vhci_hcd vhci_hcd.0: Device attached [ 107.283217][ T8186] usbip_core: unknown command [ 107.286007][ T8186] vhci_hcd: unknown pdu 20003 [ 107.287608][ T8186] usbip_core: unknown command [ 107.291130][ T46] vhci_hcd vhci_hcd.4: stop threads [ 107.293364][ T46] vhci_hcd vhci_hcd.4: release socket [ 107.295465][ T46] vhci_hcd vhci_hcd.4: disconnect device [ 107.399610][ T8190] binder: 8188:8190 ioctl c0306201 2000000005c0 returned -22 [ 107.402950][ T8190] binder: 8188:8190 ioctl c018937b 200000000640 returned -22 [ 107.434308][ T5991] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 107.453949][ T1204] usb 7-1: USB disconnect, device number 13 [ 107.517354][ T8198] program syz.2.527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.521454][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.527'. [ 107.584442][ T5991] usb 11-1: Using ep0 maxpacket: 8 [ 107.587357][ T5991] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.590533][ T5991] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.593602][ T5991] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.596780][ T5991] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.600876][ T5991] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.603753][ T5991] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.676428][ T8208] QAT: failed to copy from user. [ 107.678933][ T8208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.530'. [ 107.813364][ T5991] usb 11-1: GET_CAPABILITIES returned 0 [ 107.815820][ T5991] usbtmc 11-1:16.0: can't read capabilities [ 107.817905][ T8220] trusted_key: syz.4.534 sent an empty control message without MSG_MORE. [ 107.842656][ T8221] raw_sendmsg: syz.2.533 forgot to set AF_INET. Fix it! [ 107.967670][ T8236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.970259][ T8236] IPv6: NLM_F_CREATE should be set when creating new route [ 107.972607][ T8236] IPv6: NLM_F_CREATE should be set when creating new route [ 108.037181][ T24] usb 11-1: USB disconnect, device number 3 [ 108.055110][ T5934] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.059151][ T5934] Bluetooth: hci3: unexpected event for opcode 0x0804 [ 108.113261][ T8248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31145 sclass=netlink_route_socket pid=8248 comm=syz.4.543 [ 108.134542][ T5934] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.138217][ T5934] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.193099][ T8260] syzkaller0: entered promiscuous mode [ 108.195194][ T8260] syzkaller0: entered allmulticast mode [ 108.204297][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 108.204309][ T40] audit: type=1400 audit(1771461226.865:560): avc: denied { ioctl } for pid=8259 comm="syz.4.545" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.271438][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.549'. [ 108.277032][ T40] audit: type=1400 audit(1771461226.945:561): avc: denied { append } for pid=8268 comm="syz.6.549" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 108.277560][ T8269] netlink: 64 bytes leftover after parsing attributes in process `syz.6.549'. [ 108.315847][ T8261] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 108.345859][ T8273] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.552'. [ 108.349686][ T8273] openvswitch: netlink: Missing key (keys=40, expected=80) [ 108.353701][ T8273] /dev/sg0: Can't lookup blockdev [ 108.358492][ T40] audit: type=1400 audit(1771461227.025:562): avc: denied { remount } for pid=8274 comm="syz.2.553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 108.433822][ T8285] netlink: 'syz.5.555': attribute type 21 has an invalid length. [ 108.454093][ T40] audit: type=1400 audit(1771461227.115:563): avc: denied { ioctl } for pid=8286 comm="syz.6.556" path="socket:[25758]" dev="sockfs" ino=25758 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.489144][ T8289] netlink: 16 bytes leftover after parsing attributes in process `syz.6.557'. [ 108.502689][ T8290] netlink: 40 bytes leftover after parsing attributes in process `syz.5.555'. [ 108.555684][ T8291] netlink: 56 bytes leftover after parsing attributes in process `syz.6.557'. [ 109.368177][ T40] audit: type=1400 audit(1771461228.035:564): avc: denied { bind } for pid=8294 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 109.374470][ T40] audit: type=1400 audit(1771461228.035:565): avc: denied { mounton } for pid=8294 comm="syz.2.559" path="/file0" dev="ramfs" ino=26821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 109.391419][ T40] audit: type=1400 audit(1771461228.055:566): avc: denied { getopt } for pid=8295 comm="syz.6.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 109.393959][ T8305] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 109.417274][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.453977][ T8307] netlink: 'syz.2.562': attribute type 63 has an invalid length. [ 109.456726][ T8307] netlink: 5 bytes leftover after parsing attributes in process `syz.2.562'. [ 109.459639][ T8307] gretap0: entered allmulticast mode [ 109.461671][ T8307] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 109.524658][ T8312] openvswitch: netlink: Key type 51 is out of range max 32 [ 109.539934][ T8314] tipc: Started in network mode [ 109.542108][ T8314] tipc: Node identity 7f000001, cluster identity 4711 [ 109.546550][ T8314] tipc: Enabling of bearer rejected, failed to enable media [ 109.562484][ T8314] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 109.566853][ T8314] tipc: Enabled bearer , priority 10 [ 109.676842][ T8326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.568'. [ 109.680827][ T8326] fuse: Bad value for 'rootmode' [ 109.813367][ T40] audit: type=1400 audit(1771461228.475:567): avc: denied { create } for pid=8336 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 109.873720][ T5293] libceph: connect (1)[c::]:6789 error -101 [ 109.883463][ T5293] libceph: mon0 (1)[c::]:6789 connect error [ 110.097860][ T8351] netlink: 'syz.4.576': attribute type 4 has an invalid length. [ 110.104714][ T8351] netlink: 'syz.4.576': attribute type 4 has an invalid length. [ 110.145076][ T9] libceph: connect (1)[c::]:6789 error -101 [ 110.148326][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 110.204366][ T5293] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 110.322551][ T8361] netlink: 36 bytes leftover after parsing attributes in process `syz.6.578'. [ 110.348441][ T8365] binder: BINDER_SET_CONTEXT_MGR already set [ 110.351319][ T40] audit: type=1400 audit(1771461229.015:568): avc: denied { map } for pid=8362 comm="syz.6.580" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 110.354458][ T8365] binder: 8362:8365 ioctl 4018620d 200000000040 returned -16 [ 110.368815][ T5293] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 110.371768][ T5293] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 110.374533][ T5293] usb 7-1: Product: syz [ 110.375974][ T5293] usb 7-1: Manufacturer: syz [ 110.377490][ T5293] usb 7-1: SerialNumber: syz [ 110.385347][ T5293] usb 7-1: config 0 descriptor?? [ 110.396080][ T5293] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 110.396139][ T8369] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 110.398753][ T5293] dvb-usb: bulk message failed: -22 (2/0) [ 110.400564][ T8369] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 110.400779][ T8369] vhci_hcd vhci_hcd.0: Device attached [ 110.407310][ T8370] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 0 [ 110.408135][ T5293] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.416205][ T46] vhci_hcd vhci_hcd.6: stop threads [ 110.421399][ T46] vhci_hcd vhci_hcd.6: release socket [ 110.423699][ T46] vhci_hcd vhci_hcd.6: disconnect device [ 110.426828][ T5293] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 110.430422][ T5293] usb 7-1: media controller created [ 110.442933][ T5293] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.458766][ T8375] openvswitch: netlink: IP tunnel dst address not specified [ 110.495058][ T40] audit: type=1400 audit(1771461229.165:569): avc: denied { append } for pid=8380 comm="syz.5.584" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.594591][ T8347] dvb-usb: bulk message failed: -22 (4/0) [ 110.598368][ T8347] cxusb: i2c read failed [ 110.664739][ T9] libceph: connect (1)[c::]:6789 error -101 [ 110.667005][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 111.583260][ T1204] tipc: Node number set to 2130706433 [ 111.668052][ T9] libceph: connect (1)[c::]:6789 error -101 [ 111.670151][ T8393] kAFS: unable to lookup cell '(,c¾Ì' [ 111.670276][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 111.715102][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.590'. [ 111.722951][ T97] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.735952][ T97] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.739103][ T97] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.742654][ T97] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.748066][ T8397] nfsd: Unknown parameter 'no' [ 111.889023][ T8407] program syz.6.596 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.088537][ T5934] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 112.090756][ T5934] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 112.123153][ T8435] tipc: Enabled bearer , priority 0 [ 112.128069][ T8435] syzkaller0: entered promiscuous mode [ 112.130287][ T8435] syzkaller0: entered allmulticast mode [ 112.147035][ T8435] tipc: Resetting bearer [ 112.147203][ T5934] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 112.199664][ T8450] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 112.200522][ T8449] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 112.319913][ T8441] tipc: Resetting bearer [ 112.328458][ T8441] tipc: Disabling bearer [ 112.450142][ T8460] syzkaller1: entered promiscuous mode [ 112.451955][ T8460] syzkaller1: entered allmulticast mode [ 112.454988][ T8462] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 112.525178][ T8474] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=8474 comm=syz.4.614 [ 112.531677][ T8474] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=8474 comm=syz.4.614 [ 112.587263][ T8479] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 112.686250][ T8490] 9p: p9: multiple sources not supported [ 112.845599][ T8505] ceph: Path missing in source [ 112.852520][ T8339] ceph: No mds server is up or the cluster is laggy [ 112.889063][ T5293] cxusb: set interface failed [ 112.890678][ T5293] dvb-usb: bulk message failed: -22 (1/0) [ 112.897975][ T8511] 9pnet_virtio: no channels available for device syz [ 112.911166][ T5293] DVB: Unable to find symbol mt352_attach() [ 112.913219][ T5293] dvb-usb: bulk message failed: -22 (5/0) [ 112.921265][ T5293] zl10353_read_register: readreg error (reg=127, ret==-121) [ 112.923775][ T5293] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 112.934424][ T6179] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 112.974388][ T5293] rc_core: IR keymap rc-dvico-mce not found [ 112.979065][ T5293] Registered IR keymap rc-empty [ 112.981899][ T5293] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 112.987333][ T5293] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input12 [ 112.996059][ T5293] dvb-usb: schedule remote query interval to 100 msecs. [ 112.998311][ T5293] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 112.999285][ T8528] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 113.006268][ T5293] usb 7-1: USB disconnect, device number 14 [ 113.051602][ T5293] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 113.055444][ T8531] overlayfs: conflicting options: nfs_export=on,index=off [ 113.058936][ T8532] overlayfs: conflicting options: nfs_export=on,index=off [ 113.093634][ T8536] netlink: 'syz.2.632': attribute type 8 has an invalid length. [ 113.105926][ T6179] usb 11-1: Using ep0 maxpacket: 8 [ 113.115640][ T6179] usb 11-1: config 0 interface 0 has no altsetting 0 [ 113.117894][ T6179] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 113.120821][ T6179] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.123437][ T8538] random: crng reseeded on system resumption [ 113.126760][ T6179] usb 11-1: config 0 descriptor?? [ 113.145299][ T8540] netlink: 'syz.2.632': attribute type 8 has an invalid length. [ 113.157564][ T1141] Bluetooth: (null): Invalid header checksum [ 113.254477][ T34] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 113.264574][ T1141] Bluetooth: (null): Invalid header checksum [ 113.268600][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 113.268612][ T40] audit: type=1400 audit(1771461231.935:588): avc: denied { ioctl } for pid=8543 comm="syz.2.633" path="socket:[29055]" dev="sockfs" ino=29055 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.384569][ T60] Bluetooth: (null): Invalid header checksum [ 113.439280][ T34] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 113.441760][ T34] usb 9-1: can't read configurations, error -71 [ 113.505750][ T1141] Bluetooth: (null): Invalid header checksum [ 113.529939][ T8561] __nla_validate_parse: 8 callbacks suppressed [ 113.529951][ T8561] netlink: 9 bytes leftover after parsing attributes in process `syz.4.639'. [ 113.535157][ T8561] 0·: renamed from hsr0 (while UP) [ 113.539286][ T8561] 0·: entered allmulticast mode [ 113.540880][ T8561] hsr_slave_0: entered allmulticast mode [ 113.542735][ T8561] hsr_slave_1: entered allmulticast mode [ 113.545698][ T8561] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 113.547288][ T6179] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 113.624758][ T60] Bluetooth: (null): Invalid header checksum [ 113.630348][ T8538] Unrecognized hibernate image header format! [ 113.632359][ T8538] PM: hibernation: Image mismatch: architecture specific data [ 113.800772][ T6179] usb 11-1: USB disconnect, device number 4 [ 113.862712][ T8573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.644'. [ 113.885906][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.5.642'. [ 113.892840][ T8573] loop2: detected capacity change from 0 to 7 [ 113.907014][ T8573] Dev loop2: unable to read RDB block 7 [ 113.908811][ T8573] loop2: AHDI p1 p2 p3 [ 113.910238][ T8573] loop2: partition table partially beyond EOD, truncated [ 113.914679][ T8573] loop2: p1 start 1601398130 is beyond EOD, truncated [ 113.917240][ T8573] loop2: p2 start 1702059890 is beyond EOD, truncated [ 113.924838][ T40] audit: type=1400 audit(1771461232.595:589): avc: denied { setopt } for pid=8572 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.012688][ T40] audit: type=1400 audit(1771461232.675:590): avc: denied { ioctl } for pid=8581 comm="syz.5.646" path="/80/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70ce scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 114.057975][ T8585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=8585 comm=syz.5.647 [ 114.075139][ T8585] netlink: 'syz.5.647': attribute type 5 has an invalid length. [ 114.162620][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.247643][ T5926] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.251136][ T5926] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.255003][ T5926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.257027][ T8590] tipc: Started in network mode [ 114.258737][ T5926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.259090][ T8590] tipc: Node identity , cluster identity 4711 [ 114.264668][ T5926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.298148][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.465649][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.560319][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.618887][ T8593] chnl_net:caif_netlink_parms(): no params data found [ 114.629689][ T8627] loop2: detected capacity change from 0 to 7 [ 114.636830][ T8628] delete_channel: no stack [ 114.639174][ T40] audit: type=1400 audit(1771461233.305:591): avc: denied { ioctl } for pid=8625 comm="syz.4.659" path="socket:[28046]" dev="sockfs" ino=28046 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 114.644517][ T8627] Dev loop2: unable to read RDB block 7 [ 114.649147][ T8627] loop2: AHDI p1 p4 [ 114.650602][ T8627] loop2: partition table partially beyond EOD, truncated [ 114.656547][ T8627] loop2: p1 start 1818582900 is beyond EOD, truncated [ 114.663578][ T8628] netlink: 'syz.4.659': attribute type 2 has an invalid length. [ 114.667853][ T8626] netlink: 'syz.4.659': attribute type 2 has an invalid length. [ 114.705067][ T40] audit: type=1400 audit(1771461233.365:592): avc: denied { name_bind } for pid=8622 comm="syz.5.656" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 114.720673][ T40] audit: type=1400 audit(1771461233.385:593): avc: denied { bpf } for pid=8638 comm="syz.6.661" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.727527][ T40] audit: type=1400 audit(1771461233.385:594): avc: denied { perfmon } for pid=8638 comm="syz.6.661" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.751029][ T8639] netlink: 16 bytes leftover after parsing attributes in process `syz.6.661'. [ 114.817203][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.821191][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.827110][ T8593] bridge_slave_0: entered allmulticast mode [ 114.831006][ T8593] bridge_slave_0: entered promiscuous mode [ 114.864979][ T8593] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.867262][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.869638][ T8593] bridge_slave_1: entered allmulticast mode [ 114.872358][ T8593] bridge_slave_1: entered promiscuous mode [ 114.887744][ T46] bridge_slave_1: left allmulticast mode [ 114.890053][ T46] bridge_slave_1: left promiscuous mode [ 114.892347][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.897831][ T46] bridge_slave_0: left allmulticast mode [ 114.900188][ T46] bridge_slave_0: left promiscuous mode [ 114.902768][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.903054][ T40] audit: type=1400 audit(1771461233.565:595): avc: denied { name_bind } for pid=8660 comm="syz.6.666" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 115.110465][ T46] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 115.148749][ T46] gretap0 (unregistering): left promiscuous mode [ 115.222761][ T40] audit: type=1400 audit(1771461233.885:596): avc: denied { mounton } for pid=8664 comm="syz.5.664" path="/86/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 115.272885][ T8666] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 115.332369][ T46] bond0 (unregistering): left promiscuous mode [ 115.335278][ T46] bond_slave_0: left promiscuous mode [ 115.337598][ T46] bond_slave_1: left promiscuous mode [ 115.339802][ T46] batadv0: left promiscuous mode [ 115.346099][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.350342][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.354522][ T46] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 115.358050][ T46] bond0 (unregistering): Released all slaves [ 115.362591][ T46] bond1 (unregistering): Released all slaves [ 115.368922][ T46] bond2 (unregistering): Released all slaves [ 115.386212][ T8593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.390749][ T8593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.430495][ T8593] team0: Port device team_slave_0 added [ 115.440162][ T8593] team0: Port device team_slave_1 added [ 115.480920][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.483494][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.491999][ T8593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.497244][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.499664][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.508417][ T8593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.520977][ T8681] netlink: 344 bytes leftover after parsing attributes in process `syz.6.672'. [ 115.524659][ T8681] xt_l2tp: v2 doesn't support IP mode [ 115.526607][ T8681] netlink: 'syz.6.672': attribute type 1 has an invalid length. [ 115.555793][ T8688] loop7: detected capacity change from 0 to 7 [ 115.556655][ T8681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.564607][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.566882][ T8593] hsr_slave_0: entered promiscuous mode [ 115.567693][ C2] buffer_io_error: 40 callbacks suppressed [ 115.567701][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 115.569964][ T8593] hsr_slave_1: entered promiscuous mode [ 115.572553][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.576130][ T8681] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 115.577253][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 115.586695][ T8681] bond1: entered allmulticast mode [ 115.591217][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.594278][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 115.598541][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.601593][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 115.604521][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.607626][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 115.610289][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.613296][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 115.618048][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.621184][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 115.624257][ T6048] ldm_validate_partition_table(): Disk read failed. [ 115.626476][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.627871][ T8681] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 115.629552][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 115.635395][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.638477][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 115.641118][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.644257][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 115.650654][ T6048] Dev loop7: unable to read RDB block 0 [ 115.652944][ T6048] loop7: unable to read partition table [ 115.656298][ T6048] loop7: partition table beyond EOD, truncated [ 115.667419][ T8688] ldm_validate_partition_table(): Disk read failed. [ 115.669975][ T8688] Dev loop7: unable to read RDB block 0 [ 115.672074][ T8688] loop7: unable to read partition table [ 115.673954][ T8688] loop7: partition table beyond EOD, truncated [ 115.676769][ T8688] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 115.843304][ T8593] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 115.847674][ T8593] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 115.865067][ T8593] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 115.871030][ T8593] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 115.911287][ T8695] syz.4.676 (8695): drop_caches: 2 [ 115.973355][ T8593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.986397][ T8665] overlayfs: statfs failed on './file0' [ 116.016049][ T8593] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.022512][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.024854][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.033736][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.036173][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.217771][ T8593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.283920][ T40] audit: type=1400 audit(1771461234.945:597): avc: denied { mount } for pid=8755 comm="syz.5.683" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 116.295716][ T5934] Bluetooth: hci2: command tx timeout [ 116.411506][ T8775] loop5: detected capacity change from 0 to 7 [ 116.417319][ T8775] Dev loop5: unable to read RDB block 7 [ 116.419569][ T8775] loop5: AHDI p1 [ 116.421059][ T8775] loop5: partition table partially beyond EOD, truncated [ 116.432504][ T8775] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 116.434670][ T8775] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.438984][ T8775] vhci_hcd vhci_hcd.0: Device attached [ 116.546952][ T8593] veth0_vlan: entered promiscuous mode [ 116.553200][ T8593] veth1_vlan: entered promiscuous mode [ 116.576430][ T8593] veth0_macvtap: entered promiscuous mode [ 116.581709][ T5934] Bluetooth: hci1: unexpected event for opcode 0x040e [ 116.582042][ T8593] veth1_macvtap: entered promiscuous mode [ 116.596067][ T8593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.603589][ T8593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.613675][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.621316][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.624915][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.632966][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.692981][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.695041][ T6179] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 116.699942][ T59] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 116.705178][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.747657][ T8783] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.689'. [ 116.764354][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.766903][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.834638][ T8794] fuse: Bad value for 'user_id' [ 116.836275][ T8794] fuse: Bad value for 'user_id' [ 116.845613][ T8794] netlink: 52 bytes leftover after parsing attributes in process `syz.6.692'. [ 116.867881][ T8794] ufs: You didn't specify the type of your ufs filesystem [ 116.867881][ T8794] [ 116.867881][ T8794] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 116.867881][ T8794] [ 116.867881][ T8794] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 116.877761][ T8794] ufs: failed to set blocksize [ 116.885685][ T59] usb 10-1: config 0 has no interfaces? [ 116.887502][ T59] usb 10-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 116.890563][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.905528][ T59] usb 10-1: config 0 descriptor?? [ 116.908797][ T8794] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 117.095755][ T34] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 117.113209][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.118816][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.244531][ T6179] usb 47-1: device descriptor read/64, error -71 [ 117.245380][ T34] usb 12-1: Using ep0 maxpacket: 8 [ 117.250078][ T34] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 117.252802][ T34] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.256089][ T34] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.259282][ T34] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.262498][ T34] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.266876][ T34] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.269850][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.480977][ T34] usb 12-1: GET_CAPABILITIES returned 0 [ 117.482881][ T34] usbtmc 12-1:16.0: can't read capabilities [ 117.494378][ T6179] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 117.624692][ T1204] usb 10-1: USB disconnect, device number 7 [ 117.631930][ T8776] vhci_hcd: connection closed [ 117.632176][ T12] vhci_hcd vhci_hcd.5: stop threads [ 117.636229][ T12] vhci_hcd vhci_hcd.5: release socket [ 117.639307][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 117.686486][ T8799] netlink: 32 bytes leftover after parsing attributes in process `syz.7.650'. [ 117.690224][ T5991] usb 12-1: USB disconnect, device number 2 [ 117.859599][ T8830] netlink: 'syz.6.702': attribute type 29 has an invalid length. [ 117.998129][ T8819] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.002081][ T8819] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.004099][ T8819] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.006578][ T8819] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.008542][ T8819] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 118.015322][ T8819] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 118.053730][ T8839] support for cryptoloop has been removed. Use dm-crypt instead. [ 118.093123][ T8842] ªªªªªª5gæ¹Q[Ô: renamed from lo (while UP) [ 118.168313][ T8834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1032 sclass=netlink_route_socket pid=8834 comm=syz.6.704 [ 118.219866][ T8852] program syz.6.708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.241628][ T8854] use of bytesused == 0 is deprecated and will be removed in the future, [ 118.244726][ T8854] use the actual size instead. [ 118.366257][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.6.708'. [ 118.524064][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 118.524076][ T40] audit: type=1400 audit(1771461237.185:601): avc: denied { block_suspend } for pid=8869 comm="syz.7.713" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.623002][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.7.713'. [ 118.629362][ T8889] netlink: 20 bytes leftover after parsing attributes in process `syz.6.719'. [ 118.668972][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.720'. [ 118.675231][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.720'. [ 118.799703][ T46] hsr_slave_0: left promiscuous mode [ 118.804931][ T46] hsr_slave_1: left promiscuous mode [ 118.811824][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.814582][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.821258][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.823626][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.833871][ T46] veth1_macvtap: left promiscuous mode [ 118.835832][ T46] veth0_macvtap: left promiscuous mode [ 118.898264][ T8900] overlayfs: missing 'lowerdir' [ 118.993559][ T46] team0 (unregistering): Port device team_slave_1 removed [ 119.007689][ T46] team0 (unregistering): Port device team_slave_0 removed [ 119.080977][ T8915] netlink: 36 bytes leftover after parsing attributes in process `syz.4.724'. [ 119.147777][ T8924] loop7: detected capacity change from 0 to 524255232 [ 119.228784][ T40] audit: type=1400 audit(1771461237.895:602): avc: denied { setopt } for pid=8925 comm="syz.5.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.247413][ T40] audit: type=1400 audit(1771461237.905:603): avc: denied { connect } for pid=8925 comm="syz.5.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.254352][ T5926] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.266008][ T8932] netlink: 830 bytes leftover after parsing attributes in process `syz.4.730'. [ 119.322014][ T8939] team_slave_1: mtu greater than device maximum [ 119.329287][ T8939] team0: Device team_slave_1 failed to change mtu [ 119.396696][ T8949] netlink: 36 bytes leftover after parsing attributes in process `syz.4.735'. [ 119.402444][ T8949] netlink: 184 bytes leftover after parsing attributes in process `syz.4.735'. [ 119.535172][ T8982] netlink: 16 bytes leftover after parsing attributes in process `syz.4.738'. [ 119.598666][ T8994] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.741'. [ 119.628579][ T8937] cgroup: fork rejected by pids controller in /syz6 [ 119.784808][ T9008] syz.4.743 (9008): /proc/9003/oom_adj is deprecated, please use /proc/9003/oom_score_adj instead. [ 119.834380][ T5991] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 120.014729][ T5991] usb 12-1: no configurations [ 120.016269][ T5991] usb 12-1: can't read configurations, error -22 [ 120.034317][ T5990] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 120.054480][ T5283] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.056522][ T5937] Bluetooth: hci2: command 0x040f tx timeout [ 120.059817][ T5934] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.144403][ T5991] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 120.164314][ T5990] usb 9-1: device descriptor read/64, error -71 [ 120.304734][ T5991] usb 12-1: no configurations [ 120.306292][ T5991] usb 12-1: can't read configurations, error -22 [ 120.308496][ T5991] usb usb12-port1: attempt power cycle [ 120.404292][ T5990] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 120.535776][ T5990] usb 9-1: device descriptor read/64, error -71 [ 120.607292][ T9061] 9pnet_fd: Insufficient options for proto=fd [ 120.645176][ T5990] usb usb9-port1: attempt power cycle [ 120.654370][ T5991] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 120.682587][ T5991] usb 12-1: no configurations [ 120.684840][ T5991] usb 12-1: can't read configurations, error -22 [ 120.742456][ T9072] netlink: 'syz.5.753': attribute type 21 has an invalid length. [ 120.745772][ T9072] netlink: 'syz.5.753': attribute type 21 has an invalid length. [ 120.772402][ T40] audit: type=1800 audit(1771461239.435:604): pid=9076 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.754" name="bus" dev="overlay" ino=665 res=0 errno=0 [ 120.814957][ T5991] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 120.832825][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.855748][ T5991] usb 12-1: no configurations [ 120.857851][ T5991] usb 12-1: can't read configurations, error -22 [ 120.861712][ T5991] usb usb12-port1: unable to enumerate USB device [ 120.889445][ T9078] 9p: Could not find request transport: v [ 120.946277][ T40] audit: type=1400 audit(1771461239.615:605): avc: denied { map } for pid=9077 comm="syz.5.755" path="socket:[31791]" dev="sockfs" ino=31791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.984389][ T5990] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 121.004744][ T5990] usb 9-1: device descriptor read/8, error -71 [ 121.124321][ T59] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 121.244343][ T5990] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 121.265083][ T5990] usb 9-1: device descriptor read/8, error -71 [ 121.276655][ T59] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 121.281384][ T59] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.286084][ T59] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.290248][ T59] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 121.296314][ T59] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 121.299758][ T59] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 121.303066][ T59] usb 11-1: Manufacturer: syz [ 121.307543][ T59] usb 11-1: config 0 descriptor?? [ 121.374604][ T5990] usb usb9-port1: unable to enumerate USB device [ 121.964311][ T34] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 122.125552][ T34] usb 10-1: config 0 has no interfaces? [ 122.127360][ T34] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 122.130250][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.134071][ T34] usb 10-1: config 0 descriptor?? [ 122.140963][ T5934] Bluetooth: hci2: command 0x040f tx timeout [ 122.345339][ T59] usbhid 11-1:0.0: can't add hid device: -71 [ 122.347417][ T59] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 122.352832][ T59] usb 11-1: USB disconnect, device number 5 [ 122.595141][ T9099] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 122.597418][ T9099] overlayfs: failed to set xattr on upper [ 122.600177][ T9099] overlayfs: ...falling back to redirect_dir=nofollow. [ 122.602382][ T9099] overlayfs: ...falling back to index=off. [ 122.604338][ T9099] overlayfs: ...falling back to uuid=null. [ 122.607000][ T6179] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 122.611108][ T9099] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 122.644901][ T40] audit: type=1400 audit(1771461241.305:606): avc: denied { read append } for pid=9100 comm="syz.7.763" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 122.654191][ T9101] deleting an unspecified loop device is not supported. [ 122.665386][ T40] audit: type=1400 audit(1771461241.315:607): avc: denied { open } for pid=9100 comm="syz.7.763" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 122.673925][ T40] audit: type=1400 audit(1771461241.315:608): avc: denied { ioctl } for pid=9100 comm="syz.7.763" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 122.687431][ T9105] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 122.689879][ T9105] SELinux: failed to load policy [ 122.737377][ T9112] overlayfs: failed to set uuid (124/file1, err=-1); falling back to uuid=null. [ 122.744881][ T9109] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 122.752734][ T9112] overlayfs: failed to verify upper root origin [ 123.124346][ T59] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 123.204407][ T9162] nbd0: detected capacity change from 0 to 63 [ 123.218008][ T5934] block nbd0: Receive control failed (result -104) [ 123.233991][ T40] audit: type=1400 audit(1771461241.895:609): avc: denied { setopt } for pid=9167 comm="syz.4.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 123.234568][ T9168] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 123.286071][ T59] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 123.289846][ T59] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.293534][ T59] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.297076][ T59] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 123.303927][ T59] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 123.308127][ T59] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 123.309468][ T40] audit: type=1400 audit(1771461241.975:610): avc: denied { read write } for pid=9171 comm="syz.4.784" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 123.311692][ T59] usb 12-1: Manufacturer: syz [ 123.325317][ T59] usb 12-1: config 0 descriptor?? [ 123.326081][ T5991] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 123.332953][ T5991] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 123.452046][ T9158] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.730717][ T59] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 123.736392][ T59] appleir 0003:05AC:8243.0008: hiddev0,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 123.830788][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 123.830803][ T40] audit: type=1400 audit(1771461242.495:613): avc: denied { read } for pid=9178 comm="syz.6.785" dev="nsfs" ino=4026533731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 123.842264][ T40] audit: type=1400 audit(1771461242.495:614): avc: denied { open } for pid=9178 comm="syz.6.785" path="net:[4026533731]" dev="nsfs" ino=4026533731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 123.851656][ T40] audit: type=1400 audit(1771461242.505:615): avc: denied { read } for pid=9178 comm="syz.6.785" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 123.860754][ T40] audit: type=1400 audit(1771461242.505:616): avc: denied { open } for pid=9178 comm="syz.6.785" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 123.870343][ T40] audit: type=1400 audit(1771461242.505:617): avc: denied { ioctl } for pid=9178 comm="syz.6.785" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 123.885461][ T40] audit: type=1400 audit(1771461242.555:618): avc: denied { getopt } for pid=9178 comm="syz.6.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 123.888801][ T9179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6676 sclass=netlink_route_socket pid=9179 comm=syz.6.785 [ 123.935651][ T9178] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 123.990067][ T5991] IPVS: starting estimator thread 0... [ 123.997658][ T5991] usb 12-1: USB disconnect, device number 7 [ 124.062028][ T40] audit: type=1400 audit(1771461242.725:619): avc: denied { write } for pid=9182 comm="syz.6.786" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.074420][ T9181] IPVS: using max 43 ests per chain, 103200 per kthread [ 124.101078][ T9185] xt_l2tp: v2 tid > 0xffff: 2031748 [ 124.222433][ T9195] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 124.227619][ T5934] Bluetooth: hci2: command 0x040f tx timeout [ 124.258327][ T9199] XFS (nbd4): SB validate failed with error -5. [ 124.505308][ T9222] macvtap0: entered allmulticast mode [ 124.507090][ T9222] veth0_macvtap: entered allmulticast mode [ 124.538792][ T40] audit: type=1400 audit(1771461243.205:620): avc: denied { write } for pid=9225 comm="syz.7.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.555382][ T40] audit: type=1400 audit(1771461243.225:621): avc: denied { read } for pid=9225 comm="syz.7.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.575085][ T39] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 124.609424][ T9231] can0: slcan on ttyS3. [ 124.672585][ T9231] kvm: kvm [9229]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 124.676096][ T9231] kvm: kvm [9229]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 124.734314][ T39] usb 9-1: Using ep0 maxpacket: 8 [ 124.740635][ T34] usb 10-1: USB disconnect, device number 8 [ 124.743929][ T39] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 124.752447][ T39] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 124.770171][ T39] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 124.778789][ T39] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 124.784032][ T39] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 124.790842][ T39] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.796583][ T39] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.798837][ T9241] can0 (unregistered): slcan off ttyS3. [ 124.799901][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.809259][ T9252] __nla_validate_parse: 10 callbacks suppressed [ 124.809269][ T9252] netlink: 56 bytes leftover after parsing attributes in process `syz.7.805'. [ 124.814139][ T9252] netlink: 56 bytes leftover after parsing attributes in process `syz.7.805'. [ 124.821390][ T40] audit: type=1400 audit(1771461243.485:622): avc: denied { watch } for pid=9251 comm="syz.7.805" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 124.896016][ T5991] libceph: connect (1)[c::]:6789 error -101 [ 124.898024][ T5991] libceph: mon0 (1)[c::]:6789 connect error [ 124.996188][ T9262] ceph: No mds server is up or the cluster is laggy [ 125.027467][ T39] usb 9-1: usb_control_msg returned -32 [ 125.029273][ T39] usbtmc 9-1:16.0: can't read capabilities [ 125.331779][ T9285] overlayfs: conflicting lowerdir path [ 125.393934][ T9288] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -71 [ 125.397257][ T9288] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 125.402467][ T9290] gfs2: Unknown parameter 'discardÿ·' [ 125.410169][ T9290] netlink: 36 bytes leftover after parsing attributes in process `syz.7.816'. [ 125.423605][ T39] usb 9-1: USB disconnect, device number 16 [ 125.694308][ T5998] usb 12-1: new full-speed USB device number 8 using dummy_hcd [ 125.846221][ T5998] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.850337][ T5998] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 125.853937][ T5998] usb 12-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 125.857586][ T5998] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.862538][ T5998] usb 12-1: config 0 descriptor?? [ 125.867747][ T5998] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 125.870757][ T5998] dvb-usb: bulk message failed: -22 (3/0) [ 125.877270][ T5998] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 125.881113][ T5998] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 125.883963][ T5998] usb 12-1: media controller created [ 125.887657][ T5998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.897694][ T5998] dvb-usb: bulk message failed: -22 (6/0) [ 125.900245][ T5998] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 125.906368][ T5998] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb12/12-1/input/input13 [ 125.913367][ T5998] dvb-usb: schedule remote query interval to 150 msecs. [ 125.924329][ T5998] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 125.974192][ T9297] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.047107][ T5934] Bluetooth: hci3: adv larger than maximum supported [ 126.086634][ T5998] dvb-usb: bulk message failed: -22 (1/0) [ 126.096167][ T5998] dvb-usb: error while querying for an remote control event. [ 126.101004][ T5998] usb 12-1: USB disconnect, device number 8 [ 126.128641][ T5998] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 126.166594][ T9307] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 126.195793][ T9317] binder: 9314:9317 unknown command 0 [ 126.196430][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.827'. [ 126.197549][ T9317] binder: 9314:9317 ioctl c0306201 200000000080 returned -22 [ 126.209237][ T9316] input: syz0 as /devices/virtual/input/input14 [ 126.230236][ T9316] overlay: filesystem on ./bus is read-only [ 126.232845][ T9319] openvswitch: netlink: Message has 25 unknown bytes. [ 126.269692][ T5934] Bluetooth: hci1: unexpected cc 0x2003 length: 1 < 9 [ 126.271990][ T5934] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 126.285971][ T9329] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 126.289235][ T9329] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 126.292281][ T9329] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 126.294783][ T5934] Bluetooth: hci2: command 0x040f tx timeout [ 126.294933][ T9329] UDF-fs: Scanning with blocksize 512 failed [ 126.299923][ T9329] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 126.303083][ T9329] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 126.307145][ T9329] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 126.309650][ T9329] UDF-fs: Scanning with blocksize 1024 failed [ 126.311876][ T9329] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 126.316357][ T9329] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 126.319609][ T9329] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 126.322120][ T9329] UDF-fs: Scanning with blocksize 2048 failed [ 126.325501][ T9329] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 126.328608][ T9329] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 126.331711][ T9329] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 126.334186][ T9329] UDF-fs: Scanning with blocksize 4096 failed [ 126.336688][ T9329] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 126.409114][ T9341] netlink: 'syz.4.836': attribute type 4 has an invalid length. [ 126.476940][ T9341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.836'. [ 126.617064][ T9365] netlink: 20 bytes leftover after parsing attributes in process `syz.7.842'. [ 126.623595][ T9365] pim6reg: entered allmulticast mode [ 126.706166][ T9375] tmpfs: Bad value for 'mpol' [ 126.746436][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 126.813461][ T9393] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.909938][ T9400] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 127.269856][ T9424] netlink: 32 bytes leftover after parsing attributes in process `syz.5.855'. [ 127.359670][ T9435] ipt_REJECT: ECHOREPLY no longer supported. [ 127.448851][ T9438] ipt_REJECT: ECHOREPLY no longer supported. [ 127.712962][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'. [ 128.054307][ T59] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 128.152118][ T9474] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 128.221369][ T59] usb 9-1: not running at top speed; connect to a high speed hub [ 128.225593][ T59] usb 9-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.230865][ T59] usb 9-1: config 1 interface 0 has no altsetting 0 [ 128.235290][ T59] usb 9-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.40 [ 128.239280][ T59] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.242583][ T59] usb 9-1: Product: 렉⋳⟧䰭Ô骜欧⥩㸋헰è¥á±’羼᜘낑𣏕씗횾欦툶籌這뇺ᷭ焗七밓懼å”çµ‹âµ‘ì¸‡ãžæ„¨æì»ƒã¹°ä„“෈ꑂ鱨ᰚâ³å¤ºÆŠä‘괻캬圔벮 [ 128.251770][ T59] usb 9-1: Manufacturer: à°Œ [ 128.255195][ T59] usb 9-1: SerialNumber: 꼤ëŸã‚„ঌ袕糕쓴ꪋ:㳔존ï¦èœ³â·‹åƒè§„䄟剖᧥云】ꊧꌶᧇ믩ᅱᤫ解꟨ﲟꆑ憌憑㼾 [ 128.260516][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.7.870'. [ 128.263964][ T9458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 128.286007][ T9480] team0 (unregistering): Port device team_slave_0 removed [ 128.297477][ T9480] team0 (unregistering): Port device team_slave_1 removed [ 128.375758][ T5934] Bluetooth: hci2: command 0x040f tx timeout [ 128.461715][ T9491] ucma_write: process 114 (syz.7.872) changed security contexts after opening file descriptor, this is not allowed. [ 128.705755][ T59] usbhid 9-1:1.0: can't add hid device: -71 [ 128.707703][ T59] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 128.711170][ T59] usb 9-1: USB disconnect, device number 17 [ 128.786644][ T9536] bridge_slave_0: left allmulticast mode [ 128.789126][ T9536] bridge_slave_0: left promiscuous mode [ 128.791762][ T9536] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.808831][ T9536] bridge_slave_1: left allmulticast mode [ 128.810851][ T9536] bridge_slave_1: left promiscuous mode [ 128.814304][ T9536] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.824847][ T9536] bond0: (slave bond_slave_0): Releasing backup interface [ 128.834455][ T5998] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 128.839065][ T9536] bond0: (slave bond_slave_1): Releasing backup interface [ 128.848993][ T9536] team0: Port device team_slave_0 removed [ 128.856027][ T9542] overlayfs: failed to resolve './file1': -2 [ 128.858157][ T9536] team0: Port device team_slave_1 removed [ 128.860791][ T9536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.863355][ T9536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.875929][ T9536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.878644][ T9536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.882731][ T9536] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 128.895952][ T24] syz0: Port: 1 Link DOWN [ 128.907005][ T9542] syzkaller0: entered promiscuous mode [ 128.909368][ T9542] syzkaller0: entered allmulticast mode [ 128.913357][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 128.913366][ T40] audit: type=1400 audit(1771461247.575:644): avc: denied { create } for pid=9541 comm="syz.7.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 128.958448][ T9552] hfsplus: unable to find HFS+ superblock [ 128.961083][ T40] audit: type=1400 audit(1771461247.625:645): avc: denied { write } for pid=9551 comm="syz.5.888" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.968776][ T40] audit: type=1400 audit(1771461247.625:646): avc: denied { connect } for pid=9551 comm="syz.5.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.996572][ T5998] usb 11-1: config 0 has an invalid interface number: 8 but max is 0 [ 128.999149][ T5998] usb 11-1: config 0 has no interface number 0 [ 129.001147][ T5998] usb 11-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 129.005525][ T5998] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 129.009270][ T5998] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 129.013740][ T5998] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 129.017031][ T5998] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 129.019676][ T5998] usb 11-1: Product: syz [ 129.021094][ T5998] usb 11-1: SerialNumber: syz [ 129.023811][ T5998] usb 11-1: config 0 descriptor?? [ 129.027317][ T5998] cm109 11-1:0.8: invalid payload size 0, expected 4 [ 129.030447][ T5998] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.8/input/input15 [ 129.031048][ T9560] program syz.7.890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.031458][ T9561] program syz.7.890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.034426][ T40] audit: type=1400 audit(1771461247.695:647): avc: denied { bind } for pid=9559 comm="syz.7.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 129.086567][ T9566] xt_bpf: check failed: parse error [ 129.133974][ T9579] netlink: 'syz.7.896': attribute type 23 has an invalid length. [ 129.229799][ C3] cm109 11-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 129.323057][ T9572] netlink: 'syz.4.894': attribute type 3 has an invalid length. [ 129.326331][ T9572] netlink: 'syz.4.894': attribute type 3 has an invalid length. [ 129.329651][ T9572] netlink: 'syz.4.894': attribute type 3 has an invalid length. [ 129.332874][ T9572] netlink: 'syz.4.894': attribute type 3 has an invalid length. [ 129.344495][ T9572] netlink: 'syz.4.894': attribute type 3 has an invalid length. [ 129.348605][ T9572] netlink: 'syz.4.894': attribute type 3 has an invalid length. [ 129.351943][ T9572] netlink: 'syz.4.894': attribute type 3 has an invalid length. [ 129.355474][ T9572] netlink: 'syz.4.894': attribute type 3 has an invalid length. [ 129.377184][ T9604] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 129.456082][ C1] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 129.459849][ C1] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 129.462280][ C1] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 129.464617][ T5991] usb 11-1: USB disconnect, device number 6 [ 129.464691][ C1] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 129.464704][ C1] cm109 11-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 129.474499][ T5991] cm109 11-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 129.519223][ T9616] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 129.707540][ T9630] nbd: must specify a size in bytes for the device [ 129.735201][ T9634] program syz.7.912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.740566][ T40] audit: type=1400 audit(1771461248.405:648): avc: denied { connect } for pid=9632 comm="syz.7.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 129.834312][ T9642] __nla_validate_parse: 9 callbacks suppressed [ 129.834324][ T9642] netlink: 36 bytes leftover after parsing attributes in process `syz.7.914'. [ 129.840599][ T9642] netlink: 28 bytes leftover after parsing attributes in process `syz.7.914'. [ 129.844391][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.7.914'. [ 129.847201][ T9642] netlink: 6 bytes leftover after parsing attributes in process `syz.7.914'. [ 130.002731][ T9644] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 130.006070][ T9644] SELinux: failed to load policy [ 130.068572][ T9649] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.917'. [ 130.132101][ T9653] ip6t_srh: unknown srh match flags 4000 [ 130.270727][ T9660] IPv6: addrconf: prefix option has invalid lifetime [ 130.454569][ T5934] Bluetooth: hci2: command 0x040f tx timeout [ 130.554438][ T6832] usb 11-1: new low-speed USB device number 7 using dummy_hcd [ 130.621973][ T9665] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 130.625015][ T9666] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 130.631721][ T40] audit: type=1400 audit(1771461249.295:649): avc: denied { execstack } for pid=9664 comm="syz.5.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 130.716526][ T5934] Bluetooth: hci3: Unknown advertising packet type: 0x70 [ 130.716557][ T5934] Bluetooth: hci3: Malformed LE Event: 0x0d [ 130.724981][ T6832] usb 11-1: unable to get BOS descriptor or descriptor too short [ 130.729222][ T6832] usb 11-1: no configurations [ 130.731112][ T6832] usb 11-1: can't read configurations, error -22 [ 130.817429][ T40] audit: type=1326 audit(1771461249.485:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9671 comm="syz.5.925" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c1bf9bf79 code=0x0 [ 131.565693][ T9681] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 131.744886][ T9689] netlink: 488 bytes leftover after parsing attributes in process `syz.6.931'. [ 131.824422][ T9687] validate_nla: 43 callbacks suppressed [ 131.824439][ T9687] netlink: 'syz.5.929': attribute type 1 has an invalid length. [ 131.849184][ T9687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.893630][ T9687] bond1: (slave veth3): Enslaving as an active interface with a down link [ 131.915056][ T9687] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 131.917697][ T9687] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 132.026679][ T9694] kvm: kvm [9693]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 132.029874][ T9694] kvm: kvm [9693]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 132.046473][ T9694] kvm: kvm [9693]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 132.065227][ T9694] kvm: kvm [9693]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 132.068589][ T9694] kvm: kvm [9693]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 132.295996][ T40] audit: type=1400 audit(1771461250.965:651): avc: denied { accept } for pid=9712 comm="syz.4.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 132.342795][ T40] audit: type=1400 audit(1771461251.005:652): avc: denied { create } for pid=9715 comm="syz.4.940" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.354858][ T40] audit: type=1400 audit(1771461251.025:653): avc: denied { write } for pid=9715 comm="syz.4.940" name="file0" dev="tmpfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.393966][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.940'. [ 132.398921][ T9716] syzkaller0: entered promiscuous mode [ 132.401290][ T9716] syzkaller0: entered allmulticast mode [ 132.508418][ T9722] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.942'. [ 132.631221][ T9730] netlink: 14 bytes leftover after parsing attributes in process `syz.4.945'. [ 132.770630][ T9737] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 132.774088][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.948'. [ 132.821776][ T9743] GUP no longer grows the stack in syz.7.949 (9743): 200000004000-200000005000 (200000001000) [ 132.827172][ T9743] CPU: 3 UID: 0 PID: 9743 Comm: syz.7.949 Not tainted syzkaller #0 PREEMPT(full) [ 132.827187][ T9743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 132.827194][ T9743] Call Trace: [ 132.827205][ T9743] [ 132.827209][ T9743] dump_stack_lvl+0x100/0x190 [ 132.827237][ T9743] gup_vma_lookup.cold+0x83/0x96 [ 132.827258][ T9743] __get_user_pages+0x241/0x34d0 [ 132.827330][ T9743] ? down_read_killable+0x30e/0x4c0 [ 132.827347][ T9743] ? __lock_acquire+0x4a5/0x2630 [ 132.827362][ T9743] ? __pfx___get_user_pages+0x10/0x10 [ 132.827380][ T9743] __gup_longterm_locked+0x87d/0x16f0 [ 132.827399][ T9743] ? __pfx___gup_longterm_locked+0x10/0x10 [ 132.827415][ T9743] ? try_get_folio+0x262/0x750 [ 132.827427][ T9743] ? find_held_lock+0x2b/0x80 [ 132.827443][ T9743] gup_fast_fallback+0x18c6/0x2460 [ 132.827467][ T9743] ? __pfx_gup_fast_fallback+0x10/0x10 [ 132.827483][ T9743] ? __lock_acquire+0x4a5/0x2630 [ 132.827499][ T9743] ? lock_acquire+0x17c/0x330 [ 132.827515][ T9743] ? find_held_lock+0x2b/0x80 [ 132.827528][ T9743] get_user_pages_fast+0xa7/0xf0 [ 132.827542][ T9743] ? __pfx_get_user_pages_fast+0x10/0x10 [ 132.827557][ T9743] ? __pfx___might_resched+0x10/0x10 [ 132.827575][ T9743] __iov_iter_get_pages_alloc+0x8ec/0x20d0 [ 132.827603][ T9743] ? pipe_lock+0x69/0x80 [ 132.827616][ T9743] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 132.827635][ T9743] ? __pfx___mutex_lock+0x10/0x10 [ 132.827652][ T9743] ? import_ubuf+0x1b6/0x220 [ 132.827672][ T9743] iov_iter_get_pages2+0xa3/0x100 [ 132.827690][ T9743] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 132.827709][ T9743] ? wait_for_space+0x2ca/0x3b0 [ 132.827726][ T9743] __do_sys_vmsplice+0x7eb/0x14f0 [ 132.827742][ T9743] ? __pfx_try_to_wake_up+0x10/0x10 [ 132.827757][ T9743] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 132.827770][ T9743] ? futex_private_hash_put+0x107/0x1c0 [ 132.827785][ T9743] ? futex_hash_put+0x43/0x50 [ 132.827805][ T9743] ? uinput_ioctl_handler.isra.0+0x279/0x1d10 [ 132.827836][ T9743] ? do_syscall_64+0x106/0xf80 [ 132.827850][ T9743] do_syscall_64+0x106/0xf80 [ 132.827864][ T9743] ? clear_bhb_loop+0x40/0x90 [ 132.827878][ T9743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.827888][ T9743] RIP: 0033:0x7fc2d499bf79 [ 132.827898][ T9743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.827909][ T9743] RSP: 002b:00007fc2d58a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 132.827920][ T9743] RAX: ffffffffffffffda RBX: 00007fc2d4c15fa0 RCX: 00007fc2d499bf79 [ 132.827927][ T9743] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000007 [ 132.827933][ T9743] RBP: 00007fc2d4a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 132.827939][ T9743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.827946][ T9743] R13: 00007fc2d4c16038 R14: 00007fc2d4c15fa0 R15: 00007ffced836b28 [ 132.827959][ T9743] [ 132.975891][ T9747] netlink: 'syz.7.950': attribute type 8 has an invalid length. [ 132.979197][ T9747] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 133.387966][ T9783] 0x000000000eb2-0x000000020ed1 : "" [ 133.389910][ T9783] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1f14e [ 133.401102][ T9783] ftl_cs: FTL header corrupt! [ 133.443547][ T9783] 9p: Bad value for 'rfdno' [ 133.457802][ T9795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.460509][ T9795] IPv6: NLM_F_CREATE should be set when creating new route [ 133.463892][ T9795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.466297][ T9795] IPv6: NLM_F_CREATE should be set when creating new route [ 133.485712][ T9797] EXT4-fs (nbd5): unable to read superblock [ 133.767828][ T9821] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.977' sets config #0 [ 133.795472][ T9823] fuse: Unknown parameter 'd' [ 133.975052][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 133.975064][ T40] audit: type=1400 audit(1771461508.645:670): avc: denied { execute } for pid=9836 comm="syz.7.983" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=35923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 134.028654][ T9841] fuse: Unknown parameter '&d' [ 134.034348][ T5934] Bluetooth: unknown link type 128 [ 134.035893][ T9841] CIFS: Unable to determine destination address [ 134.036860][ T9845] xt_hashlimit: size too large, truncated to 1048576 [ 134.089263][ T9850] kAFS: No cell specified [ 134.285175][ T9868] netlink: Unknown conntrack attr (0) [ 134.373902][ T40] audit: type=1400 audit(1771461509.035:671): avc: denied { create } for pid=9877 comm="syz.6.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 134.389675][ T40] audit: type=1400 audit(1771461509.035:672): avc: denied { bind } for pid=9877 comm="syz.6.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 134.404333][ T40] audit: type=1400 audit(1771461509.035:673): avc: denied { accept } for pid=9877 comm="syz.6.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 134.414750][ T40] audit: type=1400 audit(1771461509.035:674): avc: denied { write } for pid=9877 comm="syz.6.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 134.573819][ T9894] bridge0: entered promiscuous mode [ 134.602805][ T40] audit: type=1400 audit(1771461509.265:675): avc: denied { remove_name } for pid=9891 comm="syz.6.1003" name="file1" dev="9p" ino=72614207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.612919][ T40] audit: type=1400 audit(1771461509.265:676): avc: denied { unlink } for pid=9891 comm="syz.6.1003" name="file1" dev="9p" ino=72614207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.626779][ T5934] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 134.639901][ T40] audit: type=1400 audit(1771461509.275:677): avc: denied { create } for pid=9891 comm="syz.6.1003" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.650002][ T40] audit: type=1400 audit(1771461509.275:678): avc: denied { associate } for pid=9891 comm="syz.6.1003" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 134.694552][ T5934] Bluetooth: hci2: unexpected event for opcode 0x200c [ 134.704052][ T9907] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 134.766090][ T9916] tipc: Enabling of bearer rejected, failed to enable media [ 134.861709][ T40] audit: type=1400 audit(1771461509.525:679): avc: denied { setopt } for pid=9925 comm="syz.7.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 134.862352][ T9927] netlink: 'syz.5.1015': attribute type 4 has an invalid length. [ 134.875748][ T9926] __nla_validate_parse: 11 callbacks suppressed [ 134.875758][ T9926] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1016'. [ 134.876933][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'. [ 134.905047][ T9931] bridge0: entered promiscuous mode [ 134.937123][ T9937] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1020'. [ 134.978216][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1022'. [ 135.016450][ T9945] tmpfs: Bad value for 'mpol' [ 135.025840][ T9947] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1021'. [ 135.097665][ T9951] PKCS8: Unsupported PKCS#8 version [ 135.209133][ T9953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=9953 comm=syz.6.1027 [ 135.800310][ T9971] netlink: 'syz.5.1035': attribute type 9 has an invalid length. [ 135.803802][ T9971] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1035'. [ 135.927436][ T9982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1038'. [ 135.936655][ T9981] fuse: Bad value for 'group_id' [ 135.938329][ T9981] fuse: Bad value for 'group_id' [ 136.037078][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'. [ 136.040213][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'. [ 136.055989][ T5934] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.129608][T10010] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.1049'. [ 136.564304][ T5998] usb 12-1: new low-speed USB device number 9 using dummy_hcd [ 136.715903][ T5998] usb 12-1: config 0 interface 0 has no altsetting 0 [ 136.718145][ T5998] usb 12-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 136.721165][ T5998] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.726588][ T5998] usb 12-1: config 0 descriptor?? [ 136.761534][T10050] xt_CT: No such helper "snmp_trap" [ 136.927264][T10055] mkiss: ax0: crc mode is auto. [ 137.141121][ T5998] input: HID 28bd:0935 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:28BD:0935.0009/input/input18 [ 137.266461][ T5998] uclogic 0003:28BD:0935.0009: input,hidraw1: USB HID vff.ff Mouse [HID 28bd:0935] on usb-dummy_hcd.7-1/input0 [ 137.737382][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.739462][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.768806][T10107] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 138.130685][T10121] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 138.286181][T10146] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 138.288339][T10146] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 138.290902][T10146] vhci_hcd vhci_hcd.0: Device attached [ 138.380176][T10153] netlink: 'syz.4.1086': attribute type 29 has an invalid length. [ 138.386755][T10153] netlink: 'syz.4.1086': attribute type 29 has an invalid length. [ 138.393407][T10153] vcan1: entered allmulticast mode [ 138.574843][ T39] usb 48-1: SetAddress Request (2) to port 0 [ 138.577722][ T39] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 138.655396][T10148] vhci_hcd: connection reset by peer [ 138.657418][ T60] vhci_hcd vhci_hcd.5: stop threads [ 138.659251][ T60] vhci_hcd vhci_hcd.5: release socket [ 138.661403][ T60] vhci_hcd vhci_hcd.5: disconnect device [ 139.181356][T10199] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 139.323531][ T5998] usb 12-1: USB disconnect, device number 9 [ 139.350063][T10204] hsr_slave_0: left promiscuous mode [ 139.359788][T10204] hsr_slave_1: left promiscuous mode [ 139.447784][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 139.447797][ T40] audit: type=1400 audit(139.276:701): avc: denied { append } for pid=10222 comm="syz.7.1103" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 139.609289][T10240] fuse: Bad value for 'fd' [ 139.611867][T10240] fuse: Bad value for 'fd' [ 139.622636][ T40] audit: type=1400 audit(139.446:702): avc: denied { unmount } for pid=8593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 139.689627][T10247] exFAT-fs (nullb0): invalid boot record signature [ 139.691857][T10247] exFAT-fs (nullb0): failed to read boot sector [ 139.693822][T10247] exFAT-fs (nullb0): failed to recognize exfat type [ 139.752114][T10251] 8021q: VLANs not supported on ip6gre0 [ 139.949782][T10259] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.112258][T10275] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 140.138751][T10275] kvm: pic: non byte read [ 140.141374][T10275] kvm: pic: level sensitive irq not supported [ 140.141719][T10275] kvm: pic: non byte read [ 140.176554][ T40] audit: type=1400 audit(140.006:703): avc: denied { write } for pid=10287 comm="syz.7.1120" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 140.187274][T10288] sd 0:0:0:0: PR command failed: 1026 [ 140.187316][T10288] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 140.187350][T10288] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 140.195360][T10288] sd 0:0:0:0: PR command failed: 1026 [ 140.197154][T10288] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 140.199315][T10288] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 140.208059][T10288] program syz.7.1120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.208114][T10289] program syz.7.1120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.215420][ T5934] Bluetooth: hci1: unexpected cc 0x203d length: 9 > 1 [ 140.217990][ T40] audit: type=1400 audit(140.046:704): avc: denied { connect } for pid=10293 comm="syz.6.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.227537][ T5934] Bluetooth: hci1: unexpected event for opcode 0x203d [ 140.285780][T10307] loop2: detected capacity change from 0 to 7 [ 140.288765][T10307] Dev loop2: unable to read RDB block 7 [ 140.291119][T10307] loop2: AHDI p1 p2 [ 140.292452][T10307] loop2: partition table partially beyond EOD, truncated [ 140.295133][T10307] loop2: p1 start 1818582900 is beyond EOD, truncated [ 140.308583][T10307] binder: 10306:10307 ioctl c0306201 2000000003c0 returned -14 [ 140.337726][T10311] netlink: 'syz.7.1128': attribute type 4 has an invalid length. [ 140.381382][T10313] binder: 10312:10313 ioctl c0306201 2000000001c0 returned -22 [ 140.534427][ T6832] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 140.697564][ T6832] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 140.700897][ T6832] usb 10-1: can't read configurations, error -61 [ 140.704640][ T5991] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 140.819612][T10325] netlink: 'syz.4.1133': attribute type 5 has an invalid length. [ 140.822403][T10325] netlink: 'syz.4.1133': attribute type 5 has an invalid length. [ 140.825142][T10325] netlink: 'syz.4.1133': attribute type 5 has an invalid length. [ 140.827702][T10325] netlink: 'syz.4.1133': attribute type 5 has an invalid length. [ 140.830289][T10325] netlink: 'syz.4.1133': attribute type 5 has an invalid length. [ 140.833006][T10325] netlink: 'syz.4.1133': attribute type 5 has an invalid length. [ 140.835934][T10325] netlink: 'syz.4.1133': attribute type 5 has an invalid length. [ 140.844752][ T6832] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 140.864481][ T5991] usb 12-1: Using ep0 maxpacket: 8 [ 140.871574][ T5991] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 140.874580][ T5991] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.877881][ T5991] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.881958][ T5991] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.886535][ T5991] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.892082][ T5991] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.896163][ T5991] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.019070][ T6832] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 141.025636][ T6832] usb 10-1: can't read configurations, error -61 [ 141.029412][ T6832] usb usb10-port1: attempt power cycle [ 141.038807][T10334] binder: 10333:10334 ioctl c00c620f 2000000003c0 returned -22 [ 141.105584][ T5991] usb 12-1: usb_control_msg returned -32 [ 141.107763][ T5992] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 141.108721][ T5991] usbtmc 12-1:16.0: can't read capabilities [ 141.111163][ T5992] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 141.111189][ T5992] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 141.120582][T10338] __nla_validate_parse: 7 callbacks suppressed [ 141.120591][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1138'. [ 141.121812][ T5992] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 141.125969][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 141.126453][ T5992] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 141.134461][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 141.136079][ T5992] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 141.137785][T10341] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.140435][ T5992] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 141.146102][ T5992] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 141.148448][ T5992] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 141.150857][ T5992] hid-generic 0005:00B6:0009.000A: unknown main item tag 0x0 [ 141.174142][ T5992] hid-generic 0005:00B6:0009.000A: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 141.195584][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 141.200923][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 141.201024][T10342] fido_id[10342]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 141.285276][T10347] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 141.312803][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'. [ 141.349984][T10352] __vm_enough_memory: pid: 10352, comm: syz.6.1142, bytes: 4503599627366400 not enough memory for the allocation [ 141.374485][ T6832] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 141.390490][T10361] ================================================================== [ 141.393336][T10361] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 141.395924][T10361] Read of size 8 at addr ffff88802e5a5c18 by task syz.6.1144/10361 [ 141.399087][T10361] [ 141.400199][T10361] CPU: 1 UID: 0 PID: 10361 Comm: syz.6.1144 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.400218][T10361] Tainted: [L]=SOFTLOCKUP [ 141.400222][T10361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.400230][T10361] Call Trace: [ 141.400235][T10361] [ 141.400241][T10361] dump_stack_lvl+0x100/0x190 [ 141.400260][T10361] print_report+0x156/0x4c9 [ 141.400277][T10361] ? __virt_addr_valid+0x81/0x620 [ 141.400291][T10361] ? __phys_addr+0xe8/0x180 [ 141.400304][T10361] ? dvb_device_open+0x33f/0x3b0 [ 141.400315][T10361] kasan_report+0xdf/0x1a0 [ 141.400328][T10361] ? dvb_device_open+0x33f/0x3b0 [ 141.400342][T10361] ? __pfx_dvb_device_open+0x10/0x10 [ 141.400354][T10361] dvb_device_open+0x33f/0x3b0 [ 141.400365][T10361] ? __pfx_dvb_device_open+0x10/0x10 [ 141.400376][T10361] chrdev_open+0x234/0x6a0 [ 141.400389][T10361] ? __pfx_chrdev_open+0x10/0x10 [ 141.400401][T10361] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 141.400417][T10361] do_dentry_open+0x6d8/0x1660 [ 141.400428][T10361] ? __pfx_chrdev_open+0x10/0x10 [ 141.400441][T10361] vfs_open+0x82/0x3f0 [ 141.400461][T10361] path_openat+0x208c/0x31a0 [ 141.400476][T10361] ? __pfx_path_openat+0x10/0x10 [ 141.400490][T10361] do_file_open+0x20e/0x430 [ 141.400503][T10361] ? __pfx_do_file_open+0x10/0x10 [ 141.400521][T10361] ? alloc_fd+0x476/0x790 [ 141.400534][T10361] ? do_getname+0x191/0x390 [ 141.400551][T10361] do_sys_openat2+0x10d/0x1e0 [ 141.400565][T10361] ? __pfx_do_sys_openat2+0x10/0x10 [ 141.400583][T10361] __x64_sys_openat+0x12d/0x210 [ 141.400598][T10361] ? __pfx___x64_sys_openat+0x10/0x10 [ 141.400614][T10361] ? do_user_addr_fault+0x8d6/0x12f0 [ 141.400626][T10361] do_syscall_64+0x106/0xf80 [ 141.400641][T10361] ? clear_bhb_loop+0x40/0x90 [ 141.400654][T10361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.400665][T10361] RIP: 0033:0x7ff4f475c84e [ 141.400675][T10361] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 141.400687][T10361] RSP: 002b:00007ff4f55b9b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 141.400699][T10361] RAX: ffffffffffffffda RBX: 00007ff4f55ba6c0 RCX: 00007ff4f475c84e [ 141.400706][T10361] RDX: 0000000000000002 RSI: 00007ff4f55b9c00 RDI: ffffffffffffff9c [ 141.400713][T10361] RBP: 00007ff4f55b9c00 R08: 0000000000000000 R09: 0000000000000000 [ 141.400720][T10361] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 141.400727][T10361] R13: 00007ff4f4a16038 R14: 00007ff4f4a15fa0 R15: 00007ffe0f5346d8 [ 141.400737][T10361] [ 141.400740][T10361] [ 141.488606][T10361] Allocated by task 10282: [ 141.490123][T10361] kasan_save_stack+0x30/0x50 [ 141.491723][T10361] kasan_save_track+0x14/0x30 [ 141.493310][T10361] __kasan_kmalloc+0xaa/0xb0 [ 141.494859][T10361] __kmalloc_noprof+0x301/0x850 [ 141.496544][T10361] io_cache_alloc_new+0x45/0xe0 [ 141.498261][T10361] __io_prep_rw+0x21d/0xfa0 [ 141.499792][T10361] io_prep_rw+0x76/0x2c0 [ 141.501255][T10361] io_prep_writev+0x23/0xa0 [ 141.502777][T10361] io_submit_sqes+0x9b2/0x2230 [ 141.504367][T10361] __do_sys_io_uring_enter+0x9c0/0x1a20 [ 141.506215][T10361] do_syscall_64+0x106/0xf80 [ 141.507790][T10361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.509817][T10361] [ 141.510595][T10361] Freed by task 10282: [ 141.512069][T10361] kasan_save_stack+0x30/0x50 [ 141.513645][T10361] kasan_save_track+0x14/0x30 [ 141.515217][T10361] kasan_save_free_info+0x3b/0x70 [ 141.516902][T10361] __kasan_slab_free+0x5f/0x80 [ 141.518567][T10361] kfree+0x1aa/0x670 [ 141.519886][T10361] __io_submit_flush_completions+0x13f5/0x1910 [ 141.522014][T10361] ctx_flush_and_put.isra.0+0x92/0x160 [ 141.523816][T10361] io_handle_tw_list+0x419/0x580 [ 141.525482][T10361] tctx_task_work_run+0x57/0x2e0 [ 141.527121][T10361] tctx_task_work+0x7a/0xd0 [ 141.528798][T10361] task_work_run+0x150/0x240 [ 141.530409][T10361] get_signal+0x1bd/0x21e0 [ 141.531961][T10361] arch_do_signal_or_restart+0x91/0x7a0 [ 141.533802][T10361] exit_to_user_mode_loop+0x86/0x4a0 [ 141.535530][T10361] do_syscall_64+0x67c/0xf80 [ 141.537117][T10361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.539526][T10361] [ 141.540746][T10361] The buggy address belongs to the object at ffff88802e5a5c00 [ 141.540746][T10361] which belongs to the cache kmalloc-256 of size 256 [ 141.547127][T10361] The buggy address is located 24 bytes inside of [ 141.547127][T10361] freed 256-byte region [ffff88802e5a5c00, ffff88802e5a5d00) [ 141.553171][T10361] [ 141.554341][T10361] The buggy address belongs to the physical page: [ 141.557430][T10361] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e5a4 [ 141.560387][T10361] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 141.563200][T10361] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 141.565705][T10361] page_type: f5(slab) [ 141.567051][T10361] raw: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 141.569940][T10361] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 141.572767][T10361] head: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 141.576301][T10361] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 141.580211][T10361] head: 00fff00000000001 ffffea0000b96901 00000000ffffffff 00000000ffffffff [ 141.584037][T10361] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 141.587957][T10361] page dumped because: kasan: bad access detected [ 141.590882][T10361] page_owner tracks the page as allocated [ 141.593479][T10361] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19660859257, free_ts 0 [ 141.600133][T10361] post_alloc_hook+0x1e1/0x250 [ 141.601774][T10361] get_page_from_freelist+0x111d/0x3140 [ 141.603772][T10361] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 141.605887][T10361] new_slab+0xa6/0x6e0 [ 141.607268][T10361] refill_objects+0x26b/0x400 [ 141.608835][T10361] __pcs_replace_empty_main+0x19f/0x600 [ 141.610774][T10361] __kmalloc_noprof+0x688/0x850 [ 141.612422][T10361] usb_hcd_submit_urb+0x601/0x2150 [ 141.614367][T10361] usb_submit_urb+0x8aa/0x1910 [ 141.616005][T10361] usb_start_wait_urb+0x106/0x4c0 [ 141.617772][T10361] usb_control_msg+0x326/0x4a0 [ 141.619357][T10361] usb_get_string+0xab/0x1a0 [ 141.620931][T10361] usb_string_sub+0x103/0x3b0 [ 141.622562][T10361] usb_string+0x1d0/0x570 [ 141.624144][T10361] usb_cache_string+0x80/0x140 [ 141.625845][T10361] usb_new_device+0x166/0x7d0 [ 141.627579][T10361] page_owner free stack trace missing [ 141.629380][T10361] [ 141.630220][T10361] Memory state around the buggy address: [ 141.632066][T10361] ffff88802e5a5b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 141.634755][T10361] ffff88802e5a5b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 141.637905][T10361] >ffff88802e5a5c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.640635][T10361] ^ [ 141.642299][T10361] ffff88802e5a5c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.644948][T10361] ffff88802e5a5d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 141.647674][T10361] ================================================================== [ 141.651846][T10361] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 141.654160][T10361] CPU: 0 UID: 0 PID: 10361 Comm: syz.6.1144 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.657678][T10361] Tainted: [L]=SOFTLOCKUP [ 141.659065][T10361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.662255][T10361] Call Trace: [ 141.663335][T10361] [ 141.664292][T10361] dump_stack_lvl+0x100/0x190 [ 141.665824][T10361] vpanic+0x20d/0x630 [ 141.667110][T10361] panic+0xd1/0xd1 [ 141.668456][T10361] ? __pfx_panic+0x10/0x10 [ 141.670030][T10361] ? dvb_device_open+0x33f/0x3b0 [ 141.671625][T10361] ? preempt_schedule_common+0x42/0xc0 [ 141.673371][T10361] check_panic_on_warn.cold+0x19/0x34 [ 141.675080][T10361] end_report.part.0+0x3a/0x90 [ 141.676617][T10361] kasan_report.cold+0xe/0x18 [ 141.678181][T10361] ? dvb_device_open+0x33f/0x3b0 [ 141.679767][T10361] ? __pfx_dvb_device_open+0x10/0x10 [ 141.681480][T10361] dvb_device_open+0x33f/0x3b0 [ 141.683005][T10361] ? __pfx_dvb_device_open+0x10/0x10 [ 141.684682][T10361] chrdev_open+0x234/0x6a0 [ 141.686117][T10361] ? __pfx_chrdev_open+0x10/0x10 [ 141.687693][T10361] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 141.689799][T10361] do_dentry_open+0x6d8/0x1660 [ 141.691369][T10361] ? __pfx_chrdev_open+0x10/0x10 [ 141.692946][T10361] vfs_open+0x82/0x3f0 [ 141.694270][T10361] path_openat+0x208c/0x31a0 [ 141.695828][T10361] ? __pfx_path_openat+0x10/0x10 [ 141.697423][T10361] do_file_open+0x20e/0x430 [ 141.698877][T10361] ? __pfx_do_file_open+0x10/0x10 [ 141.700482][T10361] ? alloc_fd+0x476/0x790 [ 141.701903][T10361] ? do_getname+0x191/0x390 [ 141.703359][T10361] do_sys_openat2+0x10d/0x1e0 [ 141.704861][T10361] ? __pfx_do_sys_openat2+0x10/0x10 [ 141.706530][T10361] __x64_sys_openat+0x12d/0x210 [ 141.708091][T10361] ? __pfx___x64_sys_openat+0x10/0x10 [ 141.709842][T10361] ? do_user_addr_fault+0x8d6/0x12f0 [ 141.711606][T10361] do_syscall_64+0x106/0xf80 [ 141.713087][T10361] ? clear_bhb_loop+0x40/0x90 [ 141.714609][T10361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.716490][T10361] RIP: 0033:0x7ff4f475c84e [ 141.717939][T10361] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 141.724017][T10361] RSP: 002b:00007ff4f55b9b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 141.726643][T10361] RAX: ffffffffffffffda RBX: 00007ff4f55ba6c0 RCX: 00007ff4f475c84e [ 141.729132][T10361] RDX: 0000000000000002 RSI: 00007ff4f55b9c00 RDI: ffffffffffffff9c [ 141.731642][T10361] RBP: 00007ff4f55b9c00 R08: 0000000000000000 R09: 0000000000000000 [ 141.734168][T10361] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 141.736721][T10361] R13: 00007ff4f4a16038 R14: 00007ff4f4a15fa0 R15: 00007ffe0f5346d8 [ 141.739219][T10361] [ 141.741082][T10361] Kernel Offset: disabled [ 141.742466][T10361] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:51:56 Registers: info registers vcpu 0 CPU#0 RAX=000000000017fe47 RBX=ffffffff8e4975c0 RCX=ffffffff8b7ebc75 RDX=0000000000000000 RSI=ffffffff8de617e9 RDI=ffffffff8c1a95a0 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000001 R9 =ffffed100d486755 R10=ffff88806a433aab R11=0000000000000000 R12=fffffbfff1c92eb8 R13=0000000000000000 R14=ffffffff90d84dd0 R15=0000000000000000 RIP=ffffffff8b7ea5df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d639d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff4f4a17dac CR3=000000003e3ea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6465636976726573 5f6f692e7166622e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7cee6036 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7cee6036 00007ffd7cee603c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc95b632e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc95b632e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc95b632fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc95b632e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856de265 RDI=ffffffff9b447ce0 RBP=ffffffff9b447ca0 RSP=ffffc90005b372e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=000000000000005d R14=0000000000000010 R15=ffffffff856de200 RIP=ffffffff856de28f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff4f55ba6c0 ffffffff 00c00000 GS =0000 ffff8880d649d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff4f4785640 CR3=0000000035487000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000fefcf802 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0f534bc6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0f534bc6 00007ffe0f534bcc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff4f4832e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff4f4832e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff4f4832fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff4f4832e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff4f49ea498 00007ff4f49ea468 00007ff4f49ea4a0 00007ff4f49ea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000156a47 RBX=ffff88801ee84900 RCX=ffffffff8b7ebc75 RDX=0000000000000000 RSI=ffffffff8de617e9 RDI=ffffffff8c1a95a0 RBP=0000000000000002 RSP=ffffc90000187df0 R8 =0000000000000001 R9 =ffffed100d4c6755 R10=ffff88806a633aab R11=0000000000000000 R12=ffffed1003dd0920 R13=0000000000000002 R14=ffffffff90d84dd0 R15=0000000000000000 RIP=ffffffff8b7ea5df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d659d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc95c4d5ff8 CR3=0000000038ba9000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff599ee206 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff599ee206 00007fff599ee20c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c1c032e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c1c032e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c1c032fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c1c032e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88807ffd7c58 RBP=ffff88807ffd7c58 RSP=ffffc90005b7e520 R8 =0000000000000001 R9 =0000000000000000 R10=1ffff1100fffaf8a R11=dffffc0000000000 R12=0000000000000002 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e37a4a RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc95c5426c0 ffffffff 00c00000 GS =0000 ffff8880d669d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc95b817dac CR3=000000002c0e8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d69745f656c64 692e7166622e6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffced837016 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffced837016 00007ffced83701c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2d4a32e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2d4a32e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2d4a32fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2d4a32e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000