last executing test programs: 1m38.559462742s ago: executing program 2 (id=95): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "000000200100", "376a30a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e580c", '\x00', "fffffffffffffffd"}, 0x38) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0xf, 0x100, 0xc4c}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1m38.289856743s ago: executing program 2 (id=101): syz_open_dev$video4linux(&(0x7f0000000000), 0x8, 0x400001) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) poll(&(0x7f0000000100)=[{r1, 0x28}], 0x1, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) socket$l2tp(0x2, 0x2, 0x73) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'syzkaller1\x00', 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m38.230902935s ago: executing program 2 (id=104): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000000)={0xfffffffffffffff0, 0xa, 0x6450, 0x8000, 0x9}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r1, &(0x7f0000000600)={&(0x7f0000000040)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/175, 0xaf}, {&(0x7f0000000180)=""/15, 0xf}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000240)=""/191, 0xbf}, {&(0x7f0000000300)=""/209, 0xd1}, {&(0x7f0000000400)=""/244, 0xf4}], 0x7, &(0x7f0000000580)=""/103, 0x67}, 0x40000001) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x4e24, 0x1, @local, 0x1}, {0xa, 0x4e23, 0x0, @loopback, 0x10001}, 0x1, {[0x0, 0xffff, 0xa46, 0x5, 0x6, 0x97c, 0x1, 0x3]}}, 0x5c) inotify_init1(0x80000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x140a, 0x2, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x540d1}, 0x40000) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00000007c0)={0xe, 0x0, 0x0, 0x8, 0x80000001}) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000800)={0x8000, 0x6, 0xfffff801, 0x3, 0x6}) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x6c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004080) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000980)={0xff, 0x0, 0x3, 0x3, 0xd4}) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000009c0)={0x7, 0x8, 0x5, 0x0, 0x0, [{{r4}, 0x9c}, {{r0}, 0xfffffffffffffffe}, {{r1}, 0x3}, {{r1}, 0x450}, {{r1}, 0xf}]}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000000b40)={0x9, 0xb}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000b80)={0x0, 0x81, 0x5, [0x10, 0x3497, 0x3, 0x1, 0x4]}, &(0x7f0000000bc0)=0x12) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000c00)={r8, 0x7, 0xfffa}, &(0x7f0000000c40)=0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) r9 = fsmount(r7, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d80), r5) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x60, r10, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd8fd}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000050}, 0x20040020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000ec0), 0x204180, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000f00)={@hyper, 0x2}) ioctl$UI_SET_SWBIT(r9, 0x4004556d, 0x3) 1m38.153125591s ago: executing program 2 (id=106): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000040)="8907040400", 0x5) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000100)) 1m38.152198923s ago: executing program 2 (id=107): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000080)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e22, 0x12002, 0x3, 0x8001, 0x40001}}, 0x44) (async) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x4000010, 0xffffffffffffffff, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x44, 0x0, @fd=r0, 0x9, {0x0, r0}, 0x4, 0x4, 0x0, {0x0, r3, r0}}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async, rerun: 64) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x9}, 0x8) (rerun: 64) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000001500)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000000000002000000000000000000000010000000000000000000000007000000"], 0x28}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20044000) (async) fstat(r0, &(0x7f0000000300)) 1m38.082147614s ago: executing program 2 (id=108): r0 = socket(0x10, 0x803, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delqdisc={0x54, 0x25, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff1}, {0x3, 0x7}, {0xfff1, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x40}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}, @TCA_RATE={0x6, 0x5, {0xa2, 0x30}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8001}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0xd4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x8, 0xb, 0x1, 0x42}, {0x6, 0x400004, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}, @TCA_U32_CLASSID={0x8, 0x1, {0xa, 0xfff2}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x40) 1m28.202190821s ago: executing program 3 (id=221): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$proc_mixer(r2, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000100)=0x4) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000000000000080000000a0000000200000006000000fcc40000030000000300000008000000ff07000000000080ff0f00000180000008000000070000000300000009000000000000000800000009000000feffffff00001c0005000000080000000e000000060000000200010004000000060000000a000000e500000000000000000c000007000000b4173800e91622215b42830fe314757b0419df21df5ef74746d23f6a581da22d56424785178b88c9912763037daebe6619d5de4fda57a201cab5a9de7cdc49c602400d1d02ca8cd5f2711f5f51bb9db0c8bf39ee4b00736381c6963929327c2b3d2f27fd47"]) 1m28.200696873s ago: executing program 3 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040028bd7000fcdbdf256b00000008000300", @ANYRES32=r2, @ANYBLOB="0c00f50684b9e09884c199000b0000005f0000000a050000080211000000000600ffffffffffff00000a001a004802110000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x20000000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'macsec0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r10], 0x80}}, 0x8000) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r11}, 0x18) io_uring_setup(0x1fbb, &(0x7f0000000280)={0x0, 0x8f2b, 0x8, 0x0, 0x308}) modify_ldt$read(0x0, &(0x7f0000001840)=""/4105, 0x1009) 1m28.091896204s ago: executing program 3 (id=223): syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x4, 0x80000000, 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d200100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xfd75, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES64=r1, @ANYRESOCT=r2, @ANYBLOB="853fc989ae20bedec9f04e47aa5c7cfda5d32cb32ef9573b0a1deb18344625487ec7b484d23829b3e6578318217fdee378aeb16941056ed4e5e1aa6fba802cb21ec79b876dc42c8953d1c4bb60cfd6f21c92cb1e98eb24e3750805"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x800) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) (async) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) read$FUSE(r0, &(0x7f0000003240)={0x2020}, 0x2020) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='ext4_insert_range\x00', r0, 0x0, 0x63}, 0x18) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x2000}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x120}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0400000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="01800000000000815b000000000000000001000083462d498130bdb88d8ece6f9894abc28f9bcd8fb4ce94aa07781350757d660c5b5e8f1d0a46999d01fb4c2556ce7a6e6d20824164d23e108278e0446c24c3ef8cf02bff081ccc0ef92ecfa074dfa4685986691d53b8a38eb52068256746ea5535711fc9c0b24bc74298c714d3cb062e84f322a1d2d68edb48499ef85ed9b0e60dfc90885d180481e3a0706becc2be53236ff687524f68f81354db29abf07db9edbf242886994cc38cff9da6f77022759124297d14944527ca09d23f32bc284dd1b078790b6abc52de29f36a363f0f277f847ca273392fe886b868fcdb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0400000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="01800000000000815b000000000000000001000083462d498130bdb88d8ece6f9894abc28f9bcd8fb4ce94aa07781350757d660c5b5e8f1d0a46999d01fb4c2556ce7a6e6d20824164d23e108278e0446c24c3ef8cf02bff081ccc0ef92ecfa074dfa4685986691d53b8a38eb52068256746ea5535711fc9c0b24bc74298c714d3cb062e84f322a1d2d68edb48499ef85ed9b0e60dfc90885d180481e3a0706becc2be53236ff687524f68f81354db29abf07db9edbf242886994cc38cff9da6f77022759124297d14944527ca09d23f32bc284dd1b078790b6abc52de29f36a363f0f277f847ca273392fe886b868fcdb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x4044004) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x4044004) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 1m27.911425909s ago: executing program 3 (id=224): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000580)=[0x0, r2, r2], 0x3, 0x0, 0x0, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)={0x44, r5, 0xb97534d5fe9704cf, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x792}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x240070a0) (async) r7 = syz_pidfd_open(r0, 0x0) process_madvise(r7, 0x0, 0x0, 0x19, 0x0) (async) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r8, 0x454054bb0763029d}], 0x1, 0x0, 0x0, 0x0) (async) read$dsp(r3, &(0x7f0000000100)=""/103, 0x67) (async) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000009, 0x11, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000b700000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) 1m27.822251688s ago: executing program 3 (id=225): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/21, 0x15, 0x2, &(0x7f00000000c0)={0xa, 0x4e23, 0x10, @empty, 0xa0d9}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x0, 0x2, 0x80000001, 0x0, 0xfffefffc}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m27.512243297s ago: executing program 3 (id=227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x9, 0x11, 0x40, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x100010, r1, 0x9c52000) getsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 1m23.030130467s ago: executing program 32 (id=108): r0 = socket(0x10, 0x803, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@delqdisc={0x54, 0x25, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff1}, {0x3, 0x7}, {0xfff1, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x40}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}, @TCA_RATE={0x6, 0x5, {0xa2, 0x30}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8001}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0xd4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x8, 0xb, 0x1, 0x42}, {0x6, 0x400004, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}, @TCA_U32_CLASSID={0x8, 0x1, {0xa, 0xfff2}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x40) 1m12.441915403s ago: executing program 33 (id=227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x9, 0x11, 0x40, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x100010, r1, 0x9c52000) getsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 1.211446406s ago: executing program 0 (id=1316): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) renameat2(r1, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="834f51d073a9df23990a0bc35ba03d2d383fce35b484f9e9ea28d13342e0260cda1a7af0d4e3c8fdbc5d7201a04a53e2603ad34e8c025a614f145fdf6add9be89f2b8a4f303c1b006c6dc7be041315dcd4692dede7682f6e7b056cf39318ad37bd33d3ba1cc09a7d80a7701cddd08e080b429a31969d59", 0x77}], 0x1}}], 0x1, 0x4004000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r4}}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xd4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.132972671s ago: executing program 0 (id=1320): r0 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4f, 0xa017, 0x9, 0x3, 0x4, 0x3, 0x7f, 0x24, 0xb, 0x7b, 0xe, 0x7, 0x3, 0x1, 0x1, 0x306eced0, [0x9]}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x7800, 0xf887, 0x7, 0x7ff, {{0x27, 0x4, 0x2, 0x1, 0x9c, 0x66, 0x0, 0xfa, 0x29, 0x0, @rand_addr=0x64010101, @empty, {[@timestamp={0x44, 0x2c, 0x14, 0x0, 0x5, [0x1ff, 0x9, 0x8f2, 0x81, 0x0, 0xf, 0x464b0, 0x8, 0x1, 0x3]}, @timestamp_addr={0x44, 0x34, 0x30, 0x1, 0x4, [{@broadcast, 0xb1f}, {@loopback, 0x7}, {@remote, 0x80000000}, {@multicast1, 0x5}, {@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0xf}, 0xfffffff9}]}, @lsrr={0x83, 0xb, 0x72, [@multicast2, @local]}, @timestamp_prespec={0x44, 0x1c, 0x3, 0x3, 0x4, [{@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x6}]}, @end]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @multicast1}, &(0x7f0000000280)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|=\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6Y\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\"DnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xca\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x972\x80\x1c\n\xed\xb7\x8f\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c\x96\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x00\x00\x00', 0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) socket$inet6_udplite(0xa, 0x2, 0x88) close(0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@remote, 0xd, r7}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x707, 0x8, 0x0, 0x10, {{0x1c, 0x4, 0x3, 0x22, 0x70, 0x68, 0x0, 0x81, 0x2f, 0x0, @remote, @empty, {[@end, @cipso={0x86, 0x59, 0x0, [{0x2, 0xc, "652794b2b1248b622680"}, {0x2, 0x8, "b39e74ac02fb"}, {0x5, 0xa, "41f37259dd055cb4"}, {0x6, 0xa, "1959a90374a17046"}, {0x0, 0x7, "fe3a7916a0"}, {0x6, 0xb, "69af82a351aed5dc7a"}, {0x7, 0x3, "b3"}, {0x0, 0xd, "549db481dd0694a6e30a91"}, {0x7, 0x9, "fc5ec3fda78bb8"}]}, @end]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getstats={0x1c, 0x5e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x4}}, 0x1c}}, 0x20000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @initdev, @empty}, &(0x7f0000000540)=0xc) 1.131581864s ago: executing program 1 (id=1321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000440)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0xe6e5a000, 0x2000, 0x3, 0xf1, 0x5, 0x81, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x4f, 0x2, 0x7, 0x19, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x9000, 0xc, 0x5, 0x3, 0x46, 0x2, 0xd, 0x6, 0x6, 0x8, 0x1}, {0x54000, 0xfec00000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0xeeef0000, 0x0, 0x4, 0x6, 0x3, 0x24, 0x1, 0xff, 0x4, 0x90, 0x1, 0x9}, {0x8000000, 0x4000, 0x0, 0x8, 0x3, 0x0, 0x0, 0xb, 0x9, 0x8, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xc, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x80a0000, 0x0, 0x1, 0x2100, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) socket(0x840000000002, 0x3, 0xff) 1.047659333s ago: executing program 0 (id=1325): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x24000000) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000240)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, 0x0, 0x0, r1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000700)="2ed8bf334433756acc970ccdd8f3ba3bb2daebcf1f9b2701025f1dce56e508f6dc035142c8870586d7fe2f601a865664c180d5fce5f31838b27df871675c8fb7112b70a72ecf07bb81aed26136b9f7932bb2f1f5ed54d0665e8769440c2700116aa7167b7a4ac82a8956be7a5b324aef05b65cf4b86b6b00", 0x7b}, {0x0}, {&(0x7f00000007c0)="af1e8f846ee0d41a91bf78b5971eb70d494ac1657a27fe30fd594e1868c8c13324dfc995a6f234a0d7eb3511e3dc322b7d39a9e2a80733d20fde8a4feb44b75e6e5be91052bac34467c09e45e528ca9ab4536bf779783281f60dbc39a14925ee36bd47ca22df6dabcb4d8ed1afc5fbbc851a68793aef7a041e279295c92d3f89d41f50e77cbaa898da5838b5434d8af8f7fd82e0753604e265f105fb40117f4da63cac877c5c310b8f5e661ff7ac3a9f5cbbb7ec91a7b27d1fa477bcb9864f1e8317d5e349cf46", 0xffffffffffffffe6}], 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1000}]}, 0x30}, 0x1, 0x0, 0x0, 0x191}, 0x84) r6 = gettid() r7 = socket$inet6(0xa, 0xa, 0x0) connect$inet6(r7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r6]) read$FUSE(r8, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x6, 0x6c1, 0x1000, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000000440)={0x50, 0x0, r9, {0x7, 0x29, 0x0, 0x14c0368, 0x2, 0x1, 0x84, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x42, 0x42) 980.537276ms ago: executing program 1 (id=1326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r1, 0x40480923, 0x200000000005) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000240)={"99a85d2ebd3d714d8e3e04d4a93e8b0e518f6ab14691f813ea85b978a76d", 0x6, 0x0, 0x0, 0x5, 0xad5, 0x80000000, 0x6, 0x7, [0x8, 0x36, 0x6, 0x86, 0xf, 0x6, 0x87, 0xe239, 0xc77, 0x8, 0x80, 0x3, 0x0, 0x1020, 0x6, 0xffff7fff, 0x800, 0x7fff, 0x7]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) setgroups(0x31a, &(0x7f00000004c0)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 980.205991ms ago: executing program 5 (id=1327): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8041}, 0x20050840) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) lchown(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="07000000080001000100000008000f00020000000a0004c0dbbdbade753e509caeeb70007770616e330000000c0017000201aaaaaaaaaa03"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000001fb8c56b3d0dddb3cb62706", @ANYRES32], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5c0a, &(0x7f0000000340)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x10, 0x0, 0x0, 0x2b, @empty, @empty}}) 891.455008ms ago: executing program 1 (id=1328): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x3, r0, 0x326cc5e1, 0x80000}) 887.980413ms ago: executing program 1 (id=1329): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000340), 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000340), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000003c0)={0x1, 0x0, 0x20a, 0x10001000000}) (async) fcntl$lock(r1, 0x25, &(0x7f00000003c0)={0x1, 0x0, 0x20a, 0x10001000000}) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) write$nbd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="674466980100000003000400030000001c2323b378a1a1ad3b6aa843a0f9fb0dcdd2b904acf483e475925db19c6567a72f5e511d1e1c4026c3b9b5c8590a79f4cd3cb90af2a70907cb36313800a5353538b8d9c890c3052791ef6a19141ac768f090d0804b0c5c4d2f075a4d1ac35d6b3afc283b17463e4d7a1ebba1d4bbaeba664dea14b76fdeeed3bc2c54a4e238393dab8df509d52f2eaf43601e3c0748e3d473463ba657b262d6e88e3fccff325d777fc81f9570aea5d0934d1c7c477c23b87c5ebddee9894a43f121dc4ec05381c854e850a5acb9dc2070"], 0xda) (async) write$nbd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="674466980100000003000400030000001c2323b378a1a1ad3b6aa843a0f9fb0dcdd2b904acf483e475925db19c6567a72f5e511d1e1c4026c3b9b5c8590a79f4cd3cb90af2a70907cb36313800a5353538b8d9c890c3052791ef6a19141ac768f090d0804b0c5c4d2f075a4d1ac35d6b3afc283b17463e4d7a1ebba1d4bbaeba664dea14b76fdeeed3bc2c54a4e238393dab8df509d52f2eaf43601e3c0748e3d473463ba657b262d6e88e3fccff325d777fc81f9570aea5d0934d1c7c477c23b87c5ebddee9894a43f121dc4ec05381c854e850a5acb9dc2070"], 0xda) mkdir(&(0x7f00000000c0)='./file0\x00', 0x88) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x1) (async) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x1) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) ioctl$SG_IO(r5, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0x6, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000002240)=""/4103, 0x0, 0x10010, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r6, 0x0, 0x0}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x814) 726.468894ms ago: executing program 1 (id=1330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 611.324905ms ago: executing program 5 (id=1331): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x2, 0x0) 611.135177ms ago: executing program 5 (id=1332): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000000000000000, 0x509803) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x2, {0xa, 0x4e22, 0x0, @remote, 0xffff9ca2}}}, 0x38) (async) creat(&(0x7f0000000140)='./file0\x00', 0x4) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 540.663517ms ago: executing program 4 (id=1333): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x40400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$evdev(r1, &(0x7f0000000080)=[{{0x0, 0x2710}, 0x15, 0xd18, 0x7}, {{}, 0x0, 0x8ce, 0x8000000}], 0x30) (async) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000000c0)=""/54) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000100)=0x2) (async) write$char_usb(0xffffffffffffffff, &(0x7f0000000140)="0738dac98987ac3f7e41b5f5cfb81a644015a046e0bed556a62b4e24efe0e11bb4a189a4ebec116e584b36be9962ef3aac824bc1c63674667ceeeace2ef1dcb8aa0e52680ca8895243e4f1821000333d5734acd7577a7286c9ecc0c02c", 0x5d) (async) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f00000001c0)) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0xc23, 0x440000) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000240)=""/164) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000300)={0x1, 0x1}) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000340)={0x8f, 0x0, 0x9}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0), 0x12101, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00'}) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000440)=0x2, 0x4) (async) write$P9_RWALK(r3, &(0x7f0000000480)={0x71, 0x6f, 0x2, {0x8, [{0x8, 0x3, 0x6}, {0x0, 0x3, 0x8}, {0x4, 0x1, 0x8}, {0x20, 0x3, 0x5}, {0x8, 0x0, 0x1}, {0x8, 0x4, 0x3}, {0x1}, {0x2}]}}, 0x71) (async) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000500)=""/142) (async) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f00000005c0)=""/79) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000640)={0x8, 0xc, 0xffff721a, 0x3ff, 0x4}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {0x9a}}, './file0\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f00000006c0)) ioctl$FIONCLEX(r1, 0x5450) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000016c0)={0x10200, 0x0, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_CAP_VM_TYPES(r4, 0x4068aea3, &(0x7f0000001700)) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001780), 0x140, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000017c0)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001800), 0x40, 0x0) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000001840)={0x3, 0x102, 0x2, {0xffffffff, 0xa1b, 0xfffffc00, 0x6}}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000001880)={0x200000, 0x112000, 0x1}) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000018c0)={0x0, 0x5, 0x0, 0xffffffffffff8000, 0x1}, &(0x7f0000001900)=0x18) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001940)=@assoc_value={r7, 0x6}, 0x8) 540.19785ms ago: executing program 5 (id=1334): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="f30f09b800228ed00f20e06635080000000f22e00f21a1f30fc7b400000f20c06635100000000f22c0646664660f380817f2660f35bad104527c000000650fc7af95de8ec0", 0x45}], 0x1, 0x3, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {}, [], {}, [], {0x10, 0x1}}, 0x24, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x16d) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x9, 0x8000000000000000, 0x3ff, 0x80000, 0x2, 0xe2, 0x8, 0x1004, 0x9, 0x400000000000c591, 0x5, 0x100000004, 0x1, 0x104, 0x80000004000000, 0x1a], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 539.780381ms ago: executing program 4 (id=1335): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000180)=@ethtool_rxfh_indir={0x38}}) r1 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000300), 0x20040, 0x0) read$ptp(r1, &(0x7f0000000340)=""/94, 0x5e) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000240)="128db1cf0800", 0x0, 0x0, 0x0, 0xffffffff, 0x0}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="dc81b69bf8a4c1c29998aa7e660524e8159adc125c47ee01eb56e113bc601760f002b1fb716cef2ace3a4f304c4788f67309a06222dfb39fd774fa7b197fcbe73b97ffba6e2207f5ccb9a1808a9e04d7696bf877c5ec3ae8124a35ace1dedb6f2d3ff9200284327a74eb791e04bd947b481935e5765b935f0289f5b82accb24774c9eedf62767f2a6deebbd5e88d8e869420e1ed5dbecd6f4ddbcf115060726a5279762710ca06818012e6cc6fa16992b7280369e9c85b6c10bc6ea0a74eb29db67465d72593536f07", @ANYRES8=r0, @ANYRES64=r0, @ANYRES8, @ANYRES16=r2, @ANYRESHEX=r0, @ANYRES64=r2, @ANYRES16=r1]) 470.837658ms ago: executing program 4 (id=1336): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x8c\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x1, 0x0) mq_notify(r0, &(0x7f0000000200)={0x0, 0x16}) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in6=@remote, 0x0, 0x0, 0x4e23, 0x4}, 0x6e6bbe, 0x2}}, 0x50}}, 0x1000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x16, 0x4, 0x3}, 0x10) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x0, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) syz_clone3(&(0x7f0000000080)={0x2001080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x70bd26, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/113, 0x71}], 0x1) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) 298.947341ms ago: executing program 5 (id=1337): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='gid_map\x00') write$cgroup_int(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) syz_open_dev$char_usb(0xc, 0xb4, 0x1) sendmmsg$inet6(r1, &(0x7f0000001c40)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x80000000}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44000) 231.264183ms ago: executing program 4 (id=1338): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0xfffffffd, "71f108e1a5713181ead3cfbd8b0988fb25d5b7684b60b513c2657c42122ab0d8", 0x3}) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) 230.986635ms ago: executing program 1 (id=1339): sendto$inet6(0xffffffffffffffff, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e03, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x2000802, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000140)=0x10) 227.474653ms ago: executing program 5 (id=1340): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e0c8a1c2000"], 0xf) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x58}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r4) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x1, 0x70bd21, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40004) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r4) (async) syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r4) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x4c, 0x49, 0x1, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0x0, 0xfff}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008090}, 0x20040010) (async) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x4c, 0x49, 0x1, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0x0, 0xfff}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008090}, 0x20040010) sendmsg$NFC_CMD_GET_SE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r9, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 158.018648ms ago: executing program 4 (id=1341): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000040000000500000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000780), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) (async) prlimit64(0x0, 0xf, &(0x7f0000000100)={0x7fff, 0x10001}, &(0x7f0000000180)) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x200) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000001d40)={0xa, @raw_data="752ae0b998dc0a7286617792b8846137fd5e789aaacdf16c2c8775cdb14054e3a03edfb1e65a686f175bc0aa07009dca773bf20ff0b4b8b885a2e6213209aa5f69589d00313ac31fd733f990e24a6b11c0bfad8562e8ff27733629751e457143f05e4b06a6d09713601d7a90991ae9e868c3e7ceefdcbae94b35e94b333a855e26d6621bbc847bd5b83bf9ab82d320e7f6cb6022fc19d94c5b8366d919a5ffeb51fedbdb2fe6a71f1d70d8c08277f6c113f5372fc84c75a9067658b71e17e835e03f3949bd66f1e7"}) 157.605225ms ago: executing program 0 (id=1342): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) lstat(&(0x7f0000000080)='./file0\x00', 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) (async) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() (async) getegid() (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) (async, rerun: 32) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [], {0x4, 0x4}, [{0x8, 0x0, r4}], {0x10, 0x1}, {0x20, 0x1}}, 0x2c, 0x3) (async, rerun: 32) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, 0x0) (async, rerun: 32) getxattr(0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x10000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[], [{@euid_gt={'euid>', r5}}]}}) (async, rerun: 32) syz_emit_ethernet(0x22, &(0x7f0000000580)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @multicast, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@can={0xc, {{0x0, 0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "1b74fe706d72901c"}}}}, &(0x7f00000005c0)={0x0, 0x1, [0xbec, 0xe3a, 0x41b, 0x994]}) (async, rerun: 32) r6 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x80, 0x182) (rerun: 32) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)={{0x216, 0x8, 0xe, 0x3e6, 0x212, 0x3ff, 0x7f}, "", ['\x00', '\x00', '\x00', '\x00']}, 0x420) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) (async) quotactl_fd$Q_SETQUOTA(r6, 0xecd54d7a2a6975b8, 0x0, &(0x7f0000000dc0)={0x7fffffffffffffff, 0x5, 0x5b1f, 0xc2, 0x3, 0x8, 0x8, 0x100000001, 0x45ff}) syz_emit_vhci(&(0x7f0000000f40)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x87, 0x4}, {0xf001, 0x5fa4}}}}, 0x11) sendmsg$unix(r3, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x0, 0x2000084}, 0x4) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x1f) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x100000000000f7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async) read$watch_queue(r1, &(0x7f0000000280)=""/162, 0xa2) (async, rerun: 64) keyctl$revoke(0x3, r0) (rerun: 64) 100.938672ms ago: executing program 0 (id=1343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x2800000}, 0x2c) r1 = memfd_secret(0x80000) ftruncate(r1, 0x3) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f000079e000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338300e8cb966058f66908611a2da3e15d07ea4bbea3d646bddcbf88d74a8f9b16f89ac1296a3ebe1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe659aabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf93360c81be9c56781a57bf6ac5bd26db48b73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f6635"}]}}]}, 0x138}}, 0x800) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r1, 0x20, &(0x7f0000000680)={&(0x7f0000000540)=""/240, 0xf0, 0x0, &(0x7f0000000640)=""/37, 0x25}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="100000007f00000000040000000400000a0100001889d3a457ea58ffc1212f20af8e2481ce9062fabd124497d3b1869dd1601c54bee296fd987559fd9fd06dc6cb46e5699f", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="01000000000000000200"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fff}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2fb8}}]}, &(0x7f0000000040)='syzkaller\x00', 0xb, 0xda, &(0x7f0000000440)=""/218, 0x41000, 0x10, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x5, 0xd, 0xe2}, 0x10, r5, 0x0, 0x0, &(0x7f0000000780)=[r1, r1, r1, r6, r1, r1, r1, r1], 0x0, 0x10, 0x7fffffff}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r9}, 0x10) r10 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x6ef2, 0x400, 0xa, 0xffffff}, &(0x7f0000000080), &(0x7f0000000b00)) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000)=0x1, 0x0, 0x4) 100.307263ms ago: executing program 4 (id=1344): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x208000, 0x20}, 0x18) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x1000, 0x2, 0x6, 0x100000000, 0x20, 0xffffffffffffffff}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000041) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x8, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) ioctl$BLKRASET(r1, 0x1262, &(0x7f0000000340)=0xe9c) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x77}, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000540)={0x10, 0x0, 0x1ff, 0x2, 0x10, "cab5f31eee38f9877b65680c97ae746ef4720d"}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000600)={0x9, 0x0, &(0x7f00000005c0)=[r0, r2, r2, r0]}, 0x4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40001) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r2) getsockname$packet(r0, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x0, 0x1, 0x10, @dev={0xfe, 0x80, '\x00', 0x27}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x707, 0x10, 0x0, 0x8}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x78, r7, 0x2, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x40080d0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x3, 0xff, 0x9, 0x48c}]}, 0x10) r10 = dup3(r2, r0, 0x80000) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000b40)=0x5, &(0x7f0000000b80)=0x2) sendmsg$inet(r10, &(0x7f0000001040)={&(0x7f0000000bc0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="ff1c9e8a011e2fa9c211140dd7869053bfed125cd1af9018436d707ff36d2ec2f5f7401670da950ff30ca382ac525ebb920817b957c9", 0x36}, {&(0x7f0000000c40)="e67013ac13b0f79260222c21163d3366aa507614fdc6b90d668cd5f44cd9924abb4b203502ff09effd8a6aa85b1c2e968559c6bd79b2a7443dde87a7", 0x3c}, {&(0x7f0000000c80)="070e219626173df4f8b7aa0915ee721546fa7521ec0c3189db57174fcb2e56661bb069bb9cb33b74d01ff96530637bad92a15ef67ce029c5679891b2e59c1a52d21f6992b03b7d339eddaae0ce33cb0388efb62e4f37c5b04fa337b0c6b348b3927f8e2fb9d02bbce8a8189e8d7886c3a42a837b4e74a43b0ee04153c83ade49c49171569d8408c2e693991396ca394fa7426a92c97675e147c75c38", 0x9c}, {&(0x7f0000000d40)="0b0b20aeba328719eaa4d00ee8f40f81180cc79675b615728942e5cdbc53f47655cd483aaac517a03911d8a714fe7238942e0d8672052c1c4b41abe0eef61a74cf0ab560d15ff5f8762f926716f9a67080eb21476171a977e88de2af36a278b4d22395fd0dadfd5ece62ac06d85c512e33a8d3025fb66bdd56fa137dd9", 0x7d}, {&(0x7f0000000dc0)="a0ca7a181e7d2ce4df1d8963576e65c8fec3169dcdda4a0b3752852212e0d332991659eb9e63ff3589d2bfdcb3272fbedaa63cced14887a1e1049d9e14d0dc5a274fe7b99c145f5650f80d3d5eefae229b", 0x51}, {&(0x7f0000000e40)="1f535f86dba61af46d2cc391f3e129050b4279c5c0b9f18a5724995d6956db7c33c36ce1dbd4a6fe6d729b49c477f2b31f762fda626e4efee157919975fc74a5f8290d2ac9332edcb53af1b66038aebf2c6e5f454f831370c7d7829948eedaba6a13a9d2f66ff53a5d02032958adeb3ae38ef7631c", 0x75}], 0x6, &(0x7f0000000f40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0xf0}, 0x8000) sendmsg$NL80211_CMD_PROBE_CLIENT(r10, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x50, r3, 0x80, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x31}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r10, 0xc0189378, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r0, {r10}}, './file0\x00'}) read$FUSE(r0, &(0x7f0000001200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAOFF(r11, 0xffffffff80000300, r12, 0x0) 0s ago: executing program 0 (id=1345): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001a00010027bd7000fedbdf251c101402ff00c8030016000008000100eaff01"], 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x3, @mcast1, 0x2}, @in6={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}], 0x48) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000280)=0x3, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004340)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x38, 0x1, [@m_sample={0x34, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "9030"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x4000800) userfaultfd(0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setpriority(0x1, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x50000025) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') move_mount(r4, &(0x7f0000000000)='./mnt\x00', r4, &(0x7f0000000100)='./mnt\x00', 0x137) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000001) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffe, 0x0, 0x2, r9}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000240)={0x4, 0x0, 0x1, r9}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040)=0x2, 0x4) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000000)) kernel console output (not intermixed with test programs): "syz.5.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.237547][ T40] audit: type=1400 audit(97.172:488): avc: denied { bind } for pid=7817 comm="syz.5.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.240910][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.501'. [ 97.243979][ T7820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.502'. [ 97.311388][ T40] audit: type=1400 audit(97.242:489): avc: denied { nlmsg_write } for pid=7824 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 97.350714][ T7830] netlink: 76 bytes leftover after parsing attributes in process `syz.0.505'. [ 97.374591][ T7832] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 97.379968][ T7832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.442816][ T40] audit: type=1400 audit(97.372:490): avc: denied { setattr } for pid=7834 comm="syz.5.507" name="KEY" dev="sockfs" ino=19308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.678083][ T7848] trusted_key: encrypted_key: insufficient parameters specified [ 97.740424][ T7856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.517'. [ 97.787836][ T7868] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.519'. [ 97.922378][ T7874] team0: Port device team_slave_0 removed [ 97.941788][ T7882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7882 comm=syz.1.522 [ 97.942006][ T7883] fuse: Bad value for 'fd' [ 98.437171][ T47] usb 9-1: USB disconnect, device number 8 [ 98.640645][ T7870] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.642904][ T7870] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.650559][ T7870] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.652854][ T7870] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.662520][ T7870] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 98.667220][ T7870] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.671531][ T7870] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.681296][ T7870] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 98.734603][ T7894] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 98.738923][ T7894] overlayfs: missing 'lowerdir' [ 98.837192][ T7907] netlink: 'syz.1.529': attribute type 10 has an invalid length. [ 98.862290][ T7907] team0: Port device dummy0 added [ 98.868384][ T7907] netlink: 'syz.1.529': attribute type 10 has an invalid length. [ 98.897080][ T7907] team0: Port device dummy0 removed [ 99.156693][ T1336] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 99.184563][ T7925] kvm: kvm [7924]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc1) = 0x60000003054 [ 99.187859][ T7925] kvm: kvm [7924]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc2) = 0x60000006caa [ 99.226299][ T6019] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 99.341807][ T1336] usb 5-1: config 0 has no interfaces? [ 99.356655][ T1336] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 99.359478][ T1336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.362068][ T1336] usb 5-1: Product: syz [ 99.363648][ T1336] usb 5-1: Manufacturer: syz [ 99.365278][ T1336] usb 5-1: SerialNumber: syz [ 99.377784][ T1336] usb 5-1: config 0 descriptor?? [ 99.397456][ T6019] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 99.399841][ T6019] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.403348][ T6019] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.406965][ T6019] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.410381][ T6019] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.415393][ T6019] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 99.417985][ T6019] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.421749][ T6019] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.425553][ T6019] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.429046][ T6019] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.433275][ T6019] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 99.444250][ T6019] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.447730][ T6019] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.451569][ T6019] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.456104][ T6019] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.463412][ T6019] usb 10-1: string descriptor 0 read error: -22 [ 99.465606][ T6019] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 99.468928][ T6019] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.474588][ T6019] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 99.503467][ T7935] openvswitch: netlink: Flow actions attr not present in new flow. [ 99.851956][ T7953] ufs: You didn't specify the type of your ufs filesystem [ 99.851956][ T7953] [ 99.851956][ T7953] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 99.851956][ T7953] [ 99.851956][ T7953] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 99.858817][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 99.863790][ T7953] ufs: failed to set blocksize [ 99.864975][ T7957] cramfs: wrong magic [ 99.887272][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 99.890404][ T7957] cramfs: wrong magic [ 99.907654][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 99.910752][ T7957] cramfs: wrong magic [ 99.918563][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 99.923161][ T7957] cramfs: wrong magic [ 99.926737][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 99.933941][ T7957] cramfs: wrong magic [ 99.956190][ T5294] Bluetooth: hci2: command 0x0419 tx timeout [ 99.958392][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 99.960593][ T7957] cramfs: wrong magic [ 99.962419][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 99.964713][ T7957] cramfs: wrong magic [ 99.970388][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 99.972661][ T7957] cramfs: wrong magic [ 99.974456][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 99.977695][ T7957] cramfs: wrong magic [ 99.987018][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 99.989647][ T7957] cramfs: wrong magic [ 99.991118][ T7961] binder: 7960:7961 ioctl 5441 1 returned -22 [ 99.991358][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 99.995996][ T7957] cramfs: wrong magic [ 100.006827][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.010638][ T7957] cramfs: wrong magic [ 100.018176][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.022097][ T7957] cramfs: wrong magic [ 100.023964][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.027995][ T7957] cramfs: wrong magic [ 100.032484][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.035660][ T7957] cramfs: wrong magic [ 100.037861][ T7963] GUP no longer grows the stack in syz.1.546 (7963): 200000007000-20000000a000 (200000004000) [ 100.040402][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.042195][ T7963] CPU: 3 UID: 0 PID: 7963 Comm: syz.1.546 Not tainted syzkaller #0 PREEMPT(full) [ 100.042218][ T7963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.042229][ T7963] Call Trace: [ 100.042235][ T7963] [ 100.042242][ T7963] dump_stack_lvl+0x16c/0x1f0 [ 100.042295][ T7963] gup_vma_lookup+0x1d2/0x220 [ 100.042329][ T7963] __get_user_pages+0x241/0x33c0 [ 100.042366][ T7963] ? __sys_setsockopt+0x1a0/0x230 [ 100.042391][ T7963] ? __x64_sys_setsockopt+0xbd/0x160 [ 100.042417][ T7963] ? do_syscall_64+0xcd/0xf80 [ 100.042439][ T7963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.042457][ T7963] ? __pfx___get_user_pages+0x10/0x10 [ 100.042491][ T7963] __gup_longterm_locked+0x2dd/0x17e0 [ 100.042525][ T7963] ? __pfx___gup_longterm_locked+0x10/0x10 [ 100.042565][ T7963] pin_user_pages+0x13c/0x160 [ 100.042592][ T7963] ? __pfx_pin_user_pages+0x10/0x10 [ 100.042629][ T7963] xdp_umem_create+0x741/0x1270 [ 100.042656][ T7963] xsk_setsockopt+0x9cf/0xc00 [ 100.042676][ T7963] ? __pfx_xsk_setsockopt+0x10/0x10 [ 100.042705][ T7963] ? selinux_socket_setsockopt+0x6a/0x80 [ 100.042734][ T7963] ? __pfx_xsk_setsockopt+0x10/0x10 [ 100.042756][ T7963] do_sock_setsockopt+0xf3/0x1d0 [ 100.042779][ T7963] __sys_setsockopt+0x1a0/0x230 [ 100.042809][ T7963] __x64_sys_setsockopt+0xbd/0x160 [ 100.042837][ T7963] ? do_syscall_64+0x91/0xf80 [ 100.042861][ T7963] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.042885][ T7963] do_syscall_64+0xcd/0xf80 [ 100.042914][ T7963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.042932][ T7963] RIP: 0033:0x7fe7b798f7c9 [ 100.042946][ T7963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.042963][ T7963] RSP: 002b:00007fe7b5bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 100.042981][ T7963] RAX: ffffffffffffffda RBX: 00007fe7b7be5fa0 RCX: 00007fe7b798f7c9 [ 100.042994][ T7963] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 100.043006][ T7963] RBP: 00007fe7b7a13f91 R08: 0000000000000020 R09: 0000000000000000 [ 100.043017][ T7963] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 100.043027][ T7963] R13: 00007fe7b7be6038 R14: 00007fe7b7be5fa0 R15: 00007ffdd1a1a5a8 [ 100.043053][ T7963] [ 100.045394][ T7963] sock: sock_set_timeout: `syz.1.546' (pid 7963) tries to set negative timeout [ 100.050988][ T7957] cramfs: wrong magic [ 100.138617][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.141493][ T7957] cramfs: wrong magic [ 100.144405][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.147535][ T7957] cramfs: wrong magic [ 100.153493][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.157010][ T7957] cramfs: wrong magic [ 100.163585][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.166634][ T7957] cramfs: wrong magic [ 100.168872][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.171653][ T7957] cramfs: wrong magic [ 100.176516][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.179188][ T7957] cramfs: wrong magic [ 100.186608][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.189735][ T7957] cramfs: wrong magic [ 100.202908][ T6019] usb 5-1: USB disconnect, device number 9 [ 100.217806][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.220218][ T7957] cramfs: wrong magic [ 100.226650][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.228978][ T7957] cramfs: wrong magic [ 100.232372][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.235086][ T7957] cramfs: wrong magic [ 100.245647][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.248081][ T7957] cramfs: wrong magic [ 100.257382][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.259662][ T7957] cramfs: wrong magic [ 100.266538][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.269060][ T7957] cramfs: wrong magic [ 100.276749][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.279098][ T7957] cramfs: wrong magic [ 100.286621][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.288926][ T7957] cramfs: wrong magic [ 100.293683][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.296530][ T7957] cramfs: wrong magic [ 100.306616][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.308882][ T7957] cramfs: wrong magic [ 100.319896][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.322540][ T7957] cramfs: wrong magic [ 100.326760][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.329114][ T7957] cramfs: wrong magic [ 100.333767][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.336233][ T7957] cramfs: wrong magic [ 100.344622][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.350801][ T7957] cramfs: wrong magic [ 100.355472][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.359521][ T7957] cramfs: wrong magic [ 100.362852][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.365992][ T7957] cramfs: wrong magic [ 100.373041][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.376405][ T7957] cramfs: wrong magic [ 100.379791][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.382768][ T7957] cramfs: wrong magic [ 100.385907][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.389455][ T7957] cramfs: wrong magic [ 100.392906][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.396064][ T7957] cramfs: wrong magic [ 100.400924][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.404216][ T7957] cramfs: wrong magic [ 100.414404][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.417757][ T7957] cramfs: wrong magic [ 100.422189][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 100.422200][ T40] audit: type=1400 audit(100.352:499): avc: denied { write } for pid=7971 comm="syz.0.549" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 100.424516][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.436658][ T7957] cramfs: wrong magic [ 100.477107][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.486499][ T7957] cramfs: wrong magic [ 100.488456][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.490774][ T7957] cramfs: wrong magic [ 100.492518][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.494864][ T7957] cramfs: wrong magic [ 100.496651][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.499011][ T7957] cramfs: wrong magic [ 100.500758][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.503092][ T7957] cramfs: wrong magic [ 100.504834][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.506769][ T6563] wlan0: Trigger new scan to find an IBSS to join [ 100.507348][ T7957] cramfs: wrong magic [ 100.511091][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.513412][ T7957] cramfs: wrong magic [ 100.515151][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.517632][ T7957] cramfs: wrong magic [ 100.520520][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.522845][ T7957] cramfs: wrong magic [ 100.524518][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.526909][ T7957] cramfs: wrong magic [ 100.528691][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.531172][ T7957] cramfs: wrong magic [ 100.536744][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.539152][ T7957] cramfs: wrong magic [ 100.540926][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.543328][ T7957] cramfs: wrong magic [ 100.553481][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.555859][ T7957] cramfs: wrong magic [ 100.563563][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.565938][ T7957] cramfs: wrong magic [ 100.573654][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.576015][ T7957] cramfs: wrong magic [ 100.583772][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.586348][ T7957] cramfs: wrong magic [ 100.588116][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.590503][ T7957] cramfs: wrong magic [ 100.593889][ T7957] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 100.596972][ T7957] cramfs: wrong magic [ 100.638246][ T40] audit: type=1400 audit(100.572:500): avc: denied { load_policy } for pid=7984 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 100.641034][ T7985] SELinux: failed to load policy [ 100.666190][ T5294] Bluetooth: hci3: command 0x0419 tx timeout [ 100.676243][ T5294] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.746199][ T5294] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.837707][ T7995] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 100.910359][ T7997] fuse: Bad value for 'fd' [ 100.910404][ T7999] fuse: Bad value for 'fd' [ 100.922462][ T8000] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 100.930787][ T8000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.947908][ T40] audit: type=1400 audit(100.882:501): avc: denied { ioctl } for pid=7996 comm="syz.4.554" path="socket:[19416]" dev="sockfs" ino=19416 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.253305][ T8022] program syz.0.560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.345434][ T8036] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 101.398526][ T8040] ufs: You didn't specify the type of your ufs filesystem [ 101.398526][ T8040] [ 101.398526][ T8040] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 101.398526][ T8040] [ 101.398526][ T8040] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 101.410467][ T8040] ufs: ufstype=old is supported read-only [ 101.414987][ T8040] ufs: ufs_fill_super(): bad magic number [ 101.440190][ T40] audit: type=1400 audit(101.372:502): avc: denied { ioctl } for pid=8041 comm="syz.1.565" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.468736][ T40] audit: type=1326 audit(101.402:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8041 comm="syz.1.565" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7b798f7c9 code=0x0 [ 101.537295][ T40] audit: type=1400 audit(101.472:504): avc: denied { bind } for pid=8041 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.607818][ T8050] __nla_validate_parse: 10 callbacks suppressed [ 101.607834][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 101.616028][ T8051] fuse: Bad value for 'fd' [ 101.621849][ T8052] fuse: Bad value for 'fd' [ 101.677396][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.569'. [ 101.680976][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.569'. [ 101.767725][ T40] audit: type=1400 audit(101.702:505): avc: denied { watch } for pid=8057 comm="syz.4.570" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.789668][ T8062] cgroup: Name too long [ 101.840348][ T40] audit: type=1400 audit(101.772:506): avc: denied { write } for pid=8065 comm="syz.0.573" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 101.899347][ T8070] vim2m vim2m.0: vidioc_s_fmt queue busy [ 101.988238][ T6033] usb 10-1: USB disconnect, device number 2 [ 102.062389][ T8078] netlink: 40 bytes leftover after parsing attributes in process `syz.4.578'. [ 102.092170][ T8078] netlink: 'syz.4.578': attribute type 322 has an invalid length. [ 102.182324][ T8090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.581'. [ 102.202155][ T8090] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8090 comm=syz.4.581 [ 102.268391][ T8094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.582'. [ 102.303229][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'. [ 102.324281][ T40] audit: type=1400 audit(102.252:507): avc: denied { lock } for pid=8095 comm="syz.5.577" path="/57/bus/file0/cpuset.effective_cpus" dev="9p" ino=71827963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.560443][ T8108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.587'. [ 102.647911][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.590'. [ 102.651266][ T8118] usb usb8: usbfs: process 8118 (syz.5.590) did not claim interface 0 before use [ 102.656498][ T60] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 102.657308][ T8121] netlink: 9 bytes leftover after parsing attributes in process `syz.4.591'. [ 102.664532][ T8121] gretap0: entered promiscuous mode [ 102.746613][ T5294] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.751074][ T8125] 0: renamed from hsr0 (while UP) [ 102.768713][ T8125] 0: entered allmulticast mode [ 102.770370][ T8125] hsr_slave_0: entered allmulticast mode [ 102.772124][ T8125] hsr_slave_1: entered allmulticast mode [ 102.774182][ T8125] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 102.826321][ T5294] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.827470][ T60] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 102.831445][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 102.834800][ T60] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.842106][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 102.845650][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 102.851873][ T60] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 102.854363][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 102.858001][ T60] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.861608][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 102.865075][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 102.870025][ T60] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 102.872355][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 102.875713][ T60] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.886223][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 102.889896][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 102.900945][ T60] usb 6-1: string descriptor 0 read error: -22 [ 102.903053][ T60] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 102.905724][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.912052][ T60] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 103.153379][ T8160] kvm: kvm [8158]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x1 [ 103.293114][ T40] audit: type=1400 audit(103.222:508): avc: denied { read } for pid=8172 comm="syz.4.608" name="msr" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 103.408753][ T8181] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 103.474330][ T8183] input: syz1 as /devices/virtual/input/input9 [ 103.494832][ T8183] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 103.557277][ T4271] wlan0: Trigger new scan to find an IBSS to join [ 103.663164][ T8196] netlink: 'syz.5.612': attribute type 10 has an invalid length. [ 103.665803][ T8196] team0: entered promiscuous mode [ 103.667468][ T8196] team_slave_0: entered promiscuous mode [ 103.669320][ T8196] team_slave_1: entered promiscuous mode [ 103.671292][ T8196] bridge0: port 3(team0) entered blocking state [ 103.673440][ T8196] bridge0: port 3(team0) entered disabled state [ 103.675495][ T8196] team0: entered allmulticast mode [ 103.681449][ T8196] team_slave_0: entered allmulticast mode [ 103.683312][ T8196] team_slave_1: entered allmulticast mode [ 103.696650][ T8196] bridge0: port 3(team0) entered blocking state [ 103.698676][ T8196] bridge0: port 3(team0) entered forwarding state [ 103.830769][ T6033] usb 6-1: USB disconnect, device number 5 [ 103.830901][ T8169] usb 6-1: Couldn't submit interrupt_out_urb -19 [ 104.049113][ T8223] FAT-fs (sr0): bogus number of reserved sectors [ 104.051436][ T8223] FAT-fs (sr0): Can't find a valid FAT filesystem [ 104.105401][ T8226] dlm: no locking on control device [ 104.460636][ T8255] netlink: 'syz.5.637': attribute type 9 has an invalid length. [ 104.497818][ T8258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8258 comm=syz.0.638 [ 104.502694][ T8258] fuse: Unknown parameter 'ajTx ґ&n3cL' [ 104.509145][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.517792][ T8260] new mount options do not match the existing superblock, will be ignored [ 104.517836][ T8258] mkiss: ax0: crc mode is auto. [ 104.540050][ T8260] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 104.662495][ T8268] xt_l2tp: v2 doesn't support IP mode [ 104.735333][ T8276] Driver unsupported XDP return value 0 on prog (id 70) dev N/A, expect packet loss! [ 104.836192][ T5294] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.896220][ T6353] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 104.916242][ T5294] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.969153][ T8285] openvswitch: netlink: IPv4 tunnel dst address is zero [ 105.026312][ T60] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 105.077958][ T6353] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 105.080323][ T6353] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 105.083652][ T6353] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.087732][ T6353] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 105.091174][ T6353] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 105.096890][ T6353] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 105.099427][ T6353] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 105.103966][ T6353] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.107854][ T6353] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 105.112356][ T6353] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 105.118210][ T6353] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 105.120603][ T6353] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 105.124265][ T6353] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.128786][ T6353] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 105.132188][ T6353] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 105.138617][ T6353] usb 5-1: string descriptor 0 read error: -22 [ 105.140790][ T6353] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 105.143675][ T6353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.156787][ T6353] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 105.187441][ T60] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.190630][ T60] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.195026][ T60] usb 10-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 105.199156][ T60] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.201931][ T60] usb 10-1: Product: syz [ 105.203168][ T60] usb 10-1: Manufacturer: syz [ 105.204641][ T60] usb 10-1: SerialNumber: syz [ 105.212736][ T60] usb 10-1: config 0 descriptor?? [ 105.733958][ T8316] netlink: 'syz.1.655': attribute type 1 has an invalid length. [ 105.737254][ T8316] netlink: 'syz.1.655': attribute type 1 has an invalid length. [ 105.820833][ T8320] cgroup: name respecified [ 105.890084][ T8322] veth1_to_bond: entered allmulticast mode [ 105.910862][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 105.910873][ T40] audit: type=1400 audit(105.842:528): avc: denied { map } for pid=8321 comm="syz.1.658" path="/188/file0/memory.events" dev="9p" ino=71827965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.927931][ T8321] veth1_to_bond: left allmulticast mode [ 105.940299][ T8324] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8324 comm=syz.4.659 [ 105.998748][ T8326] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 106.160574][ T6353] usb 5-1: USB disconnect, device number 12 [ 106.160657][ T8303] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 106.370751][ T40] audit: type=1400 audit(106.302:529): avc: denied { setopt } for pid=8351 comm="syz.1.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.644782][ T8352] __nla_validate_parse: 26 callbacks suppressed [ 106.644795][ T8352] netlink: 27 bytes leftover after parsing attributes in process `syz.1.669'. [ 106.687114][ T8352] netlink: 27 bytes leftover after parsing attributes in process `syz.1.669'. [ 106.726467][ T8352] netlink: 27 bytes leftover after parsing attributes in process `syz.1.669'. [ 106.764055][ T8352] netlink: 27 bytes leftover after parsing attributes in process `syz.1.669'. [ 106.807793][ T8352] netlink: 27 bytes leftover after parsing attributes in process `syz.1.669'. [ 106.854006][ T8352] netlink: 27 bytes leftover after parsing attributes in process `syz.1.669'. [ 106.896269][ T8352] netlink: 27 bytes leftover after parsing attributes in process `syz.1.669'. [ 106.926355][ T8352] netlink: 27 bytes leftover after parsing attributes in process `syz.1.669'. [ 106.955698][ T8352] netlink: 27 bytes leftover after parsing attributes in process `syz.1.669'. [ 106.982831][ T8352] netlink: 27 bytes leftover after parsing attributes in process `syz.1.669'. [ 107.750749][ T8358] Set syz1 is full, maxelem 65536 reached [ 107.794372][ T60] usb 10-1: USB disconnect, device number 3 [ 108.071729][ T40] audit: type=1400 audit(108.002:530): avc: denied { mounton } for pid=8391 comm="syz.4.675" path="/proc/348/task" dev="proc" ino=26859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 108.085823][ T40] audit: type=1400 audit(108.012:531): avc: denied { associate } for pid=8395 comm="syz.4.675" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 108.466356][ T8387] veth1_to_hsr: entered promiscuous mode [ 108.468211][ T8387] macvlan2: entered allmulticast mode [ 108.470008][ T8387] veth1_to_hsr: entered allmulticast mode [ 108.514982][ T40] audit: type=1400 audit(108.442:532): avc: denied { setattr } for pid=8405 comm="syz.5.679" path="pipe:[26865]" dev="pipefs" ino=26865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 108.554899][ T8408] netlink: 'syz.1.678': attribute type 2 has an invalid length. [ 108.576556][ T47] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 108.685833][ T8417] veth9: entered promiscuous mode [ 108.690480][ T8419] bridge0: entered allmulticast mode [ 108.726280][ T47] usb 9-1: Using ep0 maxpacket: 8 [ 108.730819][ T47] usb 9-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1088, setting to 1024 [ 108.734306][ T47] usb 9-1: config 1 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 108.741887][ T47] usb 9-1: config 1 interface 0 has no altsetting 0 [ 108.748835][ T47] usb 9-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 108.752594][ T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.755951][ T47] usb 9-1: Product: syz [ 108.758617][ T47] usb 9-1: Manufacturer: ␉ [ 108.760597][ T47] usb 9-1: SerialNumber: syz [ 108.769584][ T8428] overlayfs: conflicting options: userxattr,metacopy=on [ 108.771137][ T8403] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 108.810851][ T40] audit: type=1400 audit(108.742:533): avc: denied { append } for pid=8430 comm="syz.5.687" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 108.859661][ T40] audit: type=1400 audit(108.792:534): avc: denied { write } for pid=8434 comm="syz.0.688" path="socket:[26902]" dev="sockfs" ino=26902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.859746][ T8436] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.873476][ T8431] input: syz1 as /devices/virtual/input/input10 [ 108.983648][ T40] audit: type=1400 audit(108.912:535): avc: denied { append } for pid=8402 comm="syz.4.677" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 108.999555][ T47] usbhid 9-1:1.0: can't add hid device: -71 [ 109.002173][ T47] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 109.002370][ T40] audit: type=1400 audit(108.912:536): avc: denied { append } for pid=8402 comm="syz.4.677" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.009196][ T47] usb 9-1: USB disconnect, device number 9 [ 109.308744][ T8463] tipc: Trying to set illegal importance in message [ 109.344093][ T40] audit: type=1400 audit(109.272:537): avc: denied { mounton } for pid=8464 comm="syz.5.697" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 109.655515][ T8493] mkiss: ax0: crc mode is auto. [ 109.683906][ T8495] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 109.730046][ T8493] sp0: Synchronizing with TNC [ 109.903964][ T47] IPVS: starting estimator thread 0... [ 109.986786][ T8517] IPVS: using max 23 ests per chain, 55200 per kthread [ 110.132849][ T8544] random: crng reseeded on system resumption [ 110.305042][ T8553] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 110.316343][ T29] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 110.327447][ T8559] bond4: option primary_reselect: invalid value (133) [ 110.341680][ T8559] bond4 (unregistering): Released all slaves [ 110.416339][ T6353] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 110.482305][ T8575] xt_nfacct: accounting object `syz0' does not exist [ 110.487779][ T29] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 110.491663][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.495051][ T29] usb 10-1: Product: syz [ 110.497319][ T29] usb 10-1: Manufacturer: syz [ 110.499344][ T29] usb 10-1: SerialNumber: syz [ 110.586356][ T6353] usb 9-1: Using ep0 maxpacket: 8 [ 110.590889][ T6353] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.595429][ T6353] usb 9-1: config 0 interface 0 has no altsetting 0 [ 110.606174][ T6353] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 110.608995][ T6353] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.625774][ T6353] usb 9-1: config 0 descriptor?? [ 110.842561][ T6353] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 110.845865][ T6353] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 110.849239][ T6353] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 110.851903][ T6353] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 110.854219][ T6353] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 110.859355][ T6353] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 110.919330][ T8538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.923475][ T8538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.932213][ T8538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.935650][ T8538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.940719][ T6353] usb 9-1: USB disconnect, device number 10 [ 111.002679][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 111.002689][ T40] audit: type=1400 audit(110.932:543): avc: denied { map } for pid=8615 comm="syz.1.742" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.140684][ T40] audit: type=1400 audit(111.072:544): avc: denied { map } for pid=8536 comm="syz.5.718" path="socket:[24429]" dev="sockfs" ino=24429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.144376][ T8538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.152140][ T8538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.158184][ T8538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.161267][ T8538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.165633][ T29] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 111.173336][ T29] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 111.178164][ T29] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 111.182273][ T29] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 111.186881][ T29] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 111.195380][ T29] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 111.204046][ T29] usb 10-1: USB disconnect, device number 4 [ 111.338867][ T40] audit: type=1800 audit(111.272:545): pid=8636 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.747" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 111.511080][ T40] audit: type=1400 audit(111.442:546): avc: denied { wake_alarm } for pid=8646 comm="syz.1.751" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.647545][ T40] audit: type=1400 audit(111.582:547): avc: denied { listen } for pid=8651 comm="syz.1.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.659392][ T8659] netlink: 'syz.0.755': attribute type 10 has an invalid length. [ 111.667648][ T8659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.672584][ T8659] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 111.676273][ T1058] bond0: (slave batadv0): interface is now down [ 111.696202][ T1058] bond0: (slave batadv0): interface is now down [ 111.719432][ T8664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.727364][ T3732] bond0: (slave batadv0): interface is now down [ 111.728514][ T40] audit: type=1400 audit(111.662:548): avc: denied { read } for pid=8661 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.746386][ T3732] bond0: (slave batadv0): interface is now down [ 111.766280][ T3732] bond0: (slave batadv0): interface is now down [ 111.780312][ T8666] __nla_validate_parse: 8 callbacks suppressed [ 111.780324][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.757'. [ 111.786923][ T3732] bond0: (slave batadv0): interface is now down [ 111.790636][ T40] audit: type=1400 audit(111.722:549): avc: denied { setopt } for pid=8661 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 111.806576][ T3928] bond0: (slave batadv0): interface is now down [ 111.826296][ T1058] bond0: (slave batadv0): interface is now down [ 111.846427][ T3732] bond0: (slave batadv0): interface is now down [ 111.866339][ T3732] bond0: (slave batadv0): interface is now down [ 111.886268][ T1167] bond0: (slave batadv0): interface is now down [ 111.906347][ T1167] bond0: (slave batadv0): interface is now down [ 111.927485][ T1058] bond0: (slave batadv0): interface is now down [ 111.946528][ T1058] bond0: (slave batadv0): interface is now down [ 111.966644][ T59] bond0: (slave batadv0): interface is now down [ 111.986276][ T1058] bond0: (slave batadv0): interface is now down [ 112.006224][ T1058] bond0: (slave batadv0): interface is now down [ 112.028611][ T3928] bond0: (slave batadv0): interface is now down [ 112.028965][ T8678] nbd: must specify at least one socket [ 112.046228][ T3928] bond0: (slave batadv0): interface is now down [ 112.066374][ T3928] bond0: (slave batadv0): interface is now down [ 112.086891][ T3928] bond0: (slave batadv0): interface is now down [ 112.108459][ T1058] bond0: (slave batadv0): interface is now down [ 112.126249][ T47] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 112.128932][ T1058] bond0: (slave batadv0): interface is now down [ 112.146248][ T3928] bond0: (slave batadv0): interface is now down [ 112.166271][ T1058] bond0: (slave batadv0): interface is now down [ 112.183021][ T40] audit: type=1400 audit(112.112:550): avc: denied { bind } for pid=8689 comm="syz.4.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.191728][ T3928] bond0: (slave batadv0): interface is now down [ 112.207464][ T3928] bond0: (slave batadv0): interface is now down [ 112.226293][ T3928] bond0: (slave batadv0): interface is now down [ 112.228577][ T40] audit: type=1400 audit(112.162:551): avc: denied { connect } for pid=8693 comm="syz.5.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 112.239711][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 112.246313][ T3928] bond0: (slave batadv0): interface is now down [ 112.266489][ T3732] bond0: (slave batadv0): interface is now down [ 112.286316][ T3732] bond0: (slave batadv0): interface is now down [ 112.287440][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.293441][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.297543][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.302614][ T47] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.306316][ T3928] bond0: (slave batadv0): interface is now down [ 112.308990][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.314367][ T47] usb 5-1: config 0 descriptor?? [ 112.336589][ T3732] bond0: (slave batadv0): interface is now down [ 112.370363][ T1167] bond0: (slave batadv0): interface is now down [ 112.396492][ T3732] bond0: (slave batadv0): interface is now down [ 112.416417][ T59] bond0: (slave batadv0): interface is now down [ 112.456243][ T3928] bond0: (slave batadv0): interface is now down [ 112.462433][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'. [ 112.467154][ T40] audit: type=1400 audit(112.402:552): avc: denied { bind } for pid=8708 comm="syz.1.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.476770][ T3928] bond0: (slave batadv0): interface is now down [ 112.477954][ T8709] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 112.481154][ T8709] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 112.484712][ T8709] vhci_hcd vhci_hcd.0: Device attached [ 112.493405][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'. [ 112.496445][ T1167] bond0: (slave batadv0): interface is now down [ 112.516287][ T3732] bond0: (slave batadv0): interface is now down [ 112.526685][ T8711] vhci_hcd: connection closed [ 112.536281][ T6563] bond0: (slave batadv0): interface is now down [ 112.537326][ T3732] vhci_hcd: stop threads [ 112.543570][ T3732] vhci_hcd: release socket [ 112.545372][ T3732] vhci_hcd: disconnect device [ 112.556269][ T3732] bond0: (slave batadv0): interface is now down [ 112.588920][ T1058] bond0: (slave batadv0): interface is now down [ 112.606271][ T59] bond0: (slave batadv0): interface is now down [ 112.636956][ T3928] bond0: (slave batadv0): interface is now down [ 112.639192][ T8721] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 112.656963][ T3928] bond0: (slave batadv0): interface is now down [ 112.677899][ T3928] bond0: (slave batadv0): interface is now down [ 112.698308][ T1058] bond0: (slave batadv0): interface is now down [ 112.716328][ T3928] bond0: (slave batadv0): interface is now down [ 112.721169][ T5294] Bluetooth: hci3: unexpected event for opcode 0x042c [ 112.722638][ T47] usbhid 5-1:0.0: can't add hid device: -71 [ 112.725718][ T47] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 112.729811][ T47] usb 5-1: USB disconnect, device number 13 [ 112.732576][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.777'. [ 112.736494][ T3928] bond0: (slave batadv0): interface is now down [ 112.738722][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.777'. [ 112.759825][ T3732] bond0: (slave batadv0): interface is now down [ 112.771022][ T8728] netlink: 'syz.4.777': attribute type 5 has an invalid length. [ 112.786273][ T59] bond0: (slave batadv0): interface is now down [ 112.806806][ T59] bond0: (slave batadv0): interface is now down [ 112.836270][ T59] bond0: (slave batadv0): interface is now down [ 112.856242][ T1058] bond0: (slave batadv0): interface is now down [ 112.877096][ T59] bond0: (slave batadv0): interface is now down [ 112.896241][ T59] bond0: (slave batadv0): interface is now down [ 112.921659][ T1058] bond0: (slave batadv0): interface is now down [ 112.946393][ T59] bond0: (slave batadv0): interface is now down [ 112.966973][ T59] bond0: (slave batadv0): interface is now down [ 112.986887][ T59] bond0: (slave batadv0): interface is now down [ 113.010131][ T3732] bond0: (slave batadv0): interface is now down [ 113.026313][ T1058] bond0: (slave batadv0): interface is now down [ 113.049230][ T3732] bond0: (slave batadv0): interface is now down [ 113.066663][ T59] bond0: (slave batadv0): interface is now down [ 113.086827][ T59] bond0: (slave batadv0): interface is now down [ 113.106897][ T1058] bond0: (slave batadv0): interface is now down [ 113.127897][ T1058] bond0: (slave batadv0): interface is now down [ 113.146257][ T1058] bond0: (slave batadv0): interface is now down [ 113.154225][ T8739] bridge: RTM_NEWNEIGH with invalid ether address [ 113.166286][ T3928] bond0: (slave batadv0): interface is now down [ 113.186305][ T3732] bond0: (slave batadv0): interface is now down [ 113.206668][ T59] bond0: (slave batadv0): interface is now down [ 113.226269][ T3732] bond0: (slave batadv0): interface is now down [ 113.246309][ T3732] bond0: (slave batadv0): interface is now down [ 113.268032][ T3732] bond0: (slave batadv0): interface is now down [ 113.286196][ T1058] bond0: (slave batadv0): interface is now down [ 113.306221][ T59] bond0: (slave batadv0): interface is now down [ 113.312324][ T8753] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 113.327355][ T59] bond0: (slave batadv0): interface is now down [ 113.346201][ T3928] bond0: (slave batadv0): interface is now down [ 113.365936][ T8753] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.783'. [ 113.372903][ C1] vcan0: j1939_session_tx_dat: 0xffff88802c235400: queue data error: -100 [ 113.376554][ T59] bond0: (slave batadv0): interface is now down [ 113.406330][ T59] bond0: (slave batadv0): interface is now down [ 113.426390][ T3732] bond0: (slave batadv0): interface is now down [ 113.446351][ T59] bond0: (slave batadv0): interface is now down [ 113.466595][ T3732] bond0: (slave batadv0): interface is now down [ 113.486244][ T3732] bond0: (slave batadv0): interface is now down [ 113.493065][ T8773] openvswitch: netlink: Invalid VLAN frame [ 113.516303][ T3732] bond0: (slave batadv0): interface is now down [ 113.521230][ T8772] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.789'. [ 113.546761][ T3732] bond0: (slave batadv0): interface is now down [ 113.566242][ T59] bond0: (slave batadv0): interface is now down [ 113.586275][ T59] bond0: (slave batadv0): interface is now down [ 113.612738][ T59] bond0: (slave batadv0): interface is now down [ 113.627428][ T59] bond0: (slave batadv0): interface is now down [ 113.646227][ T59] bond0: (slave batadv0): interface is now down [ 113.666479][ T3732] bond0: (slave batadv0): interface is now down [ 113.686311][ T1167] bond0: (slave batadv0): interface is now down [ 113.706399][ T3732] bond0: (slave batadv0): interface is now down [ 113.726199][ T1167] bond0: (slave batadv0): interface is now down [ 113.746575][ T1167] bond0: (slave batadv0): interface is now down [ 113.766300][ T59] bond0: (slave batadv0): interface is now down [ 113.786470][ T59] bond0: (slave batadv0): interface is now down [ 113.816235][ T59] bond0: (slave batadv0): interface is now down [ 113.836296][ T59] bond0: (slave batadv0): interface is now down [ 113.856948][ T59] bond0: (slave batadv0): interface is now down [ 113.886779][ T59] bond0: (slave batadv0): interface is now down [ 113.906185][ T1167] bond0: (slave batadv0): interface is now down [ 113.936292][ T59] bond0: (slave batadv0): interface is now down [ 113.956253][ T1167] bond0: (slave batadv0): interface is now down [ 113.976267][ T3732] bond0: (slave batadv0): interface is now down [ 113.996306][ T59] bond0: (slave batadv0): interface is now down [ 114.016245][ T3732] bond0: (slave batadv0): interface is now down [ 114.036258][ T3732] bond0: (slave batadv0): interface is now down [ 114.056245][ T59] bond0: (slave batadv0): interface is now down [ 114.076288][ T59] bond0: (slave batadv0): interface is now down [ 114.096237][ T1058] bond0: (slave batadv0): interface is now down [ 114.116201][ T59] bond0: (slave batadv0): interface is now down [ 114.136239][ T59] bond0: (slave batadv0): interface is now down [ 114.157706][ T59] bond0: (slave batadv0): interface is now down [ 114.186500][ T1058] bond0: (slave batadv0): interface is now down [ 114.206679][ T1058] bond0: (slave batadv0): interface is now down [ 114.226274][ T1058] bond0: (slave batadv0): interface is now down [ 114.247652][ T59] bond0: (slave batadv0): interface is now down [ 114.277860][ T59] bond0: (slave batadv0): interface is now down [ 114.306334][ T59] bond0: (slave batadv0): interface is now down [ 114.326746][ T1167] bond0: (slave batadv0): interface is now down [ 114.347227][ T59] bond0: (slave batadv0): interface is now down [ 114.386219][ T59] bond0: (slave batadv0): interface is now down [ 114.406235][ T3732] bond0: (slave batadv0): interface is now down [ 114.426548][ T1058] bond0: (slave batadv0): interface is now down [ 114.456261][ T3732] bond0: (slave batadv0): interface is now down [ 114.476318][ T3732] bond0: (slave batadv0): interface is now down [ 114.496255][ T3732] bond0: (slave batadv0): interface is now down [ 114.516447][ T6563] bond0: (slave batadv0): interface is now down [ 114.536254][ T6563] bond0: (slave batadv0): interface is now down [ 114.557817][ T3732] bond0: (slave batadv0): interface is now down [ 114.576480][ T3732] bond0: (slave batadv0): interface is now down [ 114.596293][ T3732] bond0: (slave batadv0): interface is now down [ 114.626235][ T3732] bond0: (slave batadv0): interface is now down [ 114.646305][ T6563] bond0: (slave batadv0): interface is now down [ 114.667685][ T59] bond0: (slave batadv0): interface is now down [ 114.686269][ T1167] bond0: (slave batadv0): interface is now down [ 114.709318][ T1167] bond0: (slave batadv0): interface is now down [ 114.736986][ T3928] bond0: (slave batadv0): interface is now down [ 114.757524][ T59] bond0: (slave batadv0): interface is now down [ 114.779021][ T3928] bond0: (slave batadv0): interface is now down [ 114.816188][ T3928] bond0: (slave batadv0): interface is now down [ 114.836223][ T3928] bond0: (slave batadv0): interface is now down [ 114.856250][ T59] bond0: (slave batadv0): interface is now down [ 114.876278][ T59] bond0: (slave batadv0): interface is now down [ 114.896213][ T59] bond0: (slave batadv0): interface is now down [ 114.917392][ T59] bond0: (slave batadv0): interface is now down [ 114.938007][ T59] bond0: (slave batadv0): interface is now down [ 114.958204][ T59] bond0: (slave batadv0): interface is now down [ 114.977218][ T59] bond0: (slave batadv0): interface is now down [ 114.980668][ T59] bond0: now running without any active interface! [ 116.591440][ T8788] netlink: 'syz.4.794': attribute type 1 has an invalid length. [ 116.594617][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 116.594627][ T40] audit: type=1400 audit(116.522:560): avc: denied { create } for pid=8785 comm="syz.4.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 116.602407][ T8795] ipt_REJECT: TCP_RESET invalid for non-tcp [ 116.605716][ T40] audit: type=1400 audit(116.532:561): avc: denied { write } for pid=8785 comm="syz.4.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 116.613281][ T40] audit: type=1400 audit(116.542:562): avc: denied { connect } for pid=8778 comm="syz.0.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.723587][ T40] audit: type=1400 audit(116.652:563): avc: denied { setopt } for pid=8804 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 116.729242][ T8808] tmpfs: Unknown parameter 'ܤ(nr_{Ky0/qz$XvP4/ד&>' [ 116.740933][ T40] audit: type=1400 audit(116.672:564): avc: denied { setopt } for pid=8809 comm="syz.5.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.827244][ T8822] EXT4-fs (nbd4): unable to read superblock [ 116.906499][ T40] audit: type=1400 audit(116.842:565): avc: denied { setopt } for pid=8821 comm="syz.4.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 116.923230][ T8830] binder: 8829:8830 ioctl c0306201 2000000001c0 returned -22 [ 116.930027][ T8833] binder: 8829:8833 ioctl c0306201 2000000001c0 returned -22 [ 116.933279][ T8832] xt_time: unknown flags 0xf4 [ 116.959906][ T8837] netlink: 'syz.4.806': attribute type 10 has an invalid length. [ 116.967509][ T8837] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 116.971844][ T8837] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.029593][ T8843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.809'. [ 117.038483][ T8843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.809'. [ 117.044595][ T40] audit: type=1400 audit(116.972:566): avc: denied { mount } for pid=8842 comm="syz.4.809" name="/" dev="configfs" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 117.054515][ T40] audit: type=1400 audit(116.972:567): avc: denied { search } for pid=8842 comm="syz.4.809" name="/" dev="configfs" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 117.060362][ T8843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.809'. [ 117.062442][ T40] audit: type=1400 audit(116.972:568): avc: denied { search } for pid=8842 comm="syz.4.809" name="/" dev="configfs" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 117.073692][ T40] audit: type=1400 audit(116.972:569): avc: denied { read open } for pid=8842 comm="syz.4.809" path="/" dev="configfs" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 117.082725][ T8847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.809'. [ 117.179019][ T8855] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 117.179019][ T8855] program syz.4.812 not setting count and/or reply_len properly [ 117.295446][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 117.299450][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 117.487382][ T6663] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 117.546300][ T6353] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 117.657578][ T6663] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 117.660152][ T6663] usb 6-1: config 0 has no interface number 0 [ 117.666101][ T6663] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.670806][ T6663] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 117.674779][ T6663] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 117.689568][ T6663] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 117.693256][ T6663] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 117.698320][ T6353] usb 5-1: Using ep0 maxpacket: 32 [ 117.699146][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.822'. [ 117.700347][ T6663] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 117.705962][ T6663] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.713649][ T6663] usb 6-1: config 0 descriptor?? [ 117.716005][ T8862] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.721901][ T6353] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.725164][ T6353] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 117.731049][ T6353] usb 5-1: can't read configurations, error -71 [ 117.734272][ T6663] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 117.792622][ T8890] kvm: pic: single mode not supported [ 117.793900][ T8890] kvm: pic: level sensitive irq not supported [ 117.797552][ T8890] kvm: pic: single mode not supported [ 117.797987][ T8892] [U] [ 117.799893][ T8890] kvm: pic: single mode not supported [ 117.802126][ T8892] [U] [ 117.802159][ T8892] [U] [ 117.803944][ T8890] kvm: pic: level sensitive irq not supported [ 117.805394][ T8892] [U] [ 117.807563][ T8890] kvm: pic: level sensitive irq not supported [ 117.810701][ T8892] [U] [ 117.811975][ T8890] kvm: pic: level sensitive irq not supported [ 117.813174][ T8892] [U] [ 117.813205][ T8892] [U] [ 117.814900][ T8890] kvm: pic: single mode not supported [ 117.816222][ T8892] [U] [ 117.816315][ T8892] [U] [ 117.817248][ T8890] kvm: pic: level sensitive irq not supported [ 117.818277][ T8892] [U] [ 117.822054][ T8890] kvm: pic: single mode not supported [ 117.824307][ T8892] [U] [ 117.824327][ T8892] [U] [ 117.824464][ T8892] [U] [ 117.825269][ T8890] kvm: pic: level sensitive irq not supported [ 117.827479][ T8892] [U] [ 117.827501][ T8892] [U] [ 117.827518][ T8892] [U] [ 117.827722][ T8892] [U] [ 117.829596][ T8890] kvm: pic: single mode not supported [ 117.829734][ T8892] [U] [ 117.830706][ T8890] kvm: pic: level sensitive irq not supported [ 117.833131][ T8892] [U] [ 117.833153][ T8892] [U] [ 117.834445][ T8890] kvm: pic: single mode not supported [ 117.835274][ T8892] [U] [ 117.837148][ T8890] kvm: pic: single mode not supported [ 117.838715][ T8892] [U] [ 117.838733][ T8892] [U] [ 117.838749][ T8892] [U] [ 117.839629][ T8890] kvm: pic: level sensitive irq not supported [ 117.841789][ T8892] [U] [ 117.843592][ T8890] kvm: pic: single mode not supported [ 117.845155][ T8892] [U] [ 117.845174][ T8892] [U] [ 117.845190][ T8892] [U] [ 117.847016][ T8890] kvm: pic: single mode not supported [ 117.851894][ T8892] [U] [ 117.854369][ T8890] kvm: pic: level sensitive irq not supported [ 117.855549][ T8892] [U] [ 117.857664][ T8890] kvm: pic: level sensitive irq not supported [ 117.858259][ T8892] [U] [ 117.866708][ T8892] [U] [ 117.876247][ T8892] [U] [ 117.877227][ T8892] [U] [ 117.878164][ T8892] [U] [ 117.879166][ T8892] [U] [ 117.880170][ T8892] [U] [ 117.881195][ T8892] [U] [ 117.882271][ T8892] [U] [ 117.883225][ T8892] [U] [ 117.884332][ T8892] [U] [ 117.885272][ T8892] [U] [ 117.886367][ T8892] [U] [ 117.887342][ T8892] [U] [ 117.888457][ T8892] [U] [ 117.889369][ T8892] [U] [ 117.890305][ T8892] [U] [ 117.891340][ T8892] [U] [ 117.906812][ T8892] [U] [ 117.908066][ T8892] [U] [ 117.909286][ T8892] [U] [ 117.910482][ T8892] [U] [ 117.911726][ T8892] [U] [ 117.912894][ T8892] [U] [ 117.913810][ T8892] [U] [ 117.914939][ T8892] [U] [ 117.916012][ T8892] [U] [ 117.917110][ T8892] [U] [ 117.918244][ T8892] [U] [ 117.919314][ T8892] [U] [ 117.920746][ T8892] [U] [ 117.921683][ T8892] [U] [ 117.922551][ T8892] [U] [ 117.923442][ T8892] [U] [ 117.924558][ T8892] [U] [ 117.925677][ T8892] [U] [ 117.926726][ T8892] [U] [ 117.927821][ T8892] [U] [ 117.929441][ T8892] [U] [ 117.930369][ T8892] [U] [ 117.931271][ T8892] [U] [ 117.932203][ T8892] [U] [ 117.942340][ T8892] [U] [ 117.943327][ T8892] [U] [ 117.944227][ T8892] [U] [ 117.945153][ T8892] [U] [ 117.946048][ T8892] [U] [ 117.946946][ T8892] [U] [ 117.947835][ T8892] [U] [ 117.948724][ T8892] [U] [ 117.950163][ T8892] [U] [ 117.951088][ T8892] [U] [ 117.951986][ T8892] [U] [ 117.952903][ T8892] [U] [ 117.953912][ T8892] [U] [ 117.954810][ T8892] [U] [ 117.955720][ T8892] [U] [ 117.956531][ T8862] netlink: 'syz.1.814': attribute type 9 has an invalid length. [ 117.956624][ T8892] [U] [ 117.960089][ T8892] [U] [ 117.961001][ T8892] [U] [ 117.961924][ T8892] [U] [ 117.962778][ T8892] [U] [ 117.963808][ T8892] [U] [ 117.964449][ T6663] usb 6-1: USB disconnect, device number 6 [ 117.964851][ T8892] [U] [ 117.968126][ T8892] [U] [ 117.969024][ T8892] [U] [ 117.970123][ T8892] [U] [ 117.971122][ T8892] [U] [ 117.971519][ T6663] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 117.972055][ T8892] [U] [ 117.975962][ T8892] [U] [ 117.977575][ T8892] [U] [ 117.978703][ T8892] [U] [ 117.979805][ T8892] [U] [ 117.980902][ T8892] [U] [ 117.986875][ T8892] [U] [ 117.987837][ T8892] [U] [ 117.988747][ T8892] [U] [ 117.989679][ T8892] [U] [ 117.992812][ T8892] [U] [ 117.993785][ T8892] [U] [ 117.994710][ T8892] [U] [ 117.995617][ T8892] [U] [ 117.996737][ T8892] [U] [ 117.997666][ T8892] [U] [ 117.998580][ T8892] [U] [ 117.999704][ T8892] [U] [ 118.000817][ T8892] [U] [ 118.001781][ T8892] [U] [ 118.002749][ T8892] [U] [ 118.003674][ T8892] [U] [ 118.004639][ T8892] [U] [ 118.005557][ T8892] [U] [ 118.006467][ T8892] [U] [ 118.007380][ T8892] [U] [ 118.008410][ T8892] [U] [ 118.009316][ T8892] [U] [ 118.010217][ T8892] [U] [ 118.084204][ T8888] wlan1 [ 118.296344][ T8901] Cannot find add_set index 65532 as target [ 118.297643][ T8887] [U] [ 118.446654][ T8902] md: superblock version 12389 not known [ 118.448861][ T8902] md: couldn't set array info. -22 [ 118.762551][ T8948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.841'. [ 118.843034][ T8959] netlink: 36 bytes leftover after parsing attributes in process `syz.4.844'. [ 118.847874][ T8959] binder: 8958:8959 ioctl c0306201 200000000680 returned -14 [ 118.851181][ T8959] comedi comedi3: comedi_config --init_data is deprecated [ 118.855009][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 118.877475][ T8961] team0: Port device team_slave_1 removed [ 119.257908][ T8984] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 119.271105][ T8987] netlink: 'syz.4.853': attribute type 1 has an invalid length. [ 119.289146][ T8987] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.313533][ T8988] veth5: entered promiscuous mode [ 119.318565][ T8988] bond2: (slave veth5): Enslaving as an active interface with a down link [ 119.484514][ T8997] ./cgroup: Can't lookup blockdev [ 119.578591][ T9003] smc: net device bond0 applied user defined pnetid SYZ2 [ 119.899331][ T9016] openvswitch: netlink: IP tunnel dst address not specified [ 120.053006][ T5294] Bluetooth: hci3: ISO packet for unknown connection handle 600 [ 120.161552][ T9038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.270730][ T5294] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 120.278161][ T9057] netlink: 'syz.0.871': attribute type 2 has an invalid length. [ 120.296741][ T9057] netlink: 'syz.0.871': attribute type 1 has an invalid length. [ 120.511825][ T9070] wg2: entered promiscuous mode [ 120.514136][ T9070] wg2: entered allmulticast mode [ 120.557674][ T9073] netlink: 'syz.4.876': attribute type 4 has an invalid length. [ 120.686721][ T9075] ipvlan2: entered allmulticast mode [ 120.688965][ T9075] team0: entered allmulticast mode [ 120.691130][ T9075] team_slave_0: entered allmulticast mode [ 120.693364][ T9075] team_slave_1: entered allmulticast mode [ 120.697138][ T9075] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 121.064312][ T6353] IPVS: starting estimator thread 0... [ 121.128368][ T9096] sctp: [Deprecated]: syz.4.884 (pid 9096) Use of int in max_burst socket option. [ 121.128368][ T9096] Use struct sctp_assoc_value instead [ 121.157302][ T9090] IPVS: using max 42 ests per chain, 100800 per kthread [ 121.163499][ T9100] bridge_slave_0: left allmulticast mode [ 121.165335][ T9100] bridge_slave_0: left promiscuous mode [ 121.169474][ T9098] PKCS8: Unsupported PKCS#8 version [ 121.175729][ T9100] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.182141][ T9100] bridge_slave_1: left allmulticast mode [ 121.184136][ T9100] bridge_slave_1: left promiscuous mode [ 121.186014][ T9100] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.194083][ T9100] bond0: (slave bond_slave_0): Releasing backup interface [ 121.198246][ T9100] bond_slave_0: left allmulticast mode [ 121.203387][ T9100] bond0: (slave bond_slave_1): Releasing backup interface [ 121.205998][ T9100] bond_slave_1: left allmulticast mode [ 121.210685][ T9100] team_slave_0: left allmulticast mode [ 121.216777][ T9100] team0: Port device team_slave_0 removed [ 121.219583][ T9100] team_slave_1: left allmulticast mode [ 121.225320][ T9100] team0: Port device team_slave_1 removed [ 121.228153][ T9100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.230710][ T9100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.231357][ T9105] overlayfs: failed to resolve './file1': -2 [ 121.237499][ T9100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.240649][ T9100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.245950][ T9100] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.342177][ T9118] bridge0: entered promiscuous mode [ 121.344642][ T9118] macsec1: entered allmulticast mode [ 121.352876][ T9118] bridge0: entered allmulticast mode [ 121.357518][ T9118] bridge0: port 3(macsec1) entered blocking state [ 121.362436][ T9118] bridge0: port 3(macsec1) entered disabled state [ 121.369240][ T9118] bridge0: left allmulticast mode [ 121.371534][ T9118] bridge0: left promiscuous mode [ 121.431530][ T9129] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.434328][ T9129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.436873][ T9129] IPv6: NLM_F_CREATE should be set when creating new route [ 121.439206][ T9129] IPv6: NLM_F_CREATE should be set when creating new route [ 121.594266][ T9149] random: crng reseeded on system resumption [ 121.601709][ T9149] Restarting kernel threads ... [ 121.605698][ T9149] Done restarting kernel threads. [ 121.617823][ T9149] autofs: Bad value for 'fd' [ 121.679575][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 121.679585][ T40] audit: type=1400 audit(121.612:595): avc: denied { connect } for pid=9150 comm="syz.0.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 121.815422][ T9156] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.981389][ T40] audit: type=1400 audit(121.912:596): avc: denied { write } for pid=9157 comm="syz.1.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.281163][ T9161] __nla_validate_parse: 11 callbacks suppressed [ 122.281250][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.905'. [ 122.631584][ T40] audit: type=1400 audit(122.562:597): avc: denied { block_suspend } for pid=9184 comm="syz.5.913" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.658921][ T9188] xt_nat: multiple ranges no longer supported [ 122.698015][ T9192] loop6: detected capacity change from 0 to 2640 [ 122.701322][ T9192] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.703784][ T9192] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.706380][ T9192] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.708786][ T9192] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.711320][ T9192] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.713769][ T9192] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.717250][ T9192] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.719812][ T9192] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.722354][ T9192] ldm_validate_partition_table(): Disk read failed. [ 122.724542][ T9192] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.727511][ T60] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 122.729958][ T9192] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.732651][ T9192] Dev loop6: unable to read RDB block 0 [ 122.734907][ T9192] loop6: unable to read partition table [ 122.736879][ T9192] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 122.766446][ T9199] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 122.769568][ T40] audit: type=1400 audit(122.702:598): avc: denied { watch watch_reads } for pid=9198 comm="syz.5.919" path="pipe:[30617]" dev="pipefs" ino=30617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 122.888467][ T60] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 122.894847][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.898340][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.902048][ T60] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 122.907877][ T60] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 122.910766][ T60] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 122.913300][ T60] usb 9-1: Manufacturer: syz [ 122.916423][ T60] usb 9-1: config 0 descriptor?? [ 122.936314][ T6019] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 123.059812][ T9211] bridge0: port 3(team0) entered disabled state [ 123.062160][ T9211] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.064941][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.080399][ T9211] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 123.086264][ T6019] usb 5-1: Using ep0 maxpacket: 32 [ 123.089286][ T6019] usb 5-1: config 1 interface 0 has no altsetting 0 [ 123.092975][ T6019] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.40 [ 123.095907][ T6019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.098521][ T6019] usb 5-1: Product: ш [ 123.099839][ T6019] usb 5-1: Manufacturer: ఇ [ 123.101404][ T6019] usb 5-1: SerialNumber: 盢୓䆺섚刽넕꾇䡖Ꝥ䈺䘴촬駈릛賺逜ꑉ湐苃싈킜䡛㳃c鬘矛﷡搝喝볉ꁢ4᥉정⫋ᜬשׁ쌄࢝琙鋹渡샓䬋ϴꨉ썀ꂢ产篗툹疶ꕟ荰ꬍ︫ [ 123.170725][ T40] audit: type=1400 audit(123.102:599): avc: denied { mount } for pid=9216 comm="syz.5.924" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 123.288995][ T40] audit: type=1400 audit(123.222:600): avc: denied { unmount } for pid=7306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 123.320571][ T6019] usbhid 5-1:1.0: can't add hid device: -71 [ 123.323225][ T6019] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 123.327460][ T6019] usb 5-1: USB disconnect, device number 16 [ 123.328755][ T60] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 123.341858][ T60] appleir 0003:05AC:8243.0004: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 123.452925][ T9222] xt_NFQUEUE: number of total queues is 0 [ 123.458150][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.925'. [ 123.478086][ T9221] veth1_to_hsr (unregistering): left allmulticast mode [ 123.503301][ T9221] hsr_slave_1 (unregistering): left promiscuous mode [ 123.731373][ T9236] netlink: 80 bytes leftover after parsing attributes in process `syz.5.928'. [ 123.734270][ T9236] netlink: 80 bytes leftover after parsing attributes in process `syz.5.928'. [ 123.738287][ T9236] binder: 9230:9236 ioctl c0306201 0 returned -14 [ 123.884987][ T9241] : entered promiscuous mode [ 123.941392][ T9245] tmpfs: Unknown parameter 'nr_inͬ˂b [ 123.941392][ T9245] W(vl k^bw' [ 124.114269][ T40] audit: type=1400 audit(124.042:601): avc: denied { append } for pid=9254 comm="syz.0.935" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 124.163452][ T9259] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 124.201975][ T40] audit: type=1400 audit(124.132:602): avc: denied { setopt } for pid=9263 comm="syz.0.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.825780][ T9284] sctp: [Deprecated]: syz.1.945 (pid 9284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.825780][ T9284] Use struct sctp_sack_info instead [ 124.908146][ T9292] netlink: 28 bytes leftover after parsing attributes in process `syz.5.948'. [ 124.921210][ T40] audit: type=1400 audit(124.852:603): avc: denied { bind } for pid=9287 comm="syz.1.947" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.927638][ T40] audit: type=1400 audit(124.852:604): avc: denied { name_bind } for pid=9287 comm="syz.1.947" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 124.963822][ T9296] tmpfs: Invalid gid '0x00000000ffffffff' [ 125.023076][ T9306] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.952'. [ 125.029406][ T9306] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.952'. [ 125.159587][ T5294] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 125.178482][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.957'. [ 125.201130][ T5294] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 125.238995][ T9332] netlink: 'syz.1.960': attribute type 10 has an invalid length. [ 125.244803][ T9332] team0: Device ipvlan0 failed to register rx_handler [ 125.290946][ T9332] netlink: 'syz.1.960': attribute type 10 has an invalid length. [ 125.303021][ T9332] team0: Cannot enslave team device to itself [ 125.424295][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'. [ 125.427241][ T9343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.963'. [ 125.569951][ T6663] usb 9-1: USB disconnect, device number 11 [ 125.876883][ T9362] random: crng reseeded on system resumption [ 126.026950][ T6663] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 126.197447][ T6663] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 126.200587][ T6663] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 126.204032][ T6663] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.208341][ T6663] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 126.212645][ T6663] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 126.217351][ T6663] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 126.220065][ T6663] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 126.223647][ T6663] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.228918][ T6663] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 126.232771][ T6663] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 126.238246][ T6663] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 126.241283][ T6663] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 126.245569][ T6663] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.249823][ T6663] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 126.253683][ T6663] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 126.260333][ T6663] usb 9-1: string descriptor 0 read error: -22 [ 126.261342][ T9375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.262546][ T6663] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 126.268867][ T6663] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.286236][ T6663] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 126.302183][ T9382] netlink: 'syz.5.976': attribute type 15 has an invalid length. [ 126.312257][ T9375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.374667][ T9387] 9p: Unknown Cache mode or invalid value {@ [ 126.477420][ T6663] usb 9-1: USB disconnect, device number 12 [ 126.631052][ T9410] netdevsim netdevsim5: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 126.731576][ T9420] batman_adv: batadv0: Adding interface: gretap1 [ 126.734516][ T9420] batman_adv: batadv0: The MTU of interface gretap1 is too small (1498) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.746205][ T9420] batman_adv: batadv0: Interface activated: gretap1 [ 126.750041][ T9422] tipc: Started in network mode [ 126.751641][ T9422] tipc: Node identity 84e, cluster identity 4711 [ 126.753749][ T9422] tipc: Node number set to 2126 [ 126.909395][ T9440] smc: net device bond0 erased user defined pnetid SYZ2 [ 127.019150][ T9450] trusted_key: encrypted_key: insufficient parameters specified [ 127.023823][ T9451] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96 [ 127.284171][ T5294] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 127.288518][ T5294] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 127.288611][ T5294] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 127.288732][ T67] Bluetooth: hci0: hardware error 0x06 [ 127.293663][ T5294] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 127.416740][ T9463] __nla_validate_parse: 8 callbacks suppressed [ 127.416752][ T9463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1004'. [ 127.460292][ T9465] openvswitch: netlink: Duplicate or invalid key (type 0). [ 127.463527][ T9465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.600008][ T5294] Bluetooth: hci2: unexpected event for opcode 0x0c24 [ 127.606072][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 127.606082][ T40] audit: type=1400 audit(127.532:613): avc: denied { remount } for pid=9467 comm="syz.1.1006" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 127.614348][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 127.618445][ T9468] netlink: 'syz.1.1006': attribute type 2 has an invalid length. [ 127.621070][ T9468] netlink: 'syz.1.1006': attribute type 1 has an invalid length. [ 127.755698][ T40] audit: type=1400 audit(127.682:614): avc: denied { map } for pid=9480 comm="syz.1.1012" path="/dev/ptmx" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 127.804271][ T40] audit: type=1800 audit(127.732:615): pid=9484 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1013" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 127.887914][ T9489] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 127.890826][ T9489] overlayfs: missing 'lowerdir' [ 127.909394][ T9489] tmpfs: Unknown parameter 'q}ota' [ 127.953164][ T9493] netlink: 'syz.0.1016': attribute type 7 has an invalid length. [ 127.993550][ T9497] sctp: [Deprecated]: syz.1.1017 (pid 9497) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.993550][ T9497] Use struct sctp_sack_info instead [ 128.000175][ T9495] sctp: [Deprecated]: syz.1.1017 (pid 9495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.000175][ T9495] Use struct sctp_sack_info instead [ 128.038502][ T9503] binder: BINDER_SET_CONTEXT_MGR already set [ 128.041229][ T9503] binder: 9502:9503 ioctl 4018620d 200000000000 returned -16 [ 128.054669][ T9503] netlink: 'syz.1.1019': attribute type 10 has an invalid length. [ 128.059961][ T9503] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1019'. [ 128.064153][ T9503] team0: entered promiscuous mode [ 128.067505][ T9503] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.070618][ T9503] bridge0: port 3(team0) entered blocking state [ 128.073424][ T9503] bridge0: port 3(team0) entered disabled state [ 128.076331][ T9503] team0: entered allmulticast mode [ 128.116597][ T47] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 128.141889][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1021'. [ 128.162418][ T9507] 8021q: adding VLAN 0 to HW filter on device bond4 [ 128.167784][ T40] audit: type=1400 audit(128.102:616): avc: denied { write } for pid=9509 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 128.220524][ T40] audit: type=1400 audit(128.152:617): avc: denied { map } for pid=9512 comm="syz.0.1023" path="socket:[34027]" dev="sockfs" ino=34027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 128.231462][ T40] audit: type=1400 audit(128.152:618): avc: denied { read } for pid=9512 comm="syz.0.1023" path="socket:[34027]" dev="sockfs" ino=34027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 128.277936][ T47] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 128.280392][ T47] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 128.283863][ T47] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.288858][ T47] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 128.292387][ T47] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 128.293131][ T9510] could not allocate digest TFM handle cryptd(blake2b-160) [ 128.296718][ T47] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 128.301216][ T47] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 128.304502][ T47] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.308468][ T47] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 128.312048][ T47] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 128.316789][ T47] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 128.319325][ T47] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 128.322847][ T47] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.326903][ T47] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 128.330597][ T47] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 128.336219][ T47] usb 9-1: string descriptor 0 read error: -22 [ 128.338261][ T47] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 128.341342][ T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.347668][ T47] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 128.549828][ T47] usb 9-1: USB disconnect, device number 13 [ 129.306301][ T67] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 137.066552][ T1058] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 137.708830][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.710877][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.888612][ T40] audit: type=1400 audit(141.822:619): avc: denied { setattr } for pid=9525 comm="syz.4.1026" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 141.889541][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'. [ 141.958320][ T40] audit: type=1400 audit(141.892:620): avc: denied { read } for pid=9537 comm="syz.1.1032" dev="nsfs" ino=4026533024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 141.963960][ T9541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=9541 comm=syz.4.1031 [ 141.964494][ T40] audit: type=1400 audit(141.892:621): avc: denied { open } for pid=9537 comm="syz.1.1032" path="net:[4026533024]" dev="nsfs" ino=4026533024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 141.991600][ T9538] xt_limit: Overflow, try lower: 271964/0 [ 141.995149][ T40] audit: type=1400 audit(141.902:622): avc: denied { watch_mount } for pid=9540 comm="syz.4.1031" path="/194" dev="tmpfs" ino=1042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 142.010124][ T9547] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 142.060762][ T67] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 142.141404][ T9563] netlink: 'syz.4.1038': attribute type 3 has an invalid length. [ 142.234504][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1041'. [ 142.237887][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1041'. [ 142.240903][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1041'. [ 142.289141][ T40] audit: type=1400 audit(142.212:623): avc: denied { read write } for pid=9576 comm="syz.0.1043" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 142.308414][ T9581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1044'. [ 142.317276][ T40] audit: type=1400 audit(142.212:624): avc: denied { open } for pid=9576 comm="syz.0.1043" path="/dev/usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 142.325851][ T40] audit: type=1400 audit(142.222:625): avc: denied { ioctl } for pid=9576 comm="syz.0.1043" path="/dev/usbmon5" dev="devtmpfs" ino=753 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 142.356078][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1045'. [ 142.363283][ T40] audit: type=1400 audit(142.292:626): avc: denied { map } for pid=9585 comm="syz.5.1045" path="socket:[33090]" dev="sockfs" ino=33090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.372041][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1045'. [ 142.375944][ T40] audit: type=1400 audit(142.302:627): avc: denied { ioctl } for pid=9585 comm="syz.5.1045" path="socket:[33091]" dev="sockfs" ino=33091 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 142.499850][ T9604] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1050'. [ 142.521727][ T9604] syz_tun: left promiscuous mode [ 142.529150][ T9604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.636712][ T40] audit: type=1326 audit(142.572:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9616 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4bf98f7c9 code=0x7ffc0000 [ 142.640178][ T9617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1054'. [ 142.722815][ T9617] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9617 comm=syz.0.1054 [ 142.777152][ T34] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 142.938947][ T34] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 142.942455][ T34] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 142.946818][ T34] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.949934][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.957246][ T9601] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 142.960435][ T9601] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 142.972144][ T34] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.098405][ T9657] netlink: 'syz.0.1064': attribute type 3 has an invalid length. [ 143.101079][ T9658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1064'. [ 143.179863][ T9663] FAULT_INJECTION: forcing a failure. [ 143.179863][ T9663] name failslab, interval 1, probability 0, space 0, times 0 [ 143.185295][ T9663] CPU: 0 UID: 0 PID: 9663 Comm: syz.0.1066 Not tainted syzkaller #0 PREEMPT(full) [ 143.185310][ T9663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.185317][ T9663] Call Trace: [ 143.185321][ T9663] [ 143.185327][ T9663] dump_stack_lvl+0x16c/0x1f0 [ 143.185364][ T9663] should_fail_ex+0x512/0x640 [ 143.185388][ T9663] should_failslab+0xc2/0x120 [ 143.185400][ T9663] kmem_cache_alloc_noprof+0x75/0x760 [ 143.185413][ T9663] ? lock_acquire+0x179/0x330 [ 143.185428][ T9663] ? skb_clone+0x190/0x3f0 [ 143.185442][ T9663] ? skb_clone+0x190/0x3f0 [ 143.185451][ T9663] skb_clone+0x190/0x3f0 [ 143.185462][ T9663] dev_queue_xmit_nit+0x25b/0xac0 [ 143.185479][ T9663] dev_hard_start_xmit+0x56b/0x6e0 [ 143.185497][ T9663] sch_direct_xmit+0x1b2/0xcd0 [ 143.185512][ T9663] ? __pfx_sch_direct_xmit+0x10/0x10 [ 143.185522][ T9663] ? do_raw_spin_lock+0x12c/0x2b0 [ 143.185532][ T9663] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 143.185546][ T9663] __dev_queue_xmit+0x3940/0x4650 [ 143.185565][ T9663] ? selinux_ip_postroute+0x739/0xdd0 [ 143.185583][ T9663] ? __pfx___dev_queue_xmit+0x10/0x10 [ 143.185604][ T9663] ? __lock_acquire+0x433/0x22f0 [ 143.185630][ T9663] ip6_finish_output2+0x1184/0x1cf0 [ 143.185653][ T9663] __ip6_finish_output+0x3cd/0x1010 [ 143.185665][ T9663] ip6_output+0x253/0x710 [ 143.185677][ T9663] ip6_xmit+0x1512/0x23f0 [ 143.185693][ T9663] ? __pfx_ip6_xmit+0x10/0x10 [ 143.185702][ T9663] ? __sk_dst_check+0x120/0x350 [ 143.185725][ T9663] inet6_csk_xmit+0x444/0x7f0 [ 143.185739][ T9663] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 143.185756][ T9663] ? csum_ipv6_magic+0x299/0x320 [ 143.185771][ T9663] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 143.185784][ T9663] __tcp_transmit_skb+0x1d67/0x48b0 [ 143.185803][ T9663] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 143.185817][ T9663] ? tcp_fastopen_cache_get+0x309/0x6d0 [ 143.185837][ T9663] ? tcp_fastopen_no_cookie+0x158/0x1a0 [ 143.185853][ T9663] tcp_connect+0x2544/0x5210 [ 143.185872][ T9663] ? __pfx_tcp_connect+0x10/0x10 [ 143.185884][ T9663] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 143.185904][ T9663] ? inet6_hash_connect+0xe2/0x180 [ 143.185920][ T9663] tcp_v6_connect+0x15fb/0x21d0 [ 143.185936][ T9663] ? stack_trace_save+0x8e/0xc0 [ 143.185954][ T9663] ? __pfx_tcp_v6_connect+0x10/0x10 [ 143.185970][ T9663] ? kasan_save_stack+0x33/0x60 [ 143.185985][ T9663] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 143.185995][ T9663] ? tcp_sendmsg_locked+0x2410/0x42a0 [ 143.186004][ T9663] ? tcp_sendmsg+0x2e/0x50 [ 143.186013][ T9663] ? inet6_sendmsg+0xb9/0x140 [ 143.186025][ T9663] ? __sys_sendto+0x376/0x520 [ 143.186040][ T9663] ? __x64_sys_sendto+0xe0/0x1c0 [ 143.186063][ T9663] ? __inet_stream_connect+0x915/0xf50 [ 143.186073][ T9663] __inet_stream_connect+0x915/0xf50 [ 143.186087][ T9663] ? __pfx___inet_stream_connect+0x10/0x10 [ 143.186119][ T9663] tcp_sendmsg_fastopen+0x3ed/0x750 [ 143.186135][ T9663] tcp_sendmsg_locked+0x2410/0x42a0 [ 143.186146][ T9663] ? avc_has_perm+0x144/0x1f0 [ 143.186165][ T9663] ? __lock_acquire+0x433/0x22f0 [ 143.186179][ T9663] ? __lock_acquire+0x433/0x22f0 [ 143.186196][ T9663] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 143.186208][ T9663] ? do_raw_spin_lock+0x12c/0x2b0 [ 143.186218][ T9663] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 143.186231][ T9663] ? __local_bh_enable_ip+0xa4/0x120 [ 143.186244][ T9663] tcp_sendmsg+0x2e/0x50 [ 143.186252][ T9663] ? __pfx_tcp_sendmsg+0x10/0x10 [ 143.186262][ T9663] inet6_sendmsg+0xb9/0x140 [ 143.186276][ T9663] __sys_sendto+0x376/0x520 [ 143.186293][ T9663] ? __pfx___sys_sendto+0x10/0x10 [ 143.186308][ T9663] ? __schedule+0x114c/0x6150 [ 143.186345][ T9663] ? xfd_validate_state+0x61/0x180 [ 143.186366][ T9663] __x64_sys_sendto+0xe0/0x1c0 [ 143.186388][ T9663] ? do_syscall_64+0x91/0xf80 [ 143.186410][ T9663] ? lockdep_hardirqs_on+0x7c/0x110 [ 143.186433][ T9663] do_syscall_64+0xcd/0xf80 [ 143.186457][ T9663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.186474][ T9663] RIP: 0033:0x7fb4bf98f7c9 [ 143.186489][ T9663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.186505][ T9663] RSP: 002b:00007fb4c089f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 143.186523][ T9663] RAX: ffffffffffffffda RBX: 00007fb4bfbe5fa0 RCX: 00007fb4bf98f7c9 [ 143.186533][ T9663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 143.186543][ T9663] RBP: 00007fb4c089f090 R08: 00002000000001c0 R09: 000000000000001c [ 143.186553][ T9663] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 143.186563][ T9663] R13: 00007fb4bfbe6038 R14: 00007fb4bfbe5fa0 R15: 00007ffc0cd96c88 [ 143.186589][ T9663] [ 143.187165][ T47] usb 6-1: USB disconnect, device number 7 [ 143.543454][ T9670] netlink: 'syz.0.1068': attribute type 1 has an invalid length. [ 144.087260][ T9692] FAULT_INJECTION: forcing a failure. [ 144.087260][ T9692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.092372][ T9692] CPU: 1 UID: 0 PID: 9692 Comm: syz.1.1075 Not tainted syzkaller #0 PREEMPT(full) [ 144.092395][ T9692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.092404][ T9692] Call Trace: [ 144.092410][ T9692] [ 144.092417][ T9692] dump_stack_lvl+0x16c/0x1f0 [ 144.092443][ T9692] should_fail_ex+0x512/0x640 [ 144.092469][ T9692] _copy_to_user+0x32/0xd0 [ 144.092493][ T9692] simple_read_from_buffer+0xcb/0x170 [ 144.092519][ T9692] proc_fail_nth_read+0x197/0x240 [ 144.092541][ T9692] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.092563][ T9692] ? rw_verify_area+0xcf/0x6c0 [ 144.092584][ T9692] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.092604][ T9692] vfs_read+0x1e4/0xcf0 [ 144.092626][ T9692] ? __pfx___mutex_lock+0x10/0x10 [ 144.092651][ T9692] ? __pfx_vfs_read+0x10/0x10 [ 144.092678][ T9692] ? __fget_files+0x20e/0x3c0 [ 144.092701][ T9692] ksys_read+0x12a/0x250 [ 144.092722][ T9692] ? __pfx_ksys_read+0x10/0x10 [ 144.092750][ T9692] do_syscall_64+0xcd/0xf80 [ 144.092773][ T9692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.092789][ T9692] RIP: 0033:0x7fe7b798e1dc [ 144.092802][ T9692] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.092817][ T9692] RSP: 002b:00007fe7b5bf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.092852][ T9692] RAX: ffffffffffffffda RBX: 00007fe7b7be5fa0 RCX: 00007fe7b798e1dc [ 144.092868][ T9692] RDX: 000000000000000f RSI: 00007fe7b5bf60a0 RDI: 000000000000000d [ 144.092876][ T9692] RBP: 00007fe7b5bf6090 R08: 0000000000000000 R09: 000000000000001c [ 144.092884][ T9692] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 144.092894][ T9692] R13: 00007fe7b7be6038 R14: 00007fe7b7be5fa0 R15: 00007ffdd1a1a5a8 [ 144.092917][ T9692] [ 144.183363][ T9676] syz.5.1071 (9676): drop_caches: 2 [ 144.274934][ T9701] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.280868][ T9701] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.383273][ T9701] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.391651][ T9701] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.394978][ T9713] fuse: Bad value for 'group_id' [ 144.399738][ T9713] fuse: Bad value for 'group_id' [ 144.482524][ T9701] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.485983][ T9701] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.604908][ T9701] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.608754][ T9701] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.644236][ T9723] bond3 (unregistering): Released all slaves [ 144.677893][ T9729] kvm: kvm [9722]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 144.681452][ T9729] kvm: kvm [9722]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 144.721481][ T79] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.725016][ T79] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.749074][ T4722] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.753497][ T4722] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.763003][ T4722] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.767229][ T4722] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.781951][ T4722] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.784868][ T4722] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.822166][ T9736] kAFS: No cell specified [ 144.938840][ T9744] devtmpfs: Unknown parameter 'urrquota_int~odehardl' [ 144.950036][ T9746] devtmpfs: Unknown parameter 'urrquota_int~odehardl' [ 145.056278][ T9757] netlink: 'syz.1.1095': attribute type 4 has an invalid length. [ 145.098440][ T9759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9759 comm=syz.5.1096 [ 145.261963][ T9775] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 145.265519][ T9775] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 145.269256][ T9775] overlayfs: overlapping lowerdir path [ 145.385937][ T9782] autofs4:pid:9782:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 145.946488][ T5294] Bluetooth: hci4: command 0x1003 tx timeout [ 145.946702][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 146.108428][ T67] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 146.112759][ T67] Bluetooth: hci3: Injecting HCI hardware error event [ 146.115373][ T67] Bluetooth: hci3: hardware error 0x00 [ 146.140591][ T9809] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 146.186867][ T9823] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 146.293365][ T9833] input: syz0 as /devices/virtual/input/input15 [ 146.398143][ T9839] kernel read not supported for file /policy (pid: 9839 comm: syz.4.1122) [ 146.790130][ T9879] pim6reg1: entered promiscuous mode [ 146.792272][ T9879] pim6reg1: entered allmulticast mode [ 146.909886][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 146.909898][ T40] audit: type=1400 audit(146.842:702): avc: denied { mount } for pid=9881 comm="syz.5.1133" name="/" dev="rpc_pipefs" ino=34923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 147.056662][ T40] audit: type=1400 audit(146.992:703): avc: denied { read } for pid=9887 comm="syz.5.1135" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.070785][ T40] audit: type=1400 audit(146.992:704): avc: denied { open } for pid=9887 comm="syz.5.1135" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.080261][ T40] audit: type=1400 audit(147.002:705): avc: denied { ioctl } for pid=9887 comm="syz.5.1135" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.090952][ T40] audit: type=1400 audit(147.022:706): avc: denied { rename } for pid=9885 comm="syz.4.1134" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 147.247062][ T40] audit: type=1400 audit(147.182:707): avc: denied { write } for pid=9893 comm="syz.5.1136" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 147.395740][ T9903] __nla_validate_parse: 5 callbacks suppressed [ 147.395756][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1139'. [ 147.402397][ T9903] block nbd0: Unsupported socket: should be TCP or UNIX. [ 147.747810][ T9921] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 147.794754][ T40] audit: type=1400 audit(147.722:708): avc: denied { accept } for pid=9922 comm="syz.0.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 147.945302][ T9939] tipc: Cannot configure node identity twice [ 148.009595][ T40] audit: type=1400 audit(147.942:709): avc: denied { setattr } for pid=9945 comm="syz.5.1152" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 148.090403][ T40] audit: type=1400 audit(148.022:710): avc: denied { write } for pid=9947 comm="syz.5.1153" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 148.135973][ T9957] xt_hashlimit: max too large, truncated to 1048576 [ 148.141300][ T9957] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 148.186342][ T67] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 148.247751][ T9960] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1156'. [ 148.252170][ T9961] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1156'. [ 148.269684][ T9960] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1156'. [ 148.341323][ T9968] program syz.5.1158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.377555][ T40] audit: type=1400 audit(148.312:711): avc: denied { bind } for pid=9971 comm="syz.5.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 148.377905][ T9974] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1159'. [ 148.500216][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1161'. [ 148.503671][ T9981] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1161'. [ 148.726244][ T6019] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 148.780167][ T9994] IPVS: Scheduler module ip_vs_sip not found [ 148.862938][T10003] fuse: Bad value for 'fd' [ 148.877892][ T6019] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 148.880383][ T6019] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.884439][ T6019] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 148.889994][ T6019] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 148.893579][ T6019] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.898588][ T6019] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 148.906981][T10005] overlayfs: missing 'lowerdir' [ 148.906993][ T6019] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 148.916460][ T6019] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 148.920848][ T6019] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 148.928720][ T6019] usb 6-1: string descriptor 0 read error: -22 [ 148.931686][ T6019] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 148.935628][ T6019] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.943583][ T6019] adutux 6-1:168.0: interrupt endpoints not found [ 149.091507][T10023] tmpfs: Bad value for 'mpol' [ 149.145852][ T831] usb 6-1: USB disconnect, device number 8 [ 149.695113][T10029] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 149.740984][T10035] tmpfs: Bad value for 'mpol' [ 149.841645][T10042] tipc: Enabling of bearer rejected, failed to enable media [ 149.890262][T10049] sp0: Synchronizing with TNC [ 149.951581][T10055] netlink: 'syz.1.1185': attribute type 1 has an invalid length. [ 149.955041][T10055] netlink: 'syz.1.1185': attribute type 2 has an invalid length. [ 150.018169][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1185'. [ 150.188669][T10062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10062 comm=syz.0.1188 [ 150.193259][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1188'. [ 150.246227][ T29] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 150.401425][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1190'. [ 150.409179][ T29] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 150.412139][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 150.431565][ T29] usb 10-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 150.437428][ T29] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 150.439860][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 150.443280][ T29] usb 10-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 150.447724][ T29] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 150.450119][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 150.453744][ T29] usb 10-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 150.459592][ T29] usb 10-1: string descriptor 0 read error: -22 [ 150.461827][ T29] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 150.464917][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.471524][ T29] adutux 10-1:168.0: interrupt endpoints not found [ 150.483460][T10074] gretap0: entered promiscuous mode [ 150.553870][T10077] bond5: entered promiscuous mode [ 150.555750][T10077] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.567045][T10077] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 150.578787][T10077] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.586233][T10077] lo: entered promiscuous mode [ 150.589153][T10077] bond5: (slave lo): Enslaving as a backup interface with an up link [ 150.598624][T10077] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 150.647192][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.649860][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.661120][T10080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.667958][T10080] IPv6: addrconf: prefix option has invalid lifetime [ 150.679985][ T831] usb 10-1: USB disconnect, device number 5 [ 150.688943][ T6563] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 150.694769][ T6563] bond5: (slave lo): link status up again after 0 ms [ 150.717216][ T1145] bond5: (slave lo): link status up again after 0 ms [ 150.737676][ T6563] bond5: (slave lo): link status up again after 0 ms [ 150.756513][ T6563] bond5: (slave lo): link status up again after 0 ms [ 150.776270][ T6563] bond5: (slave lo): link status up again after 0 ms [ 150.797812][ T79] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 150.806312][ T79] bond5: (slave lo): link status up again after 0 ms [ 151.424463][T10112] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 151.648736][T10128] fuse: Unknown parameter 'f [ 151.648736][T10128] ' [ 151.651681][T10128] fuse: Bad value for 'group_id' [ 151.653382][T10128] fuse: Bad value for 'group_id' [ 151.863368][T10157] qnx4: unable to read the superblock [ 151.955812][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 151.955828][ T40] audit: type=1400 audit(151.882:727): avc: denied { remove_name } for pid=10158 comm="syz.1.1216" name="file0" dev="9p" ino=71827877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.967662][ T40] audit: type=1400 audit(151.882:728): avc: denied { unlink } for pid=10158 comm="syz.1.1216" name="file0" dev="9p" ino=71827877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.969030][T10161] No control pipe specified [ 151.976379][ T40] audit: type=1400 audit(151.902:729): avc: denied { create } for pid=10158 comm="syz.1.1216" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 151.989831][T10159] team0: Mode changed to "loadbalance" [ 152.006642][ T40] audit: type=1400 audit(151.942:730): avc: denied { mounton } for pid=10160 comm="syz.0.1217" path="/342/file1/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 152.006688][T10161] fuse: Bad value for 'rootmode' [ 152.087942][T10161] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.277031][T10161] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.373182][T10195] overlayfs: missing 'workdir' [ 152.380664][T10195] netlink: 'syz.5.1227': attribute type 1 has an invalid length. [ 152.408833][T10195] bond1: entered promiscuous mode [ 152.410353][T10202] fuse: Bad value for 'fd' [ 152.411274][T10199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10199 comm=syz.4.1228 [ 152.411360][T10195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.416746][T10195] __nla_validate_parse: 5 callbacks suppressed [ 152.416800][T10195] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1227'. [ 152.440585][T10161] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.449275][T10195] bond1: entered allmulticast mode [ 152.523204][T10206] bond3: option mode: invalid value (7) [ 152.529154][T10206] bond3 (unregistering): Released all slaves [ 152.574488][T10161] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.787175][ T6563] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.805089][ T6563] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.809741][ T6563] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.816617][ T6563] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.863497][T10225] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.868413][T10225] bond3: entered allmulticast mode [ 152.871245][T10225] bond0: (slave bond3): Enslaving as an active interface with an up link [ 153.393159][T10240] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.395326][T10240] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.523265][T10264] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1247'. [ 153.528672][T10265] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1247'. [ 153.571145][T10265] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 153.574055][T10270] tmpfs: Bad value for 'mpol' [ 153.586672][T10265] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 153.610418][T10265] bond0 (unregistering): (slave bond3): Releasing backup interface [ 153.618334][T10265] bond3: left allmulticast mode [ 153.627318][T10265] bond0 (unregistering): Released all slaves [ 153.698741][T10279] netlink: 'syz.0.1252': attribute type 21 has an invalid length. [ 154.068415][T10293] overlayfs: missing 'workdir' [ 154.138335][T10304] fuse: blksize only supported for fuseblk [ 154.170031][T10307] netlink: 'syz.1.1261': attribute type 63 has an invalid length. [ 154.172403][T10307] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1261'. [ 154.175623][T10307] gretap0: entered allmulticast mode [ 154.191016][T10309] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 154.194933][T10297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1256'. [ 154.202845][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1262'. [ 154.355679][T10328] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1266'. [ 154.368893][T10327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=10327 comm=syz.5.1266 [ 154.509634][T10338] bond2 (unregistering): Released all slaves [ 154.652787][T10343] binder: 10342:10343 ioctl c0306201 200000000680 returned -14 [ 154.656360][T10343] binder: 10342:10343 ioctl 6628 0 returned -22 [ 154.815645][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 154.829387][T10349] tipc: Started in network mode [ 154.831169][T10349] tipc: Node identity 84e, cluster identity 4711 [ 154.833582][T10349] tipc: Node number set to 2126 [ 154.953150][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 155.041613][T10361] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 155.162057][ T6563] Bluetooth: hci4: Frame reassembly failed (-84) [ 155.165216][ T6563] Bluetooth: hci4: Frame reassembly failed (-84) [ 155.168913][ T6563] Bluetooth: hci4: Frame reassembly failed (-84) [ 155.396292][ T5294] Bluetooth: hci2: command 0x0419 tx timeout [ 155.476222][ T5294] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.518790][T10376] netlink: 'syz.5.1279': attribute type 5 has an invalid length. [ 156.129664][ T40] audit: type=1800 audit(156.062:731): pid=10407 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1289" name="nullb0" dev="tmpfs" ino=1425 res=0 errno=0 [ 156.246304][ T3732] net_ratelimit: 52 callbacks suppressed [ 156.246323][ T3732] bond5: (slave lo): failed to get link speed/duplex [ 156.343662][T10416] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1292'. [ 156.500349][T10427] bridge3: entered promiscuous mode [ 156.502708][T10427] bridge3: entered allmulticast mode [ 156.512245][ T40] audit: type=1400 audit(156.442:732): avc: denied { mounton } for pid=10426 comm="syz.1.1296" path="/328/file0/file0" dev="9p" ino=71827877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 156.708641][T10438] netlink: 'syz.1.1298': attribute type 10 has an invalid length. [ 156.752464][ T40] audit: type=1400 audit(156.682:733): avc: denied { mounton } for pid=10440 comm="syz.5.1302" path="/245/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 156.765155][T10446] syzkaller0: entered promiscuous mode [ 156.766288][ T40] audit: type=1400 audit(156.682:734): avc: denied { read } for pid=10440 comm="syz.5.1302" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 156.770969][T10446] syzkaller0: entered allmulticast mode [ 156.796500][ T40] audit: type=1400 audit(156.732:735): avc: denied { unmount } for pid=7306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 156.816204][T10446] tipc: Enabled bearer , priority 0 [ 156.821633][T10447] tipc: Enabling of bearer rejected, already enabled [ 156.829203][T10449] syz.5.1303 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 156.837976][ T40] audit: type=1400 audit(156.772:736): avc: denied { name_bind } for pid=10448 comm="syz.5.1303" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 156.846461][ T1145] bond5: (slave lo): failed to get link speed/duplex [ 157.024327][T10458] tipc: Enabled bearer , priority 0 [ 157.089896][T10442] tipc: Resetting bearer [ 157.108540][T10442] tipc: Disabling bearer [ 157.140237][ T1058] tipc: Resetting bearer [ 157.179557][ T40] audit: type=1800 audit(157.112:737): pid=10466 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1309" name="nullb0" dev="tmpfs" ino=1425 res=0 errno=0 [ 157.193036][T10457] tipc: Resetting bearer [ 157.229061][ T67] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 157.508406][T10486] __nla_validate_parse: 1 callbacks suppressed [ 157.508419][T10486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1315'. [ 158.524078][T10457] tipc: Disabling bearer [ 158.537255][T10470] veth0_to_hsr: entered promiscuous mode [ 158.540736][T10470] batadv_slave_0: entered promiscuous mode [ 158.544310][T10470] hsr0: entered promiscuous mode [ 158.569670][ T1196] bond5: (slave lo): failed to get link speed/duplex [ 158.587886][T10488] Dead loop on virtual device ip6_vti0, fix it urgently! [ 158.606437][T10488] Dead loop on virtual device ip6_vti0, fix it urgently! [ 158.618670][T10490] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1316'. [ 158.623706][T10494] netlink: 'syz.5.1318': attribute type 10 has an invalid length. [ 158.626632][T10494] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1318'. [ 158.630209][T10494] dummy0: entered promiscuous mode [ 158.637813][T10494] bridge0: port 4(dummy0) entered blocking state [ 158.640506][T10494] bridge0: port 4(dummy0) entered disabled state [ 158.642716][T10494] dummy0: entered allmulticast mode [ 158.743937][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1324'. [ 158.749608][T10512] loop2: detected capacity change from 0 to 7 [ 158.755067][T10512] loop2: [ 158.756084][T10512] loop2: partition table partially beyond EOD, truncated [ 158.760290][T10512] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1324'. [ 158.763105][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1324'. [ 158.770828][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1324'. [ 158.773804][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1324'. [ 158.898120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 159.004940][T10527] 9pnet_virtio: no channels available for device syz [ 159.246285][ T6563] bond5: (slave lo): failed to get link speed/duplex [ 159.305568][T10543] evm: overlay not supported [ 159.310131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 159.313628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 159.355549][ T40] audit: type=1400 audit(159.282:738): avc: denied { connect } for pid=10546 comm="syz.4.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.365649][T10548] overlayfs: failed to resolve './file0': -2 [ 159.376724][ T4722] bond5: (slave lo): failed to get link speed/duplex [ 159.388128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 159.446313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 159.607734][T10562] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 159.611473][T10562] qnx6: wrong signature (magic) in superblock #1. [ 159.613343][T10562] qnx6: unable to read the first superblock [ 159.618298][ T67] Bluetooth: hci1: unexpected event for opcode 0x201c [ 159.644474][T10570] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1341'. [ 159.787254][T10583] netlink: 'syz.0.1345': attribute type 7 has an invalid length. [ 159.790902][T10583] netlink: 'syz.0.1345': attribute type 8 has an invalid length. [ 159.797949][ T40] audit: type=1400 audit(159.732:739): avc: denied { mounton } for pid=10582 comm="syz.0.1345" path="mnt:[4026533018]" dev="nsfs" ino=4026533018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 159.823419][T10562] ------------[ cut here ]------------ [ 159.825764][T10562] WARNING: mm/page_alloc.c:5159 at __alloc_frozen_pages_noprof+0x309/0x2440, CPU#2: syz.1.1339/10562 [ 159.830341][T10562] Modules linked in: [ 159.832059][T10562] CPU: 2 UID: 0 PID: 10562 Comm: syz.1.1339 Not tainted syzkaller #0 PREEMPT(full) [ 159.835866][T10562] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.840375][T10562] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2440 [ 159.843113][T10562] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0c fe ff ff 80 3d 76 f0 55 0e 00 75 0b c6 05 6d f0 55 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 159.850258][T10562] RSP: 0018:ffffc9000c9679f8 EFLAGS: 00010246 [ 159.852845][T10562] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 159.856247][T10562] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 159.859624][T10562] RBP: 0000000000000013 R08: 0000000000000005 R09: 0000000000000009 [ 159.862827][T10562] R10: 0000000000000013 R11: 00000000ffffffff R12: 0000000000040cc0 [ 159.866076][T10562] R13: 1ffff9200192cf55 R14: ffffffff9abd6944 R15: 0000000000000013 [ 159.869426][T10562] FS: 00007fe7b5bf66c0(0000) GS:ffff8880d6b60000(0000) knlGS:0000000000000000 [ 159.873116][T10562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.875890][T10562] CR2: 000000110c3a8e9b CR3: 0000000033aba000 CR4: 0000000000352ef0 [ 159.879459][T10562] Call Trace: [ 159.880941][T10562] [ 159.882230][T10562] ? find_held_lock+0x2b/0x80 [ 159.884274][T10562] ? avc_has_extended_perms+0x33a/0x1090 [ 159.886684][T10562] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 159.889351][T10562] ? avc_has_extended_perms+0x47c/0x1090 [ 159.891716][T10562] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 159.894269][T10562] ? lockdep_hardirqs_on+0x7c/0x110 [ 159.896527][T10562] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 159.899038][T10562] ? policy_nodemask+0xea/0x4e0 [ 159.901133][T10562] alloc_pages_mpol+0x1fb/0x550 [ 159.903171][T10562] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 159.905428][T10562] ___kmalloc_large_node+0x130/0x1a0 [ 159.908395][T10562] __kmalloc_large_node_noprof+0x1c/0x70 [ 159.910713][T10562] ? __might_fault+0xe3/0x190 [ 159.912727][T10562] __kmalloc_noprof.cold+0xc/0x62 [ 159.914852][T10562] ? raw_alloc_io_data+0x12c/0x1a0 [ 159.917163][T10562] ? raw_alloc_io_data+0x12c/0x1a0 [ 159.919339][T10562] raw_alloc_io_data+0x12c/0x1a0 [ 159.921502][T10562] raw_ioctl+0x1397/0x2bf0 [ 159.923471][T10562] ? __pfx_raw_ioctl+0x10/0x10 [ 159.925589][T10562] ? selinux_file_ioctl+0xb4/0x270 [ 159.927835][T10562] ? __pfx_raw_ioctl+0x10/0x10 [ 159.929943][T10562] __x64_sys_ioctl+0x18e/0x210 [ 159.931975][T10562] do_syscall_64+0xcd/0xf80 [ 159.934013][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.936570][T10562] RIP: 0033:0x7fe7b798f7c9 [ 159.938456][T10562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.946549][T10562] RSP: 002b:00007fe7b5bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.950098][T10562] RAX: ffffffffffffffda RBX: 00007fe7b7be5fa0 RCX: 00007fe7b798f7c9 [ 159.953506][T10562] RDX: 0000200000000140 RSI: 00000000c0085504 RDI: 0000000000000003 [ 159.956723][T10562] RBP: 00007fe7b7a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 159.959824][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.962977][T10562] R13: 00007fe7b7be6038 R14: 00007fe7b7be5fa0 R15: 00007ffdd1a1a5a8 [ 159.966357][T10562] [ 159.967691][T10562] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 159.970462][T10562] CPU: 2 UID: 0 PID: 10562 Comm: syz.1.1339 Not tainted syzkaller #0 PREEMPT(full) [ 159.973946][T10562] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.978369][T10562] Call Trace: [ 159.979773][T10562] [ 159.981024][T10562] dump_stack_lvl+0x3d/0x1f0 [ 159.982943][T10562] vpanic+0x640/0x6f0 [ 159.984586][T10562] ? __alloc_frozen_pages_noprof+0x309/0x2440 [ 159.987073][T10562] panic+0xca/0xd0 [ 159.988614][T10562] ? __pfx_panic+0x10/0x10 [ 159.990457][T10562] check_panic_on_warn+0xab/0xb0 [ 159.992533][T10562] __warn+0x108/0x3c0 [ 159.994301][T10562] __report_bug+0x2a0/0x520 [ 159.996149][T10562] ? __alloc_frozen_pages_noprof+0x309/0x2440 [ 159.998749][T10562] ? __pfx___report_bug+0x10/0x10 [ 160.000912][T10562] ? __kernel_text_address+0xd/0x40 [ 160.003120][T10562] ? unwind_get_return_address+0x59/0xa0 [ 160.005502][T10562] ? arch_stack_walk+0xa6/0x100 [ 160.007572][T10562] ? __alloc_frozen_pages_noprof+0x309/0x2440 [ 160.010138][T10562] report_bug+0xb2/0x220 [ 160.011983][T10562] ? __alloc_frozen_pages_noprof+0x309/0x2440 [ 160.014559][T10562] handle_bug+0x127/0x260 [ 160.016364][T10562] exc_invalid_op+0x17/0x50 [ 160.018324][T10562] asm_exc_invalid_op+0x1a/0x20 [ 160.020464][T10562] RIP: 0010:__alloc_frozen_pages_noprof+0x309/0x2440 [ 160.023322][T10562] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0c fe ff ff 80 3d 76 f0 55 0e 00 75 0b c6 05 6d f0 55 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 160.031356][T10562] RSP: 0018:ffffc9000c9679f8 EFLAGS: 00010246 [ 160.033957][T10562] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 160.037251][T10562] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000040cc0 [ 160.040486][T10562] RBP: 0000000000000013 R08: 0000000000000005 R09: 0000000000000009 [ 160.043726][T10562] R10: 0000000000000013 R11: 00000000ffffffff R12: 0000000000040cc0 [ 160.047292][T10562] R13: 1ffff9200192cf55 R14: ffffffff9abd6944 R15: 0000000000000013 [ 160.050799][T10562] ? find_held_lock+0x2b/0x80 [ 160.052954][T10562] ? avc_has_extended_perms+0x33a/0x1090 [ 160.055528][T10562] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 160.058149][T10562] ? avc_has_extended_perms+0x47c/0x1090 [ 160.060486][T10562] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 160.063049][T10562] ? lockdep_hardirqs_on+0x7c/0x110 [ 160.065259][T10562] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 160.067702][T10562] ? policy_nodemask+0xea/0x4e0 [ 160.069825][T10562] alloc_pages_mpol+0x1fb/0x550 [ 160.071913][T10562] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 160.074241][T10562] ___kmalloc_large_node+0x130/0x1a0 [ 160.076530][T10562] __kmalloc_large_node_noprof+0x1c/0x70 [ 160.078907][T10562] ? __might_fault+0xe3/0x190 [ 160.080910][T10562] __kmalloc_noprof.cold+0xc/0x62 [ 160.083070][T10562] ? raw_alloc_io_data+0x12c/0x1a0 [ 160.085284][T10562] ? raw_alloc_io_data+0x12c/0x1a0 [ 160.087467][T10562] raw_alloc_io_data+0x12c/0x1a0 [ 160.089587][T10562] raw_ioctl+0x1397/0x2bf0 [ 160.091414][T10562] ? __pfx_raw_ioctl+0x10/0x10 [ 160.093407][T10562] ? selinux_file_ioctl+0xb4/0x270 [ 160.095589][T10562] ? __pfx_raw_ioctl+0x10/0x10 [ 160.097658][T10562] __x64_sys_ioctl+0x18e/0x210 [ 160.099689][T10562] do_syscall_64+0xcd/0xf80 [ 160.101656][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.104186][T10562] RIP: 0033:0x7fe7b798f7c9 [ 160.106081][T10562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.114096][T10562] RSP: 002b:00007fe7b5bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.117589][T10562] RAX: ffffffffffffffda RBX: 00007fe7b7be5fa0 RCX: 00007fe7b798f7c9 [ 160.120828][T10562] RDX: 0000200000000140 RSI: 00000000c0085504 RDI: 0000000000000003 [ 160.124181][T10562] RBP: 00007fe7b7a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 160.127575][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.130837][T10562] R13: 00007fe7b7be6038 R14: 00007fe7b7be5fa0 R15: 00007ffdd1a1a5a8 [ 160.134037][T10562] [ 160.136066][T10562] Kernel Offset: disabled [ 160.137876][T10562] Rebooting in 86400 seconds..