last executing test programs: 4m33.676979307s ago: executing program 0 (id=1076): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4020000000000006118500000000000850000002700000095000000000000005559c9b79a5e130b84c129ed5797a6da2733060c106f7094a027bed4d91887a0964fd8d3fdb64704b266e20592937b5c706c8dc82c7aedae29a91b6f0500000000000000bd7c248c481668e5da154ae300000000000000e0433ff7d44d9305fdfad99670ac028a29e37fb9cfd9d7a1bcb03f1f65b17e4548003c34901319d1f5fd82392bed21ebe8ca82d5e1fdeb0e5cd6ad73d94350ea56134e567d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) write(r0, &(0x7f0000000040)="a9", 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000540001002bbd70000200000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e00000010000000000000000000800000015"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x7fe81e5246626bb5) lseek(r2, 0x101, 0x1) 4m33.670730603s ago: executing program 0 (id=1078): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x205, 0x84000) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f00000004c0)) sendmsg$nl_generic(r1, 0x0, 0x10) 4m33.615720094s ago: executing program 0 (id=1080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff88a84900810031000800450000240068000004069078ac1e000100d3000000000003000010907801cc9863d6"], 0x0) 4m33.505231236s ago: executing program 0 (id=1081): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2a532d1, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000700)={[0x3]}, 0x8) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) write(r2, &(0x7f00000004c0)='$\x00', 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x400) read$FUSE(r1, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x2) 4m33.435667338s ago: executing program 0 (id=1082): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/sda\x00', 0x4c002, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=ANY=[@ANYBLOB="440000000f00010425bd70000000040000000000", @ANYRES32=r1, @ANYRES8=r1], 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) 4m33.376579266s ago: executing program 0 (id=1083): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque="00000000000000000500"}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 4m33.282382075s ago: executing program 32 (id=1083): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque="00000000000000000500"}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 4m25.800897054s ago: executing program 4 (id=1194): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x205, 0x84000) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f00000004c0)) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10) 4m25.800694798s ago: executing program 4 (id=1195): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c0001800600060088470000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x2000000000000002) 4m25.794545439s ago: executing program 4 (id=1197): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x205, 0x84000) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f00000004c0)) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x400000) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000080)=ANY=[@ANYBLOB="540600"/17]) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10) 4m25.717216605s ago: executing program 4 (id=1198): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000440)='./file0\x00', 0x6) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r1, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x2}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040800) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01001400b583000000000000020000000800", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./trace\x00', 0x0, 0x8000, r0}, 0x18) mount$overlay(0x0, &(0x7f0000000940)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) 4m25.618023414s ago: executing program 4 (id=1199): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000f0", @ANYRES16=r1, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r2], 0x48}}, 0x0) 4m25.346072944s ago: executing program 4 (id=1205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000158650007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 4m25.187837823s ago: executing program 33 (id=1205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000158650007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 4m12.477891114s ago: executing program 5 (id=1380): ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x0) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe030001000000000800040001000000060015000700000028001680080001000200000014000500fe800000000000000000000000000001080007"], 0x54}}, 0x0) fremovexattr(r2, &(0x7f00000001c0)=@known='user.incfs.metadata\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x3c42, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r4, 0x8100587e, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 4m12.306502256s ago: executing program 5 (id=1382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x3, &(0x7f0000000300)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) name_to_handle_at(r3, 0x0, 0x0, 0x0, 0x400) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'xfrm0\x00', 0x100}) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="6800000000090504000000000000000002000000", 0x14}, {&(0x7f00000000c0)="6b5d2f83d7f810ff3ecb659c9946491d2e9bb5429c7ea7988ca6", 0x1a}], 0x2}, 0x40000) 4m12.206766905s ago: executing program 5 (id=1385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b800000010002104fffffffefedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r0], 0xb8}}, 0x2) 4m12.077380804s ago: executing program 5 (id=1388): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000000)=[r3, r2], 0x2}) 4m12.025092664s ago: executing program 5 (id=1391): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x80) write(r0, &(0x7f00000003c0)='\\x01000000 20', 0xd) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x4208, r1) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x1, 0x5001) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x1, 0x5004) ptrace$getregset(0x4204, r1, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10d002, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi={0xcf, 0x40, 0xfffffffd, 0x20001}}]}) ptrace$setregset(0x4205, r1, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) ptrace(0x11, r1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x205, 0x84000) fcntl$dupfd(r3, 0x0, r3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, &(0x7f00000004c0)) 4m11.875678614s ago: executing program 5 (id=1393): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "0000000000000000000000000500"/100}}}}}}, 0x0) 3m56.833900619s ago: executing program 34 (id=1393): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "0000000000000000000000000500"/100}}}}}}, 0x0) 2m42.202116821s ago: executing program 1 (id=3079): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20402, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x4000, 0x244) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x4}}, './file1\x00'}) 2m42.130689877s ago: executing program 1 (id=3082): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xd}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x4000000, {0x2, 0x4e22, @broadcast}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap$xdp(&(0x7f00007d2000/0x3000)=nil, 0x3000, 0x3, 0x84050, 0xffffffffffffffff, 0x100000000) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r4 = openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000080)={0x1c0980928, 0x101, "21234e08a42be8f30c56a68f3a8b3d06f842b27fa0e919d9d579cc1f93c60300", 0x6c90, 0x10010000, 0x0, 0x0, 0x4ff, 0x1e8, 0x10, 0x9887, [0x400, 0x10000, 0x0, 0xfffffffe]}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000880)={@empty, @broadcast, 0x1e, 0x12}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone3(&(0x7f0000000480)={0x200, 0x0, &(0x7f0000000000), &(0x7f0000000240), {0x2d}, &(0x7f0000000300)=""/117, 0x75, &(0x7f0000000380)=""/167, &(0x7f0000000680)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mmap$fb(&(0x7f0000482000/0x1000)=nil, 0x1000, 0x1000008, 0x8010, r5, 0x8d000) 2m41.346049919s ago: executing program 1 (id=3091): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r3) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000000c0)={0x2, 0x1, 0x100, "3a8e0300d607000001000100000040004000000000000016c713b41e2a3600", 0x36314d59}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x3f00}, 0x0) 2m41.199601251s ago: executing program 1 (id=3092): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x22c82, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x3, 0x2}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) 2m41.13268327s ago: executing program 1 (id=3093): r0 = socket$rds(0x15, 0x5, 0x0) (async, rerun: 64) r1 = socket(0x840000000002, 0x3, 0xff) (rerun: 64) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f00000006c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_retopts={{0x10}}], 0x10}, 0x400c804) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x0, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x20004055) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (rerun: 64) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usb-storage/remove_id\x00', 0x40001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=virtio,vers000.u,cache=mmap,\x00\x00\x00\x00\x00\x00']) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x9, 0x3}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x9) (async, rerun: 32) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xac776000) (async) capset(&(0x7f0000000040)={0x20071026}, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (rerun: 32) 2m39.96883953s ago: executing program 1 (id=3101): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f00000004c0)="2d9b1d00000000000002000000000000000000005315b443b7d788aec4bf4890556e91eebbdef82765cda6401bcf473eb55635e9", 0x34}], 0x1}}], 0x1, 0x4) 2m24.598362174s ago: executing program 35 (id=3101): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f00000004c0)="2d9b1d00000000000002000000000000000000005315b443b7d788aec4bf4890556e91eebbdef82765cda6401bcf473eb55635e9", 0x34}], 0x1}}], 0x1, 0x4) 2m22.643437462s ago: executing program 3 (id=3202): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, r0, 0x703, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20044004}, 0x4040800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc2b81, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xc}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2c000}, 0x4000) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f00000005c0)=""/125, &(0x7f0000000240)=0x7d) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000080)=""/229, 0xe5}], 0x1, 0x100, 0x9) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x1, 0x28c, 0x1, 0x7fff, 0x7}, {0x7, 0x10000000000000, 0x3, 0x87}, 0x0, 0x6e6bba, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x1, 0xb7, 0x0, 0x8000000}}, 0xe8) (async) sendfile(r4, r3, 0x0, 0x7fffffffffffffff) (async) r8 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r8, 0x0, 0x61, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x28) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r10 = socket(0xa, 0x5, 0x0) connect$inet(r10, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) (async) ptrace(0x10, r9) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r9, 0x1, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090601020000000000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f00000000c0)=0x1) (async) futex(&(0x7f0000000280), 0x18b, 0x1, &(0x7f00000002c0)={0x0, 0x989680}, 0x0, 0x4) (async) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x345, 0x0, 0x7}]}) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000003c0), 0x4040, 0x0) 2m21.678034328s ago: executing program 3 (id=3212): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/72) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x3d, 0x4, 0x31, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x8000, 0x7, 0x8, 0x2}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@getneigh={0x14, 0x1e, 0x8, 0x70fd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) 2m21.583792968s ago: executing program 3 (id=3214): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x4801) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendto(r3, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020003000000000000000000000000000000000000001800058014000680080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001dc0)={'gre0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x8, 0x1, 0x7, 0x9, {{0x2d, 0x4, 0x1, 0x13, 0xb4, 0x68, 0x0, 0x0, 0x6, 0x0, @multicast2, @private=0xa010100, {[@rr={0x7, 0x17, 0x32, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @broadcast, @remote, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x1c, 0xc6, 0x3, 0x4, [{@local, 0x806}, {@broadcast, 0xffffffff}, {@empty, 0x2}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0xf7, 0x3, 0xb, [{@local, 0x207}, {@multicast1, 0x5b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@private=0xa010100, 0x6}]}, @ssrr={0x89, 0x27, 0x31, [@multicast1, @loopback, @broadcast, @multicast1, @multicast2, @remote, @multicast1, @loopback, @local]}, @noop, @end, @lsrr={0x83, 0x1b, 0x52, [@multicast1, @loopback, @rand_addr=0x64010101, @remote, @local, @multicast1]}, @end]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001e80)={0x0, 0x0}, 0x8) r7 = add_key$keyring(&(0x7f0000002e00), &(0x7f0000002e40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='syz', r7) keyctl$read(0xb, r7, &(0x7f0000002e80)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0xb, 0x5, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x8, 0xb, 0x7, 0x5, 0x73}, @generic={0x3, 0x6, 0x9, 0x401}], &(0x7f0000000140)='GPL\x00', 0x5, 0x1000, &(0x7f0000000d00)=""/4096, 0x40f00, 0x10, '\x00', r5, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000001e00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001e40)={0x0, 0x2, 0xfffffffc, 0x9abe}, 0x10, r6, 0xffffffffffffffff, 0x1, &(0x7f0000001ec0)=[r4, r4], &(0x7f0000001f00)=[{0x3, 0x3, 0x9, 0x1}], 0x10, 0xffff49a2}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r8, 0x3, 0x1) getdents64(r8, 0x0, 0x0) getdents(r8, &(0x7f0000000180)=""/152, 0x98) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 2m21.370799306s ago: executing program 3 (id=3215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4e00, 0x0) ioctl$DVD_WRITE_STRUCT(r1, 0x5390, &(0x7f0000000040)=@copyright={0x1, 0x3, 0xb, 0x26}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000880), 0x400, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022abd7000ffdbdf0b1400000008000d000008000008000800430000000800030089d2000008001600ffffffff0800020004000000080016000b000000"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x38}}, 0x894) 2m21.102544318s ago: executing program 3 (id=3218): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x92, 0x5, 0xb, 0x9, @private2, @remote, 0xf, 0x1, 0x8000, 0x5}}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000080)=0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0x9, 0x0, 0x7, 0x8, 0x2, 0x7, 0x3, 0x9, 0xa, 0x9, 0x8, 0x4, 0x4, 0x40}, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000013c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x740, 0x1a8, 0x440, 0x0, 0x1a8, 0x288, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x180, 0x1a8, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x5e, 0x0, 0x0, 0x0, 0x0, @local, @ipv4={'\x00', '\xff\xff', @remote}, @private2, [], [0x0, 0x0, 0xffffffff]}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x20, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @empty, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @loopback, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x9, 0x5, 0x2, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@rt={{0x138}, {0x0, [0x2], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x1, 0x8000, 0x9, 0xcf70, {{0x12, 0x4, 0x2, 0x13, 0x48, 0x67, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ra={0x94, 0x4, 0x1}, @generic={0x94, 0x10, "3c90d2715dce15633e247e250203"}, @generic={0x91, 0x3, 'P'}, @noop, @ssrr={0x89, 0x7, 0x95, [@empty]}, @noop, @generic={0x97, 0x12, "47ff0e9f152393f320798b44297e0556"}]}}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r5 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="78000000110004002abd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="b0e0812f102000000c001a8004001c0004001c00050011000800000008000400220d000008000500", @ANYRES32=r4, @ANYBLOB="14000300766c616e3100000000180019801400040400000000000000f377ffe4b8990433220800250003230000"], 0x78}}, 0x0) 2m20.585739143s ago: executing program 3 (id=3220): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d800000000010104ff970000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 1m59.143759219s ago: executing program 36 (id=3220): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d800000000010104ff970000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 1m15.86598557s ago: executing program 8 (id=3959): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) close(0x3) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}]]}, 0x30}}, 0x0) 1m15.616114962s ago: executing program 8 (id=3962): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe5}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) getsockname$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10227, 0x14000}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048404}, 0x0) 1m15.556684201s ago: executing program 8 (id=3964): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500008100", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r0], 0xb8}}, 0x2) 1m15.406299886s ago: executing program 8 (id=3966): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)="705aabbb2820", 0x6) setns(0xc9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/120, 0x78}], 0x1, 0x4f, 0x2) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000480)={0xd804, 0x3, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r3}, [@IFA_LABEL={0x14, 0x3, 'gre0\x00'}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x40, 0x140a, 0x403, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f0000000180), &(0x7f0000000440)=0x8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) close(0x3) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000000)='net/ptype\x00') bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r6, r6}, 0xc) 1m15.103394232s ago: executing program 8 (id=3973): r0 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, &(0x7f0000000040)) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000002000/0x2000)=nil) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002880)=@ipv6_getmulticast={0x14, 0x3a, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x0) 1m14.612975798s ago: executing program 8 (id=3980): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@getnexthop={0x17, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000008c}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$nci(r4, &(0x7f0000000180)=""/129, 0x81) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m14.438535562s ago: executing program 37 (id=3980): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@getnexthop={0x17, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000008c}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$nci(r4, &(0x7f0000000180)=""/129, 0x81) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.846860494s ago: executing program 2 (id=4986): socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000010900), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x700, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000700000005000200000000000500050007000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 1.79005074s ago: executing program 2 (id=4988): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xb6f3, 0xc00, 0x3, 0xbf}, 0x0, 0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, 0x0, 0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, r2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x200800, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) fsopen(&(0x7f0000000240)='debugfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x803, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r4}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) 1.650321837s ago: executing program 2 (id=4991): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002180)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500", 0x2000, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.568803364s ago: executing program 2 (id=4993): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000280)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x425}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x6, 0x7, 0x9, 0x3, @tick=0x8b, {0x10, 0x5}, {0xce, 0x5}, @connect={{0xf, 0x3}, {0x6, 0xb}}}, {0xf7, 0xf1, 0x0, 0x1, @tick, {0x70, 0xbd}, {0x1, 0x5}, @quote={{0x5, 0x6}, 0x6}}], 0x54) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x5, 0x0, 0x8, 0xfd, @time={0xfffffff9, 0x4}, {}, {}, @result={0x0, 0x884}}], 0x1c) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) recvmmsg(r0, &(0x7f0000001f40)=[{{&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000480), 0x2, &(0x7f00000004c0)=""/28, 0xffd5}, 0xc}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/81, 0x51}], 0x1, &(0x7f0000000740)=""/154, 0x9a}}, {{&(0x7f0000000840)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/60, 0x3c}, {&(0x7f0000000a00)=""/136, 0x88}, {&(0x7f0000000ac0)=""/188, 0xbc}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)=""/16, 0x10}, {&(0x7f0000000c00)=""/166, 0xa6}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001d40)=""/181, 0xb5}, 0x4}], 0x3, 0x2000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) listen(r0, 0xfffffffe) r4 = socket$vsock_stream(0x28, 0x1, 0x0) close(0x3) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg/1:0:0:0\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) socket$inet(0x2, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x82000001, 0x4) bind$packet(r7, &(0x7f0000000200)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @random="ee52e7e07522"}, 0x14) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r7, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @random="385fe778589a", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4, 0x0, 0xbf, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x17, 0x7, 0x0, @broadcast}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xffe0, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) write(r7, &(0x7f0000000000)="01", 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x58}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.519386514s ago: executing program 6 (id=4994): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/100}}}}}}, 0x0) 1.518935976s ago: executing program 2 (id=4995): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x1}}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000023c0)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000440)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0xdc) ioctl$OCFS2_IOC_GROUP_EXTEND(r10, 0x5220, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1d1907c80039025c33f07d58b63404c0fa010204731d0c061db102000100"], 0x20) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000004100050101000000000000dd01010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 1.410988453s ago: executing program 6 (id=4996): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x12}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x80420, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000600)='r:s/p ./file0:0\f_', 0x11) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x1, 0x3, 0x0, 0x8001}, {0x7, 0xb, 0x7d, 0x8}, {0x4, 0x0, 0x8, 0x1}]}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r1, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='127.0.0.1:/export\x00', &(0x7f00000000c0)='./nfs_mnt\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,proto=tcp,port=2049,mountport=2049,mountproto=tcp,mountvers=3,vers=3,clientaddr=127.0.0.1\x00') close_range(r0, 0xffffffffffffffff, 0x0) 730.706142ms ago: executing program 9 (id=5001): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=r0, @ANYBLOB="0000000008001f00400009001400", @ANYRES64=r1], 0x38}}, 0x0) 730.473247ms ago: executing program 9 (id=5002): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="a001000000000000f9ff15ffffffffff03000000000000000200000000040000020200000000000000010000000000000300000006000000060000040000000009000000000000000400000000000000fc00000000000080030000000000000000000000000000000600000058000000040000000020000009000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="010000000400000000000000050000000000000037050000000000002b000000f30000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0801000000000000030000000000000003000000000000009701000000000000010000800000000002000000020000000000000000000000080000000000000008000000000000004f00000000000000ee0100000000000002ff0000000000000300000006000000425b000000200000ffffffff", @ANYRES32=r2, @ANYBLOB="ffffffffb2f7ffff00000000050000000000000003000000000000002b000000bf96ffff3a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0801"], 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 670.618425ms ago: executing program 7 (id=5004): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x35315258, 0x780, 0x438, 0x0, @discrete={0x2, 0x4}}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dt2817\x00', [0x6484, 0xd7b, 0x8000000, 0x1, 0x3, 0x5, 0x4, 0x3ff, 0x54c6cff3, 0xfd, 0x2002, 0x1, 0x0, 0x1, 0x6, 0x6a, 0x3, 0xc7c, 0x1, 0x40000003, 0xe25, 0xcaa5, 0x10000, 0x20001e57, 0x3, 0x2000e66, 0x3, 0x1, 0x10004086, 0x0, 0xfffffff8]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x102100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000101, 0x0, 0x1}]}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) ioctl$USBDEVFS_IOCTL(r6, 0xc00c5512, 0x0) ioctl$RTC_SET_TIME(r5, 0x40187014, &(0x7f0000000100)={0x25, 0x13, 0x1, 0xf, 0x7, 0x10005, 0x0, 0x48, 0xffffffffffffffff}) 529.839767ms ago: executing program 9 (id=5005): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad601227842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 529.57252ms ago: executing program 6 (id=5006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x4d, 0xea6, '.\x00'}}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40800) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000000)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x5000000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 529.275408ms ago: executing program 2 (id=5007): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x2000, 0x5e, 0x200000000000, 0x100000000000006}) 469.399132ms ago: executing program 7 (id=5008): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x4, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x9, 0x9, 0x101, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0x4, 0x901, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff326, 0xfffffff7, 0x63ae, 0x400, 0x8007f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x63, 0xfffffffc, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x4, 0x283, 0x2, 0x4d, 0x2006, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x102, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x2, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x3, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2008, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6, 0x101}, 0xfffffffd, [0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x3, 0x0, 0x0, 0x80, 0x80001, 0x1, 0x2, 0x0, 0x0, 0x80, 0x0, 0x77, 0x90, 0x801, 0x0, 0x2, 0x0, 0xff00, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0xff, 0x0, 0xffff1e04, 0x3], [0xfffffffd, 0x3, 0x6, 0x6, 0x0, 0x2, 0x3, 0xff, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6189fbd8, 0x4, 0x400000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x2, 0x40002, 0xffffffff, 0x1c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x7ff, 0x4, 0xfd5], [0x0, 0xfffffffc, 0x0, 0x75, 0x0, 0x0, 0xb78b, 0xfa, 0x0, 0x0, 0x3, 0x3, 0x4, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x3, 0x8000000, 0x4, 0x0, 0x0, 0x99, 0xfffffffd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x835, 0x1, 0xfffffffd, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0xffffffff, 0x0, 0x2000, 0x40, 0x0, 0xfffffffe, 0x7fffffff, 0x0, 0xfffff9bf, 0x0, 0x2008000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x5, 0xc, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 390.549223ms ago: executing program 6 (id=5009): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xb6f3, 0xc00, 0x3, 0xbf}, 0x0, 0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, 0x0, 0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, r2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x200800, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) fsopen(&(0x7f0000000240)='debugfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x803, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r4}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 390.201339ms ago: executing program 9 (id=5010): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) close(0x3) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) (fail_nth: 9) 390.026688ms ago: executing program 7 (id=5011): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4000000010000104000000000008000000f40000", @ANYRES32=0x0, @ANYBLOB="9d26000000000000140003006d61637674617030000000000000000004002b80050027"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8044) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4000000010000104000000000008000000f40000", @ANYRES32=0x0, @ANYBLOB="9d26000000000000140003006d61637674617030000000000000000004002b80050027"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8044) (async) 251.268832ms ago: executing program 7 (id=5012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x2, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) 200.352003ms ago: executing program 7 (id=5013): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="a001000000000000f9ff15ffffffffff03000000000000000200000000040000020200000000000000010000000000000300000006000000060000040000000009000000000000000400000000000000fc00000000000080030000000000000000000000000000000600000058000000040000000020000009000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="010000000400000000000000050000000000000037050000000000002b000000f30000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0801000000000000030000000000000003000000000000009701000000000000010000800000000002000000020000000000000000000000080000000000000008000000000000004f00000000000000ee0100000000000002ff0000000000000300000006000000425b000000200000ffffffff", @ANYRES32=r3, @ANYBLOB="ffffffffb2f7ffff00000000050000000000000003000000000000002b000000bf96ffff3a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0801"], 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 200.194121ms ago: executing program 9 (id=5014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x2, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) (fail_nth: 1) 198.435529ms ago: executing program 6 (id=5015): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271d, 0x0, &(0x7f0000000000)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x1f, &(0x7f0000000080)={0x1000d, 0x23, 0x2}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x2, 0x0) (async) unshare(0xa000400) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="000000000000000000000f000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r6}, 0x20) (async, rerun: 32) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f0000000780)}, 0x20) (async, rerun: 32) ioctl(r3, 0xc178fd02, &(0x7f0000000100)="0400000032000000000000003801") (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x103) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) renameat2(r6, &(0x7f0000000140)='./dev/mtdblock0\x00', r7, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000040)='cramfs\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0406618, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="ef55afe83fc27c8d"}}) 108.509438ms ago: executing program 9 (id=5016): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x1}}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000023c0)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000440)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0xdc) ioctl$OCFS2_IOC_GROUP_EXTEND(r10, 0x5220, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1d1907c80039025c33f07d58b63404c0fa010204731d0c061db102000100"], 0x20) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000004100050101000000000000dd01010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090009"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 108.280537ms ago: executing program 6 (id=5017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x101}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r5], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r7, r6, r7], &(0x7f00000003c0), 0x0, 0x2}) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @remote, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x4000001) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa2}, 0x94) recvmsg$kcm(r8, &(0x7f0000001940)={0x0, 0xd335cd74c920a61d, &(0x7f0000000900)=[{&(0x7f0000000800)=""/197}], 0x1b}, 0x3062) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x4, 0x3, 0x2, 0x40}, 0x2c, 0x0, 0x5, 0xb, 0x8001, 0x1, 0x12, 0xe, 0x5, 0x7db8, {0x1, 0x8, 0xffff, 0x80, 0xffffffff, 0xd7d}}}}]}, 0x78}}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f00000000c0)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x2, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) 0s ago: executing program 7 (id=5018): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) close(0x3) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x14, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): ): avc: denied { write } for pid=18366 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.091965][T18371] netlink: 'syz.9.4185': attribute type 1 has an invalid length. [ 345.116808][ T5740] Bluetooth: hci3: command tx timeout [ 345.128668][ T43] audit: type=1800 audit(2000000165.669:1470): pid=18370 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4184" name="nullb0" dev="tmpfs" ino=2526 res=0 errno=0 [ 345.137332][T18370] fuse: fd is not a fuse device [ 345.168159][ T43] audit: type=1800 audit(2000000165.709:1471): pid=18370 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4184" name="nullb0" dev="tmpfs" ino=2526 res=0 errno=0 [ 345.173171][T18376] fuse: fd is not a fuse device [ 345.237065][T18384] Cannot find del_set index 0 as target [ 345.334687][T18373] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 345.343696][T18390] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18390 comm=syz.9.4188 [ 345.416078][T18396] Cannot find add_set index 65532 as target [ 345.474762][ T43] audit: type=1400 audit(2000000166.009:1472): avc: denied { write } for pid=18388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.556396][ T43] audit: type=1400 audit(2000000166.089:1473): avc: denied { write } for pid=18399 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.783709][T18408] Cannot find add_set index 0 as target [ 345.912165][T18417] 8021q: VLANs not supported on gre0 [ 345.939625][T18419] Cannot find add_set index 0 as target [ 345.985239][T18421] netlink: 'syz.7.4199': attribute type 1 has an invalid length. [ 345.988636][T18421] __nla_validate_parse: 3 callbacks suppressed [ 345.990737][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4199'. [ 346.089485][T18426] input: syz1 as /devices/virtual/input/input140 [ 346.139262][T18430] Cannot find del_set index 0 as target [ 346.200844][T18433] sctp: [Deprecated]: syz.9.4204 (pid 18433) Use of int in maxseg socket option. [ 346.200844][T18433] Use struct sctp_assoc_value instead [ 346.232180][T18434] 8021q: VLANs not supported on gre0 [ 346.314959][ T43] audit: type=1400 audit(2000000166.849:1474): avc: denied { write } for pid=18435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.384398][T18448] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4210'. [ 346.400127][ T43] audit: type=1400 audit(2000000166.939:1475): avc: denied { write } for pid=18449 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.510078][T18459] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4213'. [ 346.582108][ T43] audit: type=1400 audit(2000000167.119:1476): avc: denied { write } for pid=18457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.624981][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4214'. [ 346.652968][T18472] 8021q: VLANs not supported on gre0 [ 346.727122][T18475] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4218'. [ 346.748467][ T43] audit: type=1400 audit(2000000167.289:1477): avc: denied { write } for pid=18468 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.105333][T18510] input: syz1 as /devices/virtual/input/input141 [ 347.248791][T18512] kvm: pic: single mode not supported [ 347.248963][T18512] kvm: pic: level sensitive irq not supported [ 347.261940][T18512] kvm: pic: non byte read [ 347.299085][T18461] cgroup: fork rejected by pids controller in /syz2 [ 347.362957][T18527] i2c i2c-0: delete_device: Can't parse I2C address [ 347.373497][T18527] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 347.400035][ T55] IPVS: starting estimator thread 0... [ 347.422062][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4226'. [ 347.519402][T18536] IPVS: using max 43 ests per chain, 103200 per kthread [ 348.323984][T18622] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4231'. [ 348.422398][T18632] netlink: 260 bytes leftover after parsing attributes in process `syz.9.4232'. [ 348.490441][T18634] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4233'. [ 348.578484][T18641] input: syz1 as /devices/virtual/input/input142 [ 348.646216][T18643] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4237'. [ 348.702270][T18647] Cannot find add_set index 0 as target [ 348.806257][T18653] netlink: 'syz.7.4241': attribute type 30 has an invalid length. [ 348.863007][T18656] netlink: 'syz.7.4241': attribute type 30 has an invalid length. [ 348.985577][T18664] Cannot find add_set index 0 as target [ 349.010465][T18666] input: syz1 as /devices/virtual/input/input143 [ 349.122223][T18670] loop3: detected capacity change from 0 to 7 [ 349.128659][ C2] blk_print_req_error: 11 callbacks suppressed [ 349.128726][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.128786][ C2] buffer_io_error: 11 callbacks suppressed [ 349.128814][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 349.141650][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.141727][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 349.148868][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.148955][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 349.153448][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.153503][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 349.161706][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.161771][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 349.166433][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.166476][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 349.166641][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.166694][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 349.169088][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.169122][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 349.169250][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.169277][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 349.169420][T18670] ldm_validate_partition_table(): Disk read failed. [ 349.169443][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 349.169495][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 349.171675][T18670] Dev loop3: unable to read RDB block 0 [ 349.173191][T18670] loop3: unable to read partition table [ 349.173320][T18670] loop3: partition table beyond EOD, truncated [ 349.173336][T18670] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 349.300170][T18675] net_ratelimit: 14 callbacks suppressed [ 349.300488][T18675] openvswitch: netlink: Invalid VLAN frame [ 349.304952][T18680] openvswitch: netlink: Invalid VLAN frame [ 349.406789][T18685] Cannot find del_set index 0 as target [ 349.605511][T18697] 8021q: VLANs not supported on gre0 [ 349.656873][T18699] input: syz1 as /devices/virtual/input/input144 [ 349.761696][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.761796][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.761839][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763033][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763077][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763118][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763158][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763199][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763241][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763281][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763322][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763367][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763409][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763450][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763490][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763558][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763601][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763641][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763681][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763722][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763763][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763804][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763844][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763885][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763927][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.763967][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.764510][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.764554][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.764610][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.764686][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.764729][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.764770][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.764811][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.764852][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.764894][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.764936][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.764977][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.765018][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.765058][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.765861][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.765904][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.765945][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.765987][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.766029][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.766070][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.766118][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.766789][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.766837][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.766879][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.766920][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.766963][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.767004][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.767071][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.767114][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.767156][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.770219][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.770265][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.770307][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.770348][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.770394][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.770434][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.770474][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.770517][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.771971][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.772016][T18701] binder: 18700:18701 ioctl 4018620d 0 returned -22 [ 349.774122][T18701] binder: 18700:18701 ioctl c0306201 200000000640 returned -22 [ 350.073332][T18712] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 351.875045][T18658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.086056][T18726] Cannot find add_set index 0 as target [ 352.158445][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 352.158504][ T43] audit: type=1400 audit(2000000172.699:1482): avc: denied { connect } for pid=18720 comm="syz.7.4264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 352.315667][T18737] __nla_validate_parse: 2 callbacks suppressed [ 352.315744][T18737] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4268'. [ 352.374741][T18742] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4270'. [ 352.378737][T18742] netlink: 'syz.9.4270': attribute type 7 has an invalid length. [ 352.382502][T18742] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 352.393302][T18742] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4270'. [ 352.393957][T18741] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4271'. [ 352.408085][T18742] block nbd1: Unsupported socket: should be TCP or UNIX. [ 352.416090][ T43] audit: type=1400 audit(2000000172.949:1483): avc: denied { mounton } for pid=18740 comm="syz.9.4270" path="/57/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 352.443828][ T43] audit: type=1400 audit(2000000172.979:1484): avc: denied { unmount } for pid=17669 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 352.514443][T18747] Cannot find del_set index 4 as target [ 352.549755][T18752] Cannot find map_set index 135 as target [ 352.650163][ T43] audit: type=1400 audit(2000000173.179:1485): avc: denied { setattr } for pid=18753 comm="syz.9.4276" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 352.660650][T18754] xt_bpf: check failed: parse error [ 352.805800][T18767] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4280'. [ 352.836950][ T3341] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 352.905851][ T43] audit: type=1400 audit(2000000173.439:1486): avc: denied { write } for pid=18769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.996385][ T3341] usb 12-1: Using ep0 maxpacket: 8 [ 352.998462][ T3341] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 353.001971][ T3341] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 353.002013][ T3341] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 353.002052][ T3341] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 353.002079][ T3341] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 353.002105][ T3341] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.002155][ T3341] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.102519][ T43] audit: type=1400 audit(2000000173.639:1487): avc: denied { write } for pid=18774 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.119640][T18779] Cannot find add_set index 0 as target [ 353.233825][ T3341] usb 12-1: usb_control_msg returned -32 [ 353.235808][ T3341] usbtmc 12-1:16.0: can't read capabilities [ 353.270361][ T43] audit: type=1400 audit(2000000173.809:1488): avc: denied { write } for pid=18781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.349020][ T43] audit: type=1400 audit(2000000173.889:1489): avc: denied { write } for pid=18785 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 353.993203][T18806] netlink: Invalid conntrack timeout [ 353.993255][T18806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.002649][T18794] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4277'. [ 354.169844][T18809] Cannot find del_set index 0 as target [ 354.390093][T18763] kexec: Could not allocate control_code_buffer [ 354.442383][ T43] audit: type=1400 audit(2000000174.979:1490): avc: denied { getopt } for pid=18818 comm="syz.6.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 354.481508][T18821] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4297'. [ 354.536303][T18827] ref_ctr_offset mismatch. inode: 0x172 offset: 0x0 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 354.569492][ T43] audit: type=1804 audit(2000000175.109:1491): pid=18824 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.4294" name="/newroot/67/file0" dev="tmpfs" ino=370 res=1 errno=0 [ 354.634977][T18829] netlink: Invalid conntrack timeout [ 354.635013][T18829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.755537][T18844] Cannot find del_set index 0 as target [ 354.818769][T18848] input: syz0 as /devices/virtual/input/input145 [ 354.835061][T18848] /dev/sg0: Can't lookup blockdev [ 354.865830][T18851] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4307'. [ 354.955332][T18856] 8021q: VLANs not supported on gre0 [ 355.140552][T18879] x_tables: unsorted entry at hook 2 [ 355.142930][T18879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4316'. [ 355.206159][T17928] usb 11-1: new full-speed USB device number 22 using dummy_hcd [ 355.357106][T17928] usb 11-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 355.361130][T17928] usb 11-1: config 0 has an invalid interface number: 205 but max is 0 [ 355.364145][T17928] usb 11-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 355.364162][T17928] usb 11-1: config 0 has no interface number 0 [ 355.364185][T17928] usb 11-1: config 0 interface 205 has no altsetting 0 [ 355.373960][T17928] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.377113][T17928] usb 11-1: Product: syz [ 355.378702][T17928] usb 11-1: Manufacturer: syz [ 355.380461][T17928] usb 11-1: SerialNumber: syz [ 355.386184][T17928] usb 11-1: config 0 descriptor?? [ 355.392878][T17928] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 355.396956][T17928] dvb-usb: bulk message failed: -22 (3/0) [ 355.429658][T17928] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 355.433138][T17928] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 355.438446][T17928] usb 11-1: media controller created [ 355.442806][T17928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.462977][T17928] dvb-usb: bulk message failed: -22 (6/0) [ 355.467503][T17928] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 355.473374][T17928] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb11/11-1/input/input146 [ 355.480763][T17928] dvb-usb: schedule remote query interval to 150 msecs. [ 355.483296][T17928] dvb-usb: bulk message failed: -22 (3/0) [ 355.496101][T17928] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 355.631317][ T5843] usb 12-1: USB disconnect, device number 5 [ 355.641725][T17928] dvb-usb: bulk message failed: -22 (1/0) [ 355.648850][T17928] dvb-usb: error while querying for an remote control event. [ 355.816119][T12569] dvb-usb: bulk message failed: -22 (1/0) [ 355.816157][T12569] dvb-usb: error while querying for an remote control event. [ 355.976227][T12569] dvb-usb: bulk message failed: -22 (1/0) [ 355.978652][T12569] dvb-usb: error while querying for an remote control event. [ 356.136447][T12569] dvb-usb: bulk message failed: -22 (1/0) [ 356.139144][T12569] dvb-usb: error while querying for an remote control event. [ 356.296693][T12569] dvb-usb: bulk message failed: -22 (1/0) [ 356.299190][T12569] dvb-usb: error while querying for an remote control event. [ 356.456046][T12569] dvb-usb: bulk message failed: -22 (1/0) [ 356.458471][T12569] dvb-usb: error while querying for an remote control event. [ 356.566502][T18894] Cannot find add_set index 0 as target [ 356.615960][T12569] dvb-usb: bulk message failed: -22 (1/0) [ 356.617930][T12569] dvb-usb: error while querying for an remote control event. [ 356.720463][T18897] netlink: Invalid conntrack timeout [ 356.722280][T18897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.776082][T12569] dvb-usb: bulk message failed: -22 (1/0) [ 356.778009][T12569] dvb-usb: error while querying for an remote control event. [ 356.937445][T12569] dvb-usb: bulk message failed: -22 (1/0) [ 356.939432][T12569] dvb-usb: error while querying for an remote control event. [ 357.106217][T12569] dvb-usb: bulk message failed: -22 (1/0) [ 357.106271][T12569] dvb-usb: error while querying for an remote control event. [ 357.266351][T12569] dvb-usb: bulk message failed: -22 (1/0) [ 357.266438][T12569] dvb-usb: error while querying for an remote control event. [ 357.426177][T12569] dvb-usb: bulk message failed: -22 (1/0) [ 357.426290][T12569] dvb-usb: error while querying for an remote control event. [ 357.586019][T12569] dvb-usb: bulk message failed: -22 (1/0) [ 357.586075][T12569] dvb-usb: error while querying for an remote control event. [ 357.757288][T12569] dvb-usb: bulk message failed: -22 (1/0) [ 357.757392][T12569] dvb-usb: error while querying for an remote control event. [ 357.926031][T12569] dvb-usb: bulk message failed: -22 (1/0) [ 357.926096][T12569] dvb-usb: error while querying for an remote control event. [ 357.983997][T12569] usb 11-1: USB disconnect, device number 22 [ 358.033646][T12569] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 358.040512][T18868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 358.155365][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 358.155410][ T43] audit: type=1400 audit(2000000178.690:1496): avc: denied { watch_mount } for pid=18906 comm="syz.7.4322" path="/301" dev="tmpfs" ino=1589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 358.215613][T18911] fuse: fd is not a fuse device [ 358.237808][T18918] Cannot find add_set index 0 as target [ 358.271768][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4329'. [ 358.383248][T18928] sit1: entered allmulticast mode [ 358.580308][T18941] netlink: 'syz.6.4337': attribute type 1 has an invalid length. [ 358.582875][T18941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4337'. [ 358.625168][T18940] FAULT_INJECTION: forcing a failure. [ 358.625168][T18940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.629794][T18940] CPU: 0 UID: 0 PID: 18940 Comm: syz.9.4338 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.629825][T18940] Tainted: [L]=SOFTLOCKUP [ 358.629830][T18940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 358.629838][T18940] Call Trace: [ 358.629843][T18940] [ 358.629849][T18940] dump_stack_lvl+0x100/0x190 [ 358.629885][T18940] should_fail_ex.cold+0x5/0xa [ 358.629903][T18940] __fpu_restore_sig+0x100/0x13b0 [ 358.629922][T18940] ? __lock_acquire+0x5c0/0x1f40 [ 358.629935][T18940] ? __pfx___fpu_restore_sig+0x10/0x10 [ 358.629959][T18940] ? __might_fault+0xc5/0x140 [ 358.629978][T18940] fpu__restore_sig+0x151/0x190 [ 358.629996][T18940] restore_sigcontext+0x4cb/0x6a0 [ 358.630013][T18940] ? __pfx_restore_sigcontext+0x10/0x10 [ 358.630038][T18940] ? __pfx_restore_altstack+0x10/0x10 [ 358.630056][T18940] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.630069][T18940] ? lockdep_hardirqs_on+0x7d/0x110 [ 358.630084][T18940] __do_sys_rt_sigreturn+0x229/0x2c0 [ 358.630100][T18940] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 358.630146][T18940] do_syscall_64+0x123/0x790 [ 358.630172][T18940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.630188][T18940] RIP: 0033:0x7f5ba199e159 [ 358.630198][T18940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.630209][T18940] RSP: 002b:00007f5ba28d2028 EFLAGS: 00000246 [ 358.630220][T18940] RAX: fffffffffffffffc RBX: 00007f5ba1c25fa0 RCX: 00007f5ba199e159 [ 358.630227][T18940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.630234][T18940] RBP: 00007f5ba1a35024 R08: 0000000000000000 R09: 0000000000000000 [ 358.630240][T18940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.630247][T18940] R13: 00007f5ba1c26038 R14: 00007f5ba1c25fa0 R15: 00007fffd0e38008 [ 358.630262][T18940] [ 358.684512][T18946] syzkaller0: entered promiscuous mode [ 358.684525][T18946] syzkaller0: entered allmulticast mode [ 358.740872][ T5740] Bluetooth: hci1: Invalid connection link type handle 0x00c8 [ 358.805916][T17928] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 358.965859][T17928] usb 12-1: Using ep0 maxpacket: 8 [ 358.968311][T17928] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 358.972550][T17928] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 358.975285][T17928] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.978814][T17928] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.981931][T17928] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.985162][T17928] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.989316][T17928] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.162477][T18952] fuse: fd is not a fuse device [ 359.207468][T17928] usb 12-1: usb_control_msg returned -32 [ 359.207569][T17928] usbtmc 12-1:16.0: can't read capabilities [ 359.511772][T18967] Cannot find del_set index 0 as target [ 359.567090][T18970] usbtmc 12-1:16.0: usb_control_msg returned -32 [ 359.594302][T18969] can0: slcan on ttynull. [ 359.605779][T18969] netlink: 'syz.6.4349': attribute type 2 has an invalid length. [ 359.607452][T18969] netlink: 'syz.6.4349': attribute type 2 has an invalid length. [ 359.607462][T18969] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.4349'. [ 359.660359][T17928] usb 12-1: USB disconnect, device number 6 [ 359.664485][ T43] audit: type=1400 audit(2000000180.200:1497): avc: denied { nosuid_transition } for pid=18968 comm="syz.6.4349" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 359.678853][ T43] audit: type=1400 audit(2000000180.220:1498): avc: denied { transition } for pid=18968 comm="syz.6.4349" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 359.678975][ T43] audit: type=1400 audit(2000000180.220:1499): avc: denied { entrypoint } for pid=18968 comm="syz.6.4349" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1205 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 359.679022][ T43] audit: type=1400 audit(2000000180.220:1500): avc: denied { share } for pid=18968 comm="syz.6.4349" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 359.707101][ T43] audit: type=1400 audit(2000000180.240:1501): avc: denied { noatsecure } for pid=18968 comm="syz.6.4349" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 359.742738][ T43] audit: type=1400 audit(2000000180.280:1502): avc: denied { write } for pid=18976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.814844][ T43] audit: type=1400 audit(2000000180.350:1503): avc: denied { write } for pid=18981 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.993027][T18988] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4352'. [ 360.025271][T18990] sit1: entered allmulticast mode [ 360.242386][T19004] fuse: fd is not a fuse device [ 360.249069][T19001] syzkaller0: entered promiscuous mode [ 360.251114][T19001] syzkaller0: entered allmulticast mode [ 360.283169][T19006] 8021q: VLANs not supported on gre0 [ 360.466780][ T43] audit: type=1400 audit(2000000181.010:1504): avc: denied { write } for pid=19012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.497123][T18975] can0 (unregistered): slcan off ttynull. [ 360.615343][ T43] audit: type=1400 audit(2000000181.150:1505): avc: denied { write } for pid=19020 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.673862][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4365'. [ 360.674077][T19025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.720885][T19025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.771069][T19031] Cannot find del_set index 4 as target [ 360.850623][T19036] fuse: fd is not a fuse device [ 360.922824][T19042] netlink: 'syz.2.4370': attribute type 5 has an invalid length. [ 361.054146][T19047] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4371'. [ 361.249073][T19060] FAULT_INJECTION: forcing a failure. [ 361.249073][T19060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.249119][T19060] CPU: 2 UID: 0 PID: 19060 Comm: syz.6.4377 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.249147][T19060] Tainted: [L]=SOFTLOCKUP [ 361.249152][T19060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 361.249159][T19060] Call Trace: [ 361.249164][T19060] [ 361.249169][T19060] dump_stack_lvl+0x100/0x190 [ 361.249189][T19060] should_fail_ex.cold+0x5/0xa [ 361.249206][T19060] _copy_from_user+0x2e/0xd0 [ 361.249225][T19060] copy_msghdr_from_user+0x9f/0x4c0 [ 361.249242][T19060] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 361.249261][T19060] ? lock_acquire+0x1d1/0x380 [ 361.249273][T19060] ? get_pid_task+0x2a/0x250 [ 361.249290][T19060] ___sys_sendmsg+0x106/0x1e0 [ 361.249306][T19060] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.249322][T19060] ? get_pid_task+0x106/0x250 [ 361.249341][T19060] ? find_held_lock+0x2b/0x80 [ 361.249365][T19060] __sys_sendmsg+0x160/0x210 [ 361.249377][T19060] ? __pfx___sys_sendmsg+0x10/0x10 [ 361.249396][T19060] do_syscall_64+0x123/0x790 [ 361.249412][T19060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.249424][T19060] RIP: 0033:0x7f049779e159 [ 361.249433][T19060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.249445][T19060] RSP: 002b:00007f04986cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.249456][T19060] RAX: ffffffffffffffda RBX: 00007f0497a25fa0 RCX: 00007f049779e159 [ 361.249464][T19060] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 361.249471][T19060] RBP: 00007f04986cd090 R08: 0000000000000000 R09: 0000000000000000 [ 361.249478][T19060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.249484][T19060] R13: 00007f0497a26038 R14: 00007f0497a25fa0 R15: 00007ffd56d1a3d8 [ 361.249498][T19060] [ 361.569222][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4384'. [ 361.616481][T19084] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 361.734517][T19093] syzkaller0: entered promiscuous mode [ 361.736868][T19093] syzkaller0: entered allmulticast mode [ 361.840825][T19097] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 361.840863][T19097] overlayfs: missing 'lowerdir' [ 361.846275][T19099] fuse: fd is not a fuse device [ 361.906459][T19107] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 361.908956][T19107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4393'. [ 362.204165][T19130] Cannot find map_set index 135 as target [ 362.262884][T19139] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4406'. [ 362.364957][T19147] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 362.465302][T19159] 8021q: VLANs not supported on gre0 [ 362.555393][T19163] overlayfs: failed to clone upperpath [ 362.611849][T19167] Cannot find add_set index 0 as target [ 362.652352][T19169] fuse: fd is not a fuse device [ 362.773164][T19179] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 362.798876][T19186] netlink: 'syz.2.4423': attribute type 5 has an invalid length. [ 362.816787][T19188] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4424'. [ 362.920945][T19196] input: syz1 as /devices/virtual/input/input147 [ 362.940576][T19198] evm: overlay not supported [ 363.241118][T19223] netlink: Invalid conntrack timeout [ 363.242997][T19223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.358247][T19235] FAULT_INJECTION: forcing a failure. [ 363.358247][T19235] name failslab, interval 1, probability 0, space 0, times 0 [ 363.358303][T19235] CPU: 0 UID: 0 PID: 19235 Comm: syz.6.4443 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.358330][T19235] Tainted: [L]=SOFTLOCKUP [ 363.358335][T19235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 363.358341][T19235] Call Trace: [ 363.358358][T19235] [ 363.358365][T19235] dump_stack_lvl+0x100/0x190 [ 363.358385][T19235] should_fail_ex.cold+0x5/0xa [ 363.358402][T19235] should_failslab+0xc2/0x120 [ 363.358416][T19235] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 363.358428][T19235] ? __alloc_skb+0x5b7/0x710 [ 363.358440][T19235] ? __alloc_skb+0x140/0x710 [ 363.358452][T19235] __alloc_skb+0x140/0x710 [ 363.358462][T19235] ? __alloc_skb+0x5b7/0x710 [ 363.358475][T19235] ? __pfx___alloc_skb+0x10/0x10 [ 363.358489][T19235] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 363.358514][T19235] ? sock_has_perm+0x25a/0x2f0 [ 363.358530][T19235] ? __pfx_sock_has_perm+0x10/0x10 [ 363.358547][T19235] netlink_alloc_large_skb+0x69/0x150 [ 363.358567][T19235] netlink_sendmsg+0x680/0xda0 [ 363.358580][T19235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.358592][T19235] ? selinux_socket_sendmsg+0x198/0x2f0 [ 363.358613][T19235] ____sys_sendmsg+0xa4d/0xbe0 [ 363.358627][T19235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.358639][T19235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.358657][T19235] ? lock_acquire+0x1d1/0x380 [ 363.358669][T19235] ? get_pid_task+0x2a/0x250 [ 363.358686][T19235] ___sys_sendmsg+0x190/0x1e0 [ 363.358710][T19235] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.358732][T19235] ? get_pid_task+0x106/0x250 [ 363.358752][T19235] ? find_held_lock+0x2b/0x80 [ 363.358780][T19235] __sys_sendmsg+0x160/0x210 [ 363.358800][T19235] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.358824][T19235] do_syscall_64+0x123/0x790 [ 363.358839][T19235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.358854][T19235] RIP: 0033:0x7f049779e159 [ 363.358864][T19235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.358876][T19235] RSP: 002b:00007f04986cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.358888][T19235] RAX: ffffffffffffffda RBX: 00007f0497a25fa0 RCX: 00007f049779e159 [ 363.358895][T19235] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 363.358902][T19235] RBP: 00007f04986cd090 R08: 0000000000000000 R09: 0000000000000000 [ 363.358909][T19235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.358916][T19235] R13: 00007f0497a26038 R14: 00007f0497a25fa0 R15: 00007ffd56d1a3d8 [ 363.358930][T19235] [ 363.545740][T19247] fuse: fd is not a fuse device [ 363.686645][T19249] netlink: Invalid conntrack timeout [ 363.690245][T19249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.694653][ T1166] Bluetooth: hci4: Frame reassembly failed (-84) [ 363.710871][T19252] tipc: Started in network mode [ 363.712633][T19252] tipc: Node identity ac1414aa, cluster identity 4711 [ 363.716426][T19252] tipc: New replicast peer: 172.20.20.187 [ 363.730654][T19252] tipc: Enabled bearer , priority 10 [ 363.884132][T19270] __nla_validate_parse: 2 callbacks suppressed [ 363.884403][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4453'. [ 364.073421][T19280] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 364.099831][T19279] syzkaller0: entered promiscuous mode [ 364.099934][T19279] syzkaller0: entered allmulticast mode [ 364.178341][ T5089] Bluetooth: hci1: Invalid connection link type handle 0x00c8 [ 364.181863][T19287] netlink: Invalid conntrack timeout [ 364.183815][T19287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.339195][T19297] netlink: 'syz.2.4465': attribute type 1 has an invalid length. [ 364.339240][T19297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4465'. [ 364.397725][T19301] fuse: fd is not a fuse device [ 364.471714][T19304] batman_adv: batadv0: Interface deactivated: dummy0 [ 364.471757][T19304] batman_adv: batadv0: Removing interface: dummy0 [ 364.485222][T19304] bridge_slave_0: left allmulticast mode [ 364.485318][T19304] bridge_slave_0: left promiscuous mode [ 364.488164][T19304] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.505251][T19304] bridge_slave_1: left allmulticast mode [ 364.505374][T19304] bridge_slave_1: left promiscuous mode [ 364.506754][T19304] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.518453][T19304] bond0: (slave bond_slave_0): Releasing backup interface [ 364.522124][T19304] bond_slave_0: left promiscuous mode [ 364.528216][T19304] bond0: (slave bond_slave_1): Releasing backup interface [ 364.531462][T19304] bond_slave_1: left promiscuous mode [ 364.537244][T19304] team0: Port device team_slave_0 removed [ 364.541976][T19304] team0: Port device team_slave_1 removed [ 364.544857][T19304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.548472][T19304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.552646][T19304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.556757][T19304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.562447][T19304] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 364.783031][T19325] fuse: fd is not a fuse device [ 364.840986][ T5817] tipc: Node number set to 2886997162 [ 364.901139][T19332] Cannot find map_set index 135 as target [ 365.075773][T19341] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4483'. [ 365.359688][T19362] 8021q: VLANs not supported on gre0 [ 365.511072][T19366] netlink: Invalid conntrack timeout [ 365.511127][T19366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.755903][ T5089] Bluetooth: hci4: command 0x1003 tx timeout [ 365.756054][ T5740] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 365.787839][T19377] fuse: fd is not a fuse device [ 366.256475][T19407] Cannot find add_set index 0 as target [ 366.290727][T19409] netlink: Invalid conntrack timeout [ 366.428890][T19416] netlink: 260 bytes leftover after parsing attributes in process `syz.9.4510'. [ 366.514701][T19414] block nbd6: NBD_DISCONNECT [ 366.544721][T19424] netlink: 'syz.7.4513': attribute type 5 has an invalid length. [ 366.562665][T19414] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 366.980510][T19446] input: syz1 as /devices/virtual/input/input148 [ 367.091933][T19450] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4521'. [ 367.151888][T19453] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 367.160010][T19453] ucma_write: process 875 (syz.7.4523) changed security contexts after opening file descriptor, this is not allowed. [ 367.168917][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 367.169031][ T43] audit: type=1400 audit(2000000187.700:1508): avc: denied { ioctl } for pid=19452 comm="syz.7.4523" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 ioctlcmd=0x6e8d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 367.425080][T19475] syzkaller0: entered promiscuous mode [ 367.425190][T19475] syzkaller0: entered allmulticast mode [ 367.489180][ T5740] Bluetooth: hci1: Invalid connection link type handle 0x00c8 [ 367.723285][T19490] fuse: fd is not a fuse device [ 367.855064][T19497] fuse: fd is not a fuse device [ 368.003538][T19507] FAULT_INJECTION: forcing a failure. [ 368.003538][T19507] name failslab, interval 1, probability 0, space 0, times 0 [ 368.005025][T19505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4546'. [ 368.010379][T19507] CPU: 2 UID: 0 PID: 19507 Comm: syz.6.4547 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.010411][T19507] Tainted: [L]=SOFTLOCKUP [ 368.010416][T19507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 368.010424][T19507] Call Trace: [ 368.010430][T19507] [ 368.010436][T19507] dump_stack_lvl+0x100/0x190 [ 368.010471][T19507] should_fail_ex.cold+0x5/0xa [ 368.010490][T19507] should_failslab+0xc2/0x120 [ 368.010506][T19507] kmem_cache_alloc_noprof+0x92/0x6a0 [ 368.010522][T19507] ? mas_preallocate+0xc22/0xee0 [ 368.010547][T19507] mas_preallocate+0xc22/0xee0 [ 368.010571][T19507] ? __pfx_mas_preallocate+0x10/0x10 [ 368.010586][T19507] ? mt_find+0x136/0x9b0 [ 368.010604][T19507] ? lock_acquire+0x1d1/0x380 [ 368.010616][T19507] ? avc_has_perm_noaudit+0x56/0x3b0 [ 368.010634][T19507] vma_link+0x14a/0x8c0 [ 368.010657][T19507] ? __pfx_vma_link+0x10/0x10 [ 368.010686][T19507] ? __pfx_selinux_vm_enough_memory+0x10/0x10 [ 368.010701][T19507] ? rcu_is_watching+0x13/0xc0 [ 368.010721][T19507] ? percpu_counter_add_batch+0xb9/0x230 [ 368.010738][T19507] insert_vm_struct+0x1f7/0x890 [ 368.010753][T19507] create_init_stack_vma+0x830/0xcf0 [ 368.010768][T19507] ? __pfx_create_init_stack_vma+0x10/0x10 [ 368.010783][T19507] ? lock_acquire+0x1d1/0x380 [ 368.010795][T19507] ? do_raw_spin_lock+0x128/0x260 [ 368.010810][T19507] ? alloc_bprm+0x54e/0x9e0 [ 368.010822][T19507] ? alloc_bprm+0x54e/0x9e0 [ 368.010836][T19507] alloc_bprm+0x57b/0x9e0 [ 368.010850][T19507] do_execveat_common.isra.0+0x19c/0x580 [ 368.010863][T19507] ? do_getname+0x191/0x390 [ 368.010879][T19507] __x64_sys_execve+0x93/0xd0 [ 368.010892][T19507] do_syscall_64+0x123/0x790 [ 368.010907][T19507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.010919][T19507] RIP: 0033:0x7f049779e159 [ 368.010929][T19507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.010940][T19507] RSP: 002b:00007f04986cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 368.010952][T19507] RAX: ffffffffffffffda RBX: 00007f0497a25fa0 RCX: 00007f049779e159 [ 368.010960][T19507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 368.010966][T19507] RBP: 00007f0497835024 R08: 0000000000000000 R09: 0000000000000000 [ 368.010973][T19507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.010980][T19507] R13: 00007f0497a26038 R14: 00007f0497a25fa0 R15: 00007ffd56d1a3d8 [ 368.010995][T19507] [ 368.113729][T19507] support for cryptoloop has been removed. Use dm-crypt instead. [ 368.329127][T19518] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 368.534256][T19527] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 368.652130][T19539] netlink: 'syz.6.4558': attribute type 1 has an invalid length. [ 368.653992][T19539] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4558'. [ 369.126635][T19565] syzkaller0: entered promiscuous mode [ 369.128678][T19565] syzkaller0: entered allmulticast mode [ 369.188428][ T5740] Bluetooth: hci3: Invalid connection link type handle 0x00c8 [ 369.189477][T19570] net_ratelimit: 5 callbacks suppressed [ 369.189498][T19570] netlink: Invalid conntrack timeout [ 369.189525][T19570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.370212][ T43] audit: type=1400 audit(2000000189.910:1509): avc: denied { connect } for pid=19577 comm="syz.2.4567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 369.380029][T19578] fuse: fd is not a fuse device [ 369.444466][ T43] audit: type=1400 audit(2000000189.980:1510): avc: denied { read } for pid=19577 comm="syz.2.4567" laddr=fe80::bcb4:66ff:fe91:2a0f lport=17485 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 369.793135][ T5089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.797084][T19594] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4574'. [ 369.808079][ T5089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.812017][ T5089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.821791][ T5089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.828719][ T5089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.042648][T19601] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 370.309427][ T43] audit: type=1400 audit(2000000190.850:1511): avc: denied { append } for pid=19610 comm="syz.7.4578" name="uprobe_events" dev="tracefs" ino=3087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 370.487226][T17091] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.517179][T19620] 8021q: VLANs not supported on gre0 [ 370.792116][T19630] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 370.889853][T17091] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.977857][T17091] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.997090][T19640] syzkaller0: entered promiscuous mode [ 370.997170][T19640] syzkaller0: entered allmulticast mode [ 371.061902][T19640] netlink: Invalid conntrack timeout [ 371.061943][T19640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.064594][ T5089] Bluetooth: hci3: Invalid connection link type handle 0x00c8 [ 371.071895][T17091] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.466945][ T5824] netdevsim netdevsim2 eth26: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.520442][ T5808] netdevsim netdevsim2 eth27: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.520815][T19592] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.520887][T19592] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.521001][T19592] bridge_slave_0: entered allmulticast mode [ 371.522799][T19592] bridge_slave_0: entered promiscuous mode [ 371.583351][T19592] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.583465][T19592] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.583934][T19592] bridge_slave_1: entered allmulticast mode [ 371.590480][T19592] bridge_slave_1: entered promiscuous mode [ 371.647490][ T5824] netdevsim netdevsim2 eth29: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.843319][T17091] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 371.846696][T17091] ip6gre1 (unregistering): left promiscuous mode [ 371.925416][ T5089] Bluetooth: hci4: command tx timeout [ 372.047587][T17091] bond0 (unregistering): Released all slaves [ 372.056252][T17091] bond1 (unregistering): Released all slaves [ 372.072206][T17091] bond2 (unregistering): Released all slaves [ 372.294343][T19674] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 372.349263][T19592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.349488][T17091] tipc: Disabling bearer [ 372.349729][T17091] tipc: Left network mode [ 372.438880][T19592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.641421][ T5824] netdevsim netdevsim2 eth28: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.821084][T19592] team0: Port device team_slave_0 added [ 372.823304][T19592] team0: Port device team_slave_1 added [ 372.892032][T17091] hsr_slave_0: left promiscuous mode [ 372.898353][T17091] hsr_slave_1: left promiscuous mode [ 372.901936][T17091] veth1_macvtap: left promiscuous mode [ 372.901994][T17091] veth0_macvtap: left promiscuous mode [ 372.902095][T17091] veth1_vlan: left promiscuous mode [ 372.902193][T17091] veth0_vlan: left promiscuous mode [ 372.904146][ T43] audit: type=1400 audit(2000000193.440:1512): avc: denied { write } for pid=19690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.923388][T19699] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 373.070083][T19704] Cannot find add_set index 0 as target [ 373.140344][ T43] audit: type=1400 audit(2000000193.680:1513): avc: denied { write } for pid=19702 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.622948][T19722] netlink: 260 bytes leftover after parsing attributes in process `syz.9.4608'. [ 373.638133][T19723] netlink: Invalid conntrack timeout [ 373.638279][ T5089] Bluetooth: hci3: Invalid connection link type handle 0x00c8 [ 373.643874][T19723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.653265][T19592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.653309][T19592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.653702][T19592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.659464][T19592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.659473][T19592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.659487][T19592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.680179][ T5443] 8021q: adding VLAN 0 to HW filter on device eth26 [ 373.839990][T19711] syzkaller0: entered promiscuous mode [ 373.842754][T19711] syzkaller0: entered allmulticast mode [ 373.995494][ T5089] Bluetooth: hci4: command tx timeout [ 374.011226][T19592] hsr_slave_0: entered promiscuous mode [ 374.011995][T19592] hsr_slave_1: entered promiscuous mode [ 374.012316][T19592] debugfs: 'hsr0' already exists in 'hsr' [ 374.012328][T19592] Cannot create hsr debugfs directory [ 374.139875][T19742] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 374.204042][ T43] audit: type=1400 audit(2000000194.740:1514): avc: denied { write } for pid=19739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.229474][T19747] netlink: 'syz.7.4616': attribute type 5 has an invalid length. [ 374.338891][ T43] audit: type=1400 audit(2000000194.870:1515): avc: denied { write } for pid=19748 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.075258][ T5089] Bluetooth: hci4: command tx timeout [ 376.823218][T19751] sit2: entered allmulticast mode [ 376.945871][ T5443] 8021q: adding VLAN 0 to HW filter on device eth27 [ 377.200519][T19770] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 377.204883][T19769] input: syz1 as /devices/virtual/input/input149 [ 377.253266][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4625'. [ 377.360770][T19775] syzkaller0: entered promiscuous mode [ 377.360821][T19775] syzkaller0: entered allmulticast mode [ 377.406184][T19780] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4628'. [ 377.428862][T19784] netlink: Invalid conntrack timeout [ 377.428902][T19784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.481912][ T43] audit: type=1400 audit(2000000198.021:1516): avc: denied { write } for pid=19776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.497816][T19592] netdevsim netdevsim2 eth29 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.610741][T19592] netdevsim netdevsim2 eth28 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.664689][T19796] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 377.667618][ T43] audit: type=1400 audit(2000000198.201:1517): avc: denied { write } for pid=19792 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.793555][T19592] netdevsim netdevsim2 eth27 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.831668][T19802] FAULT_INJECTION: forcing a failure. [ 377.831668][T19802] name failslab, interval 1, probability 0, space 0, times 0 [ 377.831753][T19802] CPU: 2 UID: 0 PID: 19802 Comm: syz.6.4634 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.831793][T19802] Tainted: [L]=SOFTLOCKUP [ 377.831801][T19802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 377.831813][T19802] Call Trace: [ 377.831820][T19802] [ 377.831828][T19802] dump_stack_lvl+0x100/0x190 [ 377.831860][T19802] should_fail_ex.cold+0x5/0xa [ 377.831897][T19802] ? __netlink_lookup+0x652/0x900 [ 377.831929][T19802] should_failslab+0xc2/0x120 [ 377.831953][T19802] kmem_cache_alloc_noprof+0x92/0x6a0 [ 377.831974][T19802] ? skb_clone+0x190/0x400 [ 377.831999][T19802] skb_clone+0x190/0x400 [ 377.832020][T19802] netlink_deliver_tap+0xaed/0xcc0 [ 377.832054][T19802] netlink_unicast+0x62b/0x850 [ 377.832076][T19802] ? __pfx_netlink_unicast+0x10/0x10 [ 377.832093][T19802] ? __pfx_sock_has_perm+0x10/0x10 [ 377.832124][T19802] netlink_sendmsg+0x8b0/0xda0 [ 377.832148][T19802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.832169][T19802] ? selinux_socket_sendmsg+0x198/0x2f0 [ 377.832201][T19802] ____sys_sendmsg+0xa4d/0xbe0 [ 377.832225][T19802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.832244][T19802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.832275][T19802] ? lock_acquire+0x1d1/0x380 [ 377.832293][T19802] ? get_pid_task+0x2a/0x250 [ 377.832319][T19802] ___sys_sendmsg+0x190/0x1e0 [ 377.832346][T19802] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.832371][T19802] ? get_pid_task+0x106/0x250 [ 377.832406][T19802] ? find_held_lock+0x2b/0x80 [ 377.832448][T19802] __sys_sendmsg+0x160/0x210 [ 377.832469][T19802] ? __pfx___sys_sendmsg+0x10/0x10 [ 377.832503][T19802] do_syscall_64+0x123/0x790 [ 377.832530][T19802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.832549][T19802] RIP: 0033:0x7f049779e159 [ 377.832565][T19802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.832581][T19802] RSP: 002b:00007f04986cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.832600][T19802] RAX: ffffffffffffffda RBX: 00007f0497a25fa0 RCX: 00007f049779e159 [ 377.832614][T19802] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 377.832625][T19802] RBP: 00007f04986cd090 R08: 0000000000000000 R09: 0000000000000000 [ 377.832638][T19802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.832649][T19802] R13: 00007f0497a26038 R14: 00007f0497a25fa0 R15: 00007ffd56d1a3d8 [ 377.832674][T19802] [ 378.009313][T19592] netdevsim netdevsim2 eth26 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.023382][ T43] audit: type=1400 audit(2000000198.561:1518): avc: denied { write } for pid=19806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.156823][ T5089] Bluetooth: hci4: command tx timeout [ 378.205585][ T43] audit: type=1400 audit(2000000198.751:1519): avc: denied { write } for pid=19813 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.365282][ T43] audit: type=1400 audit(2000000198.911:1520): avc: denied { write } for pid=19819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.397327][T19592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 378.458184][T19592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 378.466573][T19592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 378.477427][T19592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 378.487525][T19592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 378.495300][T19592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 378.498476][T19592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 378.519167][T19828] device-mapper: ioctl: Invalid data size in the ioctl structure: 56 [ 378.538169][T19592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.560668][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.658678][ T43] audit: type=1400 audit(2000000199.201:1521): avc: denied { write } for pid=19826 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.847881][T19592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.864622][T19592] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.875529][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.875619][ T6840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.890192][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.890338][ T6840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.938059][ T43] audit: type=1400 audit(2000000199.481:1522): avc: denied { write } for pid=19849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.079691][ T43] audit: type=1400 audit(2000000199.621:1523): avc: denied { write } for pid=19857 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.161787][T19864] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4648'. [ 379.252030][T19866] syzkaller0: entered promiscuous mode [ 379.253872][T19866] syzkaller0: entered allmulticast mode [ 379.314894][ T5089] Bluetooth: hci3: Invalid connection link type handle 0x00c8 [ 379.315330][T19870] netlink: Invalid conntrack timeout [ 379.315349][T19870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.444315][T19592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.483092][T19592] veth0_vlan: entered promiscuous mode [ 379.490534][T19592] veth1_vlan: entered promiscuous mode [ 379.521529][T19592] veth0_macvtap: entered promiscuous mode [ 379.528037][T19592] veth1_macvtap: entered promiscuous mode [ 379.538891][T19592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.547244][T19592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.625422][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.625473][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.625492][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.625510][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.720792][ T7042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.720839][ T7042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.749178][T19876] device-mapper: ioctl: Invalid data size in the ioctl structure: 56 [ 379.763942][ T7042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.763991][ T7042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.818279][T19880] Cannot find del_set index 0 as target [ 380.006181][ T43] audit: type=1400 audit(2000000200.551:1524): avc: denied { ioctl } for pid=19890 comm="syz.7.4656" path="/dev/ptyr2" dev="devtmpfs" ino=145 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 380.163969][T19894] Cannot find add_set index 0 as target [ 380.185525][T19896] device-mapper: ioctl: Invalid data size in the ioctl structure: 56 [ 380.263379][T19902] netlink: 'syz.6.4661': attribute type 1 has an invalid length. [ 380.268113][T19902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4661'. [ 380.350820][T19909] sit2: entered allmulticast mode [ 380.394272][T19913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.401474][T19913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.580155][T19922] syzkaller0: entered promiscuous mode [ 380.582174][T19922] syzkaller0: entered allmulticast mode [ 380.634141][ T43] audit: type=1107 audit(2000000201.161:1525): pid=19923 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='yæûµ4TÃ;X‡´F5§Qüx´•¨ºj_óúìÅõ [ 380.634141][ T43] q|Ç‘ W’Ü$Xë1V¢»™i§ò²,®ÁR\RþƒD’JâÆEŒÞdaä«1^/”õ);×8¨7†‰êÅô§_pÜ_¢ókAñçª~}nq' [ 380.635665][ T65] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 380.651636][ T5089] Bluetooth: hci1: Invalid connection link type handle 0x00c8 [ 380.656950][T19929] netlink: Invalid conntrack timeout [ 380.657016][T19929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.748031][T19935] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4672'. [ 380.771893][T19937] sit2: entered allmulticast mode [ 380.775246][ T65] usb 11-1: device descriptor read/64, error -71 [ 380.933470][T19947] 8021q: VLANs not supported on gre0 [ 380.991105][T19950] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4680'. [ 381.014721][ T65] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 381.144853][ T65] usb 11-1: device descriptor read/64, error -71 [ 381.254823][ T65] usb usb11-port1: attempt power cycle [ 381.257070][T19967] overlayfs: upper fs does not support file handles, falling back to index=off. [ 381.362663][T19972] Cannot find del_set index 4 as target [ 381.427524][T19975] netlink: 260 bytes leftover after parsing attributes in process `syz.7.4691'. [ 381.547023][T19981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.595514][ T65] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 381.617750][ T65] usb 11-1: device descriptor read/8, error -71 [ 381.818110][T19997] netlink: 'syz.2.4698': attribute type 5 has an invalid length. [ 381.837662][T19999] input: syz1 as /devices/virtual/input/input150 [ 381.848904][T20001] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4700'. [ 381.856050][ T65] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 381.875685][ T65] usb 11-1: device descriptor read/8, error -71 [ 381.926202][T20003] syzkaller0: entered promiscuous mode [ 381.928135][T20003] syzkaller0: entered allmulticast mode [ 381.985504][ T65] usb usb11-port1: unable to enumerate USB device [ 381.990907][ T5089] Bluetooth: hci1: Invalid connection link type handle 0x00c8 [ 381.993290][T20007] netlink: Invalid conntrack timeout [ 381.993304][T20007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.116348][T20015] FAULT_INJECTION: forcing a failure. [ 382.116348][T20015] name failslab, interval 1, probability 0, space 0, times 0 [ 382.116404][T20015] CPU: 2 UID: 0 PID: 20015 Comm: syz.7.4707 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.116422][T20015] Tainted: [L]=SOFTLOCKUP [ 382.116426][T20015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 382.116433][T20015] Call Trace: [ 382.116438][T20015] [ 382.116443][T20015] dump_stack_lvl+0x100/0x190 [ 382.116463][T20015] should_fail_ex.cold+0x5/0xa [ 382.116480][T20015] should_failslab+0xc2/0x120 [ 382.116495][T20015] __kmalloc_noprof+0xfc/0x840 [ 382.116507][T20015] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 382.116525][T20015] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 382.116541][T20015] genl_family_rcv_msg_doit+0xc7/0x300 [ 382.116555][T20015] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 382.116574][T20015] ? bpf_lsm_capable+0x9/0x10 [ 382.116590][T20015] ? security_capable+0x80/0x260 [ 382.116607][T20015] ? ns_capable+0xd2/0xf0 [ 382.116619][T20015] genl_rcv_msg+0x560/0x800 [ 382.116633][T20015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.116645][T20015] ? __lock_acquire+0x5c0/0x1f40 [ 382.116656][T20015] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 382.116671][T20015] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 382.116682][T20015] ? __pfx_nl80211_post_doit+0x10/0x10 [ 382.116701][T20015] netlink_rcv_skb+0x159/0x420 [ 382.116712][T20015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.116725][T20015] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.116741][T20015] ? netlink_deliver_tap+0x1ae/0xcc0 [ 382.116760][T20015] genl_rcv+0x28/0x40 [ 382.116770][T20015] netlink_unicast+0x585/0x850 [ 382.116784][T20015] ? __pfx_netlink_unicast+0x10/0x10 [ 382.116794][T20015] ? __pfx_sock_has_perm+0x10/0x10 [ 382.116814][T20015] netlink_sendmsg+0x8b0/0xda0 [ 382.116827][T20015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.116839][T20015] ? selinux_socket_sendmsg+0x198/0x2f0 [ 382.116859][T20015] ____sys_sendmsg+0xa4d/0xbe0 [ 382.116873][T20015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.116885][T20015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.116903][T20015] ? lock_acquire+0x1d1/0x380 [ 382.116913][T20015] ? get_pid_task+0x2a/0x250 [ 382.116942][T20015] ___sys_sendmsg+0x190/0x1e0 [ 382.116960][T20015] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.116976][T20015] ? get_pid_task+0x106/0x250 [ 382.116996][T20015] ? find_held_lock+0x2b/0x80 [ 382.117020][T20015] __sys_sendmsg+0x160/0x210 [ 382.117032][T20015] ? __pfx___sys_sendmsg+0x10/0x10 [ 382.117052][T20015] do_syscall_64+0x123/0x790 [ 382.117072][T20015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.117084][T20015] RIP: 0033:0x7efed059e159 [ 382.117093][T20015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.117104][T20015] RSP: 002b:00007efed13f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.117116][T20015] RAX: ffffffffffffffda RBX: 00007efed0825fa0 RCX: 00007efed059e159 [ 382.117123][T20015] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 382.117130][T20015] RBP: 00007efed13f3090 R08: 0000000000000000 R09: 0000000000000000 [ 382.117137][T20015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.117143][T20015] R13: 00007efed0826038 R14: 00007efed0825fa0 R15: 00007fffe2527358 [ 382.117157][T20015] [ 382.532937][T20029] XFS (nullb0): Invalid superblock magic number [ 382.778241][T20043] FAULT_INJECTION: forcing a failure. [ 382.778241][T20043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.778296][T20043] CPU: 2 UID: 0 PID: 20043 Comm: syz.7.4717 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.778329][T20043] Tainted: [L]=SOFTLOCKUP [ 382.778336][T20043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 382.778345][T20043] Call Trace: [ 382.778350][T20043] [ 382.778356][T20043] dump_stack_lvl+0x100/0x190 [ 382.778382][T20043] should_fail_ex.cold+0x5/0xa [ 382.778404][T20043] _copy_to_user+0x32/0xd0 [ 382.778427][T20043] simple_read_from_buffer+0xcb/0x170 [ 382.778461][T20043] proc_fail_nth_read+0x1af/0x230 [ 382.778482][T20043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.778501][T20043] ? rw_verify_area+0xce/0x6d0 [ 382.778518][T20043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.778532][T20043] vfs_read+0x1e4/0xb40 [ 382.778543][T20043] ? lock_acquire+0x1d1/0x380 [ 382.778555][T20043] ? __fget_files+0x34/0x3d0 [ 382.778569][T20043] ? __pfx_vfs_read+0x10/0x10 [ 382.778578][T20043] ? find_held_lock+0x2b/0x80 [ 382.778594][T20043] ? __fget_files+0x215/0x3d0 [ 382.778610][T20043] ? __fget_files+0x21f/0x3d0 [ 382.778629][T20043] ksys_read+0x12a/0x250 [ 382.778640][T20043] ? __pfx_ksys_read+0x10/0x10 [ 382.778655][T20043] do_syscall_64+0x123/0x790 [ 382.778671][T20043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.778683][T20043] RIP: 0033:0x7efed055e98e [ 382.778693][T20043] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 382.778704][T20043] RSP: 002b:00007efed13f2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 382.778716][T20043] RAX: ffffffffffffffda RBX: 00007efed13f36c0 RCX: 00007efed055e98e [ 382.778724][T20043] RDX: 000000000000000f RSI: 00007efed13f30a0 RDI: 0000000000000004 [ 382.778730][T20043] RBP: 00007efed13f3090 R08: 0000000000000000 R09: 0000000000000000 [ 382.778737][T20043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.778744][T20043] R13: 00007efed0826038 R14: 00007efed0825fa0 R15: 00007fffe2527358 [ 382.778759][T20043] [ 383.112280][T20056] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4721'. [ 383.533040][T20073] Cannot find map_set index 135 as target [ 383.636967][T20080] syzkaller0: entered promiscuous mode [ 383.637051][T20080] syzkaller0: entered allmulticast mode [ 383.673974][T20075] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4729'. [ 383.674024][T20075] tc_dump_action: action bad kind [ 383.706280][T20085] netlink: Invalid conntrack timeout [ 383.706334][T20085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.778828][T20088] Cannot find add_set index 0 as target [ 383.840915][T20090] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 383.844131][T20090] syz.9.4733: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 384.215588][ T65] usb 14-1: new full-speed USB device number 3 using dummy_hcd [ 384.218913][T20095] FAULT_INJECTION: forcing a failure. [ 384.218913][T20095] name failslab, interval 1, probability 0, space 0, times 0 [ 384.218954][T20095] CPU: 0 UID: 0 PID: 20095 Comm: syz.6.4735 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.218993][T20095] Tainted: [L]=SOFTLOCKUP [ 384.218998][T20095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 384.219005][T20095] Call Trace: [ 384.219010][T20095] [ 384.219015][T20095] dump_stack_lvl+0x100/0x190 [ 384.219036][T20095] should_fail_ex.cold+0x5/0xa [ 384.219052][T20095] should_failslab+0xc2/0x120 [ 384.219067][T20095] __kmalloc_noprof+0xfc/0x840 [ 384.219078][T20095] ? rcu_is_watching+0x13/0xc0 [ 384.219093][T20095] ? tomoyo_realpath_from_path+0xb6/0x690 [ 384.219109][T20095] tomoyo_realpath_from_path+0xb6/0x690 [ 384.219124][T20095] tomoyo_path_number_perm+0x23c/0x580 [ 384.219141][T20095] ? tomoyo_path_number_perm+0x22e/0x580 [ 384.219159][T20095] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 384.219182][T20095] ? __lock_acquire+0x5c0/0x1f40 [ 384.219200][T20095] ? __fget_files+0x34/0x3d0 [ 384.219214][T20095] ? find_held_lock+0x2b/0x80 [ 384.219230][T20095] ? hook_file_ioctl_common+0x140/0x440 [ 384.219246][T20095] ? __fget_files+0x21f/0x3d0 [ 384.219262][T20095] security_file_ioctl+0xd3/0x230 [ 384.219274][T20095] __x64_sys_ioctl+0xb7/0x210 [ 384.219286][T20095] do_syscall_64+0x123/0x790 [ 384.219301][T20095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.219313][T20095] RIP: 0033:0x7f049779e159 [ 384.219322][T20095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.219333][T20095] RSP: 002b:00007f04986cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.219345][T20095] RAX: ffffffffffffffda RBX: 00007f0497a25fa0 RCX: 00007f049779e159 [ 384.219352][T20095] RDX: 0000200000000100 RSI: 00000000c178fd02 RDI: 0000000000000004 [ 384.219359][T20095] RBP: 00007f04986cd090 R08: 0000000000000000 R09: 0000000000000000 [ 384.219366][T20095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.219373][T20095] R13: 00007f0497a26038 R14: 00007f0497a25fa0 R15: 00007ffd56d1a3d8 [ 384.219387][T20095] [ 384.221135][T20095] ERROR: Out of memory at tomoyo_realpath_from_path. [ 384.411951][T20099] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 384.417626][ T65] usb 14-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 384.421406][ T65] usb 14-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 384.422287][T20097] overlayfs: missing 'lowerdir' [ 384.438564][ T65] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.439868][ T65] usb 14-1: Product: syz [ 384.440400][ T65] usb 14-1: Manufacturer: syz [ 384.441956][ T65] usb 14-1: SerialNumber: syz [ 384.660025][ T65] usb 14-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 384.668493][ T65] usb 14-1: cannot request logical cluster ID: 3 (err: -71) [ 384.671548][ T65] usb 14-1: unit 80 not found! [ 384.709017][ T65] usb 14-1: USB disconnect, device number 3 [ 384.763317][T15850] udevd[15850]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 384.859179][T20114] netlink: 'syz.2.4742': attribute type 1 has an invalid length. [ 384.859274][T20114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4742'. [ 385.005929][T20124] sit1: entered allmulticast mode [ 385.042729][T20126] FAULT_INJECTION: forcing a failure. [ 385.042729][T20126] name failslab, interval 1, probability 0, space 0, times 0 [ 385.045077][T20126] CPU: 0 UID: 0 PID: 20126 Comm: syz.2.4748 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.045097][T20126] Tainted: [L]=SOFTLOCKUP [ 385.045101][T20126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 385.045108][T20126] Call Trace: [ 385.045112][T20126] [ 385.045128][T20126] dump_stack_lvl+0x100/0x190 [ 385.045149][T20126] should_fail_ex.cold+0x5/0xa [ 385.045166][T20126] should_failslab+0xc2/0x120 [ 385.045183][T20126] kmem_cache_alloc_noprof+0x92/0x6a0 [ 385.045196][T20126] ? do_getname+0x35/0x390 [ 385.045216][T20126] do_getname+0x35/0x390 [ 385.045234][T20126] path_setxattrat+0x360/0x3b0 [ 385.045251][T20126] ? __pfx_path_setxattrat+0x10/0x10 [ 385.045282][T20126] ? xfd_validate_state+0x129/0x190 [ 385.045297][T20126] __x64_sys_setxattr+0xc6/0x140 [ 385.045312][T20126] ? do_syscall_64+0xae/0x790 [ 385.045325][T20126] ? lockdep_hardirqs_on+0x7d/0x110 [ 385.045338][T20126] do_syscall_64+0x123/0x790 [ 385.045353][T20126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.045365][T20126] RIP: 0033:0x7f240799e159 [ 385.045375][T20126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.045387][T20126] RSP: 002b:00007f2408848028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 385.045400][T20126] RAX: ffffffffffffffda RBX: 00007f2407c25fa0 RCX: 00007f240799e159 [ 385.045408][T20126] RDX: 0000200000000500 RSI: 0000200000000180 RDI: 00002000000000c0 [ 385.045415][T20126] RBP: 00007f2407a35024 R08: 0000000000000002 R09: 0000000000000000 [ 385.045422][T20126] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000000 [ 385.045429][T20126] R13: 00007f2407c26038 R14: 00007f2407c25fa0 R15: 00007ffc6d308418 [ 385.045443][T20126] [ 385.123635][T20128] syzkaller0: entered promiscuous mode [ 385.123730][T20128] syzkaller0: entered allmulticast mode [ 385.193397][ T5089] Bluetooth: hci3: Invalid connection link type handle 0x00c8 [ 385.195306][T20131] netlink: Invalid conntrack timeout [ 385.195336][T20131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.367672][T20143] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4755'. [ 385.395606][T20145] 8021q: VLANs not supported on gre0 [ 385.535128][T20155] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 385.708402][T20167] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4766'. [ 385.829057][T20176] Cannot find del_set index 4 as target [ 385.865622][T20178] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4771'. [ 385.869343][T20178] netlink: 'syz.9.4771': attribute type 14 has an invalid length. [ 385.872007][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4771'. [ 385.917129][T20182] netlink: 260 bytes leftover after parsing attributes in process `syz.9.4774'. [ 386.074119][T20195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4778'. [ 386.109566][T20197] netlink: 'syz.2.4780': attribute type 5 has an invalid length. [ 386.243666][T20203] input: syz1 as /devices/virtual/input/input151 [ 386.283860][T20208] syzkaller0: entered promiscuous mode [ 386.283906][T20208] syzkaller0: entered allmulticast mode [ 386.288367][T20208] TC_ACT_REPEAT abuse ? [ 386.440991][T20217] FAULT_INJECTION: forcing a failure. [ 386.440991][T20217] name failslab, interval 1, probability 0, space 0, times 0 [ 386.441062][T20217] CPU: 0 UID: 0 PID: 20217 Comm: syz.6.4787 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.441099][T20217] Tainted: [L]=SOFTLOCKUP [ 386.441105][T20217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.441112][T20217] Call Trace: [ 386.441117][T20217] [ 386.441121][T20217] dump_stack_lvl+0x100/0x190 [ 386.441142][T20217] should_fail_ex.cold+0x5/0xa [ 386.441159][T20217] should_failslab+0xc2/0x120 [ 386.441173][T20217] __kmalloc_noprof+0xfc/0x840 [ 386.441185][T20217] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 386.441203][T20217] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 386.441220][T20217] genl_family_rcv_msg_doit+0xc7/0x300 [ 386.441234][T20217] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 386.441251][T20217] ? bpf_lsm_capable+0x9/0x10 [ 386.441267][T20217] ? security_capable+0x80/0x260 [ 386.441283][T20217] ? ns_capable+0xd2/0xf0 [ 386.441296][T20217] genl_rcv_msg+0x560/0x800 [ 386.441310][T20217] ? __pfx_genl_rcv_msg+0x10/0x10 [ 386.441322][T20217] ? __lock_acquire+0x5c0/0x1f40 [ 386.441333][T20217] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 386.441348][T20217] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 386.441359][T20217] ? __pfx_nl80211_post_doit+0x10/0x10 [ 386.441379][T20217] netlink_rcv_skb+0x159/0x420 [ 386.441390][T20217] ? __pfx_genl_rcv_msg+0x10/0x10 [ 386.441403][T20217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 386.441419][T20217] ? netlink_deliver_tap+0x1ae/0xcc0 [ 386.441438][T20217] genl_rcv+0x28/0x40 [ 386.441449][T20217] netlink_unicast+0x585/0x850 [ 386.441462][T20217] ? __pfx_netlink_unicast+0x10/0x10 [ 386.441473][T20217] ? __pfx_sock_has_perm+0x10/0x10 [ 386.441492][T20217] netlink_sendmsg+0x8b0/0xda0 [ 386.441505][T20217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.441537][T20217] ? selinux_socket_sendmsg+0x198/0x2f0 [ 386.441561][T20217] ____sys_sendmsg+0xa4d/0xbe0 [ 386.441575][T20217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.441587][T20217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.441605][T20217] ? lock_acquire+0x1d1/0x380 [ 386.441616][T20217] ? get_pid_task+0x2a/0x250 [ 386.441632][T20217] ___sys_sendmsg+0x190/0x1e0 [ 386.441649][T20217] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.441664][T20217] ? get_pid_task+0x106/0x250 [ 386.441684][T20217] ? find_held_lock+0x2b/0x80 [ 386.441708][T20217] __sys_sendmsg+0x160/0x210 [ 386.441721][T20217] ? __pfx___sys_sendmsg+0x10/0x10 [ 386.441740][T20217] do_syscall_64+0x123/0x790 [ 386.441756][T20217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.441768][T20217] RIP: 0033:0x7f049779e159 [ 386.441778][T20217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.441788][T20217] RSP: 002b:00007f04986cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.441800][T20217] RAX: ffffffffffffffda RBX: 00007f0497a25fa0 RCX: 00007f049779e159 [ 386.441808][T20217] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 386.441815][T20217] RBP: 00007f04986cd090 R08: 0000000000000000 R09: 0000000000000000 [ 386.441821][T20217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.441828][T20217] R13: 00007f0497a26038 R14: 00007f0497a25fa0 R15: 00007ffd56d1a3d8 [ 386.441843][T20217] [ 386.668901][T20227] syzkaller0: entered promiscuous mode [ 386.670735][T20227] syzkaller0: entered allmulticast mode [ 386.733597][ T5089] Bluetooth: hci3: Invalid connection link type handle 0x00c8 [ 386.740918][T20232] netlink: Invalid conntrack timeout [ 386.740934][T20232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.903799][T20244] input: syz0 as /devices/virtual/input/input152 [ 386.907132][T20244] input: failed to attach handler leds to device input152, error: -6 [ 386.921711][T20241] netlink: 'syz.9.4795': attribute type 3 has an invalid length. [ 386.921750][T20241] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4795'. [ 387.056822][T20250] tipc: Enabling of bearer rejected, failed to enable media [ 387.066731][T20254] fuse: blksize only supported for fuseblk [ 387.232594][T20266] Cannot find del_set index 0 as target [ 387.411390][T20272] CIFS: bad ip= option (ýï|a}( [ 387.411390][T20272] a1) [ 387.414441][T20272] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 387.414531][T20272] CIFS: Unable to determine destination address [ 387.462730][T20278] Cannot find add_set index 0 as target [ 387.782295][T20291] FAULT_INJECTION: forcing a failure. [ 387.782295][T20291] name failslab, interval 1, probability 0, space 0, times 0 [ 387.782349][T20291] CPU: 0 UID: 0 PID: 20291 Comm: syz.9.4814 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.782377][T20291] Tainted: [L]=SOFTLOCKUP [ 387.782382][T20291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 387.782388][T20291] Call Trace: [ 387.782393][T20291] [ 387.782397][T20291] dump_stack_lvl+0x100/0x190 [ 387.782417][T20291] should_fail_ex.cold+0x5/0xa [ 387.782434][T20291] should_failslab+0xc2/0x120 [ 387.782449][T20291] __kmalloc_noprof+0xfc/0x840 [ 387.782461][T20291] ? tomoyo_encode2+0xfb/0x3c0 [ 387.782476][T20291] tomoyo_encode2+0xfb/0x3c0 [ 387.782490][T20291] tomoyo_encode+0x29/0x50 [ 387.782501][T20291] tomoyo_realpath_from_path+0x18c/0x690 [ 387.782517][T20291] tomoyo_path_number_perm+0x23c/0x580 [ 387.782534][T20291] ? tomoyo_path_number_perm+0x22e/0x580 [ 387.782552][T20291] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 387.782575][T20291] ? __lock_acquire+0x5c0/0x1f40 [ 387.782593][T20291] ? __fget_files+0x34/0x3d0 [ 387.782607][T20291] ? find_held_lock+0x2b/0x80 [ 387.782622][T20291] ? hook_file_ioctl_common+0x140/0x440 [ 387.782639][T20291] ? __fget_files+0x21f/0x3d0 [ 387.782654][T20291] security_file_ioctl+0xd3/0x230 [ 387.782666][T20291] __x64_sys_ioctl+0xb7/0x210 [ 387.782684][T20291] do_syscall_64+0x123/0x790 [ 387.782700][T20291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.782712][T20291] RIP: 0033:0x7f5ba199e159 [ 387.782722][T20291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.782733][T20291] RSP: 002b:00007f5ba28d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.782745][T20291] RAX: ffffffffffffffda RBX: 00007f5ba1c25fa0 RCX: 00007f5ba199e159 [ 387.782753][T20291] RDX: 0000200000000100 RSI: 00000000c178fd02 RDI: 0000000000000004 [ 387.782760][T20291] RBP: 00007f5ba28d2090 R08: 0000000000000000 R09: 0000000000000000 [ 387.782767][T20291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.782773][T20291] R13: 00007f5ba1c26038 R14: 00007f5ba1c25fa0 R15: 00007fffd0e38008 [ 387.782788][T20291] [ 387.782834][T20291] ERROR: Out of memory at tomoyo_realpath_from_path. [ 388.026156][T20304] netlink: 'syz.6.4818': attribute type 1 has an invalid length. [ 388.092853][T20313] syzkaller0: entered promiscuous mode [ 388.096425][T20313] syzkaller0: entered allmulticast mode [ 388.171020][ T5089] Bluetooth: hci1: Invalid connection link type handle 0x00c8 [ 388.181254][T20318] netlink: Invalid conntrack timeout [ 388.181299][T20318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.267161][T20339] __nla_validate_parse: 4 callbacks suppressed [ 389.267424][T20339] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4832'. [ 389.355503][T20343] 8021q: VLANs not supported on gre0 [ 389.459949][ T5089] Bluetooth: hci4: SCO packet for unknown connection handle 1883 [ 389.555627][T17928] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 389.583919][T20355] FAULT_INJECTION: forcing a failure. [ 389.583919][T20355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.583973][T20355] CPU: 0 UID: 0 PID: 20355 Comm: syz.2.4838 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.584001][T20355] Tainted: [L]=SOFTLOCKUP [ 389.584006][T20355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 389.584013][T20355] Call Trace: [ 389.584018][T20355] [ 389.584023][T20355] dump_stack_lvl+0x100/0x190 [ 389.584045][T20355] should_fail_ex.cold+0x5/0xa [ 389.584064][T20355] strncpy_from_user+0x3b/0x2d0 [ 389.584078][T20355] do_getname+0x78/0x390 [ 389.584095][T20355] __x64_sys_mkdirat+0x78/0xc0 [ 389.584109][T20355] do_syscall_64+0x123/0x790 [ 389.584127][T20355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.584140][T20355] RIP: 0033:0x7f240799e159 [ 389.584149][T20355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.584160][T20355] RSP: 002b:00007f2408848028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 389.584171][T20355] RAX: ffffffffffffffda RBX: 00007f2407c25fa0 RCX: 00007f240799e159 [ 389.584179][T20355] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 389.584186][T20355] RBP: 00007f2407a35024 R08: 0000000000000000 R09: 0000000000000000 [ 389.584193][T20355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.584200][T20355] R13: 00007f2407c26038 R14: 00007f2407c25fa0 R15: 00007ffc6d308418 [ 389.584214][T20355] [ 389.704984][T17928] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 389.708876][T17928] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 389.708895][T17928] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 389.708954][T17928] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.710772][T17928] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.710788][T17928] usb 11-1: Product: syz [ 389.710796][T17928] usb 11-1: Manufacturer: syz [ 389.710804][T17928] usb 11-1: SerialNumber: syz [ 389.721264][T17928] hub 11-1:1.0: bad descriptor, ignoring hub [ 389.721280][T17928] hub 11-1:1.0: probe with driver hub failed with error -5 [ 389.937932][T17928] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 389.943372][T20375] netlink: 196 bytes leftover after parsing attributes in process `syz.7.4843'. [ 389.943553][T20375] netlink: 196 bytes leftover after parsing attributes in process `syz.7.4843'. [ 389.943576][T20375] netlink: 19 bytes leftover after parsing attributes in process `syz.7.4843'. [ 389.961905][ T43] audit: type=1400 audit(2000000210.501:1526): avc: denied { write } for pid=20370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.052705][T20377] syzkaller0: entered promiscuous mode [ 390.052755][T20377] syzkaller0: entered allmulticast mode [ 390.099248][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.111926][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.118505][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.122601][ T5089] Bluetooth: hci4: Invalid connection link type handle 0x00c8 [ 390.123280][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.128535][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.129431][T20386] netlink: Invalid conntrack timeout [ 390.129445][T20386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.136831][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.141617][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.149224][ T43] audit: type=1400 audit(2000000210.691:1527): avc: denied { write } for pid=20380 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.149751][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.157040][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.161525][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.163100][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.163849][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.166731][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.168801][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.188020][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.193413][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.198943][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.199452][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.204327][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.206828][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.210418][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.211928][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.215950][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.220165][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.229740][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.234898][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.240905][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.245138][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.248148][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.249395][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.251982][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.256212][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.277578][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.278499][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.279462][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.285616][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.289006][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.292255][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.297006][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.298894][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.302155][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.305378][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.308705][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.312131][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.316851][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.318368][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.321781][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.325807][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.330344][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.333454][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.341788][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.345319][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.353194][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.362362][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.367648][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.371308][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.382452][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.387597][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.390717][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.400389][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.406389][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.407005][T20342] usb 11-1: reset high-speed USB device number 27 using dummy_hcd [ 390.408474][T20342] usb 11-1: device reset changed ep0 maxpacket size! [ 390.412865][T12568] usb 11-1: USB disconnect, device number 27 [ 390.419836][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.424907][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.428436][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.442334][T20385] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 390.480584][T12568] usblp0: removed [ 390.562967][ T43] audit: type=1400 audit(2000000211.101:1528): avc: denied { write } for pid=20389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.646567][T12568] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 390.712113][ T43] audit: type=1400 audit(2000000211.251:1529): avc: denied { write } for pid=20398 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.731376][T20403] Cannot find add_set index 0 as target [ 390.811453][T20408] netlink: 260 bytes leftover after parsing attributes in process `syz.7.4851'. [ 390.814522][T12568] usb 11-1: Using ep0 maxpacket: 16 [ 390.817053][T12568] usb 11-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 390.818048][T12568] usb 11-1: config 0 has no interfaces? [ 390.822156][T12568] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.822172][T12568] usb 11-1: Product: syz [ 390.822180][T12568] usb 11-1: Manufacturer: syz [ 390.822188][T12568] usb 11-1: SerialNumber: syz [ 390.865686][T12568] usb 11-1: config 0 descriptor?? [ 391.077718][T20419] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4856'. [ 391.078979][T12568] usb 11-1: USB disconnect, device number 28 [ 391.104399][T20421] netlink: 'syz.7.4858': attribute type 5 has an invalid length. [ 391.401904][T20438] input: syz1 as /devices/virtual/input/input153 [ 391.448189][T20441] syzkaller0: entered promiscuous mode [ 391.450171][T20441] syzkaller0: entered allmulticast mode [ 391.504790][ T5089] Bluetooth: hci4: Invalid connection link type handle 0x00c8 [ 391.507446][T20443] netlink: Invalid conntrack timeout [ 391.509350][T20443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.547592][ T43] audit: type=1400 audit(2000000212.091:1530): avc: denied { audit_read } for pid=20445 comm="syz.9.4866" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 391.548229][T20446] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4866'. [ 391.548244][T20446] netlink: 14 bytes leftover after parsing attributes in process `syz.9.4866'. [ 391.653437][T20448] FAULT_INJECTION: forcing a failure. [ 391.653437][T20448] name failslab, interval 1, probability 0, space 0, times 0 [ 391.653509][T20448] CPU: 0 UID: 0 PID: 20448 Comm: syz.9.4867 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.653562][T20448] Tainted: [L]=SOFTLOCKUP [ 391.653571][T20448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 391.653581][T20448] Call Trace: [ 391.653588][T20448] [ 391.653595][T20448] dump_stack_lvl+0x100/0x190 [ 391.653623][T20448] should_fail_ex.cold+0x5/0xa [ 391.653646][T20448] should_failslab+0xc2/0x120 [ 391.653668][T20448] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 391.653688][T20448] ? __alloc_skb+0x140/0x710 [ 391.653709][T20448] __alloc_skb+0x140/0x710 [ 391.653724][T20448] ? __alloc_skb+0x5b7/0x710 [ 391.653740][T20448] ? __pfx___alloc_skb+0x10/0x10 [ 391.653755][T20448] ? genl_rcv_msg+0x4be/0x800 [ 391.653777][T20448] netlink_ack+0x117/0xb80 [ 391.653802][T20448] netlink_rcv_skb+0x333/0x420 [ 391.653818][T20448] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.653838][T20448] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.653860][T20448] ? netlink_deliver_tap+0x1ae/0xcc0 [ 391.653888][T20448] genl_rcv+0x28/0x40 [ 391.653905][T20448] netlink_unicast+0x585/0x850 [ 391.653925][T20448] ? __pfx_netlink_unicast+0x10/0x10 [ 391.653940][T20448] ? __pfx_sock_has_perm+0x10/0x10 [ 391.653985][T20448] netlink_sendmsg+0x8b0/0xda0 [ 391.654007][T20448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.654026][T20448] ? selinux_socket_sendmsg+0x198/0x2f0 [ 391.654056][T20448] ____sys_sendmsg+0xa4d/0xbe0 [ 391.654077][T20448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.654092][T20448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.654119][T20448] ? lock_acquire+0x1d1/0x380 [ 391.654137][T20448] ? get_pid_task+0x2a/0x250 [ 391.654161][T20448] ___sys_sendmsg+0x190/0x1e0 [ 391.654187][T20448] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.654210][T20448] ? get_pid_task+0x106/0x250 [ 391.654236][T20448] ? find_held_lock+0x2b/0x80 [ 391.654276][T20448] __sys_sendmsg+0x160/0x210 [ 391.654294][T20448] ? __pfx___sys_sendmsg+0x10/0x10 [ 391.654326][T20448] do_syscall_64+0x123/0x790 [ 391.654349][T20448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.654363][T20448] RIP: 0033:0x7f5ba199e159 [ 391.654378][T20448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.654394][T20448] RSP: 002b:00007f5ba28d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.654411][T20448] RAX: ffffffffffffffda RBX: 00007f5ba1c25fa0 RCX: 00007f5ba199e159 [ 391.654422][T20448] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 391.654432][T20448] RBP: 00007f5ba28d2090 R08: 0000000000000000 R09: 0000000000000000 [ 391.654443][T20448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.654453][T20448] R13: 00007f5ba1c26038 R14: 00007f5ba1c25fa0 R15: 00007fffd0e38008 [ 391.654478][T20448] [ 392.042663][T20466] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4876'. [ 392.073142][ T5089] Bluetooth: latency 65520 > 499 [ 392.073254][ T5089] Bluetooth: latency 65520 > 499 [ 392.073407][ T43] audit: type=1400 audit(2000000212.611:1531): avc: denied { setattr } for pid=20467 comm="syz.6.4875" name="loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.074833][T20469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4875'. [ 392.092782][T20469] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.095153][T20469] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.286573][T20483] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 392.286600][T20483] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 392.291242][T20483] vhci_hcd vhci_hcd.0: Device attached [ 392.298421][T20483] fuse: Bad value for 'user_id' [ 392.300099][T20483] fuse: Bad value for 'user_id' [ 392.371119][T20484] vhci_hcd: connection closed [ 392.371450][ T12] vhci_hcd vhci_hcd.7: stop threads [ 392.371495][ T12] vhci_hcd vhci_hcd.7: release socket [ 392.371527][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 392.492464][T20494] Cannot find del_set index 0 as target [ 392.574927][T20500] Cannot find add_set index 0 as target [ 392.697236][T20509] syzkaller0: entered promiscuous mode [ 392.697317][T20509] syzkaller0: entered allmulticast mode [ 392.756626][ T5089] Bluetooth: hci4: Invalid connection link type handle 0x00c8 [ 392.759893][T20511] netlink: Invalid conntrack timeout [ 392.761910][T20511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.901406][T20520] FAULT_INJECTION: forcing a failure. [ 392.901406][T20520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.901516][T20520] CPU: 2 UID: 0 PID: 20520 Comm: syz.9.4895 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.901551][T20520] Tainted: [L]=SOFTLOCKUP [ 392.901558][T20520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 392.901569][T20520] Call Trace: [ 392.901576][T20520] [ 392.901584][T20520] dump_stack_lvl+0x100/0x190 [ 392.901616][T20520] should_fail_ex.cold+0x5/0xa [ 392.901643][T20520] _copy_from_user+0x2e/0xd0 [ 392.901673][T20520] ctl_ioctl+0xf3/0xcc0 [ 392.901708][T20520] ? __pfx_ctl_ioctl+0x10/0x10 [ 392.901759][T20520] ? selinux_file_ioctl+0x13b/0x290 [ 392.901778][T20520] ? selinux_file_ioctl+0xb6/0x290 [ 392.901798][T20520] dm_ctl_ioctl+0x22/0x30 [ 392.901821][T20520] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 392.901863][T20520] __x64_sys_ioctl+0x18e/0x210 [ 392.901885][T20520] do_syscall_64+0x123/0x790 [ 392.901910][T20520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.901928][T20520] RIP: 0033:0x7f5ba199e159 [ 392.901944][T20520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.901984][T20520] RSP: 002b:00007f5ba28d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.902003][T20520] RAX: ffffffffffffffda RBX: 00007f5ba1c25fa0 RCX: 00007f5ba199e159 [ 392.902015][T20520] RDX: 0000200000000100 RSI: 00000000c178fd02 RDI: 0000000000000004 [ 392.902026][T20520] RBP: 00007f5ba28d2090 R08: 0000000000000000 R09: 0000000000000000 [ 392.902037][T20520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.902048][T20520] R13: 00007f5ba1c26038 R14: 00007f5ba1c25fa0 R15: 00007fffd0e38008 [ 392.902073][T20520] [ 393.009015][T20523] Cannot find add_set index 0 as target [ 393.041812][T20527] netlink: 'syz.9.4898': attribute type 1 has an invalid length. [ 393.084377][T20532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.084677][T20532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.343965][T17928] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 393.503964][T17928] usb 11-1: Using ep0 maxpacket: 8 [ 393.513444][T17928] usb 11-1: unable to get BOS descriptor or descriptor too short [ 393.513495][T17928] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 393.521112][T17928] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 393.521201][T17928] usb 11-1: can't read configurations, error -71 [ 393.712774][T20562] 8021q: VLANs not supported on gre0 [ 393.994336][T20582] syzkaller0: entered promiscuous mode [ 393.994371][T20582] syzkaller0: entered allmulticast mode [ 394.062747][T20586] netlink: Invalid conntrack timeout [ 394.062820][T20586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.168537][ T43] audit: type=1400 audit(2000000214.712:1532): avc: denied { accept } for pid=20591 comm="syz.6.4925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 394.333065][ T43] audit: type=1400 audit(2000000214.872:1533): avc: denied { write } for pid=20596 comm="syz.2.4927" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 394.333221][T20597] random: crng reseeded on system resumption [ 394.365492][ T43] audit: type=1400 audit(2000000214.912:1534): avc: denied { read } for pid=20596 comm="syz.2.4927" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 394.365543][ T43] audit: type=1400 audit(2000000214.912:1535): avc: denied { open } for pid=20596 comm="syz.2.4927" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 394.479072][T20611] Cannot find add_set index 0 as target [ 394.539061][T20615] __nla_validate_parse: 5 callbacks suppressed [ 394.539237][T20615] netlink: 260 bytes leftover after parsing attributes in process `syz.6.4932'. [ 394.576111][T20614] syzkaller0: entered promiscuous mode [ 394.576178][T20614] syzkaller0: entered allmulticast mode [ 394.596409][T20614] vlan2: entered allmulticast mode [ 394.875500][T20631] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4939'. [ 394.921658][T20633] netlink: 'syz.2.4940': attribute type 5 has an invalid length. [ 395.068095][T20644] input: syz1 as /devices/virtual/input/input154 [ 395.116356][ T5089] Bluetooth: hci3: command tx timeout [ 395.333961][T17928] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 395.347626][T20646] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 395.347693][T20646] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 395.359920][T20646] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 395.373649][T20646] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 395.374735][T20646] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 395.395410][T20646] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 395.402314][T20646] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 395.402825][T20646] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 395.407611][T20646] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 395.431266][T20664] syzkaller0: entered promiscuous mode [ 395.431307][T20664] syzkaller0: entered allmulticast mode [ 395.502614][ T5089] Bluetooth: hci4: Unable to find connection with handle 0x00c8 [ 395.502872][T20675] netlink: Invalid conntrack timeout [ 395.502884][T20675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.629735][T20680] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4954'. [ 395.724571][T20687] program syz.9.4956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.155046][T20702] Cannot find del_set index 0 as target [ 396.209333][T20703] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 396.212322][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 396.212369][ T43] audit: type=1400 audit(2000000216.752:1537): avc: denied { firmware_load } for pid=20700 comm="syz.7.4961" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 396.212569][T20703] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 396.240307][T20706] Cannot find add_set index 0 as target [ 396.381592][T20718] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc178fd12 [ 396.403573][T20709] could not allocate digest TFM handle cryptd(blake2b-160) [ 396.460204][T20722] FAULT_INJECTION: forcing a failure. [ 396.460204][T20722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.460258][T20722] CPU: 2 UID: 0 PID: 20722 Comm: syz.2.4967 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.460275][T20722] Tainted: [L]=SOFTLOCKUP [ 396.460279][T20722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 396.460286][T20722] Call Trace: [ 396.460290][T20722] [ 396.460295][T20722] dump_stack_lvl+0x100/0x190 [ 396.460326][T20722] should_fail_ex.cold+0x5/0xa [ 396.460343][T20722] _copy_to_user+0x32/0xd0 [ 396.460365][T20722] ctl_ioctl+0x17b/0xcc0 [ 396.460386][T20722] ? __pfx_ctl_ioctl+0x10/0x10 [ 396.460415][T20722] ? selinux_file_ioctl+0x13b/0x290 [ 396.460427][T20722] ? selinux_file_ioctl+0xb6/0x290 [ 396.460439][T20722] dm_ctl_ioctl+0x22/0x30 [ 396.460453][T20722] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 396.460469][T20722] __x64_sys_ioctl+0x18e/0x210 [ 396.460481][T20722] do_syscall_64+0x123/0x790 [ 396.460500][T20722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.460512][T20722] RIP: 0033:0x7f240799e159 [ 396.460521][T20722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.460532][T20722] RSP: 002b:00007f2408848028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.460543][T20722] RAX: ffffffffffffffda RBX: 00007f2407c25fa0 RCX: 00007f240799e159 [ 396.460551][T20722] RDX: 0000200000000100 RSI: 00000000c178fd02 RDI: 0000000000000004 [ 396.460558][T20722] RBP: 00007f2408848090 R08: 0000000000000000 R09: 0000000000000000 [ 396.460564][T20722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.460571][T20722] R13: 00007f2407c26038 R14: 00007f2407c25fa0 R15: 00007ffc6d308418 [ 396.460585][T20722] [ 396.617079][T20730] netlink: 'syz.9.4970': attribute type 1 has an invalid length. [ 396.617134][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4970'. [ 396.690069][ T43] audit: type=1400 audit(2000000217.232:1538): avc: denied { write } for pid=20727 comm="syz.2.4969" name="functions" dev="configfs" ino=13939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.699268][ T43] audit: type=1400 audit(2000000217.242:1539): avc: denied { write } for pid=20727 comm="syz.2.4969" name="c.1" dev="configfs" ino=29734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.702870][ T43] audit: type=1400 audit(2000000217.242:1540): avc: denied { write } for pid=20727 comm="syz.2.4969" name="c.1" dev="configfs" ino=29734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.714467][T20733] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 396.718258][T20735] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 396.733422][T20735] device-mapper: raid: Choosing default region size of 4MiB [ 396.743151][T20735] device-mapper: table: 248:1: raid: RAID device lookup failure (-ENOENT) [ 396.743211][T20735] device-mapper: ioctl: error adding target to table [ 396.945597][T20747] syzkaller0: entered promiscuous mode [ 396.945637][T20747] syzkaller0: entered allmulticast mode [ 397.010159][ T5089] Bluetooth: hci3: Unable to find connection with handle 0x00c8 [ 397.010477][T20751] netlink: Invalid conntrack timeout [ 397.010741][T20751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.250528][T20762] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.343735][ T5817] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 397.353977][ T5089] Bluetooth: hci1: command 0x0c1a tx timeout [ 397.435408][ T5089] Bluetooth: hci4: command 0x0c1a tx timeout [ 397.435435][ T5740] Bluetooth: hci3: command 0x0c1a tx timeout [ 397.494510][ T5817] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.495425][ T5817] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.495441][ T5817] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.495452][ T5817] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.495473][ T5817] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.506515][ T5817] usb 14-1: config 0 descriptor?? [ 397.615006][T20772] 8021q: VLANs not supported on gre0 [ 397.882063][T20781] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4985'. [ 398.009947][ T5817] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 398.132869][T20758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.133253][T20758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.251202][ T5817] usb 14-1: USB disconnect, device number 4 [ 398.306256][T20807] syzkaller0: entered promiscuous mode [ 398.308181][T20807] syzkaller0: entered allmulticast mode [ 398.375428][ T5740] Bluetooth: hci4: Unable to find connection with handle 0x00c8 [ 398.375796][T20810] netlink: Invalid conntrack timeout [ 398.375836][T20810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.799850][T20813] Cannot find add_set index 0 as target [ 398.841244][T20815] netlink: 260 bytes leftover after parsing attributes in process `syz.9.4998'. [ 398.884507][T20817] netlink: 80 bytes leftover after parsing attributes in process `syz.9.4999'. [ 398.889394][T20817] FAULT_INJECTION: forcing a failure. [ 398.889394][T20817] name failslab, interval 1, probability 0, space 0, times 0 [ 398.889650][T20817] CPU: 2 UID: 0 PID: 20817 Comm: syz.9.4999 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.889692][T20817] Tainted: [L]=SOFTLOCKUP [ 398.889700][T20817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 398.889713][T20817] Call Trace: [ 398.889720][T20817] [ 398.889728][T20817] dump_stack_lvl+0x100/0x190 [ 398.889776][T20817] should_fail_ex.cold+0x5/0xa [ 398.889804][T20817] should_failslab+0xc2/0x120 [ 398.889829][T20817] __kvmalloc_node_noprof+0x113/0x9b0 [ 398.889851][T20817] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 398.889877][T20817] ? percpu_ref_init+0xec/0x3f0 [ 398.889900][T20817] ? io_alloc_cache_init+0x38/0x170 [ 398.889953][T20817] io_alloc_cache_init+0x38/0x170 [ 398.889984][T20817] io_uring_setup.cold+0x450/0x1cde [ 398.890006][T20817] ? lock_acquire+0x1d1/0x380 [ 398.890026][T20817] ? avc_has_perm_noaudit+0x56/0x3b0 [ 398.890051][T20817] ? __pfx_io_uring_setup+0x10/0x10 [ 398.890078][T20817] ? find_held_lock+0x2b/0x80 [ 398.890104][T20817] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 398.890127][T20817] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 398.890167][T20817] ? xfd_validate_state+0x129/0x190 [ 398.890199][T20817] __x64_sys_io_uring_setup+0xc2/0x170 [ 398.890222][T20817] do_syscall_64+0x123/0x790 [ 398.890248][T20817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.890266][T20817] RIP: 0033:0x7f5ba199e159 [ 398.890282][T20817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.890298][T20817] RSP: 002b:00007f5ba28d1fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 398.890316][T20817] RAX: ffffffffffffffda RBX: 00002000000000c0 RCX: 00007f5ba199e159 [ 398.890327][T20817] RDX: 0000200000000640 RSI: 00002000000000c0 RDI: 0000000000000025 [ 398.890337][T20817] RBP: 00007f5ba1a35024 R08: 0000000000000000 R09: 0000000000000000 [ 398.890349][T20817] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000640 [ 398.890361][T20817] R13: 0000200000000000 R14: 0000200000000000 R15: 00007fffd0e38008 [ 398.890385][T20817] [ 399.101925][T20826] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5003'. [ 399.253294][T20832] netlink: 'syz.9.5005': attribute type 5 has an invalid length. [ 399.302975][T20835] input: syz1 as /devices/virtual/input/input155 [ 399.417561][T20846] FAULT_INJECTION: forcing a failure. [ 399.417561][T20846] name failslab, interval 1, probability 0, space 0, times 0 [ 399.423211][T20846] CPU: 0 UID: 0 PID: 20846 Comm: syz.9.5010 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.423240][T20846] Tainted: [L]=SOFTLOCKUP [ 399.423245][T20846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 399.423252][T20846] Call Trace: [ 399.423262][T20846] [ 399.423267][T20846] dump_stack_lvl+0x100/0x190 [ 399.423294][T20846] should_fail_ex.cold+0x5/0xa [ 399.423311][T20846] should_failslab+0xc2/0x120 [ 399.423340][T20846] kmem_cache_alloc_noprof+0x92/0x6a0 [ 399.423353][T20846] ? skb_clone+0x190/0x400 [ 399.423371][T20846] skb_clone+0x190/0x400 [ 399.423383][T20846] netlink_deliver_tap+0xaed/0xcc0 [ 399.423404][T20846] netlink_unicast+0x6a5/0x850 [ 399.423417][T20846] ? __pfx_netlink_unicast+0x10/0x10 [ 399.423427][T20846] ? genl_rcv_msg+0x4be/0x800 [ 399.423443][T20846] netlink_ack+0x655/0xb80 [ 399.423457][T20846] netlink_rcv_skb+0x333/0x420 [ 399.423468][T20846] ? __pfx_genl_rcv_msg+0x10/0x10 [ 399.423481][T20846] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 399.423498][T20846] ? netlink_deliver_tap+0x1ae/0xcc0 [ 399.423517][T20846] genl_rcv+0x28/0x40 [ 399.423532][T20846] netlink_unicast+0x585/0x850 [ 399.423545][T20846] ? __pfx_netlink_unicast+0x10/0x10 [ 399.423556][T20846] ? __pfx_sock_has_perm+0x10/0x10 [ 399.423576][T20846] netlink_sendmsg+0x8b0/0xda0 [ 399.423590][T20846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.423602][T20846] ? selinux_socket_sendmsg+0x198/0x2f0 [ 399.423622][T20846] ____sys_sendmsg+0xa4d/0xbe0 [ 399.423636][T20846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.423648][T20846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.423667][T20846] ? lock_acquire+0x1d1/0x380 [ 399.423678][T20846] ? get_pid_task+0x2a/0x250 [ 399.423695][T20846] ___sys_sendmsg+0x190/0x1e0 [ 399.423712][T20846] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.423728][T20846] ? get_pid_task+0x106/0x250 [ 399.423748][T20846] ? find_held_lock+0x2b/0x80 [ 399.423772][T20846] __sys_sendmsg+0x160/0x210 [ 399.423785][T20846] ? __pfx___sys_sendmsg+0x10/0x10 [ 399.423804][T20846] do_syscall_64+0x123/0x790 [ 399.423823][T20846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.423835][T20846] RIP: 0033:0x7f5ba199e159 [ 399.423846][T20846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.423856][T20846] RSP: 002b:00007f5ba28d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.423871][T20846] RAX: ffffffffffffffda RBX: 00007f5ba1c25fa0 RCX: 00007f5ba199e159 [ 399.423879][T20846] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 399.423886][T20846] RBP: 00007f5ba28d2090 R08: 0000000000000000 R09: 0000000000000000 [ 399.423892][T20846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.423899][T20846] R13: 00007f5ba1c26038 R14: 00007f5ba1c25fa0 R15: 00007fffd0e38008 [ 399.423914][T20846] [ 399.427949][T20847] macvtap0: entered allmulticast mode [ 399.427968][T20847] veth0_macvtap: entered allmulticast mode [ 399.444972][ T5740] Bluetooth: hci1: command 0x0c1a tx timeout [ 399.516064][ T5740] Bluetooth: hci3: command 0x0c1a tx timeout [ 399.525419][ T5740] Bluetooth: hci4: command 0x0c1a tx timeout [ 399.604406][T20856] FAULT_INJECTION: forcing a failure. [ 399.604406][T20856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.604453][T20856] CPU: 2 UID: 0 PID: 20856 Comm: syz.9.5014 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.604492][T20856] Tainted: [L]=SOFTLOCKUP [ 399.604497][T20856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 399.604505][T20856] Call Trace: [ 399.604509][T20856] [ 399.604514][T20856] dump_stack_lvl+0x100/0x190 [ 399.604534][T20856] should_fail_ex.cold+0x5/0xa [ 399.604551][T20856] _copy_from_user+0x2e/0xd0 [ 399.604570][T20856] copy_msghdr_from_user+0x9f/0x4c0 [ 399.604587][T20856] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 399.604606][T20856] ? lock_acquire+0x1d1/0x380 [ 399.604618][T20856] ? get_pid_task+0x2a/0x250 [ 399.604636][T20856] ___sys_sendmsg+0x106/0x1e0 [ 399.604653][T20856] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.604669][T20856] ? get_pid_task+0x106/0x250 [ 399.604689][T20856] ? find_held_lock+0x2b/0x80 [ 399.604712][T20856] __sys_sendmsg+0x160/0x210 [ 399.604725][T20856] ? __pfx___sys_sendmsg+0x10/0x10 [ 399.604744][T20856] do_syscall_64+0x123/0x790 [ 399.604760][T20856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.604772][T20856] RIP: 0033:0x7f5ba199e159 [ 399.604781][T20856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.604792][T20856] RSP: 002b:00007f5ba28d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.604804][T20856] RAX: ffffffffffffffda RBX: 00007f5ba1c25fa0 RCX: 00007f5ba199e159 [ 399.604811][T20856] RDX: 0000000000008000 RSI: 0000200000000180 RDI: 0000000000000003 [ 399.604818][T20856] RBP: 00007f5ba28d2090 R08: 0000000000000000 R09: 0000000000000000 [ 399.604825][T20856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.604831][T20856] R13: 00007f5ba1c26038 R14: 00007f5ba1c25fa0 R15: 00007fffd0e38008 [ 399.604845][T20856] [ 399.690830][T20863] syzkaller0: entered promiscuous mode [ 399.690865][T20863] syzkaller0: entered allmulticast mode [ 399.699470][ T5740] Bluetooth: hci1: Unable to find connection with handle 0x00c8 [ 399.702360][T20863] netlink: Invalid conntrack timeout [ 399.704172][T20863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.718790][T20865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5017'. [ 399.718842][T20865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5017'. [ 399.718876][T20865] netlink: 'syz.6.5017': attribute type 7 has an invalid length. [ 399.718898][T20865] netlink: 'syz.6.5017': attribute type 13 has an invalid length. [ 399.871367][ T6835] ================================================================== [ 399.871389][ T6835] BUG: KASAN: slab-use-after-free in drm ** replaying previous printk message ** [ 399.871389][ T6835] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 399.871409][ T6835] Read of size 1 at addr ffff88802df5e809 by task kworker/u33:17/6835 [ 399.871419][ T6835] [ 399.871426][ T6835] CPU: 2 UID: 0 PID: 6835 Comm: kworker/u33:17 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.871442][ T6835] Tainted: [L]=SOFTLOCKUP [ 399.871446][ T6835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 399.871454][ T6835] Workqueue: events_unbound commit_work [ 399.871469][ T6835] Call Trace: [ 399.871473][ T6835] [ 399.871479][ T6835] dump_stack_lvl+0x100/0x190 [ 399.871496][ T6835] print_report+0x13d/0x4b0 [ 399.871513][ T6835] ? __virt_addr_valid+0x239/0x430 [ 399.871525][ T6835] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 399.871538][ T6835] kasan_report+0xdf/0x1c0 [ 399.871553][ T6835] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 399.871569][ T6835] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 399.871582][ T6835] ? preempt_schedule_common+0x3c/0xb0 [ 399.871595][ T6835] ? preempt_schedule_thunk+0x16/0x40 [ 399.871613][ T6835] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 399.871628][ T6835] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 399.871640][ T6835] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 399.871655][ T6835] drm_atomic_helper_commit_tail+0xff/0x130 [ 399.871669][ T6835] commit_tail+0x338/0x430 [ 399.871683][ T6835] process_one_work+0xac7/0x1b10 [ 399.871702][ T6835] ? __pfx_process_one_work+0x10/0x10 [ 399.871719][ T6835] ? lock_acquire+0x1d1/0x380 [ 399.871732][ T6835] ? __pfx_commit_work+0x10/0x10 [ 399.871745][ T6835] worker_thread+0x5ef/0xe50 [ 399.871764][ T6835] ? kthread+0x13a/0x450 [ 399.871778][ T6835] ? __pfx_worker_thread+0x10/0x10 [ 399.871794][ T6835] kthread+0x373/0x450 [ 399.871808][ T6835] ? __pfx_kthread+0x10/0x10 [ 399.871823][ T6835] ret_from_fork+0x730/0xd60 [ 399.871835][ T6835] ? __pfx_ret_from_fork+0x10/0x10 [ 399.871847][ T6835] ? rcu_is_watching+0x13/0xc0 [ 399.871861][ T6835] ? __switch_to+0x800/0x10f0 [ 399.871876][ T6835] ? __pfx_kthread+0x10/0x10 [ 399.871890][ T6835] ret_from_fork_asm+0x1a/0x30 [ 399.871905][ T6835] [ 399.871909][ T6835] [ 399.871911][ T6835] Allocated by task 20866: [ 399.871917][ T6835] kasan_save_stack+0x30/0x50 [ 399.871928][ T6835] kasan_save_track+0x14/0x30 [ 399.871939][ T6835] __kasan_kmalloc+0xaa/0xb0 [ 399.871949][ T6835] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 399.871963][ T6835] drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 399.871979][ T6835] drm_atomic_get_crtc_state+0x1de/0x690 [ 399.871990][ T6835] drm_atomic_set_property+0x165/0x3f90 [ 399.872002][ T6835] drm_mode_atomic_ioctl+0x6ed/0x27c0 [ 399.872014][ T6835] drm_ioctl_kernel+0x1f3/0x3e0 [ 399.872025][ T6835] drm_ioctl+0x5e6/0xc60 [ 399.872035][ T6835] __x64_sys_ioctl+0x18e/0x210 [ 399.872044][ T6835] do_syscall_64+0x123/0x790 [ 399.872056][ T6835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.872066][ T6835] [ 399.872068][ T6835] Freed by task 5843: [ 399.872074][ T6835] kasan_save_stack+0x30/0x50 [ 399.872084][ T6835] kasan_save_track+0x14/0x30 [ 399.872095][ T6835] kasan_save_free_info+0x3b/0x70 [ 399.872111][ T6835] __kasan_slab_free+0x5f/0x80 [ 399.872122][ T6835] kfree+0x22b/0x6d0 [ 399.872136][ T6835] drm_atomic_commit_default_clear+0x465/0x10c0 [ 399.872148][ T6835] __drm_atomic_commit_free+0x185/0x2f0 [ 399.872159][ T6835] drm_atomic_helper_dirtyfb+0x578/0x790 [ 399.872174][ T6835] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 399.872190][ T6835] drm_fb_helper_damage_work+0x4c8/0xab0 [ 399.872203][ T6835] process_one_work+0xac7/0x1b10 [ 399.872218][ T6835] worker_thread+0x5ef/0xe50 [ 399.872232][ T6835] kthread+0x373/0x450 [ 399.872245][ T6835] ret_from_fork+0x730/0xd60 [ 399.872255][ T6835] ret_from_fork_asm+0x1a/0x30 [ 399.872265][ T6835] [ 399.872268][ T6835] The buggy address belongs to the object at ffff88802df5e800 [ 399.872268][ T6835] which belongs to the cache kmalloc-512 of size 512 [ 399.872276][ T6835] The buggy address is located 9 bytes inside of [ 399.872276][ T6835] freed 512-byte region [ffff88802df5e800, ffff88802df5ea00) [ 399.872286][ T6835] [ 399.872288][ T6835] The buggy address belongs to the physical page: [ 399.872293][ T6835] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2df5c [ 399.872303][ T6835] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 399.872311][ T6835] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 399.872320][ T6835] page_type: f5(slab) [ 399.872329][ T6835] raw: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 399.872339][ T6835] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 399.872348][ T6835] head: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 399.872357][ T6835] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 399.872366][ T6835] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 399.872375][ T6835] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 399.872381][ T6835] page dumped because: kasan: bad access detected [ 399.872386][ T6835] page_owner tracks the page as allocated [ 399.872389][ T6835] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8757959038 [ 399.872405][ T6835] post_alloc_hook+0xfd/0x120 [ 399.872420][ T6835] get_page_from_freelist+0x110d/0x35d0 [ 399.872436][ T6835] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 399.872452][ T6835] new_slab+0xa9/0x6e0 [ 399.872466][ T6835] refill_objects+0xe3/0x410 [ 399.872481][ T6835] __pcs_replace_empty_main+0x35e/0x650 [ 399.872496][ T6835] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 399.872513][ T6835] dev_pm_qos_constraints_allocate+0x84/0x4a0 [ 399.872537][ T6835] __dev_pm_qos_add_request+0x4d0/0x5f0 [ 399.872558][ T6835] dev_pm_qos_add_request+0x3a/0x60 [ 399.872575][ T6835] usb_hub_create_port_device+0x485/0xe60 [ 399.872589][ T6835] hub_probe.cold+0x2974/0x2ed9 [ 399.872604][ T6835] usb_probe_interface+0x386/0x9b0 [ 399.872622][ T6835] really_probe+0x241/0xa60 [ 399.872632][ T6835] __driver_probe_device+0x210/0x460 [ 399.872642][ T6835] driver_probe_device+0x4a/0x140 [ 399.872652][ T6835] page_owner free stack trace missing [ 399.872656][ T6835] [ 399.872659][ T6835] Memory state around the buggy address: [ 399.872664][ T6835] ffff88802df5e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 399.872671][ T6835] ffff88802df5e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 399.872678][ T6835] >ffff88802df5e800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.872684][ T6835] ^ [ 399.872690][ T6835] ffff88802df5e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.872697][ T6835] ffff88802df5e900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.872703][ T6835] ================================================================== [ 399.878884][ T6835] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 400.109986][ T6835] CPU: 2 UID: 0 PID: 6835 Comm: kworker/u33:17 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.114637][ T6835] Tainted: [L]=SOFTLOCKUP [ 400.116501][ T6835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 400.120731][ T6835] Workqueue: events_unbound commit_work [ 400.123112][ T6835] Call Trace: [ 400.124557][ T6835] [ 400.125839][ T6835] dump_stack_lvl+0x100/0x190 [ 400.127861][ T6835] vpanic+0x553/0x970 [ 400.129580][ T6835] ? __pfx_vpanic+0x10/0x10 [ 400.131533][ T6835] ? mark_held_locks+0x40/0x70 [ 400.133566][ T6835] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 400.136593][ T6835] panic+0xd1/0xe0 [ 400.138190][ T6835] ? __pfx_panic+0x10/0x10 [ 400.140084][ T6835] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 400.142414][ T6835] ? preempt_schedule_common+0x3c/0xb0 [ 400.144128][ T6835] check_panic_on_warn.cold+0x19/0x34 [ 400.145812][ T6835] end_report.part.0+0x3a/0x90 [ 400.147330][ T6835] kasan_report.cold+0xe/0x18 [ 400.148853][ T6835] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 400.151116][ T6835] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 400.153336][ T6835] ? preempt_schedule_common+0x3c/0xb0 [ 400.155063][ T6835] ? preempt_schedule_thunk+0x16/0x40 [ 400.156755][ T6835] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 400.159137][ T6835] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 400.160969][ T6835] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 400.163011][ T6835] drm_atomic_helper_commit_tail+0xff/0x130 [ 400.164867][ T6835] commit_tail+0x338/0x430 [ 400.166308][ T6835] process_one_work+0xac7/0x1b10 [ 400.167894][ T6835] ? __pfx_process_one_work+0x10/0x10 [ 400.169585][ T6835] ? lock_acquire+0x1d1/0x380 [ 400.171082][ T6835] ? __pfx_commit_work+0x10/0x10 [ 400.172671][ T6835] worker_thread+0x5ef/0xe50 [ 400.174155][ T6835] ? kthread+0x13a/0x450 [ 400.175508][ T6835] ? __pfx_worker_thread+0x10/0x10 [ 400.177123][ T6835] kthread+0x373/0x450 [ 400.178473][ T6835] ? __pfx_kthread+0x10/0x10 [ 400.179940][ T6835] ret_from_fork+0x730/0xd60 [ 400.181405][ T6835] ? __pfx_ret_from_fork+0x10/0x10 [ 400.183048][ T6835] ? rcu_is_watching+0x13/0xc0 [ 400.184559][ T6835] ? __switch_to+0x800/0x10f0 [ 400.186051][ T6835] ? __pfx_kthread+0x10/0x10 [ 400.187497][ T6835] ret_from_fork_asm+0x1a/0x30 [ 400.189026][ T6835] [ 400.190601][ T6835] Kernel Offset: disabled [ 400.191975][ T6835] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:38:58 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=0000000000000000 RCX=1ffff92000026f36 RDX=ffff88801eee8000 RSI=ffffffff81ea3c86 RDI=ffff88801eee8000 RBP=0000000000000003 RSP=ffffc90000137960 R8 =0000000000000005 R9 =0000000000000000 R10=00000000ffffffff R11=53414b203a475542 R12=ffffffff8fbd4e80 R13=ffffc90000137da8 R14=0000000000000000 R15=ffffc90000137db4 RIP=ffffffff81ea3c9d RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b5d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c257e37 CR3=0000000046d9e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ba275d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd0e384f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd0e384f6 00007fffd0e384fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ba1a35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ba1a35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ba1a357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ba1a35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ba1bf2600 00007f5ba1bf25e0 00007f5ba1bf25e8 00007f5ba1bf2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ba275d020 00007f5ba1bf25c0 00007f5ba1bf25d0 00007f5ba1bf2610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ba1bf25f8 00007f5ba1bf25c8 00007f5ba1bf2600 00007f5ba1bf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 aa5673ddb6e0b949 3cf910b98dcedca7 80f22456066fb1f1 f31114e9f3e0ed2c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 202bda6e78d16727 18e033a4a71473bb 5facf84afedc29c8 9fc39f6b8ff35b5d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fd33395c5edec817 e3907f58e41bd9cd a40733a56cdfd52c 24183d71bbb2efe0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d719d7a60d0d5cbb fad579aa5673ddb6 e0b9493cf910b98d cedca780f2245606 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6fb1f1f31114e9f3 e0ed2c702359040d 723f2f97e6f80934 a043eb2d28bcf3f9 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801f69cb00 RSI=ffffffff81b6be9e RDI=ffff88801f69cb00 RBP=0000000000000001 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=0000000000000000 RIP=ffffffff81b6be9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c5d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3952f4 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefee000 Opmask01=0000000000000000 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=00000000ffffff7f Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d14f82b660 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d14f8224b0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8130bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8130b52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30306e6931307069 3330637369454663 6936337064333363 7364333763643332 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000002e646368 5f796d6d75642f6d 726f6674616c702f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000281 0000000000000050 0000000000000000 0000000000302e36 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a6166703a756b 733a302e30312d35 33712d6370727663 3a3174633a554d45 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b04265 RDI=ffffffff9bc67ca0 RBP=ffffffff9bc67c60 RSP=ffffc9000ccef220 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=382e39393320205b R12=0000000000000000 R13=0000000000000061 R14=0000000000000007 R15=ffffc9000ccef538 RIP=ffffffff85b0428f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d5d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efed05aedc0 CR3=0000000034ea7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=0000000030400000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e2d2567600 000055e2d2567600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4c8717d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 203f20205d353338 3654205b5d323037 3137382e39393320 205b203a6c656e72 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20296c6c75662854 504d454552502030 232072656c6c616b 7a79732020202020 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 204c202020202020 2020202020202047 203a6465746e6961 542037313a333375 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f72656b726f776b 203a6d6d6f432035 333836203a444950 2030203a44495520 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32203a555043205d 3533383654205b5d 3632343137382e39 393320205b203a6c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2860575e575e4029 575eef78dd84b641 b3f6814ce298caa2 59ddf43ca4d1f35f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801f698000 RSI=ffffffff81b6be9e RDI=ffff88801f698000 RBP=0000000000000003 RSP=ffffc900001a7df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=0000000000000000 RIP=ffffffff81b6be9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e5d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f664df556c8 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800080000000125 dfdc190000000803 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf9332b66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf9332b66 00007ffdf9332b6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90cac35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90cac35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90cac357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f90cac35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 006c6f72746e6f63 2f746d732f757063 2f6d65747379732f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000