last executing test programs: 2m39.017125819s ago: executing program 3 (id=111): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) llistxattr(&(0x7f00000003c0)='./file1\x00', &(0x7f00000004c0)=""/24, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000400)) socket$netlink(0x10, 0x3, 0x13) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0131010000000000200012800089ac000010000280040012000800150060bb0200000000000000000fe1073bd5fef7544f9c74cfbd0b472c916ab65082b230d8ad0c4ffd4dd56fcb474721cad014aafebdbae5ea937cadd8e8f0d7f6b8c8afd8fb3009d4"], 0x40}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xa, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1446}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r9, @ANYBLOB="46060900250000001c00128009000100626f6e64000000000c00028008000b00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r11, 0x10c, 0x7, &(0x7f0000000000)=0x8, 0x4) 2m38.93458674s ago: executing program 3 (id=114): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000080)={0x1, 0x4}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000980)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9, 0x82}}}, 0x7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 2m38.703725005s ago: executing program 3 (id=120): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x2, 0x9}) (async) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x60) fanotify_mark(r0, 0x0, 0x9, r1, &(0x7f00000001c0)='./file0\x00') syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00') ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000040)={0x8, 'bond_slave_1\x00', {'macvtap0\x00'}, 0x5}) write$P9_RLCREATE(r2, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) (async) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f00000002c0)) 2m38.702067793s ago: executing program 3 (id=121): mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f000009dfc0)={[{@dyn}]}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x70) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000180)={0x1, 0x5, 0x5, &(0x7f0000000100)={0x1c, "b6f5eac76e436afb93e063ed9db4f9bf42fd27e6a154034b28a38d7b6ef7ffe7e6"}}) fallocate(r2, 0x0, 0x0, 0x1001f0) lseek(r2, 0x0, 0x4) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000340), 0x8) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000002280), 0x1, 0x0) fstat(r6, &(0x7f0000002200)) r7 = add_key$keyring(&(0x7f0000002e00), &(0x7f0000002e40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='syz', r7) keyctl$read(0xb, r7, &(0x7f0000002e80)=""/4096, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 2m38.579012185s ago: executing program 3 (id=122): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x80000011}) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$char_usb(r2, &(0x7f0000000040)=""/33, 0x21) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f0000000080)={0xc, 0xc, 0xdfb9, 0x8, 0xb}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000002c0)={0x51, 0x7, 0xfff4, {0x4, 0x80}, {0x4, 0xfffd}, @ramp={0x4, 0xf4c, {0x0, 0x7, 0x9, 0xaca3}}}) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x1, 0x1, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast2, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x3}, {0x0, 0xffffffff80000000, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xc, 0x33}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f00000010c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001080)={&(0x7f0000001100)=ANY=[@ANYBLOB="b40d0000", @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf25830000000800100109000000900d11808c0d05802800008024000380040002001c00018018000180050003000e0000000500070008000000040008009800008014000280080026006c0900000800a1000500000024000280080026006c090000080026006c0900000800a1002523af260800a000010000001c000280050018013a00000008002700000000000800a00002000000140002800800a00004000000080027000000000014000280080026001b17000008002700020000000a00010008021100000100000a000100ffffffffffff00008c02008070020380040002002400018010000180040001000600040000000000100001800600040009000000040001006c0001801c00018004000c00050007000000000004000c000800020001000000300001800400090005000300020000000600040007000000050005000c000000040008000400090004000a0004000b001c000180050006000e00000004000100080002000400000004000b00e00001800c0001800500050005000000140001800600040008000000050005000f0000001400018004000a0004000c0005000500030000000c00018004000a0004000a001000018004000900050007000800000030000180060004003b67000004000a000800020002000000050005000b000000050005000300000004000c00040001003400018004000a000500030004000000080002000100000004000900040001000400010005000700000000000400010004000b0028000180050003000600000004000a000800020003000000040008000400090005000700090000000400020004000200f00001802800018004000b00080002000200000005000500060000000500060010000000050006000b00000004000180280001800500060009000000050007000600000004000800050005000c000000050006001100000034000180040001000500070010000000050003000c00000004000c000500050001000000040009000400010005000500040000000c000180050006001d0000000c00018004000900040008000c00018005000700050000000c00018008000200040000003400018004000c00050006001700000004000100050006001e000000040009000600040005000000050005000c00000004000a000a000100ffffffffffff00000a000100ffffffffffff0000e40200809c0203801c0001801000018004000900080002000400000008000180040001002c0001802800018005000500080000000400080004000100050007000c00000004000c00050005000a0000000401800400010004000c0005000500060000001400018006000400b007000008000200030000003400018006000400e6d700000500060007000000060004008c050000060004000300000004000a000500070009000000040001002c00018004000800040001000506050000000000080002000000000004000a00040001000500030001000000240001800400090004000800060004000b00000004000800040009000500030005000000740001801c00018005000700020000000400090006000400ffff000004000a00080001800400010014000180050007000900000005000700050000003800018004000b0004000100050006001c00000004000b000400010004000a0006000400050000000400010004000900050005000e0000007c00018038000180050006000300000005000700090000000400090004000100080002000300000008000200020000000500050002000000040008000c0001800400090004000b002000018006000400020000000500030002000000080002000300000004000b001400018005000700f8000000050005000a00000004000200a40001801800018004000a00080002000100000008000200030000001c0001800600040007000000050003000b00000004000800040009003400018004000b000500030006000000050005000f000000040008000600040002000000050007000d000000050003000c00000014000180080002000400000006000400060000000800018004000b001c0001800400080004000c00050005000900000004000100040008000a000100ffffffffffff0000240002800800a100400000000800a100070000000800270001000000050019010f00000014000280050019010f0000000800220186000000100000800c0002800500190104000000440000800c0003800400020004000200340002800800a0000700000008002201c901000008009f00030000000800a000050000000800270000000000080022013c0200006401008014000280080026006c0900000800a000040000001c00028008002201330200000800220179020000080026006c0900000a000100ffffffffffff0000c800038090000180300001800500050007000000080002000200000004000a0004000c00040001000500070006000000050003000a00000038000180060004000900000004000900040009000400080006000400040000000500030006000000050005000c000000050003000100000024000180050005000f00000004000c00060004000700000004000c00050003000800000034000180300001800400080005000600000000000600040000000000040001000500070040000000050005000f00000004000c000a00010008021100000000002c00038004000200200001801c000180050005000c0000000400010004000b000400010004000b000400020024000280080027000100000008002201e700000005001901050000000500180119000000a00500800a0001000802110000010000500203803c0001803000018004000b00050005000b00000005000700050000000400010004000c00050003000c00000005000500090000000800018004000a00700001802800018004000a0004000a000500050000000000050003000600000004000c0004000c0004000a002000018005000300060000000400090004000a0004000c0006000400060000002400018005000300030000000400010005000600010000000400010008000200020000000400020004000200480001802c0001800400010006000400ff0300000500070008000000050007009e00000004000a000670c600010000001800018004000c00050003000a00000005000700e300000004000200b000018018000180050005000b00000004000b00050003000300000040000180040008000500070072000000060004004000000004000c00050003000e0000000500050004000000050003000e00000004000c0004000800040009001000018004000a00050003000c0000000c00018004000c000400090008000180040001003000018004000b0004000800050005000f0000000600040001fe0000050007008100000004000800050005000600000004000200940001801c000180050003000600000004000100040009000600040000970000380001800500030003000000050006000e000013e34121450005000700400000000800020004000000060004000f0000000400080004000900040008003c0001800500030002000000050005000500000004000900050006001e000000040008000400080005000700c0000000060004000100000004000c0004000200dc01038004000200000101801c00018004000100050005000a00000004000800050007000400000038000180050006001600000004000800050007000800000004000900050006001d0000000500030004000000050006001e0000000400090034000180050003000f000000050007000c000000080002000300000004000a000500070009000000050003000100000004000c001000018004000c0004000b0004000c001c00018004000900050006000c0000000500070008000000040001001c00018004000c0004000100050005000800000005000300080000002c000180040009000500030002000000050007000700000008000200020000000400090006000400fbff00008c00018028000180060004000800000004000900050006000300000004000c0004000c0005000500000000001c00018004000b00080002000300000004000a00080002000200000008000180040008001800018006000400f607000004000b0008000200030000002400018004000c000400090004000b000500060006000000050003000a00000004000900040002002400018020000180050007002f0000000400080004000a00050005000700000004000900200001800800018004000800140001800400090008000200000000000400090014000380040002000400020004000200040002000a00010008021100000100000a000100ffffffffffff00001c0002800800a1000900000008002600e015000008009f00050000001c010380040002000400020068000180300001800800020003000000050003000d08000004000a00050005000500000004000900050005000800000004000c0034000180040008000400080004000c00050003000d000000050006000300000004000b00040009000400010006000400aa000000a800018018000180050007000000000004000900050003000000000018000180050003000b0000000400080008000200020000001c00018004000a00050003000b0000000400080006000400100000001800018008000200000000000400080006000400060000000c00018004000100040001002c000180050005000100000004000800050007000700000004000c0005000500020000000400010004000b000800018004000a000800100105000000c1b33f3840fed1f189914acac7a7a0aa0b45168395a1ea3c0d539f09245c6ce0a02ee3522e561911f6898261a205006db333a4ad3e81a680966a6e2fc4e97a221e529ba78cd3aa22227ba0e0a8b4d8b50618aa9da4c8bd6a4108499e1e01661e7c7c91669a6c50b1c71d232754b5e04fdcd69822e83e08a25803b741e5ccdffb512938b04ac2b3f5e6cff79a194b3ceb5ee63b57e0811c9e9d48491012b974749f2ca7974386f16aa5b0008b3602f9a89b9e839a2cb888ddfac6ee85594125e1fcbb6b50e26d31865ba3544a86acb96c"], 0xdb4}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m38.29886634s ago: executing program 3 (id=125): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) unshare(0x62040200) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, &(0x7f0000000200)=""/133) fanotify_init(0x4c, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3, 0x0, 0xf, 0x6, 0xfffffffffffffff9, 0xffffffffffffffff}) ptrace$getenv(0x4201, r3, 0x20000, &(0x7f0000000000)) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000500)='./cgroup\x00', &(0x7f0000000040)='efs\x00', 0x208000, 0x0) 2m38.249563435s ago: executing program 32 (id=125): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) unshare(0x62040200) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, &(0x7f0000000200)=""/133) fanotify_init(0x4c, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3, 0x0, 0xf, 0x6, 0xfffffffffffffff9, 0xffffffffffffffff}) ptrace$getenv(0x4201, r3, 0x20000, &(0x7f0000000000)) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000500)='./cgroup\x00', &(0x7f0000000040)='efs\x00', 0x208000, 0x0) 2m31.346087536s ago: executing program 1 (id=272): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_names\x00') memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) poll(0x0, 0x0, 0x9) listen(r5, 0x0) r6 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000000c0)='fd', 0x0, r4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000fddbdf25010000000000000000000c00020003507b000000000004000780e90cb2e22c6fbfaabc79220fea000c8bc66d02bfef4e81c00d03f1f9d9d70e112060342a06a15656a83cef56287ccc44e766e89e9cfdff3bab32539a5e618919490a54a0ad388fac25f94024f52faaa5c27a05f7832e333d2ebf8a3b07343f7cb7bc563171dcc050f7d37d9271541a1f3ffd91752bba6a9d0effa1575f2fd2dc2b0000000000003cb78d58525e60341444043763f6e576461652c8a8b7e2c4335bdf1b725a2a0a7b417fd8c2d0e7896cc61f34b188a655362f553a2cbf7fbf0d10d3d3ff5b0e21735fd0b75b5407986ddc9b181a794e2fbfca8a27818f11950e016a621da8a6d596e6a6dbeac94f9646d3f8f9073d42c3620f9db4"], 0x30}, 0x1, 0x0, 0x0, 0x20840}, 0x20008844) close_range(r0, 0xffffffffffffffff, 0x0) 2m31.224945583s ago: executing program 1 (id=278): r0 = creat(&(0x7f00000063c0)='./file0\x00', 0x120) (async) rmdir(&(0x7f0000007880)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) (async) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) sendfile(r2, r1, 0x0, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000200)=0x2000000000000008, 0x6, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100020000000000000037080000"], 0x14}}, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x3, 0x1}) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m31.039063629s ago: executing program 1 (id=284): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000000)={0x8, 0xfe}) (async) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) (async) fcntl$setsig(r0, 0xa, 0x40) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) (async) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RLOPEN(r1, &(0x7f0000000140)={0x18, 0xd, 0x1, {{0x0, 0x0, 0x4}, 0x10}}, 0x18) (async) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/148) (async, rerun: 64) open$dir(&(0x7f0000000280)='./file0\x00', 0x400240, 0x8) (async, rerun: 64) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f00000002c0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0xc0001, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000340)) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000380)={r1, 0xfffffffffffffff7, 0x7, 0xffffffffffff7fff}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f00000003c0)={0x1ff60076, r0, 'id1\x00'}) getpeername$inet(r4, &(0x7f0000000440)={0x2, 0x0, @initdev}, &(0x7f0000000480)=0x10) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x100001, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r5, 0x40184152, &(0x7f00000008c0)={0x0, &(0x7f0000000880)=[&(0x7f0000000500)="618ce80889af4d07a7e5372115e146fb534904a0168427ecc0100cd80c9c9a4944e306c439b1f92975b7964cb8d3505027631fa3dd14ab6f13c1e910ce59461ecb6ab3db8a8907dd28345f7c292bca8365eb3b044238aa9bc7efe5ba0f31558f1bf5e6768847ee959e818fafcec883566b04690a0c531abab87c05fc488aca8643871bd8e2c40eaa74988f07a1cda25f4f7faec5067fc2bd2d82785e3eef8d07f5c827171642577e7bfce2c21ac5daea3bf5a3370865a9efb5636d42ab1da498e05e62f9d9008a048b3cd4b0c95dc0", &(0x7f0000000600)="23213f9ef8cedb3616aad1ca5330c7cbc7e788a66318b10ed3879fc902d8a34d1c644036adffa1b50e8e106ab824080d5bc8ab9dee41e0c7fc0928de21ac0cc5a244ff1e428b0dc8d882fd719c6fdb8a7b188fbc6aae51e9f54c4170ce89784ca9385296a36e98451117ab70c16a4bddce3f35ed56c6dbe03d58f2ac088636fe68ffa6d8b1310b814bc274ef0bdc66977640cd60fadc1d699a5e894eff655c99aaf046615438ae8dbbef2b1bc7df66b2737930b836d94ed4", &(0x7f00000006c0)="e83a7e0e76c23a20d0e143dfb5a864a9aa5123ec53aa3e87c21523e2a9c1e6ceaab2e8a12a6738ebf3d0a68fefda1d03df20965e08d7d42bf9b073ca4a262e0b79e7f0975a41f945161eca5e5a61b9dffba2ed4b8c184fd3cf6ef9510ce25ceb997c1bc6cf9518729d77c04318e1564d90336529fce11221cb4dcbd8ccdbff45681117d240fc78e4115d74a2f70ffb323adad4a4f477106a760174618c6f1ae8f78aa787d5133ec42ec28066d42e4b4884ac23e74b6c0d2929734efe248b36f0a6a6048762953e782d1b0dca92f8c97c8b7b69131f", &(0x7f00000007c0)="f3e0581642a361a3bbeb5e266b388cc4f54dbbec2a42a7fb24974348635de4a2408ac9ef44da74c37b6cee438656518edb28499a38e5a67a1b0606e9c2524dc328ae09783f32d28f732db70e2758ed76325ddd13c863d1182339cdde87a1f080d9896f281f9ea9e586358c9ac812e32745b468f0d0466fb8d5ff2b78b33223be53c19262ed620287815bf16cf9511ece968c9b7bc96a214b79a071e3ede6ab5bca1bf2bd26dbfc1c287b6e5acd34ea"], 0x8001}) (async, rerun: 32) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000900)=0x4, 0x4) (rerun: 32) write$P9_RFLUSH(r1, &(0x7f0000000940)={0x7, 0x6d, 0x1}, 0x7) (async, rerun: 32) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000980)) (rerun: 32) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x4) (async, rerun: 32) tee(r5, r3, 0x3, 0x3) (async, rerun: 32) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f00000009c0), 0x10) (async) read$alg(r5, &(0x7f0000000a00)=""/164, 0xa4) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000ac0)={0x2, 0xb}) (async) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000b00)) (async, rerun: 32) read$FUSE(r3, &(0x7f0000000b40)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_INTERRUPT(r5, &(0x7f0000002b80)={0x10, 0x0, r6}, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000002c80)={0x0, 0x38, &(0x7f0000002c40)=[@in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00', 0x9}, @in6={0xa, 0x4e21, 0x10001, @remote, 0x22}]}, &(0x7f0000002cc0)=0x10) 2m31.038468186s ago: executing program 1 (id=286): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, &(0x7f0000000000)) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f0000000040)=0x5a) accept4$unix(r2, 0x0, &(0x7f0000000280), 0x80800) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x2, 0x0, 0x3}) close(r4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000080)=""/93, 0x5d, 0x0, &(0x7f0000000100)=""/229, 0xe5}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m30.972063706s ago: executing program 1 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @random="a50a3a85366a"}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x380) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)="020000000000", 0x6}], 0x2) 2m30.667824164s ago: executing program 1 (id=298): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000300120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000020000001f00010000000000950000001e000000"], &(0x7f00000005c0)='syzkaller\x00', 0xa}, 0x94) (async) r2 = getpid() syz_open_procfs$pagemap(r2, &(0x7f0000000080)) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) openat$cgroup_freezer_state(r3, &(0x7f0000000040), 0x2, 0x0) 2m30.605027271s ago: executing program 33 (id=298): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000300120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000020000001f00010000000000950000001e000000"], &(0x7f00000005c0)='syzkaller\x00', 0xa}, 0x94) (async) r2 = getpid() syz_open_procfs$pagemap(r2, &(0x7f0000000080)) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) openat$cgroup_freezer_state(r3, &(0x7f0000000040), 0x2, 0x0) 1m55.798688967s ago: executing program 4 (id=1031): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd755, 0x80c00) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000040)={0x7, 0x6204, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1d, 0x2, 0x6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc}, "5e434e3fe780995833157b25"}, 0x10) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x38, r6, 0x7, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, '>\''}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x40800) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r6, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1}}}}, [""]}, 0x20}}, 0x2404c090) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd26, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m55.703939141s ago: executing program 4 (id=1035): socket$netlink(0x10, 0x3, 0x4) (async) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@delchain={0x30, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}, [@filter_kind_options=@f_fw={{0xfffffffffffffdf4}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) (async) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7d, 0xd]}) (async) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7d, 0xd]}) 1m55.557746952s ago: executing program 4 (id=1037): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) socket$igmp6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0xfffc}}}}}}, 0x0) unshare(0x6020480) (async) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) (async, rerun: 32) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000100)=0x2, 0x4) (async, rerun: 32) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) (async) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) (async, rerun: 32) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x1a9}}}}]}]}, 0x68}}, 0x0) (async, rerun: 64) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = fsmount(r1, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="01000080dc", @ANYRES64=r4, @ANYRESDEC=r5], 0xe) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async, rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async, rerun: 64) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) 1m55.178213586s ago: executing program 4 (id=1041): openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x32083, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) read$rfkill(r0, &(0x7f00000000c0), 0x8) 1m55.176706593s ago: executing program 4 (id=1043): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m55.117977966s ago: executing program 4 (id=1045): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) (async, rerun: 64) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 1m40.087033814s ago: executing program 34 (id=1045): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) (async, rerun: 64) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 1m18.88546782s ago: executing program 5 (id=1793): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000d00"/18, @ANYRES32=r1, @ANYBLOB="00300000c048000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m18.80860312s ago: executing program 5 (id=1794): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x4080) syz_open_dev$usbfs(&(0x7f0000000000), 0xf944, 0x40002) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x101401, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000300)=0x6, 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff07"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xc, 0x7, 0x51, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback={0x0, 0x460c6}, 0x7, 0x700}}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x4fc0, 0x7d, 0x2, 0x4, 0x8, 0x80, 0x7}, 0xc) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r2, &(0x7f0000009d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24084044) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000002a082, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x0) r7 = openat$pmem0(0xffffff9c, &(0x7f00000000c0), 0x165101, 0x0) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) 1m18.808331511s ago: executing program 5 (id=1795): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xf944, 0x40002) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 1m18.748178511s ago: executing program 5 (id=1797): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000230048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb00000000000000599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c50500721fc7aa2a583726c64c0fb6ca996d278fb00bba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee93f9959e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f54d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8989d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501ae03002af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a86ad4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909eb08cca312c557bff04cf1fbb0dcfe8ac00"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="764b9e147583ddd0569ba56a5cfd", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) (async) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000440)={0x2, 0x200, 0xf45a, 0x7, 0x1, 0x6}) r2 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r3) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000780)={0x401, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e20, @loopback}}}, 0x108) (async) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20004010) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x20) sendmsg$inet_sctp(r5, &(0x7f0000000600)={&(0x7f0000000640)=@in6={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x10, &(0x7f0000000640), 0x14, 0x0, 0x0, 0x804c040}, 0xc851) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00806d81e8f6877ea6241156c7e0b1dde0e88086f8c8a93df846c0dedadf30d07586670178d0a9fa699eaa87c0c377d4f71f429f71", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r8, 0x29, 0x31, 0x0, &(0x7f0000000080)) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x3, 0x6, 0x48, @dev={0xfe, 0x80, '\x00', 0x32}, @empty, 0x20, 0x80, 0x400, 0xfffffff9}}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r12, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r12, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x38}}, 0x10) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r9, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x54, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40080) 1m18.668510666s ago: executing program 5 (id=1800): r0 = io_uring_setup(0x68ac, &(0x7f0000000480)={0x0, 0x10000000, 0x1880, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff, 0x18000000}}}}}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x1e}, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) 1m17.907155971s ago: executing program 5 (id=1819): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 1m17.82285777s ago: executing program 35 (id=1819): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 2.400352636s ago: executing program 0 (id=2977): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, &(0x7f0000002000), &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r5, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x6a9354ab0d020bb7, 0x0, 0xffffffff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getpid() io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) munmap(&(0x7f0000127000/0x1000)=nil, 0x1000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.347388221s ago: executing program 0 (id=2979): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x40001) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x3, 0x3, 0x7, 0x1ff]}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000900000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='\x00') 1.475058728s ago: executing program 0 (id=2983): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 1.407691236s ago: executing program 0 (id=2985): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000002280)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}}], 0x1, 0x20000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0xfffe, {[@mptcp=@syn={0x1e, 0xc, 0x4, 0x1, 0xd9, 0x0, 0x2}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000003c0)={0x0}) socket$kcm(0x10, 0x2, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={r8, 0x3, r1, 0x9}) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 1.303165845s ago: executing program 7 (id=2990): syz_emit_ethernet(0xb6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x80, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2, [{0x1, 0xb, "909f50c218fa30165debb32c1997043f1c9ffeca5ab1225605024d58164e9cea3822ef2d41c58f08089a7f8687c5062f504a94e0dad5a7e2cfee3e4542e3d1342a4a735d0c9d276a7d7767714d09be6e294917c38356"}]}}}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 1.237988643s ago: executing program 7 (id=2992): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x20001b, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 1.01201552s ago: executing program 7 (id=2999): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x80042, 0x4, 0x2}, 0x10) (async) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x4}}, 0x10) (async) close(r0) 927.71022ms ago: executing program 6 (id=3000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000080)="6fc4b891c7586fd82df68c2bd9287bc501adc3551314a764ca86c357085e5a7f374f5b73d8c20cc59d931c006799a57b1b31fa10ca81f92826d1a05e1e1c290aadd125a1c63768ac79d4b683b2696b84d9cfd3a838977b9ba090f733e4214ba1325961cb05bdb0c25bb9f655ad03804fa0485b938d6f7cbd6725c6620ceaa55f1843f046e1d6fb78", 0x88}, {&(0x7f0000002440)="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", 0x8dd}], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 927.290544ms ago: executing program 7 (id=3001): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0xfdaf) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) 926.345532ms ago: executing program 6 (id=3002): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x640000) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000080)=""/37) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x41}, {[@ssrr={0x89, 0x7, 0xf3, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 926.167545ms ago: executing program 6 (id=3003): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, r1, 0x331, 0x2000, 0x40080000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f00000010c0)={0x8, {"eddd025b60fdc30a063f172d718c2bd6b3645eadae0f767eb61f2421975b0064d30faba72ba63ab33c4ee2a6cb2f0cb187830255738dd670e8e178672a7473488a157b83ca0ed9657299e98243c15b6b8e08f34570dda445b526949a9b3aebdb97dda475e54a098f1ae57c4774c8ef81d36c77d309e0c817fba3415591dd26a637e43bec5f0fb193d8671889d89ac77bd90ee5efac63bf9eafc61f393e33aaa503760afad0e395042048defbc27ecc254790f419072feb3d5fb4815364072248a42bb88952f316952ea727ae850143819fb80a77407a2309c90ee7894bee7c5862bf14672cc9036bf0ccba7769b5d57b757b550180000000000000a7f0840d7040084b449eb5445ea40b3b9811a66d5228839907fba91ba8a5ca95b4600fcd98f93af794a412e97404d6f40a61e802f6112ff259a29ca8fb98ffce8fd12509883e812e7edb4a643fe4aac56bb01f69823bd6f4ebd618d81cb3d463eea2c9bae30b888a824043a71d5f3319b146848d63a5415f5ed47b33cafa473cc2c91c425a2d24bf5d8e627e6fc63f58a7b08180ce16e5aa7015478cfbebba3045ec5dd620f69659f3fe11af23b095b43ced6a48afaf3d9a78762d40ada3b1fead7884620e213f28a9a2e6bcda0b88347c8eb3f6be8be3fc2d507eaae0430ccd836d4790038d25d65091e6e7ee9bec612b4a5d90e9e878c9c57fd1aa28ee9fab64d2d3bec12ae68a974c0f64365548a5db8a1d8fc9e32b38df32e826a3d2a88ae824a5faa87d7a25373728da5322ebc73db3d9ac8c64db9c90b18d67b7770966a3b8a1079f5b83f21482ff8b1cc1c699a0a5a135b6fe2791abb556603e3255e89922de5bca02d57ace9f6d486a363891b6c15e3c0000000047e9617351e98a040f2e7019ddee08f2d6cdc9de2f7a32ea65d266513fa7821c24c90ae39268757eefacfe94d53c740747c86429eadbead0a3576549442f4f77d846df8d54b37fc280bd5b9320f872756706357b9813318a6bfeb77d4ddec55ab5592da2c6d05b3c021182485b96a634013c5ad5ba55f07d07211c0db03ccb5981f5955df2e86cd0f62f6ba66fe4abf695ebc6629e42f6ce96a132883f148eeeacdff13b1cbfa73cbc70b8c5b677682d7c60d1a1311b1222aef1edb4e231c869a18f9ae8eeba4eb4cba8a4a56703cd90710b2208bce8e9a18aaf4e7c47474c08ff85c307d660607bddfe49ac714e0fcdfefedddafa452dfe0341c8a8f07e62e4486699a740feda4b7b2bc635308eb6990f3dfa9065aa8b26ad0ac66fe86dbf2dfb5f0c4b0cad557d4fa4b61116aa57a285a705e1d87d3f8d560b5fd3f8c5df3dc22bd4edb36c1c2e78c0b69863f576d3053ceb21ecb287faf64bb7a3cfe3c28eb7c2335a3af5a29308dac5f7d6f48f46da8370124c37e5a3c9fdfd3d78a082030b2233f02fae54012d2ad2b1c1ec2a35a130a5d3f76b5f9a10a4d31ca41c5c2f58a40c058a48e5dd8a71adbabcbca341e46a6ad538491025e79db3c59350b229ae433537e54b62968ff582f041080719fb88778884da1c79ff28398d8edfcd931043b64bf75b944e735d6d0fa62ed1e3550fe9fa5c1f063b06fb8e13909c87efffe72481ada2d01522a93c70266aa3991c7141ecca2bc618fe54d7529a0c2a46469ca4b2086e112fdf4e1266ca6b5fd4b0fbea280dd246f622f0da6d0f3e3b0357dc0744132e66d8b035662ad5cd3faedd2f743e24ecfed2efd6fd3aed1402bdbc66af3c0b77b7962966649591d7d5985c81a063d46ddf07656f2b049f5811b310e567027bc1b6d44fc892d37aeda8cacc704c1dcc1a7ef759937416e01163027b81befa86772ddf576c37f3151792c4358d1fa418bcd250dc41effa988116589b110d31a59486123769e50f5b3985b4660919f08dd5c96ab8ab03322d0c61890f90e56970f0aa13a96bcfa97139d5627ed6a5558dee292bf0a6e5ad23341c7dc3464a05b9045cc3abbfc0448bf9ca044fd188569cc0c57e07105d1fa1efd44529b6592fa718e092c1a3fa3e56689c9c5168a5619bf2109bde2dca59ad16735e597402c1896d4e24f56c9d4bbc1f0b3a0135b7028a402c6a1a78de57a838b1871477d7b43dff3779fdb50b2ec9a3ae11fab7f715e7979e64a0f0d54d025105d1f768cdad112aeb2eac1c8042aff6fb975a16c64080ba4e0de0af9b8a975a2b6af6a05dff8ae848f6b80f2bd80c56e4683e67a3aaad0e72242b0f0f07d7d7a64a8669e75a99ba4fdb2ba239c5ef28c8f1dc0b2459698b374f1035a75eafde3d90d69afa489ee2d7f7958a5cc51e574203bab464ddd4d08abbb77c8874c6ce692d078bdc309d73ccb49c9d60a269c77601e82e1c824fca2a43605f8453943d23794785096da2ff56547389009e27a908cfcea03ede09c392e0bafa30891e23fbacdf08b49cbd2f4083f94c3c71877ffac86d426e5fe08fa9541f837f2de8440e0b2226b664a45a564f1357e804c24cd2cef95564a1e0041736ced508a63af4e9f4ae9f690084f8c67db3b3569fb86225b6cce291da8057200d1f86899081ebfa5274625ada6ee793fe4246d97157d608099a6adf81eb88bb37cdb64a18ed0e13a0cfeea3af2164a59b8a90a4a1dfad6f03cc27ccbcc879c2b54a57a6d81e01dbd9d7440e9f1a1f608617a308214b58a9090022b7c6631cda308a0aa13dd68159bd8578afeb5402b0e227ef709d8c58929fba262ff4ec70c3a8f68b98f92380201112f560c216d5dc61ad466ee08c1af18982617597436c6a0e0077bb2dab8932175fb30aafceb4d63b4b8aa4a1c2f3867a83855d418ae75b3029dff960a5a4fcbe0fb84828633d535413e0c70a26b2485dddaa7c52256ad85d5f71778af39692fb8553850bbac096d8d9c9145e0ed7903b5d530005f29493a5aa7e0c04b62cc07f2bcfa31a48ce7c167abdd145af8c25fb882b64e41a9b51ae77209d82a9095e1d80711e1c802302b92ad8e413bc9b200e57c6038a46bfc9468b5fdda7f3e57e676c99d4dde6b3a86ed2cb9a55cf199835ef9d858f5a692c4036b32ea07c76c29faa5e2241afab129340b6e2ad94baea982429225cfac726dbf137f6477432a31808a281c9af3c4bef4a2f508721ec71fc1c374fca4d4e25ed9754a41ebfcaaac7637caa13791a64ff995d3cd984ed8cecccc491de80596f8db8d3fe6a6f2b208d065fb6fbb5569bf7cd8a8162271ca5e5ed2b3b98f28d81b3b498345c48492c8fe2e6181f527bbe4ce6600f9e33fb65609bc4318ecf4ca151d3095232820a84704311f0bd3532178cf1e6ef9483b1f52ec2992e84aaf1239c99faeab989bd9848223e90093e71eb650660255fce7bd85872e413fe219859d18ef67f1f07a590ceadc1c687820c3c7cf9e2ff9609199c4b49fd74553507c1c7f45b5b1b40c96c0c984977f476ed686f8710248677847f5c0989df0eca6be3df498acfcfbca85bb986c8d844c19f62b06b95d8d6f4e4367040d45e494271f29546f1086f88fdc549402bd669e9aed5fe000000ef7668d3abeadb430d30534aef0a3a9a125bdeaa11647bafe6e1303b967d29718ac301cadbb43654a36b78ff91836584a5e3472db8db4ded526ecfef2efa2279c17639d3aef1587d5b8bbc8abec3a28dba276613c514a50fe243a588ecdb77ab1525088507f5a0537ba59062416beb479538806f04e70bc192c1fd46377c6105116cd21b75f29f91b67317ce4bd67dea18f560765dabf8f0cebfb770339aa2558df698e1ee22adc7b81b16b2e7fb06e7b5c2ca98c71aec18bc23b11d3b84c6a10aa866c5f438fc2d928fc89ce0902492cd79d6a1ffce27a66031cc24d1b82e9e8b6bdcb6b37f89531e048ae5ee10483dccbb734ba20a15b145fdeadfc461e146d8882133b4e6c6ba30d316ee0bf0bf40f26639077d090d1df3b943e78ba5ece82fcd4576cf3a87d7a9ad080b2cce7371e5bd671ad37e35ff03dfb6684ac0d4eda69154444aef2a173ba093bc87839e41388b2101f72a9b6cf675efbb231b007c11a7b452df89a584f459b23340c0dae21a4146968b66ac9b08d2408830ccec4e6fb1dd665c3023a3b32042b1facfb0bd4d5b9861fe5b0abee3313264b5abe61b1e145bc11121dc87bf1a6008433dedd4d7977b082400136bfceb33a2a3ceea9a6b67b8f85b604970c3ad474db7356f802bc840afe833c9056c037b2ea240b5846149682e14e4e126c7f88b9eb2c7384da631fbab63754611d52b4107dfd10fdf46e557be95a07e6ae64cbeb2d420bcfd87a2f52ecbfe5eba301e3c86761c1545b876e5951106e91be75e9d22301674bca4d729fffd9812cb984910b976c2a74966caf3d75ba7dc7f4275d24caf3bc94376a3579e8575c69401ea75d14e27f98eb7a05eccebd36ea89c4ac0dec65eb613d7f052c6b75b398c65249449b0693164a51c0c224ac1bb4f0781d2d10b96519131b6df9541aa1e7511820f71ab1d497234862f475356d9664a9fbbf0285738a143842820d5b795dcca64a24de4bae802fae01d82fec5548e108c4e750e8f1580d2ebd6bde06622db32c1f47eca183a81ecfde3b6a187c47f7984d2c6051f2ace7ac2bfc5da0cd4b0e57e69bf39551cc5443e12e9ce113cff2cecdd2802e5b9c5a1107e1ed982b93b8e986afa379ac1c6a5ee67e966c72bf149f9ba1c169bafe3d58e18e56438ad4a4db4826edb5eb4ff27808ddd7f87eb31cf232effc9bfff7305d91696e17058217d2d5596ae9082a1cc98d60b854b2ff76718d981c20d68ecf4f1a8dcd5f9f06162df324b84b246e5e11d6722003f32e3396e30c11724db17210c37dfa080c1be2fbeea1c92e084f72386fb29856bc25a16a53f97f44a5e81fd55872772eebdd0db3a5bdf0c28d34a48f8d707a97a3b89367c98e30dbe9c02444177a8fbaa605c6051157e41fade8432af5233ee030ad6fb7572ee4e7bd687dd855fe112ac46a7b1abe88771eb3b49e3d583efe7b79394ca4687acfc262af45dbf4736e9e17d39ea5f8e81f6ed7f242c5a09da7f22f37ce9d5e6222fa71aed8ee69e501d30cd98f5c5275d5dcc1f112c3dbd2cca465f7442d952353613ac5b30222cf153c598c15c102b0dd0d99e45595d98ab365fda3f6e3bdf29b66a8d0a43c1c6a109e3056015a49e4f9ed7522163da86b9e2bf14d7c0ff026261f96feabc0b1c64ba130acb2c4927a783bed9f4e1d38f0a1351000334010b99585c24fb9a7a24809e4bffc3448c778dbeeed816225b2173fae0975e1b9c19213dc33bab3a9bbe8f62e306a1aecac5484d3f23421f5064c16aa4fa67de32222115928c0f3b114593dd0c791c590be61e0b97ed0b0e0dcdb238eb1290466d9c10dfaa8c7fcd0bf659897d945df86d936c67e42924d47a4245fb3d6f8ec538d59c100c6e52100317ea41a1fd253ddd54b13b6a2807ea729d3fd7e1b0461cc78b2c7c889b9ad3ec0398399ff645f3ab988b8a52d9f09a430cfa0390c4c5ad3a392ef28a9f4056d77b712df09b69d7d93617c4783133f9abab2d6935d54f59d0c1b5ea4dba28af7bbfeaf29009618c436ddec116f8966b4ae89ceca545daef5a48f1668231731af7abc502df9f7d308998b92adbfdf0937186a9cbcd4267dc1d0e399b27dacc07ca37f76ceb42f13e4de89dd484a91dc8a2bebece95c6400fde8bdc6d2857454f562f04422b632925c84fb501998ab096363acafea06790c298a76267ca63d81763343fa1fbbbeecba24ca939b3f4d577a5129fd3c407cada9151a12b04e76d664b232cf05c9ad000", 0x1000}}, 0x1006) ftruncate(r3, 0x8008976) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001", 0x1f) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) writev(r3, &(0x7f0000000880)=[{&(0x7f0000000600)="18dff49858454fa491119b39f4ec02355402d69d02218513b580502ab73969fb7558b897e3b30d7d9c163303e86c133317f29d7e6e36c73e48253f01c272ec92fbc348244d10ce2c6bf23ea037d0557d84d20daea2bf3c058abfe432abbd8e9caa85ad0b8735520934a1d67b761b5dc37cf6e5f8c97d4bd70594b5a70a07775b2be008eed722b8555654b1c72c9847787cac29cbaa00434abf377f953fe1f06ff3cbe07550b6a7bde2bc7d5c5b68753a4d94bdeb60c704ec50fc674079ea876dfba754ac108a5b9c6ad9dfbf1b1349e3df787b38ca6398943f11669967824c3e4370e238708d7738c140b959ba9a5694b614843e", 0xf4}, {&(0x7f0000000d00)="845a6ee005638b2ad5dfa946f0633199a56cfa28b954f52ce3bc96ed1ffc361391d7d17045334ce9d5bce43aec5764594c6990570a911f8e19b67ac28237444f36db4d873eb720364e02738406b1db285123e01365ddb94decdbe7fb481edcddf8fc77a271c54201dd827c7283600fda09663bac7efb887e41cb330805bbba05cea8248bad80d8c3df57d2b83ce207239a2f0efd1c414d737315e3a650cd62caad58b3f1bb8b3732b3fa1ed3d38a9088490ba4a8c694e3c07f5953bdff4a145188e9c60155529b3ba1595fbce830268d5a21eec04c46e1950d2f167ff9fff49cd6111017294bf8c5d2", 0xe9}, {&(0x7f0000000f00)="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", 0x102}, {&(0x7f0000000c40)="202bb0415639f0c1e98ad3c35ba126faa9e43e618c9679bae2c30304d1850473f4102215ea2a192d9901b0785473c381e7904a63aba8ed92e2c3d8daf88f68dd5f5d04804a0331ff16ba0ccb9c36956022c1f7656660e773c38b9cf90e3d684ca95b5283b1ff10efc0b8351d0fe7423a3e5158c1e0e4831ecc8df81a0f8827e5c49556cabf334789727d6414d056bd6fb1a1311c748dfdc72879c6091c30be23580eecd40e8c40713768764e450ab8d5d28c905d5b4dc64f1a", 0xb9}, {&(0x7f0000000e80)="94d1f2e1ab95afe67e299cbc47530ccadacb8ecabe3c73ac55d925a0d52a79ceedae83cf90a1789f07fbde8a75991d1e775ce7bdb15e59273429b52a246643318051f60e", 0x44}, {&(0x7f0000002300)="9d2aba98f0b975bf7210f7e7d7d3e223f4d186282fe89a5b99d5c2ea2863634e543819ec0ae3fcdfd6c5ad048df8fe8110603326b3fd088763e7d695fcff918a8c5c1f7ea86505918c7773e5d247f6d714fb99e7a86dc53673d48d61d079cbf2c7298d22ddedc4103338fd0af6f0b5308ca1c7d34f26fb9f964c1d2b42173024df139d7b2146635a6002ce9d439265593fda27820c4899009d0e9e64542b5eae59df7a197bb1dfff597e2886a314b6b00b56664a0829b5bac45860aa6c1f7be92f29cd82a3ac64d6cd312390bd6cd3535dd6f9ecc3c92cb40196d68e610e4e7e99b9e9aaceeb9887ecbeb0c369c44b6aae92a0b646e48fec4280c10a1f1cc2fe4d1d51c72b983e2f2c3a05cb91d26c7132d821b05e26bafcd4c7699639f7003d62d112f5c2f6f8c6939bd812e16e6a6927ebb45ab6a66e4630f1476f48a113f0a89235a085e14b166a7ce525308ae322aea9b9805b6392c4280b509679503ccbbe137d6185ff25437e5e4e6240a4a07e4051c6d030da271f946171b1ade790bdf2289c5e0ddcb33de11961264734ce77e04f94c330dac130362d5af3a5754cd69f72271157c82dd4ecf473f8b1bebcb5b9eaff0933322ca28291c278bd7f623eefc3779d980b9c39c1753488fb90ff8f4e0ce31b6e7f945f1feb0e0089b9e375c52218fbc945459f3861a6b197c74afafd944167eb991ea18ca878b59212e8d7172f6a64969eb647282588e5a54f2bc01b8f6bc43a407ce57ff99cd078e9865e2dbd0f546358448dcf5f57f1e0449ca903f7b4d2751c4ab5c5deb0299aca356bbf7a86effc0f062a2f6018d4c9698fd43cee73caadb4f7cb0f6a7082fc419afa4cf9a27f52e575ce90c5350b2e6a09b18a302475485cd207677230d58a708c3ad9d92789ba583e8b6ee89a8a9eb8cb8d9cc8ee4a629ad4b2bef279944cfa31d6ff44366a582cd953bac3897a714ddb", 0x2af}], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 707.164939ms ago: executing program 6 (id=3005): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_setup(0x179a, &(0x7f00000000c0)={0x0, 0xfb29, 0x100, 0x2, 0x2f5}, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='pim6reg1\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5019006ea3780000"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f61642064656661756c7420747275737465643a737d7a20303030e9af6b507314393f1f30259c39a42c410b0226303030303030303030"], 0x2f, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149ac2, 0x3) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0xfe8e, 0x12) 547.291541ms ago: executing program 2 (id=3008): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2}) (async) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x24008881) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4004) (async, rerun: 64) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 546.906522ms ago: executing program 6 (id=3009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfff5, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x15, 0x526d630517582f25, 0x3}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) r4 = io_uring_setup(0x22, &(0x7f00000000c0)={0x0, 0x871f, 0x3410, 0x3, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r4, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x8, 0x3, 0xd5}, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000100)={'erspan0\x00', r3, 0x20, 0x20, 0x7, 0xfa4, {{0x32, 0x4, 0x0, 0x2, 0xc8, 0x66, 0x0, 0x7, 0x2f, 0x0, @multicast1, @multicast1, {[@end, @cipso={0x86, 0x13, 0x1, [{0x7, 0xd, "c8b0c276bd712080e26c0a"}]}, @rr={0x7, 0x1b, 0x56, [@multicast2, @private=0xa010101, @remote, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x44, 0x8c, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x43}, 0xfffffff1}, {@multicast2, 0x9}, {@empty, 0x9d1b}, {@loopback, 0x1ff}, {@private=0xa010101}, {@broadcast, 0x3}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0xd4, 0x3, 0x9, [{@rand_addr=0x64010100, 0x40}, {@multicast2, 0x8}, {@loopback, 0xe8}, {@rand_addr=0x64010100, 0x5}]}, @lsrr={0x83, 0x1b, 0x7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) shutdown(r1, 0x1) sendto$inet6(r1, &(0x7f0000000540)="1a", 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 546.4979ms ago: executing program 0 (id=3010): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xcc0, 0x0, &(0x7f0000000200)='\x00'/14, 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c000) 546.306464ms ago: executing program 2 (id=3011): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000080)="6fc4b891c7586fd82df68c2bd9287bc501adc3551314a764ca86c357085e5a7f374f5b73d8c20cc59d931c006799a57b1b31fa10ca81f92826d1a05e1e1c290aadd125a1c63768ac79d4b683b2696b84d9cfd3a838977b9ba090f733e4214ba1325961cb05bdb0c25bb9f655ad03804fa0485b938d6f7cbd6725c6620ceaa55f1843f046e1d6fb78", 0x88}, {&(0x7f0000002440)="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", 0x8dd}], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 546.071333ms ago: executing program 6 (id=3012): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x189, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'veth0\x00'}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0xc4, &(0x7f00000002c0)=""/196, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x1], &(0x7f00000003c0)=[{0x2, 0x4, 0x0, 0x1}, {0x1, 0x1, 0x4, 0xc}, {0x4, 0x5, 0xb}, {0x3, 0x9, 0x0, 0x1}, {0x0, 0x1, 0xa, 0xb}], 0x10, 0x9}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x203, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FD={0x8, 0x1, r10}]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80b1) 435.978082ms ago: executing program 0 (id=3013): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001fc0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="6ba75a030fb65f12f7578cfb5a549230afb0c7884cb980244c1e2abc47f6820834b1bf0100000000000008a1a8d7fc657823ddc3ef8e8283ebd8519d57661637eaeb00"/76, 0x4c}], 0x1, 0x0, 0x0, 0x2004c804}], 0x1, 0x40011) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/79, 0x4b}, {&(0x7f0000000440)=""/88, 0x58}], 0x2, 0x0, 0xfffffffffffffdd5}, 0x20000) 435.087232ms ago: executing program 2 (id=3014): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) (async) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x809}, [@NFTA_TABLE_USERDATA={0x6, 0x6, "ca66"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x890}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="66b95502000066b80600000066ba000000000f300fc72c66b8020000000f23c00f21f86635010006000f23f8f26d660f3a229f00015e660fc62f0b66b9950900000f3266b8000000800f23d80f21f86635c00000300f23f866b8d70200000f23d00f21f866352000000e0f23f8660f73d340", 0x72}], 0x1, 0x10, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="66b95502000066b80600000066ba000000000f300fc72c66b8020000000f23c00f21f86635010006000f23f8f26d660f3a229f00015e660fc62f0b66b9950900000f3266b8000000800f23d80f21f86635c00000300f23f866b8d70200000f23d00f21f866352000000e0f23f8660f73d340", 0x72}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000002c0)=@arm64={0x5, 0x8, 0x6, '\x00', 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 157.235712ms ago: executing program 2 (id=3015): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000340)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x1c) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000080)=0x200, &(0x7f0000000100)=0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendto$inet(r1, &(0x7f00000002c0)='!', 0xfffd, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 156.81812ms ago: executing program 2 (id=3016): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000001780)=0x5) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) 57.740243ms ago: executing program 7 (id=3017): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) (async) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = socket$inet(0x2, 0x3, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000001c0)=0x28) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) (async, rerun: 32) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000000)=0x8) (rerun: 32) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000880)=0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r9 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async, rerun: 32) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(&(0x7f0000000880)=@sg0, &(0x7f00000008c0)='.\x00', 0x0, 0x111401, 0x0) 6.737588ms ago: executing program 2 (id=3018): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_setup(0x179a, &(0x7f00000000c0)={0x0, 0xfb29, 0x100, 0x2, 0x2f5}, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='pim6reg1\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5019006ea3780000"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f61642064656661756c7420747275737465643a737d7a20303030e9af6b507314393f1f30259c39a42c410b0226303030303030303030"], 0x2f, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149ac2, 0x3) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0xfe8e, 0x12) 0s ago: executing program 7 (id=3026): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x541b, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x9, 0x3, 0x338, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xf}, @private1, [0x0, 0xff000000, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffff00, 0x4f9bdd824e1f094], 'vlan0\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0xa, 0x7, 0x78}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x2, 0x0, 0x1, [0x4, 0x0, 0x401, 0x4, 0x5, 0x7fff, 0x4, 0x30, 0xff, 0xbc, 0x9, 0x7, 0x4, 0x8, 0x1, 0x9], 0x6}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x34, 0xd, "8a5b8ef6237df14f916f92635605136d7dcfffa86ec28857c44bce9c9671"}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x19}, [0xff, 0xff000000, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff, 0xff000000], 'veth1_to_bond\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x3b, 0x84, 0x3, 0x10}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1, 0xd, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x31, 0x401, 0x0, 0x81, 'syz1\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=virtio,', {[{@access_client}]}}) mount$nfs4(&(0x7f0000000040)='}}}\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x102000, &(0x7f0000000180)={[{}], [{@uid_lt={'uid<', r2}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '#'}}]}) 0s ago: executing program 2 (id=3019): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54020000", @ANYRES16=r2, @ANYBLOB="050000000000feff01004400000008000300", @ANYRES32, @ANYBLOB="0a0018000303030303030000080026006c0900000500240002"], 0x254}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x1006, 0x7ff, 0x1, 0x0, 0x0, 0xcca, 0x8, 0x7, 0xa, 0xfc, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x100, 0x2, 0xf27, 0x6, 0xb, 0xa, 0x5, 0x8, 0x4, 0x10000, 0x6]}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) kernel console output (not intermixed with test programs): logical block 0, async page read [ 152.990189][T12581] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.993132][T12581] Buffer I/O error on dev loop6, logical block 0, async page read [ 152.995690][T12581] ldm_validate_partition_table(): Disk read failed. [ 152.998086][T12581] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.000768][T12581] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.003577][T12581] Dev loop6: unable to read RDB block 0 [ 153.005932][T12581] loop6: unable to read partition table [ 153.008234][T12581] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 153.221269][ T10] hid_parser_main: 73 callbacks suppressed [ 153.221288][ T10] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 153.226914][ T10] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 153.230005][ T10] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 153.233367][ T10] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 153.236836][ T10] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 153.240303][ T10] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 153.446084][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1968'. [ 153.552985][T12612] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 153.557357][T12612] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 153.561908][T12612] overlayfs: failed to get uuid (21/file0, err=-13); falling back to uuid=null. [ 153.568326][T12613] overlay: filesystem on ./file0 not supported as upperdir [ 153.650864][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1973'. [ 153.855827][T12632] mkiss: ax0: crc mode is auto. [ 154.174983][ T10] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 154.334925][ T10] usb 11-1: Using ep0 maxpacket: 32 [ 154.334935][ T7301] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 154.338295][ T10] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 154.342617][ T10] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 154.346174][ T10] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 154.349541][ T10] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.353447][ T10] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.357324][ T10] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 154.362404][ T10] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 154.366043][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.370710][ T10] usb 11-1: config 0 descriptor?? [ 154.485670][ T7301] usb 12-1: Using ep0 maxpacket: 8 [ 154.490774][ T7301] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 154.494236][ T7301] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.498292][ T7301] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.502156][ T7301] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.506257][ T7301] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.511413][ T7301] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.515154][ T7301] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.580774][ T10] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 154.589857][ T10] usb 11-1: USB disconnect, device number 2 [ 154.595389][ T10] usblp0: removed [ 154.722373][ T7301] usb 12-1: usb_control_msg returned -32 [ 154.724760][ T7301] usbtmc 12-1:16.0: can't read capabilities [ 154.924926][ T10] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 155.074184][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 155.074194][ T40] audit: type=1400 audit(155.001:22750): avc: denied { name_bind 0x1000000 } for pid=12644 comm="syz.7.1983" path="socket:[49349]" dev="sockfs" ino=49349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 155.094440][ T6019] usb 12-1: USB disconnect, device number 2 [ 155.115057][ T10] usb 11-1: Using ep0 maxpacket: 32 [ 155.120205][ T10] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 155.123598][ T10] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 155.127523][ T10] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 155.131203][ T10] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.135317][ T10] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 155.139192][ T10] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 155.144358][ T10] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 155.148256][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.153046][ T10] usb 11-1: config 0 descriptor?? [ 155.363009][ T10] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 155.408011][T11796] usb 5-1: USB disconnect, device number 13 [ 155.432651][T12664] netlink: 'syz.7.1988': attribute type 21 has an invalid length. [ 155.437613][T12664] netlink: 'syz.7.1988': attribute type 21 has an invalid length. [ 155.506432][ T40] audit: type=1400 audit(155.441:22751): avc: denied { mount } for pid=12670 comm="syz.0.1991" name="/" dev="autofs" ino=49428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 155.525472][ T40] audit: type=1400 audit(155.461:22752): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 155.546259][T12669] syzkaller0: entered promiscuous mode [ 155.548479][T12669] syzkaller0: entered allmulticast mode [ 156.138714][T12683] random: crng reseeded on system resumption [ 156.830498][T12673] FAULT_INJECTION: forcing a failure. [ 156.830498][T12673] name failslab, interval 1, probability 0, space 0, times 0 [ 156.835088][T12673] CPU: 2 UID: 0 PID: 12673 Comm: syz.0.1992 Not tainted syzkaller #0 PREEMPT(full) [ 156.835104][T12673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 156.835111][T12673] Call Trace: [ 156.835126][T12673] [ 156.835130][T12673] dump_stack_lvl+0x16c/0x1f0 [ 156.835154][T12673] should_fail_ex+0x512/0x640 [ 156.835173][T12673] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 156.835196][T12673] should_failslab+0xc2/0x120 [ 156.835209][T12673] kmem_cache_alloc_node_noprof+0x78/0x770 [ 156.835225][T12673] ? __alloc_skb+0x2b2/0x380 [ 156.835242][T12673] ? __alloc_skb+0x2b2/0x380 [ 156.835253][T12673] __alloc_skb+0x2b2/0x380 [ 156.835266][T12673] ? __pfx___alloc_skb+0x10/0x10 [ 156.835292][T12673] ? __pfx_rtnl_newlink+0x10/0x10 [ 156.835319][T12673] netlink_ack+0x15d/0xb80 [ 156.835342][T12673] netlink_rcv_skb+0x332/0x420 [ 156.835357][T12673] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.835373][T12673] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.835398][T12673] ? netlink_deliver_tap+0x1ae/0xd30 [ 156.835424][T12673] netlink_unicast+0x5aa/0x870 [ 156.835444][T12673] ? __pfx_netlink_unicast+0x10/0x10 [ 156.835464][T12673] netlink_sendmsg+0x8c8/0xdd0 [ 156.835482][T12673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.835513][T12673] ____sys_sendmsg+0xa98/0xc70 [ 156.835528][T12673] ? copy_msghdr_from_user+0x10a/0x160 [ 156.835542][T12673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.835559][T12673] ___sys_sendmsg+0x134/0x1d0 [ 156.835573][T12673] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.835586][T12673] ? __lock_acquire+0x622/0x1c90 [ 156.835613][T12673] __sys_sendmsg+0x16d/0x220 [ 156.835627][T12673] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.835646][T12673] ? fput+0x9b/0xd0 [ 156.835661][T12673] do_syscall_64+0xcd/0xfa0 [ 156.835672][T12673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.835683][T12673] RIP: 0033:0x7f40fbf8f7c9 [ 156.835693][T12673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.835703][T12673] RSP: 002b:00007f40fcd9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.835713][T12673] RAX: ffffffffffffffda RBX: 00007f40fc1e5fa0 RCX: 00007f40fbf8f7c9 [ 156.835720][T12673] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000006 [ 156.835726][T12673] RBP: 00007f40fcd9b090 R08: 0000000000000000 R09: 0000000000000000 [ 156.835732][T12673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.835738][T12673] R13: 00007f40fc1e6038 R14: 00007f40fc1e5fa0 R15: 00007ffefad429c8 [ 156.835751][T12673] [ 156.956003][T11796] usb 11-1: USB disconnect, device number 3 [ 156.960068][T11796] usblp0: removed [ 157.034626][ T40] audit: type=1400 audit(156.961:22753): avc: denied { write } for pid=12690 comm="syz.6.1999" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 157.044572][ T40] audit: type=1400 audit(156.961:22754): avc: denied { open } for pid=12690 comm="syz.6.1999" path="/162/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 157.054346][ T40] audit: type=1400 audit(156.971:22755): avc: denied { ioctl } for pid=12690 comm="syz.6.1999" path="/162/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 157.073151][ T40] audit: type=1400 audit(157.001:22756): avc: denied { bind } for pid=12700 comm="syz.7.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.167590][T12710] random: crng reseeded on system resumption [ 157.167810][T12707] syzkaller1: entered promiscuous mode [ 157.171880][T12707] syzkaller1: entered allmulticast mode [ 157.354437][ T40] audit: type=1400 audit(157.281:22757): avc: denied { ioctl } for pid=12720 comm="syz.6.2008" path="socket:[47510]" dev="sockfs" ino=47510 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 157.433855][T12731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2012'. [ 157.510520][ T40] audit: type=1400 audit(157.441:22758): avc: denied { read } for pid=12733 comm="syz.6.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.544735][ T40] audit: type=1400 audit(157.471:22759): avc: denied { write } for pid=12735 comm="syz.7.2015" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 157.553188][T12738] ufs: You didn't specify the type of your ufs filesystem [ 157.553188][T12738] [ 157.553188][T12738] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 157.553188][T12738] [ 157.553188][T12738] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 157.567482][T12738] ufs: ufstype=old is supported read-only [ 157.570832][T12738] ufs: ufs_fill_super(): bad magic number [ 157.577996][T12741] ufs: You didn't specify the type of your ufs filesystem [ 157.577996][T12741] [ 157.577996][T12741] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 157.577996][T12741] [ 157.577996][T12741] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 157.593031][T12741] ufs: ufstype=old is supported read-only [ 157.595525][T12741] ufs: ufs_fill_super(): bad magic number [ 157.731251][T12766] comedi comedi3: comedi_config --init_data is deprecated [ 157.736598][T12769] ip6erspan0: entered promiscuous mode [ 157.751231][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2023'. [ 157.933093][T12797] lo speed is unknown, defaulting to 1000 [ 157.981507][T12803] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 158.164066][T12813] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2035'. [ 158.194756][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'. [ 158.461970][T12837] netlink: 'syz.2.2044': attribute type 20 has an invalid length. [ 158.465448][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2044'. [ 158.476629][ T6608] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.476749][T12837] netlink: 'syz.2.2044': attribute type 20 has an invalid length. [ 158.482115][ T6608] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.483518][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2044'. [ 158.490829][ T6608] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.506312][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'. [ 158.753394][T12868] team0: Port device vlan0 removed [ 158.759951][ T1237] tipc: Resetting bearer [ 159.019498][T11796] hid-generic 0362:0006:7EFFFFFF.000A: item fetching failed at offset 0/2 [ 159.022745][T11796] hid-generic 0362:0006:7EFFFFFF.000A: probe with driver hid-generic failed with error -22 [ 159.199913][T12904] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2066'. [ 159.223049][T12907] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2067'. [ 159.239278][T12907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=12907 comm=syz.0.2067 [ 159.394592][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2071'. [ 159.558680][T12942] delete_channel: no stack [ 159.794354][T12985] openvswitch: netlink: Message has 152 unknown bytes. [ 159.813603][T12986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.813925][T12985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.855804][T12986] ipt_ECN: cannot use operation on non-tcp rule [ 159.960105][T12999] loop4: detected capacity change from 0 to 524288000 [ 159.982259][T13004] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 159.985434][T13004] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 160.012389][T13009] lo speed is unknown, defaulting to 1000 [ 160.137464][T13022] random: crng reseeded on system resumption [ 160.254823][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 160.257863][ T40] audit: type=1400 audit(160.181:22775): avc: denied { ioctl } for pid=13047 comm="syz.2.2109" path="socket:[47774]" dev="sockfs" ino=47774 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 160.284435][ T40] audit: type=1400 audit(160.211:22776): avc: denied { accept } for pid=13054 comm="syz.6.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.420798][T13072] loop4: detected capacity change from 0 to 2560 [ 160.435702][T13072] buffer_io_error: 8 callbacks suppressed [ 160.435717][T13072] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 160.440934][T13072] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 160.444360][T13072] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 160.448304][T13072] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 160.451136][T13072] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 160.453882][T13072] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 160.458388][T13072] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 160.461265][T13072] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 160.464146][T13072] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 160.467729][T13072] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 160.625378][ T40] audit: type=1400 audit(160.561:22777): avc: denied { getopt } for pid=13085 comm="syz.6.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 160.636781][ T40] audit: type=1400 audit(160.571:22778): avc: denied { setopt } for pid=13085 comm="syz.6.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 160.676789][T13088] netlink: 'syz.6.2121': attribute type 62 has an invalid length. [ 160.748716][T13083] infiniband syz0: set down [ 160.750946][T13083] infiniband syz0: added bond0 [ 160.782639][T13083] RDS/IB: syz0: added [ 160.785156][T13083] smc: adding ib device syz0 with port count 1 [ 160.787923][T13083] smc: ib device syz0 port 1 has no pnetid [ 160.984987][T11799] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 161.134929][T11799] usb 5-1: device descriptor read/64, error -71 [ 161.323217][T13102] vivid-000: ================= START STATUS ================= [ 161.326499][T13102] vivid-000: Enable Output Cropping: true [ 161.328668][T13102] vivid-000: Enable Output Composing: true [ 161.330633][T13102] vivid-000: Enable Output Scaler: true [ 161.332529][T13102] vivid-000: Tx RGB Quantization Range: Automatic [ 161.335981][T13102] vivid-000: Transmit Mode: HDMI [ 161.340070][T13102] vivid-000: Hotplug Present: 0x00000000 [ 161.342134][T13102] vivid-000: RxSense Present: 0x00000000 [ 161.343981][T13102] vivid-000: EDID Present: 0x00000000 [ 161.348033][T13102] vivid-000: ================== END STATUS ================== [ 161.357145][T13102] rtc_cmos 00:05: Alarms can be up to one day in the future [ 161.382871][T13104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.396989][T11799] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 161.458756][T13116] netlink: 'syz.2.2129': attribute type 27 has an invalid length. [ 161.485456][T13116] sit0: left promiscuous mode [ 161.516395][T13116] tipc: Resetting bearer [ 161.522032][T13116] dummy0: left allmulticast mode [ 161.526882][T13116] 0X: left allmulticast mode [ 161.535494][T11799] usb 5-1: device descriptor read/64, error -71 [ 161.612761][T13116] veth1_macvtap: left allmulticast mode [ 161.618438][T13116] macsec0: left promiscuous mode [ 161.620645][T13116] macsec0: left allmulticast mode [ 161.623952][T13116] geneve1: left allmulticast mode [ 161.626569][T13116] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 161.644560][T13116] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 161.655511][T11799] usb usb5-port1: attempt power cycle [ 161.678161][T13116] bridge0: left allmulticast mode [ 161.682353][T13116] macsec1: left allmulticast mode [ 161.685759][T13116] ip6gre1: left promiscuous mode [ 161.687947][T13116] ip6gre1: left allmulticast mode [ 161.695989][T13116] vlan2: left promiscuous mode [ 161.700633][T13116] ip6erspan0: left promiscuous mode [ 161.746377][T13121] bridge0: left promiscuous mode [ 161.752691][T13121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.756618][T13121] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.759618][T13121] tipc: Resetting bearer [ 161.764022][T13121] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 161.774551][ T1143] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.779211][ T1143] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.782929][ T1143] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.786530][ T1143] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.791330][ T1143] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.795062][ T1143] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.995582][T11799] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 162.015739][T11799] usb 5-1: device descriptor read/8, error -71 [ 162.020189][T13142] program syz.2.2138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.274733][T13146] ALSA: mixer_oss: invalid OSS volume ';' [ 162.284981][T11799] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 162.307047][T11799] usb 5-1: device descriptor read/8, error -71 [ 162.415630][T11799] usb usb5-port1: unable to enumerate USB device [ 162.677411][T13156] __nla_validate_parse: 10 callbacks suppressed [ 162.677428][T13156] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2144'. [ 162.683267][T13156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.900166][T13153] syz.2.2143 (13153): drop_caches: 2 [ 163.038126][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2146'. [ 163.111604][ T40] audit: type=1400 audit(163.041:22779): avc: denied { getopt } for pid=13161 comm="syz.7.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.156738][T13165] netlink: 'syz.7.2148': attribute type 10 has an invalid length. [ 163.173427][T13165] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 163.241608][T13169] team0: Device gtp0 is up. Set it down before adding it as a team port [ 163.545986][T13183] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2156'. [ 163.867491][ T40] audit: type=1400 audit(163.801:22780): avc: denied { connect } for pid=13196 comm="syz.0.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.900654][T13199] ALSA: mixer_oss: invalid OSS volume ';' [ 163.954046][T13204] tipc: Enabled bearer , priority 0 [ 163.958468][T13204] wg2: mtu less than device minimum [ 163.991664][T13203] tipc: Disabling bearer [ 164.236339][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2168'. [ 164.239208][T13221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2168'. [ 164.399178][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2170'. [ 164.402157][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2170'. [ 164.407493][T13229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.419855][T13232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2171'. [ 164.423586][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'. [ 164.430486][T13232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2171'. [ 164.833077][ T40] audit: type=1400 audit(164.761:22781): avc: denied { create } for pid=13248 comm="syz.6.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 164.841158][ T40] audit: type=1400 audit(164.771:22782): avc: denied { sys_admin } for pid=13248 comm="syz.6.2178" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 165.274039][T13260] x_tables: ip6_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 40 [ 165.280179][T13260] x_tables: ip6_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 40 [ 165.373626][ T40] audit: type=1400 audit(165.301:22783): avc: denied { mount } for pid=13268 comm="syz.7.2183" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 165.501435][ T40] audit: type=1400 audit(165.431:22784): avc: denied { read } for pid=13274 comm="syz.2.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 165.630218][T13279] ./bus: Can't lookup blockdev [ 165.670401][T13281] net_ratelimit: 1 callbacks suppressed [ 165.670417][T13281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.676550][ T40] audit: type=1400 audit(165.611:22785): avc: denied { connect } for pid=13280 comm="syz.7.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 165.863069][T13285] bond1 (unregistering): Released all slaves [ 166.067151][ T5945] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 166.341717][ T40] audit: type=1400 audit(166.271:22786): avc: denied { read } for pid=13300 comm="syz.7.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.351562][ T40] audit: type=1400 audit(166.281:22787): avc: denied { create } for pid=13302 comm="syz.2.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 166.360344][ T40] audit: type=1400 audit(166.281:22788): avc: denied { ioctl } for pid=13302 comm="syz.2.2196" path="socket:[50623]" dev="sockfs" ino=50623 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 166.370414][ T40] audit: type=1400 audit(166.281:22789): avc: denied { getopt } for pid=13302 comm="syz.2.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 166.453146][T13318] FAULT_INJECTION: forcing a failure. [ 166.453146][T13318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.459378][T13318] CPU: 0 UID: 0 PID: 13318 Comm: syz.2.2201 Not tainted syzkaller #0 PREEMPT(full) [ 166.459395][T13318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 166.459401][T13318] Call Trace: [ 166.459415][T13318] [ 166.459419][T13318] dump_stack_lvl+0x16c/0x1f0 [ 166.459445][T13318] should_fail_ex+0x512/0x640 [ 166.459465][T13318] _copy_from_user+0x2e/0xd0 [ 166.459479][T13318] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 166.459497][T13318] snd_rawmidi_write+0x26e/0xc10 [ 166.459512][T13318] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 166.459524][T13318] ? avc_policy_seqno+0x9/0x20 [ 166.459537][T13318] ? selinux_file_permission+0x126/0x660 [ 166.459549][T13318] ? __pfx_default_wake_function+0x10/0x10 [ 166.459564][T13318] ? bpf_lsm_file_permission+0x9/0x10 [ 166.459575][T13318] ? security_file_permission+0x71/0x210 [ 166.459588][T13318] ? rw_verify_area+0xcf/0x6c0 [ 166.459605][T13318] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 166.459616][T13318] vfs_write+0x2a0/0x11d0 [ 166.459629][T13318] ? __pfx_vfs_write+0x10/0x10 [ 166.459638][T13318] ? find_held_lock+0x2b/0x80 [ 166.459651][T13318] ? __fget_files+0x204/0x3c0 [ 166.459665][T13318] ? __fget_files+0x20e/0x3c0 [ 166.459678][T13318] ksys_write+0x1f8/0x250 [ 166.459688][T13318] ? __pfx_ksys_write+0x10/0x10 [ 166.459698][T13318] ? fd_install+0x244/0x750 [ 166.459710][T13318] do_syscall_64+0xcd/0xfa0 [ 166.459722][T13318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.459732][T13318] RIP: 0033:0x7fe3a638f7c9 [ 166.459741][T13318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.459773][T13318] RSP: 002b:00007fe3a729e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 166.459784][T13318] RAX: ffffffffffffffda RBX: 00007fe3a65e5fa0 RCX: 00007fe3a638f7c9 [ 166.459791][T13318] RDX: 00000000fffffd2c RSI: 0000200000000000 RDI: 0000000000000004 [ 166.459797][T13318] RBP: 00007fe3a729e090 R08: 0000000000000000 R09: 0000000000000000 [ 166.459803][T13318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.459809][T13318] R13: 00007fe3a65e6038 R14: 00007fe3a65e5fa0 R15: 00007ffc2ff80108 [ 166.459822][T13318] [ 166.645297][T13328] netlink: 'syz.2.2205': attribute type 11 has an invalid length. [ 166.657044][T13330] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 166.691867][ T40] audit: type=1400 audit(166.621:22790): avc: denied { mount } for pid=13331 comm="syz.2.2207" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 166.715226][ T40] audit: type=1400 audit(166.651:22791): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 166.741592][T13342] netlink: 'syz.6.2211': attribute type 21 has an invalid length. [ 166.744420][T13342] netlink: 'syz.6.2211': attribute type 6 has an invalid length. [ 166.965273][ T40] audit: type=1400 audit(166.901:22792): avc: denied { getopt } for pid=13369 comm="syz.7.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 167.035187][T13377] mkiss: ax0: crc mode is auto. [ 167.152866][T13376] netlink: 'syz.7.2223': attribute type 10 has an invalid length. [ 167.157691][T13376] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.160622][T13376] bridge_slave_1: left allmulticast mode [ 167.162646][T13376] bridge_slave_1: left promiscuous mode [ 167.165176][T13376] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.172589][T13376] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 167.312160][T13409] FAULT_INJECTION: forcing a failure. [ 167.312160][T13409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.317835][T13409] CPU: 1 UID: 0 PID: 13409 Comm: syz.0.2233 Not tainted syzkaller #0 PREEMPT(full) [ 167.317857][T13409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 167.317868][T13409] Call Trace: [ 167.317885][T13409] [ 167.317891][T13409] dump_stack_lvl+0x16c/0x1f0 [ 167.317925][T13409] should_fail_ex+0x512/0x640 [ 167.317955][T13409] _copy_from_user+0x2e/0xd0 [ 167.317978][T13409] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 167.318016][T13409] snd_rawmidi_write+0x26e/0xc10 [ 167.318044][T13409] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 167.318063][T13409] ? avc_policy_seqno+0x9/0x20 [ 167.318086][T13409] ? selinux_file_permission+0x126/0x660 [ 167.318105][T13409] ? __pfx_default_wake_function+0x10/0x10 [ 167.318130][T13409] ? bpf_lsm_file_permission+0x9/0x10 [ 167.318147][T13409] ? security_file_permission+0x71/0x210 [ 167.318169][T13409] ? rw_verify_area+0xcf/0x6c0 [ 167.318197][T13409] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 167.318215][T13409] vfs_write+0x2a0/0x11d0 [ 167.318238][T13409] ? __pfx_vfs_write+0x10/0x10 [ 167.318253][T13409] ? find_held_lock+0x2b/0x80 [ 167.318275][T13409] ? __fget_files+0x204/0x3c0 [ 167.318298][T13409] ? __fget_files+0x20e/0x3c0 [ 167.318322][T13409] ksys_write+0x1f8/0x250 [ 167.318339][T13409] ? __pfx_ksys_write+0x10/0x10 [ 167.318356][T13409] ? fd_install+0x244/0x750 [ 167.318378][T13409] do_syscall_64+0xcd/0xfa0 [ 167.318396][T13409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.318414][T13409] RIP: 0033:0x7f40fbf8f7c9 [ 167.318429][T13409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.318445][T13409] RSP: 002b:00007f40fcd9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.318461][T13409] RAX: ffffffffffffffda RBX: 00007f40fc1e5fa0 RCX: 00007f40fbf8f7c9 [ 167.318472][T13409] RDX: 00000000fffffd2c RSI: 0000200000000000 RDI: 0000000000000004 [ 167.318482][T13409] RBP: 00007f40fcd9b090 R08: 0000000000000000 R09: 0000000000000000 [ 167.318492][T13409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.318503][T13409] R13: 00007f40fc1e6038 R14: 00007f40fc1e5fa0 R15: 00007ffefad429c8 [ 167.318527][T13409] [ 167.414684][T13402] cgroup: cgroup_addrm_files: failed to add cpus, err=-12 [ 167.431134][T13413] netlink: 'syz.7.2234': attribute type 12 has an invalid length. [ 167.663401][T13428] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 167.668771][T13428] xt_bpf: check failed: parse error [ 167.673639][T13428] input: syz1 as /devices/virtual/input/input29 [ 167.695081][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 167.715699][T13432] IPVS: length: 176 != 24 [ 167.729177][ T5945] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 167.729238][ T5945] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 167.732668][ T5945] Bluetooth: hci3: Malformed LE Event: 0x02 [ 167.757530][T13434] lo speed is unknown, defaulting to 1000 [ 167.845104][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 167.849439][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 167.852931][ T24] usb 5-1: config 0 has no interface number 0 [ 167.857932][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 167.861697][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.865144][ T24] usb 5-1: Product: syz [ 167.867103][ T24] usb 5-1: Manufacturer: syz [ 167.869124][ T24] usb 5-1: SerialNumber: syz [ 167.873409][ T24] usb 5-1: config 0 descriptor?? [ 167.877074][ T24] smsc95xx v2.0.0 [ 167.878802][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 167.884041][ T24] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 167.912203][T13436] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13436 comm=syz.2.2244 [ 168.079047][T11810] usb 5-1: USB disconnect, device number 18 [ 168.498825][T13467] __nla_validate_parse: 16 callbacks suppressed [ 168.498850][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2251'. [ 168.506223][T13467] fuse: Bad value for 'fd' [ 168.514161][T13467] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2251'. [ 168.622320][T13473] sch_tbf: peakrate 10912518186738708371 is lower than or equals to rate 16916375963678637155 ! [ 168.679129][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.685264][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.690624][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.697291][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.702437][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.707679][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.712795][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.718263][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.718651][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2257'. [ 168.726795][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.726904][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2257'. [ 168.736080][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.741470][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.747301][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.752699][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.758090][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.763445][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.769107][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.774541][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.779877][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.784802][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.790260][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.799557][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.804885][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.810199][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.817149][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.822647][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.827409][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.833371][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.838328][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.841993][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.845779][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.850754][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.855668][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.859897][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.864300][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.869605][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.875717][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.881019][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.887849][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.893458][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.899510][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.904732][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.910043][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.914261][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.920688][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.926932][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.932295][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.937697][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.942086][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.946349][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.950750][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.956297][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.962233][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.968097][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.973310][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.978553][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.982942][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.987140][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.991299][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.996605][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.001090][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.006622][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.012844][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.016794][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.021491][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.025574][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.062582][T13502] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan1, syncid = 3, id = 0 [ 169.341307][T13512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2265'. [ 169.377466][T13516] veth0_to_bond: entered allmulticast mode [ 169.836303][T13542] sctp: [Deprecated]: syz.7.2277 (pid 13542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.836303][T13542] Use struct sctp_sack_info instead [ 170.014247][T13556] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 170.018255][T13556] overlayfs: failed to set xattr on upper [ 170.021706][T13556] overlayfs: ...falling back to redirect_dir=nofollow. [ 170.025096][T13556] overlayfs: ...falling back to index=off. [ 170.028136][T13556] overlayfs: ...falling back to uuid=null. [ 170.030858][T13556] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 170.065905][T13560] overlayfs: workdir and upperdir must be separate subtrees [ 170.104739][T13564] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.2284' resets device [ 170.167394][T13571] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 170.765864][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 170.765881][ T40] audit: type=1400 audit(170.701:22802): avc: denied { write } for pid=13591 comm="syz.6.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 170.797490][ T40] audit: type=1400 audit(170.731:22803): avc: denied { ioctl } for pid=13591 comm="syz.6.2292" path="socket:[51642]" dev="sockfs" ino=51642 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 170.854252][ T40] audit: type=1400 audit(170.781:22804): avc: denied { ioctl } for pid=13593 comm="syz.6.2293" path="socket:[54413]" dev="sockfs" ino=54413 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.350912][ T40] audit: type=1400 audit(171.281:22805): avc: denied { lock } for pid=13633 comm="syz.0.2297" path="socket:[51760]" dev="sockfs" ino=51760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.801224][T13656] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 172.041262][T13670] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2309'. [ 172.124926][T11810] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 172.295354][T11810] usb 12-1: Using ep0 maxpacket: 32 [ 172.302251][T11810] usb 12-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 172.307079][T11810] usb 12-1: config 1 interface 0 has no altsetting 0 [ 172.312168][T11810] usb 12-1: New USB device found, idVendor=0596, idProduct=0500, bcdDevice= 0.40 [ 172.316081][T11810] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.319496][T11810] usb 12-1: Product: ࡃ [ 172.321427][T11810] usb 12-1: Manufacturer: 㥸ᕂᘛޏ↋✍鹒闅䵹ᒊﶫ禀잿閌詜䫌碡㼌ﴉ礭㷤耭놜䤧픚䕡鴟﹏ﾒ膐Ỷ [ 172.329915][T11810] usb 12-1: SerialNumber: и [ 172.351842][ T40] audit: type=1400 audit(172.281:22806): avc: denied { create } for pid=13690 comm="syz.2.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 172.354516][T13691] netlink: 'syz.2.2315': attribute type 20 has an invalid length. [ 172.372392][ T40] audit: type=1400 audit(172.301:22807): avc: denied { write } for pid=13690 comm="syz.2.2315" path="socket:[52978]" dev="sockfs" ino=52978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 172.383976][ T40] audit: type=1400 audit(172.301:22808): avc: denied { read } for pid=13690 comm="syz.2.2315" dev="sockfs" ino=52978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 172.458023][T13693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.505330][T11808] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 172.656891][T11808] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.661222][T11808] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.667089][T11808] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.670922][T11808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.729514][T13696] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2317'. [ 172.733328][T13696] tipc: Invalid UDP bearer configuration [ 172.733375][T13696] tipc: Enabling of bearer rejected, failed to enable media [ 172.738354][T13661] netlink: 'syz.7.2305': attribute type 6 has an invalid length. [ 172.739771][T13696] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 172.743730][T13661] netlink: 'syz.7.2305': attribute type 6 has an invalid length. [ 172.747143][T13696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=13696 comm=syz.2.2317 [ 172.755001][ T40] audit: type=1400 audit(172.681:22809): avc: denied { accept } for pid=13695 comm="syz.2.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 172.810799][T13697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=13697 comm=syz.7.2305 [ 172.884059][T11808] usb 5-1: GET_CAPABILITIES returned a6 [ 172.886631][T11808] usbtmc 5-1:16.0: can't read capabilities [ 172.899939][ T1467] usb 5-1: USB disconnect, device number 19 [ 173.090564][T13715] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2324'. [ 173.276196][ T40] audit: type=1400 audit(173.211:22810): avc: denied { read } for pid=13744 comm="syz.6.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 173.361463][T11810] usbhid 12-1:1.0: can't add hid device: -71 [ 173.364082][T11810] usbhid 12-1:1.0: probe with driver usbhid failed with error -71 [ 173.373452][T11810] usb 12-1: USB disconnect, device number 3 [ 173.512011][T13759] batadv_slave_1: entered promiscuous mode [ 173.514736][T13760] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 173.532717][T13760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2337'. [ 173.650074][T13762] lo speed is unknown, defaulting to 1000 [ 173.681487][ T40] audit: type=1400 audit(173.611:22811): avc: denied { write } for pid=13761 comm="syz.0.2339" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 173.682135][T13767] program syz.0.2339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.826103][T13779] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2338'. [ 173.958677][T13757] batadv_slave_1: left promiscuous mode [ 174.031361][T13794] netlink: 'syz.7.2349': attribute type 30 has an invalid length. [ 174.057629][T13797] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 174.155244][T13804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2351'. [ 174.367162][T13817] xt_TPROXY: Can be used only with -p tcp or -p udp [ 174.410240][T13821] veth1_macvtap: left promiscuous mode [ 174.412096][T13821] macsec0: entered promiscuous mode [ 174.413999][T13821] macsec0: entered allmulticast mode [ 174.491900][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'. [ 174.496181][T13833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2359'. [ 174.664987][ T1467] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 174.814976][ T1467] usb 5-1: Using ep0 maxpacket: 8 [ 174.818973][ T1467] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 174.821480][ T1467] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 174.825198][ T1467] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 174.829108][ T1467] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.832979][ T1467] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.836839][ T1467] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.840631][ T1467] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 174.845010][ T1467] usb 5-1: config 168 interface 0 has no altsetting 0 [ 174.848104][ T1467] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 174.850541][ T1467] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 174.854271][ T1467] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 174.858102][ T1467] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.861900][ T1467] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.865706][ T1467] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.869473][ T1467] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 174.873847][ T1467] usb 5-1: config 168 interface 0 has no altsetting 0 [ 174.877211][ T1467] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 174.879640][ T1467] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 174.883204][ T1467] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 174.889201][ T1467] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.894153][ T1467] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.898162][ T1467] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.901802][ T1467] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 174.906388][ T1467] usb 5-1: config 168 interface 0 has no altsetting 0 [ 174.910691][ T1467] usb 5-1: string descriptor 0 read error: -22 [ 174.912749][ T1467] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 174.915824][ T1467] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.921625][ T1467] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 174.952647][T13842] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.955935][T13842] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.038574][T13842] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.042131][T13842] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.124594][T13842] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.129117][T13842] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.137677][T13821] veth1_macvtap: entered promiscuous mode [ 175.139986][T13821] veth1_macvtap: entered allmulticast mode [ 175.142159][T13821] macsec0: left promiscuous mode [ 175.144309][T13821] macsec0: left allmulticast mode [ 175.146037][T13821] veth1_macvtap: left allmulticast mode [ 175.149558][T11809] usb 5-1: USB disconnect, device number 20 [ 175.228736][T13842] netdevsim netdevsim6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.232067][T13842] netdevsim netdevsim6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.337386][ T13] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.340199][ T13] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.349406][ T13] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.352274][ T13] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.362880][ T13] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.366568][ T13] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.378808][ T13] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.381660][ T13] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.388667][T13841] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.393027][T13841] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.462226][T13841] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.466536][T13841] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.498163][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'. [ 175.540733][T13841] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.545104][T13841] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.610844][T13841] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.615013][T13841] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.915938][T13875] fuse: Bad value for 'fd' [ 175.934921][T13875] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 176.037738][T13877] geneve1: Caught tx_queue_len zero misconfig [ 176.054329][T13877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2371'. [ 176.056759][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 176.056769][ T40] audit: type=1400 audit(175.991:22823): avc: denied { append } for pid=13880 comm="syz.2.2372" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 176.061358][T13877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13877 comm=syz.0.2371 [ 176.077570][T13877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13877 comm=syz.0.2371 [ 176.095903][T13884] netlink: zone id is out of range [ 176.097904][T13884] netlink: zone id is out of range [ 176.099992][T13884] netlink: zone id is out of range [ 176.102360][T13884] netlink: set zone limit has 8 unknown bytes [ 176.104472][T13885] FAT-fs (nullb0): bogus number of reserved sectors [ 176.109726][T13885] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 176.131455][T13887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2375'. [ 176.395357][T13909] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 176.407906][T13909] CUSE: unknown device info "&b%ZW)3\my " [ 176.409982][T13909] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 176.414024][T13909] CUSE: DEVNAME unspecified [ 176.446568][T13913] overlayfs: failed to resolve './file0': -2 [ 176.449869][T13913] overlayfs: failed to resolve './file0': -2 [ 176.453222][T13913] overlayfs: failed to resolve './file0': -2 [ 176.457458][T13913] overlayfs: failed to resolve './file0': -2 [ 176.460773][T13913] overlayfs: failed to resolve './file0': -2 [ 176.463851][T13913] overlayfs: failed to resolve './file0': -2 [ 176.467274][T13913] overlayfs: failed to resolve './file0': -2 [ 176.470283][T13913] overlayfs: failed to resolve './file0': -2 [ 176.473228][T13913] overlayfs: failed to resolve './file0': -2 [ 176.476433][T13913] overlayfs: failed to resolve './file0': -2 [ 176.479772][T13913] overlayfs: failed to resolve './file0': -2 [ 176.482841][T13913] overlayfs: failed to resolve './file0': -2 [ 176.486086][T13913] overlayfs: failed to resolve './file0': -2 [ 176.489108][T13913] overlayfs: failed to resolve './file0': -2 [ 176.492226][T13913] overlayfs: failed to resolve './file0': -2 [ 176.495610][T13913] overlayfs: failed to resolve './file0': -2 [ 176.499117][T13913] overlayfs: failed to resolve './file0': -2 [ 176.702546][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.707068][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.710106][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.715981][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.719466][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.740763][T13916] lo speed is unknown, defaulting to 1000 [ 176.922977][T13916] chnl_net:caif_netlink_parms(): no params data found [ 176.963311][T13916] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.966179][T13916] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.968958][T13916] bridge_slave_0: entered allmulticast mode [ 176.972031][T13916] bridge_slave_0: entered promiscuous mode [ 176.976403][T13916] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.979093][T13916] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.981834][T13916] bridge_slave_1: entered allmulticast mode [ 176.984806][T13916] bridge_slave_1: entered promiscuous mode [ 177.009506][T13916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.014399][T13916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.028812][T13916] team0: Port device team_slave_0 added [ 177.032675][T13916] team0: Port device team_slave_1 added [ 177.048129][T13916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.050230][T13916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.058561][T13916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.062800][T13916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.065409][T13916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.073460][T13916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.081662][T13927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.085721][T13927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.089754][T13927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.094333][T13927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.121537][ T6612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.124076][ T6612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.124305][T13916] hsr_slave_0: entered promiscuous mode [ 177.129194][T13916] hsr_slave_1: entered promiscuous mode [ 177.131336][T13916] debugfs: 'hsr0' already exists in 'hsr' [ 177.133152][T13916] Cannot create hsr debugfs directory [ 177.158245][T13926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.167975][T13929] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2387'. [ 177.393940][ T40] audit: type=1400 audit(177.321:22824): avc: denied { shutdown } for pid=13930 comm="syz.7.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 177.638695][T13953] loop4: detected capacity change from 0 to 524288000 [ 177.713438][ T6607] bond3 (unregistering): (slave geneve2): Releasing active interface [ 177.745916][ T6607] team0: Port device geneve0 removed [ 178.034650][ T6607] bond6 (unregistering): (slave bridge3): Releasing active interface [ 178.226957][ T6607] bond0 (unregistering): Released all slaves [ 178.227077][ T6615] smc: removing ib device syz0 [ 178.233998][ T6607] bond1 (unregistering): Released all slaves [ 178.246407][ T6607] bond2 (unregistering): Released all slaves [ 178.340932][ T6607] bond3 (unregistering): Released all slaves [ 178.420656][ T6607] bond4 (unregistering): Released all slaves [ 178.427041][ T6607] bond5 (unregistering): Released all slaves [ 178.440748][ T6607] bond6 (unregistering): Released all slaves [ 178.450684][ T6607] bond7 (unregistering): Released all slaves [ 178.713935][T13981] trusted_key: encrypted_key: insufficient parameters specified [ 178.806217][ T5945] Bluetooth: hci4: command tx timeout [ 178.841057][T13989] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 178.843475][T13989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.008849][T13916] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.019504][T13916] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.025925][T13916] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.032021][T13916] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.101220][T13916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.114771][T13916] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.122434][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.125476][ T6615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.134459][T14015] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2409'. [ 179.140357][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.143303][ T6615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.210220][ T13] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.213817][ T13] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.227592][T14019] fuse: Unknown parameter 'n ' [ 179.229842][ T6612] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.233111][ T6612] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.246576][ T1237] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.250870][ T1237] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.263355][ T1237] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.267234][ T1237] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.303417][T13916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.320598][T14033] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2414'. [ 179.335862][T13916] veth0_vlan: entered promiscuous mode [ 179.343153][T13916] veth1_vlan: entered promiscuous mode [ 179.366096][T13916] veth0_macvtap: entered promiscuous mode [ 179.367820][T14035] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2415'. [ 179.371739][T13916] veth1_macvtap: entered promiscuous mode [ 179.371784][T14035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2415'. [ 179.400689][T13916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.408766][T13916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.417643][ T1237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.421341][ T1237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.430235][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.431768][T14041] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2417'. [ 179.433846][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.498094][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.500509][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.599538][ T40] audit: type=1400 audit(179.531:22825): avc: denied { audit_control } for pid=14046 comm="syz.7.2419" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 179.631450][T14062] syzkaller1: entered allmulticast mode [ 179.635686][T14048] nbd7: detected capacity change from 0 to 63 [ 179.637208][T14062] xt_socket: unknown flags 0xe4 [ 179.656464][T14063] netlink: 212304 bytes leftover after parsing attributes in process `syz.6.2423'. [ 179.660330][T14063] openvswitch: netlink: Message has 6 unknown bytes. [ 179.675013][T14049] block nbd7: NBD_DISCONNECT [ 179.679915][T14049] block nbd7: Disconnected due to user request. [ 179.680515][ T6612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.683152][T14049] block nbd7: shutting down sockets [ 179.687194][ T6612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.734049][T14067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.794143][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2429'. [ 179.799787][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2429'. [ 179.803491][T14080] netlink: 'syz.2.2429': attribute type 20 has an invalid length. [ 179.814217][ T60] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.814325][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2429'. [ 179.818107][ T60] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.818144][ T60] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.818174][ T60] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.836460][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2429'. [ 179.840173][T14080] netlink: 'syz.2.2429': attribute type 20 has an invalid length. [ 179.914532][ T40] audit: type=1400 audit(179.841:22826): avc: denied { watch watch_reads } for pid=14085 comm="syz.0.2431" path="/582/file1" dev="tmpfs" ino=3090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 180.001404][T14101] mkiss: ax0: crc mode is auto. [ 180.028604][T14107] autofs4:pid:14107:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 180.085073][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 180.093044][T14110] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 180.097935][T14110] overlayfs: missing 'lowerdir' [ 180.244585][ T40] audit: type=1400 audit(180.171:22827): avc: denied { setopt } for pid=14122 comm="syz.7.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 180.252770][ T40] audit: type=1400 audit(180.181:22828): avc: denied { ioctl } for pid=14122 comm="syz.7.2441" path="socket:[57535]" dev="sockfs" ino=57535 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 180.265404][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.269082][ T24] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 180.273497][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.285155][ T24] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.289317][ T6607] : left promiscuous mode [ 180.289754][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 180.295836][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.303882][ T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.307495][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.310604][ T24] usb 7-1: Product: syz [ 180.312460][ T24] usb 7-1: Manufacturer: syz [ 180.316261][T14090] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 180.318071][T14130] overlayfs: failed to clone lowerpath [ 180.318438][ T40] audit: type=1400 audit(180.251:22829): avc: denied { mount } for pid=14129 comm="syz.6.2443" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 180.327341][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 180.329020][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 180.331594][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 180.333615][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 180.359200][ T6607] tipc: Disabling bearer [ 180.369815][ T6607] tipc: Left network mode [ 180.525031][ T24] usb 7-1: USB disconnect, device number 13 [ 180.529926][ T40] audit: type=1400 audit(180.461:22830): avc: denied { map } for pid=14146 comm="syz.7.2449" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 180.540044][ T40] audit: type=1400 audit(180.461:22831): avc: denied { listen } for pid=14149 comm="syz.0.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 180.631061][ T6607] hsr_slave_0: left promiscuous mode [ 180.653326][ T6607] pim6reg9 (unregistering): left allmulticast mode [ 180.671245][ T40] audit: type=1400 audit(180.601:22832): avc: denied { accept } for pid=14149 comm="syz.0.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 180.726258][T14156] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 180.838959][T14152] input: syz0 as /devices/virtual/input/input30 [ 180.885048][ T5945] Bluetooth: hci4: command tx timeout [ 181.350795][T14166] trusted_key: encrypted_key: master key parameter 'LWʥʆtht8*JiƝ#cq>|XgaNSEx' is invalid [ 181.434498][ T6607] IPVS: stop unused estimator thread 0... [ 181.463234][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 181.463249][ T40] audit: type=1400 audit(181.391:22835): avc: denied { bind } for pid=14172 comm="syz.0.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 181.475365][ T40] audit: type=1400 audit(181.391:22836): avc: denied { connect } for pid=14172 comm="syz.0.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 181.545325][T14181] Process accounting resumed [ 181.678167][T14185] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 181.682902][ T40] audit: type=1400 audit(181.611:22837): avc: denied { listen } for pid=14184 comm="syz.7.2460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 181.812851][T14193] netlink: 'syz.7.2460': attribute type 2 has an invalid length. [ 182.016445][T14206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.467095][T14237] debugfs: 'ttyS3' already exists in 'caif_serial' [ 182.631829][ T40] audit: type=1400 audit(182.561:22838): avc: denied { setopt } for pid=14240 comm="syz.7.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 182.964945][ T5945] Bluetooth: hci4: command tx timeout [ 183.285287][ T6019] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 183.285299][ T5945] Bluetooth: hci1: command 0x0405 tx timeout [ 183.290754][ T6019] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 185.045338][ T5945] Bluetooth: hci4: command tx timeout [ 185.365256][ T6019] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 185.367871][ T6019] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 185.376046][ T5945] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.445079][ T5945] Bluetooth: hci4: command 0x0c1a tx timeout [ 187.445117][ T6019] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 187.450079][ T6019] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 187.510556][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.523912][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.528443][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.536229][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.539623][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.558648][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.561839][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.564902][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.568327][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.571604][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.599261][ T40] audit: type=1400 audit(187.531:22839): avc: denied { append } for pid=14268 comm="syz.2.2485" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 187.601909][T14269] __nla_validate_parse: 11 callbacks suppressed [ 187.601924][T14269] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2486'. [ 187.602432][T14209] lo speed is unknown, defaulting to 1000 [ 187.622812][T14272] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2486'. [ 187.667823][T14278] binder: 14277:14278 ioctl c0306201 2000000003c0 returned -14 [ 187.690333][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.726881][T14285] binder: 14277:14285 ioctl c0306201 200000000640 returned -22 [ 187.731231][T14286] x_tables: duplicate underflow at hook 1 [ 187.741764][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2490'. [ 187.747178][T14283] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2490'. [ 187.810153][T14289] fuse: Unknown parameter '0x00000000000000030x0000000000000006x7n9`A؄h8!_D-zUG:lNB0 [ 187.810153][T14289] _<_WU2b~q 1NZ'Г[Rʦ~́00000000000000000000004' [ 187.811696][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.823334][ T40] audit: type=1400 audit(187.751:22840): avc: denied { map } for pid=14288 comm="syz.2.2491" path="socket:[58749]" dev="sockfs" ino=58749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.858877][T14286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14286 comm=syz.7.2489 [ 187.866586][ T40] audit: type=1400 audit(187.801:22841): avc: denied { write } for pid=14279 comm="syz.7.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 187.883687][T14295] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 187.887832][T14209] chnl_net:caif_netlink_parms(): no params data found [ 187.903453][T14296] overlay: filesystem on ./bus not supported as upperdir [ 188.035034][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.065452][T14301] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2493'. [ 188.102687][T14308] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2496'. [ 188.105849][T14311] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2496'. [ 188.142575][T14209] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.145718][T14209] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.149092][T14209] bridge_slave_0: entered allmulticast mode [ 188.152959][T14209] bridge_slave_0: entered promiscuous mode [ 188.177323][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.187141][T14209] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.189624][T14209] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.191812][T14209] bridge_slave_1: entered allmulticast mode [ 188.194388][T14209] bridge_slave_1: entered promiscuous mode [ 188.218963][T14209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.234170][T14209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.263609][T14209] team0: Port device team_slave_0 added [ 188.271698][T14209] team0: Port device team_slave_1 added [ 188.294750][T14209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.300643][T14209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.310945][T14209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.323575][T14209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.326855][T14209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.337199][T14209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.399929][T14341] random: crng reseeded on system resumption [ 188.406405][ T40] audit: type=1400 audit(188.331:22842): avc: denied { write } for pid=14340 comm="syz.7.2507" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 188.417436][T14209] hsr_slave_0: entered promiscuous mode [ 188.419749][T14209] hsr_slave_1: entered promiscuous mode [ 188.424229][T14341] IPv6: addrconf: prefix option has invalid lifetime [ 188.444626][T14347] 9p: Unknown Cache mode or invalid value fs [ 188.468483][ T60] bridge_slave_1: left allmulticast mode [ 188.470451][ T60] bridge_slave_1: left promiscuous mode [ 188.472685][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.477956][ T60] bridge_slave_0: left allmulticast mode [ 188.479814][ T60] bridge_slave_0: left promiscuous mode [ 188.481728][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.707812][ T60] gretap0 (unregistering): left promiscuous mode [ 188.928834][ T60] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 188.932274][ T60] bridge2 (unregistering): left promiscuous mode [ 189.353241][T14366] netlink: 360 bytes leftover after parsing attributes in process `syz.6.2514'. [ 189.415772][ T60] bond0 (unregistering): left promiscuous mode [ 189.418281][ T60] bond_slave_0: left promiscuous mode [ 189.420653][ T60] bond_slave_1: left promiscuous mode [ 189.428352][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.434343][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.440669][ T60] bond0 (unregistering): Released all slaves [ 189.535056][ T60] bond1 (unregistering): Released all slaves [ 189.605183][ T64] Bluetooth: hci0: command tx timeout [ 189.619099][ T60] bond2 (unregistering): Released all slaves [ 189.625538][ T60] bond3 (unregistering): Released all slaves [ 189.631830][ T60] bond4 (unregistering): Released all slaves [ 189.638488][ T60] bond5 (unregistering): Released all slaves [ 189.723953][ T60] bond6 (unregistering): Released all slaves [ 189.730388][ T60] bond7 (unregistering): Released all slaves [ 189.786514][T14369] netlink: 'syz.2.2516': attribute type 10 has an invalid length. [ 189.803254][T14369] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 189.897623][ T60] : left promiscuous mode [ 189.918624][T14376] bond1: Unable to set up delay as MII monitoring is disabled [ 189.922989][T14376] bond1 (unregistering): Released all slaves [ 189.938003][T14371] xfrm0 speed is unknown, defaulting to 1000 [ 189.942768][T14371] xfrm0 speed is unknown, defaulting to 1000 [ 189.946295][T14371] xfrm0 speed is unknown, defaulting to 1000 [ 190.044438][ T60] tipc: Disabling bearer [ 190.047776][ T60] tipc: Left network mode [ 190.089486][T14371] infiniband syz1: set active [ 190.091026][T14371] infiniband syz1: added xfrm0 [ 190.098174][T11808] xfrm0 speed is unknown, defaulting to 1000 [ 190.116442][T14371] RDS/IB: syz1: added [ 190.118526][T14371] smc: adding ib device syz1 with port count 1 [ 190.121436][T14371] smc: ib device syz1 port 1 has pnetid SYZ2 (user defined) [ 190.125946][ T1467] xfrm0 speed is unknown, defaulting to 1000 [ 190.130824][T14371] xfrm0 speed is unknown, defaulting to 1000 [ 190.133607][T14386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=14386 comm=syz.6.2519 [ 190.182761][T14390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2520'. [ 190.254648][T14371] xfrm0 speed is unknown, defaulting to 1000 [ 190.373773][T14209] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.380718][T14209] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.387250][T14209] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.397748][T14209] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.406101][T14371] xfrm0 speed is unknown, defaulting to 1000 [ 190.464697][T14209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.483230][T14209] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.490999][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.494076][ T6615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.503649][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.506707][ T6615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.537879][T14209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.563130][T14371] xfrm0 speed is unknown, defaulting to 1000 [ 190.652608][T14209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.665089][T14419] netlink: 'syz.6.2528': attribute type 1 has an invalid length. [ 190.669767][T14419] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 190.687299][T14209] veth0_vlan: entered promiscuous mode [ 190.698168][T14371] xfrm0 speed is unknown, defaulting to 1000 [ 190.701179][T14209] veth1_vlan: entered promiscuous mode [ 190.721862][T14209] veth0_macvtap: entered promiscuous mode [ 190.726634][T14209] veth1_macvtap: entered promiscuous mode [ 190.735436][T14209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.743496][T14209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.752459][ T6615] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.756477][ T6615] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.759960][ T6615] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.763209][ T6615] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.813043][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.816348][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.835711][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.839103][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.862601][ T40] audit: type=1400 audit(190.791:22843): avc: denied { write } for pid=14209 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 190.873606][ T40] audit: type=1400 audit(190.791:22844): avc: denied { open } for pid=14209 comm="syz-executor" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 190.898238][ T40] audit: type=1400 audit(190.831:22845): avc: denied { setopt } for pid=14426 comm="syz.7.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 191.695038][ T64] Bluetooth: hci0: command tx timeout [ 192.333915][ T60] hsr_slave_0: left promiscuous mode [ 192.337100][ T60] hsr_slave_1: left promiscuous mode [ 192.342288][ T60] veth1_macvtap: left promiscuous mode [ 192.344063][ T60] veth0_macvtap: left promiscuous mode [ 192.346010][ T60] veth1_vlan: left promiscuous mode [ 192.347716][ T60] veth0_vlan: left promiscuous mode [ 192.404450][ T60] pimreg (unregistering): left allmulticast mode [ 192.409422][ T40] audit: type=1400 audit(192.341:22846): avc: denied { net_admin } for pid=14157 comm="getty" capability=12 scontext=system_u:system_r:getty_t tcontext=system_u:system_r:getty_t tclass=capability permissive=1 [ 192.425414][ T60] pim6reg9 (unregistering): left allmulticast mode [ 192.454800][ T60] pimreg3 (unregistering): left allmulticast mode [ 192.771045][ T60] team0 (unregistering): Port device team_slave_1 removed [ 192.796900][ T60] team0 (unregistering): Port device team_slave_0 removed [ 192.911047][ T40] audit: type=1400 audit(192.841:22847): avc: denied { unmount } for pid=13916 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 193.015972][T14157] mkiss: ax0: crc mode is auto. [ 193.020337][T14461] netlink: 'syz.7.2537': attribute type 14 has an invalid length. [ 193.023596][T14468] sp0: Synchronizing with TNC [ 193.023876][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2537'. [ 193.040324][T14461] netlink: 'syz.7.2537': attribute type 14 has an invalid length. [ 193.041595][ T6612] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.043450][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2537'. [ 193.046699][ T6612] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.053392][ T6612] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.057191][ T6612] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.106143][T14471] netlink: 540 bytes leftover after parsing attributes in process `syz.7.2541'. [ 193.110956][T14471] comedi comedi3: c6xdigio: I/O port conflict (0x1006,3) [ 193.122457][T14471] veth1_macvtap: left promiscuous mode [ 193.124826][T14471] macsec0: entered promiscuous mode [ 193.127402][T14471] macsec0: entered allmulticast mode [ 193.134023][T14471] veth1_macvtap: entered promiscuous mode [ 193.136204][T14471] veth1_macvtap: entered allmulticast mode [ 193.138148][T14471] macsec0: left promiscuous mode [ 193.139937][T14471] macsec0: left allmulticast mode [ 193.142080][T14471] veth1_macvtap: left allmulticast mode [ 193.153847][ T40] audit: type=1804 audit(193.081:22848): pid=14473 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2542" name="/newroot/2/file0" dev="tmpfs" ino=31 res=1 errno=0 [ 193.156285][T14473] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 193.167664][T14473] ref_ctr increment failed for inode: 0x1f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888025cd2b00 [ 193.181677][T14472] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 193.193437][T14472] ref_ctr decrement failed for inode: 0x1f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888025cd2b00 [ 193.198613][T14472] uprobe: syz.0.2542:14472 failed to unregister, leaking uprobe [ 193.255670][ T60] IPVS: stop unused estimator thread 0... [ 193.311970][T14485] netlink: 'syz.0.2547': attribute type 3 has an invalid length. [ 193.315413][T14485] netlink: 'syz.0.2547': attribute type 1 has an invalid length. [ 193.320189][T14485] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2547'. [ 193.517218][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2553'. [ 193.656871][T14508] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20002 [ 193.768604][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2560'. [ 193.772209][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2560'. [ 193.776004][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2560'. [ 193.776172][ T64] Bluetooth: hci0: command tx timeout [ 193.779153][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2560'. [ 193.822631][T14526] overlayfs: failed to clone upperpath [ 193.852399][ T40] audit: type=1400 audit(193.781:22849): avc: denied { ioctl } for pid=14527 comm="syz.7.2563" path="socket:[57906]" dev="sockfs" ino=57906 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 193.913412][T14533] netlink: 'syz.7.2564': attribute type 4 has an invalid length. [ 194.073195][ T40] audit: type=1400 audit(194.001:22850): avc: denied { getopt } for pid=14537 comm="syz.7.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 194.112981][ T40] audit: type=1400 audit(194.041:22851): avc: denied { ioctl } for pid=14537 comm="syz.7.2567" path="socket:[61457]" dev="sockfs" ino=61457 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 194.179526][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.268896][ T40] audit: type=1400 audit(194.201:22852): avc: denied { module_load } for pid=14562 comm="syz.0.2573" path="/sys/kernel/notes" dev="sysfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 194.289983][T14561] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 194.309504][T14568] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2575'. [ 194.359233][T14575] netlink: 'syz.7.2578': attribute type 63 has an invalid length. [ 194.363672][T14575] gretap0: entered allmulticast mode [ 194.366874][T14575] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 194.387379][T14575] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 194.389772][T14575] UDF-fs: Scanning with blocksize 2048 failed [ 194.393421][T14575] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 194.396624][T14575] UDF-fs: Scanning with blocksize 4096 failed [ 194.411934][T14583] overlayfs: overlapping lowerdir path [ 194.503413][ T40] audit: type=1804 audit(194.431:22853): pid=14593 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.2582" name="bus" dev="ramfs" ino=61569 res=1 errno=0 [ 194.512275][ T40] audit: type=1804 audit(194.431:22854): pid=14593 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.2582" name="bus" dev="ramfs" ino=61569 res=1 errno=0 [ 194.540503][ T40] audit: type=1800 audit(194.471:22855): pid=14595 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2583" name="file0" dev="9p" ino=71827847 res=0 errno=0 [ 194.549808][ T40] audit: type=1400 audit(194.481:22856): avc: denied { unmount } for pid=13916 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 194.832428][T14606] usb usb8: usbfs: process 14606 (syz.2.2587) did not claim interface 0 before use [ 194.934921][T14617] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 194.980778][T14620] Bluetooth: hci1: Opcode 0x080f failed: -22 [ 194.987573][T14617] geneve0: entered promiscuous mode [ 195.028761][T14622] geneve2: entered promiscuous mode [ 195.030874][T14622] geneve2: entered allmulticast mode [ 195.221931][ T64] Bluetooth: hci0: Unable to find connection for big 0x00 [ 195.357239][T14662] xfrm0 speed is unknown, defaulting to 1000 [ 195.463232][T14666] netlink: 'syz.6.2601': attribute type 1 has an invalid length. [ 195.467278][T14666] netlink: 'syz.6.2601': attribute type 2 has an invalid length. [ 195.475672][T14668] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 195.476137][T14667] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 195.512136][T14663] xfrm0 speed is unknown, defaulting to 1000 [ 195.584770][T14684] bridge0: entered allmulticast mode [ 195.637238][T14692] QAT: failed to copy from user cfg_data. [ 195.637827][T14693] netlink: 'syz.6.2608': attribute type 11 has an invalid length. [ 195.845075][ T64] Bluetooth: hci0: command tx timeout [ 195.883343][T14708] orangefs_devreq_write_iter: failed to copy head. [ 196.023439][T14734] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2660 [ 196.108386][T14745] smc: net device bond0 applied user defined pnetid SYZ2 [ 196.137274][T14745] smc: removing net device bond0 with user defined pnetid SYZ2 [ 196.142670][T14745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.150679][T14745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.160400][T14745] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 196.170183][T14745] bond0 (unregistering): Released all slaves [ 196.244762][T14758] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 196.257513][T14760] Cannot find map_set index 65532 as target [ 196.589472][T14786] sch_tbf: burst 4398 is lower than device lo mtu (17233) ! [ 196.824421][T14812] xt_cgroup: xt_cgroup: no path or classid specified [ 196.831051][T14812] trusted_key: encrypted_key: insufficient parameters specified [ 196.910808][T14818] fuse: Bad value for 'fd' [ 196.931266][T14826] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 197.069493][T14843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14843 comm=syz.6.2652 [ 197.076515][T14845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14845 comm=syz.6.2652 [ 197.226616][T14860] netlink: 'syz.2.2658': attribute type 1 has an invalid length. [ 197.241494][T14860] smc: adding net device bond0 with user defined pnetid SYZ2 [ 197.251442][T14860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.282912][T14860] bond0: (slave ip6gretap1): making interface the new active one [ 197.287576][T14860] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 197.815889][T14882] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 198.284702][T14900] __nla_validate_parse: 12 callbacks suppressed [ 198.284718][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2670'. [ 198.292822][T14900] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 198.308489][T14902] netlink: 'syz.0.2672': attribute type 17 has an invalid length. [ 198.348397][T14909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.392333][T14902] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.394997][T14902] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.436441][T14916] SELinux: syz.7.2676 (14916) set checkreqprot to 1. This is no longer supported. [ 198.437092][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 198.437102][ T40] audit: type=1400 audit(198.371:22866): avc: denied { setcheckreqprot } for pid=14912 comm="syz.7.2676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 198.527196][T14902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.539685][T14902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.669739][ T6615] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.678871][ T6615] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.681774][ T6615] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.684762][ T6615] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.954973][ T7301] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 198.976119][T14941] futex_wake_op: syz.6.2686 tries to shift op by -1; fix this program [ 199.084955][ T7301] usb 12-1: device descriptor read/64, error -71 [ 199.240690][T14958] netlink: 536 bytes leftover after parsing attributes in process `syz.2.2691'. [ 199.244043][T14958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2691'. [ 199.281586][T14960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2692'. [ 199.281991][T14961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2692'. [ 199.289100][T14960] openvswitch: netlink: Flow key attr not present in new flow. [ 199.294789][T14961] openvswitch: netlink: Flow key attr not present in new flow. [ 199.345217][ T7301] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 199.430219][ T40] audit: type=1400 audit(199.361:22867): avc: denied { write } for pid=14964 comm="syz.2.2694" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 199.485049][ T7301] usb 12-1: device descriptor read/64, error -71 [ 199.543219][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2696'. [ 199.576242][ T40] audit: type=1326 audit(199.511:22868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14969 comm="syz.2.2696" exe="/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7fce1872b889 code=0x0 [ 199.595159][ T7301] usb usb12-port1: attempt power cycle [ 199.659136][ T40] audit: type=1400 audit(199.591:22869): avc: denied { setattr } for pid=14975 comm="syz.0.2698" name="ptyq5" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 199.669942][ T40] audit: type=1400 audit(199.591:22870): avc: denied { lock } for pid=14975 comm="syz.0.2698" path="/dev/ptyq5" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 199.934997][ T7301] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 199.955589][ T7301] usb 12-1: device descriptor read/8, error -71 [ 200.081146][T14995] tipc: New replicast peer: 255.255.255.255 [ 200.083656][T14995] tipc: Enabled bearer , priority 10 [ 200.100129][T14998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2706'. [ 200.195339][T15006] netlink: 'syz.6.2710': attribute type 2 has an invalid length. [ 200.214961][ T7301] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 200.244206][T15009] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2711'. [ 200.247861][ T7301] usb 12-1: device descriptor read/8, error -71 [ 200.324074][T15019] program syz.0.2714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.355463][ T7301] usb usb12-port1: unable to enumerate USB device [ 200.356957][ T40] audit: type=1400 audit(200.291:22871): avc: denied { getopt } for pid=15020 comm="syz.0.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.392919][T15025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2716'. [ 200.392934][T15026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2716'. [ 200.695007][ T40] audit: type=1400 audit(200.621:22872): avc: denied { write } for pid=15045 comm="syz.0.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 201.779468][T15099] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 201.789713][T15102] netlink: 'syz.2.2738': attribute type 1 has an invalid length. [ 201.818925][ T40] audit: type=1400 audit(201.751:22873): avc: denied { append } for pid=15101 comm="syz.2.2738" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 201.853618][T15102] bond1: (slave gretap1): making interface the new active one [ 201.857744][T15102] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 201.935164][T15114] overlayfs: failed to clone upperpath [ 202.090297][T15138] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 202.092602][T15138] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 202.097048][T15138] vhci_hcd vhci_hcd.0: Device attached [ 202.128954][T15147] binder: 15146:15147 ioctl 400c620e 200000000040 returned -22 [ 202.239777][T15163] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 202.313806][T15174] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 202.334987][ T40] audit: type=1400 audit(202.261:22874): avc: denied { mounton } for pid=15175 comm="syz.0.2764" path="/61/bus" dev="tmpfs" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 202.345004][T11810] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 202.349209][T15178] random: crng reseeded on system resumption [ 202.369844][ T40] audit: type=1400 audit(202.301:22875): avc: denied { mount } for pid=15181 comm="syz.0.2767" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 202.595884][T15203] 9pnet_fd: Insufficient options for proto=fd [ 202.670535][T15213] netlink: 'syz.0.2775': attribute type 1 has an invalid length. [ 202.916510][T15142] vhci_hcd: connection reset by peer [ 202.919627][ T6615] vhci_hcd: stop threads [ 202.921250][ T6615] vhci_hcd: release socket [ 202.923120][ T6615] vhci_hcd: disconnect device [ 203.269310][T15246] lo speed is unknown, defaulting to 1000 [ 203.271906][T15246] lo speed is unknown, defaulting to 1000 [ 203.275719][T15246] lo speed is unknown, defaulting to 1000 [ 203.286855][T15246] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 203.303246][T15250] team0: Device gtp0 is up. Set it down before adding it as a team port [ 203.322231][T15246] lo speed is unknown, defaulting to 1000 [ 203.327265][T15246] lo speed is unknown, defaulting to 1000 [ 203.331312][T15246] lo speed is unknown, defaulting to 1000 [ 203.335671][T15246] lo speed is unknown, defaulting to 1000 [ 203.483096][T15257] tmpfs: Bad value for 'mpol' [ 203.514668][T15265] __nla_validate_parse: 13 callbacks suppressed [ 203.514685][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2792'. [ 203.521303][T15265] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 203.522837][T15267] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2793'. [ 203.564428][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 203.564446][ T40] audit: type=1400 audit(203.491:22880): avc: denied { connect } for pid=15275 comm="syz.6.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.576119][ T40] audit: type=1400 audit(203.501:22881): avc: denied { read } for pid=15275 comm="syz.6.2796" laddr=172.20.20.10 lport=15230 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.681930][T15287] netlink: 'syz.7.2800': attribute type 1 has an invalid length. [ 203.699880][T15287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.724522][T15294] binder: 15293:15294 ioctl c01064c8 200000001440 returned -22 [ 203.794229][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2806'. [ 203.859358][T15310] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 204.024600][T15323] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2812'. [ 204.090587][T15338] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2816'. [ 204.094789][T15338] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2816'. [ 204.125238][T14541] mkiss: ax0: crc mode is auto. [ 204.144755][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2819'. [ 204.148061][T15346] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2819'. [ 204.153758][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2819'. [ 204.195314][ T40] audit: type=1400 audit(204.117:22882): avc: denied { unmount } for pid=13916 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 204.221669][ T40] audit: type=1400 audit(204.147:22883): avc: denied { ioctl } for pid=15350 comm="syz.2.2821" path="socket:[63805]" dev="sockfs" ino=63805 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 204.239285][T15351] gfs2: not a GFS2 filesystem [ 204.348056][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2825'. [ 204.461416][T15371] 9pnet_fd: p9_fd_create_tcp (15371): problem connecting socket to 127.0.0.1 [ 204.470541][T15371] 9pnet_fd: p9_fd_create_tcp (15371): problem connecting socket to 127.0.0.1 [ 204.477631][T15371] 9pnet_fd: p9_fd_create_tcp (15371): problem connecting socket to 127.0.0.1 [ 204.480832][T15373] cgroup: noprefix used incorrectly [ 204.483119][T15371] 9pnet_fd: p9_fd_create_tcp (15371): problem connecting socket to 127.0.0.1 [ 204.484505][T15373] sctp: [Deprecated]: syz.6.2830 (pid 15373) Use of int in max_burst socket option. [ 204.484505][T15373] Use struct sctp_assoc_value instead [ 204.488716][T15371] 9pnet_fd: p9_fd_create_tcp (15371): problem connecting socket to 127.0.0.1 [ 204.500410][T15371] 9pnet_fd: p9_fd_create_tcp (15371): problem connecting socket to 127.0.0.1 [ 204.507037][T15371] 9pnet_fd: p9_fd_create_tcp (15371): problem connecting socket to 127.0.0.1 [ 204.513707][T15371] 9pnet_virtio: no channels available for device 127.0.0.1 [ 204.582724][ T40] audit: type=1400 audit(204.507:22884): avc: denied { firmware_load } for pid=15370 comm="syz.2.2829" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 204.667754][T15371] syz.2.2829 (15371) used greatest stack depth: 19544 bytes left [ 204.730282][T15404] netlink: 'syz.2.2839': attribute type 1 has an invalid length. [ 204.764708][T15404] bond2: (slave gretap2): making interface the new active one [ 204.768444][T15404] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 204.775953][T15404] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.120095][T15434] xfrm0 speed is unknown, defaulting to 1000 [ 205.152282][T15436] binder: 15430:15436 ioctl c0306201 200000001040 returned -14 [ 205.213897][T15434] lo speed is unknown, defaulting to 1000 [ 205.358801][T15452] input: syz1 as /devices/virtual/input/input32 [ 205.421204][ T40] audit: type=1400 audit(205.347:22885): avc: denied { accept } for pid=15457 comm="syz.2.2854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 205.739052][T15467] xt_connbytes: Forcing CT accounting to be enabled [ 205.741999][T15467] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.082443][T15478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15478 comm=syz.7.2859 [ 206.284950][T15488] syz.7.2863: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 206.302834][T15490] trusted_key: encrypted_key: insufficient parameters specified [ 206.310922][T15492] random: crng reseeded on system resumption [ 206.404209][ T40] audit: type=1400 audit(206.327:22886): avc: denied { bind } for pid=15495 comm="syz.0.2866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 206.439551][T15500] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 207.156508][ T40] audit: type=1326 audit(207.087:22887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15493 comm="syz.7.2865" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470058f7c9 code=0x7fc00000 [ 207.436463][T11810] vhci_hcd: vhci_device speed not set [ 208.034332][T15532] sit0: entered promiscuous mode [ 208.044823][T15532] netlink: 'syz.2.2874': attribute type 1 has an invalid length. [ 208.058210][T15535] xfrm0 speed is unknown, defaulting to 1000 [ 208.152814][T15535] lo speed is unknown, defaulting to 1000 [ 209.228546][ T40] audit: type=1326 audit(209.157:22888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15541 comm="syz.6.2877" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db798f7c9 code=0x7fc00000 [ 209.328292][T15559] trusted_key: encrypted_key: insufficient parameters specified [ 209.376652][ T40] audit: type=1400 audit(209.307:22889): avc: denied { bind } for pid=15561 comm="syz.2.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 209.385098][ T40] audit: type=1400 audit(209.307:22890): avc: denied { listen } for pid=15561 comm="syz.2.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 209.388287][T15562] loop6: detected capacity change from 0 to 524279808 [ 209.445519][T15562] loop6: detected capacity change from 524279808 to 1 [ 209.448398][T15562] IPVS: set_ctl: invalid protocol: 44 172.20.20.12:21 [ 209.485772][ T40] audit: type=1400 audit(209.417:22891): avc: denied { bind } for pid=15565 comm="syz.2.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 209.742041][ T40] audit: type=1400 audit(209.667:22892): avc: denied { remove_name } for pid=15576 comm="syz.2.2887" name="file0" dev="9p" ino=71827847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.751092][T15577] netfs: Duplicate cookie detected [ 209.753461][T15577] netfs: O-cookie c=00000004 [fl=4000 na=0 nA=0 s=-] [ 209.754925][ T40] audit: type=1400 audit(209.667:22893): avc: denied { unlink } for pid=15576 comm="syz.2.2887" name="file0" dev="9p" ino=71827847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 209.756438][T15577] netfs: O-cookie V=00000008 [9p,syz,] [ 209.766662][T15577] netfs: O-key=[8] '8501480400000000' [ 209.768856][T15577] netfs: N-cookie c=00000005 [fl=8 na=0 nA=0 s=-] [ 209.771476][T15577] netfs: N-cookie V=00000008 [9p,syz,] [ 209.773710][T15577] netfs: N-key=[8] '8501480400000000' [ 210.624189][T15594] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 210.624433][T15595] overlayfs: missing 'workdir' [ 210.627087][T15594] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 210.634437][T15594] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 210.766632][ T40] audit: type=1326 audit(210.697:22894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.2.2889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1878f7c9 code=0x7fc00000 [ 210.776856][ T40] audit: type=1326 audit(210.697:22895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.2.2889" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fce1878f7c9 code=0x7fc00000 [ 210.787084][ T40] audit: type=1326 audit(210.697:22896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.2.2889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1878f7c9 code=0x7fc00000 [ 210.798298][ T40] audit: type=1326 audit(210.697:22897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15578 comm="syz.2.2889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1878f7c9 code=0x7fc00000 [ 210.844257][T15608] __nla_validate_parse: 9 callbacks suppressed [ 210.844272][T15608] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2897'. [ 210.850524][T15608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15608 comm=syz.7.2897 [ 212.645170][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 214.725262][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 215.215233][T15623] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2902'. [ 215.216836][T15622] random: crng reseeded on system resumption [ 215.219615][T15437] mkiss: ax0: crc mode is auto. [ 215.232552][T15623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2902'. [ 215.254159][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 215.254171][ T40] audit: type=1400 audit(215.177:22899): avc: denied { remount } for pid=15621 comm="syz.7.2901" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 215.891437][T15662] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2916'. [ 215.996371][T15672] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2919'. [ 215.996371][T15671] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2919'. [ 216.058898][T15675] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2921'. [ 216.219638][ T40] audit: type=1326 audit(216.147:22900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15640 comm="syz.2.2910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce1878f7c9 code=0x7fc00000 [ 216.277933][T15682] netlink: 'syz.2.2923': attribute type 11 has an invalid length. [ 216.281244][T15682] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2923'. [ 216.281546][T15684] program syz.0.2924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.297230][T15684] geneve3: entered promiscuous mode [ 216.299579][T15684] geneve3: entered allmulticast mode [ 216.303383][T13612] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 216.307562][T13612] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 216.311862][T13612] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 216.315767][T13612] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 216.334103][T15689] xt_ecn: cannot match TCP bits for non-tcp packets [ 216.377794][T15694] netlink: 'syz.2.2928': attribute type 3 has an invalid length. [ 216.381134][T15694] netlink: 'syz.2.2928': attribute type 1 has an invalid length. [ 216.502936][T15703] team0: Device gtp0 is up. Set it down before adding it as a team port [ 216.522648][T15686] sit0: entered promiscuous mode [ 216.526355][T15686] netlink: 'syz.7.2925': attribute type 1 has an invalid length. [ 216.528853][T15686] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2925'. [ 216.805019][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 216.883207][T15709] random: crng reseeded on system resumption [ 216.899374][T15711] bond1: Unable to set up delay as MII monitoring is disabled [ 216.902764][T15711] bond1 (unregistering): Released all slaves [ 217.142034][T15726] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 217.264600][ T40] audit: type=1326 audit(217.187:22901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15699 comm="syz.0.2931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50998f7c9 code=0x7fc00000 [ 217.272087][ T40] audit: type=1326 audit(217.187:22902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15699 comm="syz.0.2931" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe50998f7c9 code=0x7fc00000 [ 217.281021][ T40] audit: type=1326 audit(217.187:22903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15699 comm="syz.0.2931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50998f7c9 code=0x7fc00000 [ 217.291636][ T40] audit: type=1326 audit(217.187:22904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15699 comm="syz.0.2931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50998f7c9 code=0x7fc00000 [ 217.299818][ T40] audit: type=1326 audit(217.187:22905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15699 comm="syz.0.2931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50998f7c9 code=0x7fc00000 [ 217.354353][T15748] trusted_key: encrypted_key: insufficient parameters specified [ 217.397037][T15750] random: crng reseeded on system resumption [ 217.427893][ T6019] usb 12-1: new low-speed USB device number 8 using dummy_hcd [ 217.435796][T15745] nbd11: detected capacity change from 0 to 127 [ 217.441900][ T64] block nbd11: Receive control failed (result -32) [ 217.468906][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2950'. [ 217.474880][T15755] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2950'. [ 217.527414][ T40] audit: type=1400 audit(217.457:22906): avc: denied { search } for pid=15761 comm="syz.2.2953" name="/" dev="configfs" ino=2119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.535942][ T40] audit: type=1400 audit(217.457:22907): avc: denied { search } for pid=15761 comm="syz.2.2953" name="/" dev="configfs" ino=2119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.542934][ T40] audit: type=1400 audit(217.457:22908): avc: denied { search } for pid=15761 comm="syz.2.2953" name="/" dev="configfs" ino=2119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.577401][ T6019] usb 12-1: config index 0 descriptor too short (expected 1307, got 27) [ 217.580055][ T6019] usb 12-1: config 0 has an invalid interface number: 0 but max is -1 [ 217.582599][ T6019] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 217.586123][ T6019] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 217.589635][ T6019] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 217.592766][ T6019] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 217.600003][ T6019] usb 12-1: string descriptor 0 read error: -22 [ 217.602026][ T6019] usb 12-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 217.604817][ T6019] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.608505][ T6019] usb 12-1: config 0 descriptor?? [ 217.610605][T15733] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 217.613544][ T6019] hub 12-1:0.0: bad descriptor, ignoring hub [ 217.616093][ T6019] hub 12-1:0.0: probe with driver hub failed with error -5 [ 217.620006][ T6019] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input33 [ 217.706146][ T64] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 217.785583][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054da7800: rx timeout, send abort [ 217.868816][T15768] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 217.880105][T11807] usb 12-1: USB disconnect, device number 8 [ 217.955023][ T24] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 218.106578][ T24] usb 5-1: No LPM exit latency info found, disabling LPM. [ 218.110613][ T24] usb 5-1: config 1 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 218.115327][ T24] usb 5-1: config 1 interface 0 altsetting 16 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 218.119854][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 218.125258][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.40 [ 218.129216][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.132714][ T24] usb 5-1: Product: ࠚ [ 218.134528][ T24] usb 5-1: Manufacturer: 﫪햮꜆陹⢏貏뒐㹞틨희쁤鴉筻똩櫮蕈쥎ମᩂ┓뗎妵糯ﶉ缿鏼㳐瀂ꉘ凳譡锱㧖仂㏏໚綖὾ᶐᰐ栞 [ 218.141381][ T24] usb 5-1: SerialNumber: 繖淡Ѥ臱䚄紦乗蓻⺦㜱Ѷ焰ꀛ훸욘鳌ὼ [ 218.148185][T15766] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 218.151400][T15766] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 218.285651][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054da5800: rx timeout, send abort [ 218.289039][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054da7800: abort rx timeout. Force session deactivation [ 218.366829][ T24] usbhid 5-1:1.0: can't add hid device: -71 [ 218.369550][ T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 218.375320][ T24] usb 5-1: USB disconnect, device number 21 [ 218.418785][T15773] trusted_key: encrypted_key: insufficient parameters specified [ 218.706027][T15787] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2961'. [ 218.720406][T15787] bond1: Invalid ad_actor_system MAC address. [ 218.722485][T15787] bond1: option ad_actor_system: invalid value (255) [ 218.726352][T15787] bond1 (unregistering): Released all slaves [ 218.788771][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054da5800: abort rx timeout. Force session deactivation [ 218.852574][T15793] netlink: 'syz.6.2962': attribute type 1 has an invalid length. [ 218.918805][ C2] sr 2:0:0:0: [sr0] tag#28 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 218.922089][ C2] sr 2:0:0:0: [sr0] tag#28 CDB: opcode=0xde (vendor) de 89 0b b6 4d c9 [ 218.946379][T15799] bond1: option downdelay: invalid value (18446744073709551615) [ 218.949664][T15799] bond1: option downdelay: allowed values 0 - 2147483647 [ 218.955149][T15799] bond1 (unregistering): Released all slaves [ 219.062878][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2966'. [ 219.084120][T15807] trusted_key: encrypted_key: insufficient parameters specified [ 220.272203][T15852] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20001 [ 220.276867][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 220.276881][ T40] audit: type=1400 audit(220.207:22917): avc: denied { read } for pid=15851 comm="syz.7.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 220.423235][T15865] bridge4: entered promiscuous mode [ 220.425726][T15865] bridge4: entered allmulticast mode [ 220.428706][T15867] tipc: Enabling of bearer rejected, media not registered [ 220.510653][T15879] xt_connbytes: Forcing CT accounting to be enabled [ 220.513651][T15879] set match dimension is over the limit! [ 220.678837][T15886] netlink: 'syz.6.2996': attribute type 2 has an invalid length. [ 221.045254][T15909] kvm: kvm [15908]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4 [ 221.127642][T15914] trusted_key: encrypted_key: insufficient parameters specified [ 221.131640][ T40] audit: type=1400 audit(221.057:22918): avc: denied { read } for pid=15915 comm="syz.2.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 221.176728][ T40] audit: type=1326 audit(221.107:22919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15858 comm="syz.0.2985" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe50998f7c9 code=0x7fc00000 [ 221.243057][T15930] netlink: 'syz.6.3012': attribute type 1 has an invalid length. [ 221.264636][T15930] bond1: entered promiscuous mode [ 221.267212][T15930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.583288][ T40] audit: type=1400 audit(221.507:22920): avc: denied { bind } for pid=15944 comm="syz.2.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 221.745355][T15954] trusted_key: encrypted_key: insufficient parameters specified [ 221.792818][T15958] __nla_validate_parse: 11 callbacks suppressed [ 221.792835][T15958] netlink: 540 bytes leftover after parsing attributes in process `syz.2.3019'. [ 221.797561][T15956] x_tables: duplicate underflow at hook 3 [ 221.801748][T15958] comedi comedi3: c6xdigio: I/O port conflict (0x1006,3) [ 221.805302][T15958] ================================================================== [ 221.808745][T15958] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 221.812215][T15958] Read of size 8 at addr ffff88802d924a30 by task syz.2.3019/15958 [ 221.818160][T15958] [ 221.819241][T15958] CPU: 0 UID: 0 PID: 15958 Comm: syz.2.3019 Not tainted syzkaller #0 PREEMPT(full) [ 221.819291][T15958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.819304][T15958] Call Trace: [ 221.819310][T15958] [ 221.819317][T15958] dump_stack_lvl+0x116/0x1f0 [ 221.819355][T15958] print_report+0xcd/0x630 [ 221.819378][T15958] ? __virt_addr_valid+0x81/0x610 [ 221.819401][T15958] ? __phys_addr+0xe8/0x180 [ 221.819426][T15958] ? sysfs_remove_file_ns+0x63/0x70 [ 221.819446][T15958] kasan_report+0xe0/0x110 [ 221.819467][T15958] ? sysfs_remove_file_ns+0x63/0x70 [ 221.819489][T15958] sysfs_remove_file_ns+0x63/0x70 [ 221.819508][T15958] driver_remove_file+0x4a/0x60 [ 221.819540][T15958] bus_remove_driver+0x224/0x2c0 [ 221.819570][T15958] driver_unregister+0x76/0xb0 [ 221.819591][T15958] comedi_device_detach_locked+0x12f/0xa50 [ 221.819618][T15958] comedi_device_detach+0x67/0xb0 [ 221.819640][T15958] comedi_device_attach+0x43d/0x900 [ 221.819662][T15958] do_devconfig_ioctl+0x1b1/0x710 [ 221.819689][T15958] ? __mutex_lock+0x1c5/0x1060 [ 221.819708][T15958] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 221.819741][T15958] ? find_held_lock+0x2b/0x80 [ 221.819765][T15958] comedi_unlocked_ioctl+0x165d/0x2f00 [ 221.819788][T15958] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 221.819808][T15958] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.819831][T15958] ? do_vfs_ioctl+0x128/0x14f0 [ 221.819851][T15958] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 221.819872][T15958] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 221.819899][T15958] ? hook_file_ioctl_common+0x145/0x410 [ 221.819927][T15958] ? selinux_file_ioctl+0x180/0x270 [ 221.819946][T15958] ? selinux_file_ioctl+0xb4/0x270 [ 221.819966][T15958] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 221.819985][T15958] __x64_sys_ioctl+0x18e/0x210 [ 221.820011][T15958] do_syscall_64+0xcd/0xfa0 [ 221.820030][T15958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.820049][T15958] RIP: 0033:0x7fce1878f7c9 [ 221.820065][T15958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.820083][T15958] RSP: 002b:00007fce19672038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.820100][T15958] RAX: ffffffffffffffda RBX: 00007fce189e5fa0 RCX: 00007fce1878f7c9 [ 221.820114][T15958] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000005 [ 221.820126][T15958] RBP: 00007fce18813f91 R08: 0000000000000000 R09: 0000000000000000 [ 221.820139][T15958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.820151][T15958] R13: 00007fce189e6038 R14: 00007fce189e5fa0 R15: 00007ffe1f6afff8 [ 221.820169][T15958] [ 221.820175][T15958] [ 221.853660][T15959] veth1_macvtap: left promiscuous mode [ 221.853987][T15958] Allocated by task 15844: [ 221.856565][T15959] macsec0: entered promiscuous mode [ 221.858669][T15958] kasan_save_stack+0x33/0x60 [ 221.858694][T15958] kasan_save_track+0x14/0x30 [ 221.858711][T15958] __kasan_kmalloc+0xaa/0xb0 [ 221.860857][T15959] macsec0: entered allmulticast mode [ 221.862988][T15958] __kmalloc_noprof+0x32f/0x880 [ 221.863017][T15958] iter_file_splice_write+0x1cc/0x12e0 [ 221.863037][T15958] direct_splice_actor+0x192/0x6c0 [ 221.863052][T15958] splice_direct_to_actor+0x345/0xa30 [ 221.873211][T15959] veth1_macvtap: entered promiscuous mode [ 221.874154][T15958] do_splice_direct+0x174/0x240 [ 221.876726][T15959] veth1_macvtap: entered allmulticast mode [ 221.878704][T15958] do_sendfile+0xb06/0xe50 [ 221.881154][T15959] macsec0: left promiscuous mode [ 221.883744][T15958] __x64_sys_sendfile64+0x1d8/0x220 [ 221.886128][T15959] macsec0: left allmulticast mode [ 221.888146][T15958] do_syscall_64+0xcd/0xfa0 [ 221.889764][T15959] veth1_macvtap: left allmulticast mode [ 221.892227][T15958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.892250][T15958] [ 221.892253][T15958] Freed by task 15844: [ 221.892262][T15958] kasan_save_stack+0x33/0x60 [ 221.892280][T15958] kasan_save_track+0x14/0x30 [ 221.980545][T15958] __kasan_save_free_info+0x3b/0x60 [ 221.982663][T15958] __kasan_slab_free+0x5f/0x80 [ 221.984579][T15958] kfree+0x2b8/0x6d0 [ 221.986192][T15958] iter_file_splice_write+0x67a/0x12e0 [ 221.988365][T15958] direct_splice_actor+0x192/0x6c0 [ 221.990408][T15958] splice_direct_to_actor+0x345/0xa30 [ 221.992578][T15958] do_splice_direct+0x174/0x240 [ 221.994507][T15958] do_sendfile+0xb06/0xe50 [ 221.996311][T15958] __x64_sys_sendfile64+0x1d8/0x220 [ 221.998331][T15958] do_syscall_64+0xcd/0xfa0 [ 222.000126][T15958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.002490][T15958] [ 222.003622][T15958] The buggy address belongs to the object at ffff88802d924a00 [ 222.003622][T15958] which belongs to the cache kmalloc-256 of size 256 [ 222.009085][T15958] The buggy address is located 48 bytes inside of [ 222.009085][T15958] freed 256-byte region [ffff88802d924a00, ffff88802d924b00) [ 222.014580][T15958] [ 222.015666][T15958] The buggy address belongs to the physical page: [ 222.018355][T15958] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d924 [ 222.021872][T15958] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 222.025210][T15958] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 222.028342][T15958] page_type: f5(slab) [ 222.029944][T15958] raw: 00fff00000000040 ffff88801b442b40 0000000000000000 dead000000000001 [ 222.033529][T15958] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 222.037024][T15958] head: 00fff00000000040 ffff88801b442b40 0000000000000000 dead000000000001 [ 222.040666][T15958] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 222.044294][T15958] head: 00fff00000000001 ffffea0000b64901 00000000ffffffff 00000000ffffffff [ 222.047988][T15958] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 222.051624][T15958] page dumped because: kasan: bad access detected [ 222.054343][T15958] page_owner tracks the page as allocated [ 222.056767][T15958] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17881583055, free_ts 0 [ 222.064890][T15958] post_alloc_hook+0x1af/0x220 [ 222.066950][T15958] get_page_from_freelist+0x10a3/0x3a30 [ 222.069348][T15958] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 222.071916][T15958] alloc_pages_mpol+0x1fb/0x550 [ 222.074028][T15958] new_slab+0x24a/0x360 [ 222.075873][T15958] ___slab_alloc+0xd79/0x1a50 [ 222.077914][T15958] __slab_alloc.constprop.0+0x63/0x110 [ 222.080268][T15958] __kvmalloc_node_noprof+0x5aa/0x9c0 [ 222.082574][T15958] v4l2_ctrl_new+0x982/0x2190 [ 222.084594][T15958] v4l2_ctrl_new_std+0x1be/0x290 [ 222.086754][T15958] handler_new_ref+0x827/0xc60 [ 222.088774][T15958] v4l2_ctrl_add_handler+0x22a/0x310 [ 222.091053][T15958] vivid_create_controls+0x16ef/0x3e10 [ 222.093443][T15958] vivid_probe+0x515f/0xb890 [ 222.095475][T15958] platform_probe+0x106/0x1d0 [ 222.097467][T15958] really_probe+0x241/0xa90 [ 222.099446][T15958] page_owner free stack trace missing [ 222.101734][T15958] [ 222.102780][T15958] Memory state around the buggy address: [ 222.105203][T15958] ffff88802d924900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 222.108525][T15958] ffff88802d924980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 222.111962][T15958] >ffff88802d924a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.115396][T15958] ^ [ 222.117798][T15958] ffff88802d924a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.121208][T15958] ffff88802d924b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 222.124639][T15958] ================================================================== [ 222.131372][T15958] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 222.134361][T15958] CPU: 0 UID: 0 PID: 15958 Comm: syz.2.3019 Not tainted syzkaller #0 PREEMPT(full) [ 222.138170][T15958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 222.142646][T15958] Call Trace: [ 222.144044][T15958] [ 222.145325][T15958] dump_stack_lvl+0x3d/0x1f0 [ 222.147265][T15958] vpanic+0x640/0x6f0 [ 222.148923][T15958] panic+0xca/0xd0 [ 222.150607][T15958] ? __pfx_panic+0x10/0x10 [ 222.152521][T15958] ? sysfs_remove_file_ns+0x63/0x70 [ 222.154745][T15958] ? preempt_schedule_common+0x44/0xc0 [ 222.157138][T15958] ? preempt_schedule_thunk+0x16/0x30 [ 222.159447][T15958] check_panic_on_warn+0xab/0xb0 [ 222.161590][T15958] end_report+0x107/0x170 [ 222.163464][T15958] kasan_report+0xee/0x110 [ 222.165368][T15958] ? sysfs_remove_file_ns+0x63/0x70 [ 222.167592][T15958] sysfs_remove_file_ns+0x63/0x70 [ 222.169743][T15958] driver_remove_file+0x4a/0x60 [ 222.171806][T15958] bus_remove_driver+0x224/0x2c0 [ 222.173907][T15958] driver_unregister+0x76/0xb0 [ 222.175998][T15958] comedi_device_detach_locked+0x12f/0xa50 [ 222.178468][T15958] comedi_device_detach+0x67/0xb0 [ 222.180613][T15958] comedi_device_attach+0x43d/0x900 [ 222.182824][T15958] do_devconfig_ioctl+0x1b1/0x710 [ 222.185010][T15958] ? __mutex_lock+0x1c5/0x1060 [ 222.187044][T15958] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 222.189400][T15958] ? find_held_lock+0x2b/0x80 [ 222.191428][T15958] comedi_unlocked_ioctl+0x165d/0x2f00 [ 222.193726][T15958] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 222.196234][T15958] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 222.198685][T15958] ? do_vfs_ioctl+0x128/0x14f0 [ 222.200743][T15958] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 222.202893][T15958] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 222.205809][T15958] ? hook_file_ioctl_common+0x145/0x410 [ 222.208168][T15958] ? selinux_file_ioctl+0x180/0x270 [ 222.210419][T15958] ? selinux_file_ioctl+0xb4/0x270 [ 222.212630][T15958] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 222.215127][T15958] __x64_sys_ioctl+0x18e/0x210 [ 222.217191][T15958] do_syscall_64+0xcd/0xfa0 [ 222.219138][T15958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.221652][T15958] RIP: 0033:0x7fce1878f7c9 [ 222.223557][T15958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.231703][T15958] RSP: 002b:00007fce19672038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.235241][T15958] RAX: ffffffffffffffda RBX: 00007fce189e5fa0 RCX: 00007fce1878f7c9 [ 222.238590][T15958] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000005 [ 222.241918][T15958] RBP: 00007fce18813f91 R08: 0000000000000000 R09: 0000000000000000 [ 222.245354][T15958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.248689][T15958] R13: 00007fce189e6038 R14: 00007fce189e5fa0 R15: 00007ffe1f6afff8 [ 222.252052][T15958] [ 222.254162][T15958] Kernel Offset: disabled [ 222.256060][T15958] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:13:24 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85296a55 RDI=ffffffff9addb7c0 RBP=ffffffff9addb780 RSP=ffffc9002074f3a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000064 R14=ffffffff9addb780 R15=ffffffff852969f0 RIP=ffffffff85296a7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fce196726c0 ffffffff 00c00000 GS =0000 ffff8880d6a05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fce18775440 CR3=000000002a546000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce18815050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce1881505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce18815057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce1881506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce188150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce188151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce189ba4a8 00007fce189ba4a0 00007fce189ba498 00007fce189ba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce1951d100 00007fce189ba460 00007fce189ba478 00007fce189ba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce189ba4b8 00007fce189ba4b0 00007fce189ba4a8 00007fce189ba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff81617576 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc9000da4fed8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=00000000000000e6 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bce2c0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556205c500 ffffffff 00c00000 GS =0000 ffff8880d6b05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b32d15ff8 CR3=000000003c7e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000001 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00c2904c565d91ef bec754ea9232cd6d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe509a15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe509a1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe509a15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe509a1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe509a150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe509a151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 371666579d51d8eb 83828eefc3dd2378 65fcd7a8a1080000 0000000001bfb134 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ebea37166657 9d51d8eb83820004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a108000000000000 01bfb1340882f647 bc2a1e4c2480b94c 88c7b0af3092545a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100238001002880 00002c8003003000 000000307a797300 0100090000000032 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a79730002000900 0000010000000000 00000002010a0c00 00005c0400000040 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300081f00000040 0500080000000030 7a79730001000900 000000327a797300 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200090000000040 0a00080000000100 0000000000000004 010a090000004400 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000377cd09c RBX=0000000000000001 RCX=000000003a1844ac RDX=000000003a1844ac RSI=00000000528dab9e RDI=ffff888047345458 RBP=ffff888047344900 RSP=ffffc9000e78f3e8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888047345430 R13=ffff888047345458 R14=000000000eaabced R15=0000000000000001 RIP=ffffffff8198aa7c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c261e94 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000003 DR1=fffffffffffffffd DR2=000000000000007f DR3=0000000080000001 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe13c5fb60 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4700615050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f470061505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4700615057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f470061506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47006150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47006151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 732064616200786c 6c36313025783000 657a697320780004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5605414447005d49 49131415005d1500 405f4c56055d404d 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a442700 RCX=ffffffff81b0db51 RDX=ffff88801da84900 RSI=ffffffff81b0db2b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900000f7878 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=ffffed100d4884e1 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81b0db37 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d05000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2d1007 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000007 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8a695480 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5db7a15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5db7a1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5db7a15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5db7a1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5db7a150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5db7a151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000b 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000104c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000b 0000000000000000 0000000000000000 00000000000104c0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000