last executing test programs: 11m52.325287008s ago: executing program 32 (id=2550): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 11m51.83145589s ago: executing program 33 (id=2587): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000002e00030026bdf000fcdbdf250400000004000d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 11m51.812508117s ago: executing program 34 (id=2572): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="e80100002e000100000000000000000004001980d201098014"], 0x1e8}], 0x1, 0x0, 0x0, 0x84}, 0x300) 11m51.332182079s ago: executing program 35 (id=2600): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x2}]}, 0x14}], 0x1}, 0x0) 10m28.478033036s ago: executing program 36 (id=6691): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 10m7.75591842s ago: executing program 37 (id=7506): r0 = syz_clone(0x4400080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x380) 9m56.174053396s ago: executing program 38 (id=7341): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id']) 9m15.591881502s ago: executing program 39 (id=7887): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 7m40.275967327s ago: executing program 40 (id=7888): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x4) landlock_restrict_self(0xffffffffffffffff, 0x4) 5m5.927964178s ago: executing program 41 (id=8238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000107, 0x0, 0x1}]}) 4m56.824420099s ago: executing program 2 (id=8565): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) 4m56.727007707s ago: executing program 2 (id=8566): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003500)=@newtaction={0x60, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x31fd, 0x800, 0x0, 0x0, 0xfa05}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xa850}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m56.643399164s ago: executing program 2 (id=8567): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) 4m56.557071364s ago: executing program 3 (id=8568): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6, 0x80, 0x1, 0xfffffffd, 0x91b1}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x269f0ffd}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) 4m56.556945206s ago: executing program 2 (id=8578): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 4m56.556680372s ago: executing program 2 (id=8569): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01ffffff7f00000000006700080008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c40001"], 0x30}}, 0x0) 4m56.483971698s ago: executing program 3 (id=8571): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x9000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 4m56.446824451s ago: executing program 3 (id=8573): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 4m56.126043676s ago: executing program 2 (id=8576): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3f}}}}]}]}, 0x84}}, 0x0) syz_usb_connect$uac1(0x3, 0x87, &(0x7f0000000180)={{0x12, 0x1, 0xc2c837444fab22da, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0xf5, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xe}, [@extension_unit={0x7, 0x24, 0x8, 0x2, 0x5, 0x98}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x61, 0x2, {0x7, 0x25, 0x1, 0x2, 0x3, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x2}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x4, 0x7, 0xe8}]}, {{0x9, 0x5, 0x82, 0x9, 0x28, 0x1, 0x65, 0xac, {0x7, 0x25, 0x1, 0x80, 0x50, 0x7ff}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0xf4, 0x80, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "d8bb67"}, {0x5, 0x24, 0x0, 0xcc94}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x7, 0x0, 0xd}, {0x6, 0x24, 0x1a, 0xfffb, 0xc06245002bb9dd04}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfd, 0x6, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xa, 0x10, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xfb, 0x7, 0x4}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x0, 0x3c, 0x4, 0x50, 0x4}, 0xbb, &(0x7f0000000280)={0x5, 0xf, 0xbb, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x36e92a1, 0x11f0f, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0x5, 0xf00f, 0x96, [0xf, 0xc0f0]}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x10, 0x2, 0x0, 0xf0f, 0xb2, [0xffc0cf, 0x5f0f]}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x5, 0x780, 0x5}, @generic={0x73, 0x10, 0x6, "5de02aeab7b3ba05658821bb1b08dd0c5ae44cee0e8cca970ada8ca53b1768b15ee76704842c9ad2436013af1c8a6e0333a55a1d46063479efd3f5f6d54d0187103c18a4126eb0fb26c71aabe532eb49899ab0a67691934ff109a09538f3ac17069c6695f66f438c1e05c3cd055325b4"}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x429}}]}) 4m56.033290227s ago: executing program 42 (id=8576): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3f}}}}]}]}, 0x84}}, 0x0) syz_usb_connect$uac1(0x3, 0x87, &(0x7f0000000180)={{0x12, 0x1, 0xc2c837444fab22da, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0xf5, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xe}, [@extension_unit={0x7, 0x24, 0x8, 0x2, 0x5, 0x98}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x61, 0x2, {0x7, 0x25, 0x1, 0x2, 0x3, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x2}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x4, 0x7, 0xe8}]}, {{0x9, 0x5, 0x82, 0x9, 0x28, 0x1, 0x65, 0xac, {0x7, 0x25, 0x1, 0x80, 0x50, 0x7ff}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0xf4, 0x80, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "d8bb67"}, {0x5, 0x24, 0x0, 0xcc94}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x7, 0x0, 0xd}, {0x6, 0x24, 0x1a, 0xfffb, 0xc06245002bb9dd04}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfd, 0x6, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xa, 0x10, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xfb, 0x7, 0x4}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x0, 0x3c, 0x4, 0x50, 0x4}, 0xbb, &(0x7f0000000280)={0x5, 0xf, 0xbb, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x36e92a1, 0x11f0f, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0x5, 0xf00f, 0x96, [0xf, 0xc0f0]}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x10, 0x2, 0x0, 0xf0f, 0xb2, [0xffc0cf, 0x5f0f]}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x5, 0x780, 0x5}, @generic={0x73, 0x10, 0x6, "5de02aeab7b3ba05658821bb1b08dd0c5ae44cee0e8cca970ada8ca53b1768b15ee76704842c9ad2436013af1c8a6e0333a55a1d46063479efd3f5f6d54d0187103c18a4126eb0fb26c71aabe532eb49899ab0a67691934ff109a09538f3ac17069c6695f66f438c1e05c3cd055325b4"}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x429}}]}) 4m55.641725153s ago: executing program 3 (id=8583): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 4m55.488414082s ago: executing program 3 (id=8587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050027bd7000002000040600000008000300", @ANYRES32=r2, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) 4m54.933183676s ago: executing program 3 (id=8594): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 4m54.823980453s ago: executing program 43 (id=8594): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 2m24.781201509s ago: executing program 4 (id=11899): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000001c0)=0x28) 2m24.706878989s ago: executing program 4 (id=11901): r0 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 2m24.544858356s ago: executing program 4 (id=11904): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) 2m24.376075598s ago: executing program 4 (id=11905): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 2m24.320059789s ago: executing program 4 (id=11907): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x4000, 0x0, r3}) 2m23.947831155s ago: executing program 4 (id=11916): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) 2m23.823135912s ago: executing program 44 (id=11916): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) 54.931627281s ago: executing program 6 (id=13632): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000540)=0x9) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 54.683819102s ago: executing program 6 (id=13638): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x2, 0x0, 0x1a, 0x3000, 0x4, 0x800000, 0x0, 0xffffffffffffffff, 0x8, 0xfffffffe}) 53.692613044s ago: executing program 6 (id=13650): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 53.66124322s ago: executing program 6 (id=13652): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) unshare(0x6020480) 53.597888378s ago: executing program 6 (id=13654): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0xc4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 53.025897039s ago: executing program 6 (id=13669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r2, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x9}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1}, 0x4004000) 52.880519724s ago: executing program 45 (id=13669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r2, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x9}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1}, 0x4004000) 50.103953588s ago: executing program 5 (id=13709): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 50.096221448s ago: executing program 5 (id=13712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x2810) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r1}, &(0x7f0000001a40), &(0x7f0000001bc0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 50.02383656s ago: executing program 5 (id=13714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@rr={0x7, 0x3, 0x1d}]}}, {0x4e26, 0x4e20, 0x4d, 0x0, @opaque="4cb32c17d9b24e7d2a25ab043110260ac0676ea92412bcd66247c2da783677ae6c8728e7f0ff42c4a414f9063664d204e4084e7aff0b2cd2b3d6269485315bba8415e606e8"}}}, 0x73) 48.6245086s ago: executing program 5 (id=13766): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)='./file0\x00') 48.55598718s ago: executing program 5 (id=13768): r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 46.933721628s ago: executing program 5 (id=13795): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r3, 0x7, 0x2, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 46.88347744s ago: executing program 46 (id=13795): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r3, 0x7, 0x2, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 33.699285655s ago: executing program 7 (id=13998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) 33.546569417s ago: executing program 7 (id=14004): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000880)={{r1}, "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 33.347981602s ago: executing program 7 (id=14006): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 33.123475001s ago: executing program 7 (id=14007): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) recvfrom$inet_nvme(r2, &(0x7f0000000300)=""/191, 0xbf, 0x40000000, 0x0, 0x0) 32.939137131s ago: executing program 7 (id=14009): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7fec}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 32.856495234s ago: executing program 7 (id=14010): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r2, 0x0, 0x0) 9.690784414s ago: executing program 47 (id=14010): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r2, 0x0, 0x0) 1.893143602s ago: executing program 8 (id=14214): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r1 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0xa8bf, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.741170338s ago: executing program 8 (id=14215): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x884) 1.640896552s ago: executing program 0 (id=14218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x8000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.572056485s ago: executing program 9 (id=14220): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000400)="6f1971de61b883d0e641f00d172c04a036f7f9a840dfdda8a3aed0727f37915174a685a9d8f28de814173d755d671faa9260e788428bbed39da7605f857147d1b0603fab8037c85f0f51c16e8ced2718890a5966c22acc58550036ea588ee3", 0x5f}, {&(0x7f0000000a40)="9afb3014f234f22d28df9663ee2e0cf0880714a24f55663972a8d96c2903d6c5be01cb01617a6affef15c6e183c5a594e5ea07f509ec94320bfc96cb3b26ebfe553fd696fda69ceacb9e04ba78261e134ab08770c3f51f2c659486851ce1f74d4973737347e3ef6a2e7004c70d9465710ef53fe6c10e4f92404b2574db9e723b68bc05515bcc1afa963dbada1d3389b51458977a64ac583a49f3c056f1a0d7c412abefb1b2e15bed96ded411558dfc2b4d6c15ed04acc9901a9c4447c0fd6dd9434e60a18ce17b4ec8573156e9210c4739f76300f7bacc287fb92a66b37003751d8ed2ea996613983d68626875ed94b4689565b350a52483fa72724ba7709429c5876893435c04018fb9c8afddfdb31d29405cfc600bc103f3a50e8cd556382b51b34c914a025228b05673c7906755a2603662d7dbd8305144eb418c1c6fefd674fadd6c66872201c860fc8c6ce9e4fee685b6e5a64f33992460ce04b6502626007ef44906d896ddd4f93f82e61074b58d98560b7479edeba3ffe27ce28b5bd92d5edfb7a4ea61e17482c26b9120b25d797fab01403a56774051c91938958cb319a71e4c1e2b8a456b72455cc809bc39eea13fb11472d5063dae48702b97b0e31ec0356019100d5ad0def3fcf8043d289624458960831959a4259cfdf34545a20c6c2e7e1fa6ef096d940edc32a378683bb0364e078aed5970657bc3d78e5f73152018359a9195329b277712819f693d6aa4641137f22c7680c74a192483825df61cce4411784936615bc4b81e363ec16edd721f2ff262b1ad229e4477f1a7002398ffc2e62c9a9fde32135a1626c955999ec636c266bd0d5957432087698f7ef9169aa81a987d5b79bbc4bc32c341ae2e1421449f6c110986ad666985bdd632b6589ab886de78dc006ae16641881f40c33554e8a3391c6dde0a4efe927d1f089d4f15a8a7dc252216450c423f56a8d664a018e2423e57efdaf2f7623ebf5706ac6115879504dd0477417556049008bed95ea6f66f69a24da5f552cf9b6b3fa5e59c75a1567b7daf975e00ba307cfb5afaa4e7932b78e038fd2debff7c09688b142b61e92f627884374577d150d3b9ace02b0e1ce26322afcedf6e380fee78ad8bca45f0f3b240f4cdb21d343b30cabc55591cc6ffdea0c8ef8cc1772921ab5b4f40c80b86438ba019108a13320ca50f95884c4f670bb09411507dbbcaaa508edc01310a92c6684dc62206211d3a86b9bf5513fab3db9b7101874799126bee93617ba66c46f194c260f975f7d1da5f3769182f7591b630bdc842f7fdd5305f933ba1a1ba6fc63ae5cddb96bbe8767b068d5335bbf8da764982e449c292667da85558ea1ebad91c2ce91974de72b274e49e036d890082ef80045abe58e25f69351db8154ae1d14a16d06761e4f04dc8b925919db6dcacf2bd016177384fbd30140219f005beb5bd4baa428ab3093943562d53dd765c0569b53280b5a26800b7d86c158c282cefbef28dc2db673d4d170fd1d154a5740d0ce41a6aaf117981d3d72883d83c6ceee70e5dfe68f31ba18ae70b868ecf96739cfc0695d362a29180bb30aebee6e1fc3d4bbb8963fe5a34e8ba32411369fcbe3ce814113c2aa49f987cd58d9a2472fc12fdccc54065cf502c5c70d49ad55fa9a242e5ff3eede878db82cf69da15a12b560eefdc9c0d249f85f83201d763212dd3933d11fb1d2477f4741c27fb4f537636ef0446a07c86d315acbd779c898acce2a2da4f83f99b49e52b3c39bcf368785ff0eae5c0ffe001a02d6a71a0b983fd3e28211e66f361105666083b39459301ce09020da3b78ff89494b51afb334315a4973ea1a4c873603ff0b742da727a390ae1f6a7d6b93271bf9136130cfb91cf3d63e8e09176d27cf3fcac4772aa20f2bca4431b24e08e74dbce7b0f1603b44c26e53b49fee4fd832c9e136c70be310ef8d4427e6623365b3e60e63fcba04a04ab0b2a2ac172ecd3e273857832061c3db30a9b3245775b6f5cedd6f2539a0213c502898d3d69877bac7b9d38df2019eb4abb53701271f98d88710a1cb8422051c0685f6c9867b8742d62fa640b692a897a9ab544321858ab30b3ca2f22ae2befe737774ce0b3e77466772764e3e27a1f8e439c4f4654d4fa804f446bae4daa98362832e1e395304095dbce0c2b107fbde30c03b7d94e69dd16e4b93ef63220094a51ee4cd0351e0da0eaec9f39b50c5f428eb1b280167ae744def325ccdbf569ba0e3bb400b8199ca6dc494c5dedccdce60dcb49c581c49b35188d4afd4e5713afbe05bb54739dbe89dee76c15d5b97198d127c5fd071e41da59f1f0e2ccc49ac32a54f720cf24ee34ab757267f78f08f639cd0691fec004e3b344da1ea6132822ce744b44bef82e468471ae2ec088ea212300f181590b1162b7012c0875", 0x6b4}], 0x2}, 0x2000040) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.535828601s ago: executing program 9 (id=14221): creat(&(0x7f00000002c0)='./file0\x00', 0x1) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) r3 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 1.461789752s ago: executing program 8 (id=14223): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r0 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 1.354879579s ago: executing program 0 (id=14226): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) sync() 1.337207018s ago: executing program 9 (id=14227): fanotify_init(0x200, 0x40000) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e3a0d010200010000000000001011030502010080000000000000005cf7380ff0d0"], 0x3d) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) mmap(&(0x7f00007c3000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x20400, 0x82) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040d4) 1.272411224s ago: executing program 1 (id=14228): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRESDEC], 0x31) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x46) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 1.272115959s ago: executing program 9 (id=14229): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.271815911s ago: executing program 1 (id=14230): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001080)="b79f", 0x2}], 0x1, &(0x7f0000002080)=[{0x18, 0x10a, 0x7, "940709734a3c"}, {0x10, 0x112, 0x9}], 0x28}, 0x4000000) 1.077348465s ago: executing program 8 (id=14231): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x147}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 992.187345ms ago: executing program 9 (id=14232): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r1, 0x400, 0x1) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) 714.588801ms ago: executing program 0 (id=14233): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000280)={@val={0xa, 0x1}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xfe, @empty, @mcast2, {[], {0x4e23, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 453.686347ms ago: executing program 0 (id=14234): write(0xffffffffffffffff, &(0x7f0000000000)='Y', 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0x3000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 288.588418ms ago: executing program 1 (id=14235): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 288.325247ms ago: executing program 1 (id=14236): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 255.753439ms ago: executing program 1 (id=14237): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0xfffffeff, 0x4, 0xc2, 0x2, 0x3, 0xbc, 0x80, 0x6, 0x1, 0x44, 0x8, 0x3, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x87, 0xa, 0x13, 0x7, 0x6, 0xffffffffffffffff}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0x6, 0x3, 0x15, 0x0, 0x4, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0x3ff, 0x5, 0x3, 0x1, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0xfffffffffffffffc], 0xeeee8000, 0x600}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 248.304203ms ago: executing program 0 (id=14238): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1840, 0x92) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f00000010c0)="02de2d8c5ce079381c1c9239218c1b7c285885c8889f7f55cc5fb863ec86b709d51400d9d2b09913846f2cd0e18c6502acb404cb779dfd9b392f9cf1faa5403f4e53c2a267f6a5b9d6ce4c0424c5fbc66c416fcf4df2c9050a4215887c844c03876b4b164cfb87435497e8799d48b9fe25ed567b8fb94f48f9c6d5938922414f38126177fb63212e3ad34744fb355b38df8b6554f04223b45c3227e8e79d41284986e9402e85a4470b37d6138b98", 0xae) sendfile(r1, r0, 0x0, 0x40001) 169.004334ms ago: executing program 1 (id=14239): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = syz_usbip_server_init(0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a6404020002072659700000109022400010000"], 0x0) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) 140.54945ms ago: executing program 8 (id=14240): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x15, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0xc0184d15, 0x0) 85.601256ms ago: executing program 0 (id=14241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 85.333842ms ago: executing program 8 (id=14242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 0s ago: executing program 9 (id=14243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): x0 after dequeue, screwing up backlog [ 686.951875][ T8587] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 686.964536][T11180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.124354][ T8587] usb 11-1: config 0 has no interfaces? [ 687.127569][ T8587] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 687.131355][ T8587] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 687.134866][ T8587] usb 11-1: SerialNumber: syz [ 687.138965][ T8587] usb 11-1: config 0 descriptor?? [ 687.186433][ T990] loop6: detected capacity change from 0 to 2640 [ 687.190754][T22822] buffer_io_error: 43 callbacks suppressed [ 687.190765][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.195516][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.198623][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.201640][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.204474][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.207789][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.210736][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.213616][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.216200][T22822] ldm_validate_partition_table(): Disk read failed. [ 687.219273][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.222531][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.224951][T22822] Dev loop6: unable to read RDB block 0 [ 687.226777][T22822] loop6: unable to read partition table [ 687.231854][ T990] ldm_validate_partition_table(): Disk read failed. [ 687.235291][ T990] Dev loop6: unable to read RDB block 0 [ 687.238085][ T990] loop6: unable to read partition table [ 687.241119][ T990] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 687.360437][ T830] usb 11-1: USB disconnect, device number 8 [ 687.918172][ T5344] ldm_validate_partition_table(): Disk read failed. [ 687.922220][ T5344] Dev loop6: unable to read RDB block 0 [ 687.927457][ T5344] loop6: unable to read partition table [ 689.026006][ T1031] net_ratelimit: 4 callbacks suppressed [ 689.026023][ T1031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.032332][ T1031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.036840][ T1031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.046279][ T1031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.054280][ T1031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.059161][ T1031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.063200][ T1031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.067331][ T1031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.072268][ T1031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.076345][ T1031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.096855][ T1064] overlayfs: failed to clone upperpath [ 690.117160][ T24] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 690.287965][ T24] usb 12-1: Using ep0 maxpacket: 8 [ 690.294145][ T24] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 690.297709][ T24] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 690.309350][ T24] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 690.313448][ T24] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 690.317676][ T24] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 690.324043][ T24] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 690.328032][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.565524][ T24] usb 12-1: usb_control_msg returned -32 [ 690.568368][ T24] usbtmc 12-1:16.0: can't read capabilities [ 691.180441][ T6202] usb 12-1: USB disconnect, device number 22 [ 691.453851][ T1154] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12226'. [ 691.454233][ T1153] netlink: 'syz.8.12227': attribute type 9 has an invalid length. [ 691.460023][ T1153] netlink: 'syz.8.12227': attribute type 11 has an invalid length. [ 691.463357][ T1153] netlink: 'syz.8.12227': attribute type 12 has an invalid length. [ 691.476198][ T1153] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.12227'. [ 691.480172][ T1153] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12227'. [ 691.488796][ T41] kauditd_printk_skb: 8 callbacks suppressed [ 691.488808][ T41] audit: type=1804 audit(2000000478.974:856): pid=1157 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.12228" name="file1" dev="tmpfs" ino=5801 res=1 errno=0 [ 691.608766][ T41] audit: type=1400 audit(2000000479.087:857): avc: denied { attach_queue } for pid=1160 comm="syz.8.12229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 691.737370][ T1172] overlayfs: failed to clone upperpath [ 691.815468][ T41] audit: type=1400 audit(2000000479.283:858): avc: denied { getopt } for pid=1178 comm="syz.1.12237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 691.926662][ T1186] tls_set_device_offload: netdev not found [ 693.019430][ T1215] geneve1: Caught tx_queue_len zero misconfig [ 693.675508][ T1229] syzkaller1: entered promiscuous mode [ 693.677900][ T1229] syzkaller1: entered allmulticast mode [ 694.128256][ T24] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 694.289334][ T24] usb 13-1: Using ep0 maxpacket: 8 [ 694.305386][ T24] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 694.311935][ T24] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 694.317798][ T24] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 694.325334][ T24] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 694.332401][ T24] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 694.337120][ T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.444662][ T1244] netlink: 208240 bytes leftover after parsing attributes in process `syz.7.12260'. [ 694.580469][ T24] usb 13-1: usb_control_msg returned -32 [ 694.583035][ T24] usbtmc 13-1:16.0: can't read capabilities [ 694.603441][ T24] usb 13-1: USB disconnect, device number 14 [ 694.760981][T11535] net_ratelimit: 26 callbacks suppressed [ 694.761000][T11535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.799661][ T1250] kvm: kvm [1248]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 695.171622][ T1272] syzkaller1: entered promiscuous mode [ 695.261351][T20530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.338657][ T1276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.356612][ T1276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.362837][ T1276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.377736][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.381485][ T1275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.426239][ T1278] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12273'. [ 695.836364][ T41] audit: type=1326 audit(2000000483.042:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1297 comm="syz.8.12281" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff58399aeb9 code=0x0 [ 695.872956][T11535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.982689][ T1304] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12283'. [ 696.018091][ T1304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 696.034984][ T1304] bond2: (slave batadv1): Opening slave failed [ 696.772404][ T41] audit: type=1400 audit(2000000483.921:860): avc: denied { mounton } for pid=1336 comm="syz.8.12295" path="/152/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 696.865467][ T6152] usb 12-1: new low-speed USB device number 23 using dummy_hcd [ 696.912914][ T1349] netlink: 'syz.8.12301': attribute type 14 has an invalid length. [ 696.915634][ T1349] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12301'. [ 696.920161][ T1349] netlink: 'syz.8.12301': attribute type 14 has an invalid length. [ 696.922424][ T1349] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12301'. [ 696.959932][ T1352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.963374][ T1352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.038911][ T6152] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 697.044235][ T6152] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 697.051414][ T6152] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 697.055610][ T6152] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 697.061209][ T6152] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 697.066442][ T6152] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 697.070653][ T6152] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 697.074833][ T6152] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 697.078952][ T6152] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 697.085627][ T6152] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 697.089601][ T6152] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 697.092489][ T6152] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 697.095941][ T6152] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 697.099814][ T6152] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 697.105157][ T6152] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 697.112930][ T6152] usb 12-1: string descriptor 0 read error: -22 [ 697.115058][ T6152] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 697.118117][ T6152] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.129356][ T6152] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 697.170945][ T1363] netlink: 9 bytes leftover after parsing attributes in process `syz.8.12306'. [ 697.179436][ T1363] gretap0: entered promiscuous mode [ 697.314042][ T41] audit: type=1400 audit(2000000484.416:861): avc: denied { read } for pid=1364 comm="syz.8.12307" path="socket:[117620]" dev="sockfs" ino=117620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 697.922801][ T41] audit: type=1400 audit(2000000484.986:862): avc: denied { listen } for pid=1382 comm="syz.8.12313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 697.933260][ T41] audit: type=1400 audit(2000000484.996:863): avc: denied { read } for pid=1382 comm="syz.8.12313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 698.134618][ T1399] netlink: 'syz.8.12320': attribute type 9 has an invalid length. [ 698.139094][ T1399] netlink: 'syz.8.12320': attribute type 11 has an invalid length. [ 698.142587][ T1399] netlink: 'syz.8.12320': attribute type 12 has an invalid length. [ 698.146189][ T1399] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.12320'. [ 698.157869][ T1399] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12320'. [ 698.429870][ T41] audit: type=1400 audit(2000000485.473:864): avc: denied { override_creds } for pid=1430 comm="syz.8.12332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 698.459890][ T41] audit: type=1326 audit(2000000485.501:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1432 comm="syz.1.12333" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88e4d9aeb9 code=0x0 [ 698.577331][ T1438] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.12335'. [ 698.621516][ T1440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12336'. [ 698.625523][ T1440] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12336'. [ 698.636185][ T1440] erspan1: entered promiscuous mode [ 698.638506][ T1440] erspan1: entered allmulticast mode [ 699.626922][T22806] usb 12-1: USB disconnect, device number 23 [ 699.897559][ T1496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12359'. [ 699.904009][ T1496] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12359'. [ 699.907889][ T1496] netlink: 'syz.6.12359': attribute type 5 has an invalid length. [ 699.919104][ T1150] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.923106][ T1150] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.926286][ T1496] netlink: 'syz.6.12359': attribute type 5 has an invalid length. [ 699.931963][ T1150] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.932010][ T1150] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.237868][ T1513] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 700.309829][T22806] net_ratelimit: 282 callbacks suppressed [ 700.309850][T22806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.547193][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.550826][ T1482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.703728][ T41] audit: type=1400 audit(2000000487.586:866): avc: denied { watch watch_reads } for pid=1528 comm="syz.7.12373" path="/812/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 700.830272][ T1539] SELinux: Context system_u:object_r:dhcpd_initrc_exec_t:s0 is not valid (left unmapped). [ 700.831040][ T1538] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 700.836854][ T41] audit: type=1400 audit(2000000487.717:867): avc: denied { relabelto } for pid=1536 comm="syz.1.12376" name="file0" dev="tmpfs" ino=6038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_initrc_exec_t:s0" [ 700.853097][ T41] audit: type=1400 audit(2000000487.717:868): avc: denied { associate } for pid=1536 comm="syz.1.12376" name="file0" dev="tmpfs" ino=6038 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpd_initrc_exec_t:s0" [ 700.868827][ T41] audit: type=1400 audit(2000000487.745:869): avc: denied { rmdir } for pid=24348 comm="syz-executor" name="file0" dev="tmpfs" ino=6038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_initrc_exec_t:s0" [ 700.941496][ T41] audit: type=1400 audit(2000000487.810:870): avc: denied { getattr } for pid=1543 comm="syz.6.12380" path="socket:[119564]" dev="sockfs" ino=119564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 701.090330][ T6202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.357720][ T6202] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 701.423833][T11180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.519584][ T6202] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 701.528485][ T6202] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.534144][ T6202] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.538615][ T6202] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 701.546362][ T6202] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 701.550714][ T6202] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 701.554182][ T6202] usb 12-1: Manufacturer: syz [ 701.559036][ T6202] usb 12-1: config 0 descriptor?? [ 701.775341][T20530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.000397][ T6202] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 702.013220][ T6202] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 702.274931][T11180] libceph: connect (1)[c::]:6789 error -101 [ 702.278470][T11180] libceph: mon0 (1)[c::]:6789 connect error [ 702.322179][ T6202] libceph: connect (1)[c::]:6789 error -101 [ 702.324957][ T6202] libceph: mon0 (1)[c::]:6789 connect error [ 702.333520][ T1607] sctp: [Deprecated]: syz.1.12402 (pid 1607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 702.333520][ T1607] Use struct sctp_sack_info instead [ 702.534881][T11535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.561843][T20551] usb 12-1: USB disconnect, device number 24 [ 702.578347][T11535] libceph: connect (1)[c::]:6789 error -101 [ 702.581118][T11535] libceph: mon0 (1)[c::]:6789 connect error [ 702.609194][ T6202] libceph: connect (1)[c::]:6789 error -101 [ 702.615323][ T6202] libceph: mon0 (1)[c::]:6789 connect error [ 702.640534][ T1623] trusted_key: syz.1.12409 sent an empty control message without MSG_MORE. [ 702.843099][ T1632] __nla_validate_parse: 7 callbacks suppressed [ 702.843117][ T1632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12413'. [ 702.973150][T20530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.133875][T11535] libceph: connect (1)[c::]:6789 error -101 [ 703.136669][T11535] libceph: mon0 (1)[c::]:6789 connect error [ 703.143046][ T1636] netlink: 9 bytes leftover after parsing attributes in process `syz.7.12415'. [ 703.147411][ T1636] gretap0: entered promiscuous mode [ 703.150736][ T1598] ceph: No mds server is up or the cluster is laggy [ 703.155960][ T1603] ceph: No mds server is up or the cluster is laggy [ 703.166989][ T6152] libceph: connect (1)[c::]:6789 error -101 [ 703.169773][ T6152] libceph: mon0 (1)[c::]:6789 connect error [ 703.202451][ T1636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 703.626331][ T1666] tipc: Started in network mode [ 703.628318][ T1666] tipc: Node identity 4, cluster identity 4711 [ 703.630699][ T1666] tipc: Node number set to 4 [ 703.654666][T11535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.655805][ T41] audit: type=1326 audit(2000000490.353:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1668 comm="syz.7.12428" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c30b9aeb9 code=0x0 [ 703.764751][ T1679] overlayfs: failed to clone upperpath [ 704.467247][ T1746] netlink: 'syz.6.12461': attribute type 1 has an invalid length. [ 704.492729][ T1746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 704.518186][ T1746] bond1: (slave geneve2): making interface the new active one [ 704.524655][ T1746] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 704.660101][ T1759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12466'. [ 704.664808][ T1759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12466'. [ 704.753398][ T41] audit: type=1800 audit(2000000491.382:872): pid=1768 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.12469" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 704.844177][ T24] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 705.004668][ T24] usb 12-1: Using ep0 maxpacket: 8 [ 705.009001][ T24] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 705.012531][ T24] usb 12-1: config 0 has no interface number 0 [ 705.016037][ T24] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 705.020722][ T24] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 705.025691][ T24] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 705.030800][ T24] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 705.037032][ T24] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 705.041017][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.046680][ T24] usb 12-1: config 0 descriptor?? [ 705.054449][ T24] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 705.871393][T11535] net_ratelimit: 8 callbacks suppressed [ 705.871412][T11535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.213633][T20530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.601953][ T1781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.606942][ T1781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.607471][ T41] audit: type=1326 audit(2000000493.112:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.1.12473" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88e4d9aeb9 code=0x0 [ 706.610674][ T1781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.623457][ T1781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.627248][ T1781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.630737][ T1781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.633986][ T1781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.637166][ T1781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.498604][ T6202] usb 12-1: USB disconnect, device number 25 [ 707.505764][ T6202] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 707.909518][ T1761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 708.074770][ T1816] ip6gre1: entered promiscuous mode [ 708.076659][ T1816] ip6gre1: entered allmulticast mode [ 708.153322][ T1822] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12489'. [ 708.156947][ T1822] netlink: 'syz.8.12489': attribute type 7 has an invalid length. [ 708.160780][ T1822] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12489'. [ 708.164379][ T1822] netlink: 'syz.8.12489': attribute type 7 has an invalid length. [ 708.360479][ T41] audit: type=1400 audit(2000000494.748:874): avc: denied { read } for pid=1839 comm="syz.7.12495" path="socket:[122891]" dev="sockfs" ino=122891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 708.638270][ T1840] delete_channel: no stack [ 708.895842][ T1877] xt_hashlimit: size too large, truncated to 1048576 [ 708.952432][ T1880] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 709.162498][ T1890] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.221765][ T1890] bridge_slave_0 (unregistering): left allmulticast mode [ 709.224178][ T1890] bridge_slave_0 (unregistering): left promiscuous mode [ 709.226624][ T1890] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.244546][ T1892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12516'. [ 709.441021][ T1907] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12522'. [ 709.609369][ T1918] netlink: 'syz.7.12527': attribute type 15 has an invalid length. [ 709.612844][ T1918] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12527'. [ 709.625531][ T1167] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 709.629485][ T1918] netlink: 'syz.7.12527': attribute type 15 has an invalid length. [ 709.632708][ T1918] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12527'. [ 709.637440][ T1167] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 709.641202][ T1167] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 709.644855][ T1167] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 709.699043][ T1923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12529'. [ 709.702735][ T1923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12529'. [ 709.722662][ T1923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12529'. [ 709.726466][ T1923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12529'. [ 709.761844][ T1926] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 710.098981][ T1950] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 710.576707][ T41] audit: type=1400 audit(2000000496.805:875): avc: denied { name_bind } for pid=1970 comm="syz.1.12550" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 711.042357][ T1993] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.12558'. [ 711.270860][ T2009] net_ratelimit: 1831 callbacks suppressed [ 711.270880][ T2009] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 711.389097][ T2017] veth0_macvtap: Caught tx_queue_len zero misconfig [ 711.438430][T22806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.525328][ T2033] overlayfs: failed to clone upperpath [ 711.619267][ T2046] overlayfs: failed to clone upperpath [ 711.627168][ T2046] overlayfs: failed to clone upperpath [ 711.960196][ T2060] netlink: 'syz.1.12589': attribute type 12 has an invalid length. [ 711.963724][ T2060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12589'. [ 711.969361][ T2060] netlink: 'syz.1.12589': attribute type 12 has an invalid length. [ 712.044094][ T6202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.296459][ T2078] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.304499][ T2078] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.417267][ T2078] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.421745][ T2078] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.544700][T11535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.552262][ T2078] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.556502][ T2078] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.669190][ T2078] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.672666][ T2078] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.717066][T11351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.828144][T22814] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 712.965216][ T1150] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.968863][ T1150] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.984961][ T1150] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.988233][ T1150] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.027175][ T1145] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.030887][ T1145] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.043805][ T1167] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.047413][ T1167] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.060124][ T2120] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2605304581 (166739493184 ns) > initial count (17987646272 ns). Using initial count to start timer. [ 713.204664][ T2127] kvm: kvm [2126]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 713.209678][ T2127] kvm: kvm [2126]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 713.660481][T11180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.899989][ T2175] loop6: detected capacity change from 0 to 2640 [ 713.910882][T22822] buffer_io_error: 13701 callbacks suppressed [ 713.910899][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 713.919167][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 713.922125][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 713.925637][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 713.928887][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 713.932225][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 713.936032][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 713.939309][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 713.941958][T22822] ldm_validate_partition_table(): Disk read failed. [ 713.942516][ T2171] raw_sendmsg: syz.6.12634 forgot to set AF_INET. Fix it! [ 713.944522][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 713.952888][T22822] Buffer I/O error on dev loop6, logical block 0, async page read [ 713.956479][T22822] Dev loop6: unable to read RDB block 0 [ 713.958349][T22822] loop6: unable to read partition table [ 713.968716][ T2175] ldm_validate_partition_table(): Disk read failed. [ 713.971008][ T2175] Dev loop6: unable to read RDB block 0 [ 713.972962][ T2175] loop6: unable to read partition table [ 713.974966][ T2175] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 714.039713][ T5344] ldm_validate_partition_table(): Disk read failed. [ 714.044733][ T5344] Dev loop6: unable to read RDB block 0 [ 714.047252][ T5344] loop6: unable to read partition table [ 714.100937][ T5344] ldm_validate_partition_table(): Disk read failed. [ 714.103929][ T5344] Dev loop6: unable to read RDB block 0 [ 714.107217][ T5344] loop6: unable to read partition table [ 714.110680][ T2189] netlink: 'syz.1.12641': attribute type 7 has an invalid length. [ 714.224979][ T2189] netlink: 'syz.1.12641': attribute type 7 has an invalid length. [ 714.405562][T20551] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 714.587484][T20551] usb 11-1: Using ep0 maxpacket: 8 [ 714.591971][T20551] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 714.595746][T20551] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 714.608812][T20551] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 714.613069][T20551] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 714.617313][T20551] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.626171][T20551] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 714.630117][T20551] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.677493][ T41] audit: type=1400 audit(2000000500.657:876): avc: denied { mount } for pid=2212 comm="syz.8.12652" name="/" dev="ramfs" ino=121369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 714.772282][T11180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.869018][T20551] usb 11-1: usb_control_msg returned -32 [ 714.871038][T20551] usbtmc 11-1:16.0: can't read capabilities [ 714.965512][ T2232] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 714.965512][ T2232] cct.usage_percpu_sys' [ 715.341512][ T2240] usbtmc 11-1:16.0: usb_control_msg returned -32 [ 715.366901][ T6228] usb 11-1: USB disconnect, device number 9 [ 715.625327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.630290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.744237][ T2255] __nla_validate_parse: 1 callbacks suppressed [ 715.744250][ T2255] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12670'. [ 715.749157][ T2255] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12670'. [ 715.881758][T11180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.028005][ T2263] netlink: 'syz.6.12674': attribute type 22 has an invalid length. [ 716.030579][ T2263] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12674'. [ 716.037781][ T2265] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.12675'. [ 716.084922][ T2267] macvlan0: entered allmulticast mode [ 716.087355][ T2267] veth1_vlan: entered allmulticast mode [ 716.095128][ T2267] pim6reg: entered allmulticast mode [ 716.105534][ T2267] veth1_vlan: left allmulticast mode [ 716.107875][ T2263] netlink: 'syz.6.12674': attribute type 22 has an invalid length. [ 716.111379][ T2263] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12674'. [ 716.135438][ T2267] macvlan0 (unregistering): left allmulticast mode [ 716.296260][ T2274] netlink: 6 bytes leftover after parsing attributes in process `syz.6.12678'. [ 716.719826][ T2301] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12690'. [ 716.899039][ T2310] kvm: user requested TSC rate below hardware speed [ 717.005006][T11180] net_ratelimit: 3 callbacks suppressed [ 717.005023][T11180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.137733][ T5295] Bluetooth: hci2: ACL packet for unknown connection handle 1 [ 717.188237][ T2333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.226574][ T2335] erspan1: left promiscuous mode [ 717.339357][ T2344] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12708'. [ 717.714412][ T2361] netlink: 'syz.8.12713': attribute type 29 has an invalid length. [ 717.719115][ T2361] netlink: 'syz.8.12713': attribute type 29 has an invalid length. [ 717.725340][ T2361] netlink: 500 bytes leftover after parsing attributes in process `syz.8.12713'. [ 717.768586][ T2363] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12714'. [ 718.050148][ T2383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.053930][ T2383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.057807][ T2383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.062614][ T2383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.068824][ T2383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.072886][ T2383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.077833][ T2383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.106327][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.101279][ T2431] xt_hashlimit: size too large, truncated to 1048576 [ 719.306047][ T2444] netlink: 'syz.8.12748': attribute type 13 has an invalid length. [ 719.310375][ T2444] netlink: 'syz.8.12748': attribute type 13 has an invalid length. [ 719.737397][ T2492] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 719.821637][ T2505] xt_hashlimit: size too large, truncated to 1048576 [ 721.164879][T22816] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 721.335987][T22816] usb 11-1: Using ep0 maxpacket: 8 [ 721.339640][T22816] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 721.343145][T22816] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 721.347028][T22816] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 721.350411][T22816] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 721.353893][T22816] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 721.358740][T22816] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 721.361789][T22816] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.583889][ T2592] __nla_validate_parse: 6 callbacks suppressed [ 721.583902][ T2592] netlink: 52 bytes leftover after parsing attributes in process `syz.8.12799'. [ 721.591177][T22816] usb 11-1: usb_control_msg returned -32 [ 721.597396][T22816] usbtmc 11-1:16.0: can't read capabilities [ 721.911545][ T2641] gretap0: left promiscuous mode [ 721.933490][ T41] audit: type=1800 audit(2000000507.436:877): pid=2646 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.12816" name="nullb0" dev="tmpfs" ino=2062 res=0 errno=0 [ 722.007392][ T2661] overlayfs: failed to clone upperpath [ 722.347963][ T2679] netlink: 'syz.8.12827': attribute type 8 has an invalid length. [ 722.350910][ T2679] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12827'. [ 722.566389][T22806] net_ratelimit: 222 callbacks suppressed [ 722.566408][T22806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.622584][T11351] usb 11-1: USB disconnect, device number 10 [ 723.571971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 723.672222][ T5295] Bluetooth: hci2: command 0x0406 tx timeout [ 723.673259][T22806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.292507][ T2783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.298753][ T2783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.303391][ T2783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.308748][ T2783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.313838][ T2783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.570678][ T2795] sctp: [Deprecated]: syz.8.12866 (pid 2795) Use of struct sctp_assoc_value in delayed_ack socket option. [ 724.570678][ T2795] Use struct sctp_sack_info instead [ 724.780020][T11535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.123612][ T2805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=2805 comm=syz.1.12869 [ 725.296351][ T2810] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12871'. [ 725.307487][ T2810] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 725.311774][ T2810] gretap1: entered promiscuous mode [ 725.313763][ T2810] gretap1: entered allmulticast mode [ 725.408122][ T2816] loop5: detected capacity change from 0 to 7 [ 725.421385][ T2816] Dev loop5: unable to read RDB block 7 [ 725.423916][ T2816] loop5: unable to read partition table [ 725.426551][ T2816] loop5: partition table beyond EOD, truncated [ 725.428729][ T2816] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 725.488128][ T41] audit: type=1326 audit(2000000510.764:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2824 comm="syz.6.12877" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb95959aeb9 code=0x0 [ 725.551285][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.635859][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.042390][T11180] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 726.203108][T11180] usb 12-1: Using ep0 maxpacket: 8 [ 726.216216][T11180] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 726.220204][T11180] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 726.234451][T11180] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 726.239134][T11180] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 726.245247][T11180] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 726.249571][T11180] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.478592][T11180] usb 12-1: GET_CAPABILITIES returned 0 [ 726.482451][ T2874] ip6gre2: entered allmulticast mode [ 726.483348][T11180] usbtmc 12-1:16.0: can't read capabilities [ 726.696436][ C1] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 726.699665][ C1] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 726.699829][ T41] audit: type=1326 audit(2000000511.896:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2892 comm="syz.1.12899" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f88e4d94cd7 code=0x0 [ 726.708347][ T34] usb 12-1: USB disconnect, device number 26 [ 727.576029][ T2924] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 727.861145][ T2951] netlink: 36 bytes leftover after parsing attributes in process `syz.8.12919'. [ 727.865885][ T2951] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.869218][ T2951] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.102288][ T2982] netlink: 1319 bytes leftover after parsing attributes in process `syz.8.12931'. [ 728.118148][T11180] net_ratelimit: 9 callbacks suppressed [ 728.118165][T11180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.638834][ T3041] xt_hashlimit: size too large, truncated to 1048576 [ 728.801380][T20530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.230487][T11535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.531905][ T3073] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 729.537354][ T3073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.696488][ T3084] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.12962'. [ 730.138532][ T9] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 730.157641][ T3130] IPv4: Oversized IP packet from 127.202.26.0 [ 730.300972][ T9] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 730.304736][ T9] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 730.309142][ T9] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 730.313886][ T9] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 730.319124][ T9] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 730.326039][ T9] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 730.334565][ T9] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 730.338008][ T9] usb 12-1: Product: syz [ 730.339832][ T9] usb 12-1: Manufacturer: syz [ 730.352290][T11180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.357366][ T9] cdc_wdm 12-1:1.0: skipping garbage [ 730.359554][ T9] cdc_wdm 12-1:1.0: skipping garbage [ 730.373236][ T9] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 730.375932][ T9] cdc_wdm 12-1:1.0: Unknown control protocol [ 730.492708][ T41] audit: type=1400 audit(2000000515.449:880): avc: denied { map } for pid=3151 comm="syz.6.12993" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 730.516817][ T41] audit: type=1400 audit(2000000515.449:881): avc: denied { execute } for pid=3151 comm="syz.6.12993" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 730.548529][ T3154] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12994'. [ 730.551466][ T3154] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12994'. [ 730.555479][ T3154] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12994'. [ 730.558496][ T3154] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12994'. [ 730.585253][ T24] usb 12-1: USB disconnect, device number 27 [ 730.670919][ T3159] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12996'. [ 730.945267][ T41] audit: type=1326 audit(2000000515.870:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3178 comm="syz.8.13006" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff58399aeb9 code=0x0 [ 731.048907][ T3185] netlink: 'syz.6.13008': attribute type 19 has an invalid length. [ 731.052270][ T3185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13008'. [ 731.056702][ T3185] netlink: 'syz.6.13008': attribute type 19 has an invalid length. [ 731.060459][ T3185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13008'. [ 731.197272][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.215458][ T3193] binder: 3192:3193 ioctl c0306201 200000000640 returned -22 [ 731.304107][ T9] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 731.441993][ T6170] block nbd6: Receive control failed (result -32) [ 731.453973][T11535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.465578][ T9] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 731.468478][ T9] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 731.468971][T22822] block nbd6: shutting down sockets [ 731.471827][ T9] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 731.477146][ T9] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 731.481332][ T9] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 731.487585][ T9] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 731.491616][ T9] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 731.495045][ T9] usb 12-1: Product: syz [ 731.497164][ T9] usb 12-1: Manufacturer: syz [ 731.524714][ T9] cdc_wdm 12-1:1.0: skipping garbage [ 731.527062][ T9] cdc_wdm 12-1:1.0: skipping garbage [ 731.538100][ T9] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 731.541621][ T9] cdc_wdm 12-1:1.0: Unknown control protocol [ 731.732468][T11535] usb 12-1: USB disconnect, device number 28 [ 731.745678][ T3219] overlayfs: failed to set uuid (192/file0, err=-1); falling back to uuid=null. [ 731.749661][ T3219] overlayfs: failed to verify upper root origin [ 732.053799][T11351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.090485][ T3237] overlayfs: failed to clone lowerpath [ 732.096878][ T3237] overlayfs: failed to clone lowerpath [ 732.122460][ T41] audit: type=1400 audit(2000000516.973:883): avc: denied { listen } for pid=3238 comm="syz.6.13030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 732.420107][ T3262] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 732.527639][ T41] audit: type=1400 audit(2000000517.347:884): avc: denied { map } for pid=3273 comm="syz.6.13047" path="/203/file0/cgroup.kill" dev="9p" ino=73662479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 732.579070][T11180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.664706][ T3288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3288 comm=syz.8.13054 [ 732.793145][ T41] audit: type=1326 audit(2000000517.599:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3299 comm="syz.1.13059" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e4d9aeb9 code=0x7ffc0000 [ 732.805539][ T41] audit: type=1326 audit(2000000517.599:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3299 comm="syz.1.13059" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e4d9aeb9 code=0x7ffc0000 [ 732.815986][ T41] audit: type=1326 audit(2000000517.599:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3299 comm="syz.1.13059" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f88e4d9aeb9 code=0x7ffc0000 [ 732.827136][ T41] audit: type=1326 audit(2000000517.609:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3299 comm="syz.1.13059" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e4d9aeb9 code=0x7ffc0000 [ 732.837388][ T41] audit: type=1326 audit(2000000517.609:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3301 comm="syz.1.13059" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88e4d5b78e code=0x7ffc0000 [ 733.059063][ T3308] ref_ctr_offset mismatch. inode: 0x446 offset: 0x7 ref_ctr_offset(old): 0x200000000980 ref_ctr_offset(new): 0x24 [ 733.214770][ T3313] blktrace: Concurrent blktraces are not allowed on nullb0 [ 733.449383][ T3321] __nla_validate_parse: 4 callbacks suppressed [ 733.449403][ T3321] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13067'. [ 733.691274][T11535] net_ratelimit: 2 callbacks suppressed [ 733.691292][T11535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.850337][ T1146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.983148][ T3364] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.13084'. [ 734.711038][ T3397] program syz.7.13096 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 734.792784][T11535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.814989][ T3426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13109'. [ 735.819051][ T3426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13109'. [ 735.883104][ T3426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13109'. [ 735.888469][ T3426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13109'. [ 735.913968][T11535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.020528][ T6245] usb 12-1: new high-speed USB device number 29 using dummy_hcd [ 736.129103][ T41] kauditd_printk_skb: 5 callbacks suppressed [ 736.129117][ T41] audit: type=1400 audit(2000000520.722:895): avc: denied { getopt } for pid=3448 comm="syz.8.13119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 736.193858][ T6245] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 736.197449][ T6245] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 736.200736][ T6245] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 736.204275][ T6245] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.211065][ T3424] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 736.215675][ T6245] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 736.419465][ T3466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13126'. [ 736.438511][T11351] usb 12-1: USB disconnect, device number 29 [ 736.504141][T20530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.015487][T11535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.111743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.115693][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.270648][ T3498] IPv6: sit2: Disabled Multicast RS [ 737.361667][ T41] audit: type=1400 audit(2000000521.872:896): avc: denied { name_bind 0x1000000 } for pid=3501 comm="syz.7.13142" path="socket:[128028]" dev="sockfs" ino=128028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 737.648271][ T3516] netlink: 'syz.7.13147': attribute type 15 has an invalid length. [ 737.759300][ T3518] netlink: 'syz.8.13148': attribute type 1 has an invalid length. [ 737.765430][ T3518] netlink: 'syz.8.13148': attribute type 4 has an invalid length. [ 737.770073][ T3518] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.13148'. [ 737.785399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.127636][T11180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.395873][ T3577] overlayfs: failed to clone upperpath [ 738.622022][ T3592] netlink: 'syz.1.13178': attribute type 18 has an invalid length. [ 738.624911][ T3592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13178'. [ 738.628589][ T3592] netlink: 'syz.1.13178': attribute type 18 has an invalid length. [ 738.631608][ T3592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13178'. [ 739.242561][T22806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.411234][ T41] audit: type=1326 audit(2000000523.780:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.8.13204" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff58399aeb9 code=0x0 [ 739.484310][ T3648] __nla_validate_parse: 1 callbacks suppressed [ 739.484332][ T3648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13203'. [ 739.489902][ T3648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13203'. [ 739.640958][ T3662] pimreg: entered allmulticast mode [ 739.747620][ T3664] kvm: kvm [3663]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 739.752846][ T3664] kvm: kvm [3663]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 739.761190][T20530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.363820][T22806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.472998][ T3715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13229'. [ 740.477229][ T3715] netlink: 'syz.1.13229': attribute type 3 has an invalid length. [ 740.479989][ T3715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13229'. [ 740.508762][ T3715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13229'. [ 740.513035][ T3715] netlink: 'syz.1.13229': attribute type 3 has an invalid length. [ 740.516719][ T3715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13229'. [ 740.531626][ T3720] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13232'. [ 740.545279][ T3720] smc: adding net device bond0 with user defined pnetid SYZ2 [ 740.708273][ T3741] netlink: 'syz.7.13242': attribute type 1 has an invalid length. [ 740.711259][ T3741] netlink: 'syz.7.13242': attribute type 4 has an invalid length. [ 740.712537][ T3739] netlink: 48 bytes leftover after parsing attributes in process `syz.8.13240'. [ 740.714006][ T3741] netlink: 15334 bytes leftover after parsing attributes in process `syz.7.13242'. [ 740.876569][T11535] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 741.037017][T11535] usb 11-1: Using ep0 maxpacket: 16 [ 741.041391][T11535] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.046047][T11535] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 741.058100][T11535] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 741.061911][T11535] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.068223][T11535] usb 11-1: config 0 descriptor?? [ 741.118361][ T41] audit: type=1400 audit(2000000525.378:898): avc: denied { map } for pid=3773 comm="syz.1.13254" path="socket:[129304]" dev="sockfs" ino=129304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 741.241311][ T41] audit: type=1400 audit(2000000525.500:899): avc: denied { write } for pid=3779 comm="syz.8.13256" lport=34663 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 741.466941][T22806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.512583][T11535] HID 045e:07da: Invalid code 65791 type 1 [ 741.523542][T11535] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:045E:07DA.0011/input/input33 [ 741.544601][T11535] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 741.719666][ T3798] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13264'. [ 741.724023][ T3798] netlink: 'syz.7.13264': attribute type 20 has an invalid length. [ 742.264356][ T3827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.268193][ T3827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.272761][ T3827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.285585][ T3827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.292086][ T3827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.297222][ T3827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.372467][ T1333] usb 11-1: USB disconnect, device number 11 [ 742.946654][ T3862] syz_tun: entered allmulticast mode [ 742.950724][ T3862] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 742.958930][ T3862] syz_tun: left allmulticast mode [ 743.008818][ T3867] loop2: detected capacity change from 0 to 7 [ 743.012784][T22822] Dev loop2: unable to read RDB block 7 [ 743.025869][T22822] loop2: AHDI p1 p2 p3 [ 743.027982][T22822] loop2: partition table partially beyond EOD, truncated [ 743.031743][T22822] loop2: p1 start 1601398130 is beyond EOD, truncated [ 743.034745][T22822] loop2: p2 start 1702059890 is beyond EOD, truncated [ 743.051818][ T3867] Dev loop2: unable to read RDB block 7 [ 743.054406][ T3867] loop2: AHDI p1 p2 p3 [ 743.056452][ T3867] loop2: partition table partially beyond EOD, truncated [ 743.060935][ T3867] loop2: p1 start 1601398130 is beyond EOD, truncated [ 743.063893][ T3867] loop2: p2 start 1702059890 is beyond EOD, truncated [ 743.820077][ T3920] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 744.106105][ T3938] geneve3: entered promiscuous mode [ 744.199918][ T3940] validate_nla: 1 callbacks suppressed [ 744.199940][ T3940] netlink: 'syz.8.13318': attribute type 10 has an invalid length. [ 744.224027][ T3940] team0: Failed to send options change via netlink (err -105) [ 744.226548][ T3940] team0: Port device dummy0 added [ 744.229631][ T3940] netlink: 'syz.8.13318': attribute type 10 has an invalid length. [ 744.233099][ T3940] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 744.246269][ T3940] team0: Failed to send options change via netlink (err -105) [ 744.249507][ T3940] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 744.253485][ T3940] team0: Port device dummy0 removed [ 744.813225][T11535] net_ratelimit: 78 callbacks suppressed [ 744.813240][T11535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.787323][ T41] audit: type=1400 audit(2000000529.726:900): avc: denied { write } for pid=4000 comm="syz.7.13341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 746.049410][ T4010] IPVS: lc: FWM 3 0x00000003 - no destination available [ 746.107133][ T4012] __nla_validate_parse: 4 callbacks suppressed [ 746.107151][ T4012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13345'. [ 746.174160][ T8587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.256211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.266072][T20530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.690001][ T4028] overlayfs: failed to clone upperpath [ 746.795602][ T4038] netlink: 'syz.7.13356': attribute type 3 has an invalid length. [ 746.895441][ T4046] netlink: 'syz.8.13357': attribute type 39 has an invalid length. [ 746.939957][ T4042] kvm: kvm [4041]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 746.945741][ T4042] kvm: kvm [4041]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 746.960327][ T4040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.976570][ T4040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.980428][ T4040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.988712][ T4040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.992711][ T4040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.333229][ T1333] libceph: connect (1)[c::]:6789 error -101 [ 747.338878][ T1333] libceph: mon0 (1)[c::]:6789 connect error [ 747.406702][T22806] libceph: connect (1)[c::]:6789 error -101 [ 747.409466][T22806] libceph: mon0 (1)[c::]:6789 connect error [ 747.430124][ T4075] netlink: 'syz.1.13368': attribute type 4 has an invalid length. [ 747.433737][ T4075] netlink: 17 bytes leftover after parsing attributes in process `syz.1.13368'. [ 747.614627][ T1333] libceph: connect (1)[c::]:6789 error -101 [ 747.617466][ T1333] libceph: mon0 (1)[c::]:6789 connect error [ 747.700251][T22806] libceph: connect (1)[c::]:6789 error -101 [ 747.703518][T22806] libceph: mon0 (1)[c::]:6789 connect error [ 747.729411][ T4089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13374'. [ 747.734933][ T4091] netlink: 7 bytes leftover after parsing attributes in process `syz.8.13375'. [ 747.738425][ T4089] gtp1: entered promiscuous mode [ 748.170864][ T9] libceph: connect (1)[c::]:6789 error -101 [ 748.173890][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 748.221453][ T4065] ceph: No mds server is up or the cluster is laggy [ 748.221557][ T4074] ceph: No mds server is up or the cluster is laggy [ 748.256229][T22806] libceph: connect (1)[c::]:6789 error -101 [ 748.275233][T22806] libceph: mon0 (1)[c::]:6789 connect error [ 748.784771][ T4160] lo: Caught tx_queue_len zero misconfig [ 749.085044][ T41] audit: type=1400 audit(2000000532.830:901): avc: denied { connect } for pid=4183 comm="syz.8.13413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 749.704763][ T4215] netlink: 'syz.7.13426': attribute type 4 has an invalid length. [ 749.762314][ T4219] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 749.896873][ T4225] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13430'. [ 749.913714][ T4227] netlink: 96 bytes leftover after parsing attributes in process `syz.7.13431'. [ 750.187237][ T4239] netlink: 'syz.8.13436': attribute type 1 has an invalid length. [ 750.246256][ T4239] bond1: (slave geneve4): making interface the new active one [ 750.250231][ T4239] bond1: (slave geneve4): Enslaving as an active interface with an up link [ 750.254116][ T1145] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 750.260447][ T1145] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 750.263500][ T1145] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 750.277440][ T1145] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 750.284576][ T4242] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13438'. [ 750.526206][ T41] audit: type=1326 audit(2000000534.177:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.1.13444" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88e4d9aeb9 code=0x0 [ 750.559279][ T4261] netlink: 'syz.6.13445': attribute type 1 has an invalid length. [ 750.562195][ T4261] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13445'. [ 750.667721][ T6170] Bluetooth: hci2: unexpected event for opcode 0x0c05 [ 750.821625][ T4280] overlayfs: failed to clone upperpath [ 751.541191][ T4292] netlink: 'syz.7.13457': attribute type 10 has an invalid length. [ 751.558756][ T4292] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 751.613325][ T4294] xt_hashlimit: size too large, truncated to 1048576 [ 751.733640][ T4302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13461'. [ 751.736713][ T4302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13461'. [ 751.862397][ T4312] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13465'. [ 751.956889][ T4316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13465'. [ 751.959984][ T4316] nbd: nbd64 already in use [ 752.112697][ T4320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13469'. [ 752.123460][ T4320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13469'. [ 752.546711][ T41] audit: type=1800 audit(2000000536.066:903): pid=4360 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.13486" name="nullb0" dev="tmpfs" ino=2062 res=0 errno=0 [ 752.548637][ T4357] netlink: 'syz.8.13485': attribute type 7 has an invalid length. [ 752.561082][ T4357] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13485'. [ 753.625109][T22816] usb 12-1: new high-speed USB device number 30 using dummy_hcd [ 753.662979][ T4403] overlayfs: failed to clone upperpath [ 753.817288][T22816] usb 12-1: Using ep0 maxpacket: 8 [ 753.823864][T22816] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 753.827319][T22816] usb 12-1: config 179 has no interface number 0 [ 753.830207][T22816] usb 12-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 753.834954][T22816] usb 12-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 753.839862][T22816] usb 12-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 753.844616][T22816] usb 12-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 753.851068][T22816] usb 12-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 753.857356][T22816] usb 12-1: config 179 interface 65 has no altsetting 0 [ 753.863362][T22816] usb 12-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 753.867455][T22816] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.875153][ T4389] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 753.896603][T22816] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:179.65/input/input34 [ 753.942365][ T4416] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.13510'. [ 753.978157][ T5329] input input34: unable to receive magic message: -110 [ 754.018740][ T41] audit: type=1800 audit(2000000537.440:904): pid=4418 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.13511" name="file1" dev="overlay" ino=1621 res=0 errno=0 [ 754.078297][ T3456] input input34: unable to receive magic message: -32 [ 754.086555][ T4421] overlayfs: failed to clone upperpath [ 754.107600][T11180] usb 12-1: USB disconnect, device number 30 [ 754.107604][ C3] xpad 12-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 754.107929][ C3] xpad 12-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 754.156167][ T4425] o2cb: This node has not been configured. [ 754.160708][ T4425] o2cb: Cluster check failed. Fix errors before retrying. [ 754.163767][ T4425] (syz.8.13514,4425,0):user_dlm_register:674 ERROR: status = -22 [ 754.167066][ T4425] (syz.8.13514,4425,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 755.019019][ T4476] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13532'. [ 756.314058][ T4568] netlink: 'syz.7.13561': attribute type 1 has an invalid length. [ 756.335120][ T4568] bond4: entered promiscuous mode [ 756.337651][ T4568] 8021q: adding VLAN 0 to HW filter on device bond4 [ 756.358139][ T4568] 8021q: adding VLAN 0 to HW filter on device bond4 [ 756.360626][ T4568] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 756.364059][ T4568] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 756.368809][ T4568] bond4: (slave vti0): making interface the new active one [ 756.371832][ T4568] vti0: entered promiscuous mode [ 756.376332][ T4568] bond4: (slave vti0): Enslaving as an active interface with an up link [ 756.438947][ T4572] input: syz1 as /devices/virtual/input/input35 [ 756.755632][ T4591] netlink: 'syz.1.13571': attribute type 1 has an invalid length. [ 756.783684][ T4591] bond1: entered promiscuous mode [ 756.786428][ T4591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 756.810215][ T4591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 756.814043][ T4591] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 756.818425][ T4591] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 756.824833][ T4591] bond1: (slave xfrm1): making interface the new active one [ 756.827981][ T4591] xfrm1: entered promiscuous mode [ 756.831824][ T4591] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 756.875379][ T41] audit: type=1326 audit(2000000540.105:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.1.13574" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88e4d9aeb9 code=0x0 [ 757.537851][ T4611] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13577'. [ 757.541843][ T4611] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13577'. [ 757.867921][ T4630] VFS: Mount too revealing [ 757.972075][ T4641] overlayfs: failed to clone upperpath [ 758.254484][ T4666] netlink: 'syz.8.13598': attribute type 1 has an invalid length. [ 758.269260][ T4666] netlink: 92 bytes leftover after parsing attributes in process `syz.8.13598'. [ 759.258416][ T4691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13610'. [ 759.492800][ T4700] overlayfs: failed to clone upperpath [ 760.158394][ T4602] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 760.308831][ T4715] bond4: entered allmulticast mode [ 760.313699][ T4715] vti0: entered allmulticast mode [ 760.317190][ T4714] bond4: left allmulticast mode [ 760.319377][ T4714] vti0: left allmulticast mode [ 760.325308][ T4719] overlayfs: failed to clone upperpath [ 760.353147][ T4717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13620'. [ 760.357748][ T4717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13620'. [ 760.430401][ T4728] overlayfs: failed to clone upperpath [ 760.470447][ T4730] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.13625'. [ 760.527348][ T4738] netlink: 'syz.7.13630': attribute type 1 has an invalid length. [ 760.582967][ T4738] bond5: (slave geneve2): making interface the new active one [ 760.588277][ T4738] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 760.593213][ T1146] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 760.597277][ T1146] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 760.602315][ T1146] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 760.617692][ T1146] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 760.915850][ T4755] netlink: 'syz.1.13637': attribute type 5 has an invalid length. [ 761.041931][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13641'. [ 761.144303][T20551] usb 12-1: new high-speed USB device number 31 using dummy_hcd [ 761.315288][T20551] usb 12-1: Using ep0 maxpacket: 32 [ 761.319324][T20551] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 761.323273][T20551] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 761.327480][T20551] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 761.331589][T20551] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 761.336055][T20551] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 761.340475][T20551] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 761.346173][T20551] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 761.350421][T20551] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.359281][T20551] usb 12-1: config 0 descriptor?? [ 761.587266][T20551] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 761.597249][T20551] usb 12-1: USB disconnect, device number 31 [ 761.605113][T20551] usblp0: removed [ 761.972751][ T4795] ªªªªªª5gæ¹Q[Ô: Caught tx_queue_len zero misconfig [ 761.999366][ C0] net_ratelimit: 281 callbacks suppressed [ 761.999386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.075256][ T6202] usb 12-1: new high-speed USB device number 32 using dummy_hcd [ 762.245224][ T6202] usb 12-1: Using ep0 maxpacket: 32 [ 762.250020][ T6202] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 762.253136][ T6202] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 762.256470][ T6202] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 762.259895][ T6202] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 762.263793][ T6202] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 762.269780][ T6202] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 762.274323][ T6202] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 762.278556][ T6202] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.285801][ T6202] usb 12-1: config 0 descriptor?? [ 762.511106][ T6202] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 762.724240][ T4844] overlayfs: failed to clone upperpath [ 762.735608][ T6202] usb 12-1: USB disconnect, device number 32 [ 762.739952][ T6202] usblp0: removed [ 762.786114][ T5295] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 762.790412][ T5295] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 762.795586][ T5295] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 762.798970][ T5295] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 762.812241][ T5295] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 762.931122][ T4847] chnl_net:caif_netlink_parms(): no params data found [ 763.000755][ T4847] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.003161][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.006470][ T4847] bridge_slave_0: entered allmulticast mode [ 763.010305][ T4847] bridge_slave_0: entered promiscuous mode [ 763.013737][ T4847] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.016279][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.019655][ T4847] bridge_slave_1: entered allmulticast mode [ 763.023093][ T4847] bridge_slave_1: entered promiscuous mode [ 763.031209][ T4861] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13676'. [ 763.041092][ T4847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.046541][ T4847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.066871][ T4847] team0: Port device team_slave_0 added [ 763.072085][ T4847] team0: Port device team_slave_1 added [ 763.086244][ T4847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.088647][ T4847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.098004][ T4847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.104038][ T4847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.108058][ T4847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.120775][ T4847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.136740][ T4867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13679'. [ 763.160814][ T4847] hsr_slave_0: entered promiscuous mode [ 763.164098][ T4847] hsr_slave_1: entered promiscuous mode [ 763.168208][ T4847] debugfs: 'hsr0' already exists in 'hsr' [ 763.171467][ T4847] Cannot create hsr debugfs directory [ 763.435019][ T41] audit: type=1400 audit(2000000546.238:906): avc: denied { create } for pid=4881 comm="syz.7.13683" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=chr_file permissive=1 [ 763.830267][ T4847] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 763.837982][ T4847] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 763.844541][ T4847] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 763.850739][ T4847] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 763.873743][ T4847] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.876967][ T4847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.879832][ T4847] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.882184][ T4847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.891361][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.895697][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.933897][ T4847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.945313][ T4847] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.950932][T22813] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.953279][T22813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.961370][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.964253][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.135870][ T4847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.341042][ T4847] veth0_vlan: entered promiscuous mode [ 764.354625][ T4847] veth1_vlan: entered promiscuous mode [ 764.387997][ T4847] veth0_macvtap: entered promiscuous mode [ 764.397376][ T4847] veth1_macvtap: entered promiscuous mode [ 764.412222][ T4847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.413965][ T4948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13690'. [ 764.421389][ T4847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.466963][ T4948] bond2: entered promiscuous mode [ 764.469100][ T4948] bond2: entered allmulticast mode [ 764.471769][ T4948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 764.485624][ T1155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.492783][ T1155] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.526657][ T4948] erspan1: entered allmulticast mode [ 764.531916][ T4948] erspan1: entered promiscuous mode [ 764.535050][ T4948] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 764.541953][ T1155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.549177][ T1155] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.832318][ T4974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13697'. [ 764.846525][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13697'. [ 764.994521][ T5295] Bluetooth: hci3: command tx timeout [ 765.010497][T22813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.018076][ T4974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13697'. [ 765.025869][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13697'. [ 765.029725][T22813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.072113][T22814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.076097][T22814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.329323][ T5011] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13706'. [ 765.333262][ T5011] netlink: 'syz.5.13706': attribute type 7 has an invalid length. [ 765.340226][ T5011] netlink: 'syz.5.13706': attribute type 8 has an invalid length. [ 765.343729][ T5011] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13706'. [ 765.432723][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 765.575966][ T5037] syzkaller1: entered promiscuous mode [ 765.581765][ T5037] syzkaller1: entered allmulticast mode [ 765.656328][ T5041] netlink: 7 bytes leftover after parsing attributes in process `syz.8.13715'. [ 765.877091][ T41] audit: type=1400 audit(2000000548.529:907): avc: denied { node_bind } for pid=5057 comm="syz.1.13722" saddr=fe80::bb src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 766.160440][ T5085] bond4: entered allmulticast mode [ 766.163452][ T5085] vti0: entered allmulticast mode [ 766.203917][ T5084] bond4: left allmulticast mode [ 766.206069][ T5084] vti0: left allmulticast mode [ 766.285358][ T41] audit: type=1400 audit(2000000548.903:908): avc: denied { create } for pid=5094 comm="syz.1.13737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 766.296386][ T41] audit: type=1400 audit(2000000548.903:909): avc: denied { write } for pid=5094 comm="syz.1.13737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 766.347969][ T5104] overlayfs: failed to get inode (-116) [ 766.351749][ T5104] overlayfs: failed to get inode (-116) [ 766.424270][ T5109] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 766.446357][ T41] audit: type=1400 audit(2000000549.062:910): avc: denied { setattr } for pid=5108 comm="syz.7.13742" name="file0" dev="overlay" ino=73662535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 766.459037][ T41] audit: type=1400 audit(2000000549.062:911): avc: denied { write open } for pid=5108 comm="syz.7.13742" path=2F202864656C6574656429 dev="tmpfs" ino=5601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 766.471611][ T41] audit: type=1400 audit(2000000549.081:912): avc: denied { read } for pid=5108 comm="syz.7.13742" dev="tmpfs" ino=5601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 766.480714][ T41] audit: type=1400 audit(2000000549.081:913): avc: denied { link } for pid=5108 comm="syz.7.13742" name="#5601" dev="tmpfs" ino=5601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 766.508078][ T41] audit: type=1400 audit(2000000549.118:914): avc: denied { unlink } for pid=24887 comm="syz-executor" name="file0" dev="tmpfs" ino=5601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 766.581923][ T5124] overlayfs: failed to clone upperpath [ 766.630354][ T5130] overlayfs: failed to clone upperpath [ 766.692266][ T41] audit: type=1400 audit(2000000549.286:915): avc: denied { create } for pid=5136 comm="syz.8.13755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 766.736694][ T5141] overlayfs: failed to clone upperpath [ 767.544482][ T5188] kvm: Disabled LAPIC found during irq injection [ 768.043111][T22806] usb 12-1: new full-speed USB device number 33 using dummy_hcd [ 768.215352][T22806] usb 12-1: config index 0 descriptor too short (expected 28277, got 36) [ 768.218091][T22806] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.221407][T22806] usb 12-1: config 0 has no interfaces? [ 768.223250][T22806] usb 12-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 768.226779][T22806] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.236514][T22806] usb 12-1: config 0 descriptor?? [ 768.785063][ T6170] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 768.793086][ T6170] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 768.797962][ T6170] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 768.804696][ T6170] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 768.809792][ T6170] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 769.019172][ T1155] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.155455][ T1155] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.211153][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 769.244595][ T1155] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.340069][ T1155] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.383871][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.387249][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.391091][ T5237] bridge_slave_0: entered allmulticast mode [ 769.395166][ T5237] bridge_slave_0: entered promiscuous mode [ 769.402371][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.405536][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.408566][ T5237] bridge_slave_1: entered allmulticast mode [ 769.412763][ T5237] bridge_slave_1: entered promiscuous mode [ 769.437877][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.449950][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.481961][ T5237] team0: Port device team_slave_0 added [ 769.487036][ T5237] team0: Port device team_slave_1 added [ 769.511402][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.514360][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.528522][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.534570][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.543766][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.557597][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.614441][ T5237] hsr_slave_0: entered promiscuous mode [ 769.617045][ T5237] hsr_slave_1: entered promiscuous mode [ 769.619327][ T5237] debugfs: 'hsr0' already exists in 'hsr' [ 769.621162][ T5237] Cannot create hsr debugfs directory [ 769.670146][ T1155] bridge_slave_1: left allmulticast mode [ 769.672901][ T1155] bridge_slave_1: left promiscuous mode [ 769.675304][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.680452][ T1155] bridge_slave_0: left allmulticast mode [ 769.682747][ T1155] bridge_slave_0: left promiscuous mode [ 769.685289][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.968787][ T5276] overlayfs: failed to clone upperpath [ 770.164682][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.208713][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.248298][ T1155] bond0 (unregistering): Released all slaves [ 770.253198][ T5287] __nla_validate_parse: 4 callbacks suppressed [ 770.253222][ T5287] netlink: 372 bytes leftover after parsing attributes in process `syz.8.13816'. [ 770.826856][ T5315] overlayfs: failed to clone lowerpath [ 770.938803][ T5321] overlayfs: failed to clone upperpath [ 770.959298][T11180] usb 12-1: USB disconnect, device number 33 [ 770.995749][ T6170] Bluetooth: hci3: command tx timeout [ 771.013855][ T1155] hsr_slave_0: left promiscuous mode [ 771.017803][ T1155] hsr_slave_1: left promiscuous mode [ 771.020792][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.024071][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.031103][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.034137][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.054687][ T1155] veth1_macvtap: left promiscuous mode [ 771.057066][ T1155] veth0_macvtap: left promiscuous mode [ 771.060558][ T1155] veth1_vlan: left promiscuous mode [ 771.063077][ T1155] veth0_vlan: left promiscuous mode [ 771.264023][ T5341] ref_ctr_offset mismatch. inode: 0x2142 offset: 0x0 ref_ctr_offset(old): 0x24 ref_ctr_offset(new): 0x0 [ 771.738052][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 771.794771][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 772.736908][ T5382] overlayfs: failed to clone upperpath [ 772.860567][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13839'. [ 773.026764][ T5237] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 773.033276][ T5237] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 773.043170][ T5237] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 773.057514][ T5237] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 773.139395][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.157889][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.170094][T22814] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.173062][T22814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.178219][T22814] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.181231][T22814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.207950][ T6170] Bluetooth: hci3: command tx timeout [ 773.349558][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.405628][ T5420] overlayfs: failed to clone upperpath [ 773.526157][ T5237] veth0_vlan: entered promiscuous mode [ 773.548547][ T5237] veth1_vlan: entered promiscuous mode [ 773.569763][ T5237] veth0_macvtap: entered promiscuous mode [ 773.575116][ T5237] veth1_macvtap: entered promiscuous mode [ 773.576373][ T41] kauditd_printk_skb: 1 callbacks suppressed [ 773.576388][ T41] audit: type=1400 audit(2000000555.729:917): avc: denied { name_bind } for pid=5438 comm="syz.7.13844" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 773.593312][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.610764][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.629643][T22799] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.635577][T22799] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.639737][T22799] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.643576][T22799] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.702107][T22799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.705377][T22799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.726009][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.729347][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.576751][ T34] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 774.624555][ T5538] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 774.672465][ T5542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13875'. [ 774.699573][ T5542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 774.721559][ T5542] bond3: entered allmulticast mode [ 774.740415][ T34] usb 14-1: Using ep0 maxpacket: 32 [ 774.748785][ T34] usb 14-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 774.753052][ T34] usb 14-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 774.757915][ T34] usb 14-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 774.779884][ T34] usb 14-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 774.805159][ T34] usb 14-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 774.808985][ T34] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.815152][ T5557] fuse: Bad value for 'fd' [ 774.821022][ T34] usb 14-1: Product: syz [ 774.823127][ T34] usb 14-1: Manufacturer: syz [ 774.825228][ T34] usb 14-1: SerialNumber: syz [ 774.851743][ C3] imon 14-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 774.887095][ T34] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/input/input36 [ 775.143820][ T34] imon:send_packet: packet tx failed (-71) [ 775.164884][ T34] imon 14-1:155.0: panel buttons/knobs setup failed [ 775.165231][ T1333] usb 12-1: new full-speed USB device number 34 using dummy_hcd [ 775.167387][ T34] imon 14-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 775.174360][ T34] (id 0x00) [ 775.242707][ T5596] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 775.250432][ T34] rc_core: IR keymap rc-imon-pad not found [ 775.253076][ T34] Registered IR keymap rc-empty [ 775.255284][ T34] imon 14-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 775.260492][ T34] imon 14-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 775.265229][ T34] imon:send_packet: packet tx failed (-71) [ 775.293432][ T34] imon 14-1:155.0: remote input dev register failed [ 775.304281][ T34] imon 14-1:155.0: imon_init_intf0: rc device setup failed [ 775.325357][ T41] audit: type=1326 audit(2000000557.355:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.8.13887" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58399aeb9 code=0x7ffc0000 [ 775.341213][ T41] audit: type=1326 audit(2000000557.365:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.8.13887" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58399aeb9 code=0x7ffc0000 [ 775.352375][ T41] audit: type=1326 audit(2000000557.365:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.8.13887" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58399aeb9 code=0x7ffc0000 [ 775.353631][ T1333] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 775.360346][ T41] audit: type=1326 audit(2000000557.365:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.8.13887" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58399aeb9 code=0x7ffc0000 [ 775.375005][ T1333] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 775.377685][ T41] audit: type=1326 audit(2000000557.384:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.8.13887" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff58399aeb9 code=0x7ffc0000 [ 775.384289][ T1333] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 775.387109][ T41] audit: type=1326 audit(2000000557.384:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.8.13887" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58399aeb9 code=0x7ffc0000 [ 775.397463][ T1333] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 775.401499][ T41] audit: type=1326 audit(2000000557.384:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.8.13887" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58399aeb9 code=0x7ffc0000 [ 775.405746][ T1333] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.413592][ T41] audit: type=1326 audit(2000000557.384:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.8.13887" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58399aeb9 code=0x7ffc0000 [ 775.423515][ T41] audit: type=1326 audit(2000000557.384:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.8.13887" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58399aeb9 code=0x7ffc0000 [ 775.432647][ T6170] Bluetooth: hci3: command tx timeout [ 775.433420][ T5562] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 775.462025][ T1333] hub 12-1:1.0: bad descriptor, ignoring hub [ 775.462213][ T34] imon 14-1:155.0: unable to initialize intf0, err 0 [ 775.474990][ T34] imon:imon_probe: failed to initialize context! [ 775.475538][ T1333] hub 12-1:1.0: probe with driver hub failed with error -5 [ 775.477206][ T34] imon 14-1:155.0: unable to register, err -19 [ 775.487330][ T34] usb 14-1: USB disconnect, device number 2 [ 775.489907][ T1333] cdc_wdm 12-1:1.0: skipping garbage [ 775.492137][ T1333] cdc_wdm 12-1:1.0: skipping garbage [ 775.504214][ T1333] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 775.506947][ T1333] cdc_wdm 12-1:1.0: Unknown control protocol [ 776.164892][ T5562] usb 12-1: reset full-speed USB device number 34 using dummy_hcd [ 776.345746][ T5627] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 776.356618][ C2] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 776.357110][ T5659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13900'. [ 776.359389][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 776.365206][ C2] cdc_wdm 12-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 776.453762][ T5664] netlink: 236 bytes leftover after parsing attributes in process `syz.1.13902'. [ 776.457870][ T5664] netlink: 236 bytes leftover after parsing attributes in process `syz.1.13902'. [ 776.660075][ T5674] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13907'. [ 776.678704][ T5676] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 776.681235][ T5676] overlayfs: failed to set xattr on upper [ 776.683067][ T5676] overlayfs: ...falling back to redirect_dir=nofollow. [ 776.685483][ T5676] overlayfs: ...falling back to index=off. [ 776.687566][ T5676] overlayfs: ...falling back to uuid=null. [ 776.689479][ T5676] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 776.697691][ T34] usb 12-1: USB disconnect, device number 34 [ 776.730734][ T5678] loop2: detected capacity change from 0 to 7 [ 776.734959][T22822] loop2: p1 [ 776.736232][T22822] loop2: partition table partially beyond EOD, truncated [ 776.745196][T22822] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 776.757412][ T5678] loop2: p1 [ 776.759068][ T5678] loop2: partition table partially beyond EOD, truncated [ 776.762327][ T5678] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 776.802184][T22822] udevd[22822]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 776.820827][T22822] udevd[22822]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 777.120986][ T5686] overlayfs: failed to clone upperpath [ 777.129361][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.133967][ T5684] bridge_slave_1: left allmulticast mode [ 777.136424][ T5684] bridge_slave_1: left promiscuous mode [ 777.138965][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.158901][ T5684] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 777.311369][ T5705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5705 comm=syz.7.13921 [ 777.320616][ T5705] netlink: 'syz.7.13921': attribute type 1 has an invalid length. [ 777.363433][ T5705] bond6: (slave bridge2): making interface the new active one [ 777.368337][ T5705] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 777.413758][ T5716] netlink: 'syz.1.13925': attribute type 1 has an invalid length. [ 777.443029][ T5716] 8021q: adding VLAN 0 to HW filter on device bond4 [ 777.452641][ T5716] bond4: option tlb_dynamic_lb: unable to set because the bond device is up [ 777.659525][ T6170] Bluetooth: hci3: command tx timeout [ 780.373133][ T5811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13959'. [ 780.393253][ T5811] macvlan2: entered promiscuous mode [ 780.436418][ T41] kauditd_printk_skb: 172 callbacks suppressed [ 780.436429][ T41] audit: type=1400 audit(2000000562.143:1099): avc: denied { watch } for pid=5813 comm="syz.1.13960" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 780.448477][ T41] audit: type=1400 audit(2000000562.152:1100): avc: denied { watch_sb watch_reads } for pid=5813 comm="syz.1.13960" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 780.579596][ T5719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 780.791827][ T6245] hid-generic 07FF:0004:0009.0012: unknown main item tag 0x0 [ 780.794974][ T6245] hid-generic 07FF:0004:0009.0012: unknown main item tag 0x0 [ 780.806352][ T6245] hid-generic 07FF:0004:0009.0012: unknown main item tag 0x0 [ 780.822906][ T6245] hid-generic 07FF:0004:0009.0012: hidraw0: HID v0.04 Device [syz1] on syz1 [ 780.975310][ T5848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13974'. [ 780.977489][ T5849] netlink: 188 bytes leftover after parsing attributes in process `syz.7.13973'. [ 780.981334][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13974'. [ 780.987091][ T5849] netlink: 188 bytes leftover after parsing attributes in process `syz.7.13973'. [ 781.016768][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13974'. [ 781.741485][ T5894] __nla_validate_parse: 2 callbacks suppressed [ 781.741498][ T5894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13992'. [ 781.831659][T11351] IPVS: starting estimator thread 0... [ 781.866954][ T5906] overlayfs: failed to clone upperpath [ 781.927619][ T5904] IPVS: using max 29 ests per chain, 69600 per kthread [ 781.945311][ T5914] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14001'. [ 782.106127][ T5924] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.14005'. [ 782.110180][ T5924] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14005'. [ 782.869605][ T5943] ip6tnl2: entered promiscuous mode [ 782.918652][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805b73d800: rx timeout, send abort [ 782.930527][ T41] audit: type=1400 audit(2000000564.480:1101): avc: denied { read } for pid=5326 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 782.939968][ T41] audit: type=1400 audit(2000000564.480:1102): avc: denied { search } for pid=5326 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.949715][ T41] audit: type=1400 audit(2000000564.480:1103): avc: denied { search } for pid=5326 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.959002][ T41] audit: type=1400 audit(2000000564.480:1104): avc: denied { add_name } for pid=5326 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.968686][ T41] audit: type=1400 audit(2000000564.480:1105): avc: denied { create } for pid=5326 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 782.977600][ T41] audit: type=1400 audit(2000000564.480:1106): avc: denied { append open } for pid=5326 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 782.987697][ T41] audit: type=1400 audit(2000000564.480:1107): avc: denied { getattr } for pid=5326 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 783.032066][ T41] audit: type=1326 audit(2000000564.574:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5944 comm="syz.1.14013" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e4d9aeb9 code=0x7fc00000 [ 783.206829][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14020'. [ 783.367083][ T5971] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 783.459692][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805b73d800: abort rx timeout. Force session deactivation [ 783.748039][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14030'. [ 784.243449][ T6016] overlayfs: failed to clone upperpath [ 784.296819][ T6020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14043'. [ 784.299895][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14043'. [ 784.303287][ T6020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14043'. [ 784.306146][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14043'. [ 785.352830][ T6072] netlink: 'syz.8.14067': attribute type 1 has an invalid length. [ 785.376400][ T6072] 8021q: adding VLAN 0 to HW filter on device bond2 [ 785.429233][ T6072] bond2: (slave veth5): Enslaving as an active interface with a down link [ 785.462165][ T6072] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 785.466927][ T6072] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 785.891884][ T41] kauditd_printk_skb: 18 callbacks suppressed [ 785.891900][ T41] audit: type=1400 audit(2000000567.238:1127): avc: denied { read } for pid=6085 comm="syz.9.14072" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 785.903956][ T41] audit: type=1400 audit(2000000567.238:1128): avc: denied { open } for pid=6085 comm="syz.9.14072" path="/34/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 785.912706][ T6087] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 785.918586][ T6087] block device autoloading is deprecated and will be removed. [ 785.928218][ T41] audit: type=1400 audit(2000000567.276:1129): avc: denied { ioctl } for pid=6085 comm="syz.9.14072" path="/34/file0/file0" dev="fuse" ino=64 ioctlcmd=0x911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 786.127496][ T5295] Bluetooth: hci2: command 0x0406 tx timeout [ 786.322393][ T6098] netlink: 'syz.8.14076': attribute type 1 has an invalid length. [ 786.357792][ T6098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 786.390151][ T6098] bond3: (slave bridge2): making interface the new active one [ 786.393345][ T6098] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 787.115862][ T6120] __nla_validate_parse: 2 callbacks suppressed [ 787.115876][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14085'. [ 787.189071][T11180] IPVS: starting estimator thread 0... [ 787.194085][ T6122] tipc: Started in network mode [ 787.195967][ T6122] tipc: Node identity ac1414aa, cluster identity 4711 [ 787.198920][ T6122] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 787.201958][ T6122] tipc: Enabled bearer , priority 10 [ 787.295555][ T6124] IPVS: using max 35 ests per chain, 84000 per kthread [ 787.357800][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 787.361771][T22806] e1000 0000:00:06.0 eth0: Reset adapter [ 787.475634][T22806] e1000 0000:00:06.0 eth0: Reset adapter [ 787.518139][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 787.668072][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 787.817686][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 787.978044][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 788.138538][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 788.289729][T11536] tipc: Node number set to 2886997162 [ 788.325428][ T6155] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 788.437912][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 788.726731][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 789.293751][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 789.808191][T11536] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 790.405735][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 791.518081][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 792.630232][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 793.753208][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 794.866823][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 795.977798][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 797.079395][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 798.202552][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 799.304061][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 800.426934][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 801.528547][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 802.640881][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 803.753827][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 804.865459][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 805.928345][ T5295] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 805.935435][ T5295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 805.940581][ T5295] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 805.944949][ T5295] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 805.951501][ T5295] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 805.977891][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 806.094983][ T6211] chnl_net:caif_netlink_parms(): no params data found [ 806.165664][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.444221][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.453963][ T6233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.906855][ T6255] netlink: 'syz.9.14108': attribute type 1 has an invalid length. [ 807.061211][ T6251] gretap1: entered promiscuous mode [ 807.072234][ T1155] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.078690][ T1155] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.090085][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 807.093605][ T6255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 807.109892][ T6256] bond1: (slave ip6gretap1): making interface the new active one [ 807.114988][ T6256] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 807.126705][ T1155] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.129368][ T1155] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.158559][T22813] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.164860][T22813] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.185111][T22813] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.194749][T22813] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.223525][ T6211] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.226702][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.231273][ T6211] bridge_slave_0: entered allmulticast mode [ 807.235292][ T6211] bridge_slave_0: entered promiscuous mode [ 807.242992][ T6211] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.246212][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.249337][ T6211] bridge_slave_1: entered allmulticast mode [ 807.253986][ T6211] bridge_slave_1: entered promiscuous mode [ 807.261619][ T6274] could not allocate digest TFM handle cryptd(blake2b-160) [ 807.287214][ T6211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.294906][ T6211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.321935][ T6211] team0: Port device team_slave_0 added [ 807.327626][ T6211] team0: Port device team_slave_1 added [ 807.352051][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.355041][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.365990][ T6211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.372327][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.375301][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.386237][ T6211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.425136][ T6211] hsr_slave_0: entered promiscuous mode [ 807.428453][ T6211] hsr_slave_1: entered promiscuous mode [ 807.431536][ T6211] debugfs: 'hsr0' already exists in 'hsr' [ 807.434317][ T6211] Cannot create hsr debugfs directory [ 808.116822][ T6170] Bluetooth: hci4: command tx timeout [ 808.202953][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 808.272303][ T6211] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 808.278735][ T6211] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 808.297082][ T6211] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 808.306084][ T6211] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 808.383833][ T6211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.399664][ T6211] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.408349][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.411541][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.422523][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.425754][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.561610][ T6211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.594342][ T6211] veth0_vlan: entered promiscuous mode [ 808.604523][ T6211] veth1_vlan: entered promiscuous mode [ 808.631040][ T6211] veth0_macvtap: entered promiscuous mode [ 808.636834][ T6211] veth1_macvtap: entered promiscuous mode [ 808.653618][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.661331][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.680604][ T1145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.685096][ T1145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.685412][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14120'. [ 808.690312][ T1145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.724590][ T6348] bond6: entered promiscuous mode [ 808.728099][ T6348] 8021q: adding VLAN 0 to HW filter on device bond6 [ 808.732372][ T1145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.768582][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14120'. [ 808.772746][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14120'. [ 808.776982][ T6348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14120'. [ 808.832382][ T6348] bond6: (slave sit3): refused to change device type [ 808.848203][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.851557][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.893973][T22813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.897356][T22813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.090389][ T41] audit: type=1400 audit(2000000588.930:1130): avc: denied { execute } for pid=6370 comm="syz.1.14124" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=139756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 809.276399][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14130'. [ 809.315252][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 809.328940][ T6392] netlink: 'syz.8.14129': attribute type 15 has an invalid length. [ 809.332186][ T6392] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14129'. [ 809.363249][ T6392] netlink: 'syz.8.14129': attribute type 3 has an invalid length. [ 809.367137][ T6392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 809.917417][ T6434] netlink: 'syz.0.14140': attribute type 8 has an invalid length. [ 809.921101][ T6434] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14140'. [ 810.341933][ T6170] Bluetooth: hci4: command tx timeout [ 810.426995][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 810.473968][ T6263] libceph: connect (1)[c::]:6789 error -101 [ 810.476978][ T6263] libceph: mon0 (1)[c::]:6789 connect error [ 810.573517][ T6461] ceph: No mds server is up or the cluster is laggy [ 810.741136][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14154'. [ 810.843385][ T6477] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14158'. [ 811.102365][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14165'. [ 811.323363][ T6503] input: syz1 as /devices/virtual/input/input38 [ 811.539437][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 811.895445][ T6529] netlink: 'syz.1.14180': attribute type 1 has an invalid length. [ 811.931403][ T6529] bond7: entered promiscuous mode [ 811.933407][ T6529] 8021q: adding VLAN 0 to HW filter on device bond7 [ 811.981449][ T6529] bond7: (slave bridge4): making interface the new active one [ 811.984813][ T6529] bridge4: entered promiscuous mode [ 811.991909][ T6529] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 812.147225][ T6543] tmpfs: Unknown parameter 'usrquota0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.147225][ T6543] 0 [ 812.566281][ T6170] Bluetooth: hci4: command tx timeout [ 812.582355][ T41] audit: type=1400 audit(2000000592.203:1131): avc: denied { write } for pid=6562 comm="syz.0.14194" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 812.662181][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 812.803741][ T6585] tipc: Failed to remove unknown binding: 66,0,0/4:1582447122/1582447123 [ 812.984340][ T6603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6603 comm=syz.1.14207 [ 813.764033][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 813.798111][ T6618] netlink: 'syz.8.14215': attribute type 1 has an invalid length. [ 813.838905][ T6618] macvlan0: entered promiscuous mode [ 813.841271][ T6618] macvlan0: entered allmulticast mode [ 813.844751][ T6618] bond4: entered promiscuous mode [ 813.847702][ T6618] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 813.925878][ T6618] bond4: left promiscuous mode [ 814.081027][ T6638] overlayfs: failed to clone upperpath [ 814.293625][ T6653] netlink: 'syz.9.14229': attribute type 1 has an invalid length. [ 814.317430][ T6653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 814.366311][ T6653] bond2: (slave veth7): Enslaving as an active interface with a down link [ 814.390382][ T6653] bond2: (slave dummy0): making interface the new active one [ 814.394045][ T6653] dummy0: entered promiscuous mode [ 814.396512][ T6653] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 814.405179][ T6653] netlink: 'syz.9.14229': attribute type 10 has an invalid length. [ 814.412382][ T6653] __nla_validate_parse: 6 callbacks suppressed [ 814.412392][ T6653] netlink: 40 bytes leftover after parsing attributes in process `syz.9.14229'. [ 814.437250][ T6653] bond2: (slave dummy0): Releasing active interface [ 814.801509][ T6170] Bluetooth: hci4: command tx timeout [ 814.876266][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 815.249694][ T6671] netlink: 63 bytes leftover after parsing attributes in process `syz.1.14235'. [ 815.358200][ T41] audit: type=1804 audit(2000000594.793:1132): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.14238" name="/newroot/32/bus/bus" dev="overlay" ino=187 res=1 errno=0 [ 815.493384][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14242'. [ 815.497562][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14242'. [ 815.554259][ T41] audit: type=1400 audit(2000000594.980:1133): avc: denied { bind } for pid=6687 comm="syz.9.14243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 815.577647][ T6688] [ 815.578744][ T6688] ====================================================== [ 815.581477][ T6688] WARNING: possible circular locking dependency detected [ 815.584833][ T6688] syzkaller #0 Tainted: G L [ 815.588152][ T6688] ------------------------------------------------------ [ 815.591160][ T6688] syz.9.14243/6688 is trying to acquire lock: [ 815.593837][ T6688] ffff888065e0afd8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 815.596513][ T41] audit: type=1400 audit(2000000594.999:1134): avc: denied { write } for pid=5844 comm="syz-executor" path="pipe:[5742]" dev="pipefs" ino=5742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 815.598932][ T6688] [ 815.598932][ T6688] but task is already holding lock: [ 815.611460][ T6688] ffff888065e09b60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 815.615064][ T6688] [ 815.615064][ T6688] which lock already depends on the new lock. [ 815.615064][ T6688] [ 815.619145][ T6688] [ 815.619145][ T6688] the existing dependency chain (in reverse order) is: [ 815.622832][ T6688] [ 815.622832][ T6688] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 815.626090][ T6688] lock_sock_nested+0x41/0xf0 [ 815.628303][ T6688] smc_listen_out+0x1f5/0x4b0 [ 815.630608][ T6688] smc_listen_work+0x767/0x50e0 [ 815.632986][ T6688] process_one_work+0x9c2/0x1840 [ 815.635268][ T6688] worker_thread+0x5da/0xe40 [ 815.637563][ T6688] kthread+0x3b3/0x730 [ 815.639634][ T6688] ret_from_fork+0x754/0xaf0 [ 815.641944][ T6688] ret_from_fork_asm+0x1a/0x30 [ 815.644237][ T6688] [ 815.644237][ T6688] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 815.648596][ T6688] __lock_acquire+0x14b8/0x2630 [ 815.650991][ T6688] lock_acquire+0x17c/0x330 [ 815.653230][ T6688] __flush_work+0x4de/0xcb0 [ 815.655394][ T6688] cancel_work_sync+0xd1/0xf0 [ 815.657611][ T6688] smc_clcsock_release+0x5f/0xe0 [ 815.660030][ T6688] __smc_release+0x5c2/0x880 [ 815.662103][ T6688] smc_close_non_accepted+0xda/0x200 [ 815.664611][ T6688] smc_close_active+0x4ff/0x1070 [ 815.667145][ T6688] __smc_release+0x634/0x880 [ 815.669429][ T6688] smc_release+0x1fc/0x620 [ 815.671524][ T6688] __sock_release+0xb3/0x260 [ 815.673638][ T6688] sock_close+0x1c/0x30 [ 815.675637][ T6688] __fput+0x3ff/0xb40 [ 815.677636][ T6688] task_work_run+0x150/0x240 [ 815.679968][ T6688] exit_to_user_mode_loop+0x100/0x4b0 [ 815.682441][ T6688] do_syscall_64+0x4fe/0xf80 [ 815.684667][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.687298][ T6688] [ 815.687298][ T6688] other info that might help us debug this: [ 815.687298][ T6688] [ 815.691541][ T6688] Possible unsafe locking scenario: [ 815.691541][ T6688] [ 815.694665][ T6688] CPU0 CPU1 [ 815.697044][ T6688] ---- ---- [ 815.699293][ T6688] lock(sk_lock-AF_SMC/1); [ 815.701176][ T6688] lock((work_completion)(&new_smc->smc_listen_work)); [ 815.704988][ T6688] lock(sk_lock-AF_SMC/1); [ 815.708066][ T6688] lock((work_completion)(&new_smc->smc_listen_work)); [ 815.710994][ T6688] [ 815.710994][ T6688] *** DEADLOCK *** [ 815.710994][ T6688] [ 815.714233][ T6688] 3 locks held by syz.9.14243/6688: [ 815.716560][ T6688] #0: ffff88803e8563c8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 815.720773][ T6688] #1: ffff888065e09b60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 815.724811][ T6688] #2: ffffffff8e5e32e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 815.728896][ T6688] [ 815.728896][ T6688] stack backtrace: [ 815.731512][ T6688] CPU: 0 UID: 0 PID: 6688 Comm: syz.9.14243 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.731542][ T6688] Tainted: [L]=SOFTLOCKUP [ 815.731549][ T6688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 815.731560][ T6688] Call Trace: [ 815.731568][ T6688] [ 815.731577][ T6688] dump_stack_lvl+0x100/0x190 [ 815.731605][ T6688] print_circular_bug.cold+0x178/0x1c7 [ 815.731633][ T6688] check_noncircular+0x146/0x160 [ 815.731664][ T6688] __lock_acquire+0x14b8/0x2630 [ 815.731688][ T6688] lock_acquire+0x17c/0x330 [ 815.731704][ T6688] ? __flush_work+0x4ca/0xcb0 [ 815.731727][ T6688] ? mark_held_locks+0x40/0x70 [ 815.731744][ T6688] ? __flush_work+0x4ca/0xcb0 [ 815.731765][ T6688] __flush_work+0x4de/0xcb0 [ 815.731785][ T6688] ? __flush_work+0x4ca/0xcb0 [ 815.731808][ T6688] ? __pfx___flush_work+0x10/0x10 [ 815.731830][ T6688] ? __pfx_wq_barrier_func+0x10/0x10 [ 815.731861][ T6688] ? __pfx___might_resched+0x10/0x10 [ 815.731882][ T6688] ? __smc_release+0x5ba/0x880 [ 815.731901][ T6688] cancel_work_sync+0xd1/0xf0 [ 815.731925][ T6688] smc_clcsock_release+0x5f/0xe0 [ 815.731944][ T6688] __smc_release+0x5c2/0x880 [ 815.731961][ T6688] ? __pfx_sock_def_readable+0x10/0x10 [ 815.731984][ T6688] smc_close_non_accepted+0xda/0x200 [ 815.732004][ T6688] smc_close_active+0x4ff/0x1070 [ 815.732025][ T6688] __smc_release+0x634/0x880 [ 815.732043][ T6688] smc_release+0x1fc/0x620 [ 815.732061][ T6688] __sock_release+0xb3/0x260 [ 815.732085][ T6688] ? __pfx_sock_close+0x10/0x10 [ 815.732109][ T6688] sock_close+0x1c/0x30 [ 815.732131][ T6688] __fput+0x3ff/0xb40 [ 815.732159][ T6688] task_work_run+0x150/0x240 [ 815.732180][ T6688] ? __pfx_task_work_run+0x10/0x10 [ 815.732204][ T6688] exit_to_user_mode_loop+0x100/0x4b0 [ 815.732224][ T6688] ? rcu_is_watching+0x12/0xc0 [ 815.732247][ T6688] do_syscall_64+0x4fe/0xf80 [ 815.732268][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.732287][ T6688] RIP: 0033:0x7eff9b59aeb9 [ 815.732303][ T6688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.732320][ T6688] RSP: 002b:00007eff9c4fa028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 815.732338][ T6688] RAX: 0000000000000000 RBX: 00007eff9b815fa0 RCX: 00007eff9b59aeb9 [ 815.732349][ T6688] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 815.732361][ T6688] RBP: 00007eff9b608c1f R08: 0000000000000000 R09: 0000000000000000 [ 815.732372][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.732383][ T6688] R13: 00007eff9b816038 R14: 00007eff9b815fa0 R15: 00007fffe768c2b8 [ 815.732402][ T6688] [ 815.988423][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 816.906929][T22813] bridge_slave_1: left allmulticast mode [ 816.909466][T22813] bridge_slave_1: left promiscuous mode [ 816.912015][T22813] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.916523][T22813] bridge_slave_0: left allmulticast mode [ 816.919117][T22813] bridge_slave_0: left promiscuous mode [ 816.921465][T22813] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.968508][T20530] SELinux: failure in sel_netif_sid_slow(), invalid network interface (121) [ 817.089002][T22813] bond1 (unregistering): (slave xfrm1): Releasing backup interface [ 817.092536][T22813] xfrm1 (unregistering): left promiscuous mode [ 817.100888][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 817.172884][T22813] bond2 (unregistering): (slave erspan1): Releasing backup interface [ 817.219343][T22813] erspan1 (unregistering): left promiscuous mode [ 817.518144][T20530] SELinux: failure in sel_netif_sid_slow(), invalid network interface (121) [ 817.691727][T22813] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 817.694972][T22813] bridge4 (unregistering): left promiscuous mode [ 817.788602][T22813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.818331][T22813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.861229][T22813] bond0 (unregistering): Released all slaves [ 818.039036][T22813] bond1 (unregistering): Released all slaves [ 818.179618][T22813] bond2 (unregistering): Released all slaves [ 818.219400][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 818.314217][T22813] bond3 (unregistering): Released all slaves [ 818.484371][T22813] bond4 (unregistering): Released all slaves [ 818.492743][T22813] bond5 (unregistering): Released all slaves [ 818.672955][T22813] bond6 (unregistering): Released all slaves [ 818.684402][T22813] bond7 (unregistering): Released all slaves [ 819.325319][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 819.468310][T22813] hsr_slave_0: left promiscuous mode [ 819.472677][T22813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.476468][T22813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.496620][ T55] SELinux: failure in sel_netif_sid_slow(), invalid network interface (41) [ 819.500502][T22813] pimreg (unregistering): left allmulticast mode [ 820.437628][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 820.623462][T22813] IPVS: stop unused estimator thread 0... [ 821.340564][T22813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.414494][T22813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.490639][T22813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.555672][T22813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.560658][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 821.773659][T22813] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.844023][T22813] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.918860][T22813] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.994934][T22813] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.200584][T22813] bridge_slave_1: left allmulticast mode [ 822.203215][T22813] bridge_slave_1: left promiscuous mode [ 822.205713][T22813] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.210116][T22813] bridge_slave_0: left allmulticast mode [ 822.212663][T22813] bridge_slave_0: left promiscuous mode [ 822.216182][T22813] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.221418][T22813] bridge_slave_0: left allmulticast mode [ 822.224709][T22813] bridge_slave_0: left promiscuous mode [ 822.227302][T22813] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.548390][T22813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.588904][T22813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.652989][T22813] bond0 (unregistering): Released all slaves [ 822.662310][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 822.662471][T22813] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 822.797127][T22813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.856376][T22813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.910898][T22813] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 822.963239][T22813] bond0 (unregistering): Released all slaves [ 822.971458][T22813] bond1 (unregistering): Released all slaves [ 823.167280][T22813] bond2 (unregistering): (slave veth7): Releasing active interface [ 823.198696][T22813] bond2 (unregistering): Released all slaves [ 823.277348][T22813] tipc: Disabling bearer [ 823.279674][T22813] tipc: Left network mode [ 824.380609][T22813] hsr_slave_0: left promiscuous mode [ 824.383215][T22813] hsr_slave_1: left promiscuous mode [ 824.385783][T22813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.388719][T22813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.392373][T22813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.395668][T22813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.401488][T22813] hsr_slave_0: left promiscuous mode [ 824.404170][T22813] hsr_slave_1: left promiscuous mode [ 824.407161][T22813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.410053][T22813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.413440][T22813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.416392][T22813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.423591][T22813] veth1_macvtap: left promiscuous mode [ 824.425942][T22813] veth0_macvtap: left promiscuous mode [ 824.428466][T22813] veth1_vlan: left promiscuous mode [ 824.430533][T22813] veth0_vlan: left promiscuous mode [ 824.433479][T22813] veth1_macvtap: left promiscuous mode [ 824.435692][T22813] veth0_macvtap: left promiscuous mode [ 824.438306][T22813] veth1_vlan: left promiscuous mode [ 824.440521][T22813] veth0_vlan: left promiscuous mode [ 824.653389][T22813] team0 (unregistering): Port device team_slave_1 removed [ 824.681756][T22813] team0 (unregistering): Port device team_slave_0 removed [ 825.033557][T22813] team0 (unregistering): Port device team_slave_1 removed [ 825.061495][T22813] team0 (unregistering): Port device team_slave_0 removed