last executing test programs: 33.379024209s ago: executing program 3 (id=184): mkdir(&(0x7f0000000040)='local_sys\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x4, 0x1}, 0x14}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x12}}}}, [""]}, 0x20}}, 0x4001000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000180)="0f013b0f019b1f0000000f20d835200000000f22d80f78bb002000000fc7b5dd000000f00fc1bf0000000066baf80c652e0fc71c7bef66bafc0ced3467660ff82a66baf80cb8761e328845efefbafc0cb027eec4c1edc25a164f", 0x5a}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000540)) connect(r5, &(0x7f0000000280)=@rc={0x1f, @none, 0x2}, 0x80) mount(0x0, &(0x7f00000000c0)='local_sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='local_sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x100400, 0x30) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') sendfile(r7, r7, 0x0, 0x16) 33.185139514s ago: executing program 3 (id=186): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="c4e1fd11de8fc970019e7f6868c7b9e10b0000b84c000000ba000000000f3036f20f707e0088c4c10f7d9109000000260f01b49c00800000f30f090f62cf640f72f655d9e9", 0x45}], 0x1, 0x4, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/sda/device/unload_heads\x00', 0x101001, 0x0) write$UHID_INPUT(r6, &(0x7f0000000440)={0x9, {"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", 0x1000}}, 0x1006) ioctl$HIDIOCGRAWPHYS(r6, 0x80404805, &(0x7f0000001480)) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x103000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000001580)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETSNDBUF(r8, 0x800454d3, &(0x7f00000015c0)) write(r7, &(0x7f0000001500)="7472616e73706f72743d742e306501d8a822381e84b5643d343432302c6e716e3d74", 0x22) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, r3, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x44}]}, 0x2c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @random="a7e97e5efc56", {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000001600)="6566470f38827295b9970b00000f3248b80a800000000000000f23d80f21f835000000400f23f8c40275be4e382e0f54500266baf80cb8046d2c8cef66bafc0c66b8007066ef48b804000000000000000f23c80f21f8350800d0000f23f8259b4dc9dcf30f0714fe", 0xffffffffffffffdc}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.914272112s ago: executing program 3 (id=188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}, 0x1, 0x0, 0x7d, 0x24000005}, 0x0) 32.913637577s ago: executing program 3 (id=190): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0) mount$bind(&(0x7f0000000780)='.\x00', &(0x7f00000007c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000800)='./file0/file0\x00', &(0x7f0000000840)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async, rerun: 64) move_mount(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./file0/file0\x00', 0x200) (async) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x8a241, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d40)='/proc/cpuinfo\x00', 0x0, 0x0) poll(&(0x7f0000000d80)=[{r2, 0x4100}], 0x1, 0x1) r3 = syz_io_uring_setup(0xd3a, &(0x7f0000000180)={0x0, 0x8000402, 0x200, 0x3, 0x3}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x16, 0x0, r3, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, 0xffffffffffffffff, 0x7}}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000340)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000900)={'pim6reg0\x00', @local}) (async, rerun: 64) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x1e9100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000009c0), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r9, 0x0) (async) preadv(r9, &(0x7f0000000a00)=[{&(0x7f0000000a40)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000b00)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_FPU(r9, 0x41a0ae8d, &(0x7f0000000b40)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x1, '\x00', 0xc94}) (async, rerun: 32) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000500)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r12}, &(0x7f00000006c0), &(0x7f0000000700)=r11}, 0x20) (async, rerun: 32) ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x8000001, 0xff92, 0x0, 0x1, 0x10000003}]}) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000d00), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001a0001000000ff7f0000000080"], 0x24}}, 0x0) 32.744865729s ago: executing program 3 (id=193): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280)) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x5, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="800066180a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000300)=0xd, 0x8, 0x0) r4 = userfaultfd(0x80001) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000380)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f00000003c0)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000000a80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002ac0)={0x50, 0x0, r6, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000002b40)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004c00)={0x20, 0x0, 0x3730, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file0\x00', 0xc5001, 0x104) write$FUSE_IOCTL(r7, 0x0, 0x0) 32.415604606s ago: executing program 3 (id=200): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x7, 0x20001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x7, 0x20001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000380)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @broadcast}}) (async) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000380)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000400)={{0x2, 0x4e22, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x3a, {0x2, 0x2, @loopback}, 'geneve1\x00'}) (async) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000400)={{0x2, 0x4e22, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x3a, {0x2, 0x2, @loopback}, 'geneve1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x1, 0x534a}, 0x8) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 32.394706297s ago: executing program 32 (id=200): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x7, 0x20001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x7, 0x20001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000380)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @broadcast}}) (async) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000380)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000400)={{0x2, 0x4e22, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x3a, {0x2, 0x2, @loopback}, 'geneve1\x00'}) (async) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000400)={{0x2, 0x4e22, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x3a, {0x2, 0x2, @loopback}, 'geneve1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x1, 0x534a}, 0x8) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 5.722170991s ago: executing program 2 (id=666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80) pread64(r3, 0x0, 0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000029c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002a00)=[@text32={0x20, &(0x7f0000002880)="0f013b0f019b1f0000000f20d835200000000f22d80f78bb002000000fc7b5dd000000f00fc1bf0000000066baf80c652e0fc71c7bef66bafc0ced3467660ff82a66baf80cb8761e328845efefbafc0cb027eec4c1edc25a164f", 0x5a}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000180)=0x401, 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r5, 0x40104d01, &(0x7f0000000140)="0000010000000000000001") write$sequencer(r2, &(0x7f0000000000)=[@e={0xff, 0xb, 0x1, 0x80, @SEQ_CONTROLLER=0xfe, 0xf, 0xec, 0x5}, @x={0x94, 0x7, "d229216a8f73"}, @l={0x92, 0xc, 0xc0, 0x4, 0xf5, 0x8, 0x3ff}], 0x18) 5.592347221s ago: executing program 2 (id=668): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0xa1ff}, 0x0) 5.590958639s ago: executing program 2 (id=669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x15) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x5, &(0x7f00000000c0)=[{0x4d, 0x1, 0x3, 0x2}, {0x2cf}, {0x27, 0xfc, 0xfd, 0x5}, {0x2, 0x2}, {0x6, 0x6, 0x3, 0x3}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0x5787}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000cc0)={"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"}) dup(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.514948812s ago: executing program 2 (id=673): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010600000000000000002affff0008000200", @ANYRES32=r2, @ANYBLOB="06000600ffff000006000400a1aa00000c0005000201aaaaaaaaaaaa08002f0000000000"], 0x50}}, 0x0) 5.454841166s ago: executing program 2 (id=675): syz_usb_connect(0x3, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c30000000000000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x3, {0x2}}, 0x18) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d171e4c4c55f7973", 0x8}], 0x1}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vcan0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x83, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000340)="430f01c90f01dec744240093670000c744240200000000c7442406000000000f011424c4e135f61318d2b9710500000f3266b8a2000f00d8c4c1597c8700680000b8010000000f01d9670f01d1", 0x4d}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4000000) recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x100}, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000000580)={0x400000100002f, {0x0, 0x0, 0x6300}}) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r10, r3, 0x0) 4.785128935s ago: executing program 4 (id=696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002980), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000029c0)={0x1fe, 0x2, 0x10000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000000000000200000004"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x2, r6, 0x3000000}, 0x27) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000000c0)=""/211, 0xd3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002a00)=[@text32={0x20, &(0x7f0000002880)="0f013b0f019b1f0000000f20d835200000000f22d80f78bb002000000fc7b5dd000000f00fc1bf0000000066baf80c652e0fc71c7bef66bafc0ced3467660ff82a66baf80cb8761e328845efefbafc0cb027eec4c1edc25a164f", 0x5a}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.545474854s ago: executing program 4 (id=701): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000209000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0xeeee0000, 0x5, 0x44, 0x7fff, 0xffffffc0, [{0x80, 0xff, 0x5, '\x00', 0x7}, {0xa, 0x2, 0xf9, '\x00', 0x6}, {0xa0, 0xa, 0x7, '\x00', 0xe6}, {0x4, 0x7, 0x6, '\x00', 0xd}, {0x4, 0x4, 0x6, '\x00', 0x4}, {0x3, 0x4, 0x4, '\x00', 0x22}, {0x12, 0x80}, {0x2, 0xb, 0xcd, '\x00', 0xe4}, {0xd8, 0x8, 0x8, '\x00', 0xc9}, {0x9, 0x62, 0x9, '\x00', 0x7d}, {0x8, 0x40, 0xe4, '\x00', 0xd}, {0xe, 0xc, 0x80, '\x00', 0xb}, {0x2, 0x9, 0x10, '\x00', 0x7}, {0x1, 0x1e, 0x6}, {0xa, 0x0, 0x1, '\x00', 0xfb}, {0x7, 0x4, 0x3, '\x00', 0x81}, {0xc3, 0x37, 0x5, '\x00', 0x7e}, {0x1, 0x0, 0x1, '\x00', 0x2}, {0x0, 0x6, 0x6, '\x00', 0x9}, {0x8, 0x7, 0x16, '\x00', 0x5}, {0x7, 0x5, 0x1, '\x00', 0x1}, {0x9, 0x3, 0x6, '\x00', 0x7f}, {0x51, 0x0, 0x14, '\x00', 0xd}, {0x0, 0x28, 0x34, '\x00', 0x95}]}}) 4.31528148s ago: executing program 4 (id=704): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010600000000000000002affff0008000200", @ANYRES32=r2, @ANYBLOB="06000600ffff000006000400a1aa00000c0005000201aaaaaaaaaaaa08002f0000000000050036000000"], 0x50}}, 0x0) 4.314970809s ago: executing program 4 (id=705): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="e03f030036000b05d25a806c8c6f94f90224fc6010", 0x15}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000500)={'virt_wifi0\x00', 0x6}) ioctl(r0, 0x8b22, &(0x7f0000000540)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000002c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xd5848, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) write(r1, &(0x7f00000001c0)='kyber', 0x5) 4.154592557s ago: executing program 4 (id=706): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendto(r0, &(0x7f0000000040)="7102e3ac6da60f6a4e31c6713dae7d9c814465c89ebf1d77c8de2baa09b1a0136e2a4b02266aa31b0288a76fe8908f4bcafc5cf526534e3ff996a45bb6bb4afb9e095f1cf983d90dbbe6c60bd5aaf2f97fd25c80820e9b8bffe2caaaa81d2874f4c47cd6890f36542966132058c0a785c461f90a6ffed876c79024248f258dbd6c35f3a9d1831528800aac401917ae99fd66a7d8a6c93fd4cdc8bf3dcf6f22c3b9a126c21e2fd7e940c046dc750038f6b3143c830d70d33f73236c14e9fcab2560b1bac92529eb54fd61397d731711b42ee2f6989273590f8a6b034ae09a", 0xde, 0x20044014, &(0x7f0000000140)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRES16=r5], 0x4) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000500)={0x1, 0x0, [{0x8f, 0x0, 0x7ff}]}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)='ubifs\x00', 0x200000, 0x0) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) 3.953954413s ago: executing program 4 (id=708): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000340)="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", 0x559, r2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000008c0)={r3, 0x151}, 0x0, &(0x7f0000000900)="cb4403fa0c2c2a2b515694b3636cdb40a409af8de9000000c11a536275a1d846d66ba988ef1a5b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff7b4d10b0612b63631dd3db62ddf7f7995bac3ad4dea44fc08db964710225005e6dfa030129a395090000000000000039b2c121f1adff27ca5d73440bf81b305f59730ca5b514a79bf7588a370395200d5cfe7c36c2aa003161c206d9aad15c34123c8788b15e4848f38cbe833b34674958c5a28074523ed9aae590be9d3218cce516b364d50d586d380577063256826cb602e8941963dceb907693aeec9c5425d82cfc763ddc19ded432fc63420add5eb2e00aef9f57f62ee80f6c2cc5d65ebf8cd7121e608adf40fbb984763b1043914cc1c06434cae5b6f0e9ae9b1095982771fe0990845b1cd212a1bc06a82a1a0c1a74b443f3906721a3b7bd1b1815146687e4b95df8f3141a1fb4a5863fcda3ee02", 0x0) 3.855328148s ago: executing program 33 (id=708): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000340)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4d359558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc2102030100f9a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000008c0)={r3, 0x151}, 0x0, &(0x7f0000000900)="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", 0x0) 2.323456325s ago: executing program 2 (id=729): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x13c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "690ffbdc36913f1ad941c1e9b2123ac8"}]}, @NL802154_ATTR_SEC_KEY={0xac, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f17a4bb6d3288516a6408f359034cf10"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7a}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d9de5b50563cebb4e4c9cedca2cd83f8c6d8f9b9be76d4d0bd8a787264be8974"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "774af9a4f7df4c1cab8c7cebb591ac8835e64d57a850ce243d431ae7629a2180"}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5409fbba77141fec371e5a2e4a10d748"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x54}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40804}, 0x44000) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000000a80)={0x2020, 0x0, 0x0}, 0x2020) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_BUFINFO(r7, 0xc02c640e, 0x0) write$FUSE_INIT(r4, &(0x7f0000002ac0)={0x50, 0x0, r5, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000002b40)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004c00)={0x20, 0x0, 0x3730, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40280, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl(r10, 0x4048aecb, &(0x7f00000000c0)="070000000000000001000000ffffffff40894088") r11 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file0\x00', 0xc5001, 0x104) write$FUSE_IOCTL(r11, 0x0, 0x0) 2.16331172s ago: executing program 1 (id=732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100287ff3156710bd1cf4830d59bd0000a210cb43ac10f0564f0d5e018c61ab974af2f52848c84427d3e03a65e48ba14b5cbbde6146a4679840e413d68e329b4a5fcb6284409e72501f244b07ae8322ea0c30e4a934f38ef3fd4c5ac11a248f111733ca6f509fd0e392da252a51b76f366f8fbf15a24fd100739c1f255a076d4b04348d2876daec533ffa3f5d247c75e6b4f08afb05128480698b1c759ce8a7c8123d7f5f8e0f9a9547eed8519ce5bcb493db6036d88c56563d39b7c9c210deff85cff8f397edfc3503"], 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x8a4, 0x4) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r3, &(0x7f0000000440), 0xffffffffffffff94, 0x34, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000500)='bbr', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x137) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000580), 0x280449f, &(0x7f0000004980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,\x00']) read$FUSE(r4, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002680)={0x50, 0x0, r5, {0x7, 0x1f, 0xfffffffc, 0x2422212, 0xc5ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x3}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000002700)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)={0x20, 0x0, 0x2, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004800)='./file0\x00', 0x0, 0x40) unshare(0x22020600) r7 = fsopen(&(0x7f0000004840)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) unshare(0x2000680) fsmount(r7, 0x0, 0x8) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40806685, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x8) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="07002bbd700ffedbdf2510008279"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) recvfrom$inet(r3, &(0x7f0000000540)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.642341733s ago: executing program 5 (id=710): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) prlimit64(r0, 0x7, &(0x7f0000000000)={0x0, 0x100}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 1.5747674s ago: executing program 5 (id=736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000006c0)=[@text64={0x40, &(0x7f0000000700)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000740)={{0xfec00000, 0x100000, 0xb, 0x9, 0x3, 0x4f, 0x7c, 0x7, 0x0, 0x2b, 0x9}, {0x2, 0x30000, 0x0, 0x2c, 0x8, 0xfc, 0x7f, 0x1, 0x4, 0xf0, 0x9, 0x80}, {0x2, 0x5000, 0x8, 0x5, 0x1, 0x22, 0x16, 0xa, 0x0, 0x5, 0xf, 0xff}, {0xddd84000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0xf8, 0x3c, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0x8080000, 0xd, 0x3, 0x5, 0x86, 0x9, 0x7f, 0xa, 0x0, 0xf2, 0x43}, {0x30501, 0x6000, 0xb, 0x7c, 0xfe, 0x24, 0x7f, 0xaf, 0x80, 0x4, 0x8, 0x3d}, {0xd000, 0x100000, 0x3, 0x3, 0x8, 0x5, 0x1, 0x3, 0xc5, 0x82, 0x8f, 0x8d}, {0x1, 0x3000, 0x3, 0x5, 0x9, 0xf, 0x3, 0x37, 0x0, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0xd000, 0x8}, 0x80000033, 0x0, 0xeeef0000, 0x2104, 0x4, 0x0, 0x80a0000, [0xfffffffffffffffc, 0x7, 0x7, 0x3]}) 1.291409582s ago: executing program 1 (id=737): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x2000000}, 0x0) 1.225268917s ago: executing program 1 (id=738): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010600000000000000002affff0008000200", @ANYRES32=r2, @ANYBLOB="06000600ffff000006000400a1aa00000c0005000201aaaaaaaaaaaa08002f0000000000050036000000000005"], 0x50}}, 0x0) 1.225030328s ago: executing program 1 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x21) write(r0, &(0x7f0000000140)='\\x01020304 2000000000 0 0', 0x19) r1 = socket(0x40000000015, 0x5, 0x0) symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000280)='./file0\x00', 0x376) lchown(&(0x7f00000002c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x60840, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5ac}, 0x1c) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10102) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback, 0xfffffffc}, 0x1c) 924.240452ms ago: executing program 5 (id=743): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000340)="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", 0x559, r2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000008c0)={r3, 0x151}, 0x0, &(0x7f0000000900)="cb4403fa0c2c2a2b515694b3636cdb40a409af8de9000000c11a536275a1d846d66ba988ef1a5b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff7b4d10b0612763631dd3db62ddf7f7995bac3ad4dea44fc08db964710225005e6dfa030151a395090000000000000039b2c121f1adff27ca5d73440bf81b305f59730ca5b514a79bf7588a370395200d5cfe7c36c2aa003161c206d9aad15c34123c8788b15e4848f38cbe833b34674958c5a28074523ed9aae590be9d3218cce516b364d50d586d380577063256826cb602e8941963dceb907693aeec9c5425d82cfc763ddc19ded432fc63420add5eb2e00aef9f57f62ee80f6c2cc5d65ebf8cd7121e608adf40fbb984763b1043914cc1c06434cae5b6f0e9ae9b1095982771fe0990845b1cd212a1bc06a82a1a0c1a74b443f3906721a3b7bd1b1815146687e4b95df8f3141a1fb4a5863fcda3ee02", 0x0) 923.995369ms ago: executing program 5 (id=744): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x9, 0x0, 0x0, 0x4}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408c4, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x6}, 0x1c) fallocate(0xffffffffffffffff, 0x20, 0xffff, 0xed3e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x5}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='westwood', 0x8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b4804000300640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) inotify_init() r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='9', 0x1) syz_emit_ethernet(0x76, &(0x7f00000004c0)={@broadcast, @random='\x00\x00B\f\x00', @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @mcast2, [@hopopts={0x11}], "fafb17c133d11e59"}}}}}}}, 0x0) 854.144829ms ago: executing program 5 (id=746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100287ff3156710bd1cf4830d59bd0000a210cb43ac10f0564f0d5e018c61ab974af2f52848c84427d3e03a65e48ba14b5cbbde6146a4679840e413d68e329b4a5fcb6284409e72501f244b07ae8322ea0c30e4a934f38ef3fd4c5ac11a248f111733ca6f509fd0e392da252a51b76f366f8fbf15a24fd100739c1f255a076d4b04348d2876daec533ffa3f5d247c75e6b4f08afb05128480698b1c759ce8a7c8123d7f5f8e0f9a9547eed8519ce5bcb493db6036d88c56563d39b7c9c210deff85cff8f397edfc3503"], 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x8a4, 0x4) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r3, &(0x7f0000000440), 0xffffffffffffff94, 0x34, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000500)='bbr', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x137) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000580), 0x280449f, &(0x7f0000004980)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,\x00']) read$FUSE(r4, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002680)={0x50, 0x0, r5, {0x7, 0x1f, 0xfffffffc, 0x2422212, 0xc5ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x3}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000002700)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)={0x20, 0x0, 0x2, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004800)='./file0\x00', 0x0, 0x40) unshare(0x22020600) r7 = fsopen(&(0x7f0000004840)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) unshare(0x2000680) fsmount(r7, 0x0, 0x8) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40806685, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x8) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="07002bbd700ffedbdf2510008279"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) recvfrom$inet(r3, &(0x7f0000000540)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 383.947282ms ago: executing program 0 (id=756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000340)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f00000003c0)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000400)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000004c0)="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", 0xcb3}], 0x5, &(0x7f0000001240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c) fallocate(0xffffffffffffffff, 0x20, 0xffff, 0xed3e) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) acct(&(0x7f0000001800)='./file0\x00') write(r3, &(0x7f0000000140)="14000000140005b7ffccca38b9000000060860eb", 0x14) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f00000011c0), &(0x7f0000001200)=0x40) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001180)='/dev/comedi4\x00', 0x80001, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001500)={{r5, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000015c0)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x1f, 0x18, &(0x7f00000016c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000017c0)={r8}, 0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001440), &(0x7f0000001480)=0xc) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001300)='/dev/bsg/0:0:0:0\x00', 0x400c0, 0x0) ioctl$BSG_IO(r9, 0x2285, &(0x7f0000001340)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffeac, 0x0, 0x0, &(0x7f0000001400)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000001280)={0xe000003, 0xf, &(0x7f00000012c0)=[0x1, 0xde, 0x1, 0xfff, 0xfffffff7, 0x1, 0x159, 0x7ff, 0x3, 0x4, 0x1, 0xfffffffb, 0x2, 0x8, 0x8], 0x6, 0x1}) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b4804000300640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) 381.234608ms ago: executing program 1 (id=757): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010600000000000000002affff0008000200", @ANYRES32=r2, @ANYBLOB="06000600ffff000006000400a1aa00000c0005000201aaaaaaaaaaaa08002f00000000000500360000000000050037"], 0x50}}, 0x0) 303.097809ms ago: executing program 0 (id=758): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x4000000}, 0x0) 301.960529ms ago: executing program 1 (id=759): r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000040126a071edee50e7bb0993a00080003"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x10000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r5], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=@newlink={0x6c, 0x10, 0x100, 0xffffffff, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x280}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x350e83dc}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6, 0x2, 0x1}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0xdd9}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_MODE={0x6, 0x2, 0xfffd}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x5f}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x9}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x810) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x10, 0x16, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0xa00, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000740), 0x200000b1, 0x8a681) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r11, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x30, r12, 0x20b, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000110}, 0x8054) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000840)={r9, 0x0, {0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8, 0x14, "339f020bbe82b398000100000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e8333c691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f044158d9744b66cc530000000400000001000000002200", [0x0, 0x245]}}) dup(r7) ioctl$XFS_IOC_FD_TO_HANDLE(r10, 0x4c09, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42884}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c0006400000000000000002"], 0x70}}, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4000000) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x100}, 0x0) dup3(r2, r0, 0x0) 300.951345ms ago: executing program 0 (id=760): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c000) syz_open_dev$usbfs(0x0, 0x77, 0x109341) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x8, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x53}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x90) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 195.291514ms ago: executing program 0 (id=761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000006c0)=[@text64={0x40, &(0x7f0000000700)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000740)={{0xfec00000, 0x100000, 0xb, 0x9, 0x3, 0x4f, 0x7c, 0x7, 0x0, 0x2b, 0x9}, {0x2, 0x30000, 0x0, 0x2c, 0x8, 0xfc, 0x7f, 0x1, 0x4, 0xf0, 0x9, 0x80}, {0x2, 0x5000, 0x8, 0x5, 0x1, 0x22, 0x16, 0xa, 0x0, 0x5, 0xf, 0xff}, {0xddd84000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0xf8, 0x3c, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0x8080000, 0xd, 0x3, 0x5, 0x86, 0x9, 0x7f, 0xa, 0x0, 0xf2, 0x43}, {0x36600, 0x6000, 0xb, 0x7c, 0xfe, 0x24, 0x7f, 0xaf, 0x80, 0x4, 0x8, 0x3d}, {0xd000, 0x100000, 0x3, 0x3, 0x8, 0x5, 0x1, 0x3, 0xc5, 0x82, 0x8f, 0x8d}, {0x1, 0x3000, 0x3, 0x5, 0x9, 0xf, 0x3, 0x37, 0x0, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0xd000, 0x8}, 0x80000033, 0x0, 0xeeef0000, 0x2104, 0x4, 0x0, 0x80a0000, [0xfffffffffffffffc, 0x7, 0x7, 0x3]}) 25.21586ms ago: executing program 0 (id=762): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x10, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 24.842908ms ago: executing program 0 (id=763): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000001c0)={0x17c04, r0, 0x5000, 0x24000007, 0x2, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x5}, {}, 0x9}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@gettaction={0x28, 0x32, 0x89910f7975f42df, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1d, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) r5 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x2}, 0x0, 0x0, r5) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x39, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f00000008c0)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r5) add_key$user(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, &(0x7f00000009c0)="509ee8", 0x3, r5) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @auto=[0x30, 0x62, 0x36, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x32]}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000b80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000c80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000d00), &(0x7f0000000d40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000d80)={0x0, "001122334b0c66778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbddddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000e00), &(0x7f0000000e40)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000e80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000f80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @desc3}, &(0x7f0000001080)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000001100), &(0x7f0000001140)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000001180)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000001200), &(0x7f0000001240)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000001280)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000001300), &(0x7f0000001340)={'fscrypt:', @auto=[0x61, 0x36, 0x30, 0x30, 0x36, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x63]}, &(0x7f0000001380)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000001440), &(0x7f0000001480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f00000014c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000001540), &(0x7f0000001580)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f00000015c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000001640), &(0x7f0000001680)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x36]}, &(0x7f00000016c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) add_key$user(&(0x7f0000001740), &(0x7f0000001780)={'syz', 0x2}, &(0x7f00000017c0)='c', 0x1, r5) 0s ago: executing program 5 (id=764): r0 = socket$nl_rdma(0x10, 0x3, 0x14) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000380)={0x0, 0x2}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="186200000500000000000007000000186000000b0000000000000004000000186b00000eadb9557e9680ef246a3d881c160000000000000032440000185900000d000000000000000000000085100000fcffffff8500000096031c65fa1465c60e00000000000000000000f00386070000000100"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x27}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x1411, 0x1}, 0x20}}, 0x40000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semget(0x3, 0x4, 0x39c) sched_setaffinity(0x0, 0x0, 0x0) userfaultfd(0x80001) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) fadvise64(r1, 0xdb, 0x2, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13d, 0x5}}, 0x20) semop(0x0, &(0x7f00000001c0)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x1000}], 0x2) semop(0x0, &(0x7f00000002c0)=[{0x1, 0xff80, 0x1400}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000300)=[0x6, 0x7fff]) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="38000000240001050100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002000500010003000000", 0x38) r4 = syz_open_dev$video(&(0x7f0000000140), 0x8, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000005c0)={0x1, {{0x2, 0x4e22, @multicast1}}, 0x1}, 0x90) poll(&(0x7f0000000180)=[{r4, 0x4}], 0x1, 0x9) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0000ffff"}, 0x0, 0x2, {0x0}, 0x400000}) write(r3, &(0x7f0000000100)="240000002a00010002000000000000000000000001000000010001000000010000000000", 0x24) write(r3, &(0x7f0000000200)="240000002a0001030300000000000000000000000100"/36, 0x24) kernel console output (not intermixed with test programs): 40.111332][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.111495][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.111515][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.111534][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.137630][ T67] Bluetooth: hci3: command tx timeout [ 40.137744][ T67] Bluetooth: hci0: command tx timeout [ 40.137796][ T67] Bluetooth: hci1: command tx timeout [ 40.137844][ T67] Bluetooth: hci2: command tx timeout [ 40.143123][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.143135][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.145439][ T5783] veth0_vlan: entered promiscuous mode [ 40.146886][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.165058][ T5783] veth1_vlan: entered promiscuous mode [ 40.165367][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.165378][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.179770][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.206379][ T5783] veth0_macvtap: entered promiscuous mode [ 40.211581][ T5783] veth1_macvtap: entered promiscuous mode [ 40.216384][ T5795] veth0_vlan: entered promiscuous mode [ 40.230586][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.237952][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.241759][ T5785] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.245258][ T5795] veth1_vlan: entered promiscuous mode [ 40.261594][ T5780] veth0_vlan: entered promiscuous mode [ 40.273056][ T5780] veth1_vlan: entered promiscuous mode [ 40.305109][ T5795] veth0_macvtap: entered promiscuous mode [ 40.307951][ T5795] veth1_macvtap: entered promiscuous mode [ 40.315573][ T5780] veth0_macvtap: entered promiscuous mode [ 40.316762][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.316774][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.327525][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.327682][ T5780] veth1_macvtap: entered promiscuous mode [ 40.332689][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.352060][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.354118][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.354502][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.361935][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.411003][ T5943] Zero length message leads to an empty skb [ 40.413526][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.413538][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.417257][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.437930][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.437941][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.459465][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.459478][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.486459][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.486473][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.496926][ T5891] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.496953][ T5891] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.496972][ T5891] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.496991][ T5891] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.497009][ T5891] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.497028][ T5891] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.497045][ T5891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.497063][ T5891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.497080][ T5891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.497098][ T5891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.497115][ T5891] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.572045][ T5958] kvm: Disabled LAPIC found during irq injection [ 40.619802][ T24] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 40.634327][ T5963] device-mapper: table: 248:0: crypt: Error decoding and setting key (-EINVAL) [ 40.634343][ T5963] device-mapper: ioctl: error adding target to table [ 40.652735][ T5967] TCP: TCP_TX_DELAY enabled [ 40.836707][ T5792] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 40.836729][ T5792] CPU: 3 UID: 0 PID: 5792 Comm: kworker/u34:6 Not tainted syzkaller #0 PREEMPT(full) [ 40.836750][ T5792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.836762][ T5792] Workqueue: hci2 hci_rx_work [ 40.836817][ T5792] Call Trace: [ 40.836832][ T5792] [ 40.836838][ T5792] dump_stack_lvl+0x100/0x190 [ 40.836889][ T5792] sysfs_warn_dup.cold+0x1c/0x28 [ 40.836909][ T5792] sysfs_create_dir_ns+0x24b/0x2b0 [ 40.836927][ T5792] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 40.836942][ T5792] ? find_held_lock+0x2b/0x80 [ 40.836956][ T5792] ? kobject_add_internal+0x25f/0x930 [ 40.836973][ T5792] ? kobject_add_internal+0x25f/0x930 [ 40.836989][ T5792] ? do_raw_spin_unlock+0x145/0x1e0 [ 40.837002][ T5792] kobject_add_internal+0x2c8/0x930 [ 40.837021][ T5792] kobject_add+0x16a/0x1e0 [ 40.837039][ T5792] ? __pfx_kobject_add+0x10/0x10 [ 40.837053][ T5792] ? class_to_subsys+0x10f/0x150 [ 40.837084][ T5792] ? kobject_put+0xb9/0x640 [ 40.837098][ T5792] ? _raw_spin_unlock+0x28/0x50 [ 40.837119][ T5792] device_add+0x294/0x1970 [ 40.837135][ T5792] ? __pfx_dev_set_name+0x10/0x10 [ 40.837154][ T5792] ? __pfx_device_add+0x10/0x10 [ 40.837170][ T5792] ? mgmt_send_event_skb+0x2fb/0x460 [ 40.837189][ T5792] hci_conn_add_sysfs+0x1a3/0x260 [ 40.837232][ T5792] le_conn_complete_evt+0x12f9/0x2200 [ 40.837257][ T5792] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 40.837276][ T5792] ? hci_event_packet+0x186/0xcd0 [ 40.837300][ T5792] hci_le_conn_complete_evt+0x23c/0x3a0 [ 40.837321][ T5792] ? skb_pull_data+0x15f/0x1e0 [ 40.837339][ T5792] hci_le_meta_evt+0x34a/0x5f0 [ 40.837352][ T5792] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 40.837374][ T5792] hci_event_packet+0x51c/0xcd0 [ 40.837394][ T5792] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 40.837407][ T5792] ? __pfx_hci_event_packet+0x10/0x10 [ 40.837429][ T5792] ? lockdep_hardirqs_on+0x7d/0x110 [ 40.837450][ T5792] hci_rx_work+0x6ea/0x10c0 [ 40.837472][ T5792] process_one_work+0xac7/0x1b10 [ 40.837493][ T5792] ? __pfx_process_one_work+0x10/0x10 [ 40.837507][ T5792] ? lock_acquire+0x1d1/0x380 [ 40.837527][ T5792] ? __pfx_hci_rx_work+0x10/0x10 [ 40.837546][ T5792] worker_thread+0x5ef/0xe50 [ 40.837563][ T5792] ? __pfx_worker_thread+0x10/0x10 [ 40.837576][ T5792] ? kthread+0x13a/0x450 [ 40.837587][ T5792] ? __pfx_worker_thread+0x10/0x10 [ 40.837599][ T5792] kthread+0x373/0x450 [ 40.837609][ T5792] ? __pfx_kthread+0x10/0x10 [ 40.837621][ T5792] ret_from_fork+0x730/0xd60 [ 40.837636][ T5792] ? save_fpregs_to_fpstate+0x19c/0x270 [ 40.837655][ T5792] ? __pfx_ret_from_fork+0x10/0x10 [ 40.837670][ T5792] ? rcu_is_watching+0x13/0xc0 [ 40.837683][ T5792] ? __switch_to+0x800/0x10e0 [ 40.837694][ T5792] ? __pfx_kthread+0x10/0x10 [ 40.837706][ T5792] ret_from_fork_asm+0x1a/0x30 [ 40.837728][ T5792] [ 40.837744][ T5792] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 40.837762][ T5792] Bluetooth: hci2: failed to register connection device [ 40.838326][ T5988] bond0: option arp_interval: invalid value ( ) [ 40.838340][ T5988] bond0: option arp_interval: allowed values 0 - 2147483647 [ 40.915478][ T5991] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 40.917810][ T5991] bond1: (slave lo): Enslaving as an active interface with an up link [ 40.918765][ T5991] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 40.922465][ T5991] capability: warning: `syz.2.13' uses 32-bit capabilities (legacy support in use) [ 41.210292][ T5997] FAULT_INJECTION: forcing a failure. [ 41.210292][ T5997] name failslab, interval 1, probability 0, space 0, times 1 [ 41.210319][ T5997] CPU: 3 UID: 0 PID: 5997 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT(full) [ 41.210357][ T5997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.210367][ T5997] Call Trace: [ 41.210373][ T5997] [ 41.210387][ T5997] dump_stack_lvl+0x100/0x190 [ 41.210423][ T5997] should_fail_ex.cold+0x5/0xa [ 41.210452][ T5997] should_failslab+0xc2/0x120 [ 41.210472][ T5997] __kvmalloc_node_noprof+0x113/0x9b0 [ 41.210501][ T5997] ? __kasan_kmalloc+0xaa/0xb0 [ 41.210528][ T5997] ? do_replace_table+0x1c5/0x750 [ 41.210553][ T5997] do_replace_table+0x1c5/0x750 [ 41.210577][ T5997] xt_register_table+0x384/0x9a0 [ 41.210602][ T5997] ? __pfx_xt_register_table+0x10/0x10 [ 41.210622][ T5997] ? xt_alloc_table_info+0x44/0xa0 [ 41.210652][ T5997] ? __asan_memset+0x23/0x50 [ 41.210681][ T5997] ip6t_register_table+0x137/0x2c0 [ 41.210712][ T5997] ? __pfx_ip6t_register_table+0x10/0x10 [ 41.210739][ T5997] ? __kmalloc_noprof+0x350/0x840 [ 41.210774][ T5997] ? ip6t_alloc_initial_table+0x5ed/0x730 [ 41.210805][ T5997] ip6table_mangle_table_init+0x40/0x60 [ 41.210835][ T5997] xt_find_table_lock+0x2db/0x520 [ 41.210869][ T5997] do_ip6t_get_ctl+0x586/0xc30 [ 41.210898][ T5997] ? __mutex_unlock_slowpath+0x35d/0x930 [ 41.210930][ T5997] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 41.210958][ T5997] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 41.210999][ T5997] ? nf_sockopt_find.isra.0+0x222/0x290 [ 41.211028][ T5997] nf_getsockopt+0x7c/0xe0 [ 41.211054][ T5997] ipv6_getsockopt+0x207/0x2a0 [ 41.211086][ T5997] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 41.211113][ T5997] ? lock_acquire+0x1d1/0x380 [ 41.211138][ T5997] ? __might_fault+0xc5/0x140 [ 41.211158][ T5997] ? find_held_lock+0x2b/0x80 [ 41.211182][ T5997] udpv6_getsockopt+0xc0/0x240 [ 41.211204][ T5997] ? __pfx_udpv6_getsockopt+0x10/0x10 [ 41.211231][ T5997] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 41.211262][ T5997] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 41.211287][ T5997] do_sock_getsockopt+0x415/0x570 [ 41.211309][ T5997] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 41.211333][ T5997] ? __fget_files+0x34/0x3d0 [ 41.211356][ T5997] ? find_held_lock+0x2b/0x80 [ 41.211388][ T5997] ? __fget_files+0x21f/0x3d0 [ 41.211417][ T5997] __sys_getsockopt+0x148/0x260 [ 41.211445][ T5997] ? __x64_sys_getsockopt+0xbd/0x160 [ 41.211463][ T5997] __x64_sys_getsockopt+0xbd/0x160 [ 41.211483][ T5997] ? do_syscall_64+0xae/0x790 [ 41.211510][ T5997] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.211540][ T5997] do_syscall_64+0x123/0x790 [ 41.211571][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.211592][ T5997] RIP: 0033:0x7f8f5019f559 [ 41.211608][ T5997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.211625][ T5997] RSP: 002b:00007f8f51142028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 41.211672][ T5997] RAX: ffffffffffffffda RBX: 00007f8f50425fa0 RCX: 00007f8f5019f559 [ 41.211683][ T5997] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000005 [ 41.211694][ T5997] RBP: 00007f8f50236b20 R08: 0000200000000c00 R09: 0000000000000000 [ 41.211706][ T5997] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.211717][ T5997] R13: 00007f8f50426038 R14: 00007f8f50425fa0 R15: 00007ffd460af898 [ 41.211744][ T5997] [ 41.214711][ T5997] FAULT_INJECTION: forcing a failure. [ 41.214711][ T5997] name failslab, interval 1, probability 0, space 0, times 0 [ 41.214735][ T5997] CPU: 3 UID: 0 PID: 5997 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT(full) [ 41.214756][ T5997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.214767][ T5997] Call Trace: [ 41.214773][ T5997] [ 41.214781][ T5997] dump_stack_lvl+0x100/0x190 [ 41.214835][ T5997] should_fail_ex.cold+0x5/0xa [ 41.214864][ T5997] should_failslab+0xc2/0x120 [ 41.214884][ T5997] __kmalloc_node_noprof+0xff/0x870 [ 41.214910][ T5997] ? __get_vm_area_node+0x1ff/0x350 [ 41.214937][ T5997] ? __get_vm_area_node+0x22b/0x350 [ 41.214964][ T5997] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 41.214988][ T5997] __vmalloc_node_range_noprof+0x424/0x1440 [ 41.215006][ T5997] ? __mutex_lock+0x267/0x1c10 [ 41.215024][ T5997] ? xt_find_table_lock+0x307/0x520 [ 41.215059][ T5997] ? do_ip6t_get_ctl+0x7e0/0xc30 [ 41.215094][ T5997] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 41.215113][ T5997] ? ip6table_filter_net_init+0x40/0x60 [ 41.215141][ T5997] ? ip6table_mangle_table_init+0x4a/0x60 [ 41.215175][ T5997] ? do_ip6t_get_ctl+0x7e0/0xc30 [ 41.215201][ T5997] __vmalloc_node_noprof+0xad/0xf0 [ 41.215219][ T5997] ? do_ip6t_get_ctl+0x7e0/0xc30 [ 41.215249][ T5997] do_ip6t_get_ctl+0x7e0/0xc30 [ 41.215278][ T5997] ? __mutex_unlock_slowpath+0x35d/0x930 [ 41.215307][ T5997] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 41.215334][ T5997] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 41.215374][ T5997] ? nf_sockopt_find.isra.0+0x222/0x290 [ 41.215411][ T5997] nf_getsockopt+0x7c/0xe0 [ 41.215438][ T5997] ipv6_getsockopt+0x207/0x2a0 [ 41.215468][ T5997] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 41.215494][ T5997] ? lock_acquire+0x1d1/0x380 [ 41.215518][ T5997] ? __might_fault+0xc5/0x140 [ 41.215538][ T5997] ? find_held_lock+0x2b/0x80 [ 41.215562][ T5997] udpv6_getsockopt+0xc0/0x240 [ 41.215584][ T5997] ? __pfx_udpv6_getsockopt+0x10/0x10 [ 41.215610][ T5997] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 41.215642][ T5997] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 41.215666][ T5997] do_sock_getsockopt+0x415/0x570 [ 41.215689][ T5997] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 41.215712][ T5997] ? __fget_files+0x34/0x3d0 [ 41.215735][ T5997] ? find_held_lock+0x2b/0x80 [ 41.215761][ T5997] ? __fget_files+0x21f/0x3d0 [ 41.215789][ T5997] __sys_getsockopt+0x148/0x260 [ 41.215819][ T5997] ? __x64_sys_getsockopt+0xbd/0x160 [ 41.215838][ T5997] __x64_sys_getsockopt+0xbd/0x160 [ 41.215855][ T5997] ? do_syscall_64+0xae/0x790 [ 41.215882][ T5997] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.215910][ T5997] do_syscall_64+0x123/0x790 [ 41.215941][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.215961][ T5997] RIP: 0033:0x7f8f5019f559 [ 41.215976][ T5997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.215993][ T5997] RSP: 002b:00007f8f51142028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 41.216011][ T5997] RAX: ffffffffffffffda RBX: 00007f8f50425fa0 RCX: 00007f8f5019f559 [ 41.216023][ T5997] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000005 [ 41.216034][ T5997] RBP: 00007f8f50236b20 R08: 0000200000000c00 R09: 0000000000000000 [ 41.216045][ T5997] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.216056][ T5997] R13: 00007f8f50426038 R14: 00007f8f50425fa0 R15: 00007ffd460af898 [ 41.216082][ T5997] [ 41.216310][ T5997] syz.2.15: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 41.216459][ T5997] CPU: 3 UID: 0 PID: 5997 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT(full) [ 41.216479][ T5997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.216489][ T5997] Call Trace: [ 41.216495][ T5997] [ 41.216502][ T5997] dump_stack_lvl+0x100/0x190 [ 41.216534][ T5997] warn_alloc.cold+0x9e/0xb2 [ 41.216556][ T5997] ? __pfx_warn_alloc+0x10/0x10 [ 41.216603][ T5997] ? dump_stack_lvl+0x17c/0x190 [ 41.216632][ T5997] ? rcu_is_watching+0x13/0xc0 [ 41.216655][ T5997] ? __kasan_kmalloc+0x8a/0xb0 [ 41.216683][ T5997] ? __kmalloc_node_noprof+0x360/0x870 [ 41.216709][ T5997] ? __get_vm_area_node+0x1ff/0x350 [ 41.216736][ T5997] ? __get_vm_area_node+0x22b/0x350 [ 41.216762][ T5997] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 41.216787][ T5997] __vmalloc_node_range_noprof+0x107c/0x1440 [ 41.216807][ T5997] ? xt_find_table_lock+0x307/0x520 [ 41.216842][ T5997] ? do_ip6t_get_ctl+0x7e0/0xc30 [ 41.216875][ T5997] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 41.216894][ T5997] ? ip6table_filter_net_init+0x40/0x60 [ 41.216938][ T5997] ? ip6table_mangle_table_init+0x4a/0x60 [ 41.216976][ T5997] ? do_ip6t_get_ctl+0x7e0/0xc30 [ 41.217002][ T5997] __vmalloc_node_noprof+0xad/0xf0 [ 41.217020][ T5997] ? do_ip6t_get_ctl+0x7e0/0xc30 [ 41.217050][ T5997] do_ip6t_get_ctl+0x7e0/0xc30 [ 41.217079][ T5997] ? __mutex_unlock_slowpath+0x35d/0x930 [ 41.217110][ T5997] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 41.217138][ T5997] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 41.217178][ T5997] ? nf_sockopt_find.isra.0+0x222/0x290 [ 41.217231][ T5997] nf_getsockopt+0x7c/0xe0 [ 41.217258][ T5997] ipv6_getsockopt+0x207/0x2a0 [ 41.217288][ T5997] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 41.217314][ T5997] ? lock_acquire+0x1d1/0x380 [ 41.217339][ T5997] ? __might_fault+0xc5/0x140 [ 41.217360][ T5997] ? find_held_lock+0x2b/0x80 [ 41.217389][ T5997] udpv6_getsockopt+0xc0/0x240 [ 41.217410][ T5997] ? __pfx_udpv6_getsockopt+0x10/0x10 [ 41.217436][ T5997] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 41.217467][ T5997] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 41.217491][ T5997] do_sock_getsockopt+0x415/0x570 [ 41.217514][ T5997] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 41.217540][ T5997] ? __fget_files+0x34/0x3d0 [ 41.217562][ T5997] ? find_held_lock+0x2b/0x80 [ 41.217589][ T5997] ? __fget_files+0x21f/0x3d0 [ 41.217617][ T5997] __sys_getsockopt+0x148/0x260 [ 41.217643][ T5997] ? __x64_sys_getsockopt+0xbd/0x160 [ 41.217661][ T5997] __x64_sys_getsockopt+0xbd/0x160 [ 41.217678][ T5997] ? do_syscall_64+0xae/0x790 [ 41.217704][ T5997] ? lockdep_hardirqs_on+0x7d/0x110 [ 41.217732][ T5997] do_syscall_64+0x123/0x790 [ 41.217763][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.217782][ T5997] RIP: 0033:0x7f8f5019f559 [ 41.217798][ T5997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.217814][ T5997] RSP: 002b:00007f8f51142028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 41.217831][ T5997] RAX: ffffffffffffffda RBX: 00007f8f50425fa0 RCX: 00007f8f5019f559 [ 41.217842][ T5997] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000005 [ 41.217853][ T5997] RBP: 00007f8f50236b20 R08: 0000200000000c00 R09: 0000000000000000 [ 41.217864][ T5997] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.217875][ T5997] R13: 00007f8f50426038 R14: 00007f8f50425fa0 R15: 00007ffd460af898 [ 41.217900][ T5997] [ 41.218558][ T5997] Mem-Info: [ 41.218569][ T5997] active_anon:7986 inactive_anon:0 isolated_anon:0 [ 41.218569][ T5997] active_file:0 inactive_file:55083 isolated_file:0 [ 41.218569][ T5997] unevictable:1000 dirty:1812 writeback:0 [ 41.218569][ T5997] slab_reclaimable:12111 slab_unreclaimable:67268 [ 41.218569][ T5997] mapped:24197 shmem:1559 pagetables:1124 [ 41.218569][ T5997] sec_pagetables:299 bounce:0 [ 41.218569][ T5997] kernel_misc_reclaimable:0 [ 41.218569][ T5997] free:462498 free_pcp:10718 free_cma:0 [ 41.218613][ T5997] Node 0 active_anon:31944kB inactive_anon:0kB active_file:0kB inactive_file:220128kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:96788kB dirty:7200kB writeback:0kB shmem:4236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13376kB pagetables:4304kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 41.218661][ T5997] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:48kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 41.218706][ T5997] Node 0 DMA free:15360kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 41.218756][ T5997] lowmem_reserve[]: 0 1202 1202 1202 1202 [ 41.218789][ T5997] Node 0 DMA32 free:192980kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31944kB inactive_anon:0kB active_file:0kB inactive_file:220128kB unevictable:2000kB writepending:7200kB zspages:0kB present:2080628kB managed:1230980kB mlocked:0kB bounce:0kB free_pcp:39388kB local_pcp:11932kB free_cma:0kB [ 41.218893][ T5997] lowmem_reserve[]: 0 0 0 0 0 [ 41.218926][ T5997] Node 1 Normal free:1641652kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB writepending:48kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:3484kB local_pcp:548kB free_cma:0kB [ 41.218976][ T5997] lowmem_reserve[]: 0 0 0 0 0 [ 41.219006][ T5997] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 41.219125][ T5997] Node 0 DMA32: 3*4kB (UME) 2*8kB (UE) 1*16kB (M) 1*32kB (U) 3*64kB (UME) 2*128kB (UM) 1*256kB (E) 3*512kB (UME) 0*1024kB 3*2048kB (UME) 45*4096kB (M) = 192780kB [ 41.219256][ T5997] Node 1 Normal: 1*4kB (U) 1*8kB (M) 1*16kB (M) 3*32kB (M) 2*64kB (M) 4*128kB (UM) 0*256kB 5*512kB (UM) 0*1024kB 2*2048kB (UM) 399*4096kB (M) = 1641724kB [ 41.219388][ T5997] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 41.219402][ T5997] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 41.219415][ T5997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 41.219428][ T5997] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 41.219441][ T5997] 56638 total pagecache pages [ 41.219447][ T5997] 0 pages in swap cache [ 41.219453][ T5997] Free swap = 124996kB [ 41.219459][ T5997] Total swap = 124996kB [ 41.219465][ T5997] 1048443 pages RAM [ 41.219471][ T5997] 0 pages HighMem/MovableOnly [ 41.219477][ T5997] 291388 pages reserved [ 41.219483][ T5997] 0 pages cma reserved [ 41.575319][ T6010] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 41.654083][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 41.657639][ T6016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6016 comm=syz.1.21 [ 41.671029][ T6014] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 41.818417][ T6027] ip_tables: iptables: counters copy to user failed while replacing table [ 41.820373][ T6027] ip_tables: iptables: counters copy to user failed while replacing table [ 41.872074][ T6029] FAULT_INJECTION: forcing a failure. [ 41.872074][ T6029] name fail_futex, interval 1, probability 0, space 0, times 1 [ 41.872093][ T6029] CPU: 2 UID: 0 PID: 6029 Comm: syz.2.26 Not tainted syzkaller #0 PREEMPT(full) [ 41.872106][ T6029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.872113][ T6029] Call Trace: [ 41.872118][ T6029] [ 41.872123][ T6029] dump_stack_lvl+0x100/0x190 [ 41.872193][ T6029] should_fail_ex.cold+0x5/0xa [ 41.872214][ T6029] get_futex_key+0x1c9/0x13e0 [ 41.872230][ T6029] ? __pfx_get_futex_key+0x10/0x10 [ 41.872246][ T6029] futex_wake+0xf4/0x5e0 [ 41.872284][ T6029] ? __pfx_futex_wake+0x10/0x10 [ 41.872303][ T6029] ? vfs_write+0x914/0x1050 [ 41.872322][ T6029] ? vfs_write+0x15d/0x1050 [ 41.872343][ T6029] do_futex+0x2b2/0x440 [ 41.872358][ T6029] ? __pfx_do_futex+0x10/0x10 [ 41.872377][ T6029] __x64_sys_futex+0x34f/0x4d0 [ 41.872392][ T6029] ? fput+0x7c/0x100 [ 41.872405][ T6029] ? __pfx___x64_sys_futex+0x10/0x10 [ 41.872418][ T6029] ? ksys_write+0x1ac/0x250 [ 41.872429][ T6029] ? __pfx_ksys_write+0x10/0x10 [ 41.872444][ T6029] do_syscall_64+0x123/0x790 [ 41.872482][ T6029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.872495][ T6029] RIP: 0033:0x7f8f5019f559 [ 41.872506][ T6029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.872518][ T6029] RSP: 002b:00007f8f511420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 41.872536][ T6029] RAX: ffffffffffffffda RBX: 00007f8f50425fa8 RCX: 00007f8f5019f559 [ 41.872544][ T6029] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8f50425fac [ 41.872551][ T6029] RBP: 00007f8f50425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 41.872558][ T6029] R10: 0000000000000046 R11: 0000000000000246 R12: 0000000000000000 [ 41.872565][ T6029] R13: 00007f8f50426038 R14: 00007ffd460af7b0 R15: 00007ffd460af898 [ 41.872584][ T6029] [ 41.961695][ T6031] type: 16 invalid [ 42.217455][ T5792] Bluetooth: hci2: command tx timeout [ 42.217506][ T5786] Bluetooth: hci1: command tx timeout [ 42.217509][ T5792] Bluetooth: hci0: command tx timeout [ 42.217530][ T5786] Bluetooth: hci3: command tx timeout [ 42.245439][ T6041] ======================================================= [ 42.245439][ T6041] WARNING: The mand mount option has been deprecated and [ 42.245439][ T6041] and is ignored by this kernel. Remove the mand [ 42.245439][ T6041] option from the mount to silence this warning. [ 42.245439][ T6041] ======================================================= [ 42.361230][ T6049] device-mapper: table: 248:1: zero-length target [ 42.361246][ T6049] device-mapper: ioctl: error adding target to table [ 42.454926][ T6056] ªªªªª): renamed from hsr0 (while UP) [ 42.497452][ T6060] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.36'. [ 42.498805][ T6060] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.36'. [ 42.499397][ T6060] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.36'. [ 42.499598][ T6060] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.36'. [ 42.499797][ T6060] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.36'. [ 42.499969][ T6060] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.36'. [ 42.500121][ T6060] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.36'. [ 42.500900][ T6060] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.36'. [ 42.501071][ T6060] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.36'. [ 42.858762][ T6081] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 42.996648][ T5892] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 43.157785][ T5892] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 43.159021][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.273855][ T6084] netlink: 'syz.2.45': attribute type 11 has an invalid length. [ 43.355282][ T50] Process accounting resumed [ 43.371980][ T5892] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 43.467296][ T6091] Process accounting resumed [ 43.626227][ T75] usb 8-1: USB disconnect, device number 2 [ 43.726725][ T5892] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 43.733689][ T42] kauditd_printk_skb: 122 callbacks suppressed [ 43.733702][ T42] audit: type=1400 audit(1793216309.869:286): avc: denied { write } for pid=6100 comm="syz.0.50" name="loop8" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.782148][ T42] audit: type=1400 audit(1793216309.919:287): avc: denied { write } for pid=6102 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.846031][ T67] Bluetooth: hci1: unexpected cc 0x206e length: 9 > 3 [ 43.877746][ T5892] usb 7-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 43.878536][ T5892] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 43.878550][ T5892] usb 7-1: config 1 has no interface number 0 [ 43.880151][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.880165][ T5892] usb 7-1: Product: syz [ 43.880173][ T5892] usb 7-1: Manufacturer: syz [ 43.880181][ T5892] usb 7-1: SerialNumber: syz [ 43.890161][ T5892] usb 7-1: 3:0 : does not exist [ 43.890174][ T5892] usb 7-1: 3:0 : does not exist [ 44.096552][ T5892] usb 7-1: USB disconnect, device number 2 [ 44.296752][ T67] Bluetooth: hci0: command tx timeout [ 44.296782][ T67] Bluetooth: hci3: command tx timeout [ 44.296876][ T5792] Bluetooth: hci2: command 0x040f tx timeout [ 44.401994][ T42] audit: type=1400 audit(1793216310.539:288): avc: denied { create } for pid=6115 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.402513][ T42] audit: type=1400 audit(1793216310.539:289): avc: denied { setopt } for pid=6115 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.404125][ T42] audit: type=1400 audit(1793216310.539:290): avc: denied { write } for pid=6115 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.405438][ T42] audit: type=1400 audit(1793216310.539:291): avc: denied { bind } for pid=6115 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.499312][ T42] audit: type=1400 audit(1793216310.639:292): avc: denied { create } for pid=6117 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.499738][ T42] audit: type=1400 audit(1793216310.639:293): avc: denied { write } for pid=6117 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.500177][ T42] audit: type=1400 audit(1793216310.639:294): avc: denied { read } for pid=6117 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.512071][ T6121] loop7: detected capacity change from 0 to 7 [ 44.552780][ T6121] Dev loop7: unable to read RDB block 7 [ 44.552803][ T6121] loop7: unable to read partition table [ 44.552899][ T6121] loop7: partition table beyond EOD, truncated [ 44.555135][ T6121] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 44.555379][ T6121] syzkaller0: entered promiscuous mode [ 44.555390][ T6121] syzkaller0: entered allmulticast mode [ 44.619017][ T5784] Buffer I/O error on dev loop7, logical block 0, async page read [ 44.633714][ T6128] phram: illegal device length [ 44.635056][ T6128] netlink: 'syz.2.58': attribute type 2 has an invalid length. [ 44.663922][ T6130] veth0_to_batadv: entered allmulticast mode [ 44.670999][ T6130] dvmrp6: entered allmulticast mode [ 44.686524][ T42] audit: type=1400 audit(1793216310.819:295): avc: denied { mount } for pid=6135 comm="syz.0.61" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 44.717064][ T6138] tmpfs: Unknown parameter 'mpol½õ' [ 44.790353][ T6129] veth0_to_batadv: left allmulticast mode [ 45.298287][ T6176] netlink: 'syz.3.76': attribute type 34 has an invalid length. [ 45.313151][ T6174] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 45.431716][ T6184] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 45.435897][ T6184] xt_recent: Need "+ip", "-ip" or "/" [ 45.489938][ T6188] No source specified [ 45.550738][ T6192] FAULT_INJECTION: forcing a failure. [ 45.550738][ T6192] name failslab, interval 1, probability 0, space 0, times 0 [ 45.550760][ T6192] CPU: 1 UID: 0 PID: 6192 Comm: syz.3.81 Not tainted syzkaller #0 PREEMPT(full) [ 45.550773][ T6192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 45.550780][ T6192] Call Trace: [ 45.550785][ T6192] [ 45.550789][ T6192] dump_stack_lvl+0x100/0x190 [ 45.550874][ T6192] should_fail_ex.cold+0x5/0xa [ 45.550901][ T6192] should_failslab+0xc2/0x120 [ 45.550921][ T6192] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 45.550971][ T6192] ? __kasan_kmalloc+0xaa/0xb0 [ 45.551000][ T6192] ? trace_probe_init+0x2e6/0x560 [ 45.551023][ T6192] kstrdup+0x51/0xe0 [ 45.551043][ T6192] trace_probe_init+0x2e6/0x560 [ 45.551066][ T6192] alloc_trace_uprobe+0xf8/0x370 [ 45.551090][ T6192] __trace_uprobe_create+0x673/0x2310 [ 45.551120][ T6192] ? __pfx___trace_uprobe_create+0x10/0x10 [ 45.551139][ T6192] ? trace_kmalloc+0xeb/0x110 [ 45.551155][ T6192] ? __kasan_kmalloc+0xaa/0xb0 [ 45.551182][ T6192] ? __kmalloc_noprof+0x350/0x840 [ 45.551207][ T6192] ? argv_split+0x173/0x420 [ 45.551258][ T6192] ? argv_split+0x359/0x420 [ 45.551278][ T6192] ? __pfx___trace_uprobe_create+0x10/0x10 [ 45.551293][ T6192] trace_probe_create+0xef/0x100 [ 45.551308][ T6192] ? __pfx_trace_probe_create+0x10/0x10 [ 45.551324][ T6192] dyn_event_create+0x50/0x90 [ 45.551341][ T6192] create_or_delete_trace_uprobe+0x5a/0xb0 [ 45.551355][ T6192] trace_parse_run_command+0x1ab/0x3b0 [ 45.551367][ T6192] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 45.551383][ T6192] vfs_write+0x2aa/0x1050 [ 45.551403][ T6192] ? __pfx_probes_write+0x10/0x10 [ 45.551415][ T6192] ? lock_acquire+0x1d1/0x380 [ 45.551431][ T6192] ? __fget_files+0x34/0x3d0 [ 45.551445][ T6192] ? __pfx_vfs_write+0x10/0x10 [ 45.551461][ T6192] ? find_held_lock+0x2b/0x80 [ 45.551474][ T6192] ? __fget_files+0x215/0x3d0 [ 45.551490][ T6192] ? __fget_files+0x21f/0x3d0 [ 45.551507][ T6192] ksys_write+0x12a/0x250 [ 45.551517][ T6192] ? __pfx_ksys_write+0x10/0x10 [ 45.551532][ T6192] do_syscall_64+0x123/0x790 [ 45.551552][ T6192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.551565][ T6192] RIP: 0033:0x7f966499f559 [ 45.551576][ T6192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.551586][ T6192] RSP: 002b:00007f96658bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.551607][ T6192] RAX: ffffffffffffffda RBX: 00007f9664c25fa0 RCX: 00007f966499f559 [ 45.551615][ T6192] RDX: 000000000000001b RSI: 0000200000000300 RDI: 0000000000000004 [ 45.551623][ T6192] RBP: 00007f9664a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 45.551630][ T6192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.551636][ T6192] R13: 00007f9664c26038 R14: 00007f9664c25fa0 R15: 00007ffe641eb768 [ 45.551652][ T6192] [ 45.602205][ T6194] kvm: user requested TSC rate below hardware speed [ 45.972914][ T6211] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 46.222934][ T6227] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 46.377085][ T5789] Bluetooth: hci0: command tx timeout [ 46.377117][ T5789] Bluetooth: hci3: command tx timeout [ 46.377144][ T5792] Bluetooth: hci2: command 0x040f tx timeout [ 46.475579][ T6233] cramfs: checking physical address 0x0000000101320000 for linear cramfs image [ 46.475641][ T6233] cramfs: wrong magic [ 46.477567][ T6233] cramfs: wrong magic [ 46.483115][ T6233] input: syz1 as /devices/virtual/input/input5 [ 46.483175][ T6233] input: failed to attach handler leds to device input5, error: -6 [ 46.755784][ T6244] kvm: MWAIT instruction emulated as NOP! [ 46.937190][ T6258] capability: warning: `syz.2.104' uses deprecated v2 capabilities in a way that may be insecure [ 47.095832][ T6254] __nla_validate_parse: 28 callbacks suppressed [ 47.095844][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.104'. [ 47.148657][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 47.307645][ T24] usb 6-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 47.309744][ T24] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 47.309768][ T24] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 47.310643][ T24] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 47.310665][ T24] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 47.312625][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.312643][ T24] usb 6-1: Product: syz [ 47.312654][ T24] usb 6-1: Manufacturer: syz [ 47.312666][ T24] usb 6-1: SerialNumber: syz [ 47.322270][ T24] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 47.328451][ T24] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 47.333001][ T6264] ip_tables: iptables: counters copy to user failed while replacing table [ 47.333457][ T24] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 47.350443][ T6264] br_netfilter no longer supported in user namespaces [ 47.363809][ T6264] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.524136][ T6256] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 47.526246][ T5892] usb 6-1: USB disconnect, device number 2 [ 47.533974][ T5792] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 47.537534][ T5892] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 47.545341][ T5892] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 47.547761][ T5892] ti_usb_3410_5052 6-1:2.0: device disconnected [ 48.113885][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 48.159629][ T6285] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 48.466654][ T5792] Bluetooth: hci2: command 0x040f tx timeout [ 48.946363][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 48.972036][ T6317] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 49.087218][ T42] kauditd_printk_skb: 90 callbacks suppressed [ 49.087230][ T42] audit: type=1400 audit(1793216315.229:386): avc: denied { mount } for pid=6321 comm="syz.0.126" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 49.088411][ T42] audit: type=1400 audit(1793216315.229:387): avc: denied { lock } for pid=6321 comm="syz.0.126" path="socket:[15613]" dev="sockfs" ino=15613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 49.152537][ T42] audit: type=1400 audit(1793216315.289:388): avc: denied { write } for pid=6335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.169041][ T42] audit: type=1400 audit(1793216315.309:389): avc: denied { unmount } for pid=5783 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 49.198406][ T42] audit: type=1400 audit(1793216315.339:390): avc: denied { write } for pid=6338 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.203121][ T42] audit: type=1400 audit(1793216315.339:391): avc: denied { map } for pid=6339 comm="syz.0.129" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.203301][ T42] audit: type=1400 audit(1793216315.339:392): avc: denied { read write } for pid=6339 comm="syz.0.129" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.406032][ T6352] kvm: Disabled LAPIC found during irq injection [ 49.426554][ T6314] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 49.466254][ T1282] IPVS: starting estimator thread 0... [ 49.466261][ T6356] IPVS: fo: FWM 3 0x00000003 - no destination available [ 49.567482][ T6358] IPVS: using max 43 ests per chain, 103200 per kthread [ 49.572022][ T6365] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 49.573114][ T1282] IPVS: starting estimator thread 0... [ 49.573519][ T42] audit: type=1400 audit(1793216315.709:393): avc: denied { node_bind } for pid=6362 comm="syz.0.136" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 49.597916][ T42] audit: type=1400 audit(1793216315.739:394): avc: denied { watch_reads } for pid=6362 comm="syz.0.136" path="/44" dev="tmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.637964][ T6368] netlink: 36 bytes leftover after parsing attributes in process `syz.2.137'. [ 49.657715][ T6366] IPVS: using max 41 ests per chain, 98400 per kthread [ 49.657775][ T42] audit: type=1400 audit(1793216315.799:395): avc: denied { mount } for pid=6370 comm="syz.3.138" name="/" dev="9p" ino=71827763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.707141][ T6371] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 49.711790][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 49.753107][ T6371] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 49.753363][ T6371] block device autoloading is deprecated and will be removed. [ 50.139865][ T5883] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.255345][ T6406] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=58138 sclass=netlink_xfrm_socket pid=6406 comm=syz.1.147 [ 50.537511][ T5792] Bluetooth: hci2: command 0x040f tx timeout [ 50.591194][ T6414] tmpfs: Cannot disable swap on remount [ 50.591408][ T6414] tmpfs: Cannot disable swap on remount [ 50.591613][ T6414] tmpfs: Cannot disable swap on remount [ 50.591853][ T6414] tmpfs: Cannot disable swap on remount [ 50.592048][ T6414] tmpfs: Cannot disable swap on remount [ 50.592237][ T6414] tmpfs: Cannot disable swap on remount [ 50.592436][ T6414] tmpfs: Cannot disable swap on remount [ 50.592632][ T6414] tmpfs: Cannot disable swap on remount [ 50.592856][ T6414] tmpfs: Cannot disable swap on remount [ 50.593233][ T6414] tmpfs: Cannot disable swap on remount [ 50.593467][ T6414] tmpfs: Cannot disable swap on remount [ 50.593663][ T6414] tmpfs: Cannot disable swap on remount [ 50.593867][ T6414] tmpfs: Cannot disable swap on remount [ 50.594058][ T6414] tmpfs: Cannot disable swap on remount [ 50.594267][ T6414] tmpfs: Cannot disable swap on remount [ 50.594471][ T6414] tmpfs: Cannot disable swap on remount [ 50.594682][ T6414] tmpfs: Cannot disable swap on remount [ 50.594883][ T6414] tmpfs: Cannot disable swap on remount [ 50.595091][ T6414] tmpfs: Cannot disable swap on remount [ 50.595452][ T6414] tmpfs: Cannot disable swap on remount [ 50.595671][ T6414] tmpfs: Cannot disable swap on remount [ 50.595865][ T6414] tmpfs: Cannot disable swap on remount [ 50.596124][ T6414] tmpfs: Cannot disable swap on remount [ 50.596327][ T6414] tmpfs: Cannot disable swap on remount [ 50.600901][ T6414] tmpfs: Cannot disable swap on remount [ 50.601058][ T6414] tmpfs: Cannot disable swap on remount [ 50.601226][ T6414] tmpfs: Cannot disable swap on remount [ 50.601350][ T6414] tmpfs: Cannot disable swap on remount [ 50.601484][ T6414] tmpfs: Cannot disable swap on remount [ 50.602600][ T6414] tmpfs: Cannot disable swap on remount [ 50.602752][ T6414] tmpfs: Cannot disable swap on remount [ 50.602875][ T6414] tmpfs: Cannot disable swap on remount [ 50.602997][ T6414] tmpfs: Cannot disable swap on remount [ 50.603120][ T6414] tmpfs: Cannot disable swap on remount [ 50.603243][ T6414] tmpfs: Cannot disable swap on remount [ 50.603436][ T6414] tmpfs: Cannot disable swap on remount [ 50.603562][ T6414] tmpfs: Cannot disable swap on remount [ 50.603684][ T6414] tmpfs: Cannot disable swap on remount [ 50.603811][ T6414] tmpfs: Cannot disable swap on remount [ 50.603935][ T6414] tmpfs: Cannot disable swap on remount [ 50.604059][ T6414] tmpfs: Cannot disable swap on remount [ 50.604181][ T6414] tmpfs: Cannot disable swap on remount [ 50.604304][ T6414] tmpfs: Cannot disable swap on remount [ 50.604488][ T6414] tmpfs: Cannot disable swap on remount [ 50.604633][ T6414] tmpfs: Cannot disable swap on remount [ 50.604767][ T6414] tmpfs: Cannot disable swap on remount [ 50.604895][ T6414] tmpfs: Cannot disable swap on remount [ 50.605019][ T6414] tmpfs: Cannot disable swap on remount [ 50.605144][ T6414] tmpfs: Cannot disable swap on remount [ 50.605298][ T6414] tmpfs: Cannot disable swap on remount [ 50.605446][ T6414] tmpfs: Cannot disable swap on remount [ 50.605625][ T6414] tmpfs: Cannot disable swap on remount [ 50.605757][ T6414] tmpfs: Cannot disable swap on remount [ 50.605880][ T6414] tmpfs: Cannot disable swap on remount [ 50.606007][ T6414] tmpfs: Cannot disable swap on remount [ 50.606129][ T6414] tmpfs: Cannot disable swap on remount [ 50.606251][ T6414] tmpfs: Cannot disable swap on remount [ 50.606372][ T6414] tmpfs: Cannot disable swap on remount [ 50.606493][ T6414] tmpfs: Cannot disable swap on remount [ 50.607246][ T6414] tmpfs: Cannot disable swap on remount [ 50.607379][ T6414] tmpfs: Cannot disable swap on remount [ 50.607501][ T6414] tmpfs: Cannot disable swap on remount [ 50.607624][ T6414] tmpfs: Cannot disable swap on remount [ 50.607784][ T6414] tmpfs: Cannot disable swap on remount [ 50.607923][ T6414] tmpfs: Cannot disable swap on remount [ 50.698010][ T6419] syzkaller0: entered promiscuous mode [ 50.698030][ T6419] syzkaller0: entered allmulticast mode [ 51.114022][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 51.114038][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 51.114046][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 51.199407][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'. [ 51.223200][ T6451] syzkaller0: entered promiscuous mode [ 51.223220][ T6451] syzkaller0: entered allmulticast mode [ 51.226876][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.163'. [ 51.260843][ T6452] netlink: 'syz.1.162': attribute type 21 has an invalid length. [ 51.275005][ T6452] geneve2: entered promiscuous mode [ 51.275028][ T6452] geneve2: entered allmulticast mode [ 51.339092][ T5792] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 51.339111][ T5792] Bluetooth: Wrong link type (-22) [ 51.529262][ T6466] bond0: option arp_interval: invalid value ( ) [ 51.529284][ T6466] bond0: option arp_interval: allowed values 0 - 2147483647 [ 51.577403][ T6469] input: syz0 as /devices/virtual/input/input7 [ 51.675325][ T6475] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 52.028801][ T6501] Console: switching to colour dummy device 80x25 [ 52.053483][ T6499] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 52.221115][ T6508] xt_ecn: cannot match TCP bits for non-tcp packets [ 52.480532][ T6511] Bluetooth: MGMT ver 1.23 [ 52.481083][ T6511] Bluetooth: hci0: load_link_keys: expected 128 bytes, got 28 bytes [ 52.481988][ T6511] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 52.626840][ T5792] Bluetooth: hci2: command 0x040f tx timeout [ 53.031032][ T6529] nvme_fabrics: no handler found for transport t.0eب"8„µd=4420. [ 53.035412][ C3] Unknown status report in ack skb [ 53.629777][ T6563] __nla_validate_parse: 2 callbacks suppressed [ 53.629814][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 53.742231][ T5891] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.785936][ T5891] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.862983][ T5891] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.869841][ T6573] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 53.891015][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.891672][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.892366][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.893573][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.896765][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.921879][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 53.945411][ T5891] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.059903][ T5891] bridge_slave_1: left allmulticast mode [ 54.060002][ T5891] bridge_slave_1: left promiscuous mode [ 54.060764][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.068072][ T5891] bridge_slave_0: left allmulticast mode [ 54.068086][ T5891] bridge_slave_0: left promiscuous mode [ 54.068177][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.074571][ T5891] dvmrp6: left allmulticast mode [ 54.187604][ T5891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.191036][ T5891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.197053][ T5891] bond0 (unregistering): Released all slaves [ 54.200149][ T5891] bond1 (unregistering): Released all slaves [ 54.292892][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 54.292908][ T42] audit: type=1400 audit(1793216320.429:433): avc: denied { write } for pid=6593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.332317][ T6577] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.345878][ T42] audit: type=1400 audit(1793216320.479:434): avc: denied { write } for pid=6596 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.379602][ T5496] 8021q: adding VLAN 0 to HW filter on device eth2 [ 54.471033][ T42] audit: type=1400 audit(1793216320.609:435): avc: denied { write } for pid=6600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.544583][ T42] audit: type=1400 audit(1793216320.679:436): avc: denied { write } for pid=6604 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.584027][ T5496] 8021q: adding VLAN 0 to HW filter on device eth3 [ 54.670065][ T42] audit: type=1400 audit(1793216320.809:437): avc: denied { write } for pid=6610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.703027][ T5891] hsr_slave_0: left promiscuous mode [ 54.703480][ T5891] hsr_slave_1: left promiscuous mode [ 54.703917][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.703934][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.704595][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.704606][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.711103][ T5891] veth1_macvtap: left promiscuous mode [ 54.711131][ T5891] veth0_macvtap: left promiscuous mode [ 54.711176][ T5891] veth1_vlan: left promiscuous mode [ 54.711215][ T5891] veth0_vlan: left promiscuous mode [ 54.734907][ T42] audit: type=1400 audit(1793216320.869:438): avc: denied { write } for pid=6613 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.778752][ T42] audit: type=1326 audit(1793216320.919:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.2.205" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f5019f559 code=0x0 [ 54.895191][ T5891] team0 (unregistering): Port device team_slave_1 removed [ 54.912604][ T5891] team0 (unregistering): Port device team_slave_0 removed [ 54.992293][ T5496] 8021q: adding VLAN 0 to HW filter on device eth4 [ 55.013274][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.013319][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.013592][ T6577] bridge_slave_0: entered allmulticast mode [ 55.014374][ T6577] bridge_slave_0: entered promiscuous mode [ 55.015854][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.015901][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.015959][ T6577] bridge_slave_1: entered allmulticast mode [ 55.017667][ T6577] bridge_slave_1: entered promiscuous mode [ 55.033412][ T6577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.035405][ T6577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.047367][ T6577] team0: Port device team_slave_0 added [ 55.048589][ T6577] team0: Port device team_slave_1 added [ 55.059522][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.059532][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.059545][ T6577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.060339][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.060346][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.060360][ T6577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.087400][ T6577] hsr_slave_0: entered promiscuous mode [ 55.087869][ T6577] hsr_slave_1: entered promiscuous mode [ 55.089340][ T6632] fuse: fd is not a fuse device [ 55.101239][ T42] audit: type=1400 audit(1793216321.239:440): avc: denied { write } for pid=6629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.108926][ T6632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.210'. [ 55.172418][ T42] audit: type=1400 audit(1793216321.309:441): avc: denied { write } for pid=6635 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.220132][ T6641] ip_tables: iptables: counters copy to user failed while replacing table [ 55.227576][ T5496] 8021q: adding VLAN 0 to HW filter on device eth5 [ 55.246446][ T6577] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.253276][ T6577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.254384][ T6577] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.286358][ T6577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.294009][ T6577] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.299019][ T6577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.299526][ T6577] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.305342][ T6577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.323299][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.323348][ T6577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.323452][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.323504][ T6577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.352564][ T6577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.367308][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.367811][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.382781][ T6577] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.385817][ T5891] IPVS: stop unused estimator thread 0... [ 55.394814][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.394859][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.400735][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.400779][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.591377][ T6676] overlayfs: failed to clone upperpath [ 55.654961][ T6577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.668111][ T42] audit: type=1400 audit(1793216321.809:442): avc: denied { read write } for pid=6683 comm="syz.0.222" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 55.792166][ T6696] tipc: Started in network mode [ 55.792206][ T6696] tipc: Node identity 4, cluster identity 4711 [ 55.792216][ T6696] tipc: Node number set to 4 [ 55.806006][ T6577] veth0_vlan: entered promiscuous mode [ 55.815230][ T6577] veth1_vlan: entered promiscuous mode [ 55.835519][ T6577] veth0_macvtap: entered promiscuous mode [ 55.840128][ T6577] veth1_macvtap: entered promiscuous mode [ 55.849979][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.852358][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.912409][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.912424][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.919708][ T5891] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.919732][ T5891] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.919750][ T5891] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.928325][ T5891] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.941277][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.941304][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.953561][ T6709] netlink: 68 bytes leftover after parsing attributes in process `syz.1.228'. [ 55.955069][ T6709] netlink: 'syz.1.228': attribute type 21 has an invalid length. [ 55.964361][ T6709] bridge_slave_0: left allmulticast mode [ 55.964381][ T6709] bridge_slave_0: left promiscuous mode [ 55.965514][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.967891][ T6709] bridge_slave_1: left allmulticast mode [ 55.967904][ T6709] bridge_slave_1: left promiscuous mode [ 55.967995][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.980259][ T5789] Bluetooth: hci2: command tx timeout [ 55.988933][ T6709] bond0: (slave bond_slave_0): Releasing backup interface [ 55.994269][ T6709] bond0: (slave bond_slave_1): Releasing backup interface [ 56.003415][ T6709] team0: Port device team_slave_0 removed [ 56.008624][ T6709] team0: Port device team_slave_1 removed [ 56.009040][ T6709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.009052][ T6709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.011260][ T6709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.011271][ T6709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.013543][ T6709] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 56.029273][ T6710] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 56.033384][ T6711] team0: Mode changed to "roundrobin" [ 56.034080][ T6714] team0: Unable to change to the same mode the team is in [ 56.036665][ T6709] netlink: 96 bytes leftover after parsing attributes in process `syz.1.228'. [ 56.138329][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 56.202903][ T6737] fuse: fd is not a fuse device [ 56.441328][ T6749] kvm: Disabled LAPIC found during irq injection [ 57.123063][ T6776] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.290367][ T6791] netlink: 36 bytes leftover after parsing attributes in process `syz.4.253'. [ 57.353162][ T6800] team0: Device vxcan1 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port [ 57.416138][ T1282] IPVS: starting estimator thread 0... [ 57.516769][ T6808] IPVS: using max 43 ests per chain, 103200 per kthread [ 58.056841][ T5789] Bluetooth: hci2: command tx timeout [ 58.328528][ T6849] FAULT_INJECTION: forcing a failure. [ 58.328528][ T6849] name fail_futex, interval 1, probability 0, space 0, times 0 [ 58.328549][ T6849] CPU: 3 UID: 0 PID: 6849 Comm: syz.2.273 Not tainted syzkaller #0 PREEMPT(full) [ 58.328562][ T6849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.328569][ T6849] Call Trace: [ 58.328588][ T6849] [ 58.328592][ T6849] dump_stack_lvl+0x100/0x190 [ 58.328728][ T6849] should_fail_ex.cold+0x5/0xa [ 58.328756][ T6849] get_futex_key+0x1c9/0x13e0 [ 58.328793][ T6849] ? __pfx_get_futex_key+0x10/0x10 [ 58.328811][ T6849] futex_wake+0xf4/0x5e0 [ 58.328830][ T6849] ? __pfx_futex_wake+0x10/0x10 [ 58.328849][ T6849] ? percpu_counter_add_batch+0xb9/0x230 [ 58.328900][ T6849] ? errseq_sample+0x51/0x70 [ 58.328929][ T6849] ? file_init_path+0x48e/0x670 [ 58.328970][ T6849] do_futex+0x2b2/0x440 [ 58.328994][ T6849] ? __pfx_do_futex+0x10/0x10 [ 58.329016][ T6849] ? fd_install+0x223/0x580 [ 58.329044][ T6849] __x64_sys_futex+0x34f/0x4d0 [ 58.329068][ T6849] ? __sys_socket+0xac/0x260 [ 58.329172][ T6849] ? __pfx___x64_sys_futex+0x10/0x10 [ 58.329207][ T6849] do_syscall_64+0x123/0x790 [ 58.329306][ T6849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.329327][ T6849] RIP: 0033:0x7f8f5019f559 [ 58.329340][ T6849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.329357][ T6849] RSP: 002b:00007f8f511420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 58.329399][ T6849] RAX: ffffffffffffffda RBX: 00007f8f50425fa8 RCX: 00007f8f5019f559 [ 58.329412][ T6849] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8f50425fac [ 58.329425][ T6849] RBP: 00007f8f50425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 58.329436][ T6849] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 58.329448][ T6849] R13: 00007f8f50426038 R14: 00007ffd460af7b0 R15: 00007ffd460af898 [ 58.329475][ T6849] [ 58.532713][ T6860] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.593857][ T6865] overlayfs: failed to clone upperpath [ 58.664802][ T6869] kvm: Disabled LAPIC found during irq injection [ 59.327479][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 59.327496][ T42] audit: type=1400 audit(1793216325.469:465): avc: denied { unmount } for pid=5783 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 59.464268][ T42] audit: type=1400 audit(1793216325.599:466): avc: denied { mount } for pid=6895 comm="syz.2.289" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 59.562861][ T6904] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 59.599967][ T42] audit: type=1400 audit(1793216325.739:467): avc: denied { write } for pid=6906 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.649849][ T42] audit: type=1400 audit(1793216325.789:468): avc: denied { write } for pid=6913 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.750698][ T42] audit: type=1400 audit(1793216325.879:469): avc: denied { write } for pid=6917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.799820][ T42] audit: type=1400 audit(1793216325.939:470): avc: denied { write } for pid=6924 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.812344][ T42] audit: type=1400 audit(1793216325.959:471): avc: denied { read } for pid=6918 comm="syz.4.295" name="usbmon1" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.813548][ T42] audit: type=1400 audit(1793216325.959:472): avc: denied { open } for pid=6918 comm="syz.4.295" path="/dev/usbmon1" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.817268][ T42] audit: type=1400 audit(1793216325.959:473): avc: denied { ioctl } for pid=6918 comm="syz.4.295" path="/dev/usbmon1" dev="devtmpfs" ino=737 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.895726][ T42] audit: type=1400 audit(1793216326.029:474): avc: denied { write } for pid=6927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.136765][ T5789] Bluetooth: hci2: command tx timeout [ 60.374967][ T6950] tmpfs: Bad value for 'mpol' [ 60.412077][ T6954] fuse: Unknown parameter 'Ÿ(5ªzk³U~ðu](üD‚©' [ 60.460156][ T6957] Set syz1 is full, maxelem 2 reached [ 60.709741][ T6985] FAULT_INJECTION: forcing a failure. [ 60.709741][ T6985] name failslab, interval 1, probability 0, space 0, times 0 [ 60.709769][ T6985] CPU: 3 UID: 0 PID: 6985 Comm: syz.0.309 Not tainted syzkaller #0 PREEMPT(full) [ 60.709797][ T6985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.709808][ T6985] Call Trace: [ 60.709825][ T6985] [ 60.709833][ T6985] dump_stack_lvl+0x100/0x190 [ 60.709943][ T6985] should_fail_ex.cold+0x5/0xa [ 60.709984][ T6985] should_failslab+0xc2/0x120 [ 60.710035][ T6985] __kmalloc_cache_node_noprof+0x94/0x710 [ 60.710079][ T6985] ? sbitmap_queue_init_node+0x291/0x4a0 [ 60.710158][ T6985] sbitmap_queue_init_node+0x291/0x4a0 [ 60.710185][ T6985] kyber_alloc_sched_data+0x30f/0x7b0 [ 60.710224][ T6985] ? __pfx_kyber_alloc_sched_data+0x10/0x10 [ 60.710249][ T6985] blk_mq_alloc_sched_res+0x105/0x250 [ 60.710273][ T6985] elevator_change+0x136/0x530 [ 60.710316][ T6985] elv_iosched_store+0x3be/0x460 [ 60.710346][ T6985] ? __pfx_elv_iosched_store+0x10/0x10 [ 60.710383][ T6985] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 60.710431][ T6985] ? __pfx_elv_iosched_store+0x10/0x10 [ 60.710460][ T6985] queue_attr_store+0x25f/0x2f0 [ 60.710487][ T6985] ? __pfx_queue_attr_store+0x10/0x10 [ 60.710511][ T6985] ? __lock_acquire+0x5c0/0x1f40 [ 60.710573][ T6985] ? lock_acquire+0x1d1/0x380 [ 60.710597][ T6985] ? sysfs_file_kobj+0x21/0x290 [ 60.710619][ T6985] ? find_held_lock+0x2b/0x80 [ 60.710637][ T6985] ? sysfs_file_kobj+0xe4/0x290 [ 60.710680][ T6985] ? sysfs_file_kobj+0xe4/0x290 [ 60.710708][ T6985] ? __pfx_queue_attr_store+0x10/0x10 [ 60.710732][ T6985] sysfs_kf_write+0xf2/0x150 [ 60.710756][ T6985] kernfs_fop_write_iter+0x3e0/0x5f0 [ 60.710774][ T6985] ? __pfx_sysfs_kf_write+0x10/0x10 [ 60.710805][ T6985] vfs_write+0x6af/0x1050 [ 60.710844][ T6985] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 60.710866][ T6985] ? __pfx_vfs_write+0x10/0x10 [ 60.710892][ T6985] ? find_held_lock+0x2b/0x80 [ 60.710929][ T6985] ksys_write+0x12a/0x250 [ 60.710946][ T6985] ? __pfx_ksys_write+0x10/0x10 [ 60.710971][ T6985] do_syscall_64+0x123/0x790 [ 60.711046][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.711068][ T6985] RIP: 0033:0x7f50e3f9f559 [ 60.711084][ T6985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.711101][ T6985] RSP: 002b:00007f50e4e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 60.711130][ T6985] RAX: ffffffffffffffda RBX: 00007f50e4225fa0 RCX: 00007f50e3f9f559 [ 60.711143][ T6985] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 60.711154][ T6985] RBP: 00007f50e4036b20 R08: 0000000000000000 R09: 0000000000000000 [ 60.711166][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.711178][ T6985] R13: 00007f50e4226038 R14: 00007f50e4225fa0 R15: 00007ffca0b04f78 [ 60.711205][ T6985] [ 60.729866][ T6987] CUSE: unknown device info "" [ 60.729878][ T6987] CUSE: unknown device info "" [ 60.729884][ T6987] CUSE: unknown device info "ÿ" [ 60.729889][ T6987] CUSE: unknown device info "" [ 60.729895][ T6987] CUSE: unknown device info "ý" [ 60.729900][ T6987] CUSE: unknown device info "" [ 60.729905][ T6987] CUSE: unknown device info "" [ 60.729911][ T6987] CUSE: DEVNAME unspecified [ 60.730241][ T6987] netlink: 'syz.2.310': attribute type 12 has an invalid length. [ 61.274188][ T7039] fuse: fd is not a fuse device [ 61.446447][ T7049] Process accounting resumed [ 61.492834][ T7051] FAULT_INJECTION: forcing a failure. [ 61.492834][ T7051] name failslab, interval 1, probability 0, space 0, times 0 [ 61.492868][ T7051] CPU: 3 UID: 0 PID: 7051 Comm: syz.4.331 Not tainted syzkaller #0 PREEMPT(full) [ 61.492892][ T7051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.492905][ T7051] Call Trace: [ 61.492912][ T7051] [ 61.492920][ T7051] dump_stack_lvl+0x100/0x190 [ 61.493008][ T7051] should_fail_ex.cold+0x5/0xa [ 61.493038][ T7051] should_failslab+0xc2/0x120 [ 61.493062][ T7051] __kmalloc_cache_noprof+0x91/0x6d0 [ 61.493088][ T7051] ? lockdep_init_map_type+0x5c/0x250 [ 61.493144][ T7051] ? addrconf_init_net+0x17c/0x8e0 [ 61.493222][ T7051] ? __pfx_addrconf_init_net+0x10/0x10 [ 61.493249][ T7051] addrconf_init_net+0x17c/0x8e0 [ 61.493275][ T7051] ? ip6addrlbl_net_init+0x142/0x330 [ 61.493298][ T7051] ? __pfx_addrconf_init_net+0x10/0x10 [ 61.493326][ T7051] ops_init+0x1e2/0x5f0 [ 61.493398][ T7051] setup_net+0x118/0x3a0 [ 61.493422][ T7051] ? __pfx_setup_net+0x10/0x10 [ 61.493443][ T7051] ? bpf_lsm_namespace_init+0x9/0x10 [ 61.493480][ T7051] copy_net_ns+0x340/0x7a0 [ 61.493507][ T7051] create_new_namespaces+0x3ea/0xac0 [ 61.493552][ T7051] unshare_nsproxy_namespaces+0xf6/0x210 [ 61.493581][ T7051] ksys_unshare+0x44f/0x980 [ 61.493605][ T7051] ? __pfx_ksys_unshare+0x10/0x10 [ 61.493639][ T7051] __x64_sys_unshare+0x31/0x40 [ 61.493665][ T7051] do_syscall_64+0x123/0x790 [ 61.493698][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.493719][ T7051] RIP: 0033:0x7f291f19f559 [ 61.493737][ T7051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.493756][ T7051] RSP: 002b:00007f29200f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 61.493787][ T7051] RAX: ffffffffffffffda RBX: 00007f291f425fa0 RCX: 00007f291f19f559 [ 61.493801][ T7051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 61.493813][ T7051] RBP: 00007f291f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 61.493826][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.493839][ T7051] R13: 00007f291f426038 R14: 00007f291f425fa0 R15: 00007ffd44812388 [ 61.493867][ T7051] [ 62.216696][ T5789] Bluetooth: hci2: command tx timeout [ 62.606613][ T7089] sctp: [Deprecated]: syz.4.344 (pid 7089) Use of int in maxseg socket option. [ 62.606613][ T7089] Use struct sctp_assoc_value instead [ 62.638149][ T7091] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.669476][ T7093] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 62.768363][ T7101] syz.0.347 uses obsolete (PF_INET,SOCK_PACKET) [ 63.077399][ T7119] netlink: 'syz.1.356': attribute type 16 has an invalid length. [ 63.077413][ T7119] netlink: 'syz.1.356': attribute type 17 has an invalid length. [ 63.129266][ T7119] geneve2: left promiscuous mode [ 63.129281][ T7119] geneve2: left allmulticast mode [ 63.131802][ T7119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.142914][ T5595] ip6_tunnel: K xmit: Local address not yet configured! [ 63.167168][ T7123] Device name not specified. [ 63.167168][ T7123] [ 63.426345][ T7138] kvm: Disabled LAPIC found during irq injection [ 64.275006][ T7186] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.545218][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 64.545231][ T42] audit: type=1400 audit(1793216330.679:501): avc: denied { create } for pid=7203 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 64.545876][ T42] audit: type=1400 audit(1793216330.679:502): avc: denied { accept } for pid=7203 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 64.546079][ T7205] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.653068][ T42] audit: type=1400 audit(1793216330.789:503): avc: denied { create } for pid=7213 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.893201][ T42] audit: type=1400 audit(1793216331.029:504): avc: denied { bind } for pid=7225 comm="syz.1.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.033884][ T42] audit: type=1400 audit(1793216331.169:505): avc: denied { create } for pid=7236 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.034873][ T42] audit: type=1400 audit(1793216331.169:506): avc: denied { listen } for pid=7236 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 65.218472][ T7249] ./dev: Can't lookup blockdev [ 65.247528][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.406'. [ 65.248603][ T7253] comedi: No check for data length of config insn id 1886663276 is implemented [ 65.248613][ T7253] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 65.248620][ T7253] comedi: Assuming n=65536 is correct [ 65.750040][ T42] audit: type=1400 audit(1793216331.889:507): avc: denied { write } for pid=7265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.814320][ T42] audit: type=1400 audit(1793216331.949:508): avc: denied { write } for pid=7268 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.915792][ T42] audit: type=1400 audit(1793216332.049:509): avc: denied { write } for pid=7271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.969358][ T42] audit: type=1400 audit(1793216332.109:510): avc: denied { write } for pid=7278 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.017364][ T7283] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 66.017380][ T7283] netlink: 55 bytes leftover after parsing attributes in process `syz.1.413'. [ 66.142694][ T7283] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 66.142708][ T7283] netlink: 55 bytes leftover after parsing attributes in process `syz.1.413'. [ 66.142798][ T7283] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 66.142806][ T7283] netlink: 55 bytes leftover after parsing attributes in process `syz.1.413'. [ 66.142880][ T7283] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 66.142888][ T7283] netlink: 55 bytes leftover after parsing attributes in process `syz.1.413'. [ 66.142965][ T7283] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 66.142973][ T7283] netlink: 55 bytes leftover after parsing attributes in process `syz.1.413'. [ 66.143051][ T7283] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 66.143058][ T7283] netlink: 55 bytes leftover after parsing attributes in process `syz.1.413'. [ 66.143133][ T7283] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 66.143140][ T7283] netlink: 55 bytes leftover after parsing attributes in process `syz.1.413'. [ 66.143212][ T7283] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 66.143220][ T7283] netlink: 55 bytes leftover after parsing attributes in process `syz.1.413'. [ 66.143293][ T7283] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 66.143300][ T7283] netlink: 55 bytes leftover after parsing attributes in process `syz.1.413'. [ 66.143372][ T7283] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 66.425262][ T7303] kvm: Disabled LAPIC found during irq injection [ 66.495912][ T7307] FAULT_INJECTION: forcing a failure. [ 66.495912][ T7307] name failslab, interval 1, probability 0, space 0, times 0 [ 66.495932][ T7307] CPU: 1 UID: 0 PID: 7307 Comm: syz.0.421 Not tainted syzkaller #0 PREEMPT(full) [ 66.495947][ T7307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.495954][ T7307] Call Trace: [ 66.495959][ T7307] [ 66.495964][ T7307] dump_stack_lvl+0x100/0x190 [ 66.495990][ T7307] should_fail_ex.cold+0x5/0xa [ 66.496011][ T7307] should_failslab+0xc2/0x120 [ 66.496028][ T7307] kmem_cache_alloc_noprof+0x92/0x6a0 [ 66.496046][ T7307] ? ceph_msg_new2+0x3e/0x4f0 [ 66.496077][ T7307] ceph_msg_new2+0x3e/0x4f0 [ 66.496095][ T7307] ceph_monc_init+0x59d/0xcd0 [ 66.496113][ T7307] ceph_create_client+0x25e/0x370 [ 66.496129][ T7307] ceph_get_tree+0x1a4/0x1fd0 [ 66.496152][ T7307] ? bpf_lsm_capable+0x9/0x10 [ 66.496163][ T7307] ? security_capable+0x80/0x260 [ 66.496188][ T7307] vfs_get_tree+0x92/0x320 [ 66.496205][ T7307] vfs_cmd_create+0xd7/0x2a0 [ 66.496225][ T7307] __do_sys_fsconfig+0x55a/0xcb0 [ 66.496237][ T7307] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 66.496255][ T7307] do_syscall_64+0x123/0x790 [ 66.496277][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.496290][ T7307] RIP: 0033:0x7f50e3f9f559 [ 66.496301][ T7307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.496313][ T7307] RSP: 002b:00007f50e4e37028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 66.496326][ T7307] RAX: ffffffffffffffda RBX: 00007f50e4225fa0 RCX: 00007f50e3f9f559 [ 66.496335][ T7307] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 66.496342][ T7307] RBP: 00007f50e4036b20 R08: 0004000000000000 R09: 0000000000000000 [ 66.496350][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.496357][ T7307] R13: 00007f50e4226038 R14: 00007f50e4225fa0 R15: 00007ffca0b04f78 [ 66.496373][ T7307] [ 66.560813][ T7307] FAULT_INJECTION: forcing a failure. [ 66.560813][ T7307] name failslab, interval 1, probability 0, space 0, times 0 [ 66.560838][ T7307] CPU: 1 UID: 0 PID: 7307 Comm: syz.0.421 Not tainted syzkaller #0 PREEMPT(full) [ 66.560858][ T7307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.560869][ T7307] Call Trace: [ 66.560876][ T7307] [ 66.560883][ T7307] dump_stack_lvl+0x100/0x190 [ 66.560915][ T7307] should_fail_ex.cold+0x5/0xa [ 66.560956][ T7307] ? __pfx_kyber_init_hctx+0x10/0x10 [ 66.560975][ T7307] should_failslab+0xc2/0x120 [ 66.560993][ T7307] __kmalloc_cache_node_noprof+0x94/0x710 [ 66.561024][ T7307] ? kyber_init_hctx+0x82/0xab0 [ 66.561045][ T7307] ? __pfx_kyber_init_hctx+0x10/0x10 [ 66.561061][ T7307] kyber_init_hctx+0x82/0xab0 [ 66.561108][ T7307] ? __pfx_kyber_init_hctx+0x10/0x10 [ 66.561127][ T7307] blk_mq_init_sched+0x39e/0x6c0 [ 66.561151][ T7307] elevator_switch+0x1e3/0x7e0 [ 66.561177][ T7307] elevator_change+0x352/0x530 [ 66.561205][ T7307] elv_iosched_store+0x3be/0x460 [ 66.561230][ T7307] ? __pfx_elv_iosched_store+0x10/0x10 [ 66.561262][ T7307] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 66.561282][ T7307] ? __pfx_elv_iosched_store+0x10/0x10 [ 66.561307][ T7307] queue_attr_store+0x25f/0x2f0 [ 66.561330][ T7307] ? __pfx_queue_attr_store+0x10/0x10 [ 66.561351][ T7307] ? __lock_acquire+0x5c0/0x1f40 [ 66.561382][ T7307] ? lock_acquire+0x1d1/0x380 [ 66.561416][ T7307] ? sysfs_file_kobj+0x21/0x290 [ 66.561435][ T7307] ? find_held_lock+0x2b/0x80 [ 66.561451][ T7307] ? sysfs_file_kobj+0xe4/0x290 [ 66.561468][ T7307] ? sysfs_file_kobj+0xe4/0x290 [ 66.561490][ T7307] ? __pfx_queue_attr_store+0x10/0x10 [ 66.561511][ T7307] sysfs_kf_write+0xf2/0x150 [ 66.561532][ T7307] kernfs_fop_write_iter+0x3e0/0x5f0 [ 66.561548][ T7307] ? __pfx_sysfs_kf_write+0x10/0x10 [ 66.561569][ T7307] vfs_write+0x6af/0x1050 [ 66.561595][ T7307] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 66.561614][ T7307] ? __pfx_vfs_write+0x10/0x10 [ 66.561637][ T7307] ? find_held_lock+0x2b/0x80 [ 66.561673][ T7307] ksys_write+0x12a/0x250 [ 66.561687][ T7307] ? __pfx_ksys_write+0x10/0x10 [ 66.561709][ T7307] do_syscall_64+0x123/0x790 [ 66.561738][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.561755][ T7307] RIP: 0033:0x7f50e3f9f559 [ 66.561770][ T7307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.561785][ T7307] RSP: 002b:00007f50e4e37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.561801][ T7307] RAX: ffffffffffffffda RBX: 00007f50e4225fa0 RCX: 00007f50e3f9f559 [ 66.561812][ T7307] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 66.561822][ T7307] RBP: 00007f50e4036b20 R08: 0000000000000000 R09: 0000000000000000 [ 66.561831][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.561841][ T7307] R13: 00007f50e4226038 R14: 00007f50e4225fa0 R15: 00007ffca0b04f78 [ 66.561865][ T7307] [ 66.562795][ T7307] elv: switch to "kyber" failed, falling back to "none" [ 66.641136][ T7317] Dead loop on virtual device lo (net 33), fix it urgently! [ 66.641267][ T7317] Dead loop on virtual device lo (net 33), fix it urgently! [ 66.641353][ T7317] Dead loop on virtual device lo (net 33), fix it urgently! [ 66.641528][ T7317] Dead loop on virtual device lo (net 33), fix it urgently! [ 66.641634][ T7317] Dead loop on virtual device lo (net 33), fix it urgently! [ 66.641726][ T7317] Dead loop on virtual device lo (net 33), fix it urgently! [ 66.641891][ T7317] Dead loop on virtual device lo (net 33), fix it urgently! [ 66.641997][ T7317] Dead loop on virtual device lo (net 33), fix it urgently! [ 66.642077][ T7317] Dead loop on virtual device lo (net 33), fix it urgently! [ 66.642245][ T7317] Dead loop on virtual device lo (net 33), fix it urgently! [ 66.926634][ T58] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.946702][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 67.030297][ T7338] overlayfs: failed to clone lowerpath [ 67.072459][ T7339] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 67.086658][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 67.087103][ T58] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 67.087938][ T58] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 67.087956][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 67.087971][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 67.087985][ T58] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.088007][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.295246][ T58] usb 5-1: GET_CAPABILITIES returned 0 [ 67.295273][ T58] usbtmc 5-1:16.0: can't read capabilities [ 67.619968][ T7369] fuse: Bad value for 'fd' [ 67.621572][ T7369] ip6gretap0: default FDB implementation only supports local addresses [ 68.047045][ T7394] mmap: syz.1.448 (7394) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 68.061083][ T7394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.075625][ T7394] bond2: (slave gretap1): making interface the new active one [ 68.079631][ T7394] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 68.178803][ T7396] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7396 comm=syz.1.448 [ 68.238709][ T7398] lo: entered allmulticast mode [ 68.239126][ T7398] bond0: entered allmulticast mode [ 68.239348][ T7398] eql: entered allmulticast mode [ 68.239434][ T7398] ifb0: entered allmulticast mode [ 68.239601][ T7398] ifb1: entered allmulticast mode [ 68.242198][ T7398] e1000 0000:00:07.0 eth0: entered allmulticast mode [ 68.250211][ T7398] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 68.254090][ T7398] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 68.254330][ T7398] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 68.254659][ T7398] hwsim0: entered allmulticast mode [ 68.254758][ T7398] ieee802154 phy0 wpan0: entered allmulticast mode [ 68.254856][ T7398] ieee802154 phy1 wpan1: entered allmulticast mode [ 68.254939][ T7398] teql0: entered allmulticast mode [ 68.255006][ T7398] tunl0: entered allmulticast mode [ 68.255058][ T7398] gre0: entered allmulticast mode [ 68.255098][ T7398] gretap0: entered allmulticast mode [ 68.255142][ T7398] erspan0: entered allmulticast mode [ 68.255185][ T7398] ip_vti0: entered allmulticast mode [ 68.255222][ T7398] ip6_vti0: entered allmulticast mode [ 68.255264][ T7398] sit0: entered allmulticast mode [ 68.255308][ T7398] ip6tnl0: entered allmulticast mode [ 68.255350][ T7398] ip6gre0: entered allmulticast mode [ 68.255392][ T7398] lapb0: entered allmulticast mode [ 68.255484][ T7398] lapb1: entered allmulticast mode [ 68.255599][ T7398] lapb2: entered allmulticast mode [ 68.255680][ T7398] lapb3: entered allmulticast mode [ 68.255771][ T7398] lapb4: entered allmulticast mode [ 68.255853][ T7398] lapb5: entered allmulticast mode [ 68.255932][ T7398] lapb6: entered allmulticast mode [ 68.256158][ T7398] lowpan0: entered allmulticast mode [ 68.256408][ T7398] rxe_eth0: entered allmulticast mode [ 68.257334][ T7398] macsec0: entered allmulticast mode [ 68.259634][ T7398] lapb7: entered allmulticast mode [ 68.260177][ T7398] netdevsim netdevsim3 eth2: entered allmulticast mode [ 68.260431][ T7398] netdevsim netdevsim3 eth3: entered allmulticast mode [ 68.260661][ T7398] netdevsim netdevsim3 eth4: entered allmulticast mode [ 68.260949][ T7398] netdevsim netdevsim3 eth5: entered allmulticast mode [ 69.316136][ T7428] vlan0: entered promiscuous mode [ 69.316152][ T7428] bridge0: entered promiscuous mode [ 69.423813][ T7442] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 69.645978][ T10] usb 5-1: USB disconnect, device number 2 [ 69.773108][ T7456] kvm: Disabled LAPIC found during irq injection [ 69.856860][ T5864] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.882093][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 69.882111][ T42] audit: type=1400 audit(1793216336.019:527): avc: denied { name_bind } for pid=7457 comm="syz.0.472" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.008303][ T5864] usb 7-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 70.009204][ T5864] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 70.009224][ T5864] usb 7-1: config 1 has no interface number 0 [ 70.011373][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.011391][ T5864] usb 7-1: Product: syz [ 70.011402][ T5864] usb 7-1: Manufacturer: syz [ 70.011414][ T5864] usb 7-1: SerialNumber: syz [ 70.034183][ T5864] usb 7-1: 3:0 : does not exist [ 70.034201][ T5864] usb 7-1: 3:0 : does not exist [ 70.229225][ T5864] usb 7-1: USB disconnect, device number 3 [ 70.250133][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.251423][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.252142][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.253735][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.254873][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.258368][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.267589][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.272656][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.275166][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.282801][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.284530][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.285356][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.290417][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.291322][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.296994][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.298570][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.302559][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.303026][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.304864][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.305339][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.315686][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.316415][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.317169][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.319190][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.321413][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.323662][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.325735][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.328031][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.330351][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.332913][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.334691][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.337499][ T7471] overlay: filesystem on ./file0 not supported as upperdir [ 70.392601][ T42] audit: type=1400 audit(1793216336.529:528): avc: denied { read write } for pid=7483 comm="syz.1.481" name="md0" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.392657][ T42] audit: type=1400 audit(1793216336.529:529): avc: denied { open } for pid=7483 comm="syz.1.481" path="/149/md0" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.408069][ T7484] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 70.408086][ T7484] block device autoloading is deprecated and will be removed. [ 70.409790][ T42] audit: type=1400 audit(1793216336.539:530): avc: denied { ioctl } for pid=7483 comm="syz.1.481" path="/149/md0" dev="tmpfs" ino=803 ioctlcmd=0x40480923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.440532][ T7488] warning: `syz.0.483' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.510096][ T7484] md/raid:md1: not enough operational devices (3/3 failed) [ 70.650216][ T7484] md/raid:md1: failed to run raid set. [ 70.650232][ T7484] md: pers->run() failed ... [ 70.653918][ T7494] __nla_validate_parse: 63 callbacks suppressed [ 70.653936][ T7494] netlink: 64 bytes leftover after parsing attributes in process `syz.0.484'. [ 70.755908][ T7503] netlink: 52 bytes leftover after parsing attributes in process `syz.1.488'. [ 70.881351][ T42] audit: type=1400 audit(1793216337.019:531): avc: denied { bind } for pid=7513 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.036280][ T7525] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 71.048639][ T42] audit: type=1400 audit(1793216337.189:532): avc: denied { ioctl } for pid=7537 comm="syz.1.502" path="socket:[24106]" dev="sockfs" ino=24106 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.051025][ T7538] overlayfs: failed to clone lowerpath [ 71.252681][ T7551] validate_nla: 56 callbacks suppressed [ 71.252694][ T7551] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 71.259428][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.259469][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.277174][ T41] cfg80211: failed to load regulatory.db [ 71.283704][ T7558] netlink: 52 bytes leftover after parsing attributes in process `syz.1.509'. [ 71.384547][ T42] audit: type=1400 audit(1793216337.519:533): avc: denied { getopt } for pid=7563 comm="syz.1.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.464352][ T7578] SELinux: DCCP has been removed, pid=7578 comm=syz.1.517 [ 71.465046][ T7578] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7578 comm=syz.1.517 [ 71.504557][ T7581] kvm: Disabled LAPIC found during irq injection [ 71.521809][ T7583] Cannot find del_set index 4 as target [ 71.685130][ T7600] net_ratelimit: 41 callbacks suppressed [ 71.685144][ T7600] ip_tables: iptables: counters copy to user failed while replacing table [ 71.687892][ T42] audit: type=1400 audit(1793216337.829:534): avc: denied { mounton } for pid=7599 comm="syz.4.526" path="/83/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 71.792357][ T7611] netlink: 'syz.1.530': attribute type 39 has an invalid length. [ 71.958761][ T7617] netlink: 52 bytes leftover after parsing attributes in process `syz.1.532'. [ 72.056333][ T42] audit: type=1400 audit(1793216338.189:535): avc: denied { mount } for pid=7626 comm="syz.1.537" name="/" dev="hugetlbfs" ino=24343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 72.556230][ T7639] kvm: Disabled LAPIC found during irq injection [ 72.842034][ T7658] process 'syz.2.549' launched '/dev/fd/7' with NULL argv: empty string added [ 72.843404][ T42] audit: type=1400 audit(1793216338.979:536): avc: denied { execute_no_trans } for pid=7657 comm="syz.2.549" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.846413][ T7658] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 72.851540][ T7673] netlink: 52 bytes leftover after parsing attributes in process `syz.1.551'. [ 73.069860][ T7684] UBIFS error (pid: 7684): cannot open "ubi0:testvol", error -19 [ 73.075666][ T7684] Bluetooth: MGMT ver 1.23 [ 73.213413][ T7688] block nbd0: Cannot add socket to a running device [ 73.985761][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.566'. [ 73.996265][ T7686] block nbd0: shutting down sockets [ 74.025800][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.566'. [ 74.071631][ T7729] netlink: 52 bytes leftover after parsing attributes in process `syz.2.571'. [ 74.075110][ T7729] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.075655][ T7729] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.121767][ T7737] sch_tbf: burst 256 is lower than device lo mtu (1514) ! [ 74.187796][ T7751] fuse: fd is not a fuse device [ 74.456810][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 77.134687][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 77.134699][ T42] audit: type=1400 audit(1793216343.269:541): avc: denied { map } for pid=7788 comm="syz.1.593" path="socket:[26961]" dev="sockfs" ino=26961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 77.138283][ T42] audit: type=1400 audit(1793216343.279:542): avc: denied { accept } for pid=7788 comm="syz.1.593" path="socket:[26961]" dev="sockfs" ino=26961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 77.139259][ T7791] netlink: 52 bytes leftover after parsing attributes in process `syz.2.594'. [ 77.303003][ T7803] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 77.317435][ C3] Illegal XDP return value 16128 on prog (id 58) dev team_slave_1, expect packet loss! [ 77.395494][ T42] audit: type=1400 audit(1793216343.529:543): avc: denied { create } for pid=7818 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 77.396070][ T42] audit: type=1400 audit(1793216343.529:544): avc: denied { bind } for pid=7818 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 77.425150][ T7821] fuse: fd is not a fuse device [ 77.425906][ T7821] netlink: 'syz.1.604': attribute type 2 has an invalid length. [ 77.431123][ T7822] kvm: Disabled LAPIC found during irq injection [ 77.448714][ T42] audit: type=1400 audit(1793216343.589:545): avc: denied { search } for pid=7823 comm="syz.0.605" name="/" dev="configfs" ino=3085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.448813][ T42] audit: type=1400 audit(1793216343.589:546): avc: denied { search } for pid=7823 comm="syz.0.605" name="usb_gadget" dev="configfs" ino=5662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.452719][ T42] audit: type=1400 audit(1793216343.589:547): avc: denied { mount } for pid=7823 comm="syz.0.605" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 77.465486][ T42] audit: type=1400 audit(1793216343.599:548): avc: denied { unmount } for pid=5783 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 77.471960][ T42] audit: type=1400 audit(1793216343.609:549): avc: denied { unmount } for pid=5783 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 77.494849][ T7827] netlink: 52 bytes leftover after parsing attributes in process `syz.0.606'. [ 77.552315][ T42] audit: type=1400 audit(1793216343.689:550): avc: denied { listen } for pid=7834 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.611203][ T7847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.612'. [ 77.751158][ T7857] netlink: 52 bytes leftover after parsing attributes in process `syz.0.614'. [ 77.752830][ T7857] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.753089][ T7857] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.759715][ T7859] netlink: 52 bytes leftover after parsing attributes in process `syz.4.615'. [ 77.796054][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'. [ 77.808956][ T7863] netlink: 256 bytes leftover after parsing attributes in process `syz.0.617'. [ 77.809206][ T7863] unsupported nlmsg_type 40 [ 77.833563][ T7863] IPVS: set_ctl: invalid protocol: 46 172.20.20.20:20002 [ 77.932257][ T7868] random: crng reseeded on system resumption [ 77.967803][ T7868] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 78.323593][ T7883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.624'. [ 78.355970][ T7885] netlink: 52 bytes leftover after parsing attributes in process `syz.2.625'. [ 78.390900][ T7889] device-mapper: table: 248:2: verity: Invalid number of feature args (-EINVAL) [ 78.390923][ T7889] device-mapper: ioctl: error adding target to table [ 78.469216][ T7894] kvm: Disabled LAPIC found during irq injection [ 78.608242][ T5789] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 78.830521][ T7909] netlink: 52 bytes leftover after parsing attributes in process `syz.0.632'. [ 78.871995][ T7911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=7911 comm=syz.0.633 [ 78.872298][ T7911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=7911 comm=syz.0.633 [ 79.144218][ T7927] ip_tables: iptables: counters copy to user failed while replacing table [ 79.230524][ T7933] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.512094][ T7938] kvm: Disabled LAPIC found during irq injection [ 79.662548][ T7944] FAULT_INJECTION: forcing a failure. [ 79.662548][ T7944] name failslab, interval 1, probability 0, space 0, times 0 [ 79.662568][ T7944] CPU: 1 UID: 0 PID: 7944 Comm: syz.2.647 Not tainted syzkaller #0 PREEMPT(full) [ 79.662583][ T7944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.662591][ T7944] Call Trace: [ 79.662608][ T7944] [ 79.662613][ T7944] dump_stack_lvl+0x100/0x190 [ 79.662696][ T7944] should_fail_ex.cold+0x5/0xa [ 79.662729][ T7944] should_failslab+0xc2/0x120 [ 79.662761][ T7944] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 79.662789][ T7944] ? __d_alloc+0x34/0xad0 [ 79.662814][ T7944] __d_alloc+0x34/0xad0 [ 79.662835][ T7944] d_alloc+0x4a/0x1e0 [ 79.662852][ T7944] lookup_one_qstr_excl+0x171/0x250 [ 79.662873][ T7944] start_dirop+0x59/0xb0 [ 79.662887][ T7944] simple_start_creating+0xf9/0x110 [ 79.662910][ T7944] ? __pfx_simple_start_creating+0x10/0x10 [ 79.662926][ T7944] ? mntput+0x70/0xa0 [ 79.662940][ T7944] ? simple_pin_fs+0xa3/0x190 [ 79.662954][ T7944] debugfs_start_creating.part.0+0x7b/0x150 [ 79.663005][ T7944] __debugfs_create_file+0xa9/0x500 [ 79.663021][ T7944] debugfs_create_file_full+0x41/0x60 [ 79.663038][ T7944] kvm_dev_ioctl+0x14d7/0x1ac0 [ 79.663060][ T7944] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 79.663079][ T7944] ? selinux_file_ioctl+0x1e0/0x290 [ 79.663113][ T7944] ? selinux_file_ioctl+0x1e7/0x290 [ 79.663134][ T7944] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 79.663156][ T7944] __x64_sys_ioctl+0x18e/0x210 [ 79.663176][ T7944] do_syscall_64+0x123/0x790 [ 79.663231][ T7944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.663245][ T7944] RIP: 0033:0x7f8f5019f559 [ 79.663256][ T7944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.663268][ T7944] RSP: 002b:00007f8f51142028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.663289][ T7944] RAX: ffffffffffffffda RBX: 00007f8f50425fa0 RCX: 00007f8f5019f559 [ 79.663298][ T7944] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 79.663305][ T7944] RBP: 00007f8f50236b20 R08: 0000000000000000 R09: 0000000000000000 [ 79.663313][ T7944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.663320][ T7944] R13: 00007f8f50426038 R14: 00007f8f50425fa0 R15: 00007ffd460af898 [ 79.663338][ T7944] [ 79.757259][ T7944] 9pnet_fd: Insufficient options for proto=fd [ 80.141472][ T7978] netlink: 'syz.2.660': attribute type 20 has an invalid length. [ 80.141846][ T7979] netlink: 'syz.2.660': attribute type 20 has an invalid length. [ 80.159940][ T7976] FAULT_INJECTION: forcing a failure. [ 80.159940][ T7976] name failslab, interval 1, probability 0, space 0, times 0 [ 80.159962][ T7976] CPU: 2 UID: 0 PID: 7976 Comm: syz.4.659 Not tainted syzkaller #0 PREEMPT(full) [ 80.159977][ T7976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.159985][ T7976] Call Trace: [ 80.160003][ T7976] [ 80.160009][ T7976] dump_stack_lvl+0x100/0x190 [ 80.160092][ T7976] should_fail_ex.cold+0x5/0xa [ 80.160120][ T7976] ? __pfx_kyber_init_hctx+0x10/0x10 [ 80.160170][ T7976] should_failslab+0xc2/0x120 [ 80.160208][ T7976] __kmalloc_cache_node_noprof+0x94/0x710 [ 80.160252][ T7976] ? kyber_init_hctx+0x82/0xab0 [ 80.160277][ T7976] ? __pfx_kyber_init_hctx+0x10/0x10 [ 80.160296][ T7976] kyber_init_hctx+0x82/0xab0 [ 80.160324][ T7976] ? __pfx_kyber_init_hctx+0x10/0x10 [ 80.160344][ T7976] blk_mq_init_sched+0x39e/0x6c0 [ 80.160375][ T7976] elevator_switch+0x1e3/0x7e0 [ 80.160420][ T7976] elevator_change+0x352/0x530 [ 80.160454][ T7976] elv_iosched_store+0x3be/0x460 [ 80.160484][ T7976] ? __pfx_elv_iosched_store+0x10/0x10 [ 80.160525][ T7976] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 80.160577][ T7976] ? __pfx_elv_iosched_store+0x10/0x10 [ 80.160612][ T7976] queue_attr_store+0x25f/0x2f0 [ 80.160644][ T7976] ? __pfx_queue_attr_store+0x10/0x10 [ 80.160672][ T7976] ? __lock_acquire+0x5c0/0x1f40 [ 80.160741][ T7976] ? lock_acquire+0x1d1/0x380 [ 80.160787][ T7976] ? sysfs_file_kobj+0x21/0x290 [ 80.160811][ T7976] ? find_held_lock+0x2b/0x80 [ 80.160833][ T7976] ? sysfs_file_kobj+0xe4/0x290 [ 80.160855][ T7976] ? sysfs_file_kobj+0xe4/0x290 [ 80.160883][ T7976] ? __pfx_queue_attr_store+0x10/0x10 [ 80.160903][ T7976] sysfs_kf_write+0xf2/0x150 [ 80.160920][ T7976] kernfs_fop_write_iter+0x3e0/0x5f0 [ 80.160933][ T7976] ? __pfx_sysfs_kf_write+0x10/0x10 [ 80.160950][ T7976] vfs_write+0x6af/0x1050 [ 80.160980][ T7976] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 80.160996][ T7976] ? __pfx_vfs_write+0x10/0x10 [ 80.161036][ T7976] ? find_held_lock+0x2b/0x80 [ 80.161062][ T7976] ksys_write+0x12a/0x250 [ 80.161074][ T7976] ? __pfx_ksys_write+0x10/0x10 [ 80.161094][ T7976] do_syscall_64+0x123/0x790 [ 80.161154][ T7976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.161169][ T7976] RIP: 0033:0x7f291f19f559 [ 80.161182][ T7976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.161194][ T7976] RSP: 002b:00007f29200f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.161215][ T7976] RAX: ffffffffffffffda RBX: 00007f291f425fa0 RCX: 00007f291f19f559 [ 80.161223][ T7976] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 80.161231][ T7976] RBP: 00007f291f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 80.161239][ T7976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.161246][ T7976] R13: 00007f291f426038 R14: 00007f291f425fa0 R15: 00007ffd44812388 [ 80.161265][ T7976] [ 80.161362][ T7976] elv: switch to "kyber" failed, falling back to "none" [ 80.418452][ T7993] kvm: Disabled LAPIC found during irq injection [ 80.713087][ T8016] netlink: 'syz.1.676': attribute type 3 has an invalid length. [ 80.930309][ T8044] kvm: Disabled LAPIC found during irq injection [ 81.122440][ T8060] ip6erspan0: entered allmulticast mode [ 81.398133][ T8080] netlink: 'syz.1.697': attribute type 1 has an invalid length. [ 81.408091][ T8080] 8021q: adding VLAN 0 to HW filter on device bond3 [ 81.574467][ T8089] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 81.575353][ T8089] bond4 (unregistering): Released all slaves [ 81.715288][ T8097] kvm: Disabled LAPIC found during irq injection [ 81.960688][ T8103] FAULT_INJECTION: forcing a failure. [ 81.960688][ T8103] name failslab, interval 1, probability 0, space 0, times 0 [ 81.960743][ T8103] CPU: 1 UID: 0 PID: 8103 Comm: syz.4.705 Not tainted syzkaller #0 PREEMPT(full) [ 81.960759][ T8103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.960767][ T8103] Call Trace: [ 81.960785][ T8103] [ 81.960790][ T8103] dump_stack_lvl+0x100/0x190 [ 81.960889][ T8103] should_fail_ex.cold+0x5/0xa [ 81.960917][ T8103] ? __pfx_kyber_init_hctx+0x10/0x10 [ 81.960964][ T8103] should_failslab+0xc2/0x120 [ 81.960998][ T8103] __kmalloc_cache_node_noprof+0x94/0x710 [ 81.961057][ T8103] ? kyber_init_hctx+0x82/0xab0 [ 81.961081][ T8103] ? __pfx_kyber_init_hctx+0x10/0x10 [ 81.961103][ T8103] kyber_init_hctx+0x82/0xab0 [ 81.961132][ T8103] ? __pfx_kyber_init_hctx+0x10/0x10 [ 81.961148][ T8103] blk_mq_init_sched+0x39e/0x6c0 [ 81.961165][ T8103] elevator_switch+0x1e3/0x7e0 [ 81.961193][ T8103] elevator_change+0x352/0x530 [ 81.961229][ T8103] elv_iosched_store+0x3be/0x460 [ 81.961251][ T8103] ? __pfx_elv_iosched_store+0x10/0x10 [ 81.961277][ T8103] ? kernfs_fop_write_iter+0x2c2/0x5f0 [ 81.961315][ T8103] ? __pfx_elv_iosched_store+0x10/0x10 [ 81.961335][ T8103] queue_attr_store+0x25f/0x2f0 [ 81.961353][ T8103] ? __pfx_queue_attr_store+0x10/0x10 [ 81.961371][ T8103] ? __lock_acquire+0x5c0/0x1f40 [ 81.961413][ T8103] ? lock_acquire+0x1d1/0x380 [ 81.961429][ T8103] ? sysfs_file_kobj+0x21/0x290 [ 81.961445][ T8103] ? find_held_lock+0x2b/0x80 [ 81.961458][ T8103] ? sysfs_file_kobj+0xe4/0x290 [ 81.961473][ T8103] ? sysfs_file_kobj+0xe4/0x290 [ 81.961490][ T8103] ? __pfx_queue_attr_store+0x10/0x10 [ 81.961507][ T8103] sysfs_kf_write+0xf2/0x150 [ 81.961523][ T8103] kernfs_fop_write_iter+0x3e0/0x5f0 [ 81.961536][ T8103] ? __pfx_sysfs_kf_write+0x10/0x10 [ 81.961554][ T8103] vfs_write+0x6af/0x1050 [ 81.961580][ T8103] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 81.961594][ T8103] ? __pfx_vfs_write+0x10/0x10 [ 81.961612][ T8103] ? find_held_lock+0x2b/0x80 [ 81.961635][ T8103] ksys_write+0x12a/0x250 [ 81.961646][ T8103] ? __pfx_ksys_write+0x10/0x10 [ 81.961663][ T8103] do_syscall_64+0x123/0x790 [ 81.961723][ T8103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.961742][ T8103] RIP: 0033:0x7f291f19f559 [ 81.961754][ T8103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.961766][ T8103] RSP: 002b:00007f29200f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.961787][ T8103] RAX: ffffffffffffffda RBX: 00007f291f425fa0 RCX: 00007f291f19f559 [ 81.961796][ T8103] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000004 [ 81.961804][ T8103] RBP: 00007f291f236b20 R08: 0000000000000000 R09: 0000000000000000 [ 81.961812][ T8103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.961820][ T8103] R13: 00007f291f426038 R14: 00007f291f425fa0 R15: 00007ffd44812388 [ 81.961837][ T8103] [ 81.962082][ T8103] elv: switch to "kyber" failed, falling back to "none" [ 82.265548][ T5891] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.362941][ T5891] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.403397][ T8113] __nla_validate_parse: 18 callbacks suppressed [ 82.403417][ T8113] netlink: 52 bytes leftover after parsing attributes in process `syz.0.711'. [ 82.415553][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.421115][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.422615][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.423268][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.423668][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.451012][ T5891] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.576094][ T5891] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.663126][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 82.663144][ T42] audit: type=1400 audit(1793216348.799:569): avc: denied { read } for pid=5496 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 82.675665][ T8114] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.701962][ T5891] bridge_slave_1: left allmulticast mode [ 82.701988][ T5891] bridge_slave_1: left promiscuous mode [ 82.702187][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.716254][ T5891] bridge_slave_0: left allmulticast mode [ 82.716282][ T5891] bridge_slave_0: left promiscuous mode [ 82.716451][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.773994][ T42] audit: type=1400 audit(1793216348.909:570): avc: denied { write } for pid=8135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.836115][ T42] audit: type=1400 audit(1793216348.969:571): avc: denied { write } for pid=8139 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.853499][ T5891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.856040][ T5891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.861499][ T5891] bond0 (unregistering): Released all slaves [ 82.900725][ T5496] 8021q: adding VLAN 0 to HW filter on device eth6 [ 83.020925][ T42] audit: type=1400 audit(1793216349.159:572): avc: denied { write } for pid=8151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.080330][ T42] audit: type=1400 audit(1793216349.219:573): avc: denied { write } for pid=8160 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.140010][ T5496] 8021q: adding VLAN 0 to HW filter on device eth7 [ 83.199113][ T8114] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.199159][ T8114] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.199222][ T8114] bridge_slave_0: entered allmulticast mode [ 83.203459][ T8114] bridge_slave_0: entered promiscuous mode [ 83.207491][ T8114] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.207537][ T8114] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.207596][ T8114] bridge_slave_1: entered allmulticast mode [ 83.212850][ T8114] bridge_slave_1: entered promiscuous mode [ 83.267483][ T8114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.273817][ T5891] hsr_slave_0: left promiscuous mode [ 83.274541][ T5891] hsr_slave_1: left promiscuous mode [ 83.275054][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.275137][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.276365][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.276375][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.292538][ T42] audit: type=1400 audit(1793216349.429:574): avc: denied { write } for pid=8177 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.293732][ T5891] veth1_macvtap: left promiscuous mode [ 83.293808][ T5891] veth0_macvtap: left promiscuous mode [ 83.293891][ T5891] veth1_vlan: left promiscuous mode [ 83.293959][ T5891] veth0_vlan: left promiscuous mode [ 83.340714][ T42] audit: type=1400 audit(1793216349.479:575): avc: denied { write } for pid=8181 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.440948][ T5891] team0 (unregistering): Port device team_slave_1 removed [ 83.445567][ T5891] team0 (unregistering): Port device team_slave_0 removed [ 83.473237][ T8187] netlink: 52 bytes leftover after parsing attributes in process `syz.0.725'. [ 83.558231][ T8114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.559254][ T5496] 8021q: adding VLAN 0 to HW filter on device eth8 [ 83.578586][ T8114] team0: Port device team_slave_0 added [ 83.580551][ T8114] team0: Port device team_slave_1 added [ 83.597849][ T8114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.597860][ T8114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.597874][ T8114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.598868][ T8114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.598876][ T8114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.598891][ T8114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.621731][ T8114] hsr_slave_0: entered promiscuous mode [ 83.622205][ T8114] hsr_slave_1: entered promiscuous mode [ 83.699400][ T42] audit: type=1400 audit(1793216349.839:576): avc: denied { write } for pid=8191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.779556][ T42] audit: type=1400 audit(1793216349.919:577): avc: denied { write } for pid=8197 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.782004][ T8114] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.789656][ T8114] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.793308][ T8114] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.802416][ T8114] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.803212][ T8114] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.808602][ T8114] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.811388][ T8114] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.817390][ T8114] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.837203][ T8114] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.837308][ T8114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.837554][ T8114] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.837646][ T8114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.841689][ T5496] 8021q: adding VLAN 0 to HW filter on device eth9 [ 83.866554][ T42] audit: type=1400 audit(1793216349.999:578): avc: denied { open } for pid=8207 comm="syz.2.729" path="/dev/ptyq8" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 83.903730][ T8114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.915836][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.917786][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.935967][ T8114] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.946262][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.946359][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.957894][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.957971][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.091305][ T8230] loop5: detected capacity change from 0 to 7 [ 84.102907][ T8230] Dev loop5: unable to read RDB block 7 [ 84.102931][ T8230] loop5: unable to read partition table [ 84.103028][ T8230] loop5: partition table beyond EOD, truncated [ 84.103047][ T8230] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 84.158020][ T8236] fuse: fd is not a fuse device [ 84.240661][ T8114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.392009][ T8114] veth0_vlan: entered promiscuous mode [ 84.395453][ T8114] veth1_vlan: entered promiscuous mode [ 84.412286][ T8114] veth0_macvtap: entered promiscuous mode [ 84.414963][ T8114] veth1_macvtap: entered promiscuous mode [ 84.423105][ T8114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.427909][ T8114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.457827][ T5789] Bluetooth: hci2: command tx timeout [ 84.470393][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.470408][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.486196][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.486210][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.506702][ T5876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.506742][ T5876] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.506829][ T5876] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.506863][ T5876] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.910137][ T8267] netlink: 52 bytes leftover after parsing attributes in process `syz.1.737'. [ 84.969704][ T8271] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 85.154694][ T8277] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 85.193525][ T8280] netlink: 'syz.0.742': attribute type 1 has an invalid length. [ 85.209557][ T8280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.227680][ T8280] bond1: (slave ip6erspan0): making interface the new active one [ 85.228648][ T8280] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 85.281553][ T8286] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 85.319034][ T8292] netlink: 52 bytes leftover after parsing attributes in process `syz.0.747'. [ 85.375429][ T8296] fuse: Bad value for 'user_id' [ 85.375442][ T8296] fuse: Bad value for 'user_id' [ 85.675742][ T8308] comedi comedi0: fl512: I/O base address not correctly aligned [ 85.844216][ T8321] netlink: 52 bytes leftover after parsing attributes in process `syz.0.758'. [ 85.870885][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 85.871807][ T8324] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 85.881855][ T8324] bond4: option mode: invalid value (8) [ 85.888298][ T8324] bond4 (unregistering): Released all slaves [ 86.126900][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 86.198997][ T8337] netlink: 16 bytes leftover after parsing attributes in process `syz.5.764'. [ 86.213789][ C3] [ 86.214715][ C3] ============================= [ 86.216745][ C3] [ BUG: Invalid wait context ] [ 86.218950][ C3] syzkaller #0 Not tainted [ 86.221035][ C3] ----------------------------- [ 86.223228][ C3] swapper/3/0 is trying to lock: [ 86.224972][ C3] ffff88802d2fdbc8 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x255/0xd70 [ 86.228832][ C3] other info that might help us debug this: [ 86.230881][ C3] context-{2:2} [ 86.232000][ C3] locks held by swapper/3/0: 1, last CPU#3: [ 86.233912][ C3] #0: ffff88802d2fe118 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x23b/0xd70 [ 86.237004][ C3] stack backtrace: [ 86.238193][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 86.240950][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.244431][ C3] Call Trace: [ 86.245771][ C3] [ 86.247007][ C3] dump_stack_lvl+0x100/0x190 [ 86.249013][ C3] __lock_acquire+0xfcc/0x1f40 [ 86.251114][ C3] ? xa_load+0x149/0x2c0 [ 86.253030][ C3] ? xa_load+0x149/0x2c0 [ 86.254892][ C3] lock_acquire+0x1d1/0x380 [ 86.256790][ C3] ? kvm_xen_set_evtchn_fast+0x255/0xd70 [ 86.259140][ C3] _raw_read_lock_irqsave+0x46/0x90 [ 86.261332][ C3] ? kvm_xen_set_evtchn_fast+0x255/0xd70 [ 86.263676][ C3] kvm_xen_set_evtchn_fast+0x255/0xd70 [ 86.265971][ C3] ? kvm_xen_set_evtchn_fast+0x23b/0xd70 [ 86.268311][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 86.270714][ C3] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 86.273226][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 86.275373][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 86.277638][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 86.279492][ C3] xen_timer_callback+0x1db/0x2a0 [ 86.281323][ C3] ? __pfx_xen_timer_callback+0x10/0x10 [ 86.283064][ C3] ? __hrtimer_run_queues+0x361/0x9a0 [ 86.285011][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 86.286999][ C3] ? __pfx_xen_timer_callback+0x10/0x10 [ 86.289101][ C3] __hrtimer_run_queues+0x135/0x9a0 [ 86.291319][ C3] hrtimer_interrupt+0x441/0xaa0 [ 86.292966][ C3] __sysvec_apic_timer_interrupt+0x109/0x470 [ 86.295208][ C3] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 86.297190][ C3] [ 86.298447][ C3] [ 86.299728][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.302309][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 86.304648][ C3] Code: 77 a3 02 e9 43 61 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 0d 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 86.312726][ C3] RSP: 0018:ffffc90000197e00 EFLAGS: 00000206 [ 86.315057][ C3] RAX: 000000000009921b RBX: ffff888020aa2580 RCX: ffffffff8bebb325 [ 86.318203][ C3] RDX: 0000000000000001 RSI: ffffffff8e6212d7 RDI: ffffffff8c833580 [ 86.321343][ C3] RBP: ffffed10041544b0 R08: 0000000000000001 R09: ffffed100d466825 [ 86.323957][ C3] R10: ffff88806a33412b R11: 0000000000000001 R12: 0000000000000000 [ 86.326313][ C3] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 86.328670][ C3] ? ct_kernel_exit+0x125/0x180 [ 86.330412][ C3] default_idle+0x9/0x10 [ 86.332041][ C3] default_idle_call+0x6c/0xb0 [ 86.333865][ C3] do_idle+0x3ae/0x5b0 [ 86.335083][ C3] ? __pfx_do_idle+0x10/0x10 [ 86.336417][ C3] ? finish_task_switch.isra.0+0x149/0x10d0 [ 86.338145][ C3] cpu_startup_entry+0x4f/0x60 [ 86.339526][ C3] start_secondary+0x21d/0x2d0 [ 86.340908][ C3] ? __pfx_start_secondary+0x10/0x10 [ 86.342472][ C3] common_startup_64+0x13e/0x158 [ 86.344063][ C3] [ 86.546861][ T5789] Bluetooth: hci2: command tx timeout [ 88.616725][ T5789] Bluetooth: hci2: command tx timeout [ 89.176876][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 90.696705][ T5789] Bluetooth: hci2: command tx timeout [ 94.762569][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 94.762586][ T42] audit: type=1400 audit(1793216360.899:590): avc: denied { write } for pid=8347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.792316][ T42] audit: type=1400 audit(1793216360.929:591): avc: denied { write } for pid=8350 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.005224][ T42] audit: type=1400 audit(1793216361.139:592): avc: denied { write } for pid=8353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.039293][ T42] audit: type=1400 audit(1793216361.179:593): avc: denied { write } for pid=8356 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.319365][ T42] audit: type=1400 audit(1793216361.459:594): avc: denied { write } for pid=8359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.352979][ T42] audit: type=1400 audit(1793216361.489:595): avc: denied { write } for pid=8362 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.445281][ T42] audit: type=1400 audit(1793216361.579:596): avc: denied { write } for pid=8365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.489822][ T42] audit: type=1400 audit(1793216361.629:597): avc: denied { write } for pid=8368 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1