last executing test programs: 1m49.867533338s ago: executing program 1 (id=325): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000500)={0x7, 0x80, 0x3, {0x2, @raw_data="e605ef05667ca8ddfbfce9a728824443114fc16a6977da387f4fc56af04ff8d82f2e09f7fc5ccd9d8d7f7d1e9cb6e197643a468b3b8c39b29b5b87076f3342dff0c21dfc0f7c7a13f71440fb7ec92c1fab8b7c6b4acb6c0525b4d5a2f9ff64120f88f62d3539e6a92175d57f937ac2a13e4e67244f02fa22e15125db953d0f20c206d16a977026c01e228218d8ef3c8ccc5d5681f761026d195d49e798a75c001c63d3daaeaaa21f27f4f9aca2e0179359d0200deac3850401ba7229f2ee793f315472339009ef6c"}, 0x3}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x7}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='map_files\x00') getdents64(r3, &(0x7f0000000140)=""/162, 0xa2) (async) getdents(r3, 0x0, 0x0) (async) recvmsg(r1, &(0x7f0000000380)={&(0x7f0000000600)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000680)=""/261, 0x130}], 0x37, 0x0, 0x0, 0xf5ffffff}, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x189) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000007c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_null}], [{@uid_eq}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}) (async) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, 0x0, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) (async) r6 = socket$alg(0x26, 0x5, 0x0) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, 0x0) chdir(&(0x7f0000000100)='./file0\x00') (async) open(0x0, 0x101bff, 0x0) (async) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000) (async) fcntl$setlease(r7, 0x400, 0x2) (async) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept$alg(r6, 0x0, 0x0) 1m49.756270785s ago: executing program 1 (id=327): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket(0x23, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x89ee, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000300000000000000a138000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff8, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) fremovexattr(r0, &(0x7f0000000100)=@known='security.selinux\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 1m49.701551736s ago: executing program 1 (id=329): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x400, @loopback={0xff00000000000000}, 0xff}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000002900010089e6ecfab1869fd6bbfb2f9c72317ec9dc9c7c22c0b11ed6002757465dc1ee2f79311343d2fc57f84a885eb66a87d506db056f6a"], 0x18}}], 0x1, 0x800) 1m49.700948496s ago: executing program 1 (id=330): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x6, 0xd, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x320, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000040)={'wlan0\x00'}) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) r2 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) setpgid(0x0, r2) (async, rerun: 32) r3 = syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) (async) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000300), 0x2, 0x0) (async, rerun: 64) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000240)) (rerun: 64) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) 1m49.621645728s ago: executing program 1 (id=331): unshare(0x26000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="1200000007"], 0x10) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='ntfs3\x00', 0x221000d, 0x0) 1m49.360856062s ago: executing program 1 (id=341): r0 = socket$netlink(0x10, 0x3, 0x1) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1m49.304526769s ago: executing program 32 (id=341): r0 = socket$netlink(0x10, 0x3, 0x1) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1m0.031852689s ago: executing program 4 (id=1068): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1c2725e7", 0x5}, {&(0x7f0000000040)="6137b3b52fb2da11d40a0f108f463b5a90a6f4ad85768a50418d10c02287a5f047d3d8353cfa8b0bd64ab78f570f244784e04928633e5fe260568d514cd0d706dd3c79bf0d6859fa5c9aef378eb34d531585bbc404688d61ff9709c9e17bc9fe66ba7ab833c1a2064c845456fa3c2f519fecb2b136f89dfc0649ced027699a59d490100397c622b60aef098d5a59ed4e29c9dc353a1fc9d0f0ed970862dfa5f99b6320260e2eef23efdb5fd43ff661fd", 0xb0}, {&(0x7f0000000100)="85ab339a0608cb748e8bfca543cd188b1119c33dbe2a00812e0a947510d0", 0x1e}], 0x4}, 0x4000000) 59.970912611s ago: executing program 4 (id=1070): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x80) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000008000000000000000", @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="30673d4e9540992b0d010083988ed1686845fd3e08b3954ccb21bc81d7f77538a7006fdfcac42bfa1940a19a8292cf6057ded3dfe65eb846d77360bb16e0ba942bb178758c514bf01762fbb133e2e8d274bcb7a9f6fc1844a9429337fc46128729e952a6a1beca5b50f1f50e00a9023ccace41c1dd815f60960c6d4be6725e23e617a242cfa4a10bcbc517602c4878929bc3b7ee548caf5b0d573f8dc5e292bceea1b4f710cd5125ad0c7d01", @ANYBLOB="03000000010005f70115000000000000000000000000000002000000"], 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000100)=0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000640)={'gretap0\x00', r2, 0x700, 0x8, 0x0, 0x6, {{0x1d, 0x4, 0x2, 0x3b, 0x74, 0x65, 0x0, 0x7f, 0x4, 0x0, @local, @remote, {[@timestamp={0x44, 0x20, 0x47, 0x0, 0x4, [0x2, 0x4, 0x80000001, 0x7fff, 0xffff, 0x2f6, 0x10]}, @timestamp={0x44, 0x28, 0x48, 0x0, 0x9, [0x80, 0x9e0f, 0x800, 0x4, 0x6, 0xff, 0xc75e, 0x9, 0x4362]}, @rr={0x7, 0x17, 0xbe, [@dev={0xac, 0x14, 0x14, 0x37}, @broadcast, @private=0xa010100, @local, @empty]}, @noop]}}}}}) sendmsg$inet(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x18}, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r5, 0x8, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3ff, 0x9, 0x10, 0x2200, 0x1, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0xa, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x13, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x400, 0x8b, &(0x7f0000000240)=""/139, 0x41100, 0x71, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x2, 0xfffffff7, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff, r5, r6], &(0x7f0000000500)=[{0x3, 0x4, 0xb}, {0x5, 0x3, 0x4, 0xb}, {0x0, 0x2, 0xb, 0x9}, {0x1, 0x5, 0x6, 0x4}, {0x2, 0x3, 0x9, 0x1}, {0x3, 0x3, 0x8b44, 0xa}, {0x1, 0x2, 0x5, 0x9}, {0x6, 0x1, 0x4, 0x7}], 0x10, 0x9, @void, @value}, 0x94) 59.901230349s ago: executing program 4 (id=1072): r0 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x2000) (async) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004000000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 59.832818776s ago: executing program 4 (id=1074): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000000) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x0, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x100, 0x0, 0xd, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, r2, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x26, 0x10001, 0x12007646, 0x0, 0x0, 0x0, 0x3}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x2, {{0xffffffffffffffff, 0x0, 0x0, 0x10000000000, 0xfffffffb, 0x0, {0x0, 0x7fff, 0x6, 0xffff, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x8000, 0x0, 0x0, 0xee01, 0xfffffffd}}}}, 0x0, 0x0}) sigaltstack(&(0x7f0000000040)={0x0, 0x80000002}, 0x0) r3 = gettid() r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setlease(r4, 0x400, 0x0) rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 56.658790441s ago: executing program 4 (id=1105): unshare(0x100) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000080)={0x80000000, 0x0, &(0x7f00000000c0)=[{{0x80000000}, {0x80000000}}, {{0x80000000, 0x0}}]}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x44, r6, 0x511, 0x70bd2a, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}]}, 0x44}}, 0x0) (async) r7 = syz_open_procfs(r4, &(0x7f0000000040)='net/ip6_flowlabel\x00') ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000200)={{r1, r3, 0x3, [0x6, 0x1]}, {r2, r3, 0x1, [0xfffffff7, 0x9]}, 0x2, [0x5, 0x80000000]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000140)={{}, @hyper, 0x8, 0x9, 0x100000001, 0x2, 0x7, 0x22a, 0x10001}) 55.661814474s ago: executing program 4 (id=1116): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 55.623199359s ago: executing program 33 (id=1116): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 45.609440228s ago: executing program 0 (id=785): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a3200000000050004000100000005000100060000000c0007800800134000000000050005000a000000100003"], 0x54}}, 0x20004010) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x1, 0x0, 0x2, 0x8001}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302d75"], 0x15) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28011, r3, 0xaae46000) r4 = dup(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x70}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000000000000e7ffffff00000000000000d69879a4fced77f6969db5e37fbd7242cd6afb98aee2556f0d1bdf4ea46647", @ANYRES32=r8, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r9, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r10, 0x0, &(0x7f0000000400)=""/160}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r12, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r12, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r12, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) 37.847817953s ago: executing program 0 (id=785): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a3200000000050004000100000005000100060000000c0007800800134000000000050005000a000000100003"], 0x54}}, 0x20004010) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x1, 0x0, 0x2, 0x8001}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302d75"], 0x15) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28011, r3, 0xaae46000) r4 = dup(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x70}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000000000000e7ffffff00000000000000d69879a4fced77f6969db5e37fbd7242cd6afb98aee2556f0d1bdf4ea46647", @ANYRES32=r8, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r9, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r10, 0x0, &(0x7f0000000400)=""/160}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r12, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r12, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r12, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) 31.185884244s ago: executing program 0 (id=785): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a3200000000050004000100000005000100060000000c0007800800134000000000050005000a000000100003"], 0x54}}, 0x20004010) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x1, 0x0, 0x2, 0x8001}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302d75"], 0x15) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28011, r3, 0xaae46000) r4 = dup(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x70}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000000000000e7ffffff00000000000000d69879a4fced77f6969db5e37fbd7242cd6afb98aee2556f0d1bdf4ea46647", @ANYRES32=r8, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r9, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r10, 0x0, &(0x7f0000000400)=""/160}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r12, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r12, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r12, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) 22.417627425s ago: executing program 0 (id=785): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a3200000000050004000100000005000100060000000c0007800800134000000000050005000a000000100003"], 0x54}}, 0x20004010) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x1, 0x0, 0x2, 0x8001}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302d75"], 0x15) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28011, r3, 0xaae46000) r4 = dup(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x70}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000000000000e7ffffff00000000000000d69879a4fced77f6969db5e37fbd7242cd6afb98aee2556f0d1bdf4ea46647", @ANYRES32=r8, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r9, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r10, 0x0, &(0x7f0000000400)=""/160}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r12, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r12, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r12, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) 12.329253976s ago: executing program 0 (id=785): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a3200000000050004000100000005000100060000000c0007800800134000000000050005000a000000100003"], 0x54}}, 0x20004010) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x1, 0x0, 0x2, 0x8001}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302d75"], 0x15) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28011, r3, 0xaae46000) r4 = dup(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x70}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000000000000e7ffffff00000000000000d69879a4fced77f6969db5e37fbd7242cd6afb98aee2556f0d1bdf4ea46647", @ANYRES32=r8, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r9, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r10, 0x0, &(0x7f0000000400)=""/160}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r12, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r12, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r12, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) 5.807470622s ago: executing program 5 (id=1664): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = eventfd2(0x100, 0x800) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)="eebd73c460f8a4a8", 0x8}, {&(0x7f0000000100)="dda136dfb2938c66", 0x8}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="5f5f717068a47cba6a62f9ffa823354f", 0x10}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x4000000) recvmsg(r3, &(0x7f000000b680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f000000b4c0)=""/4, 0x4}, {&(0x7f000000b500)=""/151, 0x97}, {&(0x7f0000000440)=""/251, 0xfb}], 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') readv(r4, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) r5 = syz_open_dev$cec(&(0x7f00000008c0), 0x0, 0x80) ioctl$CEC_ADAP_G_PHYS_ADDR(r5, 0x80026101, &(0x7f0000000900)) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) alarm(0x3) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x14, r6, 0x100, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0xa810}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) eventfd2(0x100, 0x800) (async) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)="eebd73c460f8a4a8", 0x8}, {&(0x7f0000000100)="dda136dfb2938c66", 0x8}], 0x2) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async) accept(r2, 0x0, 0x0) (async) sendmmsg$alg(r3, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="5f5f717068a47cba6a62f9ffa823354f", 0x10}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x4000000) (async) recvmsg(r3, &(0x7f000000b680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f000000b4c0)=""/4, 0x4}, {&(0x7f000000b500)=""/151, 0x97}, {&(0x7f0000000440)=""/251, 0xfb}], 0x3}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') (async) readv(r4, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) (async) syz_open_dev$cec(&(0x7f00000008c0), 0x0, 0x80) (async) ioctl$CEC_ADAP_G_PHYS_ADDR(r5, 0x80026101, &(0x7f0000000900)) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) (async) alarm(0x3) (async) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x14, r6, 0x100, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0xa810}, 0x0) (async) 5.722829792s ago: executing program 5 (id=1666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES8=r0], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.722275535s ago: executing program 5 (id=1667): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) 5.004554813s ago: executing program 0 (id=785): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a3200000000050004000100000005000100060000000c0007800800134000000000050005000a000000100003"], 0x54}}, 0x20004010) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x1, 0x0, 0x2, 0x8001}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302d75"], 0x15) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28011, r3, 0xaae46000) r4 = dup(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x70}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000000000000e7ffffff00000000000000d69879a4fced77f6969db5e37fbd7242cd6afb98aee2556f0d1bdf4ea46647", @ANYRES32=r8, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r9, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r10, 0x0, &(0x7f0000000400)=""/160}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r12, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r12, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r12, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) 3.726525986s ago: executing program 5 (id=1668): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x800000000000001) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) socket$kcm(0x29, 0x2, 0x0) (async) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r3, r4}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000280)={r8, 0x1, 0x7, 0x4, &(0x7f0000000100)=[{0x6, 0x2006, 0x26af, 0x2040}, {0x400, 0x7, 0x9, 0x4}, {0x1, 0x7f, 0xef03, 0x52d}, {0x10, 0x0, 0x800, 0x3}]}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000000000000060027000500000008001d00090000000800010006"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 3.723081196s ago: executing program 3 (id=1670): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) clock_nanosleep(0x5, 0x1, &(0x7f00000002c0)={0x0, 0x989680}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r4, 0x1, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r5, r2, 0x4, r2}, 0x10) r6 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000700)=[@release], 0x0, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket(0x200000000000011, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x70bd2f, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x45b260d7, 0x4, 0x3, 0x7fff, 0x1}, 0x1, r9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8050) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r12, 0xae03, 0xea) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000a0d000/0x3000)=nil], &(0x7f0000000240), &(0x7f0000000340), 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r7) syz_usb_connect(0x1, 0x237, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0xd8, 0xc8, 0x5b, 0x10, 0x8ca, 0x2060, 0x9011, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x225, 0x1, 0xa6, 0xb1, 0x60, 0x0, [{{0x9, 0x4, 0x54, 0x9, 0x9, 0x32, 0x4f, 0x89, 0x57, [@generic={0xf7, 0x3, "a94496c1324e2c6207a9c8f3812e590233b1166c54c29135c64ae4ba6741155b3696c031bb975dc25cb1cf5d3098021eb3407e9fcbdaa6f393317875010776710c8d94d9c7fa014c19a94e5479860a3a9c84fbaa20f4afea3dc92aee076045c8de80765d7f918c034002f99078cb8989e3eecfb50fc922547e4c5fad02714bcf2b68478b52ffd8b5615ff584b3ba9716d9af2555ed804b394ed8b3e40d84c6f53c426b6dc87afa79c37cdfc90f91065320c0c24ae413e7379deffb87850d96ac54230d1d95fba3173755acb5d648160369082885ce293509658167d44842ee31cc4b4a79880d60788be1bd652399e1f559b43e3dd0"}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "8c1f1c4ea4"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x3ff}, [@dmm={0x7, 0x24, 0x14, 0x661, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x763, 0x3, 0x47, 0x3, 0x0, 0x4}]}], [{{0x9, 0x5, 0x8, 0x3, 0x0, 0x3, 0x0, 0x9, [@generic={0x56, 0x5, "0f50013ecedba1ef2c875016e5e7390c836700197e7342a317fe403794bcf9dcf2b16a015fed8c880d08987bf538114148e2601a76d4291704db50d05dd9dee27230acff0fe90092e029518fceaf62cb35d4a6da"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0xfa, 0x9, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0xc000}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x1, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x9, 0x3, 0x9, [@generic={0x1c, 0x0, "f318a9fe4af8a29669958509dfbad377edc0c010b1d0eab533f4"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0xeb, 0x7d, 0x8}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x7, 0xf0, 0xb2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x7, 0x5, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x588059bb1eac3b7b, 0xb3, 0x9}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x6, 0xff, 0x4a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb4, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x7, 0x82, 0x2}}]}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x4, 0xe, 0x2, 0x58}, 0x53, &(0x7f0000000100)={0x5, 0xf, 0x53, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0xa3, 0x5, 0x3ff, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x5, 0x10, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xc, 0x2, 0x9}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc0, 0x2b, 0x9, 0xa, 0xa}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x7, 0xf, 0x2, [0x28, 0xffc000, 0x0, 0x0, 0xff00cf, 0xa03f]}]}, 0x5, [{0x6, &(0x7f0000000080)=@string={0x6, 0x3, 'D[MP'}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3a}}]}) 418.137773ms ago: executing program 2 (id=1676): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0xa0, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x6, 0x1, 0x34}, @flat=@handle={0x73682a85, 0xdb1e805e6e0394af, 0x1}, @flat=@binder={0x73622a85, 0x1e, 0x2}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0x20a, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}, @acquire], 0x3f, 0x0, &(0x7f00000003c0)="efdb92b5108cfca85a21efd17b93d71cd751376928d1c9e5d0feea8b6e0bfd995f4e2b6d0a8e2c0514806827ffff68342e5efcf5d3c1495d447203cfb18805"}) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x42040800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x2004c010) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a40)={0x9c, 0x0, &(0x7f0000000940)=[@decrefs={0x40046307, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000640)={@fda={0x66646185, 0x9, 0x1, 0x2e}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/177, 0xb1, 0x2, 0x21}, @flat=@handle}, &(0x7f00000006c0)={0x0, 0x20, 0x48}}}, @release={0x40046306, 0x2}, @register_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000880)={@ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/199, 0xc7, 0x2, 0x12}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000800)=""/121, 0x79, 0x1, 0x5}}, &(0x7f0000000900)={0x0, 0x28, 0x40}}}], 0x4, 0x0, &(0x7f0000000a00)="856a5a36"}) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000a80)={'macvtap0\x00', 0x4}) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x23b000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x1ac, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_DATA={0x6d, 0x1f, "ae6abc4a744bbf9ee8d93ace2ee1a5e9322948d89f57b98de6c9c7f73502e1ac54061af29608beb659bf763627b6704573103769d5df47de1a4e7d8bf6220921ec01afaeead0a4535c9cefe4b148d0e9cdfc10a2e53df89dd628f0cd977be517736b220790df95225a"}, @NFC_ATTR_VENDOR_DATA={0x27, 0x1f, "d3eeb668b02889ed665113aac78e1fc42c7e30e567725ac909cdb1889bfca135eff63d"}, @NFC_ATTR_VENDOR_DATA={0xf0, 0x1f, "404eaab7f85c5313c3bf610045723e175b40b22a7f66233cc0524cc860528d4dd1201a0e880fc7ae51df6ec27161f25b5cb8070969274dfa620b232ea894a4a69ee53510e51ace40043e82bc3a8bc0ff4c46d371be23a979433a081b57e7fad58329094d895a13c4823a2d3ad496723861689ef3af36bce094355db9a160050e5954b5ddf39aef4de8204653a94b31406f0e9a0cbeb90b6b88344df7e2b1eadb65b018c34059e8a0d0cc9cd1b7d3b46e74a794d978d174990ec588b7b40ab1699d7b6a219f5884e25ce4faddc24c25ad08a8e633a7d55423ae8218df3981dc3782520254cf7a8ab710c4eeaa"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x10001}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x8}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000d80), 0x100000, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) r4 = socket$l2tp(0x2, 0x2, 0x73) close(r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{r2}, &(0x7f0000000ec0), &(0x7f0000000f00)=r2}, 0x20) syz_open_dev$usbfs(&(0x7f0000000f80), 0x2, 0x121000) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1c, 0x5, 0x6, 0xffffff19, 0x14800, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x0, @void, @value, @value=r2}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000010c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x370, 0x278, 0x278, 0x198, 0x370, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, &(0x7f0000001040), {[{{@ip={@rand_addr=0x64010101, @loopback, 0xffffff00, 0xffffffff, 'batadv_slave_1\x00', 'ip6gretap0\x00', {}, {0xff}, 0xff, 0x1, 0x18}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x25}, @multicast1, 0xff000000, 0x0, 'veth0_to_bridge\x00', 'veth1\x00', {}, {}, 0x0, 0x3, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x6}}}, {{@ip={@loopback, @multicast1, 0xffffffff, 0xff, 'veth0\x00', 'macvlan1\x00', {0xff}, {}, 0x2f, 0x0, 0x4}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x6, 0x20004], 0x1}}, @common=@addrtype={{0x30}, {0x84, 0x452, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x7}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x7f}}, @common=@addrtype={{0x30}, {0x2, 0x830, 0x0, 0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x558) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001680), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x14, r5, 0x4, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x60) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000001780)={0x1, 0x0, 0x2, 0x6, {0x1, 0x10040, 0xcc, 0x9}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001800), r2) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001840)={0x0, @initdev, @multicast1}, &(0x7f0000001880)=0xc) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000018c0)={@private0, 0x0}, &(0x7f0000001900)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000019c0)={'ip6tnl0\x00', &(0x7f0000001940)={'ip6gre0\x00', 0x0, 0x4, 0x20, 0x7f, 0x0, 0x1d, @private1, @private1, 0x10, 0x1, 0x20, 0x1}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000001ac0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x80, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x14000044}, 0x4051) socket(0x2, 0x5, 0x61) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000001cc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001b40)={0x124, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xca4f1c7cd0abbfd2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc1bab5ccb2420117}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000040) 417.787723ms ago: executing program 2 (id=1677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x48}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89b1, &(0x7f0000000040)={'bond0\x00', @ifru_map={0x1, 0x8, 0x9, 0x6, 0x9, 0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x48, r4, 0x1, 0x70bd30, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x20, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) (async) socket$netlink(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000040)) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x4d) getdents(r7, 0x0, 0x0) (async) lseek(r7, 0x101, 0x1) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0xfffffffffffffebd, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000a15cad8ae3ffe6b043276470dc3344e1d14090f43426f08cbdc80c91c3d4a98c3f9728003d90e342f2cc191728f0fcfd7f401d3ad503ad879af74b12e744a657de434304699a151a27d5b6349da666b6cce6a685e2e3ca9fe75dc0ff3ce6", @ANYRES16=r9, @ANYBLOB="000200000000030000000900000000003b0018e73a10"], 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x2, 0x21}]}, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) syz_open_dev$dri(&(0x7f00000001c0), 0xe6, 0x100) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000100001040400000000000000000000fa", @ANYRES32=0x0, @ANYBLOB="03050000000000003800128009000100766c616e00000000280002801c0003800c00010001000080ffffff7f0c0001000100008000080000060001000300000008000500", @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 417.63211ms ago: executing program 2 (id=1678): r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x7ff, 0x4, 0x0, 0x1}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4040000}, 0x10) 410.554082ms ago: executing program 5 (id=1679): socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) r0 = syz_usbip_server_init(0x2) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000084) getsockname$unix(r0, &(0x7f00000000c0), &(0x7f00000001c0)=0x6e) (async, rerun: 32) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00') lseek(r1, 0x4, 0x1) read$FUSE(r1, &(0x7f0000002680)={0x2020}, 0x2020) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="894400008800040010001280080001006772650004000280"], 0x30}}, 0x20000800) (async) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) 406.149339ms ago: executing program 2 (id=1680): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000e40)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400), 0x200001, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0585611, &(0x7f0000000200)={0x8, 0x6, 0x0, "6e05d674b4a000000000000000000000000000000000000000000000002000", 0x4745504a}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x3a0, 0x0, 0x250, 0xffffffff, 0x188, 0xe0, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x300, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) mount(0x0, 0x0, 0x0, 0x400, &(0x7f0000000280)='-#\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0xa081, 0x10, 0x3, 0x259}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, 0x0, 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000240)=[0x10000, 0x7], 0x2) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, &(0x7f00000000c0)=']', 0x1, 0x6, 0x75, 0x6, 0x8, 0x79, 0x0}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "2474000000000da1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5005f500", "7c5cec21291a43fe"}, 0x38) 405.092717ms ago: executing program 3 (id=1681): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) recvfrom(r2, &(0x7f0000000040)=""/33, 0x21, 0x10163, &(0x7f0000000280)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3a) socket$inet6_sctp(0xa, 0x5, 0x84) 334.920955ms ago: executing program 2 (id=1682): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040005, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) membarrier(0x40, 0x0) close(r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="380000002c00010000000000f9000700080000005071de8577ff56ab1a19dc053f338faddc9b1f002fa05355909d627b3ce6733c2c5fe7475ea041f82f01000000000000003efd2c39260d307895c01749bdb937f1811076a0359197256bbe5801c775fedc0e893868c93eaa21d5eec66b6929ff387b1587864245c9c78a0c2a9b7a90c4845e4afa7e6c5db3ee09e3416bd875113974f9fc056e84a7b21217f75b60ddbeadcaa3bee28e8f54a9acb7fe13c0fd3ceffeabba08d3e5df", @ANYRES32=r5, @ANYBLOB="0b000080976b6408686030001400018010002700d847b0d44ca7ba9b542be6ce"], 0x38}], 0x1}, 0x4) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) read(r6, &(0x7f00000002c0)=""/147, 0x93) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl(r2, 0x8b1a, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040005, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) (async) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) membarrier(0x40, 0x0) (async) close(r0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0xa) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="380000002c00010000000000f9000700080000005071de8577ff56ab1a19dc053f338faddc9b1f002fa05355909d627b3ce6733c2c5fe7475ea041f82f01000000000000003efd2c39260d307895c01749bdb937f1811076a0359197256bbe5801c775fedc0e893868c93eaa21d5eec66b6929ff387b1587864245c9c78a0c2a9b7a90c4845e4afa7e6c5db3ee09e3416bd875113974f9fc056e84a7b21217f75b60ddbeadcaa3bee28e8f54a9acb7fe13c0fd3ceffeabba08d3e5df", @ANYRES32=r5, @ANYBLOB="0b000080976b6408686030001400018010002700d847b0d44ca7ba9b542be6ce"], 0x38}], 0x1}, 0x4) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) (async) read(r6, &(0x7f00000002c0)=""/147, 0x93) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) ioctl(r2, 0x8b1a, &(0x7f0000000040)) (async) 334.202114ms ago: executing program 5 (id=1683): io_setup(0x30, &(0x7f0000000600)=0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c010000160001000000000000060000fe8000000000000000000000000000bbff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14142c000000000000000000000000000000006c000000ac1414aa0000000000000000000000000000010000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000400000000000000000000000000000000000000000000000600000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000022000000000000000000000032"], 0x11c}}, 0x0) recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2020, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="01", 0x24}]) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x29, 0x0, 0x0) r4 = gettid() r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000240)=0x3, &(0x7f0000000280)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r6, 0xa, 0x12) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r8, 0x7) accept4$x25(r8, 0x0, 0x0, 0x80800) poll(&(0x7f0000b2c000)=[{r7}], 0x2c, 0xffffffffffbffff8) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000002c0)=0x4, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001e0001000000000000000000020000000000000800ca11dd"], 0x1c}}, 0x0) dup2(r6, r7) fcntl$setown(r6, 0x8, r4) tkill(r4, 0x13) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}}, 0x0) 333.335312ms ago: executing program 3 (id=1684): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000008001000040000000800000001000000", @ANYRES32, @ANYBLOB="d1dce2d250c185cd827489903233ef4b0000400000000024b50000100000000000ffffffff00075d1e073c6f4e377054510a5d9b650575bbec8ed2c5c5a1e5b6ca0882e26ff9131a2c5efeda7bca0151df951774ea6d6c7633811bf236c4001ddb8cf7ab438abf0ee4154d47ec94b60e741b169cde0b83000000b2b77912710f94fcfbce4310e7857a1bc56629ebdad07a503fbd801f922dcaa0d0b8bbbd3873b63657d8287d2cd43ad61959acc53e977f010e557018526f12d9394ac1c1cf7f4350ad2bb25933a8aa942862e9b945c1a3bacb01ca0f1609f557a3c3bd06835800ccfb1235c88f143a3b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 258.130193ms ago: executing program 2 (id=1685): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x334) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', 0x0, 0x294dcf7, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 257.847013ms ago: executing program 3 (id=1686): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x9, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0x0, 0x1c, 0x5, 0x2, 0x4d, 0x2, 0xf9, 0x3, 0x80, 0x9, 0x8000000000000000}, {0x6, 0x80, 0x8, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0xff, 0x0, 0x7d}, {0xe2a5, 0xd, 0x1, 0x9, 0x2, 0x6, 0x8, 0x8, 0xff, 0x6, 0x56, 0x7, 0x100}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x100000000004, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.547783ms ago: executing program 3 (id=1687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f00000007c0)=0x9, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f0000001c40)=[{&(0x7f0000002380)=""/165, 0xfffffffffffffea7}], 0x1, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}, {{&(0x7f0000002300)=@xdp={0x2c, 0x9, 0x0, 0x18}, 0x80, &(0x7f0000002680)=[{&(0x7f00000025c0)="1270af9323ad15364e2af6c555d16d0a0bc54efe9132aa9693ec5564011d57d74d7e6b962c77c1926f3e658167d6584c67f1a5b050c0c6fe7696024b3612681a673598b47edeb211cb9d0f2939e48f484a4239a17415acbc50661fb1b4212a96fcc2e74266f74171bc1f619ae427237b515c5faeb22fad961a55132de0d5534568c8cc37d3e142a82083400266a2a35ad64cda52b9fb2a0751820c62a42b624a3bc3eb0d5443406765964af166089695056d6f30f3", 0xb5}], 0x1, &(0x7f00000026c0)=ANY=[@ANYBLOB="30000000000000000a010000f90000009ec64fe522c4b62a17bbf785fbdb1f39a8a4bb6e2db37df7889d4a8a00000000e8000000000000000a0100000000000018097d75993fe11e0a1674cbdfadaa567ce2de2cfd3d9d430fa070f47721cb0e71ac33ab0118dfabbb45475464f267ba4fdfd2329de8c4ab07cac1b1d7eeb0c3f65b869def675f6fc5b5bf2a04736978ae68deb7fe3bda06b338aac57946f131b1084dfd6891639b241108e7fcbeb244f7c04bfed3e07570f2b8e4484100e68ac8a449d025bce4023f36c238386de465cd4be7604f0920a2b21ab5a3583fda6a797d0af24d3b9c880d57c32142c3859dc74d5010fbb97f864c82eb5aba7a7de38d7962000000000000280000000000000013010000db9b00009f67e3bdeae5ef563d81e260fa4e3dcafe1ca60bafad00"/320], 0x140}}], 0x2, 0x9200000000000000) recvmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16d77a653d25995b"]) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x4, @broadcast, 'batadv_slave_1\x00'}}, 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) sched_setscheduler(0x0, 0x0, &(0x7f0000001c80)=0x5) ioctl$PPPOEIOCSFWD(r7, 0x80047453, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'caif0\x00'}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002dc0)=ANY=[@ANYRES32=r0, @ANYRESDEC=r3, @ANYBLOB="0000fa5e1817e34d3234a6d2cfb5000000000000400012800c000100b4b52df446ab423c300002800800010010000000100005a10a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r9], 0x68}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r9, {0x2}}}, 0x24}}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg(r3, &(0x7f0000002240)=[{{&(0x7f0000000100)=@generic={0x9, "b02da9fe8b195ce7c8759b656eb8d2c69e9b4f4fcdcc71cc950562b5c8e7af31dc0de5077d480f91907fb203e09d88010cf7781a7db90fd206016f33d0fe6ae58bcef3eb21883934556c26e14a22c93aca0184e671d5d314cf57f5c7d02395fa9b8ba3526e33f8f673acbe373e7b04ed1a98c98e136401b3c193fe06d4a1"}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000180)="986aa432f1af6cc603fb6ac4ba797734ed50a54a8539d0e8c842db701e84c885de1d81bb1469e25a60030c0df255071f20ae1a5a292bf229c349c2620b0dbaab26d51c18ce433bb2aee19f96279c454bf202d3cc77efe9be68fe2058550769496728b0e077fee17b301d87abe3bbf63b39ebeef3e5", 0x75}, {&(0x7f0000000200)="69fcb46a94790e9970e57ee2da0172034fc9e1bf1b8e897f0ffe1eb46c50513a38fb01ab3fae01b77d3c4310898643effb9b0de9b3016b623f015639761e0e51dd702b6fcb8972e54c321d77c6e2c1884f6acf9d92fdc53c0e0140eef6d23189f43950d5ee2ae2b4e419cc8092e9f18e1cea367463dd8e301595d2372ecde031139c69d6b685be3fc31f5118b9d722b79e122e8467fe1d1abff2eee46816ef951adf13cb3de870d6d6c855363474432afc", 0xb1}, {&(0x7f00000002c0)="50cd088bd518c8570a41ad408b84bde675c69ee34aacfd173804d6033fd0527a7541bca73e2f57f55315a2ae03dcab60369b578d5cf252b9b3d85d0a635786808327cae1bf09ae726a6f13075b2c0ae76a1ede298fa2781857e82293fb505a13df953adb76913d522e534f98fe08d4d3337f58221266f473edac95c3b6826a9b99f84f3c0b08ac5f9c5a9b4550d2a77523fa9c77acb9f4d11f980417458667998a224b5a322ba260b9db30fa2754924e4dc0a6c4c7275d27b66c6d97f7ac0b16", 0xc0}, {&(0x7f0000000380)="3182b18a9816984ba7570399685170c395ae5ea563c8ae7fe412b1246ae3aefed8bc7d2f231eba4655889d7d131036f1083c472b2339d43dd0e03ca84e963e6d5747ab9b69058b690bfb20ff495bdc715afa0910becab7ffe57f0689ab000e902cf7aeaeb0d9cb03ddd7e1bf5a2c50b65412e36148a5bfdba6a9", 0x7a}, {&(0x7f0000001480)="d9add044dd023dd8f383c1264d3ec8a5054baca8ff41c4c3db4dca740b673afd3d713dfed7aafca1434912e5dcbdb26520994060b093a90c966905fe7a9e9efc6f78cb4a24e6326c62d66afdc1d6dabfa30241b765bce9235e7dd5cb63d77e8b311a36d6629a", 0x66}, {&(0x7f0000001500)="4a4a6e14f9f1fb1298bcbc40b00d7c622bde7fc30814aedcd740b5c2e6dbc97808a6a693f9584bc47541f76dc5c2141e5a88474264ec4c6abcd3029704971b82d6005c543d20eff455934a0bdaf4f606df4396c0583a1010d573ff097c3622f56b5e32093012977878f35270142c2e53f71a85f531946327ea0c86efcc403e8babe91381e8dd4030be4d534c48c66788fc83a1f0056526584a6b764701c7c95f9454f685bd38de4e4a84a60c3239714c36aebe909cfe19720dd782c0c898cf04898e56f8c84eafc3dc5587abd5c134a61a4d52b52e3827a6dd417f900789fc21381808da26fed598c705273d77a0e545c0e1ce5548575ee66d", 0xf9}, {&(0x7f0000002440)="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", 0x158}, {&(0x7f0000001700)="fdb542a9de90e65af6e368d18bd1876387046e0d5d81734ebd53084c3659869b00a9f72433758865785d325363f1502ebbfcdec2767b8cd883680be32a7a", 0x3e}], 0x8, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], 0x1e8}}, {{&(0x7f00000019c0)=@xdp={0x2c, 0x7, r9, 0x13}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001a40)="09b6ad51b87f8f268ca2e3bb024e370e7f1a8d0c942bf7ef37c3232ed14c2832d261e60e2dfc525da6c941832b119105ef6080781c2cf7a3ce8fae93b1f56fc999372af2d1acd7a252a4", 0x4a}, {&(0x7f0000001ac0)="bd788b7501b0f845abf95cdf4febcc183a1a44b171fc9d7dcfbcf25d46659f609b80d238af9d0650942db5d0b8d16fbefe54e355a60a0116410373a52d35620a5124bb30a146d3711607a13f375199bc4f284b3a5fb9", 0x56}, {&(0x7f0000001b40)="796f3350cb178e9c37bf8c16ce01ae261ba15c837de8d62c6101bb382ffb42b0b3ec5ce60b068b306a51217b4f44b6bd4da71809d95a451269480fd1561bd50eac516c2c60dd1cb3be933e4af993c2a3cbb1ad84f59cf5cf2c38d8e4e40f9be88dffd638c14e7eb8d4040ba75e95576e9732c555828b10a893c7e4128444cca7970abebfcc67d96dee201b91de69fad097fcf9912cc5fe01dfbe497707ed4a2486ae3e95169b5875737440c26735f535ec28b0e41a286d3757c39abbd360e6a95eabf6ba75caf01267a7be8dda673cdb7add2ed6ed39bcaa9040ce13bbb40380ea5f4ea2", 0xe4}, {&(0x7f0000001640)="44fd204342a3b0577a528589aaecc9e0bcc31c6bf0f2d00ab78c360eb16419692be27b5efc75ca44ad578d1d3c10beffbcc93209fd1cadd6fb23fa9efa07c1c7a55e39600e74e79f3812e78908ea17be0b7675c2a2ea1f76cf830cb09e47d5d74194c087edda6389863e6ed97eeb138e49b7b732f6d4326e34cd5d4a51e8", 0xfffffffffffffd59}, {&(0x7f0000001cc0)="4bff3be0ad09f9b4f8d108177e9061c14387b65623ffd359a89b9e4bacc265b68ca70b19391aa1d208a85a706bfa64191f504487ad97c2a1c358460cac87a6b3c3347d310a0319a9948cb2d867524899", 0x50}, {&(0x7f0000001d40)="30bfc7de56c3a855abbc9a2da3a945afe07a18", 0x13}, {&(0x7f0000001d80)="ab3da24008bf7c2bee131f", 0xb}], 0x7}}, {{&(0x7f0000001e40)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xffb0, 0x1}, 0x80, &(0x7f0000002200)=[{&(0x7f0000001ec0)="3921a66f59194a4eaf80a14f8bd7e1fa24b8eefd3605c5cf0e97576d34745d2f1ca432bf4f43865833391d1be8377b03136b85f97e7c54846f94ec5b993a98eefc5b6312755cbf7b7033b75ecdf5f26716de2cb90ef7103b6d5e9021c021b87936481754d8dad4316ccee91cabaf84e1202a4bdfe374065a7101af04b22ac527792c05c3e997b4b650edd7118864", 0x8e}, {&(0x7f0000001f80)="30dd268474770dc321efbca34dcaed07feb913afe6a0d64c86956e94fb45fb3fdbaa9cb38b1f15d0b5851a4f533fb65486d6f469ce8b26e687e439cfd6d38b788cdab8454a7ae8d205888e544bc907182d78cdfabb5b150dcb2489836a8e4cb721cd4d1fb1c40a6c2aea626d940e24e857553a81c2b405395fcbe70e96d8fb8b33b3d234581a290df8f7a93cd5fb67a9624d04988e7b39444e59bfa32aaa4957cd", 0xa1}, {&(0x7f0000002040)="bc7ade1ccdf4f07ccee1daae0a26fac36f8fbb2b2e21c6c2d61613cb2a31504b32064fbc3f467213d176dcc6658180886f3c0d5cb1a034d2179c0a07bff2041eb982984ed7bedbecb56711172edcaff84d9fe9d6d0fd6ccde433c344260200e6e435aebe12b47d70c2c58bb288cf16386bfe80f8dbdffa3319106dd727748997bb963f1e215ed3dd6d79300ecd256254e5b1e6651bb4c0fbfd5c396b4c58de0be85fede8290f9a8ff2d5a7e521287904f10de09f5fad93a88e666bda20d5d33d66b6c02f2d1b6811310251ed7a7a1459cb396abd305e6793779728ce7ce40713e815fd9e789cdf17", 0xe8}, {&(0x7f0000002140)="524edc087ef1f348cdb63ea78ab6ee53a8b50e8ba7d9973ab56f3d6cde58af06c221602a685e61c0b6faf6bd5808ac7b701d230f41d988d3f534d3bdce2664503472998b6a9681b5cf5d8ed24af4cc9a95b562b7854e3f4aa4b41ed5a93047b9af3a7f4247a512b5d16bf3a61368b87b7d9c275b2c4dd10e7ec32b97a666d22f1ea738785da55fa5e275718272622adc6adf41de0d48a76cdf88fc9f1cec9247b5ef7c4d636ced020d083e0983614e995b59ac09d75b", 0xb6}], 0x4, &(0x7f0000002880)=[{0xd0, 0x102, 0xaeb, "9fb0dac03b97ff0c3076d7c247aced7cffd0018e1c50e1727b6e6a943384b9de3c0246c59baf63562c412c98172d9f79e0091f424aaebbd32eecaea4714dd69f0ffb8483b16bb5ea59d5432c072153f9dac54d564493f353be06802183084603efa406d9f9c0d76ca46727906e80dc2d68ceeaa05c6351662c95d3c558a4d1f5dec133c11be153a622ef83e745cee385c08eaec707cba8465c76fde2b9fb4600878399fe73c2ff537a9e86398767fec2832e83c65c6f75f5436785a397ebca"}, {0x70, 0x113, 0x4, "4ff884ab63f51be529e88453e93ef041eb5fca4d4956031d80bccfb7b9f79a07a8f39a06e6043bd9cbe32abeea7365c83709a556764417f3e581ed4b1e8369fb6971f626ab6e5dc28f3dab5ac598e3ffa6d87f17ecfdf7abe1"}, {0x60, 0x118, 0x8000, "1d5b23a598791cdd873b0f52fb6c13515f4625d40345ac180c9a3807837c36358cf724931e415e8b913ef76ba50b1260d97925fbe9ec2159bf992756f4c06ffcc31ed121420af2dabd92e2a1a4c84b15"}, {0xa0, 0x2ddfec266d6902d3, 0x0, "fa11b7cd6b8de6f27d3acfa032afb05d743d5ff0c3c0d6cd8d44ed6f91819699052b0c6e61d5dd3b3df2d66b511aaf5a3dc0e764f0c660823a297983b4772170b384a8b3d8c5528ffe31105d5815d10dae10f3da621a2c19c57973fc33792084d4a5a4a3e5188c93fbb73c556600ff72a7d486ea3b3f189bd6a7cd71f7937765f002f09335f22785c3da1f7c2854"}, {0xe8, 0x113, 0xf0, "3312b00d85a102c24084e6c8bf59dc80a881a63cfd399542112c81372e532a6361ae1bda6b77e295bb5bd2c75375475b453bee06d1ee730a4849f93cd5e567b75f2b1d4e8f0268013e1793881131db08424cca5e9cc7292d5bdbae9facfe0ae36dd0a6611e1cea2bfacf44412c1eb86849f7c3c408d63d9f8205a30b9de17700ec3a551d0886a0a1458143bd9a9c1be3898062e4409d1a26ae14b564c4824117ec9642bebf1782cd2f67401d2f2f6dda86dcd51ba4b74479dd4d84cea314c2bf4cf1b0ff38c1919656c2bee7dabac88c803fa4"}, {0xb0, 0x113, 0x2, "0f2cf92afe55ba7b9df9e05beee9fec3471f9c033ce6ecd6dfea9399db5df1fb24c262640eeae5cebda7f109b88d3290a1367abbb766994c75e3ed220ad2301ec2765d3c78385f3497403e36ab33673b692df6478c6d054dd13f199e60b2490c6b682cdd33870c893beadc7c3e6fa5ab32a7f7f40b86e2e672010fdabe2e808609ddbc9192b6bd3eef5c084b261cfebd0722af7ce6ed83e85a2b3c2666e296a1"}, {0x38, 0x84, 0x56, "ff3bd99794060b1e2d98e0ae477d0b475093a39713c216cd75a1bca3dac4701b6f83b1"}], 0x410}}], 0x3, 0x4000000) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 0s ago: executing program 3 (id=1688): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0xfffffffd}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="2a003300d0000000ffffffffffff08021100000150505050505000400404000002fe76060405190003000000"], 0x48}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x1790) kernel console output (not intermixed with test programs): mode [ 125.683383][ T9665] bridge_slave_0: entered promiscuous mode [ 125.688614][ T9665] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.691687][ T9665] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.694686][ T9665] bridge_slave_1: entered allmulticast mode [ 125.698409][ T9665] bridge_slave_1: entered promiscuous mode [ 125.746045][ T9665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.750711][ T9665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.792151][ T9705] tipc: Cannot configure node identity twice [ 125.802351][ T9665] team0: Port device team_slave_0 added [ 125.807751][ T9665] team0: Port device team_slave_1 added [ 125.814566][ T40] audit: type=1400 audit(526991.733:619): avc: denied { mount } for pid=9704 comm="syz.3.1076" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 125.824633][ T9705] TCP: out of memory -- consider tuning tcp_mem [ 125.841201][ T40] audit: type=1400 audit(526991.763:620): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 125.855690][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.857860][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.867629][ T9665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.867911][ T9708] binder: 9707:9708 ioctl c0306201 200000000240 returned -14 [ 125.872811][ T9665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.876683][ T9665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.884965][ T9665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.941235][ T9665] hsr_slave_0: entered promiscuous mode [ 125.943501][ T9665] hsr_slave_1: entered promiscuous mode [ 125.946081][ T9665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.948461][ T9665] Cannot create hsr debugfs directory [ 126.011797][ T40] audit: type=1400 audit(526991.933:621): avc: denied { connect } for pid=9716 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.063047][ T9719] loop6: detected capacity change from 0 to 524287999 [ 126.066208][ T6591] buffer_io_error: 7 callbacks suppressed [ 126.066217][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.071347][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.073853][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.076605][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.079104][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.081775][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.084266][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.086949][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.089393][ T6591] ldm_validate_partition_table(): Disk read failed. [ 126.091461][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.093907][ T6591] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.096937][ T6591] Dev loop6: unable to read RDB block 0 [ 126.099508][ T6591] loop6: unable to read partition table [ 126.106016][ T9719] ldm_validate_partition_table(): Disk read failed. [ 126.109226][ T9719] Dev loop6: unable to read RDB block 0 [ 126.112012][ T9719] loop6: unable to read partition table [ 126.115375][ T9719] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 126.122744][ T6696] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.200249][ T6696] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.246048][ T9726] siw: device registration error -23 [ 126.271074][ T6696] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.455122][ T6696] bridge_slave_1: left allmulticast mode [ 126.457018][ T6696] bridge_slave_1: left promiscuous mode [ 126.458906][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.467164][ T6696] bridge_slave_0: left allmulticast mode [ 126.469005][ T6696] bridge_slave_0: left promiscuous mode [ 126.471601][ T6696] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.613372][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 126.813368][ T6696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.817702][ T6696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.821364][ T6696] bond0 (unregistering): Released all slaves [ 126.856395][ T9746] mkiss: ax0: crc mode is auto. [ 126.968791][ T40] audit: type=1400 audit(526992.893:622): avc: denied { accept } for pid=9752 comm="syz.2.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.031045][ T40] audit: type=1400 audit(526992.953:623): avc: denied { create } for pid=9754 comm="syz.3.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 127.190542][ T63] Bluetooth: hci2: command tx timeout [ 127.254047][ T40] audit: type=1400 audit(526993.173:624): avc: denied { mount } for pid=9766 comm="syz.2.1094" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 127.398962][ T9665] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.406019][ T9665] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 127.418694][ T6696] hsr_slave_0: left promiscuous mode [ 127.420922][ T6696] hsr_slave_1: left promiscuous mode [ 127.422894][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.425793][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.428936][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.431466][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.466990][ T6696] veth1_macvtap: left promiscuous mode [ 127.468813][ T6696] veth0_macvtap: left promiscuous mode [ 127.470994][ T6696] veth1_vlan: left promiscuous mode [ 127.473141][ T6696] veth0_vlan: left promiscuous mode [ 127.816048][ T9803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1104'. [ 128.438259][ T6696] team0 (unregistering): Port device team_slave_1 removed [ 128.554656][ T6696] team0 (unregistering): Port device team_slave_0 removed [ 129.096798][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 129.099732][ T9806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1106'. [ 129.265676][ T63] Bluetooth: hci2: command tx timeout [ 129.287469][ T9665] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.292607][ T9665] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.326251][ T9810] syzkaller1: entered promiscuous mode [ 129.328536][ T9810] syzkaller1: entered allmulticast mode [ 129.402217][ T9665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.411718][ T9665] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.432832][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.436015][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.440719][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.443201][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.446402][ T9825] overlayfs: failed to resolve './file0': -2 [ 129.474487][ T9665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.479243][ T9665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.568094][ T40] audit: type=1400 audit(526995.492:625): avc: denied { relabelfrom } for pid=9844 comm="syz.3.1115" name="NETLINK" dev="sockfs" ino=33146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.578974][ T40] audit: type=1400 audit(526995.492:626): avc: denied { relabelto } for pid=9844 comm="syz.3.1115" name="NETLINK" dev="sockfs" ino=33146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 129.603445][ T9665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.650394][ T9665] veth0_vlan: entered promiscuous mode [ 129.661305][ T9665] veth1_vlan: entered promiscuous mode [ 129.696299][ T9665] veth0_macvtap: entered promiscuous mode [ 129.700317][ T9665] veth1_macvtap: entered promiscuous mode [ 129.716629][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.722479][ T9665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.728579][ T9849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=9849 comm=syz.3.1118 [ 129.735020][ T9665] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.738052][ T9849] netlink: 'syz.3.1118': attribute type 1 has an invalid length. [ 129.738465][ T9665] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.743423][ T9665] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.746297][ T9665] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.760443][ T9849] 8021q: adding VLAN 0 to HW filter on device bond4 [ 129.814516][ T6692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.817506][ T6692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.840543][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.847430][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.851399][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.856422][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.864420][ T9854] sctp: [Deprecated]: syz.2.1120 (pid 9854) Use of int in max_burst socket option. [ 129.864420][ T9854] Use struct sctp_assoc_value instead [ 129.867771][ T9859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9859 comm=syz.3.1121 [ 129.870074][ T6696] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.874377][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.887912][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.893313][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.904056][ T9862] tipc: Can't bind to reserved service type 2 [ 129.908099][ T40] audit: type=1400 audit(526995.832:627): avc: denied { mounton } for pid=9665 comm="syz-executor" path="/syzkaller.wr0bGh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=32189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 129.980215][ T6696] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.054427][ T6696] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.061510][ T9856] vxcan1 speed is unknown, defaulting to 1000 [ 130.130192][ T6696] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.251181][ T9856] chnl_net:caif_netlink_parms(): no params data found [ 130.315590][ T6696] bridge_slave_1: left allmulticast mode [ 130.317571][ T6696] bridge_slave_1: left promiscuous mode [ 130.320093][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.328309][ T6696] bridge_slave_0: left allmulticast mode [ 130.330788][ T6696] bridge_slave_0: left promiscuous mode [ 130.333246][ T6696] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.482630][ T6696] gretap0 (unregistering): left promiscuous mode [ 130.513760][ T6696] dvmrp1 (unregistering): left allmulticast mode [ 130.584493][ T9876] fuse: Unknown parameter 'roo' [ 130.645160][ T63] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 130.671971][ T9883] openvswitch: netlink: Geneve opt len 245 is not a multiple of 4. [ 130.862339][ T6696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.866653][ T6696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.870200][ T6696] bond0 (unregistering): Released all slaves [ 130.964611][ T6696] bond1 (unregistering): (slave veth3): Releasing active interface [ 130.968317][ T6696] vlan2: entered promiscuous mode [ 130.972603][ T6696] bond1 (unregistering): (slave vlan2): Releasing active interface [ 130.977970][ T6696] bond1 (unregistering): Released all slaves [ 131.076238][ T9899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1133'. [ 131.101371][ T6696] tipc: Left network mode [ 131.101640][ T9856] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.106624][ T9856] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.110071][ T9856] bridge_slave_0: entered allmulticast mode [ 131.120113][ T9856] bridge_slave_0: entered promiscuous mode [ 131.126215][ T9856] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.129232][ T9856] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.132120][ T9856] bridge_slave_1: entered allmulticast mode [ 131.135641][ T9856] bridge_slave_1: entered promiscuous mode [ 131.217871][ T9856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.226541][ T9899] kvm: pic: non byte write [ 131.227699][ T9856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.283558][ T9856] team0: Port device team_slave_0 added [ 131.287097][ T9856] team0: Port device team_slave_1 added [ 131.367644][ T9856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.370204][ T9856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.379394][ T9856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.384573][ T9856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.387421][ T9856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.398563][ T9856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.513768][ T6696] dummy0: left promiscuous mode [ 131.527227][ T6696] hsr_slave_0: left promiscuous mode [ 131.529872][ T6696] hsr_slave_1: left promiscuous mode [ 131.531978][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.534369][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.543816][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.547590][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.562663][ T9913] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1138'. [ 131.586512][ T6696] veth1_macvtap: left promiscuous mode [ 131.588328][ T6696] veth0_macvtap: left promiscuous mode [ 131.590521][ T6696] veth1_vlan: left promiscuous mode [ 131.592794][ T6696] veth0_vlan: left promiscuous mode [ 131.602087][ T9915] openvswitch: netlink: Geneve opt len 245 is not a multiple of 4. [ 131.897453][ T63] Bluetooth: hci1: command tx timeout [ 132.367198][ T6696] team0 (unregistering): Port device team_slave_1 removed [ 132.466114][ T6696] team0 (unregistering): Port device team_slave_0 removed [ 132.541953][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.544558][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.548978][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 132.548989][ T40] audit: type=1400 audit(526998.472:630): avc: denied { accept } for pid=9922 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.641595][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 132.652215][ T9928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=9928 comm=syz.2.1141 [ 132.660323][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 132.674592][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 132.690593][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 132.696424][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 133.102140][ T9856] hsr_slave_0: entered promiscuous mode [ 133.104390][ T9856] hsr_slave_1: entered promiscuous mode [ 133.113912][ T9925] bridge3: entered promiscuous mode [ 133.297059][ T9941] fuse: Unknown parameter 'subj_type' [ 133.347891][ T9943] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.351536][ T9943] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 133.353383][ T9932] vxcan1 speed is unknown, defaulting to 1000 [ 133.439284][ T9946] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1148'. [ 133.481084][ T9856] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.499312][ T9856] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.510851][ T9856] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.517586][ T9856] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.633169][ T6696] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.651501][ T9932] chnl_net:caif_netlink_parms(): no params data found [ 133.696549][ T40] audit: type=1400 audit(526999.622:631): avc: denied { unmount } for pid=9959 comm="syz.3.1150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 133.728891][ T9856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.775901][ T9932] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.779497][ T9932] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.782053][ T9932] bridge_slave_0: entered allmulticast mode [ 133.785445][ T9932] bridge_slave_0: entered promiscuous mode [ 133.790508][ T9932] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.793873][ T9932] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.797354][ T9932] bridge_slave_1: entered allmulticast mode [ 133.801258][ T9932] bridge_slave_1: entered promiscuous mode [ 133.848631][ T9932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.854160][ T9856] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.859173][ T9932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.911026][ T40] audit: type=1400 audit(526999.832:632): avc: denied { getopt } for pid=9968 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 133.933102][ T40] audit: type=1400 audit(526999.852:633): avc: denied { setattr } for pid=9968 comm="syz.3.1153" name="IEEE-802.15.4-RAW" dev="sockfs" ino=33951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 133.938877][ T9932] team0: Port device team_slave_0 added [ 133.954635][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.957469][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.963735][ T9932] team0: Port device team_slave_1 added [ 133.976270][ T5944] Bluetooth: hci1: command tx timeout [ 134.017074][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.019337][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.022331][ T9932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.024517][ T9932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.033787][ T9932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.040585][ T9932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.043455][ T9932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.055075][ T9932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.073593][ T9971] gretap2: entered allmulticast mode [ 134.081276][ T9971] bridge0: port 3(gretap2) entered blocking state [ 134.083462][ T9971] bridge0: port 3(gretap2) entered disabled state [ 134.086525][ T9971] gretap2: entered promiscuous mode [ 134.113006][ T6696] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.204398][ T9932] hsr_slave_0: entered promiscuous mode [ 134.207132][ T9932] hsr_slave_1: entered promiscuous mode [ 134.210054][ T9932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.213713][ T9932] Cannot create hsr debugfs directory [ 134.240262][ T6696] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.392334][ T6696] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.471316][ T9856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.484449][ T9988] fuse: root generation should be zero [ 134.538159][ T6696] bridge_slave_1: left allmulticast mode [ 134.540219][ T6696] bridge_slave_1: left promiscuous mode [ 134.542899][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.548998][ T6696] bridge_slave_0: left allmulticast mode [ 134.550734][ T6696] bridge_slave_0: left promiscuous mode [ 134.552490][ T6696] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.619447][ T9999] trusted_key: encrypted_key: master key parameter '' is invalid [ 134.776455][ T5944] Bluetooth: hci2: command tx timeout [ 134.889722][ T6696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.895700][ T6696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.900963][ T6696] bond0 (unregistering): Released all slaves [ 134.944159][ T10] IPVS: starting estimator thread 0... [ 134.947375][T10008] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 135.027117][T10009] IPVS: using max 45 ests per chain, 108000 per kthread [ 135.054117][ T9856] veth0_vlan: entered promiscuous mode [ 135.074178][ T9856] veth1_vlan: entered promiscuous mode [ 135.088421][ T9856] veth0_macvtap: entered promiscuous mode [ 135.092156][ T9856] veth1_macvtap: entered promiscuous mode [ 135.100944][ T9856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.112834][ T9856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.142543][ T9856] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.154798][ T9856] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.158241][ T9856] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.161022][ T9856] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.184809][T10025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1169'. [ 135.237816][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.240269][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.271416][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.275128][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.318758][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1117'. [ 135.321741][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1117'. [ 135.436842][ T9932] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.458035][ T6696] hsr_slave_0: left promiscuous mode [ 135.466080][ T6696] hsr_slave_1: left promiscuous mode [ 135.471015][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.474042][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.478284][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.480730][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.508495][ T6696] veth1_macvtap: left promiscuous mode [ 135.510353][ T6696] veth0_macvtap: left promiscuous mode [ 135.512195][ T6696] veth1_vlan: left promiscuous mode [ 135.513873][ T6696] veth0_vlan: left promiscuous mode [ 135.577611][ C2] vkms_vblank_simulate: vblank timer overrun [ 135.666541][ T6001] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 135.837700][ T6001] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 135.840882][ T6001] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.843530][ T6001] usb 10-1: Product: syz [ 135.844932][ T6001] usb 10-1: Manufacturer: syz [ 135.846726][ T6001] usb 10-1: SerialNumber: syz [ 135.854377][ T6001] usb 10-1: config 0 descriptor?? [ 136.066353][ T24] usb 10-1: USB disconnect, device number 2 [ 136.066584][ T5944] Bluetooth: hci1: command tx timeout [ 136.210434][T10046] netlink: 'syz.2.1172': attribute type 21 has an invalid length. [ 136.323131][ T6696] team0 (unregistering): Port device team_slave_1 removed [ 136.421091][ T6696] team0 (unregistering): Port device team_slave_0 removed [ 136.635607][ T40] audit: type=1400 audit(527002.551:634): avc: denied { mounton } for pid=10048 comm="syz.5.1173" path="/2/file0" dev="9p" ino=2071323912119181800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.635625][T10049] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 136.648477][ T40] audit: type=1400 audit(527002.561:635): avc: denied { write } for pid=10048 comm="syz.5.1173" dev="9p" ino=2071323912119181800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.657330][ T40] audit: type=1400 audit(527002.571:636): avc: denied { open } for pid=10048 comm="syz.5.1173" name="/" dev="9p" ino=2071323912119181800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.856607][ T5944] Bluetooth: hci2: command tx timeout [ 137.025272][ T9932] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.036312][ T9932] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.040759][T10032] syzkaller1: entered promiscuous mode [ 137.042693][T10032] syzkaller1: entered allmulticast mode [ 137.045456][T10046] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1172'. [ 137.057903][ T9932] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 137.099247][T10064] overlayfs: failed to clone lowerpath [ 137.108279][T10064] overlayfs: failed to clone lowerpath [ 137.139700][T10040] vxcan1 speed is unknown, defaulting to 1000 [ 137.160823][ T9932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.176086][ T9932] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.182890][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.185955][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.193507][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.195893][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.376724][ T9932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.413530][ T9932] veth0_vlan: entered promiscuous mode [ 137.434684][ T9932] veth1_vlan: entered promiscuous mode [ 137.448091][ T9932] veth0_macvtap: entered promiscuous mode [ 137.454932][ T9932] veth1_macvtap: entered promiscuous mode [ 137.464742][ T9932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.473019][ T9932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.478973][ T9932] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.481698][ T9932] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.484385][ T9932] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.488238][ T9932] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.542952][ T6696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.545460][ T6696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.558435][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.561936][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.656855][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 137.754248][T10082] usb usb9: check_ctrlrecip: process 10082 (syz.3.1181) requesting ep 01 but needs 81 [ 137.758819][T10082] usb usb9: usbfs: process 10082 (syz.3.1181) did not claim interface 0 before use [ 137.818467][ T24] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 137.822081][ T24] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 137.826375][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 137.831002][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 137.835407][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 137.841863][ T24] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 137.845607][ T24] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 137.849341][ T24] usb 10-1: Product: syz [ 137.851150][ T24] usb 10-1: Manufacturer: syz [ 137.857907][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 137.859999][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 137.862838][ T24] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 137.864716][ T24] cdc_wdm 10-1:1.0: Unknown control protocol [ 138.060757][ C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 138.063601][ C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 138.065864][ C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 138.068127][ C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 138.071704][ C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 138.073824][ C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 138.076016][ C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 138.078102][ C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 138.080283][ C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 138.082401][ C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 138.084769][ C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 138.086865][ C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 138.090563][ C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 138.092748][ C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 138.094931][ C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 138.097174][ C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 138.099937][ C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 138.102322][ C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 138.104821][ T24] usb 10-1: USB disconnect, device number 3 [ 138.106747][ C2] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 138.106758][ C2] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 138.106766][ C2] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 138.107956][T10096] rdma_op ffff888024e049f0 conn xmit_rdma 0000000000000000 [ 138.138669][ T5944] Bluetooth: hci1: command tx timeout [ 138.417700][ T5944] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 138.513785][T10108] tipc: Enabling of bearer rejected, media not registered [ 138.745501][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'. [ 138.749641][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'. [ 138.811403][ T40] audit: type=1400 audit(527004.731:637): avc: denied { execute } for pid=10123 comm="syz.5.1193" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 138.859343][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1194'. [ 138.935648][T10096] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 138.956900][T10097] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 139.057762][ T5944] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 139.123688][ T40] audit: type=1400 audit(527005.041:638): avc: denied { read } for pid=10137 comm="syz.5.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.300940][T10148] overlayfs: missing 'lowerdir' [ 139.300974][T10149] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 139.376518][T10159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1204'. [ 139.380264][T10159] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 139.515104][T10164] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 139.560696][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1208'. [ 139.563992][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1208'. [ 139.590589][T10177] openvswitch: netlink: Key type 9232 is out of range max 32 [ 139.605122][T10164] kvm: kvm [10163]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 139.740404][ T1187] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.574425][ T40] audit: type=1400 audit(527006.491:639): avc: denied { shutdown } for pid=10219 comm="syz.2.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.633173][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.637479][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.641977][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.646405][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.650296][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.794991][T10224] vxcan1 speed is unknown, defaulting to 1000 [ 140.806371][T10241] sch_tbf: burst 19872 is lower than device lo mtu (39799) ! [ 140.927169][T10244] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 140.954536][T10261] netlink: 'syz.2.1235': attribute type 1 has an invalid length. [ 140.998257][T10261] bond0: entered promiscuous mode [ 141.000975][T10261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.008702][T10224] chnl_net:caif_netlink_parms(): no params data found [ 141.135776][T10275] @: renamed from vlan0 [ 141.142220][T10224] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.146364][T10224] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.151621][T10224] bridge_slave_0: entered allmulticast mode [ 141.155654][T10224] bridge_slave_0: entered promiscuous mode [ 141.161908][T10224] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.164942][T10224] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.168069][T10224] bridge_slave_1: entered allmulticast mode [ 141.171832][T10224] bridge_slave_1: entered promiscuous mode [ 141.224121][T10224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.228627][T10224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.263294][T10224] team0: Port device team_slave_0 added [ 141.266733][T10224] team0: Port device team_slave_1 added [ 141.283478][T10288] Bluetooth: MGMT ver 1.23 [ 141.294424][T10224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.296682][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.304851][T10224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.309373][T10224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.311817][T10224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.321256][T10224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.385068][T10224] hsr_slave_0: entered promiscuous mode [ 141.388651][T10224] hsr_slave_1: entered promiscuous mode [ 141.391629][T10224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.394751][T10224] Cannot create hsr debugfs directory [ 141.629824][ T24] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 141.722298][T10293] program syz.5.1244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.728353][ T40] audit: type=1400 audit(527007.651:640): avc: denied { remount } for pid=10292 comm="syz.5.1244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 141.742355][ T40] audit: type=1400 audit(527007.661:641): avc: denied { ioctl } for pid=10292 comm="syz.5.1244" path="socket:[35676]" dev="sockfs" ino=35676 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 141.749211][T10293] loop2: detected capacity change from 0 to 7 [ 141.750242][ T40] audit: type=1400 audit(527007.661:642): avc: denied { map } for pid=10292 comm="syz.5.1244" path="/24/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 141.755355][T10293] Dev loop2: unable to read RDB block 7 [ 141.763267][T10293] loop2: unable to read partition table [ 141.765755][T10293] loop2: partition table beyond EOD, truncated [ 141.776044][T10293] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 141.778751][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.782615][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.785720][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.790099][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.792913][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.797693][ T1187] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.797783][ T24] usb 8-1: config 0 descriptor?? [ 141.825061][T10295] netlink: 'syz.5.1245': attribute type 1 has an invalid length. [ 141.828250][T10295] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1245'. [ 141.831148][T10295] netlink: 'syz.5.1245': attribute type 1 has an invalid length. [ 141.864717][ T1187] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.954084][T10305] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 141.956664][ T1187] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.982638][T10308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=10308 comm=syz.2.1249 [ 141.986772][T10309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=10309 comm=syz.2.1249 [ 141.991584][T10308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1249'. [ 142.024859][T10312] xt_l2tp: v2 doesn't support IP mode [ 142.102617][ T1187] bridge_slave_1: left allmulticast mode [ 142.105146][ T1187] bridge_slave_1: left promiscuous mode [ 142.110243][ T1187] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.115285][ T1187] bridge_slave_0: left allmulticast mode [ 142.119512][ T1187] bridge_slave_0: left promiscuous mode [ 142.122036][ T1187] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.153022][T10323] netlink: 'syz.2.1254': attribute type 11 has an invalid length. [ 142.158115][T10324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1254'. [ 142.214548][ T24] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 142.222458][ T24] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 142.250935][ T24] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 142.438758][ T1187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.443032][ T1187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.446846][ T1187] bond0 (unregistering): Released all slaves [ 142.555228][T10331] block device autoloading is deprecated and will be removed. [ 142.604423][T10335] xt_hashlimit: size too large, truncated to 1048576 [ 142.611980][T10291] overlayfs: failed to resolve './bus': -2 [ 142.697721][ T63] Bluetooth: hci2: command tx timeout [ 142.730283][T10335] kvm: pic: single mode not supported [ 142.737516][T10335] kvm: pic: level sensitive irq not supported [ 142.743691][T10335] jfs: Unknown parameter 'discardøÄb‰ «¹ù' [ 142.783385][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 143.116852][T10224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.122079][T10224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.136921][ T1187] hsr_slave_0: left promiscuous mode [ 143.140713][ T1187] hsr_slave_1: left promiscuous mode [ 143.143421][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.146446][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.154402][ T1187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.157196][ T1187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.195085][T10372] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1267'. [ 143.201980][ T1187] veth1_macvtap: left promiscuous mode [ 143.203848][ T1187] veth0_macvtap: left promiscuous mode [ 143.206941][ T1187] veth1_vlan: left promiscuous mode [ 143.209039][ T1187] veth0_vlan: left promiscuous mode [ 143.304132][T10380] sctp: [Deprecated]: syz.2.1266 (pid 10380) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.304132][T10380] Use struct sctp_sack_info instead [ 143.351778][T10383] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1270'. [ 143.674778][ T24] usb 8-1: reset high-speed USB device number 13 using dummy_hcd [ 143.993975][ T1187] team0 (unregistering): Port device team_slave_1 removed [ 144.075507][ T1187] team0 (unregistering): Port device team_slave_0 removed [ 144.777379][ T63] Bluetooth: hci2: command tx timeout [ 144.862498][T10224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.866891][T10224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 145.014547][T10224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.039459][T10224] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.049377][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.052386][ T6693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.073003][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.075371][ T6695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.168211][T10385] vxcan1 speed is unknown, defaulting to 1000 [ 145.194692][ T61] usb 8-1: USB disconnect, device number 13 [ 145.270465][T10224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.283067][T10420] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1279'. [ 145.328465][T10224] veth0_vlan: entered promiscuous mode [ 145.334060][T10224] veth1_vlan: entered promiscuous mode [ 145.348381][T10224] veth0_macvtap: entered promiscuous mode [ 145.353778][T10224] veth1_macvtap: entered promiscuous mode [ 145.368829][T10224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.392198][T10224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.402006][T10224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.405703][T10224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.409978][T10224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.413751][T10224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.492684][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.495548][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.522448][ T6693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.527646][ T6693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.790334][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1281'. [ 145.910056][T10433] netlink: 'syz.3.1284': attribute type 1 has an invalid length. [ 145.951044][ T40] audit: type=1400 audit(2000000004.069:643): avc: denied { bind } for pid=10434 comm="syz.3.1285" lport=43553 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 145.959465][ T40] audit: type=1400 audit(2000000004.069:644): avc: denied { accept } for pid=10434 comm="syz.3.1285" lport=43553 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 145.960439][T10435] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 145.974300][ T1234] Bluetooth: hci2: Frame reassembly failed (-84) [ 146.206797][ T40] audit: type=1400 audit(2000000004.319:645): avc: denied { ioctl } for pid=10446 comm="syz.2.1288" path="socket:[37972]" dev="sockfs" ino=37972 ioctlcmd=0x7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.393834][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.396763][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.406526][T10460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.946674][ T5937] Bluetooth: hci0: Dropping invalid advertising data [ 146.949108][ T5937] Bluetooth: hci0: Dropping invalid advertising data [ 146.951339][ T5937] Bluetooth: hci0: Malformed LE Event: 0x02 [ 146.996285][ T40] audit: type=1400 audit(2000000005.109:646): avc: denied { listen } for pid=10463 comm="syz.2.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.031018][ T5937] Bluetooth: hci0: unexpected event for opcode 0x200d [ 147.031663][T10471] xt_recent: Unsupported userspace flags (000000c7) [ 147.257617][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 147.257676][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 147.484889][T10482] openvswitch: netlink: Message has 8 unknown bytes. [ 147.488222][T10482] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1296'. [ 147.492751][T10482] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1296'. [ 147.506932][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.977576][ T5944] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 148.321315][ T40] audit: type=1400 audit(2000000006.439:647): avc: denied { map } for pid=10491 comm="syz.3.1300" path="/dev/sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 148.342579][T10496] IPVS: Error connecting to the multicast addr [ 148.400173][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.407185][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.413260][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.418844][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.422162][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.431216][ T40] audit: type=1400 audit(2000000006.549:648): avc: denied { ioctl } for pid=10502 comm="syz.5.1303" path="socket:[37598]" dev="sockfs" ino=37598 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 148.572516][T10505] vxcan1 speed is unknown, defaulting to 1000 [ 148.626076][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1311'. [ 148.697459][ T6982] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 148.700327][T10538] netlink: 'syz.2.1315': attribute type 10 has an invalid length. [ 148.704051][T10538] hsr0: entered promiscuous mode [ 148.763277][T10505] chnl_net:caif_netlink_parms(): no params data found [ 148.799018][T10541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=10541 comm=syz.5.1316 [ 148.805218][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1316'. [ 148.855734][T10505] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.859670][T10505] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.862681][T10505] bridge_slave_0: entered allmulticast mode [ 148.866502][ T6982] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 148.866618][T10505] bridge_slave_0: entered promiscuous mode [ 148.869344][ T6982] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 148.869364][ T6982] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 148.869388][ T6982] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 148.869402][ T6982] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 148.871852][ T6982] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 148.884154][T10505] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.885087][ T6982] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.888078][T10505] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.888199][T10505] bridge_slave_1: entered allmulticast mode [ 148.890381][ T6982] usb 8-1: Product: syz [ 148.893628][T10505] bridge_slave_1: entered promiscuous mode [ 148.895033][ T6982] usb 8-1: Manufacturer: syz [ 148.912015][ T6982] cdc_wdm 8-1:1.0: skipping garbage [ 148.913822][ T6982] cdc_wdm 8-1:1.0: skipping garbage [ 148.918864][ T6982] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 148.920757][ T6982] cdc_wdm 8-1:1.0: Unknown control protocol [ 148.950181][T10505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.954633][T10505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.973553][T10550] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1318'. [ 148.978866][ T40] audit: type=1400 audit(2000000007.099:649): avc: denied { map } for pid=10549 comm="syz.5.1318" path="socket:[36750]" dev="sockfs" ino=36750 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.004265][T10505] team0: Port device team_slave_0 added [ 149.010150][T10505] team0: Port device team_slave_1 added [ 149.013974][T10557] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 149.020589][T10557] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1319'. [ 149.023521][T10557] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 149.074550][T10505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.076862][T10505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.085022][T10505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.090697][T10505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.092842][T10505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.100492][T10505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.127627][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.231610][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.254771][T10505] hsr_slave_0: entered promiscuous mode [ 149.257769][T10505] hsr_slave_1: entered promiscuous mode [ 149.261939][T10505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.265187][ T40] audit: type=1400 audit(2000000007.379:650): avc: denied { write } for pid=10564 comm="syz.5.1323" path="socket:[36769]" dev="sockfs" ino=36769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 149.265242][T10505] Cannot create hsr debugfs directory [ 149.320202][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.325634][ T9281] usb 8-1: USB disconnect, device number 14 [ 149.533820][ T13] bridge_slave_1: left allmulticast mode [ 149.535664][ T13] bridge_slave_1: left promiscuous mode [ 149.542712][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.550162][ T13] bridge_slave_0: left allmulticast mode [ 149.552534][ T13] bridge_slave_0: left promiscuous mode [ 149.559354][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.720470][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1329'. [ 149.869980][T10592] dlm: non-version read from control device 205 [ 149.892638][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.901203][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.906859][ T13] bond0 (unregistering): Released all slaves [ 149.959754][T10590] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 149.962935][T10590] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 149.975095][T10584] sp0: Synchronizing with TNC [ 150.107467][ T9281] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 150.237758][ T9281] usb 8-1: device descriptor read/64, error -71 [ 150.242671][ T6001] hid-generic 3730:1B2E:07FF.0004: unknown main item tag 0x6 [ 150.245653][ T6001] hid-generic 3730:1B2E:07FF.0004: item fetching failed at offset 3/4 [ 150.249464][ T6001] hid-generic 3730:1B2E:07FF.0004: probe with driver hid-generic failed with error -22 [ 150.342384][T10505] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 150.355541][T10505] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 150.366576][T10505] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.376356][T10505] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 150.426126][ T13] hsr_slave_0: left promiscuous mode [ 150.435332][ T13] hsr_slave_1: left promiscuous mode [ 150.437524][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.439873][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.442568][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.444948][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.458503][ T63] Bluetooth: hci2: command tx timeout [ 150.487595][ T9281] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 150.496523][ T13] veth1_macvtap: left promiscuous mode [ 150.498771][ T13] veth0_macvtap: left promiscuous mode [ 150.500592][ T13] veth1_vlan: left promiscuous mode [ 150.502293][ T13] veth0_vlan: left promiscuous mode [ 150.617574][ T9281] usb 8-1: device descriptor read/64, error -71 [ 150.729940][ T9281] usb usb8-port1: attempt power cycle [ 151.077486][ T9281] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 151.097946][ T9281] usb 8-1: device descriptor read/8, error -71 [ 151.277197][ T13] team0 (unregistering): Port device team_slave_1 removed [ 151.347430][ T9281] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 151.377391][ T13] team0 (unregistering): Port device team_slave_0 removed [ 151.378203][ T9281] usb 8-1: device descriptor read/8, error -71 [ 151.487882][ T9281] usb usb8-port1: unable to enumerate USB device [ 152.002860][T10505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.012766][T10505] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.018950][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.021747][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.029896][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.032234][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.137564][ T40] audit: type=1400 audit(2000000010.259:651): avc: denied { read } for pid=10616 comm="syz.5.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 152.164478][T10505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.231451][T10505] veth0_vlan: entered promiscuous mode [ 152.240964][T10505] veth1_vlan: entered promiscuous mode [ 152.269341][T10505] veth0_macvtap: entered promiscuous mode [ 152.274843][T10505] veth1_macvtap: entered promiscuous mode [ 152.281241][T10626] syz.5.1338: attempt to access beyond end of device [ 152.281241][T10626] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 152.286967][T10626] SQUASHFS error: Failed to read block 0x0: -5 [ 152.289773][T10626] unable to read squashfs_super_block [ 152.297795][T10505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.306179][T10505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.313763][T10505] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.317523][T10505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.321086][T10505] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.324568][T10505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.398799][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.402337][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.422410][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.425512][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.706691][T10641] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1342'. [ 152.747830][T10649] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10649 comm=syz.5.1344 [ 152.753514][T10649] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10649 comm=syz.5.1344 [ 152.760375][T10649] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10649 comm=syz.5.1344 [ 152.760377][T10650] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10650 comm=syz.5.1344 [ 152.771195][T10649] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35 sclass=netlink_audit_socket pid=10649 comm=syz.5.1344 [ 152.771207][T10650] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35 sclass=netlink_audit_socket pid=10650 comm=syz.5.1344 [ 152.824669][ T40] audit: type=1400 audit(2000000010.939:652): avc: denied { mounton } for pid=10653 comm="syz.5.1346" path="/75/file1" dev="autofs" ino=40315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 152.897037][T10659] syz.3.1348: attempt to access beyond end of device [ 152.897037][T10659] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 152.907526][T10659] gfs2: error -5 reading superblock [ 152.912679][T10660] syz.3.1348: attempt to access beyond end of device [ 152.912679][T10660] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 152.918555][T10660] gfs2: error -5 reading superblock [ 152.933940][T10659] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 152.938450][ T13] Bluetooth: hci2: Frame reassembly failed (-84) [ 152.940069][ T40] audit: type=1400 audit(2000000011.069:653): avc: denied { mount } for pid=10661 comm="syz.5.1347" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 152.940985][ T54] Bluetooth: hci2: Frame reassembly failed (-84) [ 152.962494][T10662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.243872][ T40] audit: type=1400 audit(2000000011.369:654): avc: denied { setattr } for pid=10668 comm="syz.5.1350" path="socket:[39156]" dev="sockfs" ino=39156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.286795][T10674] sp0: Synchronizing with TNC [ 153.292124][T10675] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 153.482631][T10688] netlink: 'syz.5.1354': attribute type 1 has an invalid length. [ 153.485936][T10688] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1354'. [ 153.530097][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 153.535108][T10692] No control pipe specified [ 153.581738][T10694] netlink: 'syz.2.1357': attribute type 21 has an invalid length. [ 153.689625][T10706] program syz.5.1362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.828477][T10721] netlink: 'syz.5.1368': attribute type 4 has an invalid length. [ 153.836411][T10721] netlink: 'syz.5.1368': attribute type 4 has an invalid length. [ 153.842871][T10721] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !å¯fIZEô¿¹ô,ô =©ÜÝ$)²% Ä‚L [ 153.971017][T10733] /dev/nullb0: Can't lookup blockdev [ 154.182608][ T1234] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.195872][ T40] audit: type=1400 audit(2000000012.319:655): avc: denied { write } for pid=10739 comm="syz.5.1372" path="socket:[39191]" dev="sockfs" ino=39191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.937619][ T63] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 155.120547][T10758] netlink: 'syz.3.1378': attribute type 10 has an invalid length. [ 155.125361][T10758] hsr_slave_0: left promiscuous mode [ 155.130296][T10758] hsr_slave_1: left promiscuous mode [ 155.173419][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.177672][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.181479][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.187234][T10762] [U]  [ 155.189953][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.195177][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.244291][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'. [ 155.304131][T10793] xt_hashlimit: size too large, truncated to 1048576 [ 155.349607][T10763] vxcan1 speed is unknown, defaulting to 1000 [ 155.486383][ T40] audit: type=1400 audit(2000000013.609:656): avc: denied { execute } for pid=10817 comm="syz.3.1394" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.501081][T10818] xt_nat: multiple ranges no longer supported [ 155.509788][T10818] usb usb8: usbfs: process 10818 (syz.3.1394) did not claim interface 0 before use [ 155.516906][T10763] chnl_net:caif_netlink_parms(): no params data found [ 155.640090][T10763] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.642211][T10763] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.644314][T10763] bridge_slave_0: entered allmulticast mode [ 155.646866][T10763] bridge_slave_0: entered promiscuous mode [ 155.650520][T10763] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.652757][T10763] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.654929][T10763] bridge_slave_1: entered allmulticast mode [ 155.657555][T10763] bridge_slave_1: entered promiscuous mode [ 155.663544][T10829] ip6tnl1: entered allmulticast mode [ 155.710006][T10763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.714655][T10763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.749074][T10763] team0: Port device team_slave_0 added [ 155.754105][T10763] team0: Port device team_slave_1 added [ 155.795041][T10763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.797250][T10763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.805279][T10763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.809588][T10763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.812224][T10763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.821022][T10763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.861343][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1401'. [ 155.913804][ T1234] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.927546][T10763] hsr_slave_0: entered promiscuous mode [ 155.930689][T10763] hsr_slave_1: entered promiscuous mode [ 155.933735][T10763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.937561][T10763] Cannot create hsr debugfs directory [ 155.953267][T10846] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1403'. [ 155.956487][T10846] unsupported nlmsg_type 40 [ 155.992801][T10846] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1403'. [ 155.995888][T10846] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1403'. [ 155.999781][T10846] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1403'. [ 156.036446][ T1234] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.060211][T10850] cgroup: release_agent respecified [ 156.104549][T10857] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 156.171745][ T1234] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.211575][T10861] Bluetooth: (null): Invalid header checksum [ 156.263396][ T6695] Bluetooth: (null): Invalid header checksum [ 156.265702][ T13] Bluetooth: (null): Invalid header checksum [ 156.325957][ T1234] bridge_slave_1: left allmulticast mode [ 156.328136][ T1234] bridge_slave_1: left promiscuous mode [ 156.330086][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.333749][ T1234] bridge_slave_0: left allmulticast mode [ 156.335648][ T1234] bridge_slave_0: left promiscuous mode [ 156.337661][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.507739][ T6163] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 156.622052][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.626743][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.631442][ T1234] bond0 (unregistering): Released all slaves [ 156.671228][ T6163] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 156.674709][ T6163] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.683199][ T6163] usb 8-1: Product: syz [ 156.684723][ T6163] usb 8-1: Manufacturer: syz [ 156.690835][ T6163] usb 8-1: SerialNumber: syz [ 156.701234][ T6163] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 156.707667][T10883] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1415'. [ 156.721745][ T6163] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 156.752446][ T40] audit: type=1400 audit(2000000014.879:657): avc: denied { create } for pid=10881 comm="syz.5.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 156.813360][ T40] audit: type=1400 audit(2000000014.939:658): avc: denied { audit_write } for pid=10888 comm="syz.5.1416" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 156.926685][T10896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10896 comm=syz.2.1417 [ 156.946615][T10898] fuse: Unknown parameter 'rde—Êxa000000000000040000' [ 157.134399][ T1234] hsr_slave_0: left promiscuous mode [ 157.138214][ T1234] hsr_slave_1: left promiscuous mode [ 157.141031][ T1234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.144100][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.148636][ T1234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.151557][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.185483][ T1234] veth1_macvtap: left promiscuous mode [ 157.187247][ T1234] veth0_macvtap: left promiscuous mode [ 157.189570][ T1234] veth1_vlan: left promiscuous mode [ 157.191565][ T1234] veth0_vlan: left promiscuous mode [ 157.257616][ T63] Bluetooth: hci2: command tx timeout [ 157.817638][ T6163] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 157.820304][ T6163] ath9k_htc: Failed to initialize the device [ 157.932645][ T6163] usb 8-1: ath9k_htc: USB layer deinitialized [ 158.187834][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 158.285676][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 159.237350][ T837] usb 8-1: USB disconnect, device number 19 [ 159.341821][ T63] Bluetooth: hci2: command tx timeout [ 160.330343][T10763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 160.336730][T10763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 160.343820][T10763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 160.358399][T10763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 160.419056][T10941] macvlan5: entered promiscuous mode [ 160.452514][T10763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.475244][T10763] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.482353][ T6696] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.484986][ T6696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.492172][ T6696] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.494408][ T6696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.549453][T10954] kvm: user requested TSC rate below hardware speed [ 160.623880][T10967] netlink: 'syz.2.1438': attribute type 30 has an invalid length. [ 160.626479][T10967] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 160.630182][T10967] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 160.660849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 160.672164][T10973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1439'. [ 160.704904][T10763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.737776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 160.759744][T10977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10977 comm=syz.5.1441 [ 160.772600][T10977] geneve2: entered allmulticast mode [ 160.776387][T10981] tmpfs: Bad value for 'nr_inodes' [ 160.811739][T10763] veth0_vlan: entered promiscuous mode [ 160.817827][T10763] veth1_vlan: entered promiscuous mode [ 160.829259][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1441'. [ 160.833567][T10985] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1443'. [ 160.836308][T10763] veth0_macvtap: entered promiscuous mode [ 160.844555][T10763] veth1_macvtap: entered promiscuous mode [ 160.847063][T10985] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1443'. [ 160.854243][T10763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.864044][T10763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.879774][T10763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.883474][T10763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.887164][T10763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.892850][T10763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.905303][T10987] ubi31: attaching mtd0 [ 160.912255][T10987] ubi31: scanning is finished [ 160.915135][T10987] ubi31: empty MTD device detected [ 160.941240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 160.971036][T10994] QAT: failed to copy from user cfg_data. [ 161.001374][ T6693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.004849][ T6693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.044292][T10987] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 161.056004][ T6693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.056246][T10987] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 161.058759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 161.062193][T10987] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 161.065852][T10987] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 161.069134][T10987] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 161.071514][T10987] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 161.074045][T10987] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 656118989 [ 161.078319][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'. [ 161.088141][T10987] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 161.088202][ T6693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.092223][T10998] ubi31: background thread "ubi_bgt31d" started, PID 10998 [ 161.098723][T10997] vxlan1: entered promiscuous mode [ 161.157010][T11000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1447'. [ 161.410870][T11013] netlink: 'syz.5.1452': attribute type 11 has an invalid length. [ 161.413870][T11013] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1452'. [ 161.420429][T11013] syz.5.1452: vmalloc error: size 3335753728, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 161.426501][T11013] CPU: 2 UID: 0 PID: 11013 Comm: syz.5.1452 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 161.426517][T11013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.426525][T11013] Call Trace: [ 161.426529][T11013] [ 161.426534][T11013] dump_stack_lvl+0x16c/0x1f0 [ 161.426575][T11013] warn_alloc+0x248/0x3a0 [ 161.426591][T11013] ? __pfx_warn_alloc+0x10/0x10 [ 161.426606][T11013] ? stack_depot_save_flags+0x354/0xa40 [ 161.426630][T11013] ? kasan_save_stack+0x42/0x60 [ 161.426643][T11013] ? kasan_save_stack+0x33/0x60 [ 161.426655][T11013] ? kasan_save_track+0x14/0x30 [ 161.426667][T11013] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 161.426678][T11013] ? __vb2_queue_alloc+0x8c9/0x1280 [ 161.426694][T11013] ? vb2_core_create_bufs+0x559/0xab0 [ 161.426712][T11013] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 161.426723][T11013] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 161.426740][T11013] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 161.426753][T11013] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 161.426769][T11013] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 161.426779][T11013] vmalloc_user_noprof+0x9e/0xe0 [ 161.426790][T11013] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 161.426800][T11013] vb2_vmalloc_alloc+0x135/0x3f0 [ 161.426810][T11013] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 161.426820][T11013] __vb2_queue_alloc+0x8c9/0x1280 [ 161.426843][T11013] vb2_core_create_bufs+0x559/0xab0 [ 161.426861][T11013] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 161.426878][T11013] ? __pfx___mutex_trylock_common+0x10/0x10 [ 161.426896][T11013] ? __pfx___might_resched+0x10/0x10 [ 161.426910][T11013] ? rcu_is_watching+0x12/0xc0 [ 161.426925][T11013] vb2_create_bufs+0x5e8/0x840 [ 161.426942][T11013] ? __pfx_vb2_create_bufs+0x10/0x10 [ 161.426957][T11013] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 161.426971][T11013] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 161.426984][T11013] v4l_create_bufs+0x159/0x270 [ 161.426997][T11013] __video_do_ioctl+0xb3d/0xfc0 [ 161.427011][T11013] ? __might_fault+0xe3/0x190 [ 161.427025][T11013] ? __pfx___video_do_ioctl+0x10/0x10 [ 161.427057][T11013] video_usercopy+0x4cd/0x1720 [ 161.427071][T11013] ? __pfx___video_do_ioctl+0x10/0x10 [ 161.427084][T11013] ? selinux_kernel_read_file+0x110/0x130 [ 161.427099][T11013] ? __pfx_video_usercopy+0x10/0x10 [ 161.427123][T11013] v4l2_ioctl+0x1ba/0x250 [ 161.427136][T11013] ? __pfx_v4l2_ioctl+0x10/0x10 [ 161.427149][T11013] __x64_sys_ioctl+0x18b/0x210 [ 161.427163][T11013] do_syscall_64+0xcd/0x4c0 [ 161.427179][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.427190][T11013] RIP: 0033:0x7f99c618e929 [ 161.427200][T11013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.427210][T11013] RSP: 002b:00007f99c7089038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.427221][T11013] RAX: ffffffffffffffda RBX: 00007f99c63b5fa0 RCX: 00007f99c618e929 [ 161.427228][T11013] RDX: 0000200000000040 RSI: 00000000c100565c RDI: 0000000000000005 [ 161.427236][T11013] RBP: 00007f99c6210b39 R08: 0000000000000000 R09: 0000000000000000 [ 161.427242][T11013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.427248][T11013] R13: 0000000000000000 R14: 00007f99c63b5fa0 R15: 00007ffd4be787f8 [ 161.427261][T11013] [ 161.427266][T11013] Mem-Info: [ 161.536496][T11013] active_anon:33959 inactive_anon:0 isolated_anon:0 [ 161.536496][T11013] active_file:4574 inactive_file:52962 isolated_file:0 [ 161.536496][T11013] unevictable:1768 dirty:65 writeback:0 [ 161.536496][T11013] slab_reclaimable:7594 slab_unreclaimable:93728 [ 161.536496][T11013] mapped:30322 shmem:24550 pagetables:1118 [ 161.536496][T11013] sec_pagetables:309 bounce:0 [ 161.536496][T11013] kernel_misc_reclaimable:0 [ 161.536496][T11013] free:404638 free_pcp:14953 free_cma:0 [ 161.551360][T11013] Node 0 active_anon:121516kB inactive_anon:0kB active_file:14584kB inactive_file:211624kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:123408kB dirty:248kB writeback:0kB shmem:86852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13008kB pagetables:4320kB sec_pagetables:1224kB all_unreclaimable? yes Balloon:0kB [ 161.563011][T11013] Node 1 active_anon:18432kB inactive_anon:0kB active_file:3712kB inactive_file:224kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:12kB writeback:0kB shmem:15564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 161.573293][T11013] Node 0 DMA free:7320kB boost:2048kB min:2388kB low:2472kB high:2556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:148kB local_pcp:0kB free_cma:0kB [ 161.583888][T11013] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 161.585853][T11013] Node 0 DMA32 free:94960kB boost:61900kB min:89416kB low:96292kB high:103168kB reserved_highatomic:0KB free_highatomic:0KB active_anon:115300kB inactive_anon:0kB active_file:14584kB inactive_file:211624kB unevictable:3536kB writepending:248kB present:2080628kB managed:1264732kB mlocked:0kB bounce:0kB free_pcp:33072kB local_pcp:7924kB free_cma:0kB [ 161.596656][T11013] lowmem_reserve[]: 0 0 0 0 0 [ 161.598886][T11013] Node 1 Normal free:1507956kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23996kB inactive_anon:0kB active_file:3712kB inactive_file:224kB unevictable:3536kB writepending:12kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:25316kB local_pcp:108kB free_cma:0kB [ 161.609854][T11013] lowmem_reserve[]: 0 0 0 0 0 [ 161.611441][T11013] Node 0 DMA: 38*4kB (UM) 33*8kB (U) 21*16kB (UM) 27*32kB (UM) 5*64kB (U) 4*128kB (UM) 3*256kB (UM) 6*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 7312kB [ 161.616571][T11013] Node 0 DMA32: 461*4kB (UME) 282*8kB (UME) 89*16kB (UME) 193*32kB (UM) 73*64kB (UME) 35*128kB (UME) 39*256kB (UME) 54*512kB (UME) 33*1024kB (UM) 2*2048kB (UM) 0*4096kB = 96372kB [ 161.622340][T11013] Node 1 Normal: 2*4kB (UE) 44*8kB (UME) 71*16kB (UME) 149*32kB (UE) 92*64kB (UE) 42*128kB (UME) 26*256kB (UM) 19*512kB (UME) 21*1024kB (UM) 15*2048kB (UM) 347*4096kB (UM) = 1507448kB [ 161.628820][T11013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.632068][T11013] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.635060][T11013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.638704][T11013] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.641680][T11013] 85431 total pagecache pages [ 161.643258][T11013] 0 pages in swap cache [ 161.644644][T11013] Free swap = 124996kB [ 161.646039][T11013] Total swap = 124996kB [ 161.647758][T11013] 1048443 pages RAM [ 161.649311][T11013] 0 pages HighMem/MovableOnly [ 161.650838][T11013] 282931 pages reserved [ 161.652188][T11013] 0 pages cma reserved [ 161.656439][T11012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.719756][T11029] netlink: 'syz.3.1457': attribute type 1 has an invalid length. [ 161.728056][T11029] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1457'. [ 161.771587][T11030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1457'. [ 161.850520][ T40] audit: type=1400 audit(2000000019.979:659): avc: denied { read } for pid=11028 comm="syz.3.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 161.863613][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'. [ 161.873206][ T40] audit: type=1400 audit(2000000019.999:660): avc: denied { read open } for pid=11032 comm="syz.5.1458" path="/" dev="configfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.084813][T11054] [U]  [ 162.232315][T11071] can0: slcan on ttyS3. [ 162.234093][T11073] erspan0: entered promiscuous mode [ 162.269821][T11075] xt_hashlimit: size too large, truncated to 1048576 [ 162.299165][T11071] can0 (unregistered): slcan off ttyS3. [ 162.345839][ T40] audit: type=1400 audit(2000000020.469:661): avc: denied { setattr } for pid=11084 comm="syz.3.1474" name="pfkey" dev="proc" ino=4026533405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 162.354420][ T40] audit: type=1400 audit(2000000020.479:662): avc: denied { write } for pid=11084 comm="syz.3.1474" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 162.437068][T11092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=11092 comm=syz.3.1477 [ 162.531623][ T40] audit: type=1400 audit(2000000020.646:663): avc: denied { read } for pid=11086 comm="syz.5.1475" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 162.531671][ T40] audit: type=1400 audit(2000000020.646:664): avc: denied { open } for pid=11086 comm="syz.5.1475" path="/122/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 162.532082][ T40] audit: type=1400 audit(2000000020.656:665): avc: denied { ioctl } for pid=11086 comm="syz.5.1475" path="/122/file0/file0" dev="fuse" ino=3 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 162.962919][ T6693] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.079357][T11124] vivid-000: ================= START STATUS ================= [ 164.083149][T11124] vivid-000: Radio HW Seek Mode: Bounded [ 164.085680][T11124] vivid-000: Radio Programmable HW Seek: false [ 164.088124][T11124] vivid-000: RDS Rx I/O Mode: Block I/O [ 164.091547][T11124] vivid-000: Generate RBDS Instead of RDS: false [ 164.095632][T11124] vivid-000: RDS Reception: true [ 164.098215][T11124] vivid-000: RDS Program Type: 0 inactive [ 164.100153][T11124] vivid-000: RDS PS Name: inactive [ 164.101807][T11124] vivid-000: RDS Radio Text: inactive [ 164.103641][T11124] vivid-000: RDS Traffic Announcement: false inactive [ 164.105780][T11124] vivid-000: RDS Traffic Program: false inactive [ 164.107826][T11124] vivid-000: RDS Music: false inactive [ 164.109655][T11124] vivid-000: ================== END STATUS ================== [ 164.120172][ T40] audit: type=1800 audit(2000000022.134:666): pid=11124 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1485" name="dmabuf" dev="dmabuf" ino=4 res=0 errno=0 [ 164.144616][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.149253][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.153560][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.162020][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.164654][ T40] audit: type=1400 audit(2000000022.171:667): avc: denied { setopt } for pid=11128 comm="syz.5.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.169555][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.929672][T11122] 9pnet_fd: p9_fd_create_tcp (11122): problem connecting socket to 127.0.0.1 [ 164.988696][ T40] audit: type=1326 audit(2000000022.947:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.1489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57418e929 code=0x7ff00000 [ 165.711207][T11126] vxcan1 speed is unknown, defaulting to 1000 [ 165.741341][ T6693] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.812576][T11142] netlink: 'syz.3.1490': attribute type 1 has an invalid length. [ 165.903715][ T6693] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.019358][T11152] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 166.042995][ T6693] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.073768][T11126] chnl_net:caif_netlink_parms(): no params data found [ 166.128683][T11156] hpfs: hpfs_map_sector(): read error [ 166.196609][T11163] x_tables: ip6_tables: CT target: only valid in raw table, not ethtool [ 166.306609][T11171] __nla_validate_parse: 10 callbacks suppressed [ 166.306621][T11171] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1498'. [ 166.321739][T11126] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.324245][T11126] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.326659][T11126] bridge_slave_0: entered allmulticast mode [ 166.329283][T11126] bridge_slave_0: entered promiscuous mode [ 166.349584][T11126] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.351937][T11126] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.354236][T11126] bridge_slave_1: entered allmulticast mode [ 166.358301][T11126] bridge_slave_1: entered promiscuous mode [ 166.391007][ T5944] Bluetooth: hci2: command tx timeout [ 166.480770][T11126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.493081][T11126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.496902][ T6693] bridge_slave_1: left allmulticast mode [ 166.500706][ T6693] bridge_slave_1: left promiscuous mode [ 166.502592][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.506471][ T6693] bridge_slave_0: left allmulticast mode [ 166.508627][ T6693] bridge_slave_0: left promiscuous mode [ 166.510505][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.519107][ T6982] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 166.680726][ T6982] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 166.683858][ T6982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 166.691483][ T6982] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 166.694367][ T6982] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 166.696887][ T6982] usb 8-1: Product: syz [ 166.698240][ T6982] usb 8-1: Manufacturer: syz [ 166.699710][ T6982] usb 8-1: SerialNumber: syz [ 166.712683][ T6982] usb 8-1: config 0 descriptor?? [ 166.717998][ T6982] usb 8-1: selecting invalid altsetting 0 [ 166.917719][ T6693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.922921][ T6693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.927449][ T6693] bond0 (unregistering): Released all slaves [ 166.931081][ T6982] usb 8-1: USB disconnect, device number 20 [ 167.023498][T11126] team0: Port device team_slave_0 added [ 167.027004][T11126] team0: Port device team_slave_1 added [ 167.108796][T11126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.111006][T11126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.120744][T11126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.125692][T11126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.128097][T11126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.137004][T11126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.160464][ T40] kauditd_printk_skb: 20881 callbacks suppressed [ 167.160475][ T40] audit: type=1326 audit(2000000024.977:21550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.1489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57418e929 code=0x7ff00000 [ 167.181879][ T40] audit: type=1326 audit(2000000024.986:21551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.1489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57418e929 code=0x7ff00000 [ 167.191891][ T40] audit: type=1326 audit(2000000024.986:21552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.1489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57418e929 code=0x7ff00000 [ 167.203773][ T40] audit: type=1326 audit(2000000024.986:21553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.1489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57418e929 code=0x7ff00000 [ 167.213725][ T40] audit: type=1326 audit(2000000024.986:21554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.1489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57418e929 code=0x7ff00000 [ 167.226517][ T40] audit: type=1326 audit(2000000024.986:21555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.1489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57418e929 code=0x7ff00000 [ 167.236996][ T40] audit: type=1326 audit(2000000024.986:21556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.1489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57418e929 code=0x7ff00000 [ 167.246836][ T40] audit: type=1326 audit(2000000024.986:21557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.1489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57418e929 code=0x7ff00000 [ 167.256292][ T40] audit: type=1326 audit(2000000024.986:21558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.1489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57418e929 code=0x7ff00000 [ 167.265773][ T40] audit: type=1326 audit(2000000024.986:21559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11137 comm="syz.2.1489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57418e929 code=0x7ff00000 [ 167.335428][T11126] hsr_slave_0: entered promiscuous mode [ 167.337674][T11126] hsr_slave_1: entered promiscuous mode [ 167.339750][T11126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.353406][T11126] Cannot create hsr debugfs directory [ 167.580763][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1502'. [ 167.598499][ T6693] hsr_slave_0: left promiscuous mode [ 167.611259][ T6693] hsr_slave_1: left promiscuous mode [ 167.613371][ T6693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.615943][ T6693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.618886][ T6693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.622662][ T6693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.651966][ T6693] veth1_macvtap: left promiscuous mode [ 167.654749][ T6693] veth0_macvtap: left promiscuous mode [ 167.656886][ T6693] veth1_vlan: left promiscuous mode [ 167.658832][ T6693] veth0_vlan: left promiscuous mode [ 167.779510][T11192] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 168.625210][ T5944] Bluetooth: hci2: command tx timeout [ 168.639939][T11230] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1511'. [ 168.703810][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'. [ 168.719672][ T6693] team0 (unregistering): Port device team_slave_1 removed [ 168.836318][ T6693] team0 (unregistering): Port device team_slave_0 removed [ 169.580788][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'. [ 169.663596][T11247] netlink: 'syz.3.1515': attribute type 10 has an invalid length. [ 169.727949][T11251] rtc_cmos 00:05: Alarms can be up to one day in the future [ 169.814837][T11268] ip6tnl1: entered allmulticast mode [ 169.869447][T11271] netlink: 'syz.3.1520': attribute type 4 has an invalid length. [ 169.871994][T11271] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1520'. [ 169.878005][T11271] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.949079][T11280] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1525'. [ 169.952456][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1525'. [ 170.036179][ T838] rtc_cmos 00:05: Alarms can be up to one day in the future [ 170.043833][ T838] rtc_cmos 00:05: Alarms can be up to one day in the future [ 170.049060][ T838] rtc_cmos 00:05: Alarms can be up to one day in the future [ 170.052621][ T838] rtc_cmos 00:05: Alarms can be up to one day in the future [ 170.055095][ T838] rtc rtc0: __rtc_set_alarm: err=-22 [ 170.229193][T11126] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 170.248005][T11126] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 170.255113][T11126] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 170.262806][T11126] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 170.293200][T11335] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1538'. [ 170.317127][T11126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.331059][T11126] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.338331][ T6692] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.340960][ T6692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.349856][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.352815][ T6693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.503754][T11126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.535070][T11126] veth0_vlan: entered promiscuous mode [ 170.545413][T11126] veth1_vlan: entered promiscuous mode [ 170.564657][T11126] veth0_macvtap: entered promiscuous mode [ 170.570101][T11126] veth1_macvtap: entered promiscuous mode [ 170.583377][T11126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.590503][T11126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.600697][T11126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.604176][T11126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.607760][T11126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.611311][T11126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.687234][ T6693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.689967][ T6693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.712254][ T6693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.714776][ T6693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.084525][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'. [ 171.127175][T11393] netlink: 'syz.3.1557': attribute type 21 has an invalid length. [ 171.229715][T11401] binder: 11400:11401 ioctl c0306201 200000000000 returned -14 [ 171.239949][T11401] ubi: mtd0 is already attached to ubi31 [ 171.350113][ T5944] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 171.397286][T11423] netlink: 'syz.5.1567': attribute type 2 has an invalid length. [ 171.400795][T11423] nbd: must specify a device to reconfigure [ 171.452081][T11428] netlink: zone id is out of range [ 171.452149][T11430] syz.5.1569: attempt to access beyond end of device [ 171.452149][T11430] loop5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 171.454118][T11428] netlink: zone id is out of range [ 171.459233][T11430] MINIX-fs: unable to read superblock [ 171.460682][T11428] netlink: zone id is out of range [ 171.464253][T11428] netlink: zone id is out of range [ 171.466382][T11428] netlink: zone id is out of range [ 171.468563][T11428] netlink: zone id is out of range [ 171.470568][T11428] netlink: zone id is out of range [ 171.472258][T11428] netlink: zone id is out of range [ 171.474150][T11428] netlink: zone id is out of range [ 171.476499][T11428] netlink: zone id is out of range [ 171.620836][T11448] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 171.623418][T11448] overlayfs: failed to set xattr on upper [ 171.625370][T11448] overlayfs: ...falling back to redirect_dir=nofollow. [ 171.627705][T11448] overlayfs: ...falling back to index=off. [ 171.630968][T11448] overlayfs: ...falling back to uuid=null. [ 171.633840][T11448] overlayfs: ...falling back to xino=off. [ 171.636013][T11448] overlayfs: conflicting lowerdir path [ 171.907903][T11481] __nla_validate_parse: 3 callbacks suppressed [ 171.907915][T11481] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1581'. [ 172.028277][T11501] netlink: 'syz.5.1582': attribute type 4 has an invalid length. [ 172.030762][T11501] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1582'. [ 172.038916][T11501] : renamed from bond0 (while UP) [ 172.111694][T11507] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1584'. [ 172.115066][T11507] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1584'. [ 172.314866][T11507] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.316955][T11507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.319016][T11507] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.320909][T11507] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 172.324725][T11507] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 172.368099][T11513] mac80211_hwsim hwsim7 wlan0: default FDB implementation only supports local addresses [ 172.606020][T11523] binder: BINDER_SET_CONTEXT_MGR already set [ 172.608047][T11523] binder: 11522:11523 ioctl 4018620d 200000000040 returned -16 [ 172.611006][T11523] binder: 11522:11523 ioctl c0306201 200000000140 returned -22 [ 172.675132][ T40] kauditd_printk_skb: 5810 callbacks suppressed [ 172.675144][ T40] audit: type=1400 audit(2000000030.131:27370): avc: denied { setopt } for pid=11529 comm="syz.2.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 172.807494][T11540] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 172.855432][T11549] 8021q: VLANs not supported on vcan0 [ 172.918038][T11561] batadv1: entered promiscuous mode [ 172.995582][ T40] audit: type=1400 audit(2000000030.430:27371): avc: denied { map } for pid=11569 comm="syz.3.1605" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 173.034645][T11210] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.168671][T11578] overlay: Bad value for 'verity' [ 174.170943][ T40] audit: type=1400 audit(2000000031.534:27372): avc: denied { mounton } for pid=11576 comm="syz.5.1607" path="/173/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 174.206308][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.208823][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.211228][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.213623][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.216423][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.218817][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.221182][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.223559][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.226024][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.238129][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.240564][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.243117][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.245630][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.248060][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.252145][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.254592][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.257088][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.259943][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.262329][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.264754][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.267221][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.269643][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.272439][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.274843][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.277393][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.279892][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.283188][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.285971][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.288742][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.292284][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.294709][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.297104][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.299486][ T5944] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 174.316729][T11588] overlayfs: failed to resolve './file0': -2 [ 174.319441][T11588] overlayfs: failed to resolve './file0': -2 [ 174.346621][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.351944][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.358706][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.363108][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.365673][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.486622][T11592] vxcan1 speed is unknown, defaulting to 1000 [ 174.516323][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.518512][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.596918][T11607] bridge0: entered allmulticast mode [ 174.607823][T11607] pim6reg: entered allmulticast mode [ 174.611396][T11607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1618'. [ 174.616221][T11607] bridge_slave_1: left allmulticast mode [ 174.617972][T11607] bridge_slave_1: left promiscuous mode [ 174.621647][T11607] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.628038][T11607] bridge_slave_0: left allmulticast mode [ 174.629850][T11607] bridge_slave_0: left promiscuous mode [ 174.631731][T11607] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.645973][T11607] bridge0 (unregistering): left allmulticast mode [ 174.784048][T11592] chnl_net:caif_netlink_parms(): no params data found [ 174.894009][T11615] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 174.894644][T11592] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.899796][T11592] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.905397][T11592] bridge_slave_0: entered allmulticast mode [ 174.910696][T11592] bridge_slave_0: entered promiscuous mode [ 174.916341][T11592] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.919246][T11592] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.922746][T11592] bridge_slave_1: entered allmulticast mode [ 174.927057][T11592] bridge_slave_1: entered promiscuous mode [ 174.979636][T11628] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1623'. [ 174.983262][T11592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.988662][T11592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.041407][T11592] team0: Port device team_slave_0 added [ 175.044814][T11592] team0: Port device team_slave_1 added [ 175.055963][T11632] afs: Unknown parameter 'authcell?š_å“' [ 175.087547][T11634] ata3.00: invalid multi_count 1 ignored [ 175.133811][T11210] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.144769][T11592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.148167][T11592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.156243][T11592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.163506][T11592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.165891][T11592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.174950][T11592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.245656][T11210] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.273753][T11592] hsr_slave_0: entered promiscuous mode [ 175.277276][T11592] hsr_slave_1: entered promiscuous mode [ 175.279641][T11592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.282066][T11592] Cannot create hsr debugfs directory [ 175.284309][T11644] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1626'. [ 175.301086][T11644] SELinux: ebitmap: truncated map [ 175.306161][T11644] SELinux: failed to load policy [ 175.325734][T11210] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.366197][T11653] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 175.480623][T11210] bridge_slave_1: left allmulticast mode [ 175.480640][T11210] bridge_slave_1: left promiscuous mode [ 175.480758][T11210] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.490194][T11210] bridge_slave_0: left allmulticast mode [ 175.490209][T11210] bridge_slave_0: left promiscuous mode [ 175.490315][T11210] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.742611][T11210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.747545][T11210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.751655][T11210] bond0 (unregistering): Released all slaves [ 175.892544][ T40] audit: type=1400 audit(2000000033.143:27373): avc: denied { lock } for pid=11663 comm="syz.5.1632" path="socket:[43979]" dev="sockfs" ino=43979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 175.995853][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1633'. [ 176.030553][T11671] raw_sendmsg: syz.5.1634 forgot to set AF_INET. Fix it! [ 176.082958][T11673] xt_hashlimit: size too large, truncated to 1048576 [ 176.168928][T11210] hsr_slave_0: left promiscuous mode [ 176.173681][T11210] hsr_slave_1: left promiscuous mode [ 176.175940][T11210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.178347][T11210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.191652][T11210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.194052][T11210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.267051][T11210] veth1_macvtap: left promiscuous mode [ 176.268882][T11210] veth0_macvtap: left promiscuous mode [ 176.270984][T11210] veth1_vlan: left promiscuous mode [ 176.272715][T11210] veth0_vlan: left promiscuous mode [ 176.535043][T11703] Cannot find del_set index 128 as target [ 176.570930][ T63] Bluetooth: hci2: command tx timeout [ 176.742574][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.743426][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.028982][T11210] team0 (unregistering): Port device team_slave_1 removed [ 177.115387][T11210] team0 (unregistering): Port device team_slave_0 removed [ 177.762267][T11695] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1640'. [ 177.782420][T11592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 177.794524][T11592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 177.798731][T11592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 177.803480][T11592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 177.907189][T11592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.926907][T11592] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.935482][ T6692] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.937923][ T6692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.952302][T11494] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.954657][T11494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.995216][T11724] netlink: 'syz.3.1649': attribute type 7 has an invalid length. [ 177.999120][T11724] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1649'. [ 178.071744][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1651'. [ 178.094542][T11592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.109634][T11736] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1650'. [ 178.134069][T11592] veth0_vlan: entered promiscuous mode [ 178.139451][T11592] veth1_vlan: entered promiscuous mode [ 178.157233][T11592] veth0_macvtap: entered promiscuous mode [ 178.162720][T11592] veth1_macvtap: entered promiscuous mode [ 178.175144][T11592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.184271][T11592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.190149][T11592] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.194087][T11592] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.197470][T11592] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.200840][T11592] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.227486][T11741] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 178.248727][ T6692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.251280][ T6692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.269861][ T6693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.272599][ T6693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.308556][T11748] netlink: 'syz.3.1655': attribute type 4 has an invalid length. [ 178.311369][T11748] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1655'. [ 178.315245][T11748] net_ratelimit: 145 callbacks suppressed [ 178.315254][T11748] wlan1: mtu less than device minimum [ 178.382362][ T40] audit: type=1400 audit(2000000035.472:27374): avc: denied { read } for pid=11749 comm="syz.2.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 178.703090][T11759] fuse: Bad value for 'group_id' [ 178.705551][T11759] fuse: Bad value for 'group_id' [ 178.963288][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.963398][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.322076][T11765] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1661'. [ 179.358183][T11767] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1662'. [ 179.372891][ T40] audit: type=1400 audit(2000000036.408:27375): avc: denied { unmount } for pid=9856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 179.776919][ T6001] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 179.936789][ T6001] usb 8-1: too many configurations: 151, using maximum allowed: 8 [ 179.952307][ T6001] usb 8-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 179.956359][ T6001] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 179.960016][ T6001] usb 8-1: Product: syz [ 179.961985][ T6001] usb 8-1: Manufacturer: syz [ 179.963483][ T6001] usb 8-1: SerialNumber: syz [ 179.966870][ T6001] usb 8-1: config 0 descriptor?? [ 180.188889][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 180.194307][T11776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.197691][T11776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.201651][ T40] audit: type=1400 audit(2000000037.175:27376): avc: denied { append } for pid=11775 comm="syz.3.1665" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 180.262219][ T6982] usb 8-1: USB disconnect, device number 21 [ 180.361226][ T6692] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.646474][ T40] audit: type=1400 audit(2000000038.521:27377): avc: denied { write } for pid=11787 comm="syz.5.1668" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 181.654602][ T40] audit: type=1400 audit(2000000038.521:27378): avc: denied { read } for pid=11787 comm="syz.5.1668" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 181.694759][T11790] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1668'. [ 181.762115][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.767180][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.770989][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.774050][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.778666][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.817965][T11811] netlink: 'syz.2.1675': attribute type 12 has an invalid length. [ 181.906040][T11806] vxcan1 speed is unknown, defaulting to 1000 [ 181.969962][T11820] overlayfs: failed to resolve './file1': -2 [ 181.999355][ T837] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 182.066214][T11806] chnl_net:caif_netlink_parms(): no params data found [ 182.146248][T11806] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.149430][T11806] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.151794][T11806] bridge_slave_0: entered allmulticast mode [ 182.154640][T11806] bridge_slave_0: entered promiscuous mode [ 182.157837][T11806] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.160982][T11806] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.163318][T11806] bridge_slave_1: entered allmulticast mode [ 182.166123][T11806] bridge_slave_1: entered promiscuous mode [ 182.170582][ T837] usb 8-1: Invalid ep0 maxpacket: 16 [ 182.199852][T11806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.204439][T11806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.242485][T11806] team0: Port device team_slave_0 added [ 182.246006][T11806] team0: Port device team_slave_1 added [ 182.279439][T11806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.281708][T11806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.291111][T11806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.295377][T11806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.297506][T11806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.306697][T11806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.320718][ T837] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 182.334366][ T6692] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.400099][T11806] hsr_slave_0: entered promiscuous mode [ 182.403307][T11806] hsr_slave_1: entered promiscuous mode [ 182.407630][T11806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.410240][T11806] Cannot create hsr debugfs directory [ 182.422708][ T6692] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.480621][ T837] usb 8-1: Invalid ep0 maxpacket: 16 [ 182.482594][ T837] usb usb8-port1: attempt power cycle [ 182.535607][ T6692] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.642568][ T6692] bridge_slave_1: left allmulticast mode [ 182.645014][ T6692] bridge_slave_1: left promiscuous mode [ 182.647585][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.654012][ T6692] bridge_slave_0: left allmulticast mode [ 182.656083][ T6692] bridge_slave_0: left promiscuous mode [ 182.658647][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.843946][ T837] usb 8-1: new low-speed USB device number 24 using dummy_hcd [ 182.876230][ T837] usb 8-1: Invalid ep0 maxpacket: 16 [ 182.949640][ T6692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.954873][ T6692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.958868][ T6692] bond0 (unregistering): Released all slaves [ 183.014953][ T837] usb 8-1: new low-speed USB device number 25 using dummy_hcd [ 183.036875][ T837] usb 8-1: Invalid ep0 maxpacket: 16 [ 183.038966][ T837] usb usb8-port1: unable to enumerate USB device [ 183.456108][ T6692] hsr_slave_0: left promiscuous mode [ 183.458334][ T6692] hsr_slave_1: left promiscuous mode [ 183.460376][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.463005][ T6692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.466540][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.468839][ T6692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.502029][ T6692] veth1_macvtap: left promiscuous mode [ 183.503813][ T6692] veth0_macvtap: left promiscuous mode [ 183.506072][ T6692] veth1_vlan: left promiscuous mode [ 183.508577][ T6692] veth0_vlan: left promiscuous mode [ 184.020039][ T63] Bluetooth: hci2: command tx timeout [ 184.217868][ T6692] team0 (unregistering): Port device team_slave_1 removed [ 184.301827][ T6692] team0 (unregistering): Port device team_slave_0 removed [ 184.951754][T11838] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 184.956793][T11838] overlayfs: overlapping lowerdir path [ 184.991487][T11845] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1682'. [ 184.991546][T11848] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1683'. [ 185.004031][ T40] audit: type=1400 audit(2000000041.674:27379): avc: denied { read } for pid=11847 comm="syz.5.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.015854][T11806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.021953][ T40] audit: type=1400 audit(2000000041.683:27380): avc: denied { accept } for pid=11847 comm="syz.5.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.025546][T11806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.034913][T11806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.042663][T11855] netlink: 'syz.2.1685': attribute type 1 has an invalid length. [ 185.044393][T11806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.064277][T11855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.069254][T11857] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 185.104351][T11855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.106771][T11855] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 185.111769][T11855] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 185.135966][T11868] gretap2: entered promiscuous mode [ 185.136567][ T40] audit: type=1400 audit(2000000041.795:27381): avc: denied { setopt } for pid=11847 comm="syz.5.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.139381][T11868] bond2: (slave gretap2): making interface the new active one [ 185.148142][T11868] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 185.172247][T11868] bond2: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 185.208875][T11806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.220738][T11806] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.227091][T11210] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.229442][T11210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.236598][T11210] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.239025][T11210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.289799][T11872] tmpfs: Unknown parameter '×ze' [ 185.292509][ T40] audit: type=1400 audit(2000000041.945:27382): avc: denied { ioctl } for pid=11871 comm="syz.3.1687" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 185.292847][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'. [ 185.358765][T11876] ------------[ cut here ]------------ [ 185.360532][T11876] WARNING: CPU: 3 PID: 11876 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 185.363766][T11876] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 185.365464][T11876] CPU: 3 UID: 0 PID: 11876 Comm: syz.3.1688 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 185.371338][T11876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.374830][T11876] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 185.377030][T11876] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 ff fb 6c 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 73 66 7a 0e 00 75 0b c6 05 6a 66 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 185.383440][T11876] RSP: 0018:ffffc90004d77438 EFLAGS: 00010246 [ 185.385385][T11876] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 185.388037][T11876] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000040dc0 [ 185.390702][T11876] RBP: 0000000004000000 R08: 0000000000000005 R09: 0000000000000000 [ 185.393174][T11876] R10: 0000000000800000 R11: 0000000000000001 R12: 000000000000000e [ 185.395827][T11876] R13: 1ffff920009aee9c R14: 0000000004000000 R15: 000000000000000e [ 185.396073][T11806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.398327][T11876] FS: 00007fbb9b7b36c0(0000) GS:ffff8880d6a53000(0000) knlGS:0000000000000000 [ 185.403911][T11876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.406013][T11876] CR2: 0000200000001000 CR3: 0000000056b37000 CR4: 0000000000352ef0 [ 185.408769][T11876] DR0: 0000000000000040 DR1: 0000000000000004 DR2: 0000000000000003 [ 185.411495][T11876] DR3: 00000000000010e3 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 185.413940][T11876] Call Trace: [ 185.415154][T11876] [ 185.416185][T11876] ? stack_trace_save+0x8e/0xc0 [ 185.417780][T11876] ? __pfx_stack_trace_save+0x10/0x10 [ 185.419458][T11876] ? stack_depot_save_flags+0x28/0xa40 [ 185.421253][T11876] ? __pfx_stack_trace_save+0x10/0x10 [ 185.422946][T11876] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 185.424973][T11876] ? kasan_save_stack+0x42/0x60 [ 185.426565][T11876] ? kasan_save_stack+0x33/0x60 [ 185.428201][T11876] ? kasan_save_track+0x14/0x30 [ 185.430143][T11876] ? __kasan_kmalloc+0xaa/0xb0 [ 185.432198][T11876] ? common_read+0xc1/0x3d0 [ 185.432323][T11806] veth0_vlan: entered promiscuous mode [ 185.433816][T11876] ? policydb_read+0x871/0x3220 [ 185.437225][T11876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.439437][T11876] ? hashtab_init+0x1b1/0x290 [ 185.441253][T11876] __alloc_pages_noprof+0xb/0x1b0 [ 185.443385][T11876] ___kmalloc_large_node+0x84/0x1e0 [ 185.445270][T11876] ? hashtab_init+0x1b1/0x290 [ 185.447030][T11876] __kmalloc_large_node_noprof+0x1c/0x70 [ 185.448960][T11876] __kmalloc_noprof.cold+0xc/0x61 [ 185.450750][T11876] hashtab_init+0x1b1/0x290 [ 185.452625][T11876] ? __asan_memcpy+0x3c/0x60 [ 185.454248][T11876] common_read+0x1c2/0x3d0 [ 185.455746][T11876] ? __pfx_common_read+0x10/0x10 [ 185.457473][T11876] ? __kmalloc_noprof+0x242/0x510 [ 185.459538][T11876] ? __pfx_common_read+0x10/0x10 [ 185.461206][T11876] policydb_read+0x871/0x3220 [ 185.463425][T11876] ? __pfx_policydb_read+0x10/0x10 [ 185.465073][T11876] security_load_policy+0x15c/0x12c0 [ 185.466758][T11876] ? irqentry_exit+0x3b/0x90 [ 185.468281][T11876] ? __pfx_security_load_policy+0x10/0x10 [ 185.470360][T11876] ? _copy_from_user+0x93/0xd0 [ 185.471904][T11876] sel_write_load+0x332/0x1bd0 [ 185.473624][T11876] ? lockdep_hardirqs_on+0x7c/0x110 [ 185.475554][T11876] ? __lock_acquire+0xb8a/0x1c90 [ 185.477150][T11876] ? __pfx_sel_write_load+0x10/0x10 [ 185.478826][T11876] ? __pfx_sel_write_load+0x10/0x10 [ 185.480479][T11876] vfs_write+0x29d/0x1150 [ 185.481872][T11876] ? __pfx___mutex_lock+0x10/0x10 [ 185.483489][T11876] ? __pfx_vfs_write+0x10/0x10 [ 185.485282][T11876] ? __fget_files+0x20e/0x3c0 [ 185.486803][T11876] ksys_write+0x12a/0x250 [ 185.488223][T11876] ? __pfx_ksys_write+0x10/0x10 [ 185.489809][T11876] ? fput+0x70/0xf0 [ 185.491055][T11876] do_syscall_64+0xcd/0x4c0 [ 185.492521][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.494431][T11876] RIP: 0033:0x7fbb9a98e929 [ 185.496398][T11876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.502388][T11876] RSP: 002b:00007fbb9b7b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.505000][T11876] RAX: ffffffffffffffda RBX: 00007fbb9abb5fa0 RCX: 00007fbb9a98e929 [ 185.507583][T11876] RDX: 0000000000001790 RSI: 0000200000000000 RDI: 0000000000000004 [ 185.510079][T11876] RBP: 00007fbb9aa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 185.512655][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.515144][T11876] R13: 0000000000000000 R14: 00007fbb9abb5fa0 R15: 00007ffeaef03ce8 [ 185.517857][T11876] [ 185.518922][T11876] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 185.521165][T11876] CPU: 3 UID: 0 PID: 11876 Comm: syz.3.1688 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 185.524837][T11876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.528196][T11876] Call Trace: [ 185.529259][T11876] [ 185.530206][T11876] dump_stack_lvl+0x3d/0x1f0 [ 185.531670][T11876] panic+0x71c/0x800 [ 185.532921][T11876] ? __pfx_panic+0x10/0x10 [ 185.534360][T11876] ? show_trace_log_lvl+0x29b/0x3e0 [ 185.536000][T11876] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 185.537919][T11876] check_panic_on_warn+0xab/0xb0 [ 185.539481][T11876] __warn+0xf6/0x3c0 [ 185.540724][T11876] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 185.542627][T11876] report_bug+0x3c3/0x580 [ 185.543983][T11876] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 185.545907][T11876] handle_bug+0x184/0x210 [ 185.547352][T11876] exc_invalid_op+0x17/0x50 [ 185.548791][T11876] asm_exc_invalid_op+0x1a/0x20 [ 185.550328][T11876] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 185.552395][T11876] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 ff fb 6c 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 73 66 7a 0e 00 75 0b c6 05 6a 66 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 185.558353][T11876] RSP: 0018:ffffc90004d77438 EFLAGS: 00010246 [ 185.560244][T11876] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 185.562691][T11876] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000040dc0 [ 185.565153][T11876] RBP: 0000000004000000 R08: 0000000000000005 R09: 0000000000000000 [ 185.567649][T11876] R10: 0000000000800000 R11: 0000000000000001 R12: 000000000000000e [ 185.570083][T11876] R13: 1ffff920009aee9c R14: 0000000004000000 R15: 000000000000000e [ 185.572535][T11876] ? stack_trace_save+0x8e/0xc0 [ 185.574063][T11876] ? __pfx_stack_trace_save+0x10/0x10 [ 185.575752][T11876] ? stack_depot_save_flags+0x28/0xa40 [ 185.577468][T11876] ? __pfx_stack_trace_save+0x10/0x10 [ 185.579156][T11876] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 185.581122][T11876] ? kasan_save_stack+0x42/0x60 [ 185.582663][T11876] ? kasan_save_stack+0x33/0x60 [ 185.584197][T11876] ? kasan_save_track+0x14/0x30 [ 185.585923][T11876] ? __kasan_kmalloc+0xaa/0xb0 [ 185.587543][T11876] ? common_read+0xc1/0x3d0 [ 185.588976][T11876] ? policydb_read+0x871/0x3220 [ 185.590529][T11876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.592434][T11876] ? hashtab_init+0x1b1/0x290 [ 185.593924][T11876] __alloc_pages_noprof+0xb/0x1b0 [ 185.595551][T11876] ___kmalloc_large_node+0x84/0x1e0 [ 185.597203][T11876] ? hashtab_init+0x1b1/0x290 [ 185.598705][T11876] __kmalloc_large_node_noprof+0x1c/0x70 [ 185.600455][T11876] __kmalloc_noprof.cold+0xc/0x61 [ 185.602051][T11876] hashtab_init+0x1b1/0x290 [ 185.603497][T11876] ? __asan_memcpy+0x3c/0x60 [ 185.604990][T11876] common_read+0x1c2/0x3d0 [ 185.606418][T11876] ? __pfx_common_read+0x10/0x10 [ 185.608006][T11876] ? __kmalloc_noprof+0x242/0x510 [ 185.609832][T11876] ? __pfx_common_read+0x10/0x10 [ 185.611462][T11876] policydb_read+0x871/0x3220 [ 185.612954][T11876] ? __pfx_policydb_read+0x10/0x10 [ 185.614621][T11876] security_load_policy+0x15c/0x12c0 [ 185.616296][T11876] ? irqentry_exit+0x3b/0x90 [ 185.617809][T11876] ? __pfx_security_load_policy+0x10/0x10 [ 185.619614][T11876] ? _copy_from_user+0x93/0xd0 [ 185.621139][T11876] sel_write_load+0x332/0x1bd0 [ 185.622672][T11876] ? lockdep_hardirqs_on+0x7c/0x110 [ 185.624334][T11876] ? __lock_acquire+0xb8a/0x1c90 [ 185.625912][T11876] ? __pfx_sel_write_load+0x10/0x10 [ 185.627581][T11876] ? __pfx_sel_write_load+0x10/0x10 [ 185.629201][T11876] vfs_write+0x29d/0x1150 [ 185.630568][T11876] ? __pfx___mutex_lock+0x10/0x10 [ 185.632152][T11876] ? __pfx_vfs_write+0x10/0x10 [ 185.633656][T11876] ? __fget_files+0x20e/0x3c0 [ 185.635183][T11876] ksys_write+0x12a/0x250 [ 185.636545][T11876] ? __pfx_ksys_write+0x10/0x10 [ 185.638099][T11876] ? fput+0x70/0xf0 [ 185.639332][T11876] do_syscall_64+0xcd/0x4c0 [ 185.640771][T11876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.642626][T11876] RIP: 0033:0x7fbb9a98e929 [ 185.644032][T11876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.650006][T11876] RSP: 002b:00007fbb9b7b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.652591][T11876] RAX: ffffffffffffffda RBX: 00007fbb9abb5fa0 RCX: 00007fbb9a98e929 [ 185.655084][T11876] RDX: 0000000000001790 RSI: 0000200000000000 RDI: 0000000000000004 [ 185.657565][T11876] RBP: 00007fbb9aa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 185.660176][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.662726][T11876] R13: 0000000000000000 R14: 00007fbb9abb5fa0 R15: 00007ffeaef03ce8 [ 185.665259][T11876] [ 185.667006][T11876] Kernel Offset: disabled [ 185.668412][T11876] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:27:27 Registers: info registers vcpu 0 CPU#0 RAX=00000000001dcf8f RBX=0000000000000000 RCX=ffffffff8b801c19 RDX=0000000000000000 RSI=ffffffff8de1a168 RDI=ffffffff8c157aa0 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a81150 R15=0000000000000000 RIP=ffffffff8b80077f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000002c0 CR3=0000000048115000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030656764697262 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99c6211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99c6211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99c6211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99c6211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99c6211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99c6211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99c6384488 00007f99c6384480 00007f99c6384478 00007f99c6384450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99c6eed100 00007f99c6384440 00007f99c6380004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99c6384498 00007f99c6384490 00007f99c6384488 00007f99c6384480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3200000000000000 0000000022000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000fff000000 0000000006000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000004000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080080783 RBX=0000000000000000 RCX=ffff888106051070 RDX=000000000000009d RSI=ffffffff86a88a28 RDI=ffff8881060512d0 RBP=0000000000000001 RSP=ffffc900006779a0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000002c00 R12=0000000000000001 R13=0000000000004e20 R14=ffff888106051070 R15=0000000000000001 RIP=ffffffff86a88a6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe164ce7d60 CR3=0000000032518000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010000100 Opmask01=0000000000000000 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeaef04070 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9aa11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9aa11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9aa11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9aa11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9aa11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9aa11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000002 RDX=0000000000000000 RSI=ffff88802c890af0 RDI=0000000000000007 RBP=ffff88802c890000 RSP=ffffc900048ef158 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000028 R11=0000000000000001 R12=ffff88802c890af0 R13=0000000000000000 R14=0000000000000000 R15=ffffffff8e5c4940 RIP=ffffffff8198588e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007faafa4a0c80 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007faafa808000 CR3=00000000591b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 0000ff0000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 000000ffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e322e325f434249 4c4700352e322e32 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000002e322e32 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faafa80bb20 00007faafa80c050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b8a55 RDI=ffffffff9b087320 RBP=ffffffff9b0872e0 RSP=ffffc90004d76da0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000062 R14=ffffffff9b0872e0 R15=ffffffff855b89f0 RIP=ffffffff855b8a7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbb9b7b36c0 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=0000000056b37000 CR4=00352ef0 DR0=0000000000000040 DR1=0000000000000004 DR2=0000000000000003 DR3=00000000000010e3 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040002 Opmask01=0000000000000000 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9aa11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9aa11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9aa11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9aa11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9aa11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9aa11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9ab84488 00007fbb9ab84480 00007fbb9ab84478 00007fbb9ab84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9b6ed100 00007fbb9ab84440 00007fbb9ab84458 00007fbb9ab844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb9ab84498 00007fbb9ab84490 00007fbb9ab84488 00007fbb9ab84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000