last executing test programs: 2m12.682913228s ago: executing program 3 (id=824): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5390, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_delrule={0x24, 0x21, 0x1, 0x70bd06, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6}]}, 0x24}}, 0x20000000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') pread64(r2, &(0x7f0000002c00)=""/4082, 0xff2, 0x7fffffff) 2m12.669310098s ago: executing program 3 (id=826): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x1e, 0x4, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x10f, 0x11, 0x0, &(0x7f0000000500)) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f00000059c0)={0x6000004, 0x0, 0x0, 0x4, 0x6}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) 2m12.579590383s ago: executing program 3 (id=827): unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x8, 0x27f21602bc701ebe}], 0x1, 0x0) unshare(0x2c040000) 2m12.579368681s ago: executing program 3 (id=828): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x1, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x109002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000000)=0xe) read$dsp(r4, &(0x7f00000000c0)=""/108, 0x6c) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x31]}}]}) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$dsp(r1, &(0x7f0000002000)='`', 0x88020) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r7 = fanotify_init(0x81, 0x40000) fanotify_mark(r7, 0x105, 0x800101b, r6, 0x0) read$FUSE(r7, &(0x7f0000004340)={0x2020}, 0x2020) 2m12.349424732s ago: executing program 3 (id=832): r0 = syz_clone(0x2040000, &(0x7f0000000740)="9479b49c2f2bfee157a8fc98a576992ea0f3eb0e1256ee8878ce2ed697981aff88bb2492b5e6baa24e6f82df6812dac87dff7adc4c146f2e451c6286ae1376f0f1d982b554b2cf176054f33e41ab364b23112321f8073b9a19736c3a4b2cd90265e6b5b4879c3e90e4287ed5bf4f2f8426e83f6b1620cff13944d3e90cb40748787b6eb29f11ddb6e87e4fa0f4a44940c7e2eab8044e848a23dbd8bd9e293cca7590c8cc9b8607b634d98be12bc43110f5a437427e1e874529d46f575ec0", 0xbe, &(0x7f0000000700), &(0x7f0000000080), &(0x7f0000000880)="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") ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0xb8, 0x3, 0x4, 0x100000000000, 0x1, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000600)={0x8, &(0x7f0000000480)=[{0x50b, 0x5, 0x1}, {0xbd, 0x7d, 0x7, 0x4}, {0xfffa, 0x2, 0x5, 0x54d}, {0x5, 0x0, 0x0, 0x8}, {0x8, 0xff, 0x6, 0x7fffffff}, {0x4, 0x4, 0x7, 0x9}, {0x7, 0x8, 0x81, 0x8001}, {0x5, 0xf, 0x9, 0xeb4}]}) r4 = syz_open_dev$ublk_bdev(&(0x7f0000000300), 0x0, 0x4900) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000000680)={0x27, 0x0, 0x0, 0x2, 0xfe, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r5, 0x118, 0x3, 0x0, &(0x7f00000003c0)) r6 = epoll_create1(0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x480000, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r4, &(0x7f0000000640)={r6, r5, 0x4}) ioctl$DVB_DEMUX_DMX_EXPBUF(r7, 0xc00c6f3e, &(0x7f00000000c0)={0x7, 0x0, r7}) getsockopt$nfc_llcp(r8, 0x118, 0x4, &(0x7f0000002840)=""/4096, 0x1000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3a) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002bbd70e3ffffffff21000000180001801400020076657468305f766972745f77696669"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000540)={{0x3}, 'port1\x00', 0xc, 0x0, 0xd5, 0x0, 0x9d, 0x10000, 0xffbfff1c, 0x0, 0xe, 0xd}) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa884f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd822e810a0a5ae21e33718bdc38335ffac283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e", 0xf91}], 0x1, 0x1, 0x2000002) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$TIOCL_SELLOADLUT(r8, 0x541c, &(0x7f0000000140)={0x5, 0x5, 0x80000001, 0x6, 0x2}) 2m11.990202434s ago: executing program 3 (id=834): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r1, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000140)={0x11, 0x4, {0x8, @struct={0x1b8000, 0xab}, 0x0, 0x9, 0xa, 0x8, 0x2, 0x8000, 0x80, @usage=0x5, 0xf, 0x3124, [0xfffffffffffffffd, 0x10, 0x9, 0x0, 0x6, 0x100000000]}, {0x1d08, @usage=0x8, 0x0, 0x9, 0x54aa, 0x80000000, 0x3, 0xfffffffffffffff9, 0x80, @usage=0x4, 0x3, 0x4, [0x1, 0x5, 0x80, 0x7, 0xc7, 0x97a4]}, {0x7, @usage=0x6, 0x0, 0x2, 0x6, 0x0, 0xa, 0x4, 0x460, @struct={0x5, 0x2}, 0x3, 0x9, [0x6, 0x7fff, 0x5, 0x4, 0x800, 0x4]}, {0x5, 0xb, 0x6}}) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000100)) 2m11.929872168s ago: executing program 32 (id=834): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r1, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000140)={0x11, 0x4, {0x8, @struct={0x1b8000, 0xab}, 0x0, 0x9, 0xa, 0x8, 0x2, 0x8000, 0x80, @usage=0x5, 0xf, 0x3124, [0xfffffffffffffffd, 0x10, 0x9, 0x0, 0x6, 0x100000000]}, {0x1d08, @usage=0x8, 0x0, 0x9, 0x54aa, 0x80000000, 0x3, 0xfffffffffffffff9, 0x80, @usage=0x4, 0x3, 0x4, [0x1, 0x5, 0x80, 0x7, 0xc7, 0x97a4]}, {0x7, @usage=0x6, 0x0, 0x2, 0x6, 0x0, 0xa, 0x4, 0x460, @struct={0x5, 0x2}, 0x3, 0x9, [0x6, 0x7fff, 0x5, 0x4, 0x800, 0x4]}, {0x5, 0xb, 0x6}}) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000100)) 1m13.157106635s ago: executing program 4 (id=1644): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}, 0x3}], 0x1, 0x22, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000440)="91f8a9ff9519def28791bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500000000000000000039bf", 0x43}, {&(0x7f0000000140)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d02600800000000000003b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac545360213e167414e521a483101f7af8b2b3f2da79a78104c2d9e7b16ed86b1249493bd21cf9c966ef17255dc5d0b17538d96e58ba4e7ae535bde163b48f2af9a715e6b4160f83465167ebb18cf8e9e274851974ad923f5b45d7950d8a4d081c3de2d81222666d533babe554fdc875cd585cca1723df96f4ab4de228866697a555efe3829510e224bcccbb423", 0xda}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a92", 0x13}], 0x3}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa", 0x8a}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6", 0x51}], 0x2}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287", 0x5a}, {&(0x7f0000000840)="aa46414dc6ed312a9e8c43569a4ad60d0bd4f80ef212ca4b33e277e112eadb37d57bb8ba07a6511b4176393b0f7de49f79208e59abf7b187c6c8d9c3e6d77b40f87e29342de767a176ab512dd5a3f9867a218bcee1ac687e9a30e62a1452060a632d0f9dea7b7c5879ff280a0b746fec6e9c4ea16f70bad4ac4447df0210f382a648666f544e701bcaffd7e541c92b4fa8882468c4e18d936a4613458ba620ab82a102f4667e3b1987329fb112e4232b0909fbebc90f351bd1f59b855014972e33191353", 0xc4}, {&(0x7f0000000940)="628afbcfeee02a4f759fa788752c6b0fca4275688dd26992aaa62b59bfe65b1d836009691026195f2134156a7a9ac38f0b9be014d034de38339b87347a003d15095fe0bd1a2af21dc2c7091bf7ed90c7a7501086b6d7a2397bd33aa2ab2ac1e1560eb3073218a9b9", 0x68}, {&(0x7f0000000f00)="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", 0x26c}], 0x4}}], 0x3, 0x46094) 1m13.155851989s ago: executing program 4 (id=1645): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0xd12, 0x7, 0x7fff, 0x2}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x4000000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setpriority(0x1, 0x0, 0x4) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x6f09, &(0x7f0000001340)={0x0, 0x595f, 0x80, 0x1, 0x53}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x6030}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000040)={0x9, 0xffffffffffffffff, 0x2, {0xfffffffffffffffb, 0xfffffffffffffc01}, 0x1}, 0x1) (async) r7 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='cdg', 0x3) (async) signalfd(r0, &(0x7f0000000300)={[0x6]}, 0x8) r8 = socket$l2tp(0x2, 0x2, 0x73) getsockname$inet(r8, 0x0, &(0x7f0000000a40)) (async) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1m13.089110689s ago: executing program 4 (id=1646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) setreuid(0xee01, 0xee01) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r1, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14}}, 0x64}}, 0x0) 1m13.03931278s ago: executing program 4 (id=1647): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x14}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002180)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000022c0)={'dt2814\x00', [0x4f24, 0x14, 0x10000, 0xff, 0x5, 0xcc8, 0x6, 0x7, 0x9, 0x100, 0x3, 0xffffffff, 0x1, 0x9, 0xffffffff, 0x2, 0x0, 0x7, 0x3, 0x40000003, 0x3, 0x6, 0x4, 0x20001e58, 0x3, 0x1, 0x7c, 0x207, 0x6, 0x0, 0xb]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) socket$netlink(0x10, 0x3, 0x14) (async) socket$netlink(0x10, 0x3, 0x14) setns(r10, 0x24020000) syz_pidfd_open(r7, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000002140), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x24, r11, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000970}, 0x10) (async) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x24, r11, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000970}, 0x10) 1m12.979575367s ago: executing program 4 (id=1648): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x60400, 0x0) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) (async) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000009441"]) (async) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000140)={0x0, 0xd, 0x80, "a9501603830f4610e686e09ee2a8f61f1773b52aa54d8e9184c571b90d9480ba", 0x44495658}) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000100)={0x5}) (async) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffff"], 0x34}], 0x1}, 0x0) r6 = socket$inet(0x2, 0x3, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000400002000000400004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a3000000000140001"], 0xc8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) sendmmsg$inet(r6, &(0x7f0000000d80)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a00000003"], 0x20}}], 0x1, 0x24000004) (async) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000240)=[0x80, 0xfffc, 0x115], &(0x7f0000000280)=[0x1, 0xa, 0x1, 0x1, 0x200, 0x4, 0x401, 0x4, 0x7], &(0x7f0000000380)=[0xa], &(0x7f00000003c0)=[0x3, 0x0, 0xc5, 0xfff5, 0x7fff, 0x2]}) 1m12.757831661s ago: executing program 4 (id=1655): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x101a82, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x32}], 0x1, 0x122, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r3, &(0x7f00000000c0), 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f046}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m12.658003803s ago: executing program 33 (id=1655): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x101a82, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x32}], 0x1, 0x122, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r3, &(0x7f00000000c0), 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f046}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 24.899103716s ago: executing program 5 (id=1656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f00000001c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000100)={0x10, 0xffffffda, 0x3}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3edffffffffff1b0012800b0001006d616373656300000c000280050003000800000008000500", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 24.899038198s ago: executing program 5 (id=1656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f00000001c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000100)={0x10, 0xffffffda, 0x3}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3edffffffffff1b0012800b0001006d616373656300000c000280050003000800000008000500", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 24.898981601s ago: executing program 5 (id=1656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f00000001c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000100)={0x10, 0xffffffda, 0x3}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3edffffffffff1b0012800b0001006d616373656300000c000280050003000800000008000500", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 20.117535378s ago: executing program 5 (id=1656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f00000001c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000100)={0x10, 0xffffffda, 0x3}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3edffffffffff1b0012800b0001006d616373656300000c000280050003000800000008000500", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 12.704314619s ago: executing program 5 (id=1656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f00000001c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000100)={0x10, 0xffffffda, 0x3}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3edffffffffff1b0012800b0001006d616373656300000c000280050003000800000008000500", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 5.297331253s ago: executing program 5 (id=1656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f00000001c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000100)={0x10, 0xffffffda, 0x3}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3edffffffffff1b0012800b0001006d616373656300000c000280050003000800000008000500", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 3.946750391s ago: executing program 2 (id=2239): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000140)) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 3.744433543s ago: executing program 2 (id=2242): socket$inet(0x2, 0xa, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) socket$netlink(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000090900010073797a300000000044000000090a010400000000000000000100100008000a40000000000900010073797a3000000000080005400000001e090002"], 0x8c}}, 0x0) 3.288441649s ago: executing program 2 (id=2247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2058080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x80c0}, 0x8054) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 2.968931494s ago: executing program 2 (id=2252): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000001c0)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x34, r3, 0x10, 0x70bd2c, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x47}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x34}}, 0x2000804d) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000180)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}}, 0x11) 2.017995741s ago: executing program 1 (id=2268): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000740)="f30f209867262e262ef30fc77300360fc72cc966b8d0008ee09a58b300001700ea39b01d9a4300660f3880ae00000000f30f080f01bcb9bdea945ab8113300000f23c80f21f8350800f0000f23f8", 0x4e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffb000/0x2000)=nil}) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 1.79627725s ago: executing program 0 (id=2272): r0 = syz_io_uring_setup(0x2e96, &(0x7f0000000400)={0x0, 0x405961, 0x1c483, 0x2, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0xf, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8490}, 0x93) recvmsg$can_raw(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000900)=""/110, 0x14}], 0x1}, 0x40000040) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x9, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0xb050, 0x0, 0x2}], 0x1}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_enter(r0, 0x705, 0x716, 0x50, &(0x7f00000001c0)={[0x2]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000300)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r7, 0x4008af13, &(0x7f0000000080)={0x1, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) unlink(&(0x7f0000000080)='./file1\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r0, 0x2004, 0xfffffffd, 0x9, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2000) ioctl$CEC_DQEVENT(r8, 0xc0506107, &(0x7f0000000540)={0x0, 0x0, 0x0, @raw}) 1.72335403s ago: executing program 1 (id=2273): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000800)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0xa) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e00000001800000ac0000000300000010000000", @ANYRES32=r4, @ANYBLOB="0400"/20, @ANYRES32=r11, @ANYRES32=r9, @ANYBLOB="05000000033f0000030000000f00"/28], 0x50) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000540)=[@decrefs, @decrefs], 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000300)="5456f932731045fecca2245b7bbfb04539020c40f5fcaad5346e21faf67b4664841fe8edfe34cf0ea6daefdd17ba958b07dcdb6eefbdc6a98b8ecf4d468b1d8c1289cf4909d5066c0b8c9ab46cfe580d"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1.72278358s ago: executing program 2 (id=2274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8640, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6dbf}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)={0x20, 0xffffffffffffffda, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000080)=0x99c7, 0x4) r6 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r10, 0x0, 0xa, 0x0, &(0x7f0000000040)) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0e, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 1.6465128s ago: executing program 0 (id=2275): creat(&(0x7f0000000300)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x1) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v2={0x2000000, [{0x3}, {0x1fe, 0x7}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@ipv6_newrule={0x1c, 0x20, 0x100, 0x70bd28, 0x35dfdbfc, {0xa, 0x14, 0x80, 0x0, 0x8, 0x0, 0x0, 0x8, 0x17}}, 0x1c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r1, &(0x7f0000006540)={0x2020}, 0xfffffce2) 1.468339701s ago: executing program 1 (id=2276): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r4, &(0x7f0000001e80)={&(0x7f0000000180)=@caif=@rfm, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000440)=""/210, 0xd2}, {&(0x7f0000000540)=""/18, 0x12}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/199, 0xc7}, {&(0x7f0000001c80)=""/88, 0x58}, {&(0x7f0000001d00)=""/136, 0x88}], 0x7, &(0x7f0000001e40)=""/5, 0x5}, 0x40000000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010000906000000", @ANYRES32=0x0, @ANYBLOB="86feae88000004001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r7, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 1.304309505s ago: executing program 1 (id=2277): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x2}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x40890) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000001040)=@arm64={0x7, 0x4, 0x4, '\x00', 0xeaa8}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) mount$9p_virtio(&(0x7f0000000300), &(0x7f0000000480)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) umount2(&(0x7f0000000140)='./file0\x00', 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 728.468551ms ago: executing program 0 (id=2278): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) getsockname$packet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x14) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x2000}) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) (async) getsockname$packet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x14) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x2000}) (async) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) (async) 649.166214ms ago: executing program 0 (id=2279): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000003000), 0x201, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ufs\x00', 0x204009, 0x0) 502.543102ms ago: executing program 0 (id=2280): r0 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x2400) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$nl_rdma(0x10, 0x3, 0x14) dup3(r3, r1, 0x80000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) 417.965067ms ago: executing program 0 (id=2281): r0 = socket(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x80, 0x7, 0x401, 0x6, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @private=0xa0104fe, @multicast2}}}}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905097a63"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x10104) 417.580907ms ago: executing program 1 (id=2282): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x1a, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x98}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0xfffffdfc}]) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 18.469365ms ago: executing program 2 (id=2283): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="03"], 0x9) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) 0s ago: executing program 1 (id=2284): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '\x9e\x01h\n\xcd\xf1\x833g\x91\xabP\x99\xf4V\xbaP\xa99\xa8N\t.\xf5\v\x97\xc5\xc4\xf4~\xe2\xa6^\\\x1a \x84\xc7*\xe3\xf2Y\xc6\xb8\xa0\xa4`&\a\x91/\x9dq\xb5\xc2S\xef\xcf\x12\x96+\xe8\xd0\xff\xff\x1d\xc6\x84\xcf\xcb\xabq\xcaF!3'}}]}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000a000000140002"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): 836] usb 6-1: USB disconnect, device number 25 [ 197.011282][ T5886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.023367][ T5836] usblp0: removed [ 197.123766][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.125592][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 197.129575][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.131748][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.133033][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.138597][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.147435][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.150412][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.153720][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.157025][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.161485][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.164531][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.168207][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.171603][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.175497][ T5836] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 197.177001][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.181770][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.185135][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.188366][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.193104][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.196354][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.199769][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.203065][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.206635][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.209526][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.212240][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.215535][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.221310][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.224308][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.228345][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.231596][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.237590][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.241017][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.244017][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.245624][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 197.247877][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.250148][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.257762][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.260974][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.264405][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.267514][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.280151][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.283219][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.286772][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.290195][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.296947][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.300029][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.303293][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.307054][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.315830][ T5836] usb 6-1: device descriptor read/64, error -71 [ 197.316489][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.320981][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.324329][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.327739][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.332614][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.335791][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.339346][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.342599][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.349823][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.353028][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.356835][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.360002][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.364482][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.366660][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 197.368266][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.370873][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.374391][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.381005][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.387547][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.390864][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.393697][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.396623][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.404793][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.408569][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.411981][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.415291][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.422564][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.426285][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.429839][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.433252][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.445117][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.448262][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.451334][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.454220][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.459781][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.462779][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.467684][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.470827][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.475113][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.478037][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.480943][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.483674][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.488108][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.490539][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.493556][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.496290][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 197.496356][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.502755][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 197.506823][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.509279][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.512470][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.514920][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.518539][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.520874][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.523364][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.526459][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.543089][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.545702][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.548317][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.550734][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.553948][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.556739][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.559353][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.561705][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.564951][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.567488][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.570004][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.572312][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.575600][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.577995][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.580399][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.582768][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.586612][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.589012][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.591482][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.593707][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.599569][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.604564][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.607888][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.610924][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.621560][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.632163][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.635538][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.638128][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.641614][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.644074][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.648710][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.651154][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.654477][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.657480][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.661133][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.664293][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.669416][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.672561][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.676222][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.679370][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.685965][ T5882] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 197.686294][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.691678][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.695507][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.698736][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.705120][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.708694][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.711995][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.715106][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.721718][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.724199][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.727056][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.729769][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.733161][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.735935][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.738528][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.740966][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.744288][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.746974][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.749823][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.752242][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.755997][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.758420][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.760961][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.763322][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.767719][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.770110][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.772624][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.774979][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.778461][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.780824][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.783329][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.786003][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.789455][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.791842][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.794286][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.797048][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.800473][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.802777][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.805139][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.807524][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.810710][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.812916][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.815425][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.818052][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.822035][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.824514][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.827351][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.829651][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.832917][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.835265][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.837774][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.840074][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.843280][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.845823][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.845995][ T5882] usb 7-1: Using ep0 maxpacket: 16 [ 197.848321][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.852749][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.856495][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.857431][ T5882] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.859163][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.863501][ T5882] usb 7-1: config 0 interface 0 has no altsetting 0 [ 197.868005][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.873797][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.879924][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.883309][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.883968][ T5882] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 197.887315][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.893787][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.894807][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.901757][ T5882] usb 7-1: Product: syz [ 197.902495][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.903599][ T5882] usb 7-1: Manufacturer: syz [ 197.907033][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.912031][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.912249][ T5882] usb 7-1: SerialNumber: syz [ 197.915037][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.921797][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.923390][ T5882] usb 7-1: config 0 descriptor?? [ 197.924988][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.933019][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.936292][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 197.941469][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.944667][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 197.948617][T12664] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.951520][T12664] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 198.001104][T12725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1809'. [ 198.041387][T12725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1809'. [ 198.121607][T12732] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 198.127711][T12732] batman_adv: batadv0: Adding interface: gretap2 [ 198.130323][T12732] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.138064][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 198.140879][T12732] batman_adv: batadv0: Interface activated: gretap2 [ 198.167323][ T5882] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input25 [ 198.205680][ T5882] imon:send_packet: packet tx failed (-71) [ 198.225042][T12736] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 198.226004][ T5882] imon 7-1:0.0: panel buttons/knobs setup failed [ 198.234851][T12736] CIFS mount error: No usable UNC path provided in device string! [ 198.234851][T12736] [ 198.241255][T12736] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 198.285648][ T5882] rc_core: IR keymap rc-imon-pad not found [ 198.288097][ T5882] Registered IR keymap rc-empty [ 198.290298][ T5882] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 198.294429][ T5882] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 198.308589][ T5882] imon:send_packet: packet tx failed (-71) [ 198.336245][ T5882] imon 7-1:0.0: remote input dev register failed [ 198.340456][ T5882] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 198.403469][ T5882] imon 7-1:0.0: unable to initialize intf0, err 0 [ 198.406323][ T5882] imon:imon_probe: failed to initialize context! [ 198.408955][ T5882] imon 7-1:0.0: unable to register, err -19 [ 198.417765][ T5882] usb 7-1: USB disconnect, device number 19 [ 198.434900][T12742] loop6: detected capacity change from 0 to 128 [ 198.477994][T12744] binder: 12743:12744 ioctl c0306201 200000000080 returned -22 [ 198.626485][T12755] netlink: 'syz.0.1818': attribute type 1 has an invalid length. [ 198.629792][T12755] netlink: 'syz.0.1818': attribute type 1 has an invalid length. [ 198.633164][T12755] netlink: 'syz.0.1818': attribute type 1 has an invalid length. [ 198.636621][T12755] netlink: 'syz.0.1818': attribute type 1 has an invalid length. [ 198.639897][T12755] netlink: 'syz.0.1818': attribute type 1 has an invalid length. [ 198.646049][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1818'. [ 198.673783][T12757] netlink: 'syz.1.1819': attribute type 11 has an invalid length. [ 198.716025][T12759] netlink: 868 bytes leftover after parsing attributes in process `syz.1.1820'. [ 198.746037][ T5882] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 198.814341][T12772] input: syz1 as /devices/virtual/input/input27 [ 198.908171][ T5882] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 198.913355][ T5882] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 198.919935][ T5882] usb 7-1: config 0 interface 0 has no altsetting 0 [ 198.925016][ T5882] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 198.929088][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.932183][ T5882] usb 7-1: Product: syz [ 198.933818][ T5882] usb 7-1: Manufacturer: syz [ 198.936276][ T5882] usb 7-1: SerialNumber: syz [ 198.943579][ T5882] usb 7-1: config 0 descriptor?? [ 198.954780][T12693] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.015176][T12779] netlink: 'syz.1.1825': attribute type 1 has an invalid length. [ 199.169504][T12797] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1828'. [ 199.229729][T12799] : entered promiscuous mode [ 199.251721][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1830'. [ 199.312090][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1832'. [ 199.383289][T12807] fuse: Unknown parameter '+0x0000000000000004' [ 199.390441][T12693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.397712][T12693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.416017][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 199.428902][ T5882] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input28 [ 199.458934][ T5882] imon:send_packet: packet tx failed (-71) [ 199.477369][ T5882] imon 7-1:0.0: panel buttons/knobs setup failed [ 199.547023][ T5882] rc_core: IR keymap rc-imon-pad not found [ 199.555530][ T5882] Registered IR keymap rc-empty [ 199.558084][ T5882] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 199.562290][ T5882] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 199.567803][ T5882] imon:send_packet: packet tx failed (-71) [ 199.585527][ T5882] imon 7-1:0.0: remote input dev register failed [ 199.589089][ T5882] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 199.608305][ T5882] imon 7-1:0.0: unable to initialize intf0, err 0 [ 199.611157][ T5882] imon:imon_probe: failed to initialize context! [ 199.613853][ T5882] imon 7-1:0.0: unable to register, err -19 [ 199.616083][T12820] block nbd1: server does not support multiple connections per device. [ 199.620620][T12820] block nbd1: shutting down sockets [ 199.622436][ T5882] usb 7-1: USB disconnect, device number 20 [ 199.690774][T12828] overlayfs: failed lookup in lower (newroot/451, name='file0', err=-40): overlapping layers [ 199.697799][T12828] overlayfs: failed lookup in lower (newroot/451, name='file0', err=-40): overlapping layers [ 199.983413][T12859] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1839'. [ 200.258607][ T5093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.267122][ T5093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.270975][ T5093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.279862][ T5093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.283437][ T5093] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.397880][T12904] netlink: 'syz.2.1850': attribute type 11 has an invalid length. [ 200.400602][T12904] validate_nla: 12 callbacks suppressed [ 200.400611][T12904] netlink: 'syz.2.1850': attribute type 4 has an invalid length. [ 200.404966][T12904] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1850'. [ 200.408292][T12905] netlink: 'syz.2.1850': attribute type 11 has an invalid length. [ 200.411340][T12905] netlink: 'syz.2.1850': attribute type 4 has an invalid length. [ 200.414363][T12905] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1850'. [ 200.515277][T12916] netlink: 'syz.0.1852': attribute type 1 has an invalid length. [ 200.518278][T12916] netlink: 'syz.0.1852': attribute type 1 has an invalid length. [ 200.520788][T12916] netlink: 'syz.0.1852': attribute type 1 has an invalid length. [ 200.523254][T12916] netlink: 'syz.0.1852': attribute type 1 has an invalid length. [ 200.526247][T12916] netlink: 'syz.0.1852': attribute type 1 has an invalid length. [ 200.530377][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1852'. [ 200.577504][T12880] Failed to initialize the IGMP autojoin socket (err -2) [ 200.622738][T12927] FAT-fs (nullb0): bogus number of reserved sectors [ 200.627319][T12927] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 200.667751][T12939] netlink: 'syz.0.1858': attribute type 1 has an invalid length. [ 200.680461][T12940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1859'. [ 200.701627][T12939] bond8: entered promiscuous mode [ 200.703669][T12939] 8021q: adding VLAN 0 to HW filter on device bond8 [ 200.728921][T12940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.755127][T12939] 8021q: adding VLAN 0 to HW filter on device bond8 [ 200.759363][T12939] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 200.763561][T12939] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 200.772243][T12939] bond8: (slave ip6gre1): making interface the new active one [ 200.775631][T12939] ip6gre1: entered promiscuous mode [ 200.779853][T12939] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 200.918653][T12962] Failed to initialize the IGMP autojoin socket (err -2) [ 200.920542][T12969] binder: BINDER_SET_CONTEXT_MGR already set [ 200.924295][T12969] binder: 12968:12969 ioctl 4018620d 200000003280 returned -16 [ 200.928707][T12969] binder: 12968:12969 ioctl c0306201 200000000080 returned -14 [ 200.932106][T12969] binder: BINDER_SET_CONTEXT_MGR already set [ 200.934062][T12969] binder: 12968:12969 ioctl 4018620d 200000000040 returned -16 [ 200.936977][T12969] binder: 12968:12969 ioctl c0306201 2000000003c0 returned -14 [ 200.941830][T12969] binder: 12968:12969 ioctl c0306201 200000000640 returned -22 [ 200.954973][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 200.961686][T12969] binder: 12968:12969 ioctl 81f8943c 2000000001c0 returned -22 [ 200.964197][T12969] binder: 12968:12969 ioctl d000941e 200000000680 returned -22 [ 201.165677][ T5841] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 201.167831][T12978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1865'. [ 201.234224][T12987] netlink: 'syz.0.1867': attribute type 1 has an invalid length. [ 201.237086][T12987] netlink: 'syz.0.1867': attribute type 1 has an invalid length. [ 201.241008][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1867'. [ 201.247061][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 201.247072][ T42] audit: type=1400 audit(201.178:1087): avc: denied { write } for pid=12981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.323476][ T42] audit: type=1400 audit(201.258:1088): avc: denied { write } for pid=12989 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.347118][ T5841] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 201.352135][ T5841] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.356626][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.362202][ T5841] usb 7-1: config 0 descriptor?? [ 201.367201][ T5841] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 201.373024][T12994] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 201.382056][ T1169] Bluetooth: (null): Invalid header checksum [ 201.404161][ T1169] Bluetooth: (null): Invalid header checksum [ 201.434079][T13002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1871'. [ 201.453096][ T42] audit: type=1400 audit(201.388:1089): avc: denied { write } for pid=12998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.498908][ T42] audit: type=1400 audit(201.428:1090): avc: denied { write } for pid=13007 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.517739][ T42] audit: type=1400 audit(201.458:1091): avc: denied { bind } for pid=13011 comm="syz.0.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.574281][T13015] binder: 13014:13015 ioctl c0306201 200000000640 returned -22 [ 201.589234][T12880] netdevsim netdevsim5 netdevsim0: renamed from eth2 [ 201.596231][T12880] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.650587][T12880] netdevsim netdevsim5 netdevsim1: renamed from eth3 [ 201.675971][T12880] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.706050][T12880] netdevsim netdevsim5 netdevsim2: renamed from eth4 [ 201.706477][T13017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1876'. [ 201.721928][T12880] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.724229][ T42] audit: type=1400 audit(201.658:1092): avc: denied { write } for pid=13018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.733656][T12880] netdevsim netdevsim5 netdevsim3: renamed from eth5 [ 201.750234][T12880] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.795333][ T42] audit: type=1400 audit(201.728:1093): avc: denied { write } for pid=13026 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.940083][T13031] XFS (nbd0): SB validate failed with error -5. [ 201.958626][ T29] usb 7-1: USB disconnect, device number 21 [ 201.974893][ T42] audit: type=1400 audit(201.908:1094): avc: denied { write } for pid=13033 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.055824][ T5786] net_ratelimit: 100 callbacks suppressed [ 202.055844][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 202.074536][ T5786] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 202.088718][ T42] audit: type=1400 audit(202.028:1095): avc: denied { write } for pid=13046 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.186220][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 202.189072][ T5786] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 202.287646][ T42] audit: type=1400 audit(202.218:1096): avc: denied { write } for pid=13051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.306301][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 202.310296][ T5786] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 202.315977][ T5746] Bluetooth: hci0: command tx timeout [ 202.415964][ T9976] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 202.421746][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 202.535485][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 202.541006][ T5786] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 202.935617][T12880] wireguard: wg0: Could not create IPv4 socket [ 202.938900][T12880] wireguard: wg1: Could not create IPv4 socket [ 202.942128][T12880] wireguard: wg2: Could not create IPv4 socket [ 202.998619][T13106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13106 comm=syz.0.1882 [ 203.367073][ T5524] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 203.535674][ T5524] usb 6-1: Using ep0 maxpacket: 16 [ 203.544683][ T5524] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.549248][ T5524] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.553261][ T5524] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 203.556239][ T5524] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.558766][ T5524] usb 6-1: Product: syz [ 203.560069][ T5524] usb 6-1: Manufacturer: syz [ 203.561515][ T5524] usb 6-1: SerialNumber: syz [ 203.568639][ T5524] usb 6-1: config 0 descriptor?? [ 203.778718][ C2] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 203.790440][ T5524] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input30 [ 203.801789][ T5524] imon:send_packet: packet tx failed (-71) [ 203.825950][ T5524] imon 6-1:0.0: panel buttons/knobs setup failed [ 203.832357][T13196] program syz.1.1899 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.905413][ T5524] rc_core: IR keymap rc-imon-pad not found [ 203.907924][ T5524] Registered IR keymap rc-empty [ 203.909749][ T5524] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 203.914075][ T5524] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 203.920568][ T5524] imon:send_packet: packet tx failed (-71) [ 203.940540][ T5524] imon 6-1:0.0: remote input dev register failed [ 203.946286][ T5524] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 203.969531][ T5524] imon 6-1:0.0: unable to initialize intf0, err 0 [ 203.972050][ T5524] imon:imon_probe: failed to initialize context! [ 203.974702][ T5524] imon 6-1:0.0: unable to register, err -19 [ 203.988026][ T5524] usb 6-1: USB disconnect, device number 28 [ 204.135150][T13233] fuse: Bad value for 'user_id' [ 204.137678][T13233] fuse: Bad value for 'user_id' [ 204.154442][T13235] netdevsim netdevsim0: Direct firmware load for . [ 204.154442][T13235] failed with error -2 [ 204.163370][T13235] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 204.163370][T13235] [ 205.011752][T13305] __nla_validate_parse: 3 callbacks suppressed [ 205.011766][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 205.019939][T13305] input: syz1 as /devices/virtual/input/input32 [ 205.065714][ T5841] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 205.095795][ T5524] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 205.227973][ T5841] usb 6-1: Using ep0 maxpacket: 32 [ 205.231573][ T5841] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 205.237105][ T5841] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 205.240677][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 205.243898][ T5841] usb 6-1: Product: syz [ 205.245336][ T5841] usb 6-1: Manufacturer: syz [ 205.247452][ T5841] usb 6-1: SerialNumber: syz [ 205.248883][ T5524] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.254227][ T5524] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.255715][ T5841] usb 6-1: config 0 descriptor?? [ 205.261634][T13291] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.262595][ T5524] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.272309][ T5524] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.279516][ T5524] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.284537][ T5524] usb 7-1: config 0 descriptor?? [ 205.490221][ T1171] Bluetooth: hci0: Frame reassembly failed (-84) [ 205.496186][ T1171] Bluetooth: hci0: Frame reassembly failed (-84) [ 205.512374][ T5524] usbhid 7-1:0.0: can't add hid device: -71 [ 205.523323][ T1351] usb 6-1: USB disconnect, device number 29 [ 205.524151][ T5524] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 205.544828][ T5524] usb 7-1: USB disconnect, device number 22 [ 205.645959][T13342] overlayfs: unescaped trailing colons in lowerdir mount option. [ 205.649482][T13341] overlayfs: unescaped trailing colons in lowerdir mount option. [ 205.673800][T13346] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 205.680948][T13346] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13346 comm=syz.2.1923 [ 206.327789][ T42] kauditd_printk_skb: 46 callbacks suppressed [ 206.327803][ T42] audit: type=1400 audit(206.268:1143): avc: denied { write } for pid=13380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.381305][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.385450][ T42] audit: type=1400 audit(206.318:1144): avc: denied { write } for pid=13387 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.395255][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.401273][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.406272][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.413251][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.542942][ T42] audit: type=1400 audit(206.478:1145): avc: denied { write } for pid=13395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.601431][ T42] audit: type=1400 audit(206.538:1146): avc: denied { write } for pid=13402 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.643802][T13386] Failed to initialize the IGMP autojoin socket (err -2) [ 206.677454][T13408] validate_nla: 21 callbacks suppressed [ 206.677475][T13408] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 206.683240][T13408] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 206.686943][T13408] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 206.690205][T13408] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 206.693522][T13408] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 206.697578][T13408] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 206.758135][ T42] audit: type=1400 audit(206.698:1147): avc: denied { write } for pid=13409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.826724][ T42] audit: type=1400 audit(206.768:1148): avc: denied { write } for pid=13414 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.973315][ T42] audit: type=1400 audit(206.908:1149): avc: denied { write } for pid=13423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.014568][ T42] audit: type=1400 audit(206.938:1150): avc: denied { write } for pid=13428 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.140211][ T42] audit: type=1400 audit(207.078:1151): avc: denied { write } for pid=13431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.155486][ T5786] net_ratelimit: 92 callbacks suppressed [ 207.155505][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 207.161188][ T5786] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.198645][ T42] audit: type=1400 audit(207.138:1152): avc: denied { write } for pid=13436 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.215557][ T58] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 207.265457][ T9976] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 207.268523][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 207.375772][ T9976] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 207.395466][ T9976] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 207.396930][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 207.412298][ T58] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.416150][ T9976] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 207.419979][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.435095][ T58] usb 7-1: config 0 descriptor?? [ 207.436732][ T9976] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 207.447907][ T58] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 207.455579][ T9976] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 207.474228][T13386] netdevsim netdevsim5 netdevsim0: renamed from eth2 [ 207.475629][ T9976] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 207.491729][T13386] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 207.495598][T13386] netdevsim netdevsim5 netdevsim1: renamed from eth3 [ 207.509826][T13386] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 207.514667][T13386] netdevsim netdevsim5 netdevsim2: renamed from eth4 [ 207.517313][ T5746] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 207.528570][T13386] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 207.532465][T13386] netdevsim netdevsim5 netdevsim3: renamed from eth5 [ 207.553171][T13386] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 207.593876][T13461] tipc: Enabling of bearer rejected, failed to enable media [ 207.641590][T13464] fuse: Bad value for 'fd' [ 207.643851][T13464] netlink: 'syz.0.1941': attribute type 4 has an invalid length. [ 207.649365][T13464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1941'. [ 207.817660][ T9] usb 7-1: USB disconnect, device number 23 [ 207.902983][T13486] netlink: 'syz.1.1944': attribute type 1 has an invalid length. [ 207.994426][T13497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1946'. [ 208.074687][T13507] netlink: 'syz.0.1947': attribute type 1 has an invalid length. [ 208.077244][T13507] netlink: 'syz.0.1947': attribute type 1 has an invalid length. [ 208.282467][T13533] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 208.292333][T13533] comedi comedi2: comedi_config --init_data is deprecated [ 208.353597][T13540] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1951'. [ 208.417899][T13386] wireguard: wg0: Could not create IPv4 socket [ 208.422103][T13386] wireguard: wg1: Could not create IPv4 socket [ 208.440364][T13386] wireguard: wg2: Could not create IPv4 socket [ 208.477690][ T64] Bluetooth: hci4: command tx timeout [ 208.827044][T13580] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.833132][T13580] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.970155][T13580] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.973598][T13580] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.115172][T13580] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.121117][T13580] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.415803][ T1351] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 209.568247][ T1351] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 209.574921][ T1351] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.608142][ T1351] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.610702][ T9976] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.615257][ T9976] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.617524][ T1351] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.625928][ T1351] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.629297][ T1351] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.637093][ T1351] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.644403][ T1351] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.648176][ T1351] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.650494][ T9976] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.652842][ T1351] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.659948][ T9976] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.669035][ T1351] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.672774][ T1351] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.678776][ T5812] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.682092][ T1351] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.684871][ T5812] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.690407][ T1351] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.694297][ T1351] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.699123][ T5812] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.702731][ T5812] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.709356][ T1351] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.713043][ T1351] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.716303][ T1351] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.719800][ T1351] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.722746][ T1351] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.725894][ T1351] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.732437][ T1351] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.736920][ T1351] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 209.739842][ T1351] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 209.745913][ T1351] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.753288][ T1351] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 209.756696][ T1351] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 209.759342][ T1351] usb 7-1: Product: syz [ 209.760666][ T1351] usb 7-1: Manufacturer: syz [ 209.762475][ T1351] usb 7-1: SerialNumber: syz [ 209.768926][ T1351] usb 7-1: config 0 descriptor?? [ 209.783131][ T1351] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 210.002847][ T58] usb 7-1: USB disconnect, device number 24 [ 210.020395][ T58] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 210.133209][T13702] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1973'. [ 210.890244][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1984'. [ 210.949567][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1984'. [ 210.973689][T13749] hsr_slave_1 (unregistering): left promiscuous mode [ 211.440407][T13772] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 211.470836][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 211.470855][ T42] audit: type=1400 audit(211.408:1180): avc: denied { write } for pid=13770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.530752][ T42] audit: type=1400 audit(211.468:1181): avc: denied { write } for pid=13777 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.554199][ T42] audit: type=1400 audit(211.488:1182): avc: denied { execute } for pid=13775 comm="syz.1.1989" path="/dev/ubi_ctrl" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.610252][ T42] audit: type=1400 audit(211.548:1183): avc: denied { setattr } for pid=13780 comm="syz.1.1990" name="file0" dev="9p" ino=78119369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 211.618621][ T42] audit: type=1400 audit(211.558:1184): avc: denied { write } for pid=13780 comm="syz.1.1990" name="/" dev="9p" ino=78119057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.630700][ T42] audit: type=1400 audit(211.568:1185): avc: denied { write } for pid=13780 comm="syz.1.1990" name="/" dev="9p" ino=78119057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.640303][ T42] audit: type=1400 audit(211.568:1186): avc: denied { create } for pid=13780 comm="syz.1.1990" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 211.659230][T13786] tmpfs: Unknown parameter 'tŁ’wŲZxŽ‰>ŲIJa' [ 211.689988][ T42] audit: type=1400 audit(211.628:1187): avc: denied { write } for pid=13783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.713777][T13789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1993'. [ 211.755440][ T42] audit: type=1400 audit(211.688:1188): avc: denied { write } for pid=13790 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.812522][T13792] ref_ctr_offset mismatch. inode: 0xb9a offset: 0x5 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 211.884624][ T42] audit: type=1400 audit(211.818:1189): avc: denied { write } for pid=13795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.235744][ T5886] net_ratelimit: 101 callbacks suppressed [ 212.235806][ T5886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.241753][ T5886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 212.345483][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.347908][ T5786] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 212.455700][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.458151][ T5786] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 212.534962][T13807] validate_nla: 17 callbacks suppressed [ 212.534975][T13807] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 212.539134][T13807] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 212.541860][T13807] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 212.544311][T13807] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 212.547112][T13807] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 212.550368][T13807] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 212.575946][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.605537][ T5886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.613325][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.622529][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.627154][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.636376][ T5886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 212.639747][ T5886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 212.639841][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.648339][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.732370][T13816] dlm: no local IP address has been set [ 212.736808][T13816] dlm: cannot start dlm midcomms -107 [ 212.872928][T13832] loop2: detected capacity change from 0 to 7 [ 212.881392][T13832] Dev loop2: unable to read RDB block 7 [ 212.883838][T13832] loop2: AHDI p1 p3 p4 [ 212.886922][T13832] loop2: partition table partially beyond EOD, truncated [ 212.890145][T13832] loop2: p1 size 100663296 extends beyond EOD, truncated [ 212.901500][T13832] loop2: p3 size 4261412863 extends beyond EOD, truncated [ 212.904085][T13811] Failed to initialize the IGMP autojoin socket (err -2) [ 212.950993][ T8461] udevd[8461]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 212.952303][T11816] udevd[11816]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 213.720176][T13811] netdevsim netdevsim5 netdevsim0: renamed from eth2 [ 213.726964][T13811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.730592][T13811] netdevsim netdevsim5 netdevsim1: renamed from eth3 [ 213.737428][T13811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.752205][T13811] netdevsim netdevsim5 netdevsim2: renamed from eth4 [ 213.772744][T13811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.777462][T13858] netlink: 'syz.0.2008': attribute type 1 has an invalid length. [ 213.780287][T13858] netlink: 'syz.0.2008': attribute type 1 has an invalid length. [ 213.782849][T13858] netlink: 'syz.0.2008': attribute type 1 has an invalid length. [ 213.785690][T13858] netlink: 'syz.0.2008': attribute type 1 has an invalid length. [ 213.789328][T13811] netdevsim netdevsim5 netdevsim3: renamed from eth5 [ 213.793143][T13858] FAULT_INJECTION: forcing a failure. [ 213.793143][T13858] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 213.796183][T13811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.798919][T13858] CPU: 0 UID: 0 PID: 13858 Comm: syz.0.2008 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.798946][T13858] Tainted: [L]=SOFTLOCKUP [ 213.798952][T13858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.798964][T13858] Call Trace: [ 213.798995][T13858] [ 213.799003][T13858] dump_stack_lvl+0x100/0x190 [ 213.799218][T13858] should_fail_ex.cold+0x5/0xa [ 213.799265][T13858] _copy_from_user+0x2e/0xd0 [ 213.799363][T13858] copy_msghdr_from_user+0x9f/0x4c0 [ 213.799492][T13858] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 213.799527][T13858] ___sys_sendmsg+0x106/0x1e0 [ 213.799554][T13858] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.799584][T13858] ? __lock_acquire+0x49f/0x1a40 [ 213.799673][T13858] ? get_pid_task+0x106/0x250 [ 213.799728][T13858] __sys_sendmsg+0x160/0x210 [ 213.799749][T13858] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.799779][T13858] do_syscall_64+0x115/0x870 [ 213.799905][T13858] ? clear_bhb_loop+0x40/0x90 [ 213.799931][T13858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.799952][T13858] RIP: 0033:0x7f384539de59 [ 213.799969][T13858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.799987][T13858] RSP: 002b:00007f38461f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.800044][T13858] RAX: ffffffffffffffda RBX: 00007f3845625fa0 RCX: 00007f384539de59 [ 213.800054][T13858] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 000000000000000a [ 213.800065][T13858] RBP: 00007f38461f9090 R08: 0000000000000000 R09: 0000000000000000 [ 213.800074][T13858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.800084][T13858] R13: 00007f3845626038 R14: 00007f3845625fa0 R15: 00007ffd2c4f94c8 [ 213.800106][T13858] [ 213.990902][T13864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2010'. [ 214.010622][T13864] 8021q: adding VLAN 0 to HW filter on device bond10 [ 214.156034][T13878] unsupported nla_type 4111 [ 214.622283][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2015'. [ 214.705004][T13811] wireguard: wg0: Could not create IPv4 socket [ 214.711489][T13811] wireguard: wg1: Could not create IPv4 socket [ 214.719279][ T5746] Bluetooth: hci0: command tx timeout [ 214.738462][T13811] wireguard: wg2: Could not create IPv4 socket [ 216.029363][T13967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2025'. [ 217.265662][ T5886] net_ratelimit: 103 callbacks suppressed [ 217.265680][ T5886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 217.270279][ T5886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 217.375646][ T5886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 217.378152][ T5886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 217.485784][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 217.489023][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 217.595852][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 217.599473][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 217.705766][ T5886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 217.709022][ T5886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 218.615577][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.620686][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.624682][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.631927][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.635188][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.857387][T13969] Failed to initialize the IGMP autojoin socket (err -2) [ 219.854111][T13969] netdevsim netdevsim5 netdevsim0: renamed from eth2 [ 219.863834][T13969] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.868873][T13969] netdevsim netdevsim5 netdevsim1: renamed from eth3 [ 219.875998][T13969] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.880233][T13969] netdevsim netdevsim5 netdevsim2: renamed from eth4 [ 219.891338][T13969] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.894923][T13969] netdevsim netdevsim5 netdevsim3: renamed from eth5 [ 219.904584][T13969] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.439837][T13969] wireguard: wg0: Could not create IPv4 socket [ 220.443442][T13969] wireguard: wg1: Could not create IPv4 socket [ 220.452062][T13969] wireguard: wg2: Could not create IPv4 socket [ 222.325777][ T5886] net_ratelimit: 90 callbacks suppressed [ 222.325800][ T5886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.330819][ T5886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 222.435552][ T9976] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.438808][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 222.545530][ T5886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.548819][ T5886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 222.655882][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.659160][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 222.765521][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 222.769627][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 224.552474][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.559212][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.564872][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.571465][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.576421][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.739829][T14004] Failed to initialize the IGMP autojoin socket (err -2) [ 225.525042][T14004] netdevsim netdevsim5 netdevsim0: renamed from eth2 [ 225.531588][T14004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 225.534975][T14004] netdevsim netdevsim5 netdevsim1: renamed from eth3 [ 225.544047][T14004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 225.547510][T14004] netdevsim netdevsim5 netdevsim2: renamed from eth4 [ 225.554688][T14004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 225.558675][T14004] netdevsim netdevsim5 netdevsim3: renamed from eth5 [ 225.566775][T14004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.162597][T14004] wireguard: wg0: Could not create IPv4 socket [ 226.172128][T14004] wireguard: wg1: Could not create IPv4 socket [ 226.178390][T14004] wireguard: wg2: Could not create IPv4 socket [ 227.405651][ T5786] net_ratelimit: 86 callbacks suppressed [ 227.405676][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.411053][ T5786] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 227.515906][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.519241][ T5786] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 227.625581][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.628742][ T5786] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 227.735551][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.738679][ T5786] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 227.845811][ T5886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 227.849072][ T5886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 230.755207][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.761504][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.769508][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.773281][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.779335][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.013080][T14044] Failed to initialize the IGMP autojoin socket (err -2) [ 231.898418][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 231.898438][ T42] audit: type=1400 audit(231.838:1204): avc: denied { create } for pid=14061 comm="syz.1.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 231.918078][ T42] audit: type=1400 audit(231.848:1205): avc: denied { write } for pid=14061 comm="syz.1.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 232.015046][T14044] netdevsim netdevsim5 netdevsim0: renamed from eth2 [ 232.020332][T14044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 232.023157][T14044] netdevsim netdevsim5 netdevsim1: renamed from eth3 [ 232.032027][T14044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.036268][T14044] netdevsim netdevsim5 netdevsim2: renamed from eth4 [ 232.053629][T14044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 232.058228][T14044] netdevsim netdevsim5 netdevsim3: renamed from eth5 [ 232.076398][T14044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.097230][T14074] validate_nla: 20 callbacks suppressed [ 232.097247][T14074] netlink: 'syz.0.2031': attribute type 1 has an invalid length. [ 232.102894][T14074] netlink: 'syz.0.2031': attribute type 1 has an invalid length. [ 232.108195][T14074] netlink: 'syz.0.2031': attribute type 1 has an invalid length. [ 232.111454][T14074] netlink: 'syz.0.2031': attribute type 1 has an invalid length. [ 232.114477][T14074] netlink: 'syz.0.2031': attribute type 1 has an invalid length. [ 232.117778][T14074] netlink: 'syz.0.2031': attribute type 1 has an invalid length. [ 232.122618][T14074] FAULT_INJECTION: forcing a failure. [ 232.122618][T14074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.129003][T14074] CPU: 2 UID: 0 PID: 14074 Comm: syz.0.2031 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.129030][T14074] Tainted: [L]=SOFTLOCKUP [ 232.129036][T14074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.129047][T14074] Call Trace: [ 232.129053][T14074] [ 232.129059][T14074] dump_stack_lvl+0x100/0x190 [ 232.129092][T14074] should_fail_ex.cold+0x5/0xa [ 232.129116][T14074] _copy_from_iter+0x1f4/0x1690 [ 232.129142][T14074] ? __asan_memset+0x23/0x50 [ 232.129224][T14074] ? __pfx__copy_from_iter+0x10/0x10 [ 232.129245][T14074] ? __pfx___alloc_skb+0x10/0x10 [ 232.129274][T14074] netlink_sendmsg+0x808/0xda0 [ 232.129334][T14074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.129363][T14074] ? selinux_socket_sendmsg+0x198/0x2f0 [ 232.129394][T14074] ____sys_sendmsg+0xa4d/0xbe0 [ 232.129418][T14074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.129446][T14074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.129481][T14074] ___sys_sendmsg+0x190/0x1e0 [ 232.129508][T14074] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.129531][T14074] ? __lock_acquire+0x49f/0x1a40 [ 232.129554][T14074] ? get_pid_task+0x106/0x250 [ 232.129607][T14074] __sys_sendmsg+0x160/0x210 [ 232.129628][T14074] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.129661][T14074] do_syscall_64+0x115/0x870 [ 232.129714][T14074] ? clear_bhb_loop+0x40/0x90 [ 232.129737][T14074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.129756][T14074] RIP: 0033:0x7f384539de59 [ 232.129772][T14074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.129789][T14074] RSP: 002b:00007f38461f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.129808][T14074] RAX: ffffffffffffffda RBX: 00007f3845625fa0 RCX: 00007f384539de59 [ 232.129820][T14074] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 000000000000000a [ 232.129832][T14074] RBP: 00007f38461f9090 R08: 0000000000000000 R09: 0000000000000000 [ 232.129843][T14074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.129854][T14074] R13: 00007f3845626038 R14: 00007f3845625fa0 R15: 00007ffd2c4f94c8 [ 232.129879][T14074] [ 232.237852][T14077] geneve1: entered allmulticast mode [ 232.285924][ T5524] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 232.378644][T14091] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2035'. [ 232.381953][T14091] nbd: must specify at least one socket [ 232.437090][ T5524] usb 7-1: Using ep0 maxpacket: 8 [ 232.447621][ T5524] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 232.452909][ T5524] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.460981][ T5524] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.464876][ T5524] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.465826][ T5786] net_ratelimit: 86 callbacks suppressed [ 232.465841][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.471657][ T5524] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.474300][ T5786] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 232.480271][ T5524] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 232.485712][ T5524] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.489760][T14104] Bluetooth: MGMT ver 1.23 [ 232.511546][T14108] fuse: Unknown parameter 'fd\0x0000000000000003' [ 232.542302][T14104] netlink: 'syz.1.2038': attribute type 1 has an invalid length. [ 232.567524][T14104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2038'. [ 232.590736][T14113] random: crng reseeded on system resumption [ 232.595564][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.625730][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.630459][ T5786] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 232.696755][ T5524] usb 7-1: usb_control_msg returned -32 [ 232.698992][ T5524] usbtmc 7-1:16.0: can't read capabilities [ 232.719199][T14120] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 232.724985][T14120] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 232.730310][T14120] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 232.734310][T14120] FAULT_INJECTION: forcing a failure. [ 232.734310][T14120] name failslab, interval 1, probability 0, space 0, times 0 [ 232.741117][T14120] CPU: 1 UID: 0 PID: 14120 Comm: syz.1.2041 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.741141][T14120] Tainted: [L]=SOFTLOCKUP [ 232.741147][T14120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.741156][T14120] Call Trace: [ 232.741161][T14120] [ 232.741168][T14120] dump_stack_lvl+0x100/0x190 [ 232.741196][T14120] should_fail_ex.cold+0x5/0xa [ 232.741213][T14120] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 232.741236][T14120] should_failslab+0xc2/0x120 [ 232.741256][T14120] kmem_cache_alloc_noprof+0x91/0x6a0 [ 232.741274][T14120] ? skb_clone+0x190/0x400 [ 232.741301][T14120] skb_clone+0x190/0x400 [ 232.741318][T14120] netlink_deliver_tap+0xaed/0xcc0 [ 232.741347][T14120] netlink_unicast+0x62b/0x850 [ 232.741372][T14120] ? __pfx_netlink_unicast+0x10/0x10 [ 232.741399][T14120] netlink_sendmsg+0x8b0/0xda0 [ 232.741425][T14120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.741449][T14120] ? selinux_socket_sendmsg+0x198/0x2f0 [ 232.741474][T14120] ____sys_sendmsg+0xa4d/0xbe0 [ 232.741494][T14120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.741517][T14120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.741566][T14120] ___sys_sendmsg+0x190/0x1e0 [ 232.741591][T14120] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.741611][T14120] ? __lock_acquire+0x49f/0x1a40 [ 232.741629][T14120] ? get_pid_task+0x106/0x250 [ 232.741698][T14120] __sys_sendmsg+0x160/0x210 [ 232.741716][T14120] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.741735][T14120] do_syscall_64+0x115/0x870 [ 232.741753][T14120] ? clear_bhb_loop+0x40/0x90 [ 232.741767][T14120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.741778][T14120] RIP: 0033:0x7f91e119de59 [ 232.741790][T14120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.741800][T14120] RSP: 002b:00007f91e202c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.741812][T14120] RAX: ffffffffffffffda RBX: 00007f91e1425fa0 RCX: 00007f91e119de59 [ 232.741818][T14120] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 000000000000000a [ 232.741825][T14120] RBP: 00007f91e202c090 R08: 0000000000000000 R09: 0000000000000000 [ 232.741831][T14120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.741837][T14120] R13: 00007f91e1426038 R14: 00007f91e1425fa0 R15: 00007ffd7e7eded8 [ 232.741851][T14120] [ 232.741890][T14120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2041'. [ 232.745659][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.745711][ T5786] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 232.795682][ T64] Bluetooth: hci0: command tx timeout [ 232.855859][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 232.858351][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 232.897575][T14132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2043'. [ 232.965998][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 233.034665][T14044] wireguard: wg0: Could not create IPv4 socket [ 233.042250][T14044] wireguard: wg1: Could not create IPv4 socket [ 233.048461][T14044] wireguard: wg2: Could not create IPv4 socket [ 233.070150][ T2186] usb 7-1: USB disconnect, device number 25 [ 233.096222][ T5524] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 233.110542][T14140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=14140 comm=syz.0.2044 [ 233.142671][T14140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2044'. [ 233.259592][ T5524] usb 6-1: Using ep0 maxpacket: 8 [ 233.271416][ T5524] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 233.276189][ T5524] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 233.285553][ T5524] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 233.290920][ T5524] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.296972][ T5524] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.301594][ T5524] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 233.307054][ T5524] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 233.312628][ T5524] usb 6-1: config 168 interface 0 has no altsetting 0 [ 233.316732][ T5524] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 233.320434][ T5524] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 233.325030][ T5524] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 233.330230][ T5524] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.357797][ T5524] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.362800][ T5524] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 233.404938][ T5524] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 233.423435][ T5524] usb 6-1: config 168 interface 0 has no altsetting 0 [ 233.430545][ T5524] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 233.433597][ T5524] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 233.433636][T14147] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 233.443754][ T5524] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 233.448701][ T5524] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.453401][ T5524] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.458732][ T5524] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 233.463656][ T5524] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 233.469605][ T5524] usb 6-1: config 168 interface 0 has no altsetting 0 [ 233.470096][T14147] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 233.477741][ T5524] usb 6-1: string descriptor 0 read error: -22 [ 233.480244][ T5524] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 233.483760][ T5524] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.516609][ T5524] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 233.640646][T14155] comedi comedi3: comedi_config --init_data is deprecated [ 233.710853][ T2186] usb 6-1: USB disconnect, device number 30 [ 233.756857][ T1351] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 233.800652][T14163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6672 sclass=netlink_route_socket pid=14163 comm=syz.0.2051 [ 233.857581][T14165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2052'. [ 233.895753][ T1351] usb 7-1: device descriptor read/64, error -71 [ 234.155497][ T1351] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 234.168020][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2055'. [ 234.186699][T14176] FAULT_INJECTION: forcing a failure. [ 234.186699][T14176] name failslab, interval 1, probability 0, space 0, times 0 [ 234.190616][T14176] CPU: 1 UID: 0 PID: 14176 Comm: syz.0.2055 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.190634][T14176] Tainted: [L]=SOFTLOCKUP [ 234.190638][T14176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.190645][T14176] Call Trace: [ 234.190668][T14176] [ 234.190673][T14176] dump_stack_lvl+0x100/0x190 [ 234.190834][T14176] should_fail_ex.cold+0x5/0xa [ 234.190869][T14176] should_failslab+0xc2/0x120 [ 234.190938][T14176] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 234.190952][T14176] ? __alloc_skb+0x140/0x710 [ 234.191045][T14176] __alloc_skb+0x140/0x710 [ 234.191054][T14176] ? __alloc_skb+0x5b7/0x710 [ 234.191063][T14176] ? __pfx___alloc_skb+0x10/0x10 [ 234.191072][T14176] ? kasan_quarantine_put+0x104/0x240 [ 234.191082][T14176] ? lockdep_hardirqs_on+0x78/0x100 [ 234.191184][T14176] ? inetdev_event+0x9c0/0x17f0 [ 234.191220][T14176] inet_netconf_notify_devconf+0x9d/0x170 [ 234.191238][T14176] inetdev_event+0xa70/0x17f0 [ 234.191254][T14176] ? ib_netdevice_event+0xfc/0x330 [ 234.191308][T14176] ? __pfx_inetdev_event+0x10/0x10 [ 234.191324][T14176] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 234.191354][T14176] notifier_call_chain+0x99/0x3f0 [ 234.191375][T14176] call_netdevice_notifiers_info+0xbe/0x110 [ 234.191392][T14176] unregister_netdevice_many_notify+0x1141/0x2140 [ 234.191411][T14176] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 234.191429][T14176] ? unregister_netdevice_queue+0x22e/0x3c0 [ 234.191448][T14176] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 234.191477][T14176] rtnl_dellink+0x472/0xb40 [ 234.191495][T14176] ? des_ekey+0x3eb2/0x5ad0 [ 234.191573][T14176] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 234.191584][T14176] ? kasan_save_track+0x14/0x30 [ 234.191595][T14176] ? kasan_save_free_info+0x3b/0x70 [ 234.191609][T14176] ? __kasan_slab_free+0x5f/0x80 [ 234.191621][T14176] ? __pfx_rtnl_dellink+0x10/0x10 [ 234.191631][T14176] ? nlmon_xmit+0xa5/0xe0 [ 234.191699][T14176] ? dev_hard_start_xmit+0x121/0x760 [ 234.191713][T14176] ? __dev_queue_xmit+0x1b9d/0x4940 [ 234.191727][T14176] ? netlink_sendmsg+0x8b0/0xda0 [ 234.191743][T14176] ? ____sys_sendmsg+0xa4d/0xbe0 [ 234.191797][T14176] ? __lock_acquire+0x49f/0x1a40 [ 234.191817][T14176] ? find_held_lock+0x2b/0x80 [ 234.191832][T14176] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 234.191844][T14176] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 234.191856][T14176] ? __pfx_rtnl_dellink+0x10/0x10 [ 234.191867][T14176] rtnetlink_rcv_msg+0x95e/0xe90 [ 234.191880][T14176] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 234.191895][T14176] ? ref_tracker_free+0x37e/0x6c0 [ 234.191912][T14176] netlink_rcv_skb+0x159/0x420 [ 234.191927][T14176] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 234.191940][T14176] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 234.191960][T14176] ? netlink_deliver_tap+0x1ae/0xcc0 [ 234.191979][T14176] netlink_unicast+0x585/0x850 [ 234.191996][T14176] ? __pfx_netlink_unicast+0x10/0x10 [ 234.192015][T14176] netlink_sendmsg+0x8b0/0xda0 [ 234.192032][T14176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.192048][T14176] ? selinux_socket_sendmsg+0x198/0x2f0 [ 234.192067][T14176] ____sys_sendmsg+0xa4d/0xbe0 [ 234.192079][T14176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.192120][T14176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.192141][T14176] ___sys_sendmsg+0x190/0x1e0 [ 234.192156][T14176] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.192169][T14176] ? __lock_acquire+0x49f/0x1a40 [ 234.192181][T14176] ? get_pid_task+0x106/0x250 [ 234.192213][T14176] __sys_sendmsg+0x160/0x210 [ 234.192224][T14176] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.192243][T14176] do_syscall_64+0x115/0x870 [ 234.192258][T14176] ? clear_bhb_loop+0x40/0x90 [ 234.192272][T14176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.192282][T14176] RIP: 0033:0x7f384539de59 [ 234.192294][T14176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.192304][T14176] RSP: 002b:00007f38461f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.192336][T14176] RAX: ffffffffffffffda RBX: 00007f3845625fa0 RCX: 00007f384539de59 [ 234.192343][T14176] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 000000000000000a [ 234.192349][T14176] RBP: 00007f38461f9090 R08: 0000000000000000 R09: 0000000000000000 [ 234.192355][T14176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.192361][T14176] R13: 00007f3845626038 R14: 00007f3845625fa0 R15: 00007ffd2c4f94c8 [ 234.192375][T14176] [ 234.405439][ T1351] usb 7-1: device descriptor read/64, error -71 [ 234.409536][ T42] audit: type=1400 audit(234.348:1206): avc: denied { write } for pid=14177 comm="syz.1.2056" name="/" dev="9p" ino=78119057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.480204][ T42] audit: type=1400 audit(234.418:1207): avc: denied { watch watch_reads } for pid=14177 comm="syz.1.2056" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 234.515772][ T1351] usb usb7-port1: attempt power cycle [ 234.726766][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2061'. [ 234.865796][ T1351] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 234.882921][T14194] fuse: blksize only supported for fuseblk [ 234.885974][ T1351] usb 7-1: device descriptor read/8, error -71 [ 234.953140][T14196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2063'. [ 235.135744][ T1351] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 235.156193][ T1351] usb 7-1: device descriptor read/8, error -71 [ 235.266118][ T1351] usb usb7-port1: unable to enumerate USB device [ 235.273216][T14202] Failed to initialize the IGMP autojoin socket (err -2) [ 236.078510][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2070'. [ 236.119581][T14220] Failed to initialize the IGMP autojoin socket (err -2) [ 236.592716][T14055] udevd[14055]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 237.546192][ T9976] net_ratelimit: 87 callbacks suppressed [ 237.546209][ T9976] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.550231][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 237.659380][T14255] CIFS mount error: No usable UNC path provided in device string! [ 237.659380][T14255] [ 237.666842][ T9976] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.666968][T14255] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 237.672312][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 237.688104][ T42] audit: type=1326 audit(237.628:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.2077" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384539de59 code=0x50000 [ 237.696017][ T42] audit: type=1326 audit(237.628:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.2077" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384539de59 code=0x50000 [ 237.716604][ T42] audit: type=1326 audit(237.628:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.2077" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384539de59 code=0x50000 [ 237.735466][ T42] audit: type=1326 audit(237.628:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.2077" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384539de59 code=0x50000 [ 237.744056][ T42] audit: type=1326 audit(237.628:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.2077" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384539de59 code=0x50000 [ 237.753521][ T42] audit: type=1326 audit(237.628:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.2077" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384539de59 code=0x50000 [ 237.762916][ T42] audit: type=1326 audit(237.628:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.2077" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384539de59 code=0x50000 [ 237.772774][ T42] audit: type=1326 audit(237.628:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.2077" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384539de59 code=0x50000 [ 237.785473][ T5886] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.789094][ T42] audit: type=1326 audit(237.628:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.2077" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384539de59 code=0x50000 [ 237.789745][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.800596][ T5886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 237.808085][ T42] audit: type=1326 audit(237.628:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14253 comm="syz.0.2077" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384539de59 code=0x50000 [ 237.819509][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.827826][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.834389][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.838035][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.929359][ T9976] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 237.938349][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 238.075907][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 238.085219][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 238.168693][T14279] __nla_validate_parse: 2 callbacks suppressed [ 238.168709][T14279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2084'. [ 238.181171][T14279] 9pnet_virtio: no channels available for device 127.0.0.1 [ 238.197443][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2084'. [ 238.215642][T14261] Failed to initialize the IGMP autojoin socket (err -2) [ 238.327821][T14290] binder: BINDER_SET_CONTEXT_MGR already set [ 238.332856][T14290] binder: 14289:14290 ioctl 4018620d 200000000100 returned -16 [ 238.705531][ T29] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 238.877248][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 238.883029][ T29] usb 6-1: config 0 has no interfaces? [ 238.884789][ T29] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 238.892958][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.912483][ T29] usb 6-1: config 0 descriptor?? [ 239.123742][ T1351] usb 6-1: USB disconnect, device number 31 [ 239.576274][T14261] netdevsim netdevsim5 netdevsim0: renamed from eth2 [ 239.593430][T14261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 239.606343][T14261] netdevsim netdevsim5 netdevsim1: renamed from eth3 [ 239.628131][T14261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 239.631871][T14261] netdevsim netdevsim5 netdevsim2: renamed from eth4 [ 239.641056][T14261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 239.644122][T14261] netdevsim netdevsim5 netdevsim3: renamed from eth5 [ 239.654225][T14261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 239.817729][T14311] binder: 14310:14311 ioctl c0306201 200000000080 returned -14 [ 239.916515][ T64] Bluetooth: hci0: command tx timeout [ 239.933469][T14311] binder: 14310:14311 ioctl c0306201 2000000003c0 returned -14 [ 239.995021][T14326] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2097'. [ 240.004455][ T29] lo speed is unknown, defaulting to 1000 [ 240.010864][T14326] validate_nla: 39 callbacks suppressed [ 240.010882][T14326] netlink: 'syz.1.2097': attribute type 4 has an invalid length. [ 240.017888][ T29] syz1: Port: 1 Link DOWN [ 240.022395][ T29] lo speed is unknown, defaulting to 1000 [ 240.028130][ T29] lo speed is unknown, defaulting to 1000 [ 240.038939][ T29] syz1: Port: 1 Link ACTIVE [ 240.081687][T14330] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2098'. [ 240.086607][T14330] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2098'. [ 240.662173][T14261] wireguard: wg0: Could not create IPv4 socket [ 240.666636][T14261] wireguard: wg1: Could not create IPv4 socket [ 240.670908][T14261] wireguard: wg2: Could not create IPv4 socket [ 240.879580][T14357] hfsplus: unable to find HFS+ superblock [ 240.945657][T14368] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 240.947698][T14368] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 240.951027][T14368] vhci_hcd vhci_hcd.0: Device attached [ 240.960997][T14368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.965955][T14368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.184297][T14377] netlink: 'syz.2.2108': attribute type 1 has an invalid length. [ 241.190843][ T5841] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 241.191725][T14377] netlink: 'syz.2.2108': attribute type 1 has an invalid length. [ 241.194025][ T1351] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 241.197633][T14377] netlink: 'syz.2.2108': attribute type 1 has an invalid length. [ 241.202824][T14377] netlink: 'syz.2.2108': attribute type 1 has an invalid length. [ 241.206097][T14377] netlink: 'syz.2.2108': attribute type 1 has an invalid length. [ 241.209211][T14377] netlink: 'syz.2.2108': attribute type 1 has an invalid length. [ 241.222946][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2108'. [ 241.276326][T14379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2109'. [ 241.279966][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2109'. [ 241.356288][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 241.362295][T14371] usbip_core: unknown command [ 241.365775][T14371] vhci_hcd: unknown pdu 0 [ 241.367617][T14371] usbip_core: unknown command [ 241.371064][T14369] syzkaller0: entered promiscuous mode [ 241.373452][T14369] syzkaller0: entered allmulticast mode [ 241.376201][ T9976] vhci_hcd vhci_hcd.0: stop threads [ 241.376224][ T9976] vhci_hcd vhci_hcd.0: release socket [ 241.376258][ T9976] vhci_hcd vhci_hcd.0: disconnect device [ 241.426003][ T1351] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 241.579575][T14397] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2113'. [ 241.649211][T14398] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 241.727334][ T5841] usb 5-1: unable to get BOS descriptor or descriptor too short [ 241.736185][ T5841] usb 5-1: no configurations [ 241.737746][ T5841] usb 5-1: can't read configurations, error -22 [ 242.056429][T14414] netlink: 'syz.1.2116': attribute type 1 has an invalid length. [ 242.065638][T14414] netlink: 'syz.1.2116': attribute type 1 has an invalid length. [ 242.068936][T14414] netlink: 'syz.1.2116': attribute type 1 has an invalid length. [ 242.078999][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2116'. [ 242.334698][T14430] veth0_to_bond: left allmulticast mode [ 242.345445][T14430] veth0_to_bond: left promiscuous mode [ 242.347820][T14430] bridge2: port 2(veth0_to_bond) entered disabled state [ 242.615724][ T5812] net_ratelimit: 104 callbacks suppressed [ 242.615743][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 242.620860][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 242.717014][T14480] Failed to initialize the IGMP autojoin socket (err -2) [ 242.735725][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 242.738086][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 242.822033][T14480] A link change request failed with some changes committed already. Interface ŖŖŖŖŖŖI”§å!qƒś may have been left with an inconsistent configuration, please check. [ 242.835806][T14493] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 242.842221][T14493] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 242.846172][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 242.850325][T14493] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 242.854161][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 242.975615][ T9976] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 242.976603][T14502] openvswitch: netlink: Actions may not be safe on all matching packets [ 242.979409][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 243.091726][T10792] block nbd1: Receive control failed (result -32) [ 243.349190][T14522] __nla_validate_parse: 3 callbacks suppressed [ 243.349204][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'. [ 243.354683][T14522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2148'. [ 243.448343][T14527] netlink: 36510 bytes leftover after parsing attributes in process `syz.2.2150'. [ 243.553192][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2152'. [ 243.553918][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 243.608000][T14550] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 243.646873][T14559] NILFS (nbd1): device size too small [ 243.696827][ T5786] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 243.757938][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2157'. [ 243.767450][T14552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.855669][T14578] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 243.857752][T14578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 243.864414][T14578] vhci_hcd vhci_hcd.0: Device attached [ 243.885313][T14578] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 243.888115][T14578] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 243.892390][T14578] vhci_hcd vhci_hcd.0: Device attached [ 243.896608][ T42] kauditd_printk_skb: 15549 callbacks suppressed [ 243.896619][ T42] audit: type=1400 audit(243.838:16767): avc: denied { watch_mount } for pid=14587 comm="syz.0.2162" path="/551" dev="tmpfs" ino=2961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 243.911504][ T42] audit: type=1400 audit(243.848:16768): avc: denied { write } for pid=14589 comm="syz.1.2163" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 243.917822][ T42] audit: type=1400 audit(243.848:16769): avc: denied { read } for pid=14589 comm="syz.1.2163" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 243.933050][T14592] 0x000000000000-0x2000000000c0 : "" [ 243.935252][T14592] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x20000 [ 243.954942][T14592] ftl_cs: FTL header not found. [ 244.125466][ T2186] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 244.411574][T14585] vhci_hcd: connection closed [ 244.411719][T14580] vhci_hcd: connection reset by peer [ 244.411998][ T5786] vhci_hcd vhci_hcd.2: stop threads [ 244.421329][ T5786] vhci_hcd vhci_hcd.2: release socket [ 244.425210][ T5786] vhci_hcd vhci_hcd.2: disconnect device [ 244.428963][ T5786] vhci_hcd vhci_hcd.2: stop threads [ 244.432990][ T5786] vhci_hcd vhci_hcd.2: release socket [ 244.437094][ T5786] vhci_hcd vhci_hcd.2: disconnect device [ 245.215778][T14602] loop6: detected capacity change from 128 to 127 [ 245.231270][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.239207][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.243559][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.248273][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.257747][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.376640][T14055] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 245.431323][T14625] kvm: pic: non byte write [ 245.436397][T14625] kvm: pic: non byte write [ 245.465510][ T5836] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 245.600411][T14607] Failed to initialize the IGMP autojoin socket (err -2) [ 245.640361][ T5836] usb 7-1: Using ep0 maxpacket: 32 [ 245.648727][ T5836] usb 7-1: config 3 has an invalid interface number: 177 but max is 1 [ 245.653989][ T5836] usb 7-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 245.662287][ T5836] usb 7-1: config 3 has an invalid interface number: 61 but max is 1 [ 245.668036][ T5836] usb 7-1: config 3 has no interface number 0 [ 245.673023][ T5836] usb 7-1: config 3 has no interface number 1 [ 245.679453][ T5836] usb 7-1: config 3 interface 177 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 245.686552][ T5836] usb 7-1: config 3 interface 177 altsetting 2 has an endpoint descriptor with address 0x69, changing to 0x9 [ 245.690565][T14655] overlayfs: cannot append lower layer [ 245.705550][ T5836] usb 7-1: config 3 interface 177 altsetting 2 endpoint 0x9 has invalid maxpacket 58723, setting to 64 [ 245.710283][ T5836] usb 7-1: config 3 interface 177 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 245.714764][ T5836] usb 7-1: config 3 interface 177 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 245.725752][ T5836] usb 7-1: config 3 interface 177 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 245.735479][ T5836] usb 7-1: config 3 interface 177 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 245.742279][ T5836] usb 7-1: config 3 interface 177 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 245.756126][ T5836] usb 7-1: config 3 interface 177 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 245.760492][ T5836] usb 7-1: config 3 interface 177 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 245.764710][ T5836] usb 7-1: config 3 interface 177 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 245.777819][ T5836] usb 7-1: config 3 interface 177 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 245.782989][ T5836] usb 7-1: config 3 interface 177 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 245.795685][ T5836] usb 7-1: config 3 interface 177 altsetting 2 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 245.805581][ T5836] usb 7-1: config 3 interface 61 altsetting 16 has a duplicate endpoint with address 0x2, skipping [ 245.816157][ T5836] usb 7-1: config 3 interface 61 altsetting 16 has a duplicate endpoint with address 0x3, skipping [ 245.825501][ T5836] usb 7-1: config 3 interface 61 altsetting 16 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 245.832106][ T5836] usb 7-1: config 3 interface 61 altsetting 16 has a duplicate endpoint with address 0xD, skipping [ 245.842997][ T5836] usb 7-1: config 3 interface 61 altsetting 16 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 245.843885][T14663] validate_nla: 11 callbacks suppressed [ 245.843899][T14663] netlink: 'syz.1.2176': attribute type 1 has an invalid length. [ 245.853751][ T5836] usb 7-1: config 3 interface 61 altsetting 16 has a duplicate endpoint with address 0x8, skipping [ 245.862462][ T5836] usb 7-1: config 3 interface 61 altsetting 16 has a duplicate endpoint with address 0x2, skipping [ 245.865846][T14663] netlink: 'syz.1.2176': attribute type 1 has an invalid length. [ 245.866624][ T5836] usb 7-1: config 3 interface 61 altsetting 16 has a duplicate endpoint with address 0x8, skipping [ 245.868895][T14663] netlink: 'syz.1.2176': attribute type 1 has an invalid length. [ 245.873705][ T5836] usb 7-1: config 3 interface 61 altsetting 16 has a duplicate endpoint with address 0x1, skipping [ 245.875502][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2176'. [ 245.883535][T14663] netlink: 'syz.1.2176': attribute type 1 has an invalid length. [ 245.884078][ T5836] usb 7-1: config 3 interface 177 has no altsetting 0 [ 245.889569][ T5836] usb 7-1: config 3 interface 61 has no altsetting 0 [ 245.892352][T14663] netlink: 'syz.1.2176': attribute type 1 has an invalid length. [ 245.895956][T14663] netlink: 'syz.1.2176': attribute type 1 has an invalid length. [ 245.903564][ T5836] usb 7-1: New USB device found, idVendor=0c52, idProduct=2412, bcdDevice=ab.11 [ 245.909502][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.914794][ T5836] usb 7-1: Product: syz [ 245.924734][ T5836] usb 7-1: Manufacturer: syz [ 245.929056][ T5836] usb 7-1: SerialNumber: syz [ 245.955780][ T42] audit: type=1400 audit(245.898:16770): avc: denied { bind } for pid=14667 comm="syz.1.2178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 245.966130][T14668] tmpfs: Unknown parameter 'n„swap' [ 246.132627][T14675] syz.1.2181: attempt to access beyond end of device [ 246.132627][T14675] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 246.136864][T14675] gfs2: error -5 reading superblock [ 246.147018][ T5836] ftdi_sio 7-1:3.177: FTDI USB Serial Device converter detected [ 246.156827][ T5836] ftdi_sio ttyUSB0: unknown device type: 0xab11 [ 246.166055][ T5841] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 246.166502][T14676] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2181'. [ 246.174660][ T5836] ftdi_sio 7-1:3.61: FTDI USB Serial Device converter detected [ 246.181460][ T5836] ftdi_sio ttyUSB1: unknown device type: 0xab11 [ 246.186460][T14675] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 246.195002][ T5836] usb 7-1: USB disconnect, device number 30 [ 246.228876][ T5836] ftdi_sio 7-1:3.177: device disconnected [ 246.237596][ T5836] ftdi_sio 7-1:3.61: device disconnected [ 246.327978][ T5841] usb 5-1: Using ep0 maxpacket: 8 [ 246.332894][ T5841] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 246.342027][ T5841] usb 5-1: config 0 has no interface number 0 [ 246.344835][ T5841] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 246.349807][ T5841] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 246.353839][ T5841] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 246.359121][ T5841] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 246.363550][ T5841] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.374172][ T5841] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 246.378076][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.380942][ T5841] usb 5-1: Product: syz [ 246.382554][ T5841] usb 5-1: Manufacturer: syz [ 246.384466][ T5841] usb 5-1: SerialNumber: syz [ 246.393806][ T5841] usb 5-1: config 0 descriptor?? [ 246.480922][ T42] audit: type=1400 audit(246.418:16771): avc: denied { append } for pid=14681 comm="syz.1.2184" name="ptp1" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 246.609852][ T5841] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 246.746852][T14607] netdevsim netdevsim5 netdevsim0: renamed from eth2 [ 246.763182][T14607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 246.770476][T14607] netdevsim netdevsim5 netdevsim1: renamed from eth3 [ 246.780954][T14607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 246.783881][T14607] netdevsim netdevsim5 netdevsim2: renamed from eth4 [ 246.799590][T14607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 246.803030][T14607] netdevsim netdevsim5 netdevsim3: renamed from eth5 [ 246.824834][T14607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 246.837922][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2177'. [ 246.858169][ T5841] usb 5-1: USB disconnect, device number 38 [ 246.986086][ T42] audit: type=1400 audit(246.918:16772): avc: denied { write } for pid=14702 comm="syz.2.2190" name="/" dev="9p" ino=78119057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 247.023516][T14708] Bluetooth: MGMT ver 1.23 [ 247.119955][ T42] audit: type=1400 audit(247.058:16773): avc: denied { write } for pid=14702 comm="syz.2.2190" name="/" dev="9p" ino=78119057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 247.145513][ T42] audit: type=1400 audit(247.058:16774): avc: denied { write } for pid=14702 comm="syz.2.2190" name="/" dev="9p" ino=78119057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 247.154183][ T42] audit: type=1400 audit(247.058:16775): avc: denied { rename } for pid=14702 comm="syz.2.2190" name="file0" dev="9p" ino=78119271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 247.365566][ T64] Bluetooth: hci0: command tx timeout [ 247.549517][T14731] 9p: Could not find request transport: virs= [ 247.569748][T14727] kvm: pic: non byte write [ 247.676021][ T5812] net_ratelimit: 93 callbacks suppressed [ 247.676045][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 247.681137][T14747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2193'. [ 247.686244][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 247.735196][T14607] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 247.744816][T14607] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 247.754947][T14607] wireguard: wg0: Could not create IPv4 socket [ 247.760064][T14607] wireguard: wg1: Could not create IPv4 socket [ 247.763887][T14607] wireguard: wg2: Could not create IPv4 socket [ 247.806083][ T9976] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 247.809365][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 247.915809][ T5812] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 247.919081][ T5812] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.025546][ T9976] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 248.028702][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 248.383827][ T42] audit: type=1400 audit(248.318:16776): avc: denied { append } for pid=14751 comm="syz.0.2197" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 248.492082][T14759] loop5: detected capacity change from 0 to 7 [ 248.502742][T14759] Dev loop5: unable to read RDB block 7 [ 248.505217][T14759] loop5: AHDI p1 p2 p3 [ 248.510015][T14763] netlink: 'syz.2.2200': attribute type 1 has an invalid length. [ 248.510554][T14759] loop5: partition table partially beyond EOD, truncated [ 248.512712][T14763] netlink: 'syz.2.2200': attribute type 1 has an invalid length. [ 248.518766][T14763] netlink: 'syz.2.2200': attribute type 1 has an invalid length. [ 248.521749][T14763] netlink: 'syz.2.2200': attribute type 1 has an invalid length. [ 248.525259][T14759] loop5: p1 start 1818582900 is beyond EOD, truncated [ 248.529103][T14759] loop5: p3 start 335544320 is beyond EOD, truncated [ 248.537287][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2200'. [ 248.637044][T14770] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2202'. [ 248.706976][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 248.723654][T14772] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2205'. [ 249.117625][ T5746] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 249.267740][ T2186] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 249.920034][T14808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 250.002959][T14815] input: syz0 as /devices/virtual/input/input36 [ 250.013552][T14815] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 250.016793][T14815] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 250.022903][T14815] tipc: Resetting bearer [ 250.057825][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2215'. [ 250.061411][T14815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2215'. [ 250.157391][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 250.157404][ T42] audit: type=1400 audit(250.098:16781): avc: denied { mount } for pid=14823 comm="syz.1.2218" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 250.217017][T14823] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 250.402211][T14834] fuse: Bad value for 'fd' [ 250.682421][T14852] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 250.724792][T14856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2226'. [ 250.859787][T14861] CIFS mount error: No usable UNC path provided in device string! [ 250.859787][T14861] [ 250.863950][T14861] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 250.869470][T14861] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 251.206087][ T5746] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 252.695568][ T5786] net_ratelimit: 87 callbacks suppressed [ 252.695617][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 252.715792][ T5786] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 252.749944][ T42] audit: type=1400 audit(252.678:16782): avc: denied { ioctl } for pid=14897 comm="syz.0.2238" path="/578/file0/file1" dev="9p" ino=78119271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 252.797710][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.817445][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.834709][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.836627][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 252.840185][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.840779][ T5786] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 252.843976][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.890840][T14902] ptrace attach of "/syz-executor exec"[5739] was attempted by ""[14902] [ 252.966888][ T9976] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 252.969997][ T9976] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.075510][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 253.085871][ T5786] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 253.196263][ T9976] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 253.216468][ T5786] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 253.217361][T14911] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 253.228513][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2242'. [ 253.240852][T14911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.250015][T14911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.259762][T14901] Failed to initialize the IGMP autojoin socket (err -2) [ 253.302911][T14930] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 253.307676][T14930] bond7 (unregistering): Released all slaves [ 253.378292][ T42] audit: type=1400 audit(253.318:16783): avc: denied { watch watch_reads } for pid=14932 comm="syz.0.2245" path="/581/file0" dev="tmpfs" ino=3134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 253.417665][ T42] audit: type=1326 audit(253.358:16784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14932 comm="syz.0.2245" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f384539de59 code=0x0 [ 253.431688][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2247'. [ 253.459085][T14943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2248'. [ 253.672391][T14954] kvm: user requested TSC rate below hardware speed [ 253.723319][T14954] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 253.727078][T14954] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 253.846233][T14963] validate_nla: 14 callbacks suppressed [ 253.846247][T14963] netlink: 'syz.1.2254': attribute type 28 has an invalid length. [ 253.863446][T14965] netlink: 'syz.0.2255': attribute type 1 has an invalid length. [ 253.867430][T14965] netlink: 'syz.0.2255': attribute type 1 has an invalid length. [ 253.870256][T14965] netlink: 'syz.0.2255': attribute type 1 has an invalid length. [ 253.873110][T14965] netlink: 'syz.0.2255': attribute type 1 has an invalid length. [ 253.876170][T14965] netlink: 'syz.0.2255': attribute type 1 has an invalid length. [ 253.878639][T14965] netlink: 'syz.0.2255': attribute type 1 has an invalid length. [ 253.883008][T14965] __nla_validate_parse: 1 callbacks suppressed [ 253.883020][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2255'. [ 253.883214][T14967] netlink: 'syz.1.2256': attribute type 1 has an invalid length. [ 253.934090][T14967] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.971018][T14967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 253.975535][ T1351] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 253.976260][T14967] veth0_to_bond: left allmulticast mode [ 253.985048][T14967] bond7: (slave veth0_to_bond): making interface the new active one [ 253.989979][T14967] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 254.019813][ T42] audit: type=1400 audit(253.958:16785): avc: denied { ioctl } for pid=14969 comm="syz.0.2257" path="socket:[64201]" dev="sockfs" ino=64201 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 254.032443][ T42] audit: type=1400 audit(253.978:16786): avc: denied { setopt } for pid=14969 comm="syz.0.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 254.126610][ T1351] usb 7-1: Using ep0 maxpacket: 8 [ 254.129973][ T1351] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 254.132622][ T1351] usb 7-1: config 0 has no interface number 0 [ 254.135185][ T1351] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 254.141334][ T1351] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 254.147059][ T1351] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 254.151589][ T1351] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 254.162986][ T1351] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 254.167325][ T1351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.178524][ T1351] usb 7-1: config 0 descriptor?? [ 254.194453][ T1351] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 254.376334][T14901] netdevsim netdevsim5 netdevsim0: renamed from eth2 [ 254.389766][T14901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.393018][T14901] netdevsim netdevsim5 netdevsim1: renamed from eth3 [ 254.402254][T14901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.410287][T14901] netdevsim netdevsim5 netdevsim2: renamed from eth4 [ 254.420195][T14901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.423584][ T24] usb 7-1: USB disconnect, device number 31 [ 254.423952][T14901] netdevsim netdevsim5 netdevsim3: renamed from eth5 [ 254.454565][T14901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.465058][ T24] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 254.518976][T14993] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=14993 comm=syz.0.2263 [ 254.875784][ T5746] Bluetooth: hci0: command tx timeout [ 254.973058][T15035] binder: BINDER_SET_CONTEXT_MGR already set [ 254.984137][T15035] binder: 15034:15035 ioctl 4018620d 200000000100 returned -16 [ 254.993916][T15035] binder: BINDER_SET_CONTEXT_MGR already set [ 254.999319][T15035] binder: 15034:15035 ioctl 4018620d 200000000100 returned -16 [ 255.065797][T15035] binder: BINDER_SET_CONTEXT_MGR already set [ 255.073027][T15035] binder: 15034:15035 ioctl 4018620d 2000000002c0 returned -16 [ 255.222465][T15054] netlink: 'syz.1.2276': attribute type 1 has an invalid length. [ 255.248759][T15054] 8021q: adding VLAN 0 to HW filter on device bond8 [ 255.262657][T15054] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2276'. [ 255.290386][T15054] bond8: (slave gretap2): making interface the new active one [ 255.295490][ T1351] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 255.298965][T15054] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 255.403462][T14901] wireguard: wg0: Could not create IPv4 socket [ 255.414059][T14901] wireguard: wg1: Could not create IPv4 socket [ 255.425985][T14901] wireguard: wg2: Could not create IPv4 socket [ 255.446689][ T1351] usb 7-1: Using ep0 maxpacket: 8 [ 255.458352][ T1351] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.466165][ T1351] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 255.490335][ T1351] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 255.520909][ T1351] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 255.534048][ T1351] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 255.539091][ T1351] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.544467][ T1351] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 255.550472][ T1351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.770730][T15061] overlayfs: statfs failed on './file0' [ 255.780833][ T1351] usb 7-1: GET_CAPABILITIES returned 0 [ 255.783466][ T1351] usbtmc 7-1:16.0: can't read capabilities [ 255.986812][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 255.990945][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 255.994665][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 255.998403][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 256.010106][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 256.013737][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 256.017361][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 256.036411][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 256.040130][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 256.043848][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 256.047413][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 256.051112][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 256.054722][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 256.058434][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 256.062149][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 256.065728][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 256.084549][ T1351] usb 7-1: USB disconnect, device number 32 [ 256.123621][T15068] ufs: You didn't specify the type of your ufs filesystem [ 256.123621][T15068] [ 256.123621][T15068] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 256.123621][T15068] [ 256.123621][T15068] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 256.137203][T15068] ufs: failed to set blocksize [ 256.182619][T15068] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 256.515772][ T5524] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 256.669443][ T5524] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 256.683474][ T5524] usb 5-1: config 0 interface 0 has no altsetting 0 [ 256.688849][ T5524] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 256.692823][ T5524] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 256.696620][ T5524] usb 5-1: Product: syz [ 256.698403][ T5524] usb 5-1: Manufacturer: syz [ 256.700404][ T5524] usb 5-1: SerialNumber: syz [ 256.706561][ T5524] usb 5-1: config 0 descriptor?? [ 256.709974][T15072] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.722759][ T5524] usb 5-1: selecting invalid altsetting 0 [ 256.755636][T11481] ================================================================== [ 256.758177][T11481] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x4f3/0x5d0 [ 256.760906][T11481] Read of size 4 at addr ffff88802e1ca83c by task syz.2.1577/11481 [ 256.764882][T11481] [ 256.766156][T11481] CPU: 1 UID: 0 PID: 11481 Comm: syz.2.1577 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.766184][T11481] Tainted: [L]=SOFTLOCKUP [ 256.766188][T11481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.766196][T11481] Call Trace: [ 256.766218][T11481] [ 256.766224][T11481] dump_stack_lvl+0x100/0x190 [ 256.766328][T11481] print_report+0x13d/0x4b0 [ 256.766366][T11481] ? __virt_addr_valid+0x239/0x430 [ 256.766418][T11481] ? dvb_frontend_release+0x4f3/0x5d0 [ 256.766433][T11481] kasan_report+0xdf/0x1c0 [ 256.766508][T11481] ? dvb_frontend_release+0x4f3/0x5d0 [ 256.766520][T11481] dvb_frontend_release+0x4f3/0x5d0 [ 256.766531][T11481] ? __pfx_dvb_frontend_release+0x10/0x10 [ 256.766543][T11481] __fput+0x3ff/0xb50 [ 256.766557][T11481] task_work_run+0x150/0x240 [ 256.766569][T11481] ? __pfx_task_work_run+0x10/0x10 [ 256.766579][T11481] ? do_raw_spin_unlock+0x145/0x1e0 [ 256.766596][T11481] do_exit+0x951/0x2ae0 [ 256.766612][T11481] ? __pfx_do_exit+0x10/0x10 [ 256.766626][T11481] ? cgroup_update_frozen_flag+0x125/0x240 [ 256.766643][T11481] ? find_held_lock+0x2b/0x80 [ 256.766659][T11481] ? get_signal+0x184f/0x21e0 [ 256.766672][T11481] do_group_exit+0xd5/0x2a0 [ 256.766688][T11481] get_signal+0x1ec7/0x21e0 [ 256.766702][T11481] ? __pfx_get_signal+0x10/0x10 [ 256.766714][T11481] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 256.766733][T11481] arch_do_signal_or_restart+0x91/0x7e0 [ 256.766744][T11481] ? get_timespec64+0x147/0x240 [ 256.766755][T11481] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 256.766775][T11481] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 256.766792][T11481] exit_to_user_mode_loop+0x139/0x6f0 [ 256.766811][T11481] ? rcu_is_watching+0x12/0xc0 [ 256.766829][T11481] do_syscall_64+0x666/0x870 [ 256.766937][T11481] ? clear_bhb_loop+0x40/0x90 [ 256.766950][T11481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.766963][T11481] RIP: 0033:0x7ff5c9d5e68e [ 256.766978][T11481] Code: Unable to access opcode bytes at 0x7ff5c9d5e664. [ 256.767004][T11481] RSP: 002b:00007ff5cad42f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 256.767015][T11481] RAX: fffffffffffffdfc RBX: 00007ff5cad436c0 RCX: 00007ff5c9d5e68e [ 256.767022][T11481] RDX: 00007ff5cad42fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.767029][T11481] RBP: 00007ff5c9e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 256.767036][T11481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.767043][T11481] R13: 00007ff5ca026038 R14: 00007ff5ca025fa0 R15: 00007ffdbbafe3a8 [ 256.767053][T11481] [ 256.767057][T11481] [ 256.859019][T11481] Allocated by task 1: [ 256.860511][T11481] kasan_save_stack+0x30/0x50 [ 256.862283][T11481] kasan_save_track+0x14/0x30 [ 256.864603][T11481] __kasan_kmalloc+0xaa/0xb0 [ 256.867136][T11481] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 256.870293][T11481] dvb_register_device+0x1d6/0x1e20 [ 256.872682][T11481] dvb_register_frontend+0x552/0x820 [ 256.874726][T11481] vidtv_bridge_probe+0x44b/0xa30 [ 256.876642][T11481] platform_probe+0x106/0x1d0 [ 256.878376][T11481] really_probe+0x241/0xa60 [ 256.879869][T11481] __driver_probe_device+0x20e/0x450 [ 256.881637][T11481] driver_probe_device+0x4a/0x140 [ 256.883367][T11481] __driver_attach+0x21f/0x5b0 [ 256.885087][T11481] bus_for_each_dev+0x13e/0x1d0 [ 256.886803][T11481] bus_add_driver+0x305/0x5b0 [ 256.888409][T11481] driver_register+0x1e2/0x360 [ 256.889959][T11481] vidtv_bridge_init+0x52/0x80 [ 256.891679][T11481] do_one_initcall+0x11d/0x700 [ 256.893389][T11481] kernel_init_freeable+0x6ea/0x7b0 [ 256.895104][T11481] kernel_init+0x1f/0x1e0 [ 256.896529][T11481] ret_from_fork+0x72b/0xd50 [ 256.898121][T11481] ret_from_fork_asm+0x1a/0x30 [ 256.899665][T11481] [ 256.900514][T11481] Freed by task 11481: [ 256.901902][T11481] kasan_save_stack+0x30/0x50 [ 256.903803][T11481] kasan_save_track+0x14/0x30 [ 256.905338][T11481] kasan_save_free_info+0x3b/0x70 [ 256.907044][T11481] __kasan_slab_free+0x5f/0x80 [ 256.908541][T11481] kfree+0x22b/0x6c0 [ 256.909848][T11481] dvb_device_put.part.0+0x57/0x90 [ 256.911494][T11481] dvb_generic_release+0xe2/0x160 [ 256.913395][T11481] dvb_frontend_release+0x13d/0x5d0 [ 256.915313][T11481] __fput+0x3ff/0xb50 [ 256.916631][T11481] task_work_run+0x150/0x240 [ 256.918404][T11481] do_exit+0x951/0x2ae0 [ 256.919896][T11481] do_group_exit+0xd5/0x2a0 [ 256.921608][T11481] get_signal+0x1ec7/0x21e0 [ 256.923120][T11481] arch_do_signal_or_restart+0x91/0x7e0 [ 256.924819][T11481] exit_to_user_mode_loop+0x139/0x6f0 [ 256.926530][T11481] do_syscall_64+0x666/0x870 [ 256.928009][T11481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.929861][T11481] [ 256.930620][T11481] The buggy address belongs to the object at ffff88802e1ca800 [ 256.930620][T11481] which belongs to the cache kmalloc-256 of size 256 [ 256.934908][T11481] The buggy address is located 60 bytes inside of [ 256.934908][T11481] freed 256-byte region [ffff88802e1ca800, ffff88802e1ca900) [ 256.939117][T11481] [ 256.939879][T11481] The buggy address belongs to the physical page: [ 256.941853][T11481] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e1ca [ 256.944520][T11481] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 256.947125][T11481] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 256.949453][T11481] page_type: f5(slab) [ 256.950700][T11481] raw: 00fff00000000040 ffff88801bc42b40 dead000000000100 dead000000000122 [ 256.953346][T11481] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 256.955941][T11481] head: 00fff00000000040 ffff88801bc42b40 dead000000000100 dead000000000122 [ 256.958615][T11481] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 256.961260][T11481] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 256.964061][T11481] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 256.966685][T11481] page dumped because: kasan: bad access detected [ 256.968675][T11481] page_owner tracks the page as allocated [ 256.970587][T11481] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14054963013, free_ts 0 [ 256.976562][T11481] post_alloc_hook+0xfd/0x120 [ 256.978134][T11481] get_page_from_freelist+0xf48/0x3530 [ 256.979898][T11481] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 256.981777][T11481] new_slab+0xa2/0x650 [ 256.983096][T11481] refill_objects+0xe3/0x410 [ 256.984571][T11481] __pcs_replace_empty_main+0x376/0x680 [ 256.986350][T11481] __kmalloc_cache_noprof+0x479/0x6c0 [ 256.988116][T11481] bus_add_driver+0x92/0x5b0 [ 256.989609][T11481] driver_register+0x1e2/0x360 [ 256.991110][T11481] usb_register_driver+0x21c/0x3e0 [ 256.992843][T11481] do_one_initcall+0x11d/0x700 [ 256.994380][T11481] kernel_init_freeable+0x6ea/0x7b0 [ 256.996032][T11481] kernel_init+0x1f/0x1e0 [ 256.997450][T11481] ret_from_fork+0x72b/0xd50 [ 256.998904][T11481] ret_from_fork_asm+0x1a/0x30 [ 257.000447][T11481] page_owner free stack trace missing [ 257.002208][T11481] [ 257.002979][T11481] Memory state around the buggy address: [ 257.004714][T11481] ffff88802e1ca700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 257.007153][T11481] ffff88802e1ca780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 257.009623][T11481] >ffff88802e1ca800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.012278][T11481] ^ [ 257.014302][T11481] ffff88802e1ca880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 257.017126][T11481] ffff88802e1ca900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 257.020059][T11481] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 257.031799][ T42] audit: type=1400 audit(256.968:16787): avc: denied { write } for pid=5720 comm="syz-executor" path="pipe:[6965]" dev="pipefs" ino=6965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 257.046757][T11481] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 257.049821][T11481] CPU: 1 UID: 0 PID: 11481 Comm: syz.2.1577 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.054365][T11481] Tainted: [L]=SOFTLOCKUP [ 257.056032][T11481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.060058][T11481] Call Trace: [ 257.061481][T11481] [ 257.062716][T11481] dump_stack_lvl+0x100/0x190 [ 257.064660][T11481] vpanic+0x552/0x970 [ 257.066361][T11481] ? __pfx_vpanic+0x10/0x10 [ 257.068221][T11481] ? rcu_is_watching+0x12/0xc0 [ 257.070195][T11481] ? dvb_frontend_release+0x4f3/0x5d0 [ 257.072571][T11481] panic+0xd1/0xe0 [ 257.074116][T11481] ? __pfx_panic+0x10/0x10 [ 257.075953][T11481] ? dvb_frontend_release+0x4f3/0x5d0 [ 257.078283][T11481] ? preempt_schedule_common+0x42/0xc0 [ 257.080370][T11481] ? check_panic_on_warn+0x1f/0x90 [ 257.082455][T11481] check_panic_on_warn.cold+0x19/0x34 [ 257.084579][T11481] end_report.part.0+0x3a/0x90 [ 257.086543][T11481] kasan_report.cold+0xe/0x18 [ 257.088463][T11481] ? dvb_frontend_release+0x4f3/0x5d0 [ 257.090508][T11481] dvb_frontend_release+0x4f3/0x5d0 [ 257.092660][T11481] ? __pfx_dvb_frontend_release+0x10/0x10 [ 257.094961][T11481] __fput+0x3ff/0xb50 [ 257.096593][T11481] task_work_run+0x150/0x240 [ 257.098546][T11481] ? __pfx_task_work_run+0x10/0x10 [ 257.100697][T11481] ? do_raw_spin_unlock+0x145/0x1e0 [ 257.102856][T11481] do_exit+0x951/0x2ae0 [ 257.104614][T11481] ? __pfx_do_exit+0x10/0x10 [ 257.106602][T11481] ? cgroup_update_frozen_flag+0x125/0x240 [ 257.109015][T11481] ? find_held_lock+0x2b/0x80 [ 257.111005][T11481] ? get_signal+0x184f/0x21e0 [ 257.112965][T11481] do_group_exit+0xd5/0x2a0 [ 257.114886][T11481] get_signal+0x1ec7/0x21e0 [ 257.116754][T11481] ? __pfx_get_signal+0x10/0x10 [ 257.118798][T11481] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 257.121070][T11481] arch_do_signal_or_restart+0x91/0x7e0 [ 257.123352][T11481] ? get_timespec64+0x147/0x240 [ 257.125395][T11481] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 257.127946][T11481] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 257.130400][T11481] exit_to_user_mode_loop+0x139/0x6f0 [ 257.132626][T11481] ? rcu_is_watching+0x12/0xc0 [ 257.134627][T11481] do_syscall_64+0x666/0x870 [ 257.136561][T11481] ? clear_bhb_loop+0x40/0x90 [ 257.138524][T11481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.140880][T11481] RIP: 0033:0x7ff5c9d5e68e [ 257.142723][T11481] Code: Unable to access opcode bytes at 0x7ff5c9d5e664. [ 257.145541][T11481] RSP: 002b:00007ff5cad42f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 257.148930][T11481] RAX: fffffffffffffdfc RBX: 00007ff5cad436c0 RCX: 00007ff5c9d5e68e [ 257.152238][T11481] RDX: 00007ff5cad42fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.155452][T11481] RBP: 00007ff5c9e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 257.158653][T11481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.161861][T11481] R13: 00007ff5ca026038 R14: 00007ff5ca025fa0 R15: 00007ffdbbafe3a8 [ 257.165041][T11481] [ 257.167137][T11481] Kernel Offset: disabled [ 257.168839][T11481] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:51:47 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000001 RDI=ffffc90003557f48 RBP=0000000000000000 RSP=ffffc90003557f40 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81001de9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f1142506780 ffffffff 00c00000 GS =0000 ffff8880d5de8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000000 CR3=000000002ace9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001800000 Opmask01=0000000000008000 Opmask02=00000000d51103ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc563beb8 00007fffc563beb8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc563c3c0 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff0f 0e0d0c0b0a090807 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11426dab20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000726569666974 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b20657479622d32 3320646e61707865 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66206e6f69746174 6963696c6f532072 6574756f5220676e 6979616c6564203a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373657264646120 4c4c20726f66206e 6f69746174696369 6c6f532072657475 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 414b4056051f5600 0056564057414144 054c4c05574a4305 4b4a4c5144514c46 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 386566203a367367 616c66726464615f 6669203a73726464 616e7261656c5f66 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20316e616c772030 696669775f747269 7620306e616c7720 305f6576616c735f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00657572743d6e77 6f645f6669006573 6c61663d70755f66 6900356e616c7720 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 346e616c7720336e 616c7720326e616c 7720316e616c7720 30696669775f7472 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697620306e616c77 20305f6576616c73 5f646e6f62203662 70616c2039687465 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7620386874657620 3768746576203668 7465762035687465 7620346874657620 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85a295a0 RDI=ffffffff9b9fbb40 RBP=ffffffff9b9fbb00 RSP=ffffc90003c073b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff373f7ba R15=dffffc0000000000 RIP=ffffffff85a295c7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ee8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f91e1f5da08 CR3=0000000052dd9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=000000000b02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d69745f656c64 692e7166622e6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7e7ee3c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7e7ee3c6 00007ffd7e7ee3cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91e1234452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91e1234492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91e12345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91e1234484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc90003a58001 RBX=ffffc90003a57630 RCX=ffffffff91c40601 RDX=ffffc90003a57638 RSI=ffffc90003a57600 RDI=ffffc90003a57640 RBP=ffffc90003a50000 RSP=ffffc90003a57570 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000b806 R12=ffffc90003a57680 R13=ffffc90003a57630 R14=ffffc90003a57630 R15=ffffc90003a57664 RIP=ffffffff81b7f2c9 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f1142506780 ffffffff 00c00000 GS =0000 ffff8880d5fe8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f38453eb540 CR3=000000002d2a6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffff80 Opmask01=000000000000003f Opmask02=000000000100003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560cfeddb2a0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11426dab20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffff00 ff00ff00ff00ff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff00ffff0000 ff00000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030303030303031 313230383078006e 757400303d73656d 616e66692e74656e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000d0d0d0d0d0d0c 0c0f0d050d450053 4849000d004e5850 5c535b5413495853 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560900646461 0000000000000021 000032316e616c77 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80410004803e0004 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e002400000001 0008000500000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000070014 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61203c203e202064 690a3e613c206463 6163612020230a00 69206361203c3a20 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a73c800 RCX=ffffffff81fd69f0 RDX=ffff88801eea0000 RSI=ffffffff81fd69ca RDI=ffff88801eea0000 RBP=ffffc90000157cd8 RSP=ffffc90000157b80 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a633c60 R12=0000000000000003 R13=ffffed100d4e7901 R14=0000000000000003 R15=0000000000000001 RIP=ffffffff81fd69d1 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60e8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000003fa13000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000000000000 Opmask02=000000000b02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91e202bbe0 0000003000000010 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7e7ee3c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7e7ee3c6 00007ffd7e7ee3cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91e1234452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91e1234492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91e12345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91e1234484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91e13f05f8 00007f91e13f05c8 00007f91e13f0600 00007f91e13f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000