last executing test programs: 48.390238963s ago: executing program 3 (id=982): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019fffffffd0000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 48.341010019s ago: executing program 3 (id=985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000100)=0x5, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x1a) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x38e72a2a, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6341, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r10, &(0x7f0000001300)=[{&(0x7f0000000040)=""/128, 0x80}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0x0, 0xb}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7, 0xb, 0x4, 0xfffffffc, 0xffff, 0x1, 0x4, 0x4000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20018041}, 0x2400c804) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) sendmsg$sock(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="d6877ea2ea6d88e9052fb7ff04b9d1db3abdf9c1380650987b02e66185f45e31143f192dcec4a0b5187fc08ea7b3602a7e0b96c9b0e4f68367aa273008baf72ccd6c1abe433dd8b3424fbff5dd493df30ace009bc1fa547ea34895ffa7e08043f13ca9c552b045b68b90b4ad02e03add8901b35c033042ba6ada634d3734ac46983b9e8008183f9214fe05214d8314c03cca41308d18ce10522ae8861a1ea9c7abb33520e7e2b8bd5c628cdf566f45920174e87823560d03d258244dc0c474473fc5477dddec6b82222313f12c6c71036d2e1af717a4094c9298e22efd77a6", 0xdf}, {&(0x7f0000000300)="db2fc760bc9bd20ac437715882a75fa74e590baebbb6d04f5c5d44bf04fedcfaa2e779633343a211b38eb76fbe7eaef5586f89321627edcc89521c51d34909f99ac4701caa7333ed01e286060ae2d82dee10f6fa183f054065ed5fd47e805fe41380", 0x62}], 0x2, &(0x7f0000000540)=[@txtime={{0x18, 0x1, 0x3d, 0xa389}}], 0x18}, 0x4010) (async) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r11, &(0x7f0000000000)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4dc9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7b722e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c3f34e9d706af4cf3a62a069488df0881f123ca01ac873f5b36e8dc94335004f6eceb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e", 0xa1}], 0x1000000000000046) (async) ioctl$BLKZEROOUT(r11, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 48.200962924s ago: executing program 3 (id=987): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:clock_device_t:s0\x00', 0x24, 0x1) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x4}], 0x1, 0xfffffffb) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1618c2, 0x85) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1c, 0xa01, 0x0, 0x25dfdbfb, {0x1}}, 0x14}}, 0x20008000) read$snddsp(r2, &(0x7f0000000540)=""/252, 0xfc) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0x0, r0, 0x2}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x27, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000500), 0x8, 0xdb, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r5, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448c5}, 0x8000002) 48.105865994s ago: executing program 3 (id=988): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x1c, 0x68, 0x0, 0x9, 0x11, 0x0, @multicast1, @multicast1}, "a53ee0da00eb6c95"}}}}}, 0x2e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x187) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000340)={0x6, 0x7, 0x7ff, 0x4, 0x1b, "c1bf485e9fa4e75c05630c2c73b2c910099024"}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mincore(&(0x7f000007b000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/150) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 47.931527447s ago: executing program 3 (id=989): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002bc0)='/sys/kernel/uevent_seqnum', 0x88140, 0x20) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@afid={'afid', 0x3d, 0x7ff}}]}}) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) getsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f0000000000)=""/231, &(0x7f0000000100)=0xe7) 47.641709508s ago: executing program 3 (id=991): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) setsockopt$inet_buf(r1, 0x0, 0x23, &(0x7f0000000040)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880023d6c8db0000dba67e06000000e28900090200df018000000000f5060700ff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff0601150039ff01000000000000000000000000000030e2f682104050a7c94e423c2002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c68f90b8378c2ced14", 0xc0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f00000022c0)={{0x0, 0x0, 0x80, {0x0, 0x80af000}}, "cdb372b4dfe02964a59572ecc37526989e90f15cc175ae8c93ae45591f356c6884a1eb49a1ccc74c2260aded1979bfd746a27408d1220c39493a1d3b65f5306464393183b3b654e5237f83855fde05bc36e88baa2c07c6acd1e5d8c2b3736f1ec8fb98c1b5c20bae0c02c146f4182375c277e8647f577021416f8ba515ffa35cddd261d521df3e841a9179cda39879511c2e9ab06778ce9ffa6f2c9370d7af33bc74d16360a42aa2ced6433463ef4bbed671371e8eba18f2aa913f65ff1b5b35c7c67638ba4aaa64a717f556fe32f70ab1f227b75eaace9c63811a4abc99987e6c8964cfac90a0ca3384510dc63e3e3935540ce749bfa6a8785ee00fe862262ce28ff980e350a64be310b5f576ccfb5a2ba166b324b4bbe9f23030a79f16f20258d077d87f7b1e5b8ca402ce6e51b3236729fde5e6f96d7a94c8db3cc00fdab35e2544ebb424632bb9d82cbfb21146bfeb80e5f5e26ed89a6c521920b5c02cd9cf8063e1ef18919946124f64f749f5c2e3d603af2b7a2d2d24acb6ebe5f47b988dc50e690d9aea44fece3a353bae1b80dcae49c8cb6443978623b0ec80cd0feb0a134a51fdd2b1912a45c6ca41414273268c676bbef4ab3e2f7ac5e061d6dcf0041af2cc971a27b616444ae913033933ed4b1d89b96c8ee9edc86ee12d5917695796906d4822fb3a931df763e3a8e8893ae4749765bdbae4377ce47fb5e26890cb5178c03dd0df248bf35caf84f3cea3d778086065dbb0cd51ea04f28dd6ce80820fda0ffa3f33d38adb2d68d41db8ab27d4cad8b7abb026827738fb9c59d043199cd27c2bdf9711acb36926c730e216de7ad2de0326676916586ec8325f4b13735e34c4d60bd27e2fde3edc95dc59cb69c1dc25569da425488b6b6e9a63b17964ce1fa57bf2c7508ed199cf64a5cbc23b01cdf08b1ad4337f1b0aa02a6c137fb90e32fd7e204966170aa80fca868a45d496be7758c47f83760208793eb1600b6ebf4d1d2dcaa2b741f1c0b9f8844b9e68ec7f7123083c6926a1e95fe9b75f16064f213f69f8f1a97b66961279a6aa3498f146f7e517c2f5a9c0b0673b93dca4fe0c48d53c8f5f89bb7ab0476e00a13e020370077a55c28abccb585bcbdf29966a4db1c3ab0f3f58e54640032484e08072aac638b9c9dc9655a525e9016d9b24358ba477695875e3abd484ff3adb92069825841c3bd1870f708cc25288ee5cc4a6d7fab62eaa724a7acb4ee5952db977b4da11597891f5c5af6086ddf387deb19ce0995ba175f830c94b5adac04d8618a262b3059fe96d5b18690e5adf3e592ae77fed8214ef468d0cacdbbdb1712cff009e03146b57bab5b8302a5ed0f75f59c63877ad8fea5ec596c667ffc2337343e1726e79985bf7c663f8dca6ae731dd96486568d0c0e4c3a3860d7250e04373cc55018eda3ac9077cd2c5317df8992b548e34344ca97a9ed3b6f8bf1a97e060231657706c9e8ce8f03805b111d4bf1a559f4cf0822a20cd9ce06b56c5f051317e187d76a303af82d2053286d5d3cee381602170f5bb4036fb34c080992e9f7d509aa230935233dac608f533ae2a26c5e5710e6c2ed1bf61303cc3c47465791333dae385f91de77c3357fbedbbb64ae3b868ee90b98ab647fa0dcc85bfbab33058667b95106519c7ba80246f73391919fb575dedfe436fb190e828fd58ac25537a4ba5ef0a97c595ce67a740d1cfd84a05d3462d9203dd6ea94f60dc03a29c3c81aa25dce4b330fa7500234016373add8120018ea6b5fac8597fcc8404c793658db3277e2a7e042cb56420002922183f14af74d970dec12a781763c1d9d69cf664b065a9b09491b1ff043e9c9a2098975c17e82a5d06b9f1081c43a539669e95991d866f3105e0b327ab8659e23bf1b196603c7406221e47494b765a114077187295dfafc261ea9ad3064b3449c6e8ef5e2517f609995adf82710d6c23a83e06f61c8186017afa6b2de5b28082770edfc81ee72e46fd1365d0a7583e3609ce420e54cc7a2d57542b924c6c5c9c896d068912adf22a97b3547502d0181d2c69729c539921ab16c466ba6d1d518c3e787fb0e9f708c9a1bc6d428355f0a3bd574397a6f8eda6a1503854a1bd4004719db60a9b3fefe434464d9f2aaddf44ee98c503ac606b7d4d8bac4efa557a77fa5a31ed8c8b48cd1ee6e4e7731ffb273bf21838f4e0cb8eec8a2cbd8acd40c15fcc3959ec3b4ea86680fb1e65743acfc164c6ae830f81a00c83102085d6ae8c7b4424ee0e86673015d98449252de73a25bfbe1697ff06aecf299b2a0e7ce452ba6bcba6b6da2c494cf0ce51cbb555cc2a371bf5a595748486825b0798221f40d2c29396431d13a03248874b893c7880d3b87cf845858a31f68fe57b032e3e0204fd4fb23fd5b2357d8e4f6052dd058b3bf6cd913b4341446e62895d6a367e4233e25ef3aabfb7f35a7804938e3181b6f551ac4a947ff016a12dffb53e7101b6ee911fac7637b2786cf95a4611376d0ac7b1e61c763040550e0c00ddb39a11086e08941c518a5ebedcff2c9477f7be26ad4dc48d837b85d082b4a54c8ec3f1caff75f7fb8f1282df6c5b336c2e56c0f35d9c5dd38fc91001e950f5fb41b58a620a9ee5e6b001a637aad4ec9ffd09eb762fd0d1d8058ca0e544329ee8693547095264c46d9b716fe56ff991b28dc056caefb0d08c0c509ab0eafeffc280684f8654b18323eddff28b4e778a674b4d5b85df786bb12ca24e1980e56032d1d32eb472954eed24b99bbc404dc920e16d4f8e792d6fe581efa82420085955ab9716dc642b44e2a9215cdaaf3df4fa5ad66a26804ad87b7520c132fdb595ea560eb408b5d519cb31c2c6ed2a16fe971d7ca71b7530af7478f06509cc988b96b27dd3e667ce4b08ca685ae818527103addba74d71d094e7a58325658343b989a1d973fc9f1cfebe848c35279cfff728928f77af22430daee46cc9242fa4afe5197e6b42811396f9136fbd545826e020a910fa790acf9292472b7ee3b34723d6f56781d5c061be6e535e49bfcc292a1208645c730b6aadc94e56f05c6f8ca71c7fde81b687190accb75b08f131d61d6536cb3810eb2b6006336f700f1e6ea8104de9c9c6c9f4566a3783d253e3153e9550b91d547430bbe6dc23d31b930692f2a2c5b009fa44c416bfbe28e524ee6a2d0b016331037010fa882db5d35cfa359d1c7a173cf913e11b8888d0f37b75011f26ce9f97b132dd6f50cbf4bd7d1f9201c55ade10bdb4e2df4a3b35d2980bf8ee63b8091fed356f764c0bbcc95a91afeb4a2c1deb3fc0c44fa76d768fed87d737bb3380794e4b67932e7492e654cca53599a446664031ef83e6a6d5362d89eac11c767932f477201d2953b4bb6058f4a3baca2968719edbf41ca5da5be2efeb9bceb38e2f1394ff41d9e93ecc746175b8e5fa2f5bf903663cebc1266ca7a2f8c57340c1ef42e4fc8a85d76ce24237d16f1ac13d32bfd1121017e9a72ad3fb0e952a296ff9a79bdc5be6d8691696720d97daa7c27fb9489e47584c00c854779de5980490afbacad0d0774a7f13e424b0ea955a87b7e296a40eca7ab8f45ae76170da77fff6b554c50dcdc6a261e8ebb7d2f24583023d001ff218ec7844fb4640736f04e9f7d968aa74bef26f65eae961a4857a946d3b221818a798d65bf74f8c0ac1b4529e36183c49606890643573722d467f4c464e68069955e561ccfd4423c2a240cfbb96efb668844ba0a1ceb910ad4ef06cd0f13f7ffa85744bdd0dd16ca27f62179b3916868187421b6d9f9c698d6542a02d4c124373ce0f10cbbc6b9a18385d99519f06a24aa9a4f5560157880233ee8352f2e9de0ffa333bb50932587a70153a37f25263693b86dd6a61f7d1f40cac0f205b65fa2faa3098254fb084160c271addea6711ecae589870450b941db419bb27c8b597982b704ba0ea0189e7b5cd6b72e3529cd77e4a79c752f2f7af6aa43ec9eb0bbefc91a02a85871771189c1f9a0742e8e6fc2d71575e20631dee592f0ed44c9d8f6a22e7d7844445066ca5e8bb97dd5c2ca0365d7c33563ceca884e8e14ba21733c4d2415c1be9369298fbd616fd792bd767555aa2deec8f45e92e10fcc88079cf0093ca2e38adc797845548005a0660b5cbf6423d966ebdccb6ce9d5d476bfd562dff0dd1f8e576d424c0f5cbfe68a3a571e860e5665861a133bc8eb3d9838e9a88f18edb12dfec18a488ad1177ca22f6f763beee9c1e0dd61344997dbbc6de56800f15d2b04a4d83a0b79adb12c54aa7c418d8fd0c96b5797a003b8313d14093fdadd4b530233dd1176e86090e0cc5401d6f98529de8bb6094b8e2f02b53f562a4c115655dc2619811d8caade655b767a5d4fac6c10784bf5bb06e9f535fd1304f383e39bbc5ce58a5f2f9deb9af1d6df6b491fbcbb9053f9bc73da0ae2e815ae72aff41c71ab7adc71074dfa6906724f18b74a344f7911994ee8ee843fd991de053dd9fae152d02b4fe0818c6313aee7df2f32009221f6c2d0ef9b53b7c2e795d64dcae34e5fab88e6b112b935fa836c6868f72077c57a42a940d3c0a667f3d0b674a3de2aa8c3443748c3a5ac949f72ed49220a9cbf0896794f58e12b74a1d7c7bbf8bec7d8aa055855c34a6c25d6fddd22a73725ca3daf8e357b8173508be65d329a4b97820cdb1c7a98d222a839b4da2a33ac687ab4004f5e1d90be7dad53a50ab4d6bc04135e0a9f31af27dc75eae3b9e7fd7459455a4cdd7faf94c5fe701d66d2006719b9acb72db3c89ca61bddea7c0be7ec769ec1cbfae11a77f36a59966f042e5dd32ece56932b083f0cb68c92194c6a4ca0267186b5f3ebaa25f63b6a1b60a2a5c78b9b5b488962b2ce4854b51ab2bc001231b6be3fcdc5563b0950165da87745e387c1205ba818287a8cebfaae10ff461c2933d775c6cddaa936d1907e29b5b4e1ef0a000aafab5363dd692560a291a71f06552647144cac4884a8ae8f2dade616384eeafa54f84737d1613beb945faaa4a316ee2e2a3a094187b5edba42358e930c89bfeaf4620bada8aa6d6c8800d1b19548a308b8310a0b51c8ccc7db60aa2a04fd8b21769a32eded238f93f476b69a6548a8a17aee1d0c4476db41e4eba24d9351d3f98fac043f423ffead379b6cbfb05aaf705ff0dca6e5f6ba36d00d1bc98714a92c8ac1e7cbf441521c98e2b913dd7a5d8595e0479537029de96e2991652243fe3093594720a0538b1687711bf0bc46a1453ebe60c5d33bd798b66f19e69c90e55c2b68b62d1a759a3519630798dd4434fa658b013e28fe9befca82abc1f89a3b246f2fd44df84f88dab2792fc67b3ef2ef8eef84e441e2a7ff5a83e3784a5636a7d4775f5b3063d8e190bfcedcd8083d864d0cbb2fcca7af05cee2be552d89c801e760348dadf01ee4dbb9fb09d5b6c993ab9ac9ff7d5e1e104ab3a894f6cc9067ad64c5a97d3e12efd17820b3c07e4ce302a20fd4c5b5de8752bc4e609fbe9e6cebe713f309229883790ab6dffc22864f7b02fd9026a07299f8cf1e799acdd448428199165abf20eee23988cfcad773c7bc483f941f994c07f255e6cd72e7198f34bcbcbd801abb84e6e383d7bf6e217ee0281f4691beba5d17ef8bd59d7474540dda647ca3bdb8e280a2e6b7a7688bc677a25b2186b1e59e637737366733d75f02a597b7cabb18e75a1722d2327f4f2f101955ca88636ae97d5740ba61d7867c5141becd39f7fc5abb5b9614040995046c2ab369ac46c18159d5a3569df964e69e7686471ac756bf0515fee78904fe8fcec2096b5f3e", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="260f01c32e36260f212366b9090b000066b87a0a000066ba000000000f30b823018ee8ba610066ed0f01c2660f38810f2e0f656c7ff2e3090fa5800500", 0xffffffffffffff96}], 0x1, 0xf, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xf) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$VT_OPENQRY(r5, 0x4b4c, &(0x7f0000000140)) 47.545556007s ago: executing program 32 (id=991): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) setsockopt$inet_buf(r1, 0x0, 0x23, &(0x7f0000000040)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880023d6c8db0000dba67e06000000e28900090200df018000000000f5060700ff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff0601150039ff01000000000000000000000000000030e2f682104050a7c94e423c2002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c68f90b8378c2ced14", 0xc0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f00000022c0)={{0x0, 0x0, 0x80, {0x0, 0x80af000}}, "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", "8f9bea13d6c1793efefda669a3bfc1a1f2d2afea1c14a5b35aac4a522cce409cb88f5802ab78a0dc4ad9e13501a073e6fc60f1778eecc8a6f5299ba9f7dcdab9079dc269bb0d7bb287afa53a930cfb99ca80b3c23dd58d7a4d8ceadf2787fc4f8c638dcd55f8e962ef362db8ae2d407ea8f04c151b89947d52c901335b5ca070883017289368b02ae4676286906bf2f984ae3b2f4ce4d345ea814a725ef388f09b6b6dcc519515885e6e5062d9cd7e801d8a14b1c5b86c404a3bcfb968a48710eb7c451630b0e3895739f51e1379f25a9848fd01021cc53ab10691091090b2cad44133a51465c16c2257cdde467cdae5616e809ad2f3ca71a0b4ae46b5b62142b1d6f782c4286dbea20f02bae71821c1c956172806c55069c3e33f8811a31a44856a1d0521c3e81c12b6dcae2b0e5f006a9468614031c6ad977aa589e4076f55a5528d7b408fd429da83d78bc7dbb794b4117379334fb9167b872d0459a457ae425f768052a583f23ff60a29f11659756f40240b1939fb8b72c3fbe3963680fdcc09900ab387757c9146d223ccdfd5aa26682d39aee3e4b327748d02f82964c117fd480804952654de00db09934cd5c1786b35453f18515ec8f28ee9aee0bfd367eafdfccb54ed29fd08bbea75ed8b6a93c23cb337ae900ba89dcbb3d87191e1e56de67175572aa09f2eaa4fc1f31055b08ce99c30dadc63c743de7fc3e5e0511c98d6b37132f66f09577f6a5f9d113865830876d2f33887136d976525d195790184b7eeaf82169128911c37856b5e75db9999269b252f12d07c62236fac6835a3c13261c527d03d33df946ddfa40c85548ddb9179cf5d963246e215fa0f76472f9f24493aad8db71422f1d1c31a454980f2499294f858de9e8a4937f832b21104c843d084ba15466453f9fd830a1d7d5dbe801ef67c2d6ba52cefcaffa798dd47e9d1e94729956b62ccaf200ff3c32e41cabf86de920f74e1c9e00391909b622505388a3d297b4095f5aa3c17ef5e68c4b3ff18855fd13ff2fe3b1746155d149baaead01ce8d975730b235b1fca6a158f219d3256489d1421e9a008434ae4acc01e583a3145633bd217a6b74d4165fddc31499b6bde7341aad811e80ee6aefdb5aa993926b57d90c0098babdf172c2ec2fe85ba0b75bdc898ba9a2dc7383533b70f3eae8c5c91526a9d5aa99f4a91c9a4235b05558f9871f1e2254a2300e7bd5b4c0fa0bae78e00a53400ca2d1bd03f9d47c82a0e8a17519b53ab0274dd5fcab49ef76a567c156b947b38744657321da66d2983024a67adc00adcde04f35fc2cfeb39c0adcaa508ee7cb8b7a6b73b4deeba620538003f11f390d108c466a2058db84b122b62844f6aebf2d119ea050ba34a1152c439b4ee0491d9417398ec2b7154bdb39ffadb6385c52108f61cc0847cc8e499b3009b00ea000d1c84848c8213d82aa2c87d9c7b15fdf23454190b5c18f563985383a42c2d600155970c15cde8da2d14ef5908704966c286d59a5141bff15ed1e8b7c1252d8cbd641c70f8129ca870fa1235155cf642095b20d88de5c0a0ac6e8969c05996481d1e8e7f9cae627ad6cd374bffa2c8714c84e735384c4064c2e194f26ea16d3d99259cc394d2c4553578ad251c3fe2b88b316dd3533b644ec59390868fe5e7f79fa721ae8dd5ded8ceefaad3879b8c5577bb831079b44fab7db38f0b61d74ed192b2c61cfe6bed13049db2c6b85434e46194230ab022f7d74be00a844023b0e33cbf1d2b4d0ad3e61b950cd9801941fd8e5d4b90154ae9f173b42fcd658190758f21af8ff9086d4eb12bc3496bfecd99211c1048b3ce4dd25f0934d7f17d45f50084c4ef7c31625080a1c1cec43922d89d1945f675d980e8f2b374c198fb6e857d099c33aeececaac17ab9c12c343051e7dd2f8786883339dbc643af493745974a4da505844e0419dbddb4eca492713d006a5ff47d78dfac1642acab8caa7bda595b6b9532edf6da9ee99711822fabf8e8783dc8f156d1490f40ed6aedb4f97ce55269a2070b4aa3fc51ef22d9fa8342a03ef1b27831f83ade237f4344797eb29f9bbc6aced4005f4b379a1e0b060b4f9cbfce975b9bb2b53e1228c91753a7dfe6d67282d565c1ef42a15c1ff0d49f1128694336eaa277fd691de0748740241edb9250ab53e53523b2217fd4d554fe482c35d8ebdce8c2d053ea2b035a5e8f9ea2e683b24e418698e48b6bb8275c6938c61a6fcafb1f7c73a344db76bdc8cafb1a07000000e62e3d9b92ad50241ec0908d73255cb72ab5d144757a55c116343e6e6c61bb0999615ddca343e02a5e3438cc9f66b1619c4467b12e615918d2f27392977775c165530dc0059bb41bd6103e612ef5bcd7f2df54ab86a05836b0bb685c05e935da8dfe4144217603c6e4f703d8062af788c7acf61285baaf7c7043a0602fbe8d61daabcf07156f7ee60debca3787d1f4b60f39c341df2908bf7944a5753883626920f1e82eeb374409fa0b331053a9c6bd3ab48682d228ec04d7cb3eb94917d00bc97b46ec14f1681013969cda5ea2c95fa390b3d6422ce0ac242690fbf352d757c9fbc66d06b0e4578e43f032c5f033d54618d178ef0fabdb00108d23cae66bd4ce059709b01e5b8ffec5595865a1c77c0bd8a1f2cb5f13d2b49450b23d021f64247966fd07bee6538fb0565b7eb41489566bc066107a345d705335bc918fe2e3c4edc50872fd25933aaa908cd78eec4e414d46c035c734af8a5b8d47fe62a4a9c49da0cf6547cc8d6702a2468c8d6fbe0ec7d90888d0bf3a0c7c42507d0baf458ce087d4c7725f42edad430abf233b064186c111b4c1fc2861e74426a31d04e2ade9d7acd8f0ac376b712d1eb20175b93b6900291b5625f90276f0857af6b0d108ddb0d772f501e687196c7caafc90010403596a6b5735e28ec6363896c8719e6002dcea716038e7b773c250c98aae730a7f39d995d0c737ff6e29c7a548c69896355b73d50eff7f7a1238f66601d10e4ccc6fb5e924a59bb41da1eba811f5acb22e8bc3719f3568d0fdc0868b29df0727f5cd50290a1845e22d523cde3002560fef504bd2c9a291c7a81a4f2b5b8a015f379009e3e8baed5d35c4a03e09afd37d7fe9d86e86eb53701ae8016d5a19ce5e96e11549ba09e3c2a6700ea84796091f6ca47d4c68fb1e6f4448e1b72f6d4b8af491b635208b31356140db8134e5a1594e47c7ad68dcd2399f49731c60f5f6c101955d4c31275df3d4ce3207e8dc03b87cae229f1f1d09f0064ef7b0727f787efef0369222717129287a9b3a375e6aadd40b6fdaea3d43cd59febe098b7f80d72343bb147a20b22b5de8fbd32bf4ce64f3ad2510dad9c243327e7c706b06004d1cb82edcc113d74bb9cb820e360c9a8992b884a65234b93250f7ff8e7271983c6505cdf0524b5a8e60f8b3d86281a903ee62d3010d62a788d360182c1106486ee1673f5b7da5a2a154cbe53697305907f64140283f78b9b3b78d2a420586bbac1f72b4388258a0e7c1cc26048cbf3e47c593e9d3300e98931801efc3bdd0ed74e0d3b4f881c66b71a401d9719a1231394ffd04b35bb3c5dcc5ee18696e8327ef9f0f7d8ee218662ec6e747d5c009ba9462d0fba519be8f5f951a5bc077a6eaca928536f35e5929863357cc025fb80c5806d3b7a9f2645e1f6d3239bf763e9ff16fe6bf30d6139f2a117fa1db0d6d2c6aaecf1cacc1b28b24587c9bfd48e52f37651cc97c35d3dc3834b7f973213d0edefdf42a239da89bf1b735767f9e38119de3fd24dbdb34c38068888dc8ff11d19b1950772e283903ce51b1c13e86d58b283dc8f8a3c9456115b19a0561f3aa9c7eca553c4e5bfc20b5da4b32e607a57c2577ab2a65cedb2dd754a2363b37b138ea37e2e3546eea289da7475850e393e7331416bcf4ec75f0c6e654df1fc513e0dcc52ba57e9a128d148cf42d35fb9c7168c959e1ed6e4811fba1662c22194101a6d8787e037a35888117c854a2ef8f605076771ab5aefc8135cfa4c2a25680c6566e0fd19eee7cc86ece140efb6fab4200eabc09d834239abf5f48b46ea51797ee393693270da94c3e73859c01d1042e2eff0b1c4ed41ea560f38b8483d94b9dace687bbe8993fc4e2872b686bf299bb0dce34874d940fd2c36b5270aedd09e5e5a952d70f191e011c7e269219477fe8f5ded564f14fda6461b64d84ec32543a7ed663d8d27d8b8893942e0b7167f3f7b936f8f1fe623248d9815c5969f3a22f0fdefb527d9a870d7ece5430a9adcfee9eef05d235a0c87989965b20bad18c96d696e817c95693fec426ff81f1250e81c244058722243cb3e2df722ac46554a368a90a81206628fcc889cca832a8d4ed20188db0005b1b1c494e3dcce0622dd72ee35f4b4ac447909937bf67807344f5a629230752645aee6c70a885a80ea0e491fdef70648bfa0060ad78b122f2cc0637feb6c5754073d71326bb5a5c0b8c9890fffab1360d647d3a7b4e4bfb29c3162f311d7a1a41c3c5f739542ec723fff2c1e086dd79b1f22f3ff5a512e7ec7dfa54cc6883ae22b949139b1f029f8674ea97c5fb8125a3dafebddd524acdd1618c9f9b9fdf0ea659c4bd4b8da12cae75d1f5ae611b8fa7fd23ff0ff7dcf8a10540120d03d72db15d0775075c1c30ba7e6a07ee6633fa6fa396ca3a5799a7905db5d49e8e8ce00eb7a9af5f2c60749bc28c4b188054e21f44f28d2d1258326ae27a1b14d4704ffb93ff506bbf07e0e4e1bf2502fce11eeb83b9c491a68db0744a61ec449f5338c0b40d77ed16de2d935320bbd2cea2a164f26e7b619ddd81448009adeadfdcdead9df5a1c6da9aca64f373dfaf7cb940aac9f5eedb7a5d49eb74dc0e0819b05f328e9a4ddf3ef0a27cf01a853e02bc69970a32930c48509d726600dc7ee95e119d4cb28f87aa13b7ff846c338b5f9090586ff7bd983721d4a4b5a2e9a3e1495644483bf14861d524196f0d73265688794d6b3b4ce8b3f994c56a82a02a35aeaf9f79c08f5280a6ba0187eae965e412f14cb379869c997564b0a37349dc535882d5d4054d18bf44cbfccbdb8b377761096c974b3dde6a9dc767937bc3430a7fb614671e73ea867b4cd499f2581766510ad70811cda49b69b5afd380ae2ad43281e6640d4f20b2615f3c0b20f7d45c69a9cbbe7933776e07043b141664c059f1c6de17d44eed8b6242d6e8e8b3b86cff4306a9657e6d6f0c429f52138c6c5f7d155bc713432ca75bbf77c3a2c06e546474a7c327d10c46be64e6729643a9455420c48677a23c92f05e3e56f70100000000000000600739cd068305bb6aea50d5d1042f821e78f2942d603c46a1e4541756bac183b640935dffe8309e3e90a170ca3d126375a0177b1d94b72b622607af60a2cfb9b63464689237fcdbb752e89335aa96c615a59e39fcd89a3a39445e78fb5dd4912b16850863305496ca80974c3d39892a255f9a26b438662e6bc67e1d5115acff5bee940368df7e182ac1cc24331adb6e155ecfa1257d2f47a6b959f2bcf2dfbf86613c7761746ed85fd7e2a3c7c8602ee5143b100bd0a5026146becd255004fd8728bcfad605fad03e754ff1245e7716884e7e6898158ca4e9ba58cf09d8afe65fc18c2529b43a14e7eb7451b8072d68124be7b9133301d840191435de4704e2dda8ccfa87013f733aa10431faf7e46be7a391809af91e5e98d63c80a13c4b4fbb95b44ae5540f62f43036daef02b5dd404c0b08d46fa66fbdf0b4ed839494aa4c85194dac555e4061481c6717a3306700"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="260f01c32e36260f212366b9090b000066b87a0a000066ba000000000f30b823018ee8ba610066ed0f01c2660f38810f2e0f656c7ff2e3090fa5800500", 0xffffffffffffff96}], 0x1, 0xf, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xf) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$VT_OPENQRY(r5, 0x4b4c, &(0x7f0000000140)) 30.976824783s ago: executing program 1 (id=1257): syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x398, 0x10b181) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/135) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0xff) 30.401096177s ago: executing program 1 (id=1264): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095", @ANYRESOCT=r0, @ANYBLOB="be5062f51436ff7575e04ba737c49195abf4e539e03cb5f37293fb3aefc232", @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r4}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00'}) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 30.069258279s ago: executing program 1 (id=1268): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r5 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x1, 0x200000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="05030200000000001c0012800b0001006d616373656300000c00028005000d000100000008000500", @ANYRES32=r2], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0000000000000000050021"], 0x30}}, 0x0) 30.066590899s ago: executing program 1 (id=1270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x8080) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x8080) 29.991636989s ago: executing program 1 (id=1271): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2c00, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000140)={'batadv_slave_1\x00'}) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (rerun: 32) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r2, @ANYRES64=r0], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) (async) fstat(r3, &(0x7f0000000300)) (async, rerun: 32) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x521c81, 0x100) (async, rerun: 32) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) (async) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x7fff, 0x7d, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x0, 0x0, 0x1bb, 0x2000000000004}}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x45}, 0x4000) 29.941165398s ago: executing program 1 (id=1273): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000240)={0x0, 0x15d2, 0x30101}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r1, 0x7a98, 0x0, 0x7, 0x0, 0x0) r2 = syz_io_uring_setup(0x194c, &(0x7f0000000040)={0x0, 0x6263, 0x20, 0x2, 0x1df}, &(0x7f00000000c0), &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x10, 0xfffffffc, 0x0, {0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4080) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpu.max\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r0, r5], 0x2) unshare(0x6a040000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000580)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0xffffffffffffffb6) 14.747016935s ago: executing program 33 (id=1273): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000240)={0x0, 0x15d2, 0x30101}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r1, 0x7a98, 0x0, 0x7, 0x0, 0x0) r2 = syz_io_uring_setup(0x194c, &(0x7f0000000040)={0x0, 0x6263, 0x20, 0x2, 0x1df}, &(0x7f00000000c0), &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x10, 0xfffffffc, 0x0, {0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4080) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpu.max\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r0, r5], 0x2) unshare(0x6a040000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000580)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0xffffffffffffffb6) 12.435125031s ago: executing program 2 (id=1574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000200)) 12.322966624s ago: executing program 2 (id=1576): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000001340)=0x6) r3 = socket$kcm(0x2, 0x0, 0x84) syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x20820) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x20820) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000380)={r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000040)) (async) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r8 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) chdir(&(0x7f00000000c0)='./bus\x00') (async) chdir(&(0x7f00000000c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000140)={0x0, r9, 0x6, 0xc, 0x5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000140)={0x0, r9, 0x6, 0xc, 0x5}) setsockopt$inet6_tcp_int(r6, 0x6, 0x3, &(0x7f0000000000), 0x4) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x3, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c00000004000000000000001c000000000000000000000008"], 0x68}, 0xfffe) 12.200554591s ago: executing program 2 (id=1577): r0 = io_uring_setup(0x449e, &(0x7f0000000c40)={0x0, 0xba13, 0x100, 0x3, 0x399}) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000bc0)={0x0, 0xec25, 0x1000, 0x2, 0x31f, 0x0, r0}, &(0x7f0000000640)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000000)={0xd, 0x9}, 0x1) r4 = socket$isdn(0x22, 0x2, 0x22) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async, rerun: 64) r5 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) r6 = io_uring_setup(0xb28, &(0x7f0000000340)={0x0, 0xf0a7, 0x8000, 0x0, 0x1d5, 0x0, r1}) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c00000004000001000084010000000a0000000300000006000000000000000000542953600000200000000000000000000003000000000200000002000000000000000061002e2e61610061005f00"], 0x0, 0x64}, 0x28) (rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000000740)={0x7, 0x1, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/52, 0x34}, {&(0x7f0000000440)=""/125, 0x7d}, {&(0x7f00000004c0)=""/15, 0xf}, {&(0x7f0000000500)=""/63, 0x3f}, {&(0x7f0000000900)=""/210, 0xd2}, {&(0x7f0000000a00)=""/181, 0xb5}, {&(0x7f0000000ac0)=""/205, 0xcd}], &(0x7f00000006c0)=[0x28, 0x7ff, 0xca7b]}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r9, 0x0}) bind$isdn(r4, &(0x7f0000000780)={0x22, 0x4, 0x4, 0x80, 0x9}, 0x6) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETFB(r8, 0xc01c64ad, &(0x7f0000000080)={r10}) (async, rerun: 32) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="09002abd7000fcdbdf250d0000000c0006000100000001000000e1073744adc2794cf6e863187ea8d9326218f48efa1fe6aa31c8ad9613922363a58b27987b8836a6edf8aeee7782c1cc33a47c9658521285845d88d1b7b3e0dead1c05bf3e45222ca34c7cef004621e89290133c36ec05f7bf6d5078b9bd05fe7743b5ef68c2c6d42a0ed31bbb96c751387a8097aab36a41999d359bfb0e3997369abee1396fe420b5d8ce5b252b5aa5b328ca04ea"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x8800) (async, rerun: 64) bind$alg(r5, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) (async, rerun: 64) r12 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r12, 0x1, 0x3c, &(0x7f0000000840)=0xfffffffd, 0x4) recvmmsg(r12, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/4096, 0x1000}}], 0x1, 0x20010050, 0x0) (async, rerun: 64) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (rerun: 64) accept$alg(r5, 0x0, 0x0) (async) r13 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x2, 0xa0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r13, 0xc04c5349, &(0x7f00000001c0)={0xffffffff, 0x2, 0x7fff}) (async, rerun: 32) r14 = accept4(r5, 0x0, 0x0, 0x0) (rerun: 32) recvmmsg$unix(r14, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1}}], 0x1, 0x40000022, 0x0) 12.100005756s ago: executing program 2 (id=1579): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) set_mempolicy(0x3, &(0x7f0000000000)=0x4, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000001340)={@link_local, @random="70a245d5cde0", @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x2, 0x6, 0x40, 0x1064, 0x0, 0xc, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x7c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xca, 0x8, 0x0, 0x9}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000804000/0x1000)=nil) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) 12.045000074s ago: executing program 2 (id=1582): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0), 0x10) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 11.582665319s ago: executing program 2 (id=1587): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000100000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 11.544742663s ago: executing program 34 (id=1587): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000100000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 6.57531625s ago: executing program 0 (id=1700): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$uinput_user_dev(r1, &(0x7f0000000580)={'syz0\x00', {0x96, 0x2, 0xe, 0x3}, 0x30, [0x0, 0xa, 0x2, 0x3, 0x4, 0x2, 0x3, 0x3, 0xffffff80, 0xa, 0x8, 0xf, 0x80000001, 0xfffffffb, 0x6, 0x6, 0x7, 0x7, 0x400, 0x81, 0x2, 0x6, 0x10001, 0xe, 0xf, 0x2a8e93cd, 0x2, 0x400, 0x9, 0x5ff7, 0x8, 0x2, 0x3, 0x8bf4, 0x0, 0x2, 0x2, 0x8001, 0xd, 0x9, 0x9, 0xf855, 0x5, 0x8, 0x400, 0x10, 0x7, 0x40, 0x9f, 0x6, 0x359, 0x8000, 0x1, 0xfff, 0xffffffff, 0x3d, 0xfb, 0x8000, 0xfffffff9, 0x3, 0x100, 0x9, 0x10000, 0x7], [0x1, 0xfffffffd, 0x10001, 0x7, 0x0, 0x800, 0x0, 0xb, 0x40, 0x3ff, 0xff, 0x5, 0x7f, 0x4, 0xfff, 0x8, 0x68, 0x2, 0x4, 0xfff, 0x4, 0x9, 0x9, 0x5, 0xf, 0x81, 0x381c, 0x1200000, 0x8, 0x3, 0xd, 0x7, 0x9, 0x800, 0xd8d3, 0xf, 0x80000001, 0x7, 0x8, 0x0, 0x6, 0xaf0, 0x7, 0xffff, 0x2, 0x72e4, 0x9, 0x5, 0x4, 0x5, 0x6, 0x89, 0x6, 0x0, 0xe21e, 0x1, 0x1077dc7a, 0x0, 0x5, 0x9, 0x3, 0x8, 0xa, 0x101], [0x6c3, 0x3, 0x214, 0xd, 0x3, 0xfcb, 0xbce, 0xe, 0x5, 0x150, 0x9, 0x3b90000, 0xd99, 0x6, 0x400, 0x56d0, 0x0, 0x0, 0x5, 0x5, 0x9, 0x0, 0x6, 0x80, 0x6, 0x0, 0x25, 0x8, 0x3, 0x680000, 0xffffffff, 0x4c6, 0x9, 0x16ee, 0x2, 0x4, 0x9, 0x4, 0x8, 0x3, 0x400, 0x11, 0x7, 0x6, 0x6, 0x6, 0x5, 0x7, 0x1ff, 0xcd0c, 0x7, 0xe, 0x3ff, 0x5, 0x1000, 0x3, 0x128, 0x80000001, 0x9, 0x9, 0x400, 0x80000000, 0xff, 0x5], [0xc7, 0x1a, 0x7, 0x2, 0x10000, 0x6, 0x2, 0x6a, 0x3, 0x7, 0x2, 0x55b06a7e, 0x7f, 0x5, 0x7, 0x7, 0x401, 0x8, 0x4, 0x8, 0xf258, 0xffffffff, 0x5, 0x28, 0x3, 0x7ff, 0x7, 0x3ff, 0x1000, 0x5f5, 0x4, 0x4, 0x9, 0x7, 0x6, 0x5, 0x7, 0x7, 0x8, 0xfffffff7, 0x1, 0x7ff, 0x101, 0x4, 0x4, 0x7, 0x2a6, 0x9560, 0x656, 0x1000, 0xff, 0x6, 0x1, 0xc00000, 0x1, 0x10000, 0x2, 0x4, 0xdd, 0x81, 0x10001, 0x10001, 0x7ff, 0x200]}, 0x45c) landlock_create_ruleset(&(0x7f0000000080)={0xb440, 0x0, 0x2}, 0x18, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05000000860000000000020004000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0200004001000000040000e005010000c251541693f8cfd1"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) 6.313317047s ago: executing program 0 (id=1702): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x1b, 0x5, 0x4e0, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x14, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@remote, @gre_key, @gre_key=0xa70}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x3, 0x1, [0x6, 0x9, 0x3ff, 0x22, 0x7, 0x1, 0x6, 0x8f1, 0x3, 0x4, 0x5, 0x7ff, 0x47, 0x4, 0x3], 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@private1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port=0x4e23, @icmp_id=0x64}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 6.311739202s ago: executing program 0 (id=1704): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_io_uring_setup(0x1244, &(0x7f0000000500)={0x0, 0xd5a5, 0x800, 0x2, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) (async) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x41) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f000000000000000014"], 0x54}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r1, 0x1, 0xffffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x5c}, 0x1, 0x620b}, 0x0) 6.232313075s ago: executing program 0 (id=1705): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x1a, 0x0, &(0x7f0000000080)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x4, "07000f00007eaba9a208000000706de400000000000000000000008000", 0xffffffffffffffff}) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000180)={0x7, {{0x2, 0x4e23, @remote}}}, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000100)=@abs, 0x6e) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f0000000040)) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2e0000001000030c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010065727370616e000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) 6.230741454s ago: executing program 0 (id=1706): msgsnd(0x0, &(0x7f0000000200)={0x3}, 0x8, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x7, 0x3}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000006110a400000000001f150000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0/file0\x00'}) 6.226967818s ago: executing program 0 (id=1708): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xac24) getresuid(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x6, 0x203, 0xfffd, 0xffffffffffffffff, 0x4, 0xfffffffffffffffd, 0x200, 0x8, 0x28, 0x9, 0x1}) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000400)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) getsockname$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000080)=0x1c) 2.36906022s ago: executing program 5 (id=1761): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/90, 0x5a}], 0x1, 0x408, 0x585f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x1a}}}}]}, 0x38}}, 0x0) 2.294591012s ago: executing program 5 (id=1762): r0 = memfd_secret(0x0) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7472610b00000000ae0000892c6465627567093078303030304664f324ee7bcc22713543a81d5cfde93030303030100f30383030352c00"]) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) (async) close_range(r0, 0xffffffffffffffff, 0x0) syz_usbip_server_init(0x2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x8008af00, &(0x7f00000003c0)={0x1}) 1.750290329s ago: executing program 5 (id=1770): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd0600ff"], 0x44}}, 0x28000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd0600ff"], 0x44}}, 0x28000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) (async) 1.699599747s ago: executing program 5 (id=1771): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000016c0)=[{&(0x7f00000004c0)="2f60c40654f8aebaef1e41912b1ff3e3e542cd727244fa0badecd3520a394d872b09049ebd6d60ea0ffa0094c08b26dd92074827a80bdc9489ff3b8a26bcba4a226a54860afa954aaf46d71ffb07210ca866f32bd997ed0ae942d1af74b162d1e72ab9fdc8234047dd86af362d1e89ec72b8f48b90da623e14c542b4fe8e6fb1adc00bb158a401da125b6b083eb6ca703abdefea8203db676113962607ba2dc5a0fae66b64e15aadc6587a8095268e703236dcaab237cbf8c4704c7d70d304eea6c05d69f9e76c9e1c3a2c01c597242ca1a9138fc37e11f9bfe41f275b2d20af7b7414900f11", 0xe6}, {&(0x7f00000002c0)="40befd03ef721cc634ce0d70bec1b3920589e0c3e7beff88dd295137d3a00e45a06e034217bdc4c08c3eb56ca8", 0x2d}, {&(0x7f0000000380)="b142058c146bd4e72b515e3af6bb764012b21c144e028067959aefebc82742070904c1768ea5b2d170b6ca27576fc4809e3c15b275b17a0782c149a63a5138fcb7e1f7368788544ea323", 0x4a}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="beb2bdad984b0791ef187917b85c1ddd505dd598a4f5d9fd2b06c599d80ab064043f43a11dd4bf945e6523348ff2c34e3713daa1a0e9a2489c8185c31ec714cf4a2a98b2634843617f844a5b7fc8d5550beeb3fd587f3a4e80e6ab054d4be2c67818250aad90d979e1505b704d34a1fade84d3434d5bea387c17375f12ea17f3d4b805a624497cc8e4285c373c85c556a6ab705f30f14e2f0cafd36bdd90731c1f1759b61589e6c9a23a2513bd1cda92a45857834b8a2ad25bbb9be699bb7c03ef52", 0xc2}], 0x5}, 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) (async) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08"}}}}, 0xfdef) r5 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x60, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x60, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.477714379s ago: executing program 6 (id=1775): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmmsg(r0, &(0x7f000000d6c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="26e845c8bd1b81440635d9d750351d50e3e299417a0f59b13b51a29b1c0654dcc47495faabb8608a", 0x28}], 0x1, &(0x7f0000000600)=[{0xc, 0x119, 0xc}], 0xc}}], 0x1, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) madvise(&(0x7f0000225000/0x2000)=nil, 0x2000, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x40) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x1000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@measure}, {@appraise_type}, {@subj_role}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000000080)) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000007c0)={0x1e0, 0x140, 0x2000, 0x240, 0x74fc, 0x7, 0x2, 0x0, {0x6, 0x8}, {0x6, 0x401, 0x1}, {0x800, 0x40000000, 0x1}, {0x7, 0x75d00000}, 0x3, 0x1dd, 0x5, 0x1, 0x0, 0xffffffff, 0x5, 0x9, 0xff, 0x6, 0x1, 0x4, 0x3, 0x3e, 0x2, 0x462be122f10b40b4}) 1.377362422s ago: executing program 6 (id=1776): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r3, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) sendmsg$netlink(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)={0x10, 0x11, 0x200, 0x70bd2c}, 0x10}, {&(0x7f0000000140)={0x100, 0x2e, 0x400, 0x70bd29, 0x25dfdbfb, "", [@nested={0xee, 0xe7, 0x0, 0x1, [@nested={0x4, 0xd}, @nested={0x4, 0x39}, @generic="a50fa162e42a1691828b518b111d4ffca29da138ac9e7609c6ce7e13b02791d2eb31ea88533e921eb6329825e3366642b948f7f2b61e5be3113851b9b93c65f3a19d3b38c9be98cd3139eb30f1edf3c7bc842fb83ce7304f9afc894e87a9b2387c8e76ac3bf05fa2f8c49799bdf5e6f3081d9cd9ecbeeb13cd908550f87c", @generic="d35cf347dc9b76c153740893cbe7cff865d7c3934a98f6bb7a3e97cb39cc61739d7101bcf47a9ac3e61db480b6052df337323c7eab3fa37f7672055c9391045371b717c08b76d6220a3551db03a652ea876453630ea8c387", @typed={0x8, 0x74, 0x0, 0x0, @uid}, @nested={0x4, 0x61}]}]}, 0x100}], 0x2}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000700)={0x1, 0x0, @ioapic={0x4, 0xb, 0x100, 0x3, 0x0, [{0x1, 0x6, 0x7, '\x00', 0x81}, {0x7, 0x45, 0x1, '\x00', 0x7f}, {0x4, 0x5, 0x2, '\x00', 0x3}, {0xc6, 0x5, 0x0, '\x00', 0xf5}, {0x4, 0x0, 0xd, '\x00', 0x7}, {0x3, 0x5, 0x3e, '\x00', 0xa}, {0x81, 0x7, 0x5, '\x00', 0x9}, {0x1, 0xe, 0x6}, {0x6, 0x0, 0xf}, {0x6, 0x9, 0x2, '\x00', 0x5}, {0x4, 0x10, 0xc, '\x00', 0x4}, {0x1, 0x4, 0x0, '\x00', 0x3}, {0x4, 0x0, 0xde, '\x00', 0x80}, {0x2, 0x16, 0x40, '\x00', 0x9}, {0x4, 0x9, 0x6, '\x00', 0x49}, {0x2, 0x5, 0xa, '\x00', 0x5}, {0x5e, 0x3, 0x5, '\x00', 0x7}, {0x16, 0x1, 0x9, '\x00', 0xfe}, {0x1, 0x3, 0x5}, {0x9, 0x0, 0x3, '\x00', 0x7}, {0x92, 0x6, 0xff, '\x00', 0x2}, {0x9, 0x10, 0x4, '\x00', 0x7}, {0x6, 0x9, 0x1}, {0x9, 0x0, 0x7, '\x00', 0xe}]}}) 1.225818772s ago: executing program 6 (id=1777): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f00007b5000/0x2000)=nil, 0x2000}, 0x1}) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]}) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) (async) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f00007b5000/0x2000)=nil, 0x2000}, 0x1}) (async) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) (async) 1.224812624s ago: executing program 5 (id=1778): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0x2, 0x4e1c, @local}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010100}}}], 0x20}}], 0x2, 0x4000) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$ARCH_GET_GS(0x1e, r4, &(0x7f0000000100), 0x1004) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x91) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 1.136857198s ago: executing program 5 (id=1779): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x13, 0xc, 0x200, &(0x7f0000000080)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a730900000000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010420007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf6221ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebeab745bcd4697d75c9601fd333d3cd697963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de9880100df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b37000000000000000000000000000000f800"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x0, 0xd, 0xff, 0x0, 0xfd, 0x1, 0x800}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc5624f11cb6edd03}, 0x4008001) 894.994378ms ago: executing program 6 (id=1781): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000002000000a003000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r1, &(0x7f0000000080), 0x0}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x7) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000003c0)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) ioctl$CDROMVOLCTRL(r4, 0x31e, &(0x7f0000000200)={0xa1, 0x7, 0x7}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x2000018c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/2:0:0:0\x00', 0x200, 0x0) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000140)=0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) r7 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000002580)=[@request_death], 0x0, 0x0, 0x0}) clock_gettime(0xf99cd02a85684025, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r9, 0x10c, 0x8, &(0x7f0000000000), 0x4) writev(r8, &(0x7f0000000880)=[{&(0x7f0000000200)="7adf11d91184f41ab995866d6224cd47116f2581c0aa227c83c4cc8c046ce8e39bb972ff3bbfc735e9cf9f12aa5e9ce631a15ccaa6d5f07145cebfa53a4ab16f614c9e67c7e7bad1db458756e4b9056590bdd17bd56a6bfb994de5f254bb96cb7343c68c48543bce47f0b8cd64ff460e936838046bac543d39f1ccefc670e0f18dde654140a2c3a57eda29e5accb2e6a1400ec3827c795710200", 0x9a}, {&(0x7f0000000540)="6ac602ed2cbcc73b5e6040c0a5f10f4c062c24a0b9d28cb9821fd707b73b508924c68ebdc967a9a0b8de58b59e1a115c1af276ee6661436c102103236c579afe4bb8d0daef5ae7fb0d21019103aba2fcb0941065097aea0a021cdcb6038a13b6015d1de939811b38f3a0a7c7f4f03acfb308578b767979dc41f329673bda8356a8d7a15aacfba0cf398fbfa7bc8886cda3a7fe872402f351294161df6a8cf24e87929e7bcdc1a8ff8fa30509a3f661b0293e00d149621b8d4e221d6bcf59276fa46a34521cc83587d447ee007f71df23d1b82fc94050ff258a16fab501db96", 0xfffffea7}, {&(0x7f0000000040)="88189fdd6cccb9a9378ec371143c9d0c354836fb495778e994814402d0122696b9d59591ce7b280a4e6befb846e1d3acf096ac2cd2b89759ac3516", 0x3b}, {&(0x7f0000000900)="737947d16e9b66f5a77a679e40d109e26aa678a6b4de7f2953ea6a2dabccfdc6347bc3ccc1a7e55fb500e0579e9805c5230b2fe16860ddc95d906af5d6fda48ac761817bcdb08184360b2fa63717bd6dde80a8eca97161c1cdcc775effcaf7f2c44a767e13346d0fd80fab44d792c86db149628373d751f833c0aa003bcb3c9a0985b11361c8e6352f00ab54af722e4993bbcc", 0x93}, {&(0x7f0000000640)="2224906591857e0d7492fd36057df20302067ec8007463fac938279e4f518f932cebc3b9e0e32373a08169dcb3f23cbb4c3ceb7ba4789d88dfaa50cbb3cd0c754b0bb553e93b408bbfecbf00c9541485f5c9736c2a756a8341bc2bee054d68ab5fed0d6e81e79dc331114ac5d9099ae68a188c2676a7106638e724a39c51e20d02789f20345c397426f366a09deee327c0c3810db00a73061249e5b4586a30977ac35b33570bf61e22edf86844631357982b43487bb005e86f7ad0b700388d7e02cbc71037eba8a4be3d0a", 0xcb}, {&(0x7f0000000740)="042204d1ae67f753078732a15c3ec26bf7c13c84fc9c4a10964a29401a826b9170085fc908b7d3138cce9492da74658b5ba84bf49b1689636cad2183c97739db6be97cb635f66e0c70890f906fb43a8f90a8045f236802818f9ced69", 0x5c}, {&(0x7f00000009c0)="408b5e4735434e305a5d00b593aad0178d75936424dd46289f196cc26e69f7873b54da18f3093c78ec2f91b5004e9f6a5547630c8767ef3aeb1e6913e5c13492fcaf19d59eeedfb7e3032a11542fb5943330098af44cdf423fdc983a80d525230e3105debaa86860845c5eff3ded1ba278840fb5fc4b9aac8d773fc0bc817377c97f6c3587f8a46952554d970b827aac4633", 0x92}], 0x7) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="c4a29e3c17e70b22e276c2ba80a3c58db724244b0044962cf9ee2f3f13eff02bfad23cfb42fd0b1528ba6f2e6b21214360332d36997ff876fb1bf04106928b2d04b268b3d3bf16acc673a9469180bd25"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000380)={0x58, 0x0, &(0x7f00000004c0)=[@dead_binder_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, &(0x7f0000000580)}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3ff, 0x0, 0x9, 0x7ff, 0x9, "eb0af7fa0f050a596e26b77493c2672b0418c0", 0xffffffff, 0x40000000}) 207.09812ms ago: executing program 4 (id=1790): fsopen(&(0x7f0000000040)='sockfs\x00', 0x1) (async) r0 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 206.094011ms ago: executing program 4 (id=1791): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={0x0}) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000000040)=@hsk={0x0, 0x2, "b51a3c2a85"}) 127.039586ms ago: executing program 4 (id=1792): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x8}]}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000010380), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x64, 0x0, 0x3, 0x11, 0x0, @empty=0x4c0, @remote}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 126.323271ms ago: executing program 4 (id=1793): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockname$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmmsg$unix(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002b40)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) 1.208725ms ago: executing program 4 (id=1794): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) modify_ldt$read(0x1100, 0x0, 0xfffffffffffffe5e) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0xd9, &(0x7f0000000100)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000042000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000180)={0x0, 0xa}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 827.013µs ago: executing program 6 (id=1795): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x27, 0x1, 0x70bd27, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="c45088"], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r3, 0x0) ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, &(0x7f0000000340)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x3, r1, 0x1}) syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x501200) bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x10012, r6, 0x4000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r7, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000000c0)={0x1, @sliced={0xffff, [0x4, 0x8a, 0x7, 0x4, 0x1, 0x5, 0x6, 0x5, 0x1, 0x9, 0x7, 0xaa, 0x3b1d, 0xffff, 0x49f9, 0x4, 0x4, 0xff, 0x2, 0x101, 0x1b7, 0x0, 0x2, 0x1, 0x0, 0x7be6, 0x4, 0x7, 0x0, 0x6, 0x4, 0x0, 0x40, 0x65f6, 0x6, 0x93b, 0x0, 0xff, 0x4, 0x4, 0x8, 0x9, 0xc, 0x8, 0xf, 0x5, 0xe717], 0x3}}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009532100"], 0x24}}, 0x0) 590.163µs ago: executing program 4 (id=1796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 0s ago: executing program 6 (id=1797): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pim6reg\x00'}) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x400, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x2, 0x7, {}, {}, {0x4, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "0680a685a169ba1b"}}, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x4) kernel console output (not intermixed with test programs): 4 hugepages_surp=0 hugepages_size=2048kB [ 120.294836][ T8347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.298046][ T8347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 120.301282][ T8347] 75611 total pagecache pages [ 120.302854][ T8347] 1 pages in swap cache [ 120.304276][ T8347] Free swap = 124996kB [ 120.305806][ T8347] Total swap = 124996kB [ 120.307201][ T8347] 1048443 pages RAM [ 120.308598][ T8347] 0 pages HighMem/MovableOnly [ 120.310280][ T8347] 281802 pages reserved [ 120.311691][ T8347] 0 pages cma reserved [ 120.484426][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'. [ 120.523733][ T8362] netlink: 'syz.1.680': attribute type 1 has an invalid length. [ 120.526404][ T8362] netlink: 'syz.1.680': attribute type 2 has an invalid length. [ 120.575185][ T8368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.682'. [ 120.695513][ T8373] xt_hashlimit: max too large, truncated to 1048576 [ 120.725083][ T8378] tmpfs: Bad value for 'mpol' [ 120.791773][ T8386] netlink: 132 bytes leftover after parsing attributes in process `syz.1.690'. [ 120.795996][ T8386] netlink: 36 bytes leftover after parsing attributes in process `syz.1.690'. [ 120.893029][ T5941] IPVS: starting estimator thread 0... [ 120.931939][ T8404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.696'. [ 120.934938][ T8404] netlink: 'syz.2.696': attribute type 7 has an invalid length. [ 120.937523][ T8404] netlink: 'syz.2.696': attribute type 8 has an invalid length. [ 120.988670][ T8401] IPVS: using max 41 ests per chain, 98400 per kthread [ 121.056870][ T5941] hid-generic 0005:10CF:0FFF.0007: collection stack underflow [ 121.063235][ T5941] hid-generic 0005:10CF:0FFF.0007: item 0 2 0 12 parsing failed [ 121.066446][ T5941] hid-generic 0005:10CF:0FFF.0007: probe with driver hid-generic failed with error -22 [ 121.190297][ T8438] bond0: entered allmulticast mode [ 121.192094][ T8438] bond_slave_1: entered allmulticast mode [ 121.206239][ T8445] loop9: detected capacity change from 0 to 7 [ 121.214372][ T8445] Dev loop9: unable to read RDB block 7 [ 121.216957][ T8445] loop9: AHDI p1 [ 121.219528][ T8445] loop9: partition table partially beyond EOD, truncated [ 121.227177][ T8447] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 121.274410][ T8453] netlink: 'syz.0.713': attribute type 1 has an invalid length. [ 121.339150][ T8470] SELinux: unknown common  [ 121.341496][ T8470] SELinux: failed to load policy [ 121.367263][ T8471] bond1: (slave geneve3): making interface the new active one [ 121.372365][ T8471] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 121.375949][ T61] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 121.379841][ T61] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 121.385139][ T61] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 121.388265][ T61] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 121.539859][ T8486] kAFS: unable to lookup cell '(,c' [ 121.544271][ T8486] kAFS: No cell specified [ 121.977777][ T8499] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 121.980184][ T8499] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.983049][ T8499] vhci_hcd vhci_hcd.0: Device attached [ 121.987952][ T8500] vhci_hcd: connection closed [ 121.988185][ T13] vhci_hcd: stop threads [ 121.991839][ T13] vhci_hcd: release socket [ 121.993446][ T13] vhci_hcd: disconnect device [ 122.398479][ T5990] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 122.443418][ T8507] kvm_intel: kvm [8506]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xd8c9 [ 122.455669][ T8507] kvm: kvm [8506]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x2b0b [ 122.458851][ T8507] kvm: kvm [8506]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x29b8 [ 122.548377][ T5990] usb 5-1: Using ep0 maxpacket: 16 [ 122.562285][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 7 [ 122.567280][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 9272, setting to 1024 [ 122.567925][ T8516] loop9: detected capacity change from 0 to 7 [ 122.576461][ T5990] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 122.578598][ T5958] Dev loop9: unable to read RDB block 7 [ 122.579061][ T8517] fuse: Unknown parameter 'use00000000000000000000' [ 122.580652][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.582541][ T5958] loop9: AHDI p1 [ 122.585476][ T5990] usb 5-1: Product: syz [ 122.587967][ T5958] loop9: partition table partially beyond EOD, [ 122.589948][ T5990] usb 5-1: Manufacturer: syz [ 122.591247][ T5958] truncated [ 122.594028][ T5990] usb 5-1: SerialNumber: syz [ 122.601323][ T8516] Dev loop9: unable to read RDB block 7 [ 122.602421][ T5990] usb 5-1: config 0 descriptor?? [ 122.603220][ T8516] loop9: AHDI p1 [ 122.603237][ T8516] loop9: partition table partially beyond EOD, truncated [ 122.607484][ T5990] hub 5-1:0.0: bad descriptor, ignoring hub [ 122.611461][ T5990] hub 5-1:0.0: probe with driver hub failed with error -5 [ 122.621116][ T5990] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input15 [ 122.624689][ T8521] smc: net device veth1_virt_wifi applied user defined pnetid SYZ2 [ 122.661937][ T8521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.671477][ T8521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.678212][ T8521] bond0 (unregistering): Released all slaves [ 122.726805][ T8528] ALSA: seq fatal error: cannot create timer (-16) [ 123.245804][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 123.245818][ T40] audit: type=1400 audit(1764647970.814:22423): avc: denied { listen } for pid=8552 comm="syz.2.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.249442][ T8553] 9pnet_fd: p9_fd_create_unix (8553): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 123.299537][ T8557] fuse: Unknown parameter 'use00000000000000000000' [ 123.387537][ T8566] netlink: 'syz.2.746': attribute type 20 has an invalid length. [ 123.627971][ T8575] binder: 8574:8575 unknown command 0 [ 123.630222][ T8575] binder: 8574:8575 ioctl c0306201 200000000080 returned -22 [ 123.695576][ T8580] netlink: 'syz.0.751': attribute type 63 has an invalid length. [ 123.698256][ T8580] __nla_validate_parse: 4 callbacks suppressed [ 123.698265][ T8580] netlink: 5 bytes leftover after parsing attributes in process `syz.0.751'. [ 123.703818][ T8580] gretap0: entered allmulticast mode [ 123.705906][ T8580] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 123.728413][ T5941] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 123.820185][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 123.821049][ T8586] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 123.860116][ T5941] usb 8-1: device descriptor read/64, error -71 [ 123.868963][ T8591] fuse: Bad value for 'fd' [ 123.932646][ T8601] fuse: Bad value for 'fd' [ 123.950922][ T8603] netlink: 292 bytes leftover after parsing attributes in process `syz.0.759'. [ 123.956047][ T40] audit: type=1400 audit(1764647971.524:22424): avc: denied { accept } for pid=8602 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 124.072627][ T8613] overlayfs: empty lowerdir [ 124.074949][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 124.102472][ T5941] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 124.150217][ T8615] fuse: Unknown parameter 'user_i00000000000000000000' [ 124.228470][ T5941] usb 8-1: device descriptor read/64, error -71 [ 124.309868][ T8627] fuse: Bad value for 'fd' [ 124.348647][ T5941] usb usb8-port1: attempt power cycle [ 124.387178][ T8633] ip6gretap0 speed is unknown, defaulting to 1000 [ 124.465136][ T8635] netlink: 'syz.1.772': attribute type 32 has an invalid length. [ 124.467790][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 124.481934][ T8635] bond3: Setting coupled_control to off (0) [ 124.557351][ T40] audit: type=1804 audit(1764647972.124:22425): pid=8641 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.773" name="file0" dev="tmpfs" ino=480 res=1 errno=0 [ 124.557957][ T8644] fuse: Unknown parameter 'user_i00000000000000000000' [ 124.560374][ T8641] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 124.560427][ T8641] ref_ctr increment failed for inode: 0x1e0 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880245f1580 [ 124.560701][ T8640] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 124.560740][ T8640] ref_ctr decrement failed for inode: 0x1e0 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880245f1580 [ 124.560759][ T8640] uprobe: syz.1.773:8640 failed to unregister, leaking uprobe [ 124.688819][ T5941] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 124.706099][ T8652] overlayfs: failed to clone lowerpath [ 124.710746][ T5941] usb 8-1: device descriptor read/8, error -71 [ 124.748264][ T8660] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.800362][ T8666] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 124.805645][ T917] ip6gretap0 speed is unknown, defaulting to 1000 [ 124.811425][ T8668] fuse: Bad value for 'fd' [ 124.948547][ T5941] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 125.003908][ T5941] usb 8-1: device descriptor read/8, error -71 [ 125.108665][ T5941] usb usb8-port1: unable to enumerate USB device [ 125.127374][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.788'. [ 125.183143][ T8708] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 125.495260][ T8717] loop9: detected capacity change from 0 to 7 [ 125.500581][ T5958] Dev loop9: unable to read RDB block 7 [ 125.502526][ T5958] loop9: AHDI p1 [ 125.503754][ T5958] loop9: partition table partially beyond EOD, truncated [ 125.508001][ T8717] Dev loop9: unable to read RDB block 7 [ 125.510264][ T8717] loop9: AHDI p1 [ 125.511501][ T8717] loop9: partition table partially beyond EOD, truncated [ 125.567017][ T8721] IPv6: Can't replace route, no match found [ 125.581698][ T8707] ip6gretap0 speed is unknown, defaulting to 1000 [ 125.729884][ T8732] fuse: Unknown parameter 'user_id00000000000000000000' [ 125.762241][ T8734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6672 sclass=netlink_route_socket pid=8734 comm=syz.2.802 [ 125.786209][ T40] audit: type=1400 audit(1764647973.354:22426): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 125.851645][ T40] audit: type=1400 audit(1764647973.424:22427): avc: denied { write } for pid=8739 comm="syz.0.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 125.863936][ T8740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=8740 comm=syz.0.805 [ 126.255958][ T40] audit: type=1326 audit(1764647973.824:22428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab758f7c9 code=0x7fc00000 [ 126.265318][ T40] audit: type=1326 audit(1764647973.824:22429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ab758f7c9 code=0x7fc00000 [ 126.275054][ T40] audit: type=1326 audit(1764647973.824:22430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab758f7c9 code=0x7fc00000 [ 126.283841][ T40] audit: type=1326 audit(1764647973.824:22431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab758f7c9 code=0x7fc00000 [ 126.294196][ T40] audit: type=1326 audit(1764647973.824:22432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab758f7c9 code=0x7fc00000 [ 126.371312][ T6017] usb 5-1: USB disconnect, device number 7 [ 126.414020][ T8759] fuse: Bad value for 'fd' [ 126.481881][ T8767] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 126.541241][ T8771] Bluetooth: MGMT ver 1.23 [ 126.666940][ T8775] netlink: 'syz.0.814': attribute type 32 has an invalid length. [ 126.671281][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 126.711087][ T8775] bond2: option coupled_control: invalid value (64) [ 126.719714][ T8775] bond2 (unregistering): Released all slaves [ 126.871353][ T8797] ISOFS: Unable to identify CD-ROM format. [ 126.933483][ T8800] fuse: Bad value for 'fd' [ 126.985971][ T8802] syzkaller0: entered promiscuous mode [ 126.989407][ T8802] syzkaller0: entered allmulticast mode [ 127.015561][ T8806] IPVS: set_ctl: invalid protocol: 137 172.30.1.2:20001 [ 127.268258][ T8825] fuse: Bad value for 'fd' [ 127.276996][ T8769] syz.0.814 (8769): drop_caches: 2 [ 127.343968][ T8830] fuse: Bad value for 'fd' [ 127.403671][ T8834] netlink: 14 bytes leftover after parsing attributes in process `syz.1.833'. [ 127.424329][ T8834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.430461][ T8834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.434233][ T8834] bond0 (unregistering): Released all slaves [ 127.444334][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'. [ 127.530011][ T53] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 127.574148][ T8853] input: syz1 as /devices/virtual/input/input16 [ 127.632968][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.840'. [ 127.679937][ T53] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 127.682784][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.687005][ T53] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 127.690624][ T53] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 127.693306][ T53] usb 7-1: Manufacturer: syz [ 127.696103][ T53] usb 7-1: config 0 descriptor?? [ 127.728548][ T6017] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 127.738418][ T53] rc_core: IR keymap rc-hauppauge not found [ 127.741133][ T53] Registered IR keymap rc-empty [ 127.744210][ T53] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 127.749291][ T53] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input17 [ 127.763844][ T8864] 9pnet_fd: Insufficient options for proto=fd [ 127.800664][ T8867] loop9: detected capacity change from 0 to 7 [ 127.803505][ T6462] Dev loop9: unable to read RDB block 7 [ 127.804932][ T8869] fuse: Unknown parameter '0xffffffffffffffff' [ 127.805592][ T6462] loop9: AHDI p1 [ 127.810727][ T6462] loop9: partition table partially beyond EOD, truncated [ 127.817961][ T8867] Dev loop9: unable to read RDB block 7 [ 127.820479][ T8867] loop9: AHDI p1 [ 127.822172][ T8867] loop9: partition table partially beyond EOD, truncated [ 127.898552][ T6017] usb 5-1: Using ep0 maxpacket: 8 [ 127.902045][ T6017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.906264][ T6017] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.909455][ T6017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.913722][ T6017] usb 5-1: config 0 descriptor?? [ 128.118906][ T6017] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 128.322124][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 128.322136][ T40] audit: type=1400 audit(1764647975.894:22447): avc: denied { remount } for pid=8840 comm="syz.0.835" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 128.326255][ T6017] usb 5-1: USB disconnect, device number 8 [ 128.408784][ T5953] Bluetooth: hci2: command tx timeout [ 128.809320][ T8896] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.849'. [ 128.815119][ T40] audit: type=1400 audit(1764647976.384:22448): avc: denied { connect } for pid=8895 comm="syz.3.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.820610][ T12] tipc: Subscription rejected, illegal request [ 128.853953][ T40] audit: type=1400 audit(1764647976.424:22449): avc: denied { mounton } for pid=8897 comm="syz.3.850" path="/154/bus" dev="tmpfs" ino=847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 128.858105][ T8901] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 128.867487][ T8903] fuse: Unknown parameter '0xffffffffffffffff' [ 128.907670][ T8912] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.951467][ T8910] syz.0.854 (8910): drop_caches: 2 [ 128.954169][ T8921] netlink: 96 bytes leftover after parsing attributes in process `syz.3.858'. [ 129.025438][ T8931] netlink: 'syz.3.863': attribute type 1 has an invalid length. [ 129.074025][ T8937] IPVS: length: 18 != 8 [ 129.121656][ T8943] netlink: 'syz.0.868': attribute type 1 has an invalid length. [ 129.126082][ T8943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8943 comm=syz.0.868 [ 129.171883][ T40] audit: type=1400 audit(1764647976.744:22450): avc: denied { shutdown } for pid=8950 comm="syz.0.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.322556][ T8967] xt_connbytes: Forcing CT accounting to be enabled [ 129.325897][ T8967] set match dimension is over the limit! [ 129.330553][ T8968] tipc: Enabling not permitted [ 129.332897][ T8968] tipc: Enabling of bearer rejected, failed to enable media [ 129.348399][ T8968] Process accounting resumed [ 129.543834][ T8987] fuse: Unknown parameter '0x0000000000000005' [ 129.606378][ T40] audit: type=1400 audit(1764647977.174:22451): avc: denied { listen } for pid=8996 comm="syz.0.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.608711][ T9002] random: crng reseeded on system resumption [ 129.618492][ T40] audit: type=1400 audit(1764647977.174:22452): avc: denied { append } for pid=8997 comm="syz.3.885" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.625678][ T40] audit: type=1400 audit(1764647977.174:22453): avc: denied { open } for pid=8997 comm="syz.3.885" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.633740][ T40] audit: type=1400 audit(1764647977.174:22454): avc: denied { ioctl } for pid=8996 comm="syz.0.884" path="socket:[24485]" dev="sockfs" ino=24485 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.649067][ T40] audit: type=1400 audit(1764647977.224:22455): avc: denied { ioctl } for pid=8997 comm="syz.3.885" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.690494][ T40] audit: type=1400 audit(1764647977.264:22456): avc: denied { read } for pid=9008 comm="syz.3.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 129.757631][ T9015] loop9: detected capacity change from 0 to 7 [ 129.761890][ T9015] Dev loop9: unable to read RDB block 7 [ 129.763864][ T9015] loop9: AHDI p1 [ 129.765230][ T9015] loop9: partition table partially beyond EOD, truncated [ 129.797418][ T9020] fuse: Unknown parameter '0x0000000000000005' [ 130.164493][ T9045] netlink: 'syz.0.900': attribute type 2 has an invalid length. [ 130.184830][ T9045] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 130.192577][ T833] usb 7-1: USB disconnect, device number 9 [ 130.225501][ T9047] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.292822][ T9052] batman_adv: batadv0: Adding interface: gretap3 [ 130.295043][ T9052] batman_adv: batadv0: Interface activated: gretap3 [ 130.473358][ T9057] use of bytesused == 0 is deprecated and will be removed in the future, [ 130.476335][ T9057] use the actual size instead. [ 130.478486][ T53] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 130.538057][ T9064] smc: net device bond0 applied user defined pnetid SYZ2 [ 130.542970][ T9064] netlink: 14 bytes leftover after parsing attributes in process `syz.2.906'. [ 130.566627][ T9064] smc: removing net device bond0 with user defined pnetid SYZ2 [ 130.573788][ T9064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.577868][ T9064] bond_slave_1: left allmulticast mode [ 130.582281][ T9064] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 130.586272][ T9064] bond0 (unregistering): Released all slaves [ 130.641337][ T53] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.645290][ T53] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.650033][ T53] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.654087][ T53] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.663576][ T53] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.667996][ T53] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.671277][ T53] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.673984][ T53] usb 8-1: Product: syz [ 130.675343][ T53] usb 8-1: Manufacturer: syz [ 130.679544][ T53] cdc_wdm 8-1:1.0: skipping garbage [ 130.681550][ T53] cdc_wdm 8-1:1.0: skipping garbage [ 130.685669][ T53] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 130.687672][ T53] cdc_wdm 8-1:1.0: Unknown control protocol [ 130.887978][ T9047] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 130.894171][ T53] usb 8-1: USB disconnect, device number 11 [ 131.102129][ T9079] loop9: detected capacity change from 0 to 7 [ 131.108189][ T9079] Dev loop9: unable to read RDB block 7 [ 131.110835][ T9079] loop9: AHDI p1 [ 131.112401][ T9079] loop9: partition table partially beyond EOD, truncated [ 131.174103][ T9081] XFS (nbd0): SB validate failed with error -5. [ 131.219051][ T9081] kvm: kvm [9080]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 131.223803][ T9081] kvm: kvm [9080]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 131.430823][ T9104] macsec0: entered promiscuous mode [ 131.432689][ T9104] macsec0: entered allmulticast mode [ 131.434424][ T9104] veth1_macvtap: entered allmulticast mode [ 131.461681][ T9112] fuse: Unknown parameter 'fd0x0000000000000005' [ 131.471165][ T9114] loop9: detected capacity change from 0 to 7 [ 131.474819][ T5958] Dev loop9: unable to read RDB block 7 [ 131.476720][ T5958] loop9: AHDI p1 [ 131.477964][ T5958] loop9: partition table partially beyond EOD, truncated [ 131.488523][ T9114] Dev loop9: unable to read RDB block 7 [ 131.490774][ T9114] loop9: AHDI p1 [ 131.492066][ T9114] loop9: partition table partially beyond EOD, truncated [ 131.549723][ T9121] FAT-fs (nullb0): bogus number of reserved sectors [ 131.552240][ T9121] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 131.580568][ T9124] 8021q: VLANs not supported on ip6_vti0 [ 131.834413][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'. [ 131.900250][ T9147] netlink: 68 bytes leftover after parsing attributes in process `syz.3.931'. [ 132.112825][ T9169] program syz.2.938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.116379][ T9168] ALSA: seq fatal error: cannot create timer (-22) [ 132.187081][ T9175] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 132.192112][ T9175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.942'. [ 132.279572][ T9179] tmpfs: Unknown parameter '..' [ 132.281928][ T9179] tmpfs: Unknown parameter '..' [ 132.291808][ T9076] kexec: Could not allocate control_code_buffer [ 132.343088][ T9186] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 132.371908][ T9194] netlink: 32 bytes leftover after parsing attributes in process `syz.3.941'. [ 132.386412][ T9196] cgroup: noprefix used incorrectly [ 132.453561][ T9203] loop9: detected capacity change from 0 to 7 [ 132.459116][ T5958] Dev loop9: unable to read RDB block 7 [ 132.461702][ T5958] loop9: AHDI p1 [ 132.463418][ T5958] loop9: partition table partially beyond EOD, truncated [ 132.472458][ T9203] Dev loop9: unable to read RDB block 7 [ 132.474469][ T9203] loop9: AHDI p1 [ 132.475827][ T9203] loop9: partition table partially beyond EOD, truncated [ 132.528272][ T9210] tipc: Started in network mode [ 132.530028][ T9210] tipc: Node identity f6868ccc4f7e, cluster identity 4711 [ 132.532396][ T9210] tipc: Enabled bearer , priority 0 [ 132.535034][ T9210] syzkaller0: entered promiscuous mode [ 132.536851][ T9210] syzkaller0: entered allmulticast mode [ 132.550931][ T9210] tipc: Resetting bearer [ 132.555356][ T9208] tipc: Resetting bearer [ 132.566115][ T9208] tipc: Disabling bearer [ 132.584165][ T9212] bond0 (unregistering): Released all slaves [ 132.616627][ T9217] netlink: 64 bytes leftover after parsing attributes in process `syz.0.956'. [ 132.622353][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 132.625550][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.956'. [ 132.751949][ T9226] CIFS mount error: No usable UNC path provided in device string! [ 132.751949][ T9226] [ 132.755224][ T9226] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 132.759754][ T9231] CIFS mount error: No usable UNC path provided in device string! [ 132.759754][ T9231] [ 132.763672][ T9231] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 132.791226][ T9235] overlayfs: failed to clone upperpath [ 132.868522][ T9244] loop9: detected capacity change from 0 to 7 [ 132.872366][ T5958] Dev loop9: unable to read RDB block 7 [ 132.874969][ T5958] loop9: AHDI p1 [ 132.876725][ T5958] loop9: partition table partially beyond EOD, truncated [ 132.883910][ T9244] Dev loop9: unable to read RDB block 7 [ 132.886513][ T9244] loop9: AHDI p1 [ 132.888539][ T9244] loop9: partition table partially beyond EOD, truncated [ 133.024427][ T9252] netlink: 'syz.1.966': attribute type 10 has an invalid length. [ 133.036781][ T6017] IPVS: starting estimator thread 0... [ 133.138472][ T9254] IPVS: using max 41 ests per chain, 98400 per kthread [ 133.727003][ T9269] netlink: 'syz.1.971': attribute type 5 has an invalid length. [ 133.745689][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 133.745707][ T40] audit: type=1400 audit(133.654:22479): avc: denied { bind } for pid=9271 comm="syz.3.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.831338][ T9276] nvme_fabrics: missing parameter 'transport=%s' [ 133.834398][ T9276] nvme_fabrics: missing parameter 'nqn=%s' [ 133.905066][ T9292] __nla_validate_parse: 2 callbacks suppressed [ 133.905084][ T9292] netlink: 48 bytes leftover after parsing attributes in process `syz.0.978'. [ 134.028756][ T9302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.980'. [ 134.071991][ T9310] loop9: detected capacity change from 0 to 7 [ 134.075155][ T5958] Dev loop9: unable to read RDB block 7 [ 134.077221][ T5958] loop9: AHDI p1 [ 134.079297][ T5958] loop9: partition table partially beyond EOD, truncated [ 134.083494][ T9310] Dev loop9: unable to read RDB block 7 [ 134.085521][ T9310] loop9: AHDI p1 [ 134.086943][ T9310] loop9: partition table partially beyond EOD, truncated [ 134.120743][ T9320] netlink: 'syz.1.984': attribute type 2 has an invalid length. [ 134.123606][ T9320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.128801][ T9321] tipc: Started in network mode [ 134.130428][ T9321] tipc: Node identity dacee81ca794, cluster identity 4711 [ 134.132845][ T9321] tipc: Enabled bearer , priority 0 [ 134.147630][ T9321] tipc: Disabling bearer [ 134.183169][ T9324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.986'. [ 134.243663][ T9326] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 134.247390][ T40] audit: type=1400 audit(134.154:22480): avc: denied { relabelto } for pid=9325 comm="syz.3.987" name="191" dev="tmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:clock_device_t:s0" [ 134.253544][ T9326] macvtap1: entered promiscuous mode [ 134.255767][ T40] audit: type=1400 audit(134.154:22481): avc: denied { associate } for pid=9325 comm="syz.3.987" name="191" dev="tmpfs" ino=1044 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:clock_device_t:s0" [ 134.257483][ T9326] macvtap1: entered allmulticast mode [ 134.268844][ T9326] batadv0: entered promiscuous mode [ 134.270904][ T9326] batadv0: entered allmulticast mode [ 134.273614][ T9326] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 134.275965][ T9326] team0: Device macvtap1 failed to register rx_handler [ 134.279293][ T9326] batadv0: left allmulticast mode [ 134.281308][ T9326] batadv0: left promiscuous mode [ 134.455275][ T40] audit: type=1400 audit(134.364:22482): avc: denied { read } for pid=9327 comm="syz.3.988" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 134.462881][ T40] audit: type=1400 audit(134.374:22483): avc: denied { ioctl } for pid=9327 comm="syz.3.988" path="/192/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 134.788919][ T55] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 134.798564][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.936359][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.958471][ T55] usb 7-1: Using ep0 maxpacket: 8 [ 134.970332][ T55] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.974380][ T55] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.978830][ T55] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.982525][ T55] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.986887][ T55] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.990348][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.001525][ T40] audit: type=1400 audit(134.914:22484): avc: denied { remount } for pid=9340 comm="syz.0.996" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 135.036507][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.091865][ T9348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.997'. [ 135.105149][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.141036][ T5951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.144717][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.149227][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.153558][ T5951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.158387][ T5951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.182356][ T9349] ip6gretap0 speed is unknown, defaulting to 1000 [ 135.198383][ T55] usb 7-1: GET_CAPABILITIES returned 0 [ 135.200785][ T55] usbtmc 7-1:16.0: can't read capabilities [ 135.288916][ T7908] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 135.401660][ T9352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.405773][ T9352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.422372][ T6017] usb 7-1: USB disconnect, device number 10 [ 135.448426][ T7908] usb 5-1: Using ep0 maxpacket: 32 [ 135.454698][ T7908] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 135.459169][ T7908] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 135.462986][ T7908] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8448, setting to 1024 [ 135.466687][ T7908] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 135.473592][ T7908] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 135.476621][ T7908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.479578][ T7908] usb 5-1: Product: syz [ 135.480995][ T7908] usb 5-1: Manufacturer: syz [ 135.482629][ T7908] usb 5-1: SerialNumber: syz [ 135.491283][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 135.496341][ T7908] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input21 [ 135.620721][ T12] tipc: Left network mode [ 135.657872][ T9349] chnl_net:caif_netlink_parms(): no params data found [ 135.708496][ T7908] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 135.711304][ T7908] (id 0x00) [ 135.732054][ T9349] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.738846][ T9349] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.742246][ T9349] bridge_slave_0: entered allmulticast mode [ 135.746212][ T9349] bridge_slave_0: entered promiscuous mode [ 135.765912][ T9349] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.768989][ T9349] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.771679][ T9349] bridge_slave_1: entered allmulticast mode [ 135.775029][ T9349] bridge_slave_1: entered promiscuous mode [ 135.778545][ T7908] rc_core: IR keymap rc-imon-pad not found [ 135.780670][ T7908] Registered IR keymap rc-empty [ 135.782360][ T7908] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 135.785873][ T7908] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 135.797819][ T9349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.804117][ T9349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.828819][ T9349] team0: Port device team_slave_0 added [ 135.841924][ T9349] team0: Port device team_slave_1 added [ 135.877670][ T9349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.880444][ T9349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.891111][ T9349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.896548][ T9349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.899250][ T9349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.909000][ T9349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.910680][ T7908] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 135.913311][ T9373] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1000'. [ 135.920129][ T7908] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input22 [ 135.926427][ T7908] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:9> initialized [ 135.936039][ T12] hsr_slave_0: left promiscuous mode [ 135.938783][ T12] hsr_slave_1: left promiscuous mode [ 135.940983][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.943409][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.946386][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.953214][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.981933][ T12] veth1_macvtap: left promiscuous mode [ 135.983818][ T12] veth0_macvtap: left promiscuous mode [ 135.985775][ T12] veth1_vlan: left promiscuous mode [ 135.987595][ T12] veth0_vlan: left promiscuous mode [ 136.211995][ T12] smc: removing net device veth1_virt_wifi with user defined pnetid SYZ2 [ 136.242139][ T55] usb 5-1: USB disconnect, device number 9 [ 136.341541][ T12] team0 (unregistering): Port device team_slave_1 removed [ 136.368598][ T12] team0 (unregistering): Port device team_slave_0 removed [ 136.491754][ T9388] random: crng reseeded on system resumption [ 136.492327][ T40] audit: type=1400 audit(136.404:22485): avc: denied { read write } for pid=9387 comm="syz.2.1003" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 136.702783][ T9349] hsr_slave_0: entered promiscuous mode [ 136.705269][ T9349] hsr_slave_1: entered promiscuous mode [ 136.763272][ T9406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1008'. [ 136.768431][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 136.804898][ T40] audit: type=1326 audit(136.714:22486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9411 comm="syz.1.1010" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ff158f7c9 code=0x0 [ 136.815640][ T9414] sctp: [Deprecated]: syz.2.1011 (pid 9414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.815640][ T9414] Use struct sctp_sack_info instead [ 136.862838][ T9421] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 136.867917][ T9420] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 136.878599][ T9349] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 136.883434][ T9349] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 136.888097][ T9349] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 136.898976][ T9349] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 136.948267][ T9349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.957969][ T9349] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.963207][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.965631][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.976260][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.978781][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.018775][ T12] IPVS: stop unused estimator thread 0... [ 137.108497][ T6017] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 137.112294][ T9349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.220039][ T5953] Bluetooth: hci3: command tx timeout [ 137.235259][ T40] audit: type=1400 audit(137.144:22487): avc: denied { map } for pid=9432 comm="syz.2.1014" path="socket:[26366]" dev="sockfs" ino=26366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.259663][ T6017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 137.274097][ T6017] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 137.276707][ T9349] veth0_vlan: entered promiscuous mode [ 137.278118][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.284106][ T6017] usb 5-1: Product: syz [ 137.285960][ T6017] usb 5-1: Manufacturer: syz [ 137.287929][ T6017] usb 5-1: SerialNumber: syz [ 137.290606][ T9349] veth1_vlan: entered promiscuous mode [ 137.293465][ T6017] usb 5-1: config 0 descriptor?? [ 137.317731][ T9349] veth0_macvtap: entered promiscuous mode [ 137.324640][ T9349] veth1_macvtap: entered promiscuous mode [ 137.339014][ T9349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.346664][ T9349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.355024][ T82] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.359238][ T82] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.363660][ T82] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.367562][ T82] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.407745][ T9463] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1016'. [ 137.443991][ T1064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.447494][ T1064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.478842][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.482655][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.493036][ T40] audit: type=1400 audit(137.404:22488): avc: denied { mounton } for pid=9349 comm="syz-executor" path="/syzkaller.o0D1Rr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 137.577482][ T9480] netlink: 'syz.4.992': attribute type 39 has an invalid length. [ 137.640814][ T9483] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1019'. [ 137.645225][ T9483] netlink: 'syz.2.1019': attribute type 1 has an invalid length. [ 137.685529][ T9488] nbd: must specify a size in bytes for the device [ 137.712748][ T53] usb 5-1: USB disconnect, device number 10 [ 137.773421][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.776410][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.547880][ T9513] loop9: detected capacity change from 0 to 7 [ 138.552268][ T9513] Dev loop9: unable to read RDB block 7 [ 138.554831][ T9513] loop9: AHDI p1 [ 138.556654][ T9513] loop9: partition table partially beyond EOD, truncated [ 138.661974][ T9525] vivid-004: disconnect [ 138.665927][ T9525] vivid-004: reconnect [ 138.689137][ T9517] [U]  [ 138.799846][ T9542] netlink: 'syz.2.1036': attribute type 1 has an invalid length. [ 138.800286][ T9543] netlink: 'syz.2.1036': attribute type 1 has an invalid length. [ 138.810377][ T9546] loop9: detected capacity change from 0 to 7 [ 138.811542][ T9542] smc: adding net device bond0 with user defined pnetid SYZ2 [ 138.813695][ T9546] Dev loop9: unable to read RDB block 7 [ 138.815909][ T9542] bond0: entered promiscuous mode [ 138.817846][ T9546] loop9: AHDI p1 [ 138.819867][ T9542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.824690][ T9546] loop9: partition table partially beyond EOD, truncated [ 138.836715][ T9542] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 138.843091][ T9542] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 138.848107][ T9542] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 138.871792][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1037'. [ 138.945476][ T9555] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20000 [ 138.951772][ T9555] autofs: Unknown parameter ' [ 138.951772][ T9555] ' [ 138.983367][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 138.983383][ T40] audit: type=1400 audit(138.894:22492): avc: denied { setattr } for pid=9556 comm="syz.0.1040" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 138.996479][ T40] audit: type=1400 audit(138.904:22493): avc: denied { getopt } for pid=9556 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.006824][ T9560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1041'. [ 139.073131][ T9563] Mount JFS Failure: -5 [ 139.076113][ T9563] jfs_mount failed w/return code = -5 [ 139.081335][ T9565] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 139.087424][ T9565] qnx6: wrong signature (magic) in superblock #1. [ 139.091059][ T9565] qnx6: unable to read the first superblock [ 139.100774][ T9565] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 139.103602][ T9565] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 139.106722][ T9565] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 139.106791][ T40] audit: type=1400 audit(139.014:22494): avc: denied { firmware_load } for pid=9564 comm="syz.2.1043" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 139.289617][ T5953] Bluetooth: hci3: command tx timeout [ 139.605369][ T40] audit: type=1400 audit(139.514:22495): avc: denied { map } for pid=9568 comm="syz.4.1044" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 139.614587][ T40] audit: type=1400 audit(139.514:22496): avc: denied { execute } for pid=9568 comm="syz.4.1044" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 139.653189][ T9569] bond1 (unregistering): Released all slaves [ 139.765870][ T9575] loop9: detected capacity change from 0 to 7 [ 139.769747][ T9575] Dev loop9: unable to read RDB block 7 [ 139.772270][ T9575] loop9: AHDI p1 [ 139.773819][ T9575] loop9: partition table partially beyond EOD, truncated [ 139.811833][ T9577] netlink: 'syz.4.1046': attribute type 21 has an invalid length. [ 139.814539][ T9577] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1046'. [ 140.039532][ T40] audit: type=1400 audit(139.954:22497): avc: denied { read } for pid=9590 comm="syz.4.1052" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 140.048213][ T40] audit: type=1400 audit(139.954:22498): avc: denied { open } for pid=9590 comm="syz.4.1052" path="/5/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 140.228372][ T6029] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 140.233838][ T9600] netlink: 'syz.4.1055': attribute type 1 has an invalid length. [ 140.238193][ T9600] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1055'. [ 140.370064][ T40] audit: type=1400 audit(140.284:22499): avc: denied { setopt } for pid=9606 comm="syz.4.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 140.372947][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1057'. [ 140.379400][ T40] audit: type=1400 audit(140.284:22500): avc: denied { bind } for pid=9606 comm="syz.4.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 140.388414][ T6029] usb 5-1: Using ep0 maxpacket: 32 [ 140.395069][ T6029] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 140.401788][ T6029] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 140.405944][ T6029] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 140.409695][ T6029] usb 5-1: Product: syz [ 140.411627][ T6029] usb 5-1: Manufacturer: syz [ 140.413807][ T6029] usb 5-1: SerialNumber: syz [ 140.417944][ T6029] usb 5-1: config 0 descriptor?? [ 140.420241][ T9589] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.625956][ T9589] Cannot find del_set index 2 as target [ 140.631429][ T6013] usb 5-1: USB disconnect, device number 11 [ 141.057404][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1061'. [ 141.116367][ T9621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=9621 comm=syz.2.1061 [ 141.170595][ T9628] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 141.177487][ T9629] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 141.237226][ T9636] netlink: 'syz.0.1065': attribute type 21 has an invalid length. [ 141.252826][ T9638] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 141.262670][ T9638] usb usb8: usbfs: process 9638 (syz.4.1067) did not claim interface 0 before use [ 141.265727][ T9641] usb usb8: usbfs: process 9641 (syz.4.1067) did not claim interface 0 before use [ 141.356269][ T9647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1070'. [ 141.372949][ T5953] Bluetooth: hci3: command tx timeout [ 141.493910][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 141.497626][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 141.527553][ T40] audit: type=1400 audit(141.434:22501): avc: denied { create } for pid=9666 comm="syz.1.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.558868][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.562247][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.974455][ T9689] kvm: kvm [9687]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 141.977986][ T9689] kvm: kvm [9687]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 141.996726][ T9689] kvm: kvm [9687]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 142.018030][ T9689] kvm: kvm [9687]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 142.021557][ T9689] kvm: kvm [9687]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 142.039209][ T9689] kvm_intel: kvm [9687]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 142.110176][ T9696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1083'. [ 142.123644][ T9696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.128838][ T9696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1083'. [ 142.188474][ T55] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 142.390492][ T55] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 142.393622][ T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.396188][ T55] usb 9-1: Product: syz [ 142.397698][ T55] usb 9-1: Manufacturer: syz [ 142.399495][ T55] usb 9-1: SerialNumber: syz [ 142.405282][ T55] usb 9-1: config 0 descriptor?? [ 142.609090][ T55] usb 9-1: f81604_read: reg: 105 failed: -EPROTO [ 142.611985][ T55] f81604 9-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 142.614448][ T55] f81604 9-1:0.0: probe with driver f81604 failed with error -71 [ 142.618736][ T55] usb 9-1: USB disconnect, device number 2 [ 142.687998][ T9736] netlink: 'syz.2.1094': attribute type 17 has an invalid length. [ 142.737933][ T9736] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.740647][ T9736] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.821147][ T9736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.826619][ T9736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.914636][ T1156] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.923069][ T1156] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.929676][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.932926][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.936053][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.939164][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.943670][ T1156] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.946734][ T1156] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.047427][ T9764] netlink: 'syz.0.1100': attribute type 8 has an invalid length. [ 143.086378][ T9766] loop9: detected capacity change from 0 to 7 [ 143.090626][ T9766] Dev loop9: unable to read RDB block 7 [ 143.092556][ T9766] loop9: AHDI p1 [ 143.094143][ T9766] loop9: partition table partially beyond EOD, truncated [ 143.138645][ T9770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.166445][ T9775] bridge_slave_1: left allmulticast mode [ 143.171013][ T9775] bridge_slave_1: left promiscuous mode [ 143.173200][ T9775] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.179407][ T9775] bridge_slave_0: left allmulticast mode [ 143.181953][ T9775] bridge_slave_0: left promiscuous mode [ 143.184665][ T9775] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.348192][ T9772] tun0: tun_chr_ioctl cmd 1074025672 [ 143.350212][ T9772] tun0: ignored: set checksum disabled [ 143.352137][ T9776] tun0: tun_chr_ioctl cmd 1074025672 [ 143.353959][ T9776] tun0: ignored: set checksum disabled [ 143.400418][ T9788] overlayfs: failed to resolve './file1/file0': -2 [ 143.408751][ T9776] kAFS: unable to lookup cell '/,cL' [ 143.411162][ T9772] kAFS: unable to lookup cell '/,cL' [ 143.448451][ T5953] Bluetooth: hci3: command tx timeout [ 143.574596][ T9801] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.631282][ T9793] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 143.633683][ T9793] overlayfs: failed to set xattr on upper [ 143.635616][ T9793] overlayfs: ...falling back to redirect_dir=nofollow. [ 143.638127][ T9793] overlayfs: ...falling back to index=off. [ 143.638833][ T9804] loop9: detected capacity change from 0 to 7 [ 143.640247][ T9793] overlayfs: ...falling back to uuid=null. [ 143.642877][ T9804] Dev loop9: unable to read RDB block 7 [ 143.646191][ T9804] loop9: AHDI p1 [ 143.647695][ T9804] loop9: partition table partially beyond EOD, truncated [ 143.901375][ T9820] PKCS8: Unsupported PKCS#8 version [ 143.947196][ T55] IPVS: starting estimator thread 0... [ 144.005622][ T9824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9824 comm=syz.4.1118 [ 144.011450][ T9824] __nla_validate_parse: 3 callbacks suppressed [ 144.011466][ T9824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1118'. [ 144.048430][ T9823] IPVS: using max 42 ests per chain, 100800 per kthread [ 144.328402][ T5941] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 144.367771][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 144.367783][ T40] audit: type=1400 audit(144.274:22509): avc: denied { create } for pid=9830 comm="syz.1.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 144.382559][ T9831] tmpfs: Unknown parameter 'usrquotamP`_LT_'.z@u [ 144.382559][ T9831] .dv1Rik&3F3\zғ͐s<2xh&P1֖р(֌5' [ 144.511908][ T5941] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 144.515880][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.519296][ T5941] usb 5-1: Product: syz [ 144.521247][ T5941] usb 5-1: Manufacturer: syz [ 144.523318][ T5941] usb 5-1: SerialNumber: syz [ 144.527508][ T5941] usb 5-1: config 0 descriptor?? [ 144.689001][ T9837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1121'. [ 144.732990][ T5941] usb 5-1: f81604_read: reg: 105 failed: -EPROTO [ 144.735541][ T5941] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 144.739107][ T5941] f81604 5-1:0.0: probe with driver f81604 failed with error -71 [ 144.745739][ T5941] usb 5-1: USB disconnect, device number 12 [ 144.903246][ T40] audit: type=1400 audit(144.814:22510): avc: denied { execute } for pid=9845 comm="syz.4.1124" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 145.040372][ T40] audit: type=1400 audit(144.954:22511): avc: denied { block_suspend } for pid=9857 comm="syz.1.1130" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 145.173895][ T9878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1134'. [ 145.266365][ T40] audit: type=1400 audit(145.174:22512): avc: denied { setattr } for pid=9887 comm="syz.0.1138" path="socket:[29651]" dev="sockfs" ino=29651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.339838][ T9900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1142'. [ 145.565086][ T9921] loop9: detected capacity change from 0 to 7 [ 145.569261][ T9921] Dev loop9: unable to read RDB block 7 [ 145.571864][ T9921] loop9: AHDI p1 [ 145.573512][ T9921] loop9: partition table partially beyond EOD, truncated [ 145.580204][ T9923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1147'. [ 145.638401][ T2301] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 145.653241][ T40] audit: type=1400 audit(145.564:22513): avc: denied { ioctl } for pid=9927 comm="syz.2.1150" path="socket:[32819]" dev="sockfs" ino=32819 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 145.700942][ T9934] Cannot find set identified by id 65534 to match [ 145.701752][ T9928] netlink: 'syz.2.1150': attribute type 13 has an invalid length. [ 145.706708][ T9928] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1150'. [ 145.798901][ T2301] usb 5-1: too many configurations: 101, using maximum allowed: 8 [ 145.802489][ T2301] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 145.802526][ T40] audit: type=1800 audit(145.714:22514): pid=9942 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1153" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 145.805049][ T2301] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.819467][ T2301] usb 5-1: config index 1 descriptor too short (expected 45, got 36) [ 145.822015][ T2301] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.826521][ T2301] usb 5-1: config index 2 descriptor too short (expected 45, got 36) [ 145.829493][ T2301] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.839090][ T2301] usb 5-1: config index 3 descriptor too short (expected 45, got 36) [ 145.841852][ T2301] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.852402][ T2301] usb 5-1: config index 4 descriptor too short (expected 45, got 36) [ 145.855077][ T2301] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.867059][ T2301] usb 5-1: config index 5 descriptor too short (expected 45, got 36) [ 145.869975][ T2301] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.876734][ T2301] usb 5-1: config index 6 descriptor too short (expected 45, got 36) [ 145.879967][ T2301] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.889042][ T2301] usb 5-1: config index 7 descriptor too short (expected 45, got 36) [ 145.891688][ T2301] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.901656][ T40] audit: type=1400 audit(145.804:22515): avc: denied { create } for pid=9949 comm="syz.2.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 145.916941][ T2301] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 145.920142][ T2301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.922761][ T2301] usb 5-1: Product: syz [ 145.924137][ T2301] usb 5-1: Manufacturer: syz [ 145.925668][ T2301] usb 5-1: SerialNumber: syz [ 146.024205][ T9957] loop9: detected capacity change from 0 to 7 [ 146.027361][ T9957] Dev loop9: unable to read RDB block 7 [ 146.029687][ T9957] loop9: AHDI p1 [ 146.033462][ T9957] loop9: partition table partially beyond EOD, truncated [ 146.161674][ T9906] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 146.166850][ T5941] usb 5-1: USB disconnect, device number 13 [ 146.352756][ T9978] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 146.393010][ T9980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1163'. [ 146.611093][ T40] audit: type=1400 audit(146.524:22516): avc: denied { attach_queue } for pid=9992 comm="syz.4.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 146.780088][ T40] audit: type=1400 audit(146.694:22517): avc: denied { accept } for pid=10000 comm="syz.4.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.170936][T10030] nbd0: detected capacity change from 0 to 127 [ 147.443819][ T5953] block nbd0: Receive control failed (result -104) [ 147.554285][ T40] audit: type=1400 audit(147.464:22518): avc: denied { getattr } for pid=10057 comm="syz.2.1182" name="/" dev="9p" ino=71827851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 147.555209][T10058] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.786121][T10061] bond0: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 147.952202][T10085] loop9: detected capacity change from 0 to 7 [ 147.955090][T10085] Dev loop9: unable to read RDB block 7 [ 147.957085][T10085] loop9: AHDI p1 [ 147.958468][T10085] loop9: partition table partially beyond EOD, truncated [ 148.064535][T10094] libceph: resolve '4' (ret=-3): failed [ 148.068950][T10094] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1192'. [ 148.289406][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 148.351443][T10113] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1199'. [ 148.375565][T10113] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.387513][T10113] bond4: (slave ip6gretap1): making interface the new active one [ 148.391923][T10113] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 148.748492][T10128] loop9: detected capacity change from 0 to 7 [ 148.753260][ T6462] Dev loop9: unable to read RDB block 7 [ 148.755692][ T6462] loop9: AHDI p1 [ 148.757351][ T6462] loop9: partition table partially beyond EOD, truncated [ 148.762815][T10128] Dev loop9: unable to read RDB block 7 [ 148.764979][T10128] loop9: AHDI p1 [ 148.766373][T10128] loop9: partition table partially beyond EOD, truncated [ 148.946572][T10100] 9pnet_fd: p9_fd_create_tcp (10100): problem connecting socket to 127.0.0.1 [ 149.007493][T10148] mkiss: ax0: crc mode is auto. [ 149.067166][T10162] fuse: Bad value for 'fd' [ 149.070722][T10162] IPVS: length: 24 != 312 [ 149.164550][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'. [ 149.246376][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'. [ 149.394001][T10210] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 149.464202][T10226] loop9: detected capacity change from 0 to 7 [ 149.467307][ T6462] Dev loop9: unable to read RDB block 7 [ 149.470280][ T6462] loop9: AHDI p1 [ 149.471587][ T6462] loop9: partition table partially beyond EOD, truncated [ 149.480012][T10226] Dev loop9: unable to read RDB block 7 [ 149.481923][T10226] loop9: AHDI p1 [ 149.483191][T10226] loop9: partition table partially beyond EOD, truncated [ 149.621078][T10240] 9pnet_fd: Insufficient options for proto=fd [ 150.352127][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1238'. [ 150.362618][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 150.368402][T10261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1240'. [ 150.396579][T10255] team0: Port device team_slave_0 removed [ 150.454108][ T29] IPVS: starting estimator thread 0... [ 150.490324][ T68] block nbd0: Connection timed out, retrying (0/1 alive) [ 150.494032][ T68] block nbd0: Connection timed out, retrying (0/1 alive) [ 150.497161][ T68] block nbd0: Connection timed out, retrying (0/1 alive) [ 150.502312][ T35] block nbd0: Dead connection, failed to find a fallback [ 150.505602][ T35] block nbd0: shutting down sockets [ 150.508906][ T68] block nbd0: Connection timed out, retrying (0/1 alive) [ 150.512383][ T35] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.516978][ T35] Buffer I/O error on dev nbd0, logical block 1, async page read [ 150.524258][T10283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10283 comm=syz.0.1243 [ 150.524956][ T35] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.532474][ T35] Buffer I/O error on dev nbd0, logical block 0, async page read [ 150.535560][T10283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1243'. [ 150.535962][ T35] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.543624][ T35] Buffer I/O error on dev nbd0, logical block 3, async page read [ 150.546529][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 150.546539][ T40] audit: type=1326 audit(150.454:22554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10274 comm="syz.1.1244" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ff158f7c9 code=0x7fc00000 [ 150.547017][ T35] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.551103][T10273] IPVS: using max 28 ests per chain, 67200 per kthread [ 150.559511][ T35] Buffer I/O error on dev nbd0, logical block 2, async page read [ 150.561225][ T5958] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.566565][ T40] audit: type=1326 audit(150.474:22555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10274 comm="syz.1.1244" exe="/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2ff158f7c9 code=0x7fc00000 [ 150.572885][ T5958] Buffer I/O error on dev nbd0, logical block 0, async page read [ 150.580546][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'. [ 150.584159][ T5958] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.595898][ T5958] Buffer I/O error on dev nbd0, logical block 1, async page read [ 150.597841][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 150.599507][ T5958] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.602763][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 150.606225][ T5958] Buffer I/O error on dev nbd0, logical block 2, async page read [ 150.606370][ T5958] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.616763][T10288] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1247'. [ 150.617029][ T5958] Buffer I/O error on dev nbd0, logical block 3, async page read [ 150.623794][ T5958] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.627763][ T5958] Buffer I/O error on dev nbd0, logical block 0, async page read [ 150.631397][ T5958] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.635328][ T5958] Buffer I/O error on dev nbd0, logical block 1, async page read [ 150.641219][ T5958] ldm_validate_partition_table(): Disk read failed. [ 150.645798][ T5958] Dev nbd0: unable to read RDB block 0 [ 150.650005][ T5958] nbd0: unable to read partition table [ 150.658199][ T5958] ldm_validate_partition_table(): Disk read failed. [ 150.662679][ T5958] Dev nbd0: unable to read RDB block 0 [ 150.668137][ T5958] nbd0: unable to read partition table [ 150.699174][T10287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41421 sclass=netlink_route_socket pid=10287 comm=syz.2.1246 [ 151.425267][ T40] audit: type=1400 audit(151.334:22556): avc: denied { setopt } for pid=10315 comm="syz.2.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 151.433140][ T40] audit: type=1400 audit(151.334:22557): avc: denied { write } for pid=10315 comm="syz.2.1254" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 151.708443][ T29] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 151.765325][ T40] audit: type=1400 audit(151.674:22558): avc: denied { append } for pid=10334 comm="syz.2.1260" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 151.774519][ T40] audit: type=1400 audit(151.674:22559): avc: denied { map } for pid=10334 comm="syz.2.1260" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 151.783368][ T40] audit: type=1400 audit(151.674:22560): avc: denied { execute } for pid=10334 comm="syz.2.1260" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 151.858692][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 151.863600][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.868027][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.876841][ T29] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 151.880922][ T29] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 151.884431][ T29] usb 5-1: Product: syz [ 151.886424][ T29] usb 5-1: Manufacturer: syz [ 151.889071][ T29] usb 5-1: SerialNumber: syz [ 151.893808][ T29] usb 5-1: config 0 descriptor?? [ 152.121840][T10350] loop9: detected capacity change from 0 to 7 [ 152.124947][ T5958] Dev loop9: unable to read RDB block 7 [ 152.127150][ T5958] loop9: AHDI p1 [ 152.128741][ T5958] loop9: partition table partially beyond EOD, truncated [ 152.132288][T10350] Dev loop9: unable to read RDB block 7 [ 152.134170][T10350] loop9: AHDI p1 [ 152.135517][T10350] loop9: partition table partially beyond EOD, truncated [ 152.256347][T10360] afs: Unknown parameter 'dynv/kvm' [ 152.324036][T10354] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 152.383227][T10368] macsec2: entered promiscuous mode [ 152.385135][T10368] macsec2: entered allmulticast mode [ 152.387884][T10368] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 152.434244][T10379] tipc: Enabling of bearer rejected, failed to enable media [ 152.447265][ T9] usb 5-1: USB disconnect, device number 14 [ 152.522569][ T40] audit: type=1400 audit(152.434:22561): avc: denied { ioctl } for pid=10389 comm="syz.2.1272" path="socket:[33824]" dev="sockfs" ino=33824 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.164026][T10428] ip6erspan0: entered promiscuous mode [ 153.401844][T10432] team0: Port device team_slave_0 removed [ 153.451116][T10438] netlink: 'syz.0.1280': attribute type 20 has an invalid length. [ 153.462107][T10438] netlink: 'syz.0.1280': attribute type 20 has an invalid length. [ 153.467048][ T1245] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.471598][ T1245] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.475614][ T1245] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.479746][ T1245] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.145403][T10440] fuse: Bad value for 'fd' [ 154.202546][ T40] audit: type=1400 audit(154.114:22562): avc: denied { lock } for pid=10443 comm="syz.4.1284" path="socket:[32534]" dev="sockfs" ino=32534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.236877][T10446] __nla_validate_parse: 11 callbacks suppressed [ 154.236888][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 154.243121][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 154.293099][T10450] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1287'. [ 154.558027][T10471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.561394][T10471] IPv6: NLM_F_CREATE should be set when creating new route [ 154.568366][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 154.667693][ T5953] Bluetooth: hci3: Malformed Event: 0x2f [ 154.670214][ T5953] Bluetooth: hci3: Malformed Event: 0x2f [ 154.739617][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 154.743310][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 154.746605][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.751413][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.755573][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.759801][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.764093][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.767064][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.979800][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 154.981707][ T9] usbtmc 7-1:16.0: can't read capabilities [ 155.017599][T10495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1300'. [ 155.184089][T10450] usb 7-1: usbtmc_ioctl_clear_out_halt returned -32 [ 155.189135][ T5941] usb 7-1: USB disconnect, device number 11 [ 155.227681][T10508] x_tables: duplicate underflow at hook 1 [ 155.281626][T10510] ip6gretap0 speed is unknown, defaulting to 1000 [ 155.313104][T10511] fuse: Unknown parameter '' [ 155.454222][T10515] 9pnet_virtio: no channels available for device 127.0.0.1 [ 155.598781][T10521] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10521 comm=syz.0.1309 [ 155.799792][T10534] can0: slcan on ttyS3. [ 155.908709][T10534] can0 (unregistered): slcan off ttyS3. [ 156.083548][T10548] IPVS: set_ctl: invalid protocol: 2 100.1.1.2:20002 [ 156.513801][ T40] audit: type=1400 audit(156.424:22563): avc: denied { create } for pid=10562 comm="syz.4.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 156.575395][T10569] fuse: Bad value for 'fd' [ 156.580743][ T5953] Bluetooth: hci3: hardware error 0x05 [ 156.614494][T10571] 9pnet: Found fid 0 not clunked [ 156.666990][T10576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1320'. [ 156.762805][T10589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1323'. [ 156.767218][T10589] netlink: 'syz.4.1323': attribute type 1 has an invalid length. [ 156.815881][T10595] batman_adv: batadv0: Adding interface: gretap1 [ 156.818885][T10595] batman_adv: batadv0: Interface activated: gretap1 [ 156.886120][T10601] loop9: detected capacity change from 0 to 7 [ 156.890972][T10601] Dev loop9: unable to read RDB block 7 [ 156.893630][T10601] loop9: AHDI p1 [ 156.895742][T10601] loop9: partition table partially beyond EOD, truncated [ 156.940012][T10608] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1329'. [ 156.982012][T10613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1331'. [ 157.017112][T10617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1333'. [ 157.047469][T10625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1335'. [ 157.067366][ T40] audit: type=1400 audit(156.974:22564): avc: denied { mount } for pid=10629 comm="syz.0.1336" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 157.130459][T10635] veth1_macvtap: left promiscuous mode [ 157.132399][T10635] macsec0: entered promiscuous mode [ 157.136201][T10635] veth1_macvtap: entered promiscuous mode [ 157.139263][T10635] macsec0: left promiscuous mode [ 157.154471][T10641] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.192687][ T40] audit: type=1400 audit(157.104:22565): avc: denied { ioctl } for pid=10640 comm="syz.0.1339" path="/dev/usbmon7" dev="devtmpfs" ino=759 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 157.509302][T10660] CIFS mount error: No usable UNC path provided in device string! [ 157.509302][T10660] [ 157.512811][T10660] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 157.942644][T10682] fuse: Bad value for 'fd' [ 157.944249][ T40] audit: type=1400 audit(157.854:22566): avc: denied { ioctl } for pid=10675 comm="syz.0.1351" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 157.950923][T10682] team0: Device gtp0 is up. Set it down before adding it as a team port [ 158.291469][ T40] audit: type=1400 audit(158.204:22567): avc: denied { append } for pid=10708 comm="syz.0.1360" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.347011][T10711] CUSE: unknown device info "" [ 158.351155][T10711] CUSE: zero length info key specified [ 158.446402][T10728] fuse: Bad value for 'fd' [ 158.515835][T10732] netlink: 'syz.4.1368': attribute type 13 has an invalid length. [ 158.562512][ T40] audit: type=1400 audit(158.474:22568): avc: denied { setopt } for pid=10733 comm="syz.4.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.648616][ T5953] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 158.711050][ T40] audit: type=1400 audit(158.624:22569): avc: denied { connect } for pid=10739 comm="syz.4.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 158.719352][ T40] audit: type=1400 audit(158.624:22570): avc: denied { read } for pid=10739 comm="syz.4.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 159.230006][T10772] netlink: 'syz.4.1383': attribute type 10 has an invalid length. [ 159.273849][T10775] __nla_validate_parse: 3 callbacks suppressed [ 159.273861][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1384'. [ 159.281079][T10775] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 159.317945][ T40] audit: type=1400 audit(524447.224:22571): avc: denied { append } for pid=10780 comm="syz.0.1385" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 159.387794][ T29] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 159.556000][ T29] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.558958][ T29] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 159.562340][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 159.567070][ T29] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.570788][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 159.574570][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.579320][ T29] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 159.582247][ T29] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.585545][ T29] usb 7-1: Product: syz [ 159.586963][ T29] usb 7-1: Manufacturer: syz [ 159.590471][T10766] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.593944][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 159.597321][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 159.600994][ T29] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 159.603692][ T29] cdc_wdm 7-1:1.0: Unknown control protocol [ 159.802351][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 159.804973][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 159.807383][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 159.809976][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 159.812243][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 159.814456][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 159.816666][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 159.818954][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 159.821266][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 159.823673][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 159.826180][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 159.829122][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 159.831461][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 159.833718][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 159.836606][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 159.838960][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 159.841222][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 159.843440][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 159.845786][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 159.848195][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 159.881417][ T5941] usb 7-1: USB disconnect, device number 12 [ 160.473915][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'. [ 160.477838][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'. [ 160.491072][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1393'. [ 160.607187][ T40] audit: type=1804 audit(524448.474:22572): pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1397" name="/newroot/382/file0" dev="tmpfs" ino=2108 res=1 errno=0 [ 160.641563][T10833] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1399'. [ 160.648140][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'. [ 160.909756][T10862] loop9: detected capacity change from 0 to 7 [ 160.914298][T10862] Dev loop9: unable to read RDB block 7 [ 160.916780][T10862] loop9: AHDI p1 [ 160.918454][T10862] loop9: partition table partially beyond EOD, truncated [ 161.021783][T10875] ptrace attach of "/syz-executor exec"[5940] was attempted by ""[10875] [ 161.079193][T10879] ip6gre1: entered promiscuous mode [ 161.081499][T10879] ip6gre1: entered allmulticast mode [ 161.087096][ T1156] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.091994][T10879] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 161.094454][ T1156] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.099091][T10879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.109813][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.421042][T10905] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1423'. [ 161.423981][T10905] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1423'. [ 161.541821][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.873851][T10922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1429'. [ 161.902513][ T2301] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 161.916569][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 161.916585][ T40] audit: type=1400 audit(524449.747:22578): avc: denied { create } for pid=10925 comm="syz.0.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 161.931221][ T40] audit: type=1400 audit(524449.747:22579): avc: denied { write } for pid=10925 comm="syz.0.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 161.939563][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.962541][ T40] audit: type=1400 audit(524449.786:22580): avc: denied { map } for pid=10919 comm="syz.4.1428" path="pipe:[25463]" dev="pipefs" ino=25463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 162.008518][T10930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=10930 comm=syz.0.1432 [ 162.016476][T10930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1432'. [ 162.020537][ T40] audit: type=1400 audit(524449.845:22581): avc: denied { node_bind } for pid=10929 comm="syz.0.1432" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 162.059251][ T2301] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 162.063170][ T2301] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.067039][ T2301] usb 7-1: Product: syz [ 162.068850][ T2301] usb 7-1: Manufacturer: syz [ 162.071549][ T2301] usb 7-1: SerialNumber: syz [ 162.075846][ T2301] usb 7-1: config 0 descriptor?? [ 162.287650][ T2301] usb 7-1: f81604_read: reg: 105 failed: -EPROTO [ 162.289926][ T2301] f81604 7-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 162.293288][ T2301] f81604 7-1:0.0: probe with driver f81604 failed with error -71 [ 162.299724][ T2301] usb 7-1: USB disconnect, device number 13 [ 162.626004][T10945] ip6gretap0 speed is unknown, defaulting to 1000 [ 163.034513][ T40] audit: type=1400 audit(524450.838:22582): avc: denied { name_connect } for pid=10965 comm="syz.2.1443" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 163.396236][T10995] XFS (nbd2): SB validate failed with error -5. [ 163.450615][T11002] loop9: detected capacity change from 0 to 7 [ 163.455445][ T5958] Dev loop9: unable to read RDB block 7 [ 163.458042][ T5958] loop9: AHDI p1 [ 163.459337][ T5958] loop9: partition table partially beyond EOD, truncated [ 163.473245][T11002] Dev loop9: unable to read RDB block 7 [ 163.476161][T11002] loop9: AHDI p1 [ 163.477892][T11002] loop9: partition table partially beyond EOD, truncated [ 163.544489][T11004] syzkaller0: entered promiscuous mode [ 163.546446][T11004] syzkaller0: entered allmulticast mode [ 163.980786][T11036] netlink: 'syz.4.1460': attribute type 10 has an invalid length. [ 163.990077][T11036] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 163.994386][T11036] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 164.000383][T11036] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 164.332419][T11047] overlayfs: failed to clone upperpath [ 164.533632][T11052] __nla_validate_parse: 5 callbacks suppressed [ 164.533648][T11052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1464'. [ 164.544811][T11052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11052 comm=syz.4.1464 [ 164.587331][T11054] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 164.758934][T11066] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1469'. [ 164.762258][ T40] audit: type=1400 audit(524452.517:22583): avc: denied { map } for pid=11065 comm="syz.2.1469" path="/proc/1171/mounts" dev="proc" ino=33760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 164.762312][ T40] audit: type=1400 audit(524452.517:22584): avc: denied { execute } for pid=11065 comm="syz.2.1469" path="/proc/1171/mounts" dev="proc" ino=33760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 164.853342][T11068] x_tables: duplicate underflow at hook 2 [ 165.085127][ T40] audit: type=1400 audit(524452.830:22585): avc: denied { map } for pid=11085 comm="syz.0.1476" path="socket:[37171]" dev="sockfs" ino=37171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.130721][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.225519][T11098] loop2: detected capacity change from 0 to 7 [ 165.229788][ T5958] Dev loop2: unable to read RDB block 7 [ 165.232213][ T5958] loop2: unable to read partition table [ 165.235608][ T5958] loop2: partition table beyond EOD, truncated [ 165.240405][T11098] Dev loop2: unable to read RDB block 7 [ 165.242643][T11098] loop2: unable to read partition table [ 165.245776][T11098] loop2: partition table beyond EOD, truncated [ 165.248552][T11098] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 165.279991][ T5345] Dev loop2: unable to read RDB block 7 [ 165.281923][ T5345] loop2: unable to read partition table [ 165.284998][ T5345] loop2: partition table beyond EOD, truncated [ 165.352831][ T40] audit: type=1400 audit(524453.094:22586): avc: denied { connect } for pid=11102 comm="syz.0.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 166.201786][T11108] overlayfs: statfs failed on './file0' [ 166.315595][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1490'. [ 166.361676][T11149] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1492'. [ 166.400327][T11153] netlink: 'syz.4.1494': attribute type 10 has an invalid length. [ 166.403818][T11153] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1494'. [ 166.436513][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'. [ 166.446037][T11159] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1495'. [ 166.453286][ T40] audit: type=1400 audit(524454.171:22587): avc: denied { read } for pid=11157 comm="syz.2.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 166.466535][T11159] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 166.473518][T11159] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1495'. [ 166.650605][T11172] geneve3: entered promiscuous mode [ 166.656275][T11172] geneve3: entered allmulticast mode [ 166.659252][ T1156] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 166.662385][ T1156] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 166.666440][ T1156] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 166.669507][ T1156] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 166.734865][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1502'. [ 167.148971][T11208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1512'. [ 167.201891][T11216] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 167.209411][T11218] program syz.0.1515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.246248][ T40] audit: type=1400 audit(524454.955:22588): avc: denied { ioctl } for pid=11219 comm="syz.4.1517" path="socket:[37243]" dev="sockfs" ino=37243 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 167.553949][T11241] loop9: detected capacity change from 0 to 7 [ 167.558724][T11241] Dev loop9: unable to read RDB block 7 [ 167.562169][T11241] loop9: AHDI p1 [ 167.563907][T11241] loop9: partition table partially beyond EOD, truncated [ 167.772542][ T40] audit: type=1400 audit(524455.465:22589): avc: denied { setattr } for pid=11251 comm="syz.2.1528" path="socket:[38183]" dev="sockfs" ino=38183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.854682][T11258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.865149][ T5951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.869644][ T5951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.875487][ T5951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.883465][ T5951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.888694][ T5951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.924769][T11259] ip6gretap0 speed is unknown, defaulting to 1000 [ 167.933488][T11262] syz.2.1531 (11262): drop_caches: 2 [ 167.938310][T11263] syz.2.1531 (11263): drop_caches: 2 [ 167.970070][ T40] audit: type=1400 audit(524455.651:22590): avc: denied { accept } for pid=11264 comm="syz.2.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.230160][T11259] chnl_net:caif_netlink_parms(): no params data found [ 168.258747][T11285] loop9: detected capacity change from 0 to 7 [ 168.262743][T11285] Dev loop9: unable to read RDB block 7 [ 168.265592][T11285] loop9: AHDI p1 [ 168.267226][T11285] loop9: partition table partially beyond EOD, truncated [ 168.337620][T11259] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.340925][T11259] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.341050][T11259] bridge_slave_0: entered allmulticast mode [ 168.343815][T11259] bridge_slave_0: entered promiscuous mode [ 168.348486][T11259] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.348559][T11259] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.348661][T11259] bridge_slave_1: entered allmulticast mode [ 168.367279][T11259] bridge_slave_1: entered promiscuous mode [ 168.390656][T11259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.397545][T11259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.425097][T11259] team0: Port device team_slave_0 added [ 168.434103][T11259] team0: Port device team_slave_1 added [ 168.461599][T11259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.464749][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.476893][T11259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.483470][T11259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.486814][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.498681][T11259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.552555][T11259] hsr_slave_0: entered promiscuous mode [ 168.556119][T11259] hsr_slave_1: entered promiscuous mode [ 168.559413][T11259] debugfs: 'hsr0' already exists in 'hsr' [ 168.561953][T11259] Cannot create hsr debugfs directory [ 168.653197][T11306] unsupported nlmsg_type 40 [ 168.690973][ T40] audit: type=1400 audit(524456.368:22591): avc: denied { create } for pid=11305 comm="syz.2.1544" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 168.696425][T11306] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 168.704002][T11306] overlayfs: missing 'lowerdir' [ 168.706528][ T40] audit: type=1400 audit(524456.378:22592): avc: denied { mounton } for pid=11305 comm="syz.2.1544" path="/425/file0/file1" dev="9p" ino=71827867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.737483][ T40] audit: type=1804 audit(524456.417:22593): pid=11306 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1544" name="/newroot/425/file0/bus/file0" dev="9p" ino=71827989 res=1 errno=0 [ 168.748760][ T40] audit: type=1804 audit(524456.417:22594): pid=11306 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1544" name="/newroot/425/file0/bus/file0" dev="9p" ino=71827989 res=1 errno=0 [ 168.759247][ T40] audit: type=1400 audit(524456.427:22595): avc: denied { link } for pid=11305 comm="syz.2.1544" name="file0" dev="9p" ino=71827989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.786754][T11259] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.794796][ T40] audit: type=1400 audit(524456.476:22596): avc: denied { listen } for pid=11311 comm="syz.4.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 168.797277][T11259] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.810891][T11259] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.820208][T11259] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.852644][T11259] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.856053][T11259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.859481][T11259] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.862661][T11259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.880005][T11324] ip6gretap0 speed is unknown, defaulting to 1000 [ 168.881894][ T40] audit: type=1400 audit(524456.555:22597): avc: denied { read } for pid=11325 comm="syz.0.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.924157][T11259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.946056][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.950717][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.968028][T11259] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.981214][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.983587][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.995468][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.998003][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.046879][T11259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.051467][T11259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.228709][T11259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.261915][T11356] SELinux: failed to load policy [ 169.389622][T11259] veth0_vlan: entered promiscuous mode [ 169.397888][T11380] overlayfs: empty lowerdir [ 169.400062][T11380] netlink: 'syz.4.1562': attribute type 21 has an invalid length. [ 169.401147][T11259] veth1_vlan: entered promiscuous mode [ 169.425216][T11259] veth0_macvtap: entered promiscuous mode [ 169.430787][T11259] veth1_macvtap: entered promiscuous mode [ 169.442421][T11259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.449735][T11259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.458317][ T1150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.461540][ T1150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.468745][ T1150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.471892][ T1150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.529192][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.532759][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.558719][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.561441][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.642889][T11399] SELinux: policydb magic number 0x9940e4ee does not match expected magic number 0xf97cff8c [ 169.646449][T11399] SELinux: failed to load policy [ 169.649300][T11399] __nla_validate_parse: 7 callbacks suppressed [ 169.649311][T11399] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1565'. [ 169.690993][T11410] tls_set_device_offload: netdev not found [ 169.700136][T11398] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 169.818311][T11417] input: syz1 as /devices/virtual/input/input24 [ 169.869636][T11420] loop9: detected capacity change from 0 to 7 [ 169.872725][T11420] Dev loop9: unable to read RDB block 7 [ 169.874857][T11420] loop9: AHDI p1 [ 169.876187][T11420] loop9: partition table partially beyond EOD, truncated [ 169.942293][ T5953] Bluetooth: hci4: command tx timeout [ 170.014451][T11432] netlink: 'syz.5.1573': attribute type 10 has an invalid length. [ 170.017164][T11432] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1573'. [ 170.184289][T11440] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 170.188169][T11440] overlayfs: failed to set xattr on upper [ 170.190476][T11440] overlayfs: ...falling back to redirect_dir=nofollow. [ 170.192699][T11440] overlayfs: ...falling back to index=off. [ 170.194531][T11440] overlayfs: ...falling back to uuid=null. [ 170.370716][T11456] tmpfs: Bad value for 'mpol' [ 170.374088][T11458] tmpfs: Bad value for 'mpol' [ 170.379441][ T6013] delete_channel: no stack [ 170.535144][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1584'. [ 170.746465][ T6849] syz_tun (unregistering): left allmulticast mode [ 171.067450][ T5951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.071073][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.074899][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.078326][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.082589][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.112459][T11474] ip6gretap0 speed is unknown, defaulting to 1000 [ 171.327521][T11474] chnl_net:caif_netlink_parms(): no params data found [ 171.384324][T11474] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.387864][T11474] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.391633][T11493] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1593'. [ 171.391937][T11474] bridge_slave_0: entered allmulticast mode [ 171.399236][T11474] bridge_slave_0: entered promiscuous mode [ 171.404234][T11474] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.407707][T11474] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.411030][T11474] bridge_slave_1: entered allmulticast mode [ 171.415127][T11474] bridge_slave_1: entered promiscuous mode [ 171.437715][T11474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.491317][T11499] 9p: Unknown access argument 18446744073709551615: -34 [ 171.510339][T11501] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 171.590847][T11474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.613315][T11474] team0: Port device team_slave_0 added [ 171.617870][T11474] team0: Port device team_slave_1 added [ 171.637249][T11474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.640715][T11474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.652443][T11474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.657627][T11474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.660348][T11474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.668143][T11474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.688218][T11513] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1597'. [ 171.691439][T11474] hsr_slave_0: entered promiscuous mode [ 171.691898][T11474] hsr_slave_1: entered promiscuous mode [ 171.693759][T11513] openvswitch: netlink: Flow key attr not present in new flow. [ 171.695738][T11474] debugfs: 'hsr0' already exists in 'hsr' [ 171.700775][T11474] Cannot create hsr debugfs directory [ 171.820327][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1602'. [ 171.855357][T11474] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 171.865634][T11474] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 171.868381][T11532] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 171.875952][T11474] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 171.880617][T11474] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 171.900410][T11474] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.902915][T11474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.905498][T11474] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.907901][T11474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.939565][T11474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.949510][ T1064] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.959213][ T1064] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.981930][T11474] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.012992][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.016171][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.020932][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.024191][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.055371][ T5953] Bluetooth: hci4: command tx timeout [ 172.126523][T11550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1608'. [ 172.130384][T11550] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1608'. [ 172.175852][T11474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.336044][T11474] veth0_vlan: entered promiscuous mode [ 172.341975][T11474] veth1_vlan: entered promiscuous mode [ 172.360361][T11474] veth0_macvtap: entered promiscuous mode [ 172.364615][T11474] veth1_macvtap: entered promiscuous mode [ 172.375316][T11474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.385109][T11474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.393816][T11391] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.397815][T11391] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.402459][T11391] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.406035][T11391] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.408061][T11594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11594 comm=syz.4.1617 [ 172.445188][T11391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.448421][T11391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.466842][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.469447][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.495713][T11598] bridge0: entered promiscuous mode [ 172.497659][T11598] macsec1: entered promiscuous mode [ 172.498240][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 172.498251][ T40] audit: type=1400 audit(524460.118:22604): avc: denied { name_bind } for pid=11599 comm="syz.0.1620" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 172.553790][T11606] vcan1: entered allmulticast mode [ 172.622470][T11615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.630756][T11615] bond0: (slave rose0): Enslaving as an active interface with an up link [ 172.701277][T11622] bond3: (slave bond_slave_1): Device is not our slave [ 172.704076][T11622] bond3: option active_slave: invalid value (bond_slave_1) [ 172.704430][T11624] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 172.708102][T11622] bond3 (unregistering): Released all slaves [ 172.733937][T11615] netlink: 'syz.5.1626': attribute type 29 has an invalid length. [ 172.769607][T11636] netlink: 'syz.6.1628': attribute type 1 has an invalid length. [ 172.792133][T11636] bond1 (unregistering): Released all slaves [ 172.832162][T11645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11645 comm=syz.6.1628 [ 172.847179][ T1064] Bluetooth: hci2: Frame reassembly failed (-84) [ 172.880569][T11648] netlink: 'syz.4.1630': attribute type 15 has an invalid length. [ 172.884117][T11648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1630'. [ 172.889275][T11650] 9pnet_fd: Insufficient options for proto=fd [ 172.892108][T11648] 9pnet_fd: Insufficient options for proto=fd [ 172.928639][T11660] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1632'. [ 172.931726][T11660] 0X: renamed from caif0 [ 172.935181][T11660] 0X: entered allmulticast mode [ 172.938204][T11660] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 172.984940][T11667] netlink: 'syz.4.1633': attribute type 10 has an invalid length. [ 172.994600][T11667] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 173.035428][T11672] overlayfs: failed to resolve './file0': -2 [ 173.133589][T11680] bridge_slave_0: left allmulticast mode [ 173.135424][T11680] bridge_slave_0: left promiscuous mode [ 173.137321][T11680] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.143631][T11680] bridge_slave_1: left allmulticast mode [ 173.145664][T11680] bridge_slave_1: left promiscuous mode [ 173.147704][T11680] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.154694][T11680] bond0: (slave bond_slave_0): Releasing backup interface [ 173.160561][T11680] bond0: (slave bond_slave_1): Releasing backup interface [ 173.167147][T11680] team0: Port device team_slave_0 removed [ 173.173500][T11680] team0: Port device team_slave_1 removed [ 173.176342][T11680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.179737][T11680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.184110][T11680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.186584][T11680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.190342][ T5951] Bluetooth: hci0: command tx timeout [ 173.192473][T11680] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 173.212072][T11683] team0: Mode changed to "loadbalance" [ 173.271332][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 173.702251][T11706] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 173.704818][T11706] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 173.707977][T11706] vhci_hcd vhci_hcd.0: Device attached [ 173.710898][T11707] vhci_hcd vhci_hcd.0: port 0 already used [ 173.713315][T11708] vhci_hcd: connection closed [ 173.714526][ T1064] vhci_hcd: stop threads [ 173.717813][ T1064] vhci_hcd: release socket [ 173.719289][ T1064] vhci_hcd: disconnect device [ 174.162502][ T5951] Bluetooth: hci4: command tx timeout [ 174.263766][T11723] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 174.265607][T11725] loop9: detected capacity change from 0 to 7 [ 174.270261][T11725] Dev loop9: unable to read RDB block 7 [ 174.272685][T11725] loop9: AHDI p1 [ 174.276274][T11725] loop9: partition table partially beyond EOD, truncated [ 174.281413][T11727] netlink: 'syz.4.1651': attribute type 9 has an invalid length. [ 174.284954][T11727] netlink: 'syz.4.1651': attribute type 9 has an invalid length. [ 174.680686][T11774] loop9: detected capacity change from 0 to 7 [ 174.683722][T11774] Dev loop9: unable to read RDB block 7 [ 174.685592][T11774] loop9: AHDI p1 [ 174.686933][T11774] loop9: partition table partially beyond EOD, truncated [ 174.831482][T11789] netlink: 'syz.0.1670': attribute type 11 has an invalid length. [ 174.891821][ T5953] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 174.994254][ T40] audit: type=1400 audit(524462.577:22605): avc: denied { setopt } for pid=11806 comm="syz.4.1675" lport=37548 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 174.994704][T11807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.005315][ T40] audit: type=1400 audit(524462.577:22606): avc: denied { read } for pid=11806 comm="syz.4.1675" lport=37548 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 175.228220][T11833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.233480][T11833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.241458][T11834] __nla_validate_parse: 21 callbacks suppressed [ 175.241470][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 175.306429][ T5953] Bluetooth: hci0: command tx timeout [ 175.318310][T11841] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 175.434344][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1688'. [ 175.443660][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1687'. [ 175.458206][T11855] netlink: 'syz.6.1689': attribute type 6 has an invalid length. [ 175.475557][T11855] netlink: 'syz.6.1689': attribute type 6 has an invalid length. [ 175.480311][T11846] fuse: Unknown parameter '0x00000000000002a30x000000000000000400000000000000000005li~.k$":ȩܣU#;E!b@diLDtR}S3MDj' [ 175.560497][T11862] 9p: Unknown access argument 18446744073709551615: -34 [ 175.878717][ T40] audit: type=1400 audit(524463.456:22607): avc: denied { listen } for pid=11883 comm="syz.0.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 175.896202][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1699'. [ 175.909389][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1700'. [ 175.920307][T11889] veth3: entered promiscuous mode [ 175.927569][T11879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11879 comm=syz.4.1696 [ 175.943152][T11887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.962079][T11887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.981036][T11894] overlay: ./file0 is not a directory [ 176.131890][T11898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.209090][T11905] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1705'. [ 176.267045][ T5953] Bluetooth: hci4: command tx timeout [ 176.281089][T11909] netlink: 'syz.0.1708': attribute type 10 has an invalid length. [ 176.283747][T11909] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1708'. [ 176.603683][T11917] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 176.616899][T11917] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 176.631741][T11917] CUSE: unknown device info "&b%ZW)3\my " [ 176.634085][T11917] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 176.638651][T11917] CUSE: DEVNAME unspecified [ 176.640626][T11916] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 176.647187][T11919] batadv_slave_1: entered promiscuous mode [ 176.649924][T11919] netlink: 'syz.6.1711': attribute type 21 has an invalid length. [ 176.653076][T11919] netlink: 'syz.6.1711': attribute type 6 has an invalid length. [ 176.656624][T11919] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1711'. [ 176.661893][T11918] batadv_slave_1: left promiscuous mode [ 176.709106][T11927] netlink: 'syz.6.1713': attribute type 1 has an invalid length. [ 177.122153][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1720'. [ 177.285690][ T40] audit: type=1326 audit(524464.841:22608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.6.1725" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba578f7c9 code=0x7fc00000 [ 177.295464][ T40] audit: type=1326 audit(524464.851:22609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.6.1725" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feba578f7c9 code=0x7fc00000 [ 177.305112][ T40] audit: type=1326 audit(524464.851:22610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.6.1725" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba578f7c9 code=0x7fc00000 [ 177.344040][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 177.346602][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 177.373587][T11968] ata1.00: invalid cdb length 6 [ 177.389071][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 177.391185][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 177.409555][ T5953] Bluetooth: hci0: command tx timeout [ 177.622927][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 177.625048][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 177.662768][ T2301] libceph: connect (1)[c::]:6789 error -101 [ 177.665179][ T2301] libceph: mon0 (1)[c::]:6789 connect error [ 178.147092][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 178.149234][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 178.168504][T11973] ceph: No mds server is up or the cluster is laggy [ 178.168563][T11979] ceph: No mds server is up or the cluster is laggy [ 178.182803][ T2301] libceph: connect (1)[c::]:6789 error -101 [ 178.185574][ T2301] libceph: mon0 (1)[c::]:6789 connect error [ 178.333042][T11998] ip6gretap0 speed is unknown, defaulting to 1000 [ 178.505057][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1732'. [ 179.243919][T12043] SELinux: policydb string length 14080 does not match expected length 8 [ 179.248284][T12043] SELinux: failed to load policy [ 179.319296][T12045] SELinux: truncated policydb string identifier [ 179.322125][T12045] SELinux: failed to load policy [ 179.499078][ T5953] Bluetooth: hci0: command tx timeout [ 179.561903][T12054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.606283][T12059] loop9: detected capacity change from 0 to 7 [ 179.609150][T12059] Dev loop9: unable to read RDB block 7 [ 179.610906][T12059] loop9: AHDI p1 [ 179.612182][T12059] loop9: partition table partially beyond EOD, truncated [ 179.747009][T12068] syzkaller1: entered promiscuous mode [ 179.748851][T12068] syzkaller1: entered allmulticast mode [ 179.753639][T12068] tmpfs: Bad value for 'mpol' [ 179.838678][T12070] team0: Port device xfrm1 added [ 179.865054][T12066] /dev/sr0: Can't open blockdev [ 179.874108][T12065] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 179.879130][T12065] UDF-fs: Scanning with blocksize 2048 failed [ 179.882866][T12065] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 179.885432][T12065] UDF-fs: Scanning with blocksize 4096 failed [ 179.951388][T12081] netlink: 'syz.4.1756': attribute type 11 has an invalid length. [ 179.951408][T12080] netlink: 'syz.4.1756': attribute type 11 has an invalid length. [ 180.030392][T12085] loop9: detected capacity change from 0 to 7 [ 180.034264][T12085] Dev loop9: unable to read RDB block 7 [ 180.036798][T12085] loop9: AHDI p1 [ 180.038452][T12085] loop9: partition table partially beyond EOD, truncated [ 180.039120][T12086] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 180.039120][T12086] The task syz.4.1757 (12086) triggered the difference, watch for misbehavior. [ 180.087470][T12090] sctp: [Deprecated]: syz.5.1759 (pid 12090) Use of int in max_burst socket option. [ 180.087470][T12090] Use struct sctp_assoc_value instead [ 180.096590][ T40] audit: type=1400 audit(524467.635:22611): avc: denied { getopt } for pid=12089 comm="syz.5.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 180.159853][T12102] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 180.162812][T12102] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 180.167531][T12102] vhci_hcd vhci_hcd.0: Device attached [ 180.170324][T12104] vhci_hcd: connection closed [ 180.170507][T11391] vhci_hcd: stop threads [ 180.173593][T11391] vhci_hcd: release socket [ 180.175236][T11391] vhci_hcd: disconnect device [ 180.594700][ T40] audit: type=1326 audit(524468.121:22612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12125 comm="syz.4.1769" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72b7d8f7c9 code=0x0 [ 180.710938][T12129] Bluetooth: MGMT ver 1.23 [ 180.797711][T12137] __nla_validate_parse: 8 callbacks suppressed [ 180.797728][T12137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1772'. [ 180.810040][T12135] syzkaller1: entered promiscuous mode [ 180.812435][T12135] syzkaller1: entered allmulticast mode [ 180.828119][T12134] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1926054629 (30816874064 ns) > initial count (1816527600 ns). Using initial count to start timer. [ 180.834835][T12135] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1926054629 (30816874064 ns) > initial count (1816527600 ns). Using initial count to start timer. [ 181.227044][T12154] tmpfs: Cannot disable swap on remount [ 181.253931][ T40] audit: type=1400 audit(524724.781:22613): avc: denied { mounton } for pid=12155 comm="syz.5.1778" path="/56/file1/file0" dev="autofs" ino=42644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 181.570962][ T5953] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 181.964949][T12180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1785'. [ 181.970618][T12180] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1785'. [ 182.408106][T12202] overlayfs: failed to clone lowerpath [ 182.478120][T12208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1796'. [ 182.503923][T12208] bond0: (slave wlan1): Releasing backup interface [ 182.513600][T12208] ------------[ cut here ]------------ [ 182.515545][T12208] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 182.518557][T12208] WARNING: CPU: 2 PID: 12208 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x247/0x850 [ 182.523402][T12208] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 182.525755][T12208] CPU: 2 UID: 0 PID: 12208 Comm: syz.4.1796 Not tainted syzkaller #0 PREEMPT(full) [ 182.530906][T12208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.536454][T12208] RIP: 0010:drv_unassign_vif_chanctx+0x247/0x850 [ 182.538883][T12208] Code: 74 24 10 48 81 c6 20 01 00 00 48 89 74 24 10 e8 ff 37 ed f6 8b 54 24 04 48 8b 74 24 10 48 c7 c7 60 d4 e2 8c e8 6a b3 aa f6 90 <0f> 0b 90 90 e8 e0 37 ed f6 4c 89 f2 48 b8 00 00 00 00 00 fc ff df [ 182.547426][T12208] RSP: 0018:ffffc9000458f180 EFLAGS: 00010286 [ 182.550420][T12208] RAX: 0000000000000000 RBX: ffff8880586b4d80 RCX: ffffc9000c831000 [ 182.554270][T12208] RDX: 0000000000080000 RSI: ffffffff817b2025 RDI: 0000000000000001 [ 182.558254][T12208] RBP: ffff888024368e80 R08: 0000000000000001 R09: 0000000000000000 [ 182.561884][T12208] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880586b6ad8 [ 182.565143][T12208] R13: 0000000000000000 R14: ffff8880586b57b8 R15: ffff8880586b6a80 [ 182.567809][T12208] FS: 00007f72b8bb76c0(0000) GS:ffff8880d6bf6000(0000) knlGS:0000000000000000 [ 182.570948][T12208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.573396][T12208] CR2: 00007feba59b42f8 CR3: 0000000045e7f000 CR4: 0000000000352ef0 [ 182.576528][T12208] Call Trace: [ 182.577897][T12208] [ 182.578968][T12208] ieee80211_assign_link_chanctx+0x3f1/0xf00 [ 182.581217][T12208] __ieee80211_link_release_channel+0x273/0x4b0 [ 182.583542][T12208] ieee80211_link_release_channel+0x128/0x200 [ 182.585887][T12208] ? __pfx_ieee80211_uninit+0x10/0x10 [ 182.587745][T12208] unregister_netdevice_many_notify+0x1402/0x25c0 [ 182.590056][T12208] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 182.592688][T12208] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 182.594992][T12208] ? find_held_lock+0x2b/0x80 [ 182.596670][T12208] unregister_netdevice_queue+0x305/0x3f0 [ 182.598712][T12208] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 182.600923][T12208] _cfg80211_unregister_wdev+0x64b/0x830 [ 182.603087][T12208] ieee80211_if_remove+0x250/0x400 [ 182.605059][T12208] ieee80211_del_iface+0x16/0x20 [ 182.607056][T12208] cfg80211_remove_virtual_intf+0xdd/0x2a0 [ 182.609235][T12208] nl80211_del_interface+0x106/0x190 [ 182.611163][T12208] genl_family_rcv_msg_doit+0x209/0x2f0 [ 182.613175][T12208] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 182.615405][T12208] ? bpf_lsm_capable+0x9/0x10 [ 182.617147][T12208] ? security_capable+0x7e/0x260 [ 182.618969][T12208] ? ns_capable+0xd7/0x110 [ 182.620580][T12208] genl_rcv_msg+0x55c/0x800 [ 182.622756][T12208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.624916][T12208] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 182.626909][T12208] ? __pfx_nl80211_del_interface+0x10/0x10 [ 182.629031][T12208] ? __pfx_nl80211_post_doit+0x10/0x10 [ 182.631016][T12208] netlink_rcv_skb+0x158/0x420 [ 182.633164][T12208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.635007][T12208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.636930][T12208] ? netlink_deliver_tap+0x1ae/0xd30 [ 182.638880][T12208] genl_rcv+0x28/0x40 [ 182.640583][T12208] netlink_unicast+0x5aa/0x870 [ 182.642449][T12208] ? __pfx_netlink_unicast+0x10/0x10 [ 182.644330][T12208] netlink_sendmsg+0x8c8/0xdd0 [ 182.646072][T12208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.648130][T12208] ____sys_sendmsg+0xa98/0xc70 [ 182.650217][T12208] ? copy_msghdr_from_user+0x10a/0x160 [ 182.652753][T12208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.655286][T12208] ? __pfx_futex_wake_mark+0x10/0x10 [ 182.657319][T12208] ___sys_sendmsg+0x134/0x1d0 [ 182.659002][T12208] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.660824][T12208] ? __lock_acquire+0x622/0x1c90 [ 182.662699][T12208] __sys_sendmsg+0x16d/0x220 [ 182.664530][T12208] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.666311][T12208] ? __x64_sys_futex+0x1e0/0x4c0 [ 182.668167][T12208] do_syscall_64+0xcd/0xfa0 [ 182.669774][T12208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.671898][T12208] RIP: 0033:0x7f72b7d8f7c9 [ 182.673835][T12208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.680882][T12208] RSP: 002b:00007f72b8bb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.684024][T12208] RAX: ffffffffffffffda RBX: 00007f72b7fe5fa0 RCX: 00007f72b7d8f7c9 [ 182.686680][T12208] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 182.689313][T12208] RBP: 00007f72b7e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 182.691947][T12208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.694820][T12208] R13: 00007f72b7fe6038 R14: 00007f72b7fe5fa0 R15: 00007fff9d4208b8 [ 182.697825][T12208] [ 182.698862][T12208] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 182.701302][T12208] CPU: 2 UID: 0 PID: 12208 Comm: syz.4.1796 Not tainted syzkaller #0 PREEMPT(full) [ 182.704424][T12208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.707988][T12208] Call Trace: [ 182.709123][T12208] [ 182.710120][T12208] dump_stack_lvl+0x3d/0x1f0 [ 182.711671][T12208] vpanic+0x640/0x6f0 [ 182.713129][T12208] ? drv_unassign_vif_chanctx+0x247/0x850 [ 182.715298][T12208] panic+0xca/0xd0 [ 182.716629][T12208] ? __pfx_panic+0x10/0x10 [ 182.718224][T12208] check_panic_on_warn+0xab/0xb0 [ 182.719885][T12208] __warn+0xf6/0x3c0 [ 182.721220][T12208] ? __pfx_vprintk_emit+0x10/0x10 [ 182.723030][T12208] ? drv_unassign_vif_chanctx+0x247/0x850 [ 182.725174][T12208] report_bug+0x3c3/0x580 [ 182.726758][T12208] ? drv_unassign_vif_chanctx+0x247/0x850 [ 182.729102][T12208] handle_bug+0x184/0x210 [ 182.731042][T12208] exc_invalid_op+0x17/0x50 [ 182.733167][T12208] asm_exc_invalid_op+0x1a/0x20 [ 182.735133][T12208] RIP: 0010:drv_unassign_vif_chanctx+0x247/0x850 [ 182.737366][T12208] Code: 74 24 10 48 81 c6 20 01 00 00 48 89 74 24 10 e8 ff 37 ed f6 8b 54 24 04 48 8b 74 24 10 48 c7 c7 60 d4 e2 8c e8 6a b3 aa f6 90 <0f> 0b 90 90 e8 e0 37 ed f6 4c 89 f2 48 b8 00 00 00 00 00 fc ff df [ 182.744226][T12208] RSP: 0018:ffffc9000458f180 EFLAGS: 00010286 [ 182.746233][T12208] RAX: 0000000000000000 RBX: ffff8880586b4d80 RCX: ffffc9000c831000 [ 182.748836][T12208] RDX: 0000000000080000 RSI: ffffffff817b2025 RDI: 0000000000000001 [ 182.751496][T12208] RBP: ffff888024368e80 R08: 0000000000000001 R09: 0000000000000000 [ 182.754205][T12208] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880586b6ad8 [ 182.756995][T12208] R13: 0000000000000000 R14: ffff8880586b57b8 R15: ffff8880586b6a80 [ 182.760421][T12208] ? __warn_printk+0x1a5/0x350 [ 182.762464][T12208] ieee80211_assign_link_chanctx+0x3f1/0xf00 [ 182.765061][T12208] __ieee80211_link_release_channel+0x273/0x4b0 [ 182.767650][T12208] ieee80211_link_release_channel+0x128/0x200 [ 182.770325][T12208] ? __pfx_ieee80211_uninit+0x10/0x10 [ 182.772416][T12208] unregister_netdevice_many_notify+0x1402/0x25c0 [ 182.774809][T12208] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 182.777148][T12208] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 182.779389][T12208] ? find_held_lock+0x2b/0x80 [ 182.781063][T12208] unregister_netdevice_queue+0x305/0x3f0 [ 182.783097][T12208] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 182.785646][T12208] _cfg80211_unregister_wdev+0x64b/0x830 [ 182.788034][T12208] ieee80211_if_remove+0x250/0x400 [ 182.789754][T12208] ieee80211_del_iface+0x16/0x20 [ 182.791396][T12208] cfg80211_remove_virtual_intf+0xdd/0x2a0 [ 182.793451][T12208] nl80211_del_interface+0x106/0x190 [ 182.795584][T12208] genl_family_rcv_msg_doit+0x209/0x2f0 [ 182.798054][T12208] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 182.800758][T12208] ? bpf_lsm_capable+0x9/0x10 [ 182.802846][T12208] ? security_capable+0x7e/0x260 [ 182.804623][T12208] ? ns_capable+0xd7/0x110 [ 182.806234][T12208] genl_rcv_msg+0x55c/0x800 [ 182.807784][T12208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.809483][T12208] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 182.811247][T12208] ? __pfx_nl80211_del_interface+0x10/0x10 [ 182.813232][T12208] ? __pfx_nl80211_post_doit+0x10/0x10 [ 182.815466][T12208] netlink_rcv_skb+0x158/0x420 [ 182.817101][T12208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.818750][T12208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.820478][T12208] ? netlink_deliver_tap+0x1ae/0xd30 [ 182.822246][T12208] genl_rcv+0x28/0x40 [ 182.823916][T12208] netlink_unicast+0x5aa/0x870 [ 182.825928][T12208] ? __pfx_netlink_unicast+0x10/0x10 [ 182.828154][T12208] netlink_sendmsg+0x8c8/0xdd0 [ 182.829835][T12208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.831565][T12208] ____sys_sendmsg+0xa98/0xc70 [ 182.833251][T12208] ? copy_msghdr_from_user+0x10a/0x160 [ 182.835672][T12208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.837515][T12208] ? __pfx_futex_wake_mark+0x10/0x10 [ 182.839277][T12208] ___sys_sendmsg+0x134/0x1d0 [ 182.840878][T12208] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.842744][T12208] ? __lock_acquire+0x622/0x1c90 [ 182.845003][T12208] __sys_sendmsg+0x16d/0x220 [ 182.847124][T12208] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.849453][T12208] ? __x64_sys_futex+0x1e0/0x4c0 [ 182.851675][T12208] do_syscall_64+0xcd/0xfa0 [ 182.853716][T12208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.856344][T12208] RIP: 0033:0x7f72b7d8f7c9 [ 182.858353][T12208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.866744][T12208] RSP: 002b:00007f72b8bb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.870258][T12208] RAX: ffffffffffffffda RBX: 00007f72b7fe5fa0 RCX: 00007f72b7d8f7c9 [ 182.873731][T12208] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 182.876684][T12208] RBP: 00007f72b7e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 182.880167][T12208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.883627][T12208] R13: 00007f72b7fe6038 R14: 00007f72b7fe5fa0 R15: 00007fff9d4208b8 [ 182.887115][T12208] [ 182.889526][T12208] Kernel Offset: disabled [ 182.891444][T12208] Rebooting in 86400 seconds..