last executing test programs: 2.048997175s ago: executing program 1 (id=96): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0281, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0, 0x0, 0x0, 0x54}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000080)=0xf18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/memory/auto_online_blocks\x00', 0x1081, 0x0) write$UHID_DESTROY(r6, &(0x7f00000001c0), 0x4) syz_open_dev$rtc(&(0x7f00000000c0), 0x200, 0x20100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) mkdir(&(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r7, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@remote, @remote, 0x0, "96cffee3065dbdc99d550333bf90f38c880c6dc3d449e0d537238f6a639adba4", 0x92ab, 0x423a, 0xfffffc01, 0x3ff}, 0x3c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000, 0xfffffffffffffffc}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x32}, 0x2, @in=@empty, 0x7, 0x4, 0x1, 0x0, 0xe}]}]}, 0xfc}}, 0x0) r9 = socket(0x8000000010, 0x2, 0x0) write(r9, &(0x7f00000002c0)="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", 0xfc) 1.910681312s ago: executing program 1 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xb, 0x8, 0x7fc00002}]}) userfaultfd(0x80801) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0x40082104, 0x0) read$FUSE(r2, &(0x7f0000004300)={0x2020}, 0x2081) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f00000020c0)) 1.56105972s ago: executing program 2 (id=100): clock_settime(0x17, &(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_emit_ethernet(0xf9, &(0x7f0000000f80)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "140080", 0xc3, 0x2f, 0xac10321ce7a890e4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@fragment={0x2c, 0x0, 0xa, 0x0, 0x0, 0x0, 0x65}, @hopopts={0x3a}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "2b0f287a76d2f86d967b77befec4578c05243ebe6e9a898cd02173a70e3f817e91fbe8c5e41d0187f0698d0d1230b310b1d51a6da79a0ffcbd6e62bdaa9beda747105852b0d84986635c8eb69fe80a81e04a2b265e6eb631a65c5000df2e700394cc8600c5016f24f3ab668024ec51"}, {0x8, 0x88be, 0x104, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x6, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x1, 0x9}, 0x2, {0x8, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="dc010000210000000400000000000000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000100)=[{0x2, '\x00', @data=0x401, 0x232}]}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x40500, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000540)={{[0x7, 0x6, 0x8, 0x8]}, 0x0, 0x1, 0xfffffffa, 0x0, &(0x7f00000003c0)=[{{@_ha_fsid={[0x0, 0xe]}, {0x2, 0x7ff, 0x3, 0x9}}, 0x7, 0x0, '}!!\x00'}, {{@_ha_fsid={[0x8, 0x26]}, {0x3, 0x4, 0x2, 0x5}}, 0x6, 0x0, '/dev/kvm\x00'}, {{@align, {0x7, 0xe7, 0x200, 0xffffffffffffff81}}, 0x1db2, 0x0, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@_ha_fsid={[0x5, 0x3]}, {0xf, 0x776f, 0xb, 0x44fb}}, 0x0, 0x0, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@_ha_fsid={[0xbbd1, 0x4]}, {0x69, 0x3, 0x0, 0x2}}, 0x2, 0x0, '-\x00'}, {{@align=0x120000, {0x6, 0x8, 0x1, 0x9}}, 0x5, 0x0, '/selinux/avc/hash_stats\x00'}, {{@align=0x1000, {0x2, 0x1, 0x3ff, 0x7}}, 0x40, 0x0, '\xff\xff\xff\xff\xff\xff'}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff033}]}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r2}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.271423028s ago: executing program 2 (id=105): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x40086607, 0x0) 1.271115134s ago: executing program 2 (id=106): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x26081, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) (async) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./dev\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0xe0, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x1f, 0x82}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0x5, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000054) mount(0x0, &(0x7f0000004000)='./dev\x00', &(0x7f0000005000)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001000)='./dev/infiniband/umad0\x00', 0x2, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./dev/infiniband/umad0\x00', 0x2, 0x0) ioctl(r3, 0xc01c1b01, &(0x7f0000002000)="00000000000000000000000000000000000000000104010000000000") gettid() write(r3, &(0x7f0000003000)="000000000000000000000000000000000001000000000001800100"/160, 0xa0) (async) write(r3, &(0x7f0000003000)="000000000000000000000000000000000001000000000001800100"/160, 0xa0) 1.210330377s ago: executing program 3 (id=108): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @void}, 0x10) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x80000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000027e000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000005000/0x4000)=nil, &(0x7f00000b1000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) iopl(0x3) syz_io_uring_setup(0x35ea, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x2, 0x3c5}, 0xfffffffffffffffe, 0x0, &(0x7f0000000000)) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x80c89f, 0x4, 0x3, 0x112}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x300002, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffe) r6 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0xa, 0x0) close(r6) mq_unlink(&(0x7f0000000000)='eth0\x00') ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000ffff2cbd7000ffdbde2500000000", @ANYRES32=0x0, @ANYBLOB="096d050025940600200012800b00010067656e657665000010000280060005004e22000004000600"], 0x40}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x1e, 0x0, 0x0) 1.050641128s ago: executing program 1 (id=110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) userfaultfd(0x80801) r1 = fsopen(&(0x7f0000000300)='sockfs\x00', 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000540)="b9232500b16600540f973fb86a0cd7e3e0c38c75ea1b8449c2fef98c1193af888087e6ec3117c8ccb3ca2efeee29fe135c83ee06826ea57be325ca4ef06c05dde45cade10f72e8bee6236ae686472073"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000980)={0x114, 0x0, &(0x7f0000001c80)=[@increfs_done, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/112, 0x70, 0x1, 0x17}, @flat=@binder={0x73622a85, 0x100a, 0x2}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001a80)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f00000008c0)=""/29, 0x1d, 0x1, 0x39}, @ptr={0x70742a85, 0x1, &(0x7f00000009c0)=""/4096, 0x1000, 0x2, 0x3b}}, &(0x7f0000001a40)={0x0, 0x18, 0x40}}}, @decrefs, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000900)={@fda={0x66646185, 0x0, 0x1, 0x17}, @ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/249, 0xef, 0x2, 0xa}, @fda={0x66646185, 0x4, 0x2, 0xfffffffffffffff8}}, &(0x7f0000001b00)={0x0, 0x20, 0x48}}}, @request_death={0x400c630e, 0x2}, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x100000000000000}], 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x0, 0x7) socket$rds(0x15, 0x5, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, 0x0, &(0x7f0000000040)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) bind$rds(r6, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000040)) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="3d683ef12d57f5924a1251fda4b4ac14a11e5b186653d9b33e0d8a9b6913361dc2f89cf7d7733017d2886b273c51669fad41a72600979860f288b344bfaa5a55e0db824774474eb52e8dd66eff1f0b4c112794455bab46e1d6e9f534a5134f677ef78ac0bec08cb3a9c05a68f4f0d8a5ef1bba7cee6ff885b99ae8d18218c4b2b479227f4a5c3220dd6a5f3248b8c0ba1dd2ac5bf45f5ff6d04f8ed74a4b380f85e0a1ab9633ba2955401672211afdcd3d3f3b99b106a95c1815a4e810da9dc1a2f63f1f90e7abf29ea8cddb0097b84062aec0895f446cb230b7d119d0a76b3a6adb09e1e1ed4a1f1eba4dd13f3aa34f143e1177ef", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',version=9p2000,\x00']) preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x0, 0x2, 0x2) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='rfdno', &(0x7f0000000280)='rfdno', 0x0) r10 = syz_open_dev$dri(&(0x7f00000003c0), 0x80, 0x403) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) close(r0) 928.706441ms ago: executing program 3 (id=111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) close_range(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x50, r1, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9e1f50cc3c"}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 850.521637ms ago: executing program 3 (id=112): r0 = socket$kcm(0x2, 0x3, 0x2) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000016}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 790.576026ms ago: executing program 3 (id=113): clock_settime(0x17, &(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_emit_ethernet(0xf9, &(0x7f0000000f80)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "140080", 0xc3, 0x2f, 0xac10321ce7a890e4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@fragment={0x2c, 0x0, 0xa, 0x0, 0x0, 0x0, 0x65}, @hopopts={0x3a}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "2b0f287a76d2f86d967b77befec4578c05243ebe6e9a898cd02173a70e3f817e91fbe8c5e41d0187f0698d0d1230b310b1d51a6da79a0ffcbd6e62bdaa9beda747105852b0d84986635c8eb69fe80a81e04a2b265e6eb631a65c5000df2e700394cc8600c5016f24f3ab668024ec51"}, {0x8, 0x88be, 0x104, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x6, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x1, 0x9}, 0x2, {0x8, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="dc010000210000000400000000000000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000100)=[{0x2, '\x00', @data=0x401, 0x232}]}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x40500, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000540)={{[0x7, 0x6, 0x8, 0x8]}, 0x0, 0x1, 0xfffffffa, 0x0, &(0x7f00000003c0)=[{{@_ha_fsid={[0x0, 0xe]}, {0x2, 0x7ff, 0x3, 0x9}}, 0x7, 0x0, '}!!\x00'}, {{@_ha_fsid={[0x8, 0x26]}, {0x3, 0x4, 0x2, 0x5}}, 0x6, 0x0, '/dev/kvm\x00'}, {{@align, {0x7, 0xe7, 0x200, 0xffffffffffffff81}}, 0x1db2, 0x0, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@_ha_fsid={[0x5, 0x3]}, {0xf, 0x776f, 0xb, 0x44fb}}, 0x0, 0x0, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@_ha_fsid={[0xbbd1, 0x4]}, {0x69, 0x3, 0x0, 0x2}}, 0x2, 0x0, '-\x00'}, {{@align=0x120000, {0x6, 0x8, 0x1, 0x9}}, 0x5, 0x0, '/selinux/avc/hash_stats\x00'}, {{@align=0x1000, {0x2, 0x1, 0x3ff, 0x7}}, 0x40, 0x0, '\xff\xff\xff\xff\xff\xff'}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff033}]}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r2}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) 609.9461ms ago: executing program 0 (id=114): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = io_uring_setup(0x3bc, &(0x7f0000000100)={0x0, 0xa8a0, 0x2, 0x3, 0x345}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_enter(r1, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)=ANY=[@ANYBLOB="343600003a00290200000000fadbdf2502"], 0x3634}}, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="184b0c96f1983a") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2202"], 0xfdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x100000, 0xe}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 528.863917ms ago: executing program 0 (id=115): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0xb, "45f03bf6556634b225c02aaf72a3a614"}}}]}, 0x44}}, 0x4000010) 527.946327ms ago: executing program 3 (id=116): recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r3, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000d70a6897f2a300009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x402, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2d}, 0x90) 339.876132ms ago: executing program 2 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d84a56bd0d001c00180081064e32e82331734c368cc79100", 0x18}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e3, &(0x7f0000000180)={r5, r4}) write(r2, &(0x7f0000000340)='-veth0', 0x6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 335.701652ms ago: executing program 3 (id=118): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) (rerun: 64) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r1, @ANYBLOB="79a9"], 0x0) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)="de870f4c4533c41466f8e5a07ecfaab81936d1353f05080992b2c9f787fc3ab460ef8c21838746c8e060f61cbd366fcf1f9e2b30cc3c1481ddf9a62fcbaec85e85489093cb7c544fca6ee9e7cb14d1b5067fd35e8aaa3fab1256361712825f532399328aaf65d92f5632df291d76ef9811fceeab", 0x74, r0}, 0x68) (rerun: 64) r2 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000240)={0x1, "fe4bc2070c8230d64a620097e2e100001a424ec9a919621a41f878718cb22a406b87762a90ae10a800", {0xff, 0x9}}) r3 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) (async) syz_usb_connect$cdc_ecm(0x0, 0xef, &(0x7f0000000900)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x1, 0x1, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "9b11cc75"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7, 0xffff, 0x3}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x2, 0x2}, @mdlm_detail={0xa, 0x24, 0x13, 0xa, "645efab3ccac"}, @mdlm={0x15, 0x24, 0x12, 0x1}, @mdlm_detail={0x21, 0x24, 0x13, 0x2, "ecf327de6766820afbbd0b13658ea4868030cc92b7abb05aad92262932"}, @mdlm_detail={0x4d, 0x24, 0x13, 0x7, "379e6a1ed0418a4b782e2759e3641c2fa4514b02c76824dd0432c12c9092b8499d8dc74502f718bc63e6e81a0b2eaae3cc379f297f66f1bfce0c16bd6c5a41157bd1e28de2bae4eb6a"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7f, 0x40, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x1c, 0xf9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x8, 0x7}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x110, 0x7, 0xf, 0x7, 0x40}, 0x27, &(0x7f00000005c0)=ANY=[@ANYBLOB="052f27000303100b14100405fd11ec81798c0bdfc5da5824d1c005000b10010c98000703040000"], 0x5, [{0x30, &(0x7f0000000600)=@string={0x30, 0x3, "d6994c39789cec0442f5467006a9d1833c337942e24286824824669688012404c1c1fcd14e33ca9286f975bf6771"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1004}}, {0xcd, &(0x7f0000000480)=@string={0xcd, 0x3, "9044cca75656fe749935f4e9136a321c1465b83fe27b7caeeaba99fd9b85ea36634eb9f6ec34345294b5d39ba95637dc1edbb066453a664190a3f2d8d027f7d443296d35fee16cab977eb255fcac576d1e142537be2041d769ee362f586cfc46026dc885633001cb73374869ceba19f1b559bb73110f933a7f21db731e6840f5ae9a430afa1ba9e0c43033e30fb7810b71cab5ba20d5be4eb1390c6900abbac62d5f1198999aa78b1745424abfe0f31673e85a5b10f0b9427a16a65b147829bdc971d3affac9970c2d87af"}}, {0x8c, &(0x7f00000006c0)=ANY=[@ANYBLOB="8c03162738cbab2583e2720fa30dd811bf33eb195f17faeaf4731723367cb8c608e5c3ed8b736b46b59c575e5fe7ded4be5aa8bb574cba63d63074b190f1a70bf411c5fd7cf7cda2b413a435ed20fede471c0067da00e6939e400efff23459a5ca305b82b82a426bafa14eab48b8482d381431f214f1383ad8d00d5d8bf5aee2a8f2b520f02da398a96abb46"]}, {0xb8, &(0x7f0000000840)=@string={0xb8, 0x3, "11d825287561aa936476ae70bafd3c59c27365a85268f88e03c3d8673eb48a893bf308c3addb350d4590b81d1d47582df3d5d3471f4514f98c0763a879aac3e0880300000090e2a6d4e0163342537543aade72fbb9ed43d727ace568e746d8e1661f81c84ef81d0b3549d71d56b005858e77eea84e62fe995c82d22756749710b02a52bb5aea6372181bcdfa8853ac5d1754e88a55af506f7976c8e7f118307c6285a0abb36f091d4abf4a80e03bd47442943b456466"}}]}) r4 = gettid() rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() (async) r5 = syz_open_procfs$namespace(0x0, 0x0) (async, rerun: 32) r6 = gettid() (rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) sendfile(r5, r5, 0x0, 0x7fffffffffffffff) (async) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r7, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/161, 0xa1}], 0x1) (async, rerun: 64) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (rerun: 64) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async) write$proc_mixer(r3, &(0x7f0000000300)=[{'RADIO', @void}], 0x6) read$FUSE(r8, &(0x7f0000004500)={0x2020}, 0x2020) (async) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400000, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x4, 0x5, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x20004, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x6, 0x401, 0x9, 0x8, 0x5, 0x8, 0xa, 0x9, 0xffffffff, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) write$P9_RVERSION(r3, &(0x7f0000002200)=ANY=[], 0xfffffcd9) (async, rerun: 32) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (rerun: 32) 335.413648ms ago: executing program 2 (id=119): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x20002810) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 200.932126ms ago: executing program 0 (id=120): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) 130.867449ms ago: executing program 0 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000280)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffbfff, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x4, 0x83, @tick, {0xf9}, {}, @ext={0x0, 0x0}}, {0x6, 0x3, 0x9, 0xff, @time={0x9, 0x5}, {0x10, 0x5}, {0xc}, @control={0x3, 0xe, 0x7fff}}, {0x8, 0x3, 0xa, 0x4, @time={0x800003, 0x6}, {0xbd, 0x3}, {0xd}, @time=@tick=0x5}], 0x70) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000007, 0x13, r2, 0x80000000) (async) mkdir(&(0x7f0000000000)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./my_sysfs\x00', &(0x7f0000000080)='ocfs2\x00', 0x10084, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000240)=""/1, 0x1, 0x10) 129.707538ms ago: executing program 1 (id=122): r0 = socket$kcm(0x2, 0x3, 0x2) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0, 0x60}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 129.388118ms ago: executing program 1 (id=123): r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000740)={0x0, @tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x2}}}, @ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @hci={0x1f, 0x4}, 0x9ffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x8, 0x7195}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010041bd70e30000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000039000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES32=r9], 0x48}}, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb03f9001000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) 127.058707ms ago: executing program 2 (id=124): clock_settime(0x17, &(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_emit_ethernet(0xf9, &(0x7f0000000f80)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "140080", 0xc3, 0x2f, 0xac10321ce7a890e4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@fragment={0x2c, 0x0, 0xa, 0x0, 0x0, 0x0, 0x65}, @hopopts={0x3a}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "2b0f287a76d2f86d967b77befec4578c05243ebe6e9a898cd02173a70e3f817e91fbe8c5e41d0187f0698d0d1230b310b1d51a6da79a0ffcbd6e62bdaa9beda747105852b0d84986635c8eb69fe80a81e04a2b265e6eb631a65c5000df2e700394cc8600c5016f24f3ab668024ec51"}, {0x8, 0x88be, 0x104, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x6, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x1, 0x9}, 0x2, {0x8, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="dc010000210000000400000000000000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000100)=[{0x2, '\x00', @data=0x401, 0x232}]}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x40500, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000540)={{[0x7, 0x6, 0x8, 0x8]}, 0x0, 0x1, 0xfffffffa, 0x0, &(0x7f00000003c0)=[{{@_ha_fsid={[0x0, 0xe]}, {0x2, 0x7ff, 0x3, 0x9}}, 0x7, 0x0, '}!!\x00'}, {{@_ha_fsid={[0x8, 0x26]}, {0x3, 0x4, 0x2, 0x5}}, 0x6, 0x0, '/dev/kvm\x00'}, {{@align, {0x7, 0xe7, 0x200, 0xffffffffffffff81}}, 0x1db2, 0x0, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@_ha_fsid={[0x5, 0x3]}, {0xf, 0x776f, 0xb, 0x44fb}}, 0x0, 0x0, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@_ha_fsid={[0xbbd1, 0x4]}, {0x69, 0x3, 0x0, 0x2}}, 0x2, 0x0, '-\x00'}, {{@align=0x120000, {0x6, 0x8, 0x1, 0x9}}, 0x5, 0x0, '/selinux/avc/hash_stats\x00'}, {{@align=0x1000, {0x2, 0x1, 0x3ff, 0x7}}, 0x40, 0x0, '\xff\xff\xff\xff\xff\xff'}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff033}]}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r2}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) 61.369675ms ago: executing program 0 (id=125): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000000c0), 0xf221a5ef147f84e0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000240)={0x18, r3, 0x2, 0x0, &(0x7f0000000200)=[{0x0, 0x8001}, {0xfffffffffffffff9, 0x2}]}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x10b020, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0x5, r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14bab69c7ba18e5188bf3f294365393e898fdd7d1df67b2aac47b0d1fdd5138fc580ab4e67075a6a3159ab7b80d74d55bcbbe63d4c2aadada9da578e9467ea221035b71bfa71fcc010324a07e0caadc38fd7dbad89ed134059ad9db77b9c34a6b4156db2c4cc222d2eba43ae37ccf89e9dd019db50514585a5e0659e96758dbec3dcc40efc6544c81b4c6db0ce8e327975ecb7b45b57afd83cf4"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r6, @ANYRESDEC=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x40000, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x60000, 0x156) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close_range(r8, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) getdents64(r7, 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f00000002c0)={0xffffffffffffff79, r3}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280)=@int=0xa65, 0x4) 502.01µs ago: executing program 0 (id=126): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000140)=[{0x5, 0x3, 0xf8, 0x0, @time, {}, {0x0, 0x1}, @result={0x0, 0x125cbcea}}], 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r2, 0x71030000) write(r3, &(0x7f0000000340)='1', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x8000, 0x46) write(r4, &(0x7f0000000400)='./file0\n', 0x8) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1\n', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) 0s ago: executing program 1 (id=127): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0), 0x59) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r1, 0x12) sched_getaffinity(r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/sctp\x00') preadv(r2, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x40) write$binfmt_elf32(r3, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x4, 0x19, 0x82, 0x347, 0x408, 0x4, 0x20, 0x1, 0x25, 0x9, 0x200}, [{0x70000000, 0x3, 0x1, 0x2d, 0x7, 0x15e, 0x8001, 0x5}]}, 0x58) close(r3) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x8008af26, &(0x7f0000000000)={0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:52303' (ED25519) to the list of known hosts. [ 40.562016][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 40.562149][ T43] audit: type=1400 audit(1788488067.953:138): avc: denied { name_bind } for pid=5718 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.610492][ T43] audit: type=1400 audit(1788488068.003:139): avc: denied { execute } for pid=5719 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.611009][ T43] audit: type=1400 audit(1788488068.003:140): avc: denied { execute_no_trans } for pid=5719 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 43.184524][ T43] audit: type=1400 audit(1788488070.573:141): avc: denied { mounton } for pid=5719 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 43.197127][ T43] audit: type=1400 audit(1788488070.583:142): avc: denied { mount } for pid=5719 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.199333][ T5719] cgroup: Unknown subsys name 'net' [ 43.204999][ T43] audit: type=1400 audit(1788488070.593:143): avc: denied { unmount } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.403565][ T5719] cgroup: Unknown subsys name 'cpuset' [ 43.408087][ T5719] cgroup: Unknown subsys name 'rlimit' [ 43.572163][ T43] audit: type=1400 audit(1788488070.963:144): avc: denied { setattr } for pid=5719 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.573032][ T43] audit: type=1400 audit(1788488070.963:145): avc: denied { create } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.573349][ T43] audit: type=1400 audit(1788488070.963:146): avc: denied { write } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.573695][ T43] audit: type=1400 audit(1788488070.963:147): avc: denied { read } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.653389][ T5723] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.493795][ T5719] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.966267][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 48.966354][ T43] audit: type=1400 audit(1788488076.353:156): avc: denied { execmem } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.196734][ T43] audit: type=1400 audit(1788488076.583:157): avc: denied { create } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.196839][ T43] audit: type=1400 audit(1788488076.583:158): avc: denied { create } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.197219][ T43] audit: type=1400 audit(1788488076.583:159): avc: denied { read write } for pid=5731 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.197967][ T43] audit: type=1400 audit(1788488076.583:160): avc: denied { open } for pid=5731 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 49.216668][ T43] audit: type=1400 audit(1788488076.613:161): avc: denied { ioctl } for pid=5730 comm="syz-executor" path="socket:[6697]" dev="sockfs" ino=6697 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.250367][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 49.250542][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 49.253031][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 49.256224][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 49.257174][ T5738] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 49.257192][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 49.259116][ T5745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 49.259264][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 49.259492][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 49.260136][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 49.263382][ T5745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 49.263907][ T5745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 49.264364][ T5745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.265074][ T5738] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 49.265556][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 49.265948][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 49.267956][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 49.270607][ T5738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.275809][ T5088] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.276610][ T43] audit: type=1400 audit(1788488076.663:162): avc: denied { read } for pid=5741 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.276786][ T5088] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.276916][ T43] audit: type=1400 audit(1788488076.663:163): avc: denied { open } for pid=5741 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.278564][ T43] audit: type=1400 audit(1788488076.663:164): avc: denied { mounton } for pid=5741 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 49.296770][ T43] audit: type=1400 audit(1788488076.673:165): avc: denied { module_request } for pid=5741 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 50.014547][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.014654][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.017013][ T5731] bridge_slave_0: entered allmulticast mode [ 50.017929][ T5731] bridge_slave_0: entered promiscuous mode [ 50.038633][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.038794][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.038995][ T5741] bridge_slave_0: entered allmulticast mode [ 50.039911][ T5741] bridge_slave_0: entered promiscuous mode [ 50.041556][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.041597][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.041661][ T5741] bridge_slave_1: entered allmulticast mode [ 50.042774][ T5741] bridge_slave_1: entered promiscuous mode [ 50.044844][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.044957][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.045050][ T5731] bridge_slave_1: entered allmulticast mode [ 50.045839][ T5731] bridge_slave_1: entered promiscuous mode [ 50.087737][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.088888][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.088973][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.089106][ T5730] bridge_slave_0: entered allmulticast mode [ 50.091513][ T5730] bridge_slave_0: entered promiscuous mode [ 50.103577][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.105623][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.117245][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.117358][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.117587][ T5730] bridge_slave_1: entered allmulticast mode [ 50.118510][ T5730] bridge_slave_1: entered promiscuous mode [ 50.132465][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.166776][ T5731] team0: Port device team_slave_0 added [ 50.168391][ T5741] team0: Port device team_slave_0 added [ 50.169636][ T5731] team0: Port device team_slave_1 added [ 50.183829][ T5741] team0: Port device team_slave_1 added [ 50.195576][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.223027][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.224472][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.224485][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.224497][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.247391][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.247446][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.248145][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.260277][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.260295][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.260316][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.260756][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.260802][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.260872][ T5732] bridge_slave_0: entered allmulticast mode [ 50.261613][ T5732] bridge_slave_0: entered promiscuous mode [ 50.273090][ T5730] team0: Port device team_slave_0 added [ 50.280218][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.280233][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.280246][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.284884][ T5731] hsr_slave_0: entered promiscuous mode [ 50.285905][ T5731] hsr_slave_1: entered promiscuous mode [ 50.287691][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.287764][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.287885][ T5732] bridge_slave_1: entered allmulticast mode [ 50.289014][ T5732] bridge_slave_1: entered promiscuous mode [ 50.291995][ T5730] team0: Port device team_slave_1 added [ 50.348963][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.349018][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.349058][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.361527][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.377241][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.377327][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.377406][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.383986][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.390652][ T5741] hsr_slave_0: entered promiscuous mode [ 50.391100][ T5741] hsr_slave_1: entered promiscuous mode [ 50.391405][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 50.391491][ T5741] Cannot create hsr debugfs directory [ 50.436269][ T5732] team0: Port device team_slave_0 added [ 50.452363][ T5732] team0: Port device team_slave_1 added [ 50.486769][ T5730] hsr_slave_0: entered promiscuous mode [ 50.487343][ T5730] hsr_slave_1: entered promiscuous mode [ 50.487729][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 50.487742][ T5730] Cannot create hsr debugfs directory [ 50.497643][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.497725][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.497775][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.507616][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.507629][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.507644][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.626115][ T5732] hsr_slave_0: entered promiscuous mode [ 50.626782][ T5732] hsr_slave_1: entered promiscuous mode [ 50.627098][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 50.627112][ T5732] Cannot create hsr debugfs directory [ 50.688411][ T5731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.700265][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.701253][ T5731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.710569][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.750661][ T5731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.757380][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.779569][ T5731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.786516][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.898209][ T5741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.905434][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.906365][ T5741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.911543][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.935390][ T5741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.941605][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.962927][ T5741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.971537][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.018246][ T5730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.026417][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.027166][ T5730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.032783][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.042241][ T5730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.047750][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.050318][ T5730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.053537][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.137102][ T5732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.143334][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.149110][ T5732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.155938][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.156653][ T5732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.161376][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.164218][ T5732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.168859][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.192295][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.218444][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.253178][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.264796][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.264992][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.274684][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.285381][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.285577][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.287637][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.287705][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.310988][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.311126][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.350232][ T66] Bluetooth: hci1: command tx timeout [ 51.350258][ T5734] Bluetooth: hci0: command tx timeout [ 51.352187][ T5734] Bluetooth: hci2: command tx timeout [ 51.352190][ T5088] Bluetooth: hci3: command tx timeout [ 51.357469][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.398485][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.403543][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.403635][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.423119][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.423213][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.431757][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.449011][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.463307][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.464112][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.477472][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.477728][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.687275][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.714777][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.738288][ T5731] veth0_vlan: entered promiscuous mode [ 51.749764][ T5731] veth1_vlan: entered promiscuous mode [ 51.777507][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.793073][ T5731] veth0_macvtap: entered promiscuous mode [ 51.796301][ T5741] veth0_vlan: entered promiscuous mode [ 51.804517][ T5731] veth1_macvtap: entered promiscuous mode [ 51.806811][ T5741] veth1_vlan: entered promiscuous mode [ 51.826434][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.847128][ T5730] veth0_vlan: entered promiscuous mode [ 51.851106][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.859607][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.865097][ T5741] veth0_macvtap: entered promiscuous mode [ 51.870429][ T5730] veth1_vlan: entered promiscuous mode [ 51.879204][ T5741] veth1_macvtap: entered promiscuous mode [ 51.890946][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.936986][ T5730] veth0_macvtap: entered promiscuous mode [ 51.939610][ T5730] veth1_macvtap: entered promiscuous mode [ 51.944838][ T5732] veth0_vlan: entered promiscuous mode [ 51.948050][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.964845][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.971975][ T5732] veth1_vlan: entered promiscuous mode [ 51.989061][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.989121][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.999073][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.028893][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.041648][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.041709][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.058204][ T5732] veth0_macvtap: entered promiscuous mode [ 52.065097][ T5732] veth1_macvtap: entered promiscuous mode [ 52.071703][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.098928][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.125383][ T5731] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.134316][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.140326][ T294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.140368][ T294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.149864][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.188031][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.188074][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.246872][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.246915][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.289282][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.290083][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.311291][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.311420][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.315633][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.315657][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.360229][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.366710][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.366763][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.424017][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.424841][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.488235][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.497245][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.627348][ T5898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5898 comm=syz.2.5 [ 52.659591][ T5827] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.659866][ T5827] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.665895][ T5902] zonefs (loop1) ERROR: Not a zoned block device [ 52.670214][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.670580][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.670611][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.670639][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.670668][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.670697][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.670729][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.670757][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.693555][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 52.693569][ T5902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'. [ 52.693585][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 52.708822][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 52.709396][ T5902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'. [ 52.709415][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 52.710189][ T5902] Zero length message leads to an empty skb [ 52.770295][ T5827] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.770412][ T5827] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.770472][ T5827] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.770503][ T5827] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.802795][ T5909] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5909 comm=syz.0.1 [ 52.807388][ T5909] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=5909 comm=syz.0.1 [ 52.986455][ T5933] ieee802154 phy0 wpan0: encryption failed: -22 [ 53.021337][ T5929] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 53.083656][ T5940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5940 comm=syz.1.19 [ 53.084783][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20'. [ 53.113124][ T5947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'. [ 53.113192][ T5947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'. [ 53.125253][ T5947] geneve0: entered promiscuous mode [ 53.156032][ T5945] binder: 5942:5945 ioctl c0306201 200000000080 returned -14 [ 53.165215][ T5945] binder: 5942:5945 ioctl c0306201 2000000003c0 returned -14 [ 53.211728][ T5960] netlink: 36 bytes leftover after parsing attributes in process `syz.0.24'. [ 53.289303][ T5962] netlink: Only one type of NAT may be specified [ 53.293744][ T5962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 53.430909][ T5088] Bluetooth: hci0: command tx timeout [ 53.440707][ T5088] Bluetooth: hci2: command tx timeout [ 53.440790][ T5088] Bluetooth: hci1: command tx timeout [ 53.822129][ T5984] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 53.849812][ T1520] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.009474][ T1520] usb 8-1: Using ep0 maxpacket: 8 [ 54.014648][ T1520] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 54.023817][ T1520] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 54.035245][ T1520] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 54.035334][ T1520] usb 8-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 54.035371][ T1520] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 54.035409][ T1520] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 54.035446][ T1520] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.035502][ T1520] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.171352][ T43] kauditd_printk_skb: 99 callbacks suppressed [ 54.171483][ T43] audit: type=1400 audit(1788488081.553:265): avc: denied { mount } for pid=5988 comm="syz.0.33" name="/" dev="rpc_pipefs" ino=10136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 54.222908][ T43] audit: type=1400 audit(1788488081.613:266): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 54.246901][ T43] audit: type=1400 audit(1788488081.633:267): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 54.285140][ T43] audit: type=1400 audit(1788488081.673:268): avc: denied { bind } for pid=5993 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.285423][ T5734] Bluetooth: Wrong link type (-71) [ 54.286224][ T43] audit: type=1400 audit(1788488081.673:269): avc: denied { map } for pid=5993 comm="syz.0.35" path="/dev/comedi4" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.288399][ T1520] usb 8-1: GET_CAPABILITIES returned 0 [ 54.288441][ T1520] usbtmc 8-1:16.0: can't read capabilities [ 54.303841][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.303866][ T5992] syzkaller1: owner set to 805 [ 54.303935][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.303948][ T5992] syzkaller1: owner set to 805 [ 54.304011][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.304023][ T5992] syzkaller1: owner set to 805 [ 54.304083][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.304096][ T5992] syzkaller1: owner set to 805 [ 54.304156][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.304168][ T5992] syzkaller1: owner set to 805 [ 54.304232][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.304244][ T5992] syzkaller1: owner set to 805 [ 54.315710][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.315733][ T5992] syzkaller1: owner set to 805 [ 54.315839][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.315853][ T5992] syzkaller1: owner set to 805 [ 54.315908][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.315918][ T5992] syzkaller1: owner set to 805 [ 54.315961][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.315970][ T5992] syzkaller1: owner set to 805 [ 54.316014][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.316023][ T5992] syzkaller1: owner set to 805 [ 54.316071][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.316079][ T5992] syzkaller1: owner set to 805 [ 54.316123][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.316131][ T5992] syzkaller1: owner set to 805 [ 54.316182][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.316191][ T5992] syzkaller1: owner set to 805 [ 54.316239][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.316248][ T5992] syzkaller1: owner set to 805 [ 54.316292][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.316300][ T5992] syzkaller1: owner set to 805 [ 54.316342][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.316354][ T5992] syzkaller1: owner set to 805 [ 54.316406][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.316415][ T5992] syzkaller1: owner set to 805 [ 54.316477][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.316489][ T5992] syzkaller1: owner set to 805 [ 54.316565][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.316585][ T5992] syzkaller1: owner set to 805 [ 54.316657][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.316668][ T5992] syzkaller1: owner set to 805 [ 54.316763][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.316778][ T5992] syzkaller1: owner set to 805 [ 54.316854][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.316868][ T5992] syzkaller1: owner set to 805 [ 54.316950][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.316963][ T5992] syzkaller1: owner set to 805 [ 54.317037][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.317052][ T5992] syzkaller1: owner set to 805 [ 54.317127][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.317142][ T5992] syzkaller1: owner set to 805 [ 54.317216][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.317231][ T5992] syzkaller1: owner set to 805 [ 54.317305][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.317359][ T5992] syzkaller1: owner set to 805 [ 54.317446][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.317461][ T5992] syzkaller1: owner set to 805 [ 54.317537][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.317551][ T5992] syzkaller1: owner set to 805 [ 54.317628][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.317642][ T5992] syzkaller1: owner set to 805 [ 54.317718][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.317732][ T5992] syzkaller1: owner set to 805 [ 54.317807][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.317820][ T5992] syzkaller1: owner set to 805 [ 54.317883][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.317894][ T5992] syzkaller1: owner set to 805 [ 54.317958][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.317970][ T5992] syzkaller1: owner set to 805 [ 54.318030][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.318043][ T5992] syzkaller1: owner set to 805 [ 54.318105][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.318118][ T5992] syzkaller1: owner set to 805 [ 54.318180][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.318192][ T5992] syzkaller1: owner set to 805 [ 54.318257][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.318270][ T5992] syzkaller1: owner set to 805 [ 54.318330][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.318343][ T5992] syzkaller1: owner set to 805 [ 54.336266][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.336282][ T5992] syzkaller1: owner set to 805 [ 54.336351][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.336363][ T5992] syzkaller1: owner set to 805 [ 54.336434][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.336447][ T5992] syzkaller1: owner set to 805 [ 54.336513][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.336527][ T5992] syzkaller1: owner set to 805 [ 54.336581][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.336589][ T5992] syzkaller1: owner set to 805 [ 54.336628][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.336636][ T5992] syzkaller1: owner set to 805 [ 54.336701][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.336713][ T5992] syzkaller1: owner set to 805 [ 54.336797][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.336805][ T5992] syzkaller1: owner set to 805 [ 54.336846][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.336854][ T5992] syzkaller1: owner set to 805 [ 54.336899][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.336907][ T5992] syzkaller1: owner set to 805 [ 54.336946][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.336954][ T5992] syzkaller1: owner set to 805 [ 54.336992][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.337000][ T5992] syzkaller1: owner set to 805 [ 54.337039][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.337042][ T5998] netlink: Unknown nat attribute (0) [ 54.337047][ T5992] syzkaller1: owner set to 805 [ 54.337070][ T5998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 54.337086][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.337093][ T5992] syzkaller1: owner set to 805 [ 54.337133][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.337140][ T5992] syzkaller1: owner set to 805 [ 54.337178][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.337186][ T5992] syzkaller1: owner set to 805 [ 54.337226][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.337233][ T5992] syzkaller1: owner set to 805 [ 54.337272][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.337279][ T5992] syzkaller1: owner set to 805 [ 54.337318][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.337326][ T5992] syzkaller1: owner set to 805 [ 54.337364][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.337372][ T5992] syzkaller1: owner set to 805 [ 54.337418][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.337426][ T5992] syzkaller1: owner set to 805 [ 54.337465][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.337472][ T5992] syzkaller1: owner set to 805 [ 54.337511][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.337519][ T5992] syzkaller1: owner set to 805 [ 54.337557][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.337565][ T5992] syzkaller1: owner set to 805 [ 54.337605][ T5992] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 54.337612][ T5992] syzkaller1: owner set to 805 [ 54.363915][ T5998] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 54.368181][ T43] audit: type=1400 audit(1788488081.753:270): avc: denied { write } for pid=5993 comm="syz.0.35" name="/" dev="9p" ino=73414157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.369737][ T43] audit: type=1400 audit(1788488081.753:271): avc: denied { add_name } for pid=5993 comm="syz.0.35" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.369765][ T43] audit: type=1400 audit(1788488081.753:272): avc: denied { create } for pid=5993 comm="syz.0.35" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.369989][ T43] audit: type=1400 audit(1788488081.763:273): avc: denied { associate } for pid=5993 comm="syz.0.35" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 54.375819][ T43] audit: type=1400 audit(1788488081.763:274): avc: denied { read } for pid=5993 comm="syz.0.35" name="file1" dev="9p" ino=73414265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.493092][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 54.493504][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 54.493529][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 54.493548][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 54.493568][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 54.493587][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 54.493606][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 54.493626][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 54.493645][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 54.494038][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 54.494063][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 54.494084][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 54.494273][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 54.494294][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 54.494312][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 54.494329][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 54.502333][ T6002] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 54.508210][ T1520] usb 8-1: USB disconnect, device number 2 [ 54.537490][ T6005] bond1 (unregistering): Released all slaves [ 54.642331][ T6011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6011 comm=syz.0.38 [ 54.655766][ T6012] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96 [ 54.720507][ T5734] Bluetooth: hci3: command tx timeout [ 54.755195][ T1520] libceph: connect (1)[c::]:6789 error -101 [ 54.755477][ T1520] libceph: mon0 (1)[c::]:6789 connect error [ 54.782347][ T6021] No buffer was provided with the request [ 54.795623][ T6023] kernel read not supported for file /sg0 (pid: 6023 comm: syz.0.43) [ 54.849037][ T6027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=6027 comm=syz.0.46 [ 54.890143][ T6029] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 54.957218][ T1162] IPVS: starting estimator thread 0... [ 54.965283][ T6034] IPVS: fo: FWM 3 0x00000003 - no destination available [ 54.966332][ T6034] IPVS: fo: FWM 3 0x00000003 - no destination available [ 54.966648][ T6034] IPVS: fo: FWM 3 0x00000003 - no destination available [ 54.970528][ T6034] IPVS: fo: FWM 3 0x00000003 - no destination available [ 54.971592][ T6034] IPVS: fo: FWM 3 0x00000003 - no destination available [ 55.017617][ T1520] libceph: connect (1)[c::]:6789 error -101 [ 55.018271][ T1520] libceph: mon0 (1)[c::]:6789 connect error [ 55.069579][ T6042] IPVS: using max 44 ests per chain, 105600 per kthread [ 55.438421][ T6053] faux_driver vgem: [drm] Unknown color mode 11172; guessing buffer size. [ 55.509575][ T5734] Bluetooth: hci1: command tx timeout [ 55.509634][ T5734] Bluetooth: hci2: command tx timeout [ 55.509669][ T5734] Bluetooth: hci0: command tx timeout [ 55.521112][ T62] libceph: connect (1)[c::]:6789 error -101 [ 55.521270][ T62] libceph: mon0 (1)[c::]:6789 connect error [ 55.543851][ T6015] ceph: No mds server is up or the cluster is laggy [ 55.591224][ T1162] Bluetooth: (null): Too short H5 packet [ 55.604798][ T1162] Bluetooth: (null): Invalid header checksum [ 55.742415][ T6068] vxcan0: tx address claim with dest, not broadcast [ 55.872203][ T6079] nbd: device at index 64 is going down [ 55.961086][ T5740] udevd[5740]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 55.983848][ T6081] capability: warning: `syz.0.62' uses deprecated v2 capabilities in a way that may be insecure [ 55.997783][ T5739] udevd[5739]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 56.090344][ T6099] process 'syz.2.66' launched '/dev/fd/4' with NULL argv: empty string added [ 56.119136][ T6088] syz.0.62 uses obsolete (PF_INET,SOCK_PACKET) [ 56.170374][ T6103] Unsupported ieee802154 address type: 0 [ 56.215239][ T6107] ufs: ufs_fill_super(): bad magic number [ 56.228797][ T6111] macvlan2: entered promiscuous mode [ 56.250841][ T6109] macvlan3: entered promiscuous mode [ 56.277783][ T6114] bad cache= option: none_mlock 0 [ 56.277783][ T6114] nr_zspages 0 [ 56.277783][ T6114] nr_free_cma 0 [ 56.277783][ T6114] numa_hit 418031 [ 56.277783][ T6114] numa_miss 1 [ 56.277783][ T6114] numa_foreign 1 [ 56.277783][ T6114] numa_interleave 7159 [ 56.277783][ T6114] numa_local 413974 [ 56.277783][ T6114] numa_other 4058 [ 56.277783][ T6114] nr_inactive_anon 0 [ 56.277783][ T6114] nr_active_anon 8132 [ 56.277783][ T6114] nr_inactive_file 55051 [ 56.277783][ T6114] nr_active_file 0 [ 56.277783][ T6114] nr_unevictable 1000 [ 56.277783][ T6114] nr_slab_reclaimable 11641 [ 56.277783][ T6114] nr_slab_unreclaimable 64964 [ 56.277783][ T6114] nr_isolated_anon 0 [ 56.277783][ T6114] nr_isolated_file 0 [ 56.277783][ T6114] workingset_nodes 0 [ 56.277783][ T6114] workingset_refault_anon 0 [ 56.277783][ T6114] workingset_refault_file 0 [ 56.277783][ T6114] workingset_activate_anon 0 [ 56.277783][ T6114] workingset_activate_file 0 [ 56.277783][ T6114] workingset_restore_anon 0 [ 56.277783][ T6114] workingset_restore_file 0 [ 56.277783][ T6114] workingset_nodereclaim 0 [ 56.277783][ T6114] nr_anon_pages 7637 [ 56.277783][ T6114] nr_mapped 24525 [ 56.277783][ T6114] nr_file_pages 56618 [ 56.277783][ T6114] nr_dirty 1884 [ 56.277783][ T6114] nr_writeback 0 [ 56.277783][ T6114] nr_shmem 1571 [ 56.277783][ T6114] nr_shmem_hugepages 0 [ 56.277783][ T6114] nr_shmem_pmdmapped 0 [ 56.277783][ T6114] nr_file_hugepages 0 [ 56.277783][ T6114] nr_file_pmdmapped 0 [ 56.277783][ T6114] nr_anon_transparent_hugepages 0 [ 56.277783][ T6114] nr_vmscan_write 1 [ 56.277783][ T6114] nr_vmscan_immediate_reclaim 0 [ 56.277783][ T6114] nr_dirtied 1947 [ 56.277783][ T6114] nr_written 63 [ 56.277783][ T6114] nr_throttled_written 0 [ 56.277783][ T6114] nr_kernel_misc_reclaimable 0 [ 56.277783][ T6114] nr_foll_pin_acquired 3 [ 56.277783][ T6114] nr_foll_pin_released 3 [ 56.277783][ T6114] nr_vmalloc 87543 [ 56.278070][ T6114] CIFS: VFS: bad cache= option: none_mlock 0 [ 56.278070][ T6114] nr_zspages 0 [ 56.278070][ T6114] nr_free_cma 0 [ 56.278070][ T6114] numa_hit 418031 [ 56.278070][ T6114] numa_miss 1 [ 56.278070][ T6114] numa_foreign 1 [ 56.278070][ T6114] numa_interleave 7159 [ 56.278070][ T6114] numa_local 413974 [ 56.278070][ T6114] numa_other 4058 [ 56.278070][ T6114] nr_inactive_anon 0 [ 56.278070][ T6114] nr_active_anon 8132 [ 56.278070][ T6114] nr_inactive_file 55051 [ 56.278070][ T6114] nr_active_file 0 [ 56.278070][ T6114] nr_unevictable 1000 [ 56.278070][ T6114] nr_slab_reclaimable 11641 [ 56.278070][ T6114] nr_slab_unreclaimable 64964 [ 56.278070][ T6114] nr_isolated_anon 0 [ 56.278070][ T6114] nr_isolated_file 0 [ 56.278070][ T6114] workingset_nodes 0 [ 56.278070][ T6114] workingset_refault_anon 0 [ 56.278070][ T6114] workingset_refault_file 0 [ 56.278070][ T6114] workingset_activate_anon 0 [ 56.278070][ T6114] workingset_activate_file 0 [ 56.278070][ T6114] workingset_restore_anon 0 [ 56.278070][ T6114] workingset_restore_file 0 [ 56.278070][ T6114] workingset_nodereclaim 0 [ 56.278070][ T6114] nr_anon_pages 7637 [ 56.278070][ T6114] nr_mapped 24525 [ 56.278070][ T6114] nr_file_pages 56618 [ 56.278070][ T6114] nr_dirty 1884 [ 56.278070][ T6114] nr_writeback 0 [ 56.278070][ T6114] nr_shmem 1571 [ 56.278070][ T6114] nr_shmem_hugepages 0 [ 56.278070][ T6114] nr_shmem_pmdmapped 0 [ 56.278070][ T6114] nr_file_hugepages 0 [ 56.278070][ T6114] nr_file_pmdmapped 0 [ 56.278070][ T6114] nr_anon_transparent_hugepages 0 [ 56.278070][ T6114] nr_vmscan_write 1 [ 56.278070][ T6114] nr_vmscan_immediate_reclaim 0 [ 56.278070][ T6114] nr_dirtied 1947 [ 56.278070][ T6114] nr_written 63 [ 56.278070][ T6114] nr_throttled_written 0 [ 56.278070][ T6114] nr_kernel_misc_reclaimable 0 [ 56.278070][ T6114] nr_foll_pin_acquired 3 [ 56.278070][ T6114] nr_foll_pin_released 3 [ 56.278070][ T6114] nr_vmalloc 87543 [ 56.443280][ T6125] Bluetooth: MGMT ver 1.23 [ 56.645883][ T6135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=6135 comm=syz.2.77 [ 56.680061][ T1520] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.799750][ T5734] Bluetooth: hci3: command tx timeout [ 56.861379][ T1520] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 56.864531][ T1520] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 56.864590][ T1520] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.865646][ T1520] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 56.865662][ T1520] usb 6-1: Manufacturer: syz [ 56.873385][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802cf91c00: rx timeout, send abort [ 56.878207][ T1520] usb 6-1: config 0 descriptor?? [ 56.893394][ T6144] netlink: 'syz.2.79': attribute type 1 has an invalid length. [ 56.949556][ T1520] rc_core: IR keymap rc-hauppauge not found [ 56.949614][ T1520] Registered IR keymap rc-empty [ 56.959240][ T1520] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 56.963465][ T1520] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input5 [ 57.068917][ T6150] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 57.092492][ T6121] 9pnet_fd: p9_fd_create_unix (6121): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 57.097706][ T5101] usb 6-1: USB disconnect, device number 2 [ 57.373587][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802cf91c00: abort rx timeout. Force session deactivation [ 57.590195][ T5734] Bluetooth: hci0: command tx timeout [ 57.590238][ T5738] Bluetooth: hci1: command tx timeout [ 58.073973][ T6163] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.076109][ T6163] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.089285][ T6163] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.096074][ T6163] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.097434][ T6163] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.105959][ T6163] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.110328][ T6163] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.110791][ T6163] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.117655][ T6163] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.169043][ T6175] device-mapper: ioctl: only supply one of name or uuid, cmd(4) [ 58.313966][ T6180] kvm [6179]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 58.314943][ T6180] kvm [6179]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 58.472069][ T5088] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 58.663902][ T6200] macvtap1: entered allmulticast mode [ 58.664011][ T6200] bond0: entered allmulticast mode [ 58.664091][ T6200] bond_slave_0: entered allmulticast mode [ 58.664117][ T6200] bond_slave_1: entered allmulticast mode [ 58.666222][ T6200] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 58.671661][ T6200] bond0: left allmulticast mode [ 58.671732][ T6200] bond_slave_0: left allmulticast mode [ 58.671745][ T6200] bond_slave_1: left allmulticast mode [ 58.878329][ T6203] netlink: 'syz.1.96': attribute type 12 has an invalid length. [ 58.879604][ T2126] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 59.052095][ T2126] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 59.053098][ T2126] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 59.053115][ T2126] usb 5-1: config 0 has no interface number 0 [ 59.053132][ T2126] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 59.053143][ T2126] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 59.053156][ T2126] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 59.053167][ T2126] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 59.053179][ T2126] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 59.053191][ T2126] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 59.053210][ T2126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.054837][ T2126] usb 5-1: config 0 descriptor?? [ 59.055563][ T6197] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 59.055614][ T6197] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 59.063339][ T2126] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 59.262471][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.265598][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.266146][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.266328][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.269553][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.270233][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.271246][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.272682][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.273556][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.273817][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.293185][ T9] usb 5-1: USB disconnect, device number 2 [ 59.298375][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 59.350708][ T5734] Bluetooth: hci2: command 0x0c1a tx timeout [ 59.386012][ T6214] kvm [6213]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 59.387219][ T6214] kvm [6213]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 59.412481][ T43] kauditd_printk_skb: 116 callbacks suppressed [ 59.415479][ T43] audit: type=1400 audit(1788488086.803:391): avc: denied { connect } for pid=6216 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.456412][ T6219] sit0: entered promiscuous mode [ 59.460450][ T6219] netlink: 'syz.3.102': attribute type 1 has an invalid length. [ 59.460527][ T6219] __nla_validate_parse: 9 callbacks suppressed [ 59.460594][ T6219] netlink: 1 bytes leftover after parsing attributes in process `syz.3.102'. [ 59.554543][ T6223] netlink: 48 bytes leftover after parsing attributes in process `syz.3.104'. [ 59.663381][ T6230] lo speed is unknown, defaulting to 1000 [ 59.667165][ T6230] lo speed is unknown, defaulting to 1000 [ 59.668896][ T43] audit: type=1400 audit(1788488087.053:392): avc: denied { write } for pid=6231 comm="syz.3.107" name="rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.669918][ T5734] Bluetooth: hci0: command 0x0c1a tx timeout [ 59.678096][ T43] audit: type=1400 audit(1788488087.063:393): avc: denied { setopt } for pid=6231 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.681330][ T6230] lo speed is unknown, defaulting to 1000 [ 59.744806][ T43] audit: type=1804 audit(1788488087.133:394): pid=6240 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.108" name="/newroot/23/file0" dev="tmpfs" ino=143 res=1 errno=0 [ 59.762852][ T6242] netlink: 112 bytes leftover after parsing attributes in process `syz.2.106'. [ 59.807157][ T43] audit: type=1326 audit(1788488087.193:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.1.97" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0abf9e159 code=0x7fc00000 [ 59.807248][ T43] audit: type=1326 audit(1788488087.193:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.1.97" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fd0abf9e159 code=0x7fc00000 [ 59.807314][ T43] audit: type=1326 audit(1788488087.193:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6204 comm="syz.1.97" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0abf9e159 code=0x7fc00000 [ 59.826582][ T43] audit: type=1400 audit(1788488087.213:398): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 59.863051][ T6245] syzkaller0: entered promiscuous mode [ 59.863111][ T6245] syzkaller0: entered allmulticast mode [ 59.872670][ T43] audit: type=1400 audit(1788488087.263:399): avc: denied { write } for pid=6244 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.894345][ T43] audit: type=1400 audit(1788488087.283:400): avc: denied { ioctl } for pid=6244 comm="syz.0.109" path="socket:[11835]" dev="sockfs" ino=11835 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.943037][ T1359] lo speed is unknown, defaulting to 1000 [ 59.943242][ T6230] infiniband syz0: set active [ 59.943254][ T6230] infiniband syz0: added lo [ 59.955500][ T6230] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 59.955597][ T6230] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 59.955651][ T6230] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 59.987417][ T6230] RDS/IB: syz0: added [ 59.987712][ T6230] smc: adding ib device syz0 with port count 1 [ 59.987765][ T6230] smc: ib device syz0 port 1 has no pnetid [ 59.989009][ T1359] lo speed is unknown, defaulting to 1000 [ 60.001916][ T6230] lo speed is unknown, defaulting to 1000 [ 60.159675][ T5734] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.160379][ T6258] kvm [6257]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 60.161006][ T6258] kvm [6257]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 60.188723][ T6230] lo speed is unknown, defaulting to 1000 [ 60.283980][ T6230] lo speed is unknown, defaulting to 1000 [ 60.407318][ T6230] lo speed is unknown, defaulting to 1000 [ 60.507283][ T6265] virtio_blk virtio3: 1/0/0 default/read/poll queues [ 60.520585][ T6265] virtio_blk virtio3: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 60.826100][ T6292] xt_cluster: node mask cannot exceed total number of nodes [ 60.919750][ T6300] nvmet: adding nsid 1 to subsystem testsubsys [ 60.924993][ T6296] kvm [6295]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 60.929947][ T6296] kvm [6295]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 ** replaying previous printk message ** [ 60.929947][ T6296] kvm [6295]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 60.932939][ T6300] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 60.943724][ T6300] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 60.948094][ T6300] CPU: 0 UID: 0 PID: 6300 Comm: syz.0.126 Not tainted syzkaller #0 PREEMPT(full) [ 60.952423][ T6300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.957100][ T6300] RIP: 0010:strlen+0x1e/0xa0 [ 60.959511][ T6300] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 fd 53 48 c1 ea 03 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 50 80 7d 00 00 [ 60.967998][ T6300] RSP: 0018:ffffc90006907b48 EFLAGS: 00010296 [ 60.970794][ T6300] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90006079000 [ 60.974452][ T6300] RDX: 0000000000000000 RSI: ffffffff8296fd7e RDI: 0000000000000000 [ 60.978033][ T6300] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 60.981788][ T6300] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 60.985355][ T6300] R13: 0000000000000000 R14: ffff888036f93810 R15: ffff888058fbe800 [ 60.988881][ T6300] FS: 00007fdafbff66c0(0000) GS:ffff8880d5b61000(0000) knlGS:0000000000000000 [ 60.992935][ T6300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.995916][ T6300] CR2: 000000110c3868d4 CR3: 0000000035600000 CR4: 0000000000352ef0 [ 60.999538][ T6300] Call Trace: [ 61.001232][ T6300] [ 61.002558][ T6300] do_getname_kernel+0x26/0x250 [ 61.004760][ T6300] filp_open+0x1d/0x50 [ 61.006608][ T6300] nvmet_file_ns_enable+0x95/0x420 [ 61.009042][ T6300] nvmet_ns_enable+0x35f/0x5d0 [ 61.011526][ T6300] nvmet_ns_enable_store+0x11e/0x160 [ 61.014217][ T6300] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 61.016752][ T6300] ? configfs_write_iter+0x388/0x4e0 [ 61.019070][ T6300] configfs_write_iter+0x302/0x4e0 [ 61.021348][ T6300] vfs_write+0x6af/0x1050 [ 61.023257][ T6300] ? __pfx_configfs_write_iter+0x10/0x10 [ 61.026250][ T6300] ? __pfx_vfs_write+0x10/0x10 [ 61.028937][ T6300] ? find_held_lock+0x2b/0x80 [ 61.031252][ T6300] ksys_write+0x12a/0x250 [ 61.033345][ T6300] ? __pfx_ksys_write+0x10/0x10 [ 61.035552][ T6300] do_syscall_64+0x123/0x790 [ 61.037658][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.040270][ T6300] RIP: 0033:0x7fdafdd9e159 [ 61.042335][ T6300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.051022][ T6300] RSP: 002b:00007fdafbff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.054608][ T6300] RAX: ffffffffffffffda RBX: 00007fdafe025fa0 RCX: 00007fdafdd9e159 [ 61.058138][ T6300] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: 0000000000000005 [ 61.062387][ T6300] RBP: 00007fdafde35024 R08: 0000000000000000 R09: 0000000000000000 [ 61.065803][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.069305][ T6300] R13: 00007fdafe026038 R14: 00007fdafe025fa0 R15: 00007ffe225bd2e8 [ 61.073695][ T6300] [ 61.075164][ T6300] Modules linked in: [ 61.078054][ T6300] ---[ end trace 0000000000000000 ]--- [ ** replaying previous printk message ** [ 61.083878][ T6300] RIP: 0010:strlen+0x1e/0xa0 [ 61.083984][ T6300] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 fd 53 48 c1 ea 03 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 50 80 7d 00 00 [ 61.084053][ T6300] RSP: 0018:ffffc90006907b48 EFLAGS: 00010296 [ 61.084074][ T6300] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90006079000 [ 61.084086][ T6300] RDX: 0000000000000000 RSI: ffffffff8296fd7e RDI: 0000000000000000 [ 61.084099][ T6300] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 61.084109][ T6300] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 61.084118][ T6300] R13: 0000000000000000 R14: ffff888036f93810 R15: ffff888058fbe800 [ 61.084128][ T6300] FS: 00007fdafbff66c0(0000) GS:ffff8880d5b61000(0000) knlGS:0000000000000000 [ 61.084159][ T6300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.084173][ T6300] CR2: 000000110c3868d4 CR3: 0000000035600000 CR4: 0000000000352ef0 [ 61.084189][ T6300] Kernel panic - not syncing: Fatal exception [ 61.132164][ T6300] Kernel Offset: disabled [ 61.134225][ T6300] Rebooting in 86400 seconds..