last executing test programs: 1m56.421524561s ago: executing program 0 (id=1175): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) r2 = fsopen(&(0x7f00000001c0)='vxfs\x00', 0x1) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000000)={0x281, 0x2}) ftruncate(r5, 0x80796c) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0xf, 0x1}, 0x8, 0x40, &(0x7f00000000c0)="f3ed65b7ca1c935f10ef507cd953fbdd0e9803ead62bb15a63114a31791736eb644327c2b17b74b96e46dca78b8636f867", 0x31, 0x5, 0x80000000, 0x2e, 0x6, 0x1, &(0x7f0000000200)="35ee58362eb8e1e982a2474e18d1b000db0b7343ca1d59c0a40bc0ecf7eee625adce3cc803c78012ab5b8f577250248da43722ee3600f8f1fb7c1961e19e20aae01c950764f3b50a", [{0xffff67fe, 0x400, 0x5}, {0x9, 0x6, 0xc3e}, {0x6, 0x57bf, 0x9}, {0x80000000, 0x8}, {0xfffffffd, 0xff, 0x7}, {0xffff, 0x5, 0x2}, {0x7ff, 0x4, 0x1}, {0x4, 0x8, 0x7}, {0x4, 0x4}, {0x400, 0x7f, 0x8}, {0x1000, 0x9026137, 0x7ff}, {0x0, 0x1, 0xe0b}, {0x7, 0x6, 0x5}, {0x80000001, 0x9, 0x5}, {0x4, 0x8, 0x7}, {0x0, 0xb3}, {0xd3b3, 0x8, 0xbc}, {0x2d, 0x8, 0x9}, {0xffff0000, 0x3, 0x36ec}, {0x8, 0x4, 0xff}, {0x6, 0x401, 0x8}, {0x4, 0x8001, 0xcb}, {0x0, 0xc, 0xc37}, {0x2, 0x9}, {0x8, 0x7, 0x2}, {0xdf1, 0xbc, 0x4}, {0x6, 0x101, 0x7216}, {0x80000000, 0x200, 0x9}, {0x5, 0x400, 0x3d}, {0x8, 0x4, 0x4}, {0x800, 0x7fffffff, 0x410}, {0x5, 0x5, 0x6}, {0x8, 0x7, 0xd}, {0x2, 0x5, 0xa25}, {0x400, 0x7, 0x279d}, {0xf2, 0x8, 0x714}, {0x5, 0xffffffff, 0xc0000000}, {0xfffffff5, 0x4, 0x1}, {0x101, 0x101, 0x517}, {0x6, 0x6f, 0x3}, {0x7, 0x2, 0x400}, {0x0, 0x9, 0xc37}, {0x401, 0x2, 0x9}, {0x6, 0x0, 0x9}, {0x7, 0x8, 0x6}, {0xffff0000, 0x5, 0xe}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1m56.420039779s ago: executing program 0 (id=1177): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000e203000000020000000000000c0200000000005f00"], 0x0, 0x28}, 0x20) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYRESOCT=r0], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x306, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @empty}, {0x1}, 0x0, {0x2, 0x4e22, @empty}, 'lo\x00'}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d0200", 0x4}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4f1f27cf42783f9a}], 0x1, 0x40800) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x4, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m56.14414195s ago: executing program 0 (id=1184): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x1b) io_setup(0x251, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000140)={0x25, 0x0, 0x41, 0x8, 0x0, r0, 0x0, 0x0, 0x4000, 0x0, 0x0, r0}]) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x510, 0x0, 0x228, 0xffffffff, 0x2e8, 0x3d0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x7, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2f, @rand_addr=0x64010100, @empty, @gre_key=0x1, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "89ce", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x16, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@private1, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) setfsuid(0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './bus\x00'}) r4 = dup(r0) io_submit(r1, 0x7, &(0x7f0000000c80)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0xe1, r2, &(0x7f0000000180)="c6ebbbb95515acbe4487889c368a0b5f7a0ecbfaa4b8413a888a91a791d9434f56b8b0240ea67151ed0fd8fb6e0141e545f2eaef4b44364c27abc14a8f91eb64f61f9039acbc7c7993cff8267ef95d71dc306ac700b04d77899d7179e11b5e744c4158c711d5074bcfc0265248cf7c23475ebac88ffe2244f3b298ca11a3baea72eacdb9fa2c47ceff0c8fbf14aae5d57a318346824d3ad4ade3857ecf12a9380743f615dedb81cdd0c16583b0", 0xad, 0xfffffffffffffffd, 0x0, 0x3, r0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x75f4c1b5de087707, 0x1, r0, &(0x7f0000000240)="2158e9ab363e11af9c3905caec1307ced55732c0fe063d41f3c17651cd495dc55f3e30f75b9e0dc8409ebad5dad9495e4f275d1fa816386551f0d0f093e278f252566b2e362d7315ebbd6c2e46e5a8513f525323658a888fdccb0b98fb1b453489df06c4e2ab957ea3dd3de27e4bae26a8105d2071dfe0791e42c39ff70ea9f205378589f000afd412d92ccc996322deaf87fc46bb656992e0140593f31da64122cebbffedfc061ab5beeb4ecb95de61034d107a2c0cc92cc1793bfc13deb0d07beea3f163972778c8e70d7018fab090939c3b60b37344b344648cd10f8bb64ae4865b", 0xe3, 0xf, 0x0, 0x2, r0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000340)="6c66fb926dee20d3afa226a547efd134d92ab2d3fe2dd09decf539ae5f7ed26b9460dd7ece1db162df7c89ee0a4eae90d55e2353996478f0c6a76daa2ab73b27751328253dcd4e87a2979fe524daf3301e0ee3c39e688b9eb1bd8fea168b39d6f2a20c4e08f7c0b7eef4d4816a9d983f734eab0305b428fe", 0x78, 0x8, 0x0, 0x5, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000400)="e825fc46a26f9b35710d342a1054a4f15bb6059696f40d0270cda628b424922ace02fe4af1a614bf31c8b41a88bbd082b261b6c0ece992c339ea37394b877455f4e5a594c50b28f4cdc286030339f027f885fc250f3d53c49b0433e8a8f382c37f185fa982e5a865d8e0e30a1889e04ba22cfae48e591f6a", 0x78, 0x1, 0x0, 0x0, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x5, r2, &(0x7f00000004c0)="8177085f253832d9d6b195c113f8fa0a21ea9274c0bd5fafc3cc2c0a4caf27c0ec69136736f1ae4993e249ab3b52144d", 0x30, 0x2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000000580)="19", 0x1, 0x6, 0x0, 0x3, r0}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0xfffc, r4, &(0x7f0000000b80)="69b1da4af06e423b881d0af09475d3bafbfe34d9e4677d1e284f69b975a394feb6880c914605a72f61f51cf132c9e37a30b5b020a3708f6d012c4b9e4eece0d4b31643037748ee91f0f8844596871697be261e2a7b02d735689df6d6a0d0f000fbb7a62d5b37e7505027ea5fccca2ec02b58c8d44e6d81dc10d014fa2e4babe73eb1a343773179e1883ff882adf8b938b3118a937e937b4c8a26c3ef652832d5da597e1e", 0xa4, 0xe, 0x0, 0x2, r0}]) 1m55.989320901s ago: executing program 0 (id=1190): r0 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r1, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x4040000) 1m55.341020276s ago: executing program 0 (id=1200): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) 1m54.971435816s ago: executing program 0 (id=1202): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) lseek(r0, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x28) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000000)={0xb}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002100)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x30, r9, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r0) 1m54.864861066s ago: executing program 32 (id=1202): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) lseek(r0, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x28) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000000)={0xb}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002100)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x30, r9, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r0) 1m34.741156968s ago: executing program 3 (id=1543): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x6, 0x3, 0x0, 0x80, 'syz0\x00', 0x2008}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x6, 'syz0\x00', 0x0}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) write$6lowpan_control(r2, &(0x7f00000001c0)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 1m34.670401096s ago: executing program 3 (id=1544): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x2000, 0x101, 0x100}}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) writev(r3, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) ppoll(&(0x7f0000000240)=[{r3, 0x2}], 0x1, &(0x7f00000003c0), 0x0, 0x0) sendfile(r0, r0, 0x0, 0x3) 1m33.81103086s ago: executing program 3 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0xb, 0xffffffff, 0x1, 0x1d02, 0xa, 0x2, 0x102}, {0x1, 0x4, 0x7, 0xb, 0xcf41, 0x807, 0xffb}, {0x6, 0x7, 0x0, 0x2, 0x3, 0x2, 0xb}, {0x0, 0xfefd, 0x0, 0x3fb, 0x7ffffdff, 0x8005, 0x3}, {0x40000000, 0xfffff801, 0x3, 0x8, 0x3, 0x3, 0x404}, {0x80000019, 0xe5f, 0x1, 0x7, 0xdf1, 0x6, 0x3d}, {0x3, 0x1, 0x0, 0xfffffff7, 0xfffffffa, 0xff, 0x6}]}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000800)={'batadv_slave_1\x00', &(0x7f00000007c0)=@ethtool_wolinfo={0xa, 0x0, 0x0, "2d51305d39af"}}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2000000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0xfffffffffffffeba, 0x400, 0x0, {}, {0x0, 0x8, 0x0, 0x2}, 0x0, 0x1, {}, 0xd2}) (async) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0xfffffffffffffeba, 0x400, 0x0, {}, {0x0, 0x8, 0x0, 0x2}, 0x0, 0x1, {}, 0xd2}) io_uring_setup(0xd47, &(0x7f00000000c0)={0x0, 0x5f15, 0x8000, 0x1, 0x1ab}) syz_emit_ethernet(0xfdef, &(0x7f0000001180)=ANY=[@ANYBLOB="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"/3975], 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000001180)=ANY=[@ANYBLOB="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"/3975], 0x0) 1m33.727502816s ago: executing program 3 (id=1554): fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="c3", 0x1}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6004, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r2, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) (async) recvmmsg(r2, &(0x7f0000007f40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10002, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mount$overlay(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000002c0), 0x2000, &(0x7f0000000640)={[{@xino_auto}, {@nfs_export_on}, {@nfs_export_on}, {@default_permissions}, {@redirect_dir_follow}, {@redirect_dir_off}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@smackfsroot={'smackfsroot', 0x3d, '&*/'}}, {@seclabel}, {@smackfsdef}, {@pcr={'pcr', 0x3d, 0x3}}, {@dont_hash}, {@permit_directio}, {@audit}, {@subj_type={'subj_type', 0x3d, '/dev/kvm\x00'}}, {@subj_role={'subj_role', 0x3d, '(*'}}]}) (async) symlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000500)='./file0\x00') (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/14, 0xe, 0x0, &(0x7f0000000740)=""/226, 0xe2}, &(0x7f0000000400)=0x40) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000180)={0x140003, 0x0, {[0xfffffffffffff53d, 0x7, 0x6f, 0x8000000000000001, 0xd58b, 0x6, 0x3, 0x2]}}) setresuid(r3, r3, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 1m33.521163211s ago: executing program 3 (id=1558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000002c0)={0x0, 0x3, 0x4, 0x5}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xfffffffffffffffd, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x8000000000000000], 0x8080000}) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x60, 0x8, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}]}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x150, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x11c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xf54}]}}}, {0x48, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BITWISE_MASK={0x2c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x6}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x5e}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x48, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x2ac}, 0x1, 0x0, 0x0, 0x4008801}, 0x20000000) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000006"], 0x28}}, 0x8000) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r11, 0x4020aed2, &(0x7f0000000240)={0x80a0000, 0x1f000, 0x8}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'team0\x00', 0x4}, 0x18) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x40, 0x0) ioctl$SG_GET_TIMEOUT(r12, 0x2202, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) fsopen(&(0x7f0000000300)='omfs\x00', 0x0) 1m33.360104461s ago: executing program 3 (id=1562): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf25040000004000078008000100a40f00000c00040001000000000000000c00030002080000000000000c000400000c000080000000080001007400000008000100050000002c000580140002800800020004000000080001000100860014000280080002001000000008000100"], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0xcc00) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$sock_int(r0, 0x1, 0xe, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1m33.268149118s ago: executing program 33 (id=1562): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf25040000004000078008000100a40f00000c00040001000000000000000c00030002080000000000000c000400000c000080000000080001007400000008000100050000002c000580140002800800020004000000080001000100860014000280080002001000000008000100"], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0xcc00) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$sock_int(r0, 0x1, 0xe, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6.510219395s ago: executing program 5 (id=2594): keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000140)='\')\x00', 0x3) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0xfffffffffffffff3) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) prctl$PR_SET_MM(0x22, 0x0, &(0x7f0000000000/0x4000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x7, &(0x7f00000000c0)=[{0x8, 0x5, 0x0, 0x8}, {0x4, 0x5, 0x8, 0x7f}, {0xb, 0xe, 0x6, 0x4fed6079}, {0x200, 0x3, 0x8, 0x800}, {0xfffa, 0x5, 0x5, 0x1}, {0x2, 0x0, 0x6, 0x8}, {0xb68, 0xb, 0x2, 0x8}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r4, &(0x7f0000000180)='0\x00', 0x2) 5.610720673s ago: executing program 5 (id=2597): syz_emit_vhci(0x0, 0x16) mmap(&(0x7f0000186000/0x3000)=nil, 0x3000, 0x3000000, 0x10, 0xffffffffffffffff, 0xffffc000) mmap(&(0x7f00009cb000/0x1000)=nil, 0x1000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="b842068ec80f79c666b9800000c00f326635008000000f30658b9299ebf000bfaa80260fc731baf80c66efbafc0c66b8f5ee91dd66efbaf80c66b8c076cd8066efbafc0c66b80000000066ef0f22666466f30f09", 0x54}], 0x1, 0x41, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.598563302s ago: executing program 1 (id=2598): syz_emit_vhci(0x0, 0x16) mmap(&(0x7f0000186000/0x3000)=nil, 0x3000, 0x3000000, 0x10, 0xffffffffffffffff, 0xffffc000) mmap(&(0x7f00009cb000/0x1000)=nil, 0x1000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="b842068ec80f79c666b9800000c00f326635008000000f30658b9299ebf000bfaa80260fc731baf80c66efbafc0c66b8f5ee91dd66efbaf80c66b8c076cd8066efbafc0c66b80000000066ef0f22666466f30f09", 0x54}], 0x1, 0x41, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 3.521734635s ago: executing program 5 (id=2613): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000006c0)='htcp', 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x20004060) sendmsg$NFT_MSG_GETFLOWTABLE(r2, 0x0, 0x4040) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1004000, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f61632c2c00cb15a2f370b9b367e2f8d0eb0369e84ce87d3841839b7a70670b307ee16c6fcf20577a9217f5cab916ba426f8d4eb26e0da27db35fa84e1d473a6fcc411393a9083c6818ee46e001b23fec50a7b8d536fa96dd0494121bf7c2265f781bbfc87a133d4b0f8f839617d25bbbca3482e7388ac4fd03241f3c38435c98d4ac2f6fc140ffe79171b440169d580d8930c2c4bf2427a9a6a351a487101f2b96"]) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="8233", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b60, 0x0, 0xfffffffffffffdfd) 3.240681927s ago: executing program 1 (id=2614): unshare(0x8000280) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000040)={&(0x7f0000000000)="decd0da222f8d4f184d2e01ee91257f9ee5805edc41ceebec3e788062759a3b20a811578ad", 0x25}) ioctl$EXT4_IOC_MIGRATE(r1, 0xff07) 3.240242603s ago: executing program 1 (id=2615): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ext3\x00', 0x12c0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x22) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x0, 0x4, 0x0, 0x4, 0x0, [{0x1, 0x64, 0x7, '\x00', 0x1}, {0x40, 0x9, 0x40, '\x00', 0x86}, {0x9a, 0x1, 0x5, '\x00', 0x3}, {0xab, 0x0, 0x4, '\x00', 0xfb}, {0x6, 0x2, 0xe4, '\x00', 0x10}, {0x24, 0x40, 0xb1, '\x00', 0x6}, {0x6, 0x8f, 0x60, '\x00', 0x6}, {0x7, 0xf9, 0xc, '\x00', 0x6}, {0x80, 0xb, 0xb, '\x00', 0x3}, {0x5d, 0x9, 0x40}, {0x8, 0x2e, 0x3, '\x00', 0x2}, {0x4, 0x5, 0x1, '\x00', 0x67}, {0x6, 0x4, 0x0, '\x00', 0x3}, {0x8, 0x7, 0x7f, '\x00', 0x6}, {0x0, 0x5, 0x6, '\x00', 0x2}, {0x1, 0x3, 0x8, '\x00', 0xf}, {0x55, 0x40, 0x4, '\x00', 0x3e}, {0x2, 0x0, 0x0, '\x00', 0x5}, {0x57, 0xd, 0x4, '\x00', 0x8}, {0x3, 0x1, 0xeb, '\x00', 0x26}, {0x8, 0xf, 0x50, '\x00', 0xf}, {0x7f, 0x62, 0x6, '\x00', 0x2}, {0xf, 0xc, 0x0, '\x00', 0x1}, {0x1, 0x1, 0x8, '\x00', 0x4}]}}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000100)=0xfefffff9, 0x4) getdents64(r1, 0x0, 0x0) 3.150631965s ago: executing program 1 (id=2616): socket$isdn_base(0x22, 0x3, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x101000) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000140)={0x0, "cc8f07e27bfd847bae3821b60174201abce2dfcb1d7cb7d7072316ffeacec185", 0x3, 0x0, 0x1, 0xc00000, 0x20002, 0x8}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00b500000000000000000002004000fc80c8090000000005001b"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x40000) 2.260454348s ago: executing program 5 (id=2622): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) (rerun: 64) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 32) r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x8, 0x2) (rerun: 32) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000600)}, {&(0x7f0000000380)='#', 0x1}], 0x2) (async, rerun: 32) ioctl$TCFLSH(r4, 0x804c4700, 0xfffffffffffffffe) (async, rerun: 32) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/136, 0x88}], 0x1, 0xfc, 0x1) (async) r6 = syz_pidfd_open(r2, 0x0) setns(r6, 0x24020000) (async) syz_clone(0xfdba2180, 0x0, 0x106, 0x0, 0x0, 0x0) 2.226229043s ago: executing program 5 (id=2623): syz_emit_vhci(0x0, 0x16) mmap(&(0x7f0000186000/0x3000)=nil, 0x3000, 0x3000000, 0x10, 0xffffffffffffffff, 0xffffc000) mmap(&(0x7f00009cb000/0x1000)=nil, 0x1000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="b842068ec80f79c666b9800000c00f326635008000000f30658b9299ebf000bfaa80260fc731baf80c66efbafc0c66b8f5ee91dd66efbaf80c66b8c076cd8066efbafc0c66b80000000066ef0f22666466f30f09", 0x54}], 0x1, 0x41, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4) 1.272027914s ago: executing program 2 (id=2625): modify_ldt$write2(0x11, &(0x7f0000000100)={0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x10) (async) modify_ldt$write2(0x11, &(0x7f0000000100)={0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x801) (async) r0 = userfaultfd(0x801) getpid() (async) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f000070a000/0x2000)=nil, 0x2000, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6(0xa, 0x3, 0x8000000003c) (async) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r2], 0x1) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip_vti0\x00'}) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0x4}}]}}) 961.981056ms ago: executing program 2 (id=2626): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = inotify_init() syz_open_dev$char_usb(0xc, 0xb4, 0x100000001) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cbc-des3_ede-asm)\x00'}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000002c00070100000000fddbdf25017c000008000180020000001c000280180001"], 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0xc010) 886.296093ms ago: executing program 2 (id=2627): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x48885) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00'}, 0x18) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00'}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=0x1, 0x2f, 0x0, 0xfffffff8, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0}, 0x40) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) (async) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYRES16=r4, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48881) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r3, r0, 0x25, 0x0, r1, @void, @value=r5, @void, @void, r2}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) 800.800009ms ago: executing program 2 (id=2628): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0x2b, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, 0x0) 800.53952ms ago: executing program 2 (id=2629): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000016000000450000002500000019000400480000000d00000000000006040000000000f93132", 0x39}], 0x1) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x800) 730.617379ms ago: executing program 2 (id=2630): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000006c0)='htcp', 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x20004060) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1004000, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f61632c2c00cb15a2f370b9b367e2f8d0eb0369e84ce87d3841839b7a70670b307ee16c6fcf20577a9217f5cab916ba426f8d4eb26e0da27db35fa84e1d473a6fcc411393a9083c6818ee46e001b23fec50a7b8d536fa96dd0494121bf7c2265f781bbfc87a133d4b0f8f839617d25bbbca3482e7388ac4fd03241f3c38435c98d4ac2f6fc140ffe79171b440169d580d8930c2c4bf2427a9a6a351a487101f2b96"]) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="8233", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b60, 0x0, 0xfffffffffffffdfd) 424.317628ms ago: executing program 4 (id=2632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000000500010006000000050005000000007423c80c363f3506d80e0005000400000000000c00078005001500000000000d000300686173683a6d616300000000"], 0x54}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = dup2(r0, r1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) (async) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6, 0x1000) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f00000015c0)="e3deb5aaae5d1bc03d8b0e2ffdfe9c53c224e9ca394ad29cd20a80947eb874008ea49776fec99cbf31fe36d50eb144da35bc8442d8f8fc0a8bd3b763c07ffcb4efdf60293bf5fcf33d785a0bfd9489e94116f70474c97733f479ebe1e7e9bf125e324733c075224a491b3784be527d8c43fd8dc21561c200d785ba606198afaa3ffa3b011653f0897dca9c4ba01e50631b55b0f8af7c388cb89ba56cecce918b83baef13f5c6df94318d8cfaf02d071c4ebcbfd831ceb60e86043b9012b39f21921ef5a8a4df2f5fae467af8d5493d2236ac6020e0dddb1246136d31c89cfc27b4fbbcd515f436d76565129bc8889d15b867e7c90a18579b86c0196a7f862d405ea126cd6668f828f09d1bcf8071b125b37ff50ad46623c6328c2107c2bdd2a59a03dc8e44d0d6371c91d8ee16be887e58cabab3084084e8f8b66ab6733233f6c6a635e3fa8d2d50d6d1c867fb54f6110cc6bfe304826781f344250b4e6b57fcf235695eaa4af92bac9cb5df896d6dcd663ec844ec4c017676841e8992e75f54b7be8ff2f9051f8002f5e25e1ea668ecaaa059a1d30037178761379c03507234e0650d67d6f75ab5072896ad914b4686f5aeb1a56584efbc00725b1a7fc8e706df5ddd126a9522fc4bc7721dd7ce0a99836bf85694519ddf7b149b0e36f01f6e0f877d955dd788464a78dd7286946aafb371bfd1a243752e47a6c8c1a0c3fe0ac640d1ccf6ff116d66368ae96e46a54bc55d2644defb27114a037d72ad5f9e771726a3b67a55d10c7b07c89c6e54d257c9df07d30e754b1ccb7b85f72edcaf4190c29b6bdaf3afd8096dd20c03030f2b96f2198a94b745ab0880fba9b4b1b6daf0c1716e412042a50c02732309eabe1921dc00a2a87de7cb352c303497fe6dfb71feb4c70d880c3275ad5a2d3ad7c194113c0068eaf50faa53ba59a3de1b5a57cb0ac99496d0f47590e16c35308c3ab34ad86a82314d2b4f2ff20a7e96505da5b83de1711a88cf38d738f61a6dfc542a036c20f3742d95f9820627d4b587794a93bf6d0eaa84db1aaa17603c2d86533bc3bf802d11956340e1f0e5ca411820ed6aa285b59882d7a6bbd4a0b8eea7e04cc78518039aad0e9871a1c79c9c0d683869ba05cb230e5bd657c4fb53bbea81d5237846839455681720e83891396b7c865286b51dc7444db082de164e80cbf268a9788ba583318f369923d7529331446dcdbcbf80f38de03548234f7b1a65d7695ae5cc45d465e775312d0936e0dc90581dfd6a45727fb4035c0d1a46f31f7dc6c62cb2bd07917105e9e064ce606ecd883a4620fbf61746e67c1b2155f8d52c671e8beece17fe51e7bab5ecbba087892de9b33714cc2a78d7ece5d193eb041ec4e38082cdbe1cff46bdf6c18902cc510ce9935e19f993ad98ef6464467a1d7423ebec60410fe19c627ce2b3638c9fbb34a0d02756256c4b6b69789d7716889e159c1b47eb3a873fd81917ee1f80d6adbfaaa4988398bcaa5a5fe4be9e6ba7a7eca36211991dc1edd6ebf2d33244db59905da10da45b1c9bb28ffe5bbf25a31a2ff8125757603d7395564a9fb7127ed5b8a97b4482a5959ef56c230c4598387c0acaf3019e7b1a9e2b38c696fcdbb9dcef90fd9b469ba671627dfaca788bb2345a3825d178bbbe9c7f7fe2054823a3600d8961978cb0b76a7a72bbed67d16f99647b53d1b4b33bc24e6677c5d506aeb01c2990f930ef5aa35eea2ed8f6a65fa1aa09e956e091b3f6ae041c196892590090c398479056ca4e75f31823fc60c3606249e9fc480e093e015349084261d475402eb481f71103572c44e917e4efc653060d0b5258a450bc7a5d73f634c7732d56537d8c627309c0161110325b1cd501b12bca980db12eb62c6087b87426e4f23bab1070bb1ef8db98ee4c2e00b997171c50ddce1f3abf5c7da275c99dd7459185d27dc8f0da38e42f6af7038e5ef2cb9c3ec27edf30b32d109633c0a9530170e6c4d0bf25acd6f1f5f0341a52e75d8f0068d6802f9b03bd914ab58c04e4083987e0ee4299bd086e", 0x5a7, 0x20008120, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000002c0)={0x1, 0x7, 0x2, {0x1, @pix_mp={0x2, 0x5, 0x38303553, 0x6, 0xa, [{0x100, 0xa}, {0x101, 0x3}, {0xb, 0x373}, {0xa2, 0xfffff0f2}, {0x7, 0xfffffcc1}, {0x5, 0xffdf}, {0xc7bf}, {0x26, 0x8}], 0x8, 0xa9, 0x1, 0x1, 0x1}}, 0x706f}) 423.77009ms ago: executing program 4 (id=2633): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000090601080000000000000000070000030900022273797a310000000005000100070000002c0007801800018014000240fe80000000000000000000000000075e00000084f9143256b6b7ae5624b11f9724aace1b269ab0f5841cec35aa534ef62f57c082485f6f65da6e66256c282587fc19704a91247ca8c2339bbb9a40cf63823184940003b46069531a56b70865599b53ab8107f58ba270c618acbb19d6b626daf43f96b6ce3d6c56fb2ed8e9131a6e7aad1d0fcb0ab1e1be9a3682d086fc"], 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x80000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 270.210984ms ago: executing program 4 (id=2634): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{}, {0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000140)={r1, &(0x7f00000000c0)=""/83}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000180)=""/6) r2 = syz_open_dev$vcsn(&(0x7f0000000200), 0xb, 0x20a80) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f00000001c0)='./file0\x00', r2, 0x4000, r0}, 0x18) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000280)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001800)={'gretap0\x00', &(0x7f00000017c0)={'sit0\x00', 0x0, 0x7ce0, 0x20, 0x5, 0x8, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x67, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000003c80)={'syztnl1\x00', &(0x7f0000003bc0)={'syztnl0\x00', 0x0, 0x700, 0x700, 0x5, 0x0, {{0x1a, 0x4, 0x1, 0x2f, 0x68, 0x66, 0x0, 0x6, 0x4, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0x24, 0x60, 0x1, 0x6, [{@multicast2, 0x6}, {@multicast2}, {@local, 0xc}, {@local, 0x3}]}, @lsrr={0x83, 0xf, 0x15, [@loopback, @remote, @broadcast]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x1b, [@empty, @local, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1]}, @end]}}}}}) sendmmsg(0xffffffffffffffff, &(0x7f00000053c0)=[{{&(0x7f00000002c0)=@can, 0x80, &(0x7f0000001640)=[{&(0x7f0000000340)="7d8007561964b8d459dc0ae0ceb71e59a249c5fbbe84d796024bd15dcaef9566fee5dc02236006c7179aa4e7d39718ea01be83df98fe00882b185c308b053a5be4761ade5d9aa02993564a6ed9f45d15f78aa40f83427c01d14e5fef6afefe70aef37616746cbae557db844b69ed69d5d9fc3312fdcd7d56f19e5e8e0ab63d63a1382e383a7f242746c23a16352593d2a41011d310a1369ea7b25bda0fa6ec0896bdfe53ff1036fae53a729569e1327604d1424184b5251e435efe2b51b6f18e4529b7c00e04dedfe2e1b5e531433d13d684ea20d4f13b2a9284fdd80e66bd969476", 0xe2}, {&(0x7f0000000440)="4346109bd2e09d56574b5fe4432abe846058db35245388e456d7ff4d170102e798668111f34dfe39099c2a52e4f9e670b44067e3287682cd8dec9f13c74f5508eacf0dfa12e3952b47bbfcc0d09e3cb07142f1be93fb579e8966da7e9a53e193ad256e6cfd0e3c05008d1f7f97be124a1ece9d32e9fe02a5989722aa3324235ce8817af58196c6e8f18743f7ce2125885338b71c8328130f1adf49f064b5d51a0f0bb324d1acfa5df00d407282", 0xad}, {&(0x7f0000000500)="e2644bcfb7a4535422dcdaa384b7c065508fce77c062c3ace5a98c3132499efae92a978a5cd2b441c3de34bcaf939c187594068d3b", 0x35}, {&(0x7f0000000540)="0ca9f77ec7e6fbb7ac4582c3ed0153cc8d829e5b5e828205c5607233ae095adb2cf272cbac39937875a6df1308bf4ae27bded40271d9c7b260f3ab66a3c12467c4639405e393dbe10699cd9b980713d8155fb804b277dd4b2558c022687ea7920df8cac517489d8696df7b4ea4dbe141c8671cde1d478f5977c999e203eb542e5207437a0346634bfa104fe3226dd5de26e30a9f86eed77602f228793cc9cdbac3f2396b702ee2a7337e83c5c6de60b57d578529d4d144868e1b5051c06bfbaa2705e10874444ed41b9737cb80023800984bf2b68c612188d60bf7a11a257d48b237d36548933b03e252611cd6afccc2aa55587fa848", 0xf6}, {&(0x7f0000000640)="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", 0x1000}], 0x5, &(0x7f00000016c0)=[{0x48, 0x88, 0x40000, "1dfcb4c4b91f7d503f8b31ce04c76e457639dae7c2bc73cf7cb2e8dcdd5fe821132307d57f111bea5e90a22a12b5f2d29c202c"}, {0xb0, 0x116, 0x6, "37cc85df0c388a1f29053b0ddcc8f309869f70d24b7837eadd93407521b21a201978f34a113419c0d8bcf4af970fd04100df11c488b6fa4a7adde9a45271c11880e6c74938231c90919ee9c901fb5d993cc75b56e3649bcdfc4513bd7f352f958bd337fb334bc5baf8f91f49d8d3795ad6062fa5dc1fad9e05f004ba44da6a7da9c78a6a0282a4893e7d60eca4c6859fc266a986c8044aef7265"}], 0xf8}}, {{&(0x7f0000001840)=@xdp={0x2c, 0x4, r3, 0x22}, 0x80, &(0x7f0000001d80)=[{&(0x7f00000018c0)="cd6d26b64083b21a25bdb3b3d0aceddc1a90fd7ba9eafbc9c17545101e0b84e0a0be7aa0b908a935460359b7820ecee562a1b4dd7d62db12e0ca00ef9db4bb849789324292ba40809f213903be2e4a7619da0f703a45399ff658d5d66a509952cd05768554cf27f9cb447a607743dbaa928c7f351b801e8538e47122d8500360614924fd3c9e171e9792219b4307965a16288ae964f1255ef8f224c1273719d72090c3859816f47355fc5ca0", 0xac}, {&(0x7f0000001980)="25b242202b5f0e760fee74b7ad382fe16d139dfb9e30423a2dbe9e7b4b8d576986716545d9b1d95f58828bf82e902cb195c3c9ec4333bc12dcbbc183d07322cf61fa139b47beff57d7150b6d7d87d321e2d02ea902eecb20f3a6bff07e4d9ad7ab5fb54a031529a5c63e2d9232c4ec964b6dbcbb10309cbd98e9ed2bea554fb9014468c714d7868d8941", 0x8a}, {&(0x7f0000001a40)="e0874adbc22a94bd641cd2ad5e5801eacc30f430a649a4525b0aae8b91d43afadb7b23fa0d28aa51701957fd27ad53205148393da43fc78f063a967132ee600bf1162da5ac8de91872e2db74689d7f3f1e1d63c0e09778b9890fd61251e258db943c27df32eaa1e5c06a21ca3b189fc2c6173bd31cfbfa402e", 0x79}, {&(0x7f0000001ac0)="76d8a1e6df0e8277ca79c7c0edc6b7fcd8f2bfa61f9e23b7a63ec76ab18c1b75127ce5a1bb9448bcfc4259619d6fda47b472828d5c3c69dc2265bdce704ac662bc21be4deba3d19448b820702c5aa4337a0b247600469eeb544834801c61", 0x5e}, {&(0x7f0000001b40)="44c759aa34f817c6e6e0ccfde553a5a18b063bf4dabbe594ef4d41841f158d369454a2cdc33b9e584db79f39919fe43105e7e54983cc46b6c051f198e289b8b519e928f2fbddc29eccffe4d60e25d44844870ba6c9573d8b0ba3543c6be218736dbd712cd528dafc1fdf8097af70dd748ca5e219bffc8f46606b677a4df5bc3f688d1df3d9a2fa4a12d90b74ca9075338be5170adfb340ba415adc2bf909172311ee0a13606909d992814f1056596ca3f138192abab9140349aee340", 0xbc}, {&(0x7f0000001c00)="e1491597f623fe8500ca3c0308c8abb208331829a851ee5ee5862cbd53c3ced239d933aac576148a6de6eb56e464bd1b5e19c14f6e76c883d669e3807fa26a93a832b85da6e1b3b1884fe764c2568e3f05379054b013ba697c0bbf91a65c3dd53099b99668a6707fae813280fe96fcd14fb964c7c49c2435b1f495759e9068b4f09f826eb86a659c7560c33fbcb8d53077a59836c3caa63c77e8d0150e7bd46301db774cf73d14c5f9461bd4f1f904cc059f5713c0e5d66c42c334b6072539b15d03058669649bbebada1dd0844dfa541441525a4de80a4843ee6434152356214a6e85c1922dd9c1686593cbf582f731", 0xf0}, {&(0x7f0000001d00)="3f524c9d0e48a022878aa7c78c5a03fc2a30575f65a2ed6121c51c80b48e618933b55ae3df1c7984c513dedafc95610ead", 0x31}, {&(0x7f0000001d40)="2048876bec27748e0aead99cf9c1014a3086672719b685c334f40000a05df0ed93fc9e2ad047369f428667d8d7fbca995a", 0x31}], 0x8, &(0x7f0000001e00)=[{0xe0, 0x10f, 0x7fff, "b7acd56d5d0180a4f147b32716d3d18393e56c4fa2cbc4f9b9f30e064f6b95306deed265c1d043c4e3bf151683b55755bae5a9e1dfa13d1f91743fff426bbbe16c2357b5cdfa612076ef08166b27b323a9b44787a0f407873a605a4125d6fc832fbafa626d48a70a6bb644e84e0a36ab527f0bcbb5b20d05b06efd6945552aaaa91543d33b423af79e66d27a2b8aea6b64cc0cb9cf36d89a6b9f82e75d147a27992d2721b937fa843c1800e616ea2ce6a5c50d54dc6ebbd8bf1c1b7e7d0d58542ef1f684f990a3540e877a78198c19"}, {0x30, 0xb41688eba985c29f, 0x7000, "d9e3af5a2b0a23c307b737700ff266252c1a2a5b1605f0dcab816b"}, {0xb0, 0x10d, 0x81, "242c53c2609d91d5d4d414819ed757b43dd992c120d053ddcb7b5dec8ce75cf079d0c2340689e058d3b45d75c6341906d6d153e4643ad76c157872bc656909de0acc0ea4352f7c25c90494b05526245d78e3e95b2a3736510fa89f7f129733d22be6c78636f0d8d7f3c52206c2fb323423507001feb15bfa0a39b2a1b970d220b3424b886d883e7d5506342c0ffb672292e559e1b6179ef97a"}, {0xc0, 0x0, 0x3, "e8e0abc93aa59f0af695a842ebe7695d62de28df71ace13f1d86507a85eba07fe2ded829690fed006f76cc6518a1981c562a9a1ce6c59f7d0d3c0b4766db7850f56e5819dd6251274c1936fcf73952c3e58f41de379b4c6a21564a81ba7ba7de3ecc47875d47b5e215ceb529ded96d13a8f167a13b992636e3817b51cff7a03ba9c5ba36aeda3eb767751eeed718e258a0ea78bacabdd458d355ba65b3c715a400a29a1a047d5dd3ee4f6d"}, {0x18, 0x118, 0x3, "d038"}, {0xf8, 0x119, 0x4, "41ebdcce297e0436be7251952a183e7b89924b2faacbe5f9158d9bf268200789114044c2941b0f21bc67f80f2ab8c99422ecc58d19b2bc55489fe8f0688b7a47b35442d78d8d01914945258c4963ac3388d4b2507505fa4c1c6ca5c51ba264bfcf26d0e9dc6226286c918625d86aac4b9890e62f197dea6ab4cbf710c2b6dbef926cd514852c71f738c6f5b2cba7840ac4a531b34801d30fa92eb023916779e59fc73b6374b44d50384076686041b5321a3b02601c64d16193dc0d7d0ccb6397a2820bf54a21a1affc0e9562bb59449e40abebc260f5179a16cf4af8fadcea0fd75a88ac30e2"}, {0x38, 0x119, 0x7, "6c7e2d428509f8d3be4a68d897e7258186c59d13d7a40d2524ee5501d91baac6a762bb2facf5"}, {0xa0, 0x10e, 0x3ff, "1b2c877d80426edbc1b5f93ff15a6d767b1c2eaa9381dd22d101ed3484d739581c42b2e3b751059dc60d4ee06e64a3dd8c79289c36a0105cdd585e744a74b9bfc58a2768cb1c52de67d7fa3ff2d4c0cdd72be3e79cd9c9250159468cadf7d3051824ac6f831e97c4c65e32549c35d14984730dff0a9069a266a418769065b58ee0d65353f869b8ec19988deec9580e7e"}, {0x78, 0x3a, 0x1, "09e023930b44a4114d1dd4472df8f5ae1629228e32be68d195c82eddbb447570da0b4fb3f759894e13874130d013c6844bbec27950b69224f99a0457bc7f6b4d1282e28e6df3db75f8681fc788e7294145ab9017e82701373a0e878fa076be4da2"}, {0x1010, 0x113, 0x5, "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"}], 0x14f0}}, {{&(0x7f0000003300)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003380)="e94c853b5728371d6b6abf509d26db42712582b6819f02e6ed6b67d8f60978213104697eb1d233951652f111d30f2f2474045dadf1fc66d718d60a66c11f1f5b93077a6e68586709ac711f87d540e98ecd05dbf2fe1142c47f9c7b7541121e3374bd4e77aa51ff1daae8be4471e6b424c330a3d04f12240a0451f13b7efd418e5b9a30e4a999a0", 0x87}, {&(0x7f0000003440)="379100715ae86eb519655216dfa30e2c1464f0478bb0c334a407827af58ce8d0baf201e4f03e4a66c2ff6b678929e1fe4ccd600c16b857c0dec5ad5181252e3a12572ec10f415eee0746659784e2d0068e22134ce51f1d914ba928f93b6f0650085a907607e117ba19fd8ee0c60419052cde14192f7c18435c4c89dc9dc3a1df2db8c8ca75d4411bd4b077efdee362", 0x8f}, {&(0x7f0000003500)="3041acec85ec19f8ed1494a5a4f090641ad31780b477b69bd78205e7a249564e09c5caebdbb369e48d4932d4ae3c0d8f626f39a3dfc428d4803c4bcbaa12179b295f0f3edf61712057453c4e0baf9773677025da902f68700566c5ad117e1d2952fddaa26e2c219748a6a87a8a3a5e5bca2605061c8acce6f3c8aa202015b4ccf8ec41a2c091cccf1a4c06e443b19a671397c431e4f4f00a6cd8ac419ca27409b8c232db06733c369b0614da1c4ee5fc8916fc72b4a50e16d0a6", 0xba}, {&(0x7f00000035c0)="696e0f3bb66da0d9a7094e4c93c99c17345a34ada7f36f0a2828f020eb502c8ac7eb975640c3e61c674b7657befe8d9419bc11d42c1a516b67ce1da88f6711396448f1e2ced73e887dd6490071e9b0e936a8f78f3221dcee31e729c489355ee682270481ff2985cba28195a35864e5e2a33e7acb13fdf05bdabafd91262095e3e8832dafeef622ef64ff7ffdb759b7356962b5c204a180636117f2bf592b29ba72888d7de091", 0xa6}], 0x4, &(0x7f00000036c0)=[{0x98, 0x117, 0x1000, "224ea6ccd91393af7ec15194a0207bea82980e96f8353e5bd25692409d890ce27b0ea89c83cbe15c108680bf27dc7931ca39ef326c9b5c6bf557295ae6e6ef6ce7f60ba9438c48c010182c0d8a63facba5580ce48ab7b071622b12ddfb6e80969fdb55f30d5b642b36d7c82c984a7c3958b6a3af30aa6a167838fd45b9ec7b467e"}, {0xa0, 0x10e, 0x7, "e0e61c1eeae571114a2d7b6f2ab5954b4bbb77b3f110362c90c33be18454bab77858bb4475513e6d39da0f2200f93baeeeddb87a88e0413fe59f0f756a5d7dea0e815394fa8f1634b72743d92fe9c27510a04cf824c2383dc415776fdb9abc2fb42492f66ef0276d7c59040754ffd0194ad7a361956146ce9595849c471f9e25565299b6036dfe0110b0675c"}, {0x70, 0x111, 0x9, "366b79718a267c69aadbc6e81c205a701abcda101daa1b3617338e4d9f0c5a6858a27101211907d6478338e3c90e55232c408c33f03a9a538b69548affd2c1e3d9cb7d7f5a928340c6aaf45bc139606d22c327a76b0f7a896393ace241"}, {0x60, 0x88, 0x6c, "72afae218580891401bdf1bc042e71dc70331a5d99171f60fe21fead5cffb95bf72e2091e9de35df10cfab206bef11ad066338e55b67952afafb722d83029a8533f83d6ffca88b5bf7ce74f8f196"}, {0xe8, 0x113, 0x11, "40402327be02831bcf624bb5140e15e8598c84f2d7acb3c4184adf5854a51e8e3cb2e552414e59a28a1a2ce9502b39dd012d014163d01dadb4f3c8d9bc0e428e7d5c6715818cd3f286d77dc65db66831cb425ce6cb5f9ecb8a9c83bb870c7c343b46648dbea5b06fdef6eb541572e5a9fcfd190a6638bcba0618b522fc40d33cb1b18b2ff3abe53e0c98e158db0e09d952b124c3de50b7d6d6d0e1fcf1eda483b8f18f39b0400ddeac7a5a6f182f1608776e816fc1573ede96a52d2ec4165dc2cd0ae911b8d5d63bd972697ea1d7116f8429"}, {0xf0, 0x0, 0x40, "eb91433b0683e997885c293fbbee880a973f941173ab2ac9bc860179774bbcdb0f4239d9b65385d17dc33e4064205d45ac7d44fa88d68c6ee335b5742b068fdc7950ef9a3c1343fc4b93f1291556b8193264c81f877861d42ff9c9e282cb5a118860a1a33a7e1710c2b765173ccb278000ffe7717740d177b6ce84f8b4be1541dcd52644cc8771110a5e560dbcb10900158c14d0340c5faf64610645d025c580ea9a0f2dc99b22705c00efbf28041ac6d3649c9abfdeafea53f73a99cb6ef517c455809400ce1acf9ea439d3f63041fbb9ccfdc12ed328a76c3f8dadea"}, {0x58, 0x1, 0x6, "c9f2fa3b08edecc85a6e51494efc685d747b0d5fd60e9b5542491f576c02076a86e4ee839dc62e6809a01238af4b800d4d2b343e6aaaf89a1cc434c2ab6888869b172e35"}, {0xa8, 0x113, 0x3, "ba82f6adedf7589dfe377da6aa9e43a7e4d546cadb64d50615e4c5bb891f9bbba80354a951f6290e71be4e432d5f3b4c0b7bfb5962f207517f74e56d802e159c2b15be3018361363374a2956d0d228b29a688f7a39e9545b0074294ff1bd7fd1507948bebe226e589b095ea6341a5082195ea1febe039160fd0e16ab2378105acbdc86407aada4b3f1ddd6d415f21af626f4307627"}], 0x4e0}}, {{&(0x7f0000003cc0)=@ll={0x11, 0x10, r4, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f0000005300)=[{&(0x7f0000003d40)="9b33c17cf6a79bca5aff3e094bc52fae155aebdced793f8cfa93144dc5dbafe838c410b43cc26e53a2c9e4ee8e9ac7a0865dba0f97764cc6b28e71dc9f3ea691e96fda71ddd6bc876a5bc79eabfffb209e7f868a1128f472", 0x58}, {&(0x7f0000003dc0)="6ebf44844a2b75797b01551d0634456843c64853637f916a5646933325fdc859abe6aaf16edc453b69e12937dc4cdaaf72ea485afa18da6406b886d1e8f97738f669ed106ebb89afa4e425f406c4c5c98227fd1ae6fcf2c7b77b3c7c135fb95eb3ea422e5ffab81c2499e2a69bcf3692f347482b5b376b2149c6f8ab231c2ad7ed02bff14330603af892e18fae10a62bf26bbfef3d3baab2b3408a5084a75c6d12ec66b70a78661f554a9528d1ef9feb18ab8078c8f69a6b3f22a146de723ed584d3272905b52a3eb0977799da47a29669f617d2d9f6aa835ef86a22a99fad45df47f08ccff106d1a07c17a56263dea42f0db774b9f520ba04c8aea8e53904c35718e5e84f7b9ef3b0d902e57343a24c912c7d67f2a2c77ed821356f6d884ea40942844ce4c37da08001690b437fc9a5e0ec61589521ce22123ef71b52d373cee0e812311b6b610fb7d5e60d1dbf552c1f25a65dd4de367578ad19262e0f5827b0cf45ac878ad24fc0db7370aa499b4309b59af76f809ec6e1bedb6fa19b57cde313a89498c9265f529b1af1544144f51fc49e844ab2d88b94efd778804feb61e980a4d2da22401365ff1bc78a9e9153b5054374845e4190b0b29868f6066e6b26e430a94994fc174493dabb694ad95da5f279905cd7a41d0e06973cbef8ede2211ac9a884f18d26d9ecd0a9f59016817d61a2cdf622006055c923718aca84dc37b17c1010edb79db0ac637903e4770e0f1d4893fdaa677ae129188fe00757ef116ddc659fb7b27cbb9b908911376c3c32a40924d2417e8d37f74e30bed2f1a5441e92f24105fc3f00e8fa7e85ad9b1279dfe332cf9af2eb20dfc9585ff007c4eb63a9f1894958b177cdca205b74779bedf823a82c18f52896530f986d72a2462ab4a608d4b5bb07a80af6b8bc7c4bcab82c6da2ac722e2d18d96d02eacc7a3a5e0dd50c40d4627d70bae4dd3d46196e89e79b8bcfcdeaf78ea27b2e2744fc443ef734a26f3c7b6529925933382c9961b26e108be0b4b546de3d3ffed89322c75f65e3bdc0bd119caff096454d6524df4ee10a07e42fa44166643c555052fd286ee419ad465c4156abeaf1f56029b69c87b72a4506aa58f6c051f241ec42b9fce236464e4927e8171258c3f2d7839dc1e6293fb55c4a3b117425bd3a29bf7c4c842331d916d8131f0a4f9cb0949d7721b2fc934ce862bf0108af90dfb88a71f22b5ec733ad6e8da2c423c53d9b023c99f069cb9c9350c830d3ac3d38a9aa1881dd7244076caab9752aff5f5318361782338b0c3c2aa2d8ce469f26488b2f4b2bb3cb5e880e0d82e502fee78ac140f8995f056aaaeb764adb2a8ae112ec956dc93ece942215a11caad301122678c28705fad8efa4220d035c240501fbcf90fa7d745b03a855071408e1f82e943f1c89418cfde92e709949a68b8768169539c70d60f2b3e42a24420941812cc7f3e2a5b32eb1589d0b87edf1084352e8fcce94dc81b76073d903c19c8a9a0d5b8cc69f5fee5cc6a325ed45f61ea99581ebc465bfdbb0d1c4a6ea7014fd45cfb3cb3f41f9ad27f027fb173968e82dc0267b1879aed32e0ca339a00070ae6b2993c43099801073f2c5dd15e96fccddb3a544f3f24e06cccf6b5446cc84cb63354f6f16e64a25e7971749ea37f06c79301d260adc5ca0c67e4e4127e2d8b6401eacf62742c40b97fd2e2300f9a3c5cc56477ac905e4fd09f6f3f44328c1a9f5aa3c8664315ac16177c03b0bcab2fee29a80981b09b2b9a0e1c359de14ab661abebd771a5ab3aae2fdb01b83342ce24efa1960b957e74f620a2902d316b9606f65a55caea750f4fc7d82b1141bd1acbdb0530bef27e4ab6253c7da86ed178362778b159630474b914341278e49a0dac998e6efae8dffc4d21a8760378af4e6b4efe2e70fa4b4a0e5b8b5f44a2cd6793a9a1f05c968afddc6d436843c6de452da23204f31b50165fd74134d9196c0c1a0ad15d57d2c7cb656c13cedc62cfbc88fd08a28e2b4d97746822cb58f5741aa899e5f0eec626b6e56c0aef05c094140092ac4ba9d2c8e58341267b00129ea884720d737671a6d23d3caab9cb1a3bec78a09f24ab762f54ec8a58a44bc74fb6ee72d53e79fe50fcd0569e36bf480f4b25d36b2b7b09d3c3ec5dc0c6531ac5b4b8d6349edc2460d7e086b0cbe9d69372ac9d9bc5a5953b6edb90cf6a04caf41434182523ac977e51f881e9323cebfeed2bee3281593f521bd9a0676d4dde3121c845d461b1013a5a24f3a98493c962b98095dd80378f01afdad008b20a9dd157c4fcb841bae1d04a653cae2da37546d58a5028d02ab7c97613664e0be712d7628a5c21fefe40e36b8c6704d160f2e205acffc3adb75dd1bd87dfae62a32bd4ba55d10bc4e8ea1908a490b281625a45587793d699e4fe60f935f7ebcc529c5f26f002fa6dd344cffbd65d74b07b171d756b1dae407d0e72ae01698a8c085206f9b7a304ee53c0569c21e33fad01041405fa4369d69cde90bf6651db2cea2e5ed6ee37a5dbc930d3e02bc141e34480a629b6a395a712f8751a47c368e0db7412f03811053855f3d50bfe4ac0039c90e5836ee7e09b66c2439479749599eed81bdd16c3e7b431e46aec19e5d6054e9894a2dda42d56176c3bd87a0ff551c7d6879799322be915a603f7c08d7035e37633d85e1f42833c3ff120124d57cf7f508002a09f80e7d299027f9b4fd3e67ac88b1d99f31d7b51f2c5ac8fb0898db60af08eaf3b6ece86974a1eef3055a1db427a4009540f8cbf343417642ffff7343fb1d902299423207ffc4d6679602f8330e18cc92217fd89235b2fc317825dd9e71337803c6b062344d9e81a253866eed81e8fe6c0459309a167daf444ae88a2852ebc9fd034589cb395862b7130d0fd8e425f698a835fbe82165721524c41f5d3292a9bc4170c18b9dab246f27d23fb07508b90d735a0ae7558c19656ef1bdaec57c3f634165a89c7bf23fb07bb44e1fe2341b081ff62ce15b84749eabc3910044d4d790242f97a78342c5f2adbdf385b59242534f7d17e5104ef988fe78500d78a77f08332ff2aba91e9b1fb8f94bb6e4dbbf0d310ea1724a4dc1002bd11c4abea43636e64ce7c9c4cea9029451d4728b481147cbb965d983714fee7e2504fbcaa3f3cb1a5ca7e9f8e9954025d936c8b054c292af9beeaf9e60fa3a48547326aa37be8fb21063e6c9ee786c7e8f350cbfcc02753da1263f50251c7b897db82b3826460e2853e8d22ba0c6ba6d610d2e7dd9650767a1956fdbccb7e074d936d4cb5426263e856a47e8decb4a612b769035884484a14941a9b57ec1bd17e7575f1f1082ea5b5997105018aa4c5f3f01feee24207600ab3392a772575c634957330d50179665dc8939205e4188bddf0b9c63e03e11ea955f1ff928befc81ba7434b4b91453a6d5dd5535d032a68938415e66ae95fe12e99b17e4f0b6e57957e7cc74b648fe89752de8210bec1f607fbba594eb7f780b48c2ab864c6fa857b0cf3deb05db34065d13c618ff7926f2dc5c68385084e8f44d1fa6fcf90e6bbd1ccf3fc9da5dbba02dc47ed69715f779af01fcd883d6ef66672f8f4091ea81055aefe515a9bfb961260a9ae03e1821d6a732e0cf38bb8607f4462b14a1e2c5bae1a4094c0dfbfe499aa99433b2344de36c0c45ed97e747a516189ff9e410436f3fcae7c4ae8c0a35037d8e473620154386d4d9481d7c87438cf3ad8d005df435e96754eab82223bb8a766dea092a6a6973223c5904e9bfcb61c5aa9f9373654ddd3d3e2f0d9c8082ac21fcca1e98e6cec06be93d6ec687aeb1bc32e14e36a09746e607daa512d664ba85170924a1319ac876ca008fbf67f4b657886d96aa97e2f280ff796c7ca4a7a3ef46ee4c3f1c664b3684cf2e582bb21d4224141288789f42ead50fb859b717e6f8c9c59719c66408d2b41a88e78fc942a00ecb989840c995fabfa00ebabd3c4e30f45eea937ed2dacc7b2d26f18b72c6ff8e0c2f2d9747daa2fd83c304d6e3aedd3f14a9e2079ff0a9545e0fa0ab99374947f52eec7ca25793b77cab26995708fce18d72518ed3a44b89b3c623caac5b43ceb464b2aa93fcb20cff8f2ca5db2b5e1e4e53bbcb564318e52d4fbf8ac550f95239a2ea9e44a048ed917f2a274535a8ad896addd591c36e73c773923ec9c355d77a8cdbb0cd26208afabf5822e046c20d4b8c9b95e09844d52bfa1c1382974d2d896180047bf2fc841a182525437def77e7ae1e6777ee8fe4dfb87d673a06c2e96fac48c0d7da80eb3de481ff008f7278f446b811b0e1a05083a4b66ba1b3fdddb97b7c921d4cd4476b62867105f62ac11ab7b8f8c0843a8fab2086c605fff9b741ce92eb2fa117b881095bf7e9858d188e86561f74a442db4e08abf8230254da3823149f246e2f732fbbca40d95eb61fdf0b25662ca3536b3b539b8d0187983d7377f356e8c2896033737f84f0b7f6240ccd868851c5dc8145bb163399225672c0311975acfa4d65f3294d09246ee52d046eefce0a51e6358579c7cf3d5dd5a29199ae4d145cab3221537ec84247529d0d9aa11f36a2ff69a877479caed4f34f0ea880d07f48ed2f8d4e1dd79df8043837b3ccea789d2f558803d8f18609288f0b5b146c45b52cbef27c39ff145b028c070893178142c4bd5a046b30b1bdc254c72ae74f5896e87bf6957b1a2627ca07015bac175a9416d5d72aca7a275c7f9757c54f9aeb4184b4fb28c42e69f546e70380ebf8366525e7e7d9350d152caaa12a16fef6615e795194a7c0c2de1ccc197151ea79a8f6224afb174b9482796c81b8774ceffb2663f47af511d7db317cf72707f6c630b53eb78724fff24bf04503543964ce63f3c35f454991f9e277616b1ca338b866564fab7494d5e7416db5db5bf1ea91259e0863e0ac121fd83a3f6315e32881f25fe55ef8441e2b2485150701c044341ce8affff8d41c22c70cf342a3c973d713982e1a7e4dd8e328974b3eda2151108ac08bc0d5b22b1d272fb6b1f9e830a630b328f43284bb02c369327c18e3b8603ea2cdbe7db3264c7673cb0de062c0c7e89d6b147512a8fdb27354536981602809561831eefd500ef817d46646762dc7897a26646d7990fe352bdfb5944c41c2d3b75163cb68d9359d88a49ee7e328afd702affdf64b136176dcf98695eee407c57d3e8dac8288508bad3a873970700d7436b50f1400bb16d6d5e8bdc5baf22567486ebfc0e21ce877d808d389ab59d873a5cf1167f041b5fc3651998e30435d2795c97e673fd4ae45f78d94e681571635790a43b67c3914a67078b2db093911447cc018d278c90ee21aa922d4884896faf86af4bb0e08b6441d7fb473bd3e1fd160fd2144cc56fd510ec44facc9f05c6170f510399c81697bfdd2484ba7364402dbe54a47b14dfd4916064017ba03ee033d0b7536c44fd4216ac3d9b66133400fd5ccf96393ea46f6b7ac8b07356bd8c538aca135c6eed61720a6dfc25ae3727cb63918e1a678a45937b8e7bd2764c2059774ab6736998bf35fdc6bc9cf328045c07da6937165398940e4fae142053e9cdb5315b876fdafac0a45924c890b5b4ef8ebb137d92f250c1cbdec3eb0b3298b8d2f5599f5ef3114227933ea88a1bb36edf763b928b320d1c850c3eb79a9eb5349dfc496b2d45727b279450c3271533d986d8439c85315452367a0b9d1cf6ac78233473dd16b15fe281dfe5c3856ab8abe58af3e4d08ea2da6899b57ac75a476210c72b519b4986a06e92041975b16fa6ad3d6bc4cbc59a3ba60e72b74", 0x1000}, {&(0x7f0000004dc0)="e73ade8e65dc71825f1d08005cee1fd7b23d044a53e716e115ac66a2293846d93df04a463b7613dd41f686ad5846f69851f9815360e41606cdd29fc8f2001325a4aa6b9d9ca93c0e8cb4d1ca7688a264d356f15e8e830fffbe6dbdce8a961a1db1d4f3b93c6e18acdd944d7c416a0f95b50d41120884f5c681718b08795094d5755c582ac8d76451ebd252397f7386e0ddf1fabe722b8dbab9c06116133779bee6eaeeae", 0xa4}, {&(0x7f0000004e80)="fcca4ee5b1cf816f6892d78c471e025f046139b2b57c3fe589f3a78284f5df2aeb2ee02c5aacf736b2", 0x29}, {&(0x7f0000004ec0)="295abae3ed07fca7a9b511c95159d0c09f7f0204217f4017cc9a099c3a3fa073b28ac7fa8ff79bd0a298ae908f05ae8a52f66063ca1c6c3cf165856da464000c565874bf8b2c81f29048f2e91842a7f81352092c3460c91f23e1490aa7d75f34179d39c721a291a2509db5a8678e61331ed4c95f14d8151e47fe3703ee0aeef21cea99f35314cccc8bce648bdf70488db6ad62a579c297231f01cba6f0e9aa3787a38265d058699c83e81a30474256420801df9b156c6033e6ebebcc4b0e8d3dffa36d319c09d2907a9d42791e5588593157fe1eec96258a3049937d393b8c7e5f1405126ae1c52f28b70e1d4bbba78f0344ceaf", 0xf4}, {&(0x7f0000004fc0)="853cc0d88edd75a4df5bb41aeb46a91b1edd0dd683c4e28bdaea198bcf05673be7304b7048b649bd89e8529fd3cc71422b9076865ce61a04362586e1eeac083da80313eceb28fd89e753a50ba68631bc260dc0cf4defd7ab3edec16d73e7a92bdd2be6f47ca770f1e5451b3c37d2bdfc21cb9986bf2bb349154ecb35a3ce0bc2d23aabb4b0123a641e7fda2e6d1a74c041927026dcea29e87d58f95c1c52701ccd287aee3c3e1c7492e09dc444ba2629394d5748a4e3e034f173fdb660a6c6df17f4c9dfb28141c4a9a3ec18e569e70c2926e7ff1071f57a2bdaa8e07bbd51db9d06033fa64c7546e7e7b567fddc5954f414c764", 0xf4}, {&(0x7f00000050c0)="2f45bace2db2f0fe2f427192c7a4", 0xe}, {&(0x7f0000005100)="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", 0xfd}, {&(0x7f0000005200)="b6e93d33fd0b5a9ab22b8bc20fe6299b05ba77234f02910fbce8ea59a0bc9178cd721565b475a9a976f2e0c9b20be90e0ea14b3593dcad50fa9b8de5fe6bbb1f97805c85e67d", 0x46}, {&(0x7f0000005280)="ab0a2f31aa964daa8f23d64f30456bf7b3fdd1d5eb83b0dbc2f61e16a0f0863b24a888bb640e0cb6ef2368a9c3b6cb82200384668f930119e4041beccff83e653e42311cdb03014c81810472cdd812df7757d464403ea7185c2087c42a46adbe717665cda2ed2914014440a09174b18e930a970b7770ca5aa321219cb5a1a5", 0x7f}], 0xa}}], 0x4, 0x4008040) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000054c0)={{0xa, 0x4e22, 0x8000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xc31f}, {0xa, 0x4e21, 0x5, @empty, 0x2}, 0xffffffffffffffff, {[0x1, 0x5, 0x5, 0xb97, 0x5, 0x0, 0x9, 0xb1c]}}, 0x5c) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000005540)={0x0, 0x0, r0}) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000005900)={&(0x7f0000005580)=0x9, 0xff, &(0x7f00000055c0)=[{}, {}, {}, {}], &(0x7f00000058c0)}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005980), r2) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000005b00)={&(0x7f0000005940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005ac0)={&(0x7f00000059c0)={0xc8, r6, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x569a4cb0d3e91b9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f0000005b80)={{0x8, 0x5, &(0x7f0000005b40)=[{0xf5, 0x0, 0xfff}, {0x5, 0x0, 0x80000000}, {0x7, 0x0, 0x7}, {0x4b, 0x0, 0x9}, {0x8, 0x0, 0x9b9}]}, 0x9, 0x2, 0x5, 0x2, 0x0, 0x7fc, 0x0, 0x80000001}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005e00)={{r2, 0xffffffffffffffff}, &(0x7f0000005d80), &(0x7f0000005dc0)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000005e40)={r2, 0xffffffffffffffff}, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005ec0)={0x0, 0x8, &(0x7f0000005bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@generic={0x1, 0x3, 0x3, 0x0, 0x80000000}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}]}, &(0x7f0000005c00)='syzkaller\x00', 0x4, 0xe0, &(0x7f0000005c40)=""/224, 0x41100, 0x2a, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000005d40)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005e80)=[r2, r7, r2, r8, r2], 0x0, 0x10, 0x8}, 0x94) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x3) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000005f80)) sendmmsg$inet6(r9, &(0x7f0000007740)=[{{&(0x7f0000005fc0)={0xa, 0x4e23, 0xc7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000007280)=[{&(0x7f0000006000)="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", 0x1000}, {&(0x7f0000007000)="451bb478f20710b437a8b2687a1d0f65c37a6d4b641cc72cbf05e1c9ebe2a2e675593d59cc75ff1e2b4b090a37bfb6b47abfc514ef8d101ad224f042fa81ea2affddd2866deb9f44ba888d66eff63ed70c6b9dc0ebdbc3ab3f5525688bb6953e01f48208f2096f8e686ce410dd7b7ca77c0ddb16cb148c9dbb02065dfa057de08458746c7924151d3e8a6c7a8fa3d038f38862ef00642eafece65a68fdf96a384eeecd485e91e6a06734ca5eaf9ae69e176730780ec1b6e209", 0xb9}, {&(0x7f00000070c0)="87769c3f25933b2ba13f48ad748f0357e2c860f0524cc9fd39952dcae54708b14bad9057f31dc786d3ba6abb706bda74d33327af76f90858dc05da7897350b5e1c6cb43dd50c1b2cb8abebde494e7a912a72193ac2e9626f8032fa5457ecffc5f5a6ca201712bc57f7fb91da8d60d0f60cac0b25e9e0bf521797797db1d6c7a6288c249712368519c8d1b8a0bb1f7dc2aad842cdb392681f0be27545a3ff9b1eaf25a24de6bdc586ed1f101c295c8338d844ad176fa21d191641e9e18a7d986bd959ad5c94de714382f35e7fc8949f551b07c8990a2fa3ed6eaef17135e1a85dcdbf357c3b7274d86f7aa17d3852247996fa81a140b66e", 0xf7}, {&(0x7f00000071c0)="7349a27f09a7468176c596489b660a49fcf239af60d9e59682fa909b7bed32bdb88e42872dddd3691ae62ddd556401ac5a975cc90caaed7646d79c7e8f1f5239974bcce0eac8bf5f7b71044ac39151bd3d0a89e0cfa0f75b4166e6f2d3239ac6fbda739a55aa216595ce6e090f833ce23f3952a9dc04b1766c34b3df324cef669f5d528e0f3eabba6e23b0d96aab6d376f847d56c548", 0x96}], 0x4, &(0x7f00000072c0)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x51}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r3}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x8, 0xe, 0x0, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2b}, @private0, @mcast1, @empty, @mcast1, @loopback, @rand_addr=' \x01\x00']}}}, @hopopts={{0x30, 0x29, 0x36, {0x2f, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x200}, @enc_lim={0x4, 0x1, 0x6}]}}}], 0x100}}, {{0x0, 0x0, &(0x7f00000073c0), 0x0, &(0x7f0000007400)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdr={{0x68, 0x29, 0x39, {0x11, 0xa, 0x1, 0x7, 0x0, [@private1, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private0]}}}, @rthdr={{0x48, 0x29, 0x39, {0x3c, 0x6, 0x1, 0xc0, 0x0, [@remote, @private2, @remote]}}}, @tclass={{0x14, 0x29, 0x43, 0x40}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r4}}}, @rthdr={{0x48, 0x29, 0x39, {0x67, 0x6, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3e}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @dstopts_2292={{0x1c0, 0x29, 0x4, {0x0, 0x34, '\x00', [@pad1, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x50, {0x0, 0x12, 0x65, 0xe, [0x0, 0x9, 0x0, 0x0, 0x7, 0x5, 0xdc, 0x9, 0xa771]}}, @generic={0x0, 0xa1, "73bb318833ca50217c817219d3e659dffbc1f34e5496ac95e2f7bdf6597dffad5e207fc4504f3d579693f4de43a825b3dcd6a2e4e5b0594ef36a40d020bed044b4e159d917af4c94942862a7fc8036f7f277a303b910d8c10ccf7cb520dc80e3683cd06aad9499a230c80424f9ef4c355c5b8424827c7f893e861cda6b94db739bcd1b4ff9d8f693ecbded998f2b02750f50321b70b6f79753c4a18d6883c5709d"}, @generic={0x2, 0x8d, "06499ef8196adfe19bb73e9ea5edf0b3f5c142ee446f2fe04a8303ed5239e68929ad3df76c4db47c3823627fef9d7367a782b9548e915d80ce146ecd5bc39976f2ccd4293b9381aad09a65c491e1674032aded894b51ee6edc6c4af28d1168b13d8dda49ed217d41799c06c14bb4997b6e226804a1bc4f643a22dc8afb42ec14ab1fb6485c21d107d701d4cb93"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1000}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x87, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x330}}], 0x2, 0x4000040) close_range(r0, r0, 0x2) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000077c0)={r5}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000007800)={r2}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000007840), 0x4) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000007940)={&(0x7f0000007880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007900)={&(0x7f00000078c0)={0x20, r6, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048860}, 0x4000004) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000007980)=0x4) openat$dir(0xffffffffffffff9c, &(0x7f00000079c0)='./file0\x00', 0x0, 0x121) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, &(0x7f0000007a00)=0x7) 269.852312ms ago: executing program 4 (id=2635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f0000000080)) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000380)={0x1, r3}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 139.014042ms ago: executing program 1 (id=2636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r1, 0x800005, 0x1) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0xa5bfce6, 0x0, 0x3, 0x1d, 0x1, "646b4c7fed409e3eedca8000f59e164dc63367e7e08474071e9f67cc6481368e22ccf521b6bbe3a6a0157ada941ad42d2b62cb6d7dc5352a94b52ae0bde3bb2c", "0db14295dccd224f8b5ef2619871507eddc5fcc80afaa01d4c3b062568a39748aa03fab4400f982510e9de5b54ae1d7051b12a0cb84eb89391fef5ca6b49111e", "d05ec8eb94ee9afa9810416be0e28111a4a710927747eda9cb44bcdc7563144f", [0x7, 0x7fffffffffffffff]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x2}, 0x0) 138.732086ms ago: executing program 1 (id=2637): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x80000800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x4, 0x33}, 0xa, @in6=@private1, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 68.803423ms ago: executing program 4 (id=2638): socket$inet(0x2, 0x3, 0x4) (async) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000000080)={'batadv_slave_0\x00', @ifru_map={0x1, 0x9, 0x10d, 0x1, 0x1, 0x6}}) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 68.382518ms ago: executing program 5 (id=2639): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0xd0, 0x1a0, 0x0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0x0, 0x0, 0xff000000], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0xbc529153b073ce1e, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x40}, @empty, [0x0, 0xffffff00], [0x0, 0xff], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@index_on}]}) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x41) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') pipe2(0x0, 0x80900) statx(0xffffffffffffffff, 0x0, 0x6000, 0x2dd8806920477201, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x60001, 0x36) mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x4, 0x0) ptrace(0x11, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r3, 0x1, r2, 0x400}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0000890c020323dce3b97b61a2fe04f3e18d57cfc66471172068314dfb2c17d1408f62c0cc73268e199d34cd11b93b1c48cf6c9649d59fd7bd2e330c1b8e55ee53cf5ae4735614441ed2c4dc9cbad9460237367e0e751f03d34182ca1307e81c002746ad5b9bdbfc315287460c0b3308b9d65005ae01d8ba0291f4c9c1caf66c0176653ad6495a"], 0x87) 0s ago: executing program 4 (id=2640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f0000000100)={0x8, 0x0, [{0xc00119ad}, {0x90e, 0x0, 0x1}, {0x844, 0x0, 0x1}, {0xb6e, 0x0, 0x9}, {0x2d1c37797dbc0fe5, 0x0, 0x1}, {0x2ac}, {0x84b, 0x0, 0x3}, {0xad4, 0x0, 0x2}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x3, 0x0, [{0xae2, 0x0, 0x2}, {0x86f, 0x0, 0x8}, {0x243, 0x0, 0xb}]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000640)="66b87f008ed866baf80cb85ab59081ef66bafc0cecb9510200000f32360f356465f4ea000000002b01660fc7b7fbffffff0f01cae000b95b080000b800000000ba000000000f30", 0xffffffffffffff87}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): ed { ioctl } for pid=14462 comm="syz.2.2044" path="socket:[62075]" dev="sockfs" ino=62075 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 194.552741][ T40] audit: type=1400 audit(2000000040.630:7759): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 194.692984][T14492] netlink: 'syz.1.2049': attribute type 10 has an invalid length. [ 195.144577][ T40] audit: type=1400 audit(2000000041.220:7760): avc: denied { connect } for pid=14518 comm="syz.2.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 195.358762][T14537] tmpfs: Unknown parameter '^A÷caP' [ 195.405267][T14545] netlink: 'syz.2.2060': attribute type 1 has an invalid length. [ 195.413743][T14540] netlink: 'syz.1.2059': attribute type 4 has an invalid length. [ 195.432951][T14545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.443412][T14545] ipip0: entered promiscuous mode [ 195.446517][T14545] ipip0: entered allmulticast mode [ 195.450516][T14545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.453337][T14545] bond0: (slave ipip0): The slave device specified does not support setting the MAC address [ 195.458744][T14545] bond0: (slave ipip0): Error -95 calling set_mac_address [ 196.366520][ T5944] Bluetooth: hci1: command tx timeout [ 196.567415][T14586] geneve3: entered promiscuous mode [ 196.569296][T14586] geneve3: entered allmulticast mode [ 196.616209][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.620850][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.624146][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 196.625072][T14588] __nla_validate_parse: 2 callbacks suppressed [ 196.625086][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2066'. [ 196.627672][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 196.636840][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 196.811993][T14591] lo speed is unknown, defaulting to 1000 [ 196.922309][T14591] chnl_net:caif_netlink_parms(): no params data found [ 196.968291][T14591] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.970686][T14591] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.973050][T14591] bridge_slave_0: entered allmulticast mode [ 196.976293][T14591] bridge_slave_0: entered promiscuous mode [ 196.979820][T14591] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.982155][T14591] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.984816][T14591] bridge_slave_1: entered allmulticast mode [ 196.987560][T14591] bridge_slave_1: entered promiscuous mode [ 197.003862][T14591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.008700][T14591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.025348][T14591] team0: Port device team_slave_0 added [ 197.028931][T14591] team0: Port device team_slave_1 added [ 197.043700][T14591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.046321][T14591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.055414][T14591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.060131][T14591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.062389][T14591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.071586][T14591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.113192][T14591] hsr_slave_0: entered promiscuous mode [ 197.115908][T14591] hsr_slave_1: entered promiscuous mode [ 197.118149][T14591] debugfs: 'hsr0' already exists in 'hsr' [ 197.120173][T14591] Cannot create hsr debugfs directory [ 197.220825][T14648] bond6: Unable to set up delay as MII monitoring is disabled [ 197.224929][T14648] bond6 (unregistering): Released all slaves [ 197.269477][T14649] xt_hashlimit: size too large, truncated to 1048576 [ 197.354778][T14660] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2077'. [ 197.391507][T14087] netdevsim netdevsim5 netdevsim3: renamed from eth13 [ 197.563196][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2080'. [ 197.735135][ T6080] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.737899][ T6080] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.741988][ T6080] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.745964][ T6080] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.758452][ T6080] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.761748][ T6080] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.770608][ T6080] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.773722][ T6080] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.776738][ T6080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.785148][ T6080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.790361][ T6080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.795568][ T6080] netdevsim netdevsim5 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.804735][ T6080] netdevsim netdevsim5 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.811316][ T6080] netdevsim netdevsim5 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.814023][ T6080] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.846248][ T6080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.849053][ T6080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.874751][ T6089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.877820][ T6089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.446978][ T5944] Bluetooth: hci1: command tx timeout [ 198.625150][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 198.625166][ T40] audit: type=1400 audit(2000000044.710:7796): avc: denied { accept } for pid=14735 comm="syz.5.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 198.685751][ T5944] Bluetooth: hci3: command tx timeout [ 198.702862][ T40] audit: type=1400 audit(2000000044.780:7797): avc: denied { write } for pid=14739 comm="syz.5.2094" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 198.703052][T14740] random: crng reseeded on system resumption [ 198.734583][ T40] audit: type=1400 audit(2000000044.780:7798): avc: denied { open } for pid=14739 comm="syz.5.2094" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 198.743633][ T40] audit: type=1400 audit(2000000044.810:7799): avc: denied { ioctl } for pid=14739 comm="syz.5.2094" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 198.791517][T14743] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 198.797560][ T40] audit: type=1400 audit(2000000044.880:7800): avc: denied { write } for pid=14742 comm="syz.5.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.798550][T14743] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2095'. [ 198.857424][ T40] audit: type=1326 audit(2000000044.940:7801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.5.2097" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa41cf9c799 code=0x0 [ 198.860317][T14750] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2098'. [ 198.869191][T14750] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2098'. [ 198.959809][T14756] /dev/sr0: Can't lookup blockdev [ 198.963226][T14757] program syz.5.2097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.966248][T14757] ata1.00: invalid transfer count 0 [ 198.968746][T14757] x_tables: ip_tables: osf match: only valid for protocol 6 [ 199.044824][T14769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=14769 comm=syz.2.2103 [ 199.109343][ T40] audit: type=1400 audit(2000000045.190:7802): avc: denied { getopt } for pid=14777 comm="syz.2.2105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 199.294006][T14804] xt_TCPMSS: Only works on TCP SYN packets [ 199.336897][ T34] IPVS: starting estimator thread 0... [ 199.343015][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.345401][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.425592][T14811] IPVS: using max 43 ests per chain, 103200 per kthread [ 199.753537][ T40] audit: type=1400 audit(2000000045.830:7803): avc: denied { setopt } for pid=14835 comm="syz.5.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 200.157717][T14843] fuse: Bad value for 'fd' [ 200.279654][ T40] audit: type=1400 audit(2000000046.360:7804): avc: denied { getopt } for pid=14854 comm="syz.1.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.766411][ T5944] Bluetooth: hci3: command tx timeout [ 201.017893][T14874] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 201.066410][T14882] netlink: 'syz.5.2134': attribute type 4 has an invalid length. [ 201.196786][T14897] netlink: 'syz.1.2139': attribute type 1 has an invalid length. [ 201.266309][T14894] kvm: kvm [14893]: vcpu0, guest rIP: 0x9144 Unhandled WRMSR(0xc1) = 0xd4b80cf8fffffcf0 [ 201.270079][T14894] kvm: kvm [14893]: vcpu0, guest rIP: 0x9144 Unhandled WRMSR(0xc2) = 0xd4b80cf8fffffcf0 [ 201.276404][ T40] audit: type=1400 audit(2000000047.360:7805): avc: denied { write } for pid=14893 comm="syz.5.2138" name="mouse1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 201.288680][T14894] kvm: kvm [14893]: vcpu0, guest rIP: 0x9144 Unhandled WRMSR(0x11e) = 0xd4b80df8fffffcf0 [ 201.312200][T14894] kvm: kvm [14893]: vcpu0, guest rIP: 0x9144 Unhandled WRMSR(0x186) = 0xd4b80df8fffffcf0 [ 201.316926][T14894] kvm: kvm [14893]: vcpu0, guest rIP: 0x9144 Unhandled WRMSR(0x187) = 0xd4b80df8fffffcf0 [ 201.509469][T14922] xt_recent: Unsupported userspace flags (000000b2) [ 201.664192][T14942] xt_cgroup: xt_cgroup: no path or classid specified [ 201.811132][T14966] netlink: 'syz.1.2156': attribute type 1 has an invalid length. [ 201.816179][T14966] erspan0: entered promiscuous mode [ 201.822847][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 201.879748][T14974] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 201.883317][T14974] overlayfs: missing 'lowerdir' [ 201.971022][T14980] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2161'. [ 201.989716][T14980] macvlan0: entered promiscuous mode [ 202.077039][T14996] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2165'. [ 202.309388][T15020] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2171'. [ 202.313361][T15021] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2171'. [ 202.846203][ T5944] Bluetooth: hci3: command tx timeout [ 203.404526][ T50] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 203.556397][ T50] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 203.559611][ T50] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.570266][ T50] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.578275][T15117] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 203.584453][ T50] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 203.591645][ T50] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.599383][ T50] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.602718][ T50] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.607688][ T50] usb 10-1: config 0 descriptor?? [ 203.649683][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2195'. [ 203.652626][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2195'. [ 203.656617][T15129] netlink: 'syz.1.2195': attribute type 11 has an invalid length. [ 203.659255][T15129] netlink: 'syz.1.2195': attribute type 7 has an invalid length. [ 203.680072][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2195'. [ 203.753279][T14591] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.819394][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 203.819406][ T40] audit: type=1400 audit(2000000049.900:7811): avc: denied { mounton } for pid=15089 comm="syz.5.2186" path="/18/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.828838][ T40] audit: type=1400 audit(2000000049.900:7812): avc: denied { getattr } for pid=15089 comm="syz.5.2186" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 203.900638][T15142] kAFS: unable to lookup cell '(,c¾ûL' [ 203.903208][ T40] audit: type=1400 audit(2000000049.980:7813): avc: denied { connect } for pid=15140 comm="syz.1.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 203.909836][T15142] kAFS: unable to lookup cell '(,c¾ûL' [ 203.945127][T15147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.948954][ T40] audit: type=1400 audit(2000000050.030:7814): avc: denied { name_bind } for pid=15146 comm="syz.1.2197" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 203.984264][T14591] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.022523][ T50] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 204.037976][ T50] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 204.096818][T14591] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.246278][T14591] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.252845][T14591] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.257404][T14591] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.261879][T14591] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.276714][T15091] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 204.311757][ T864] usb 10-1: USB disconnect, device number 2 [ 204.316269][T14591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.329904][T14591] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.336575][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.339687][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.345959][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.348659][ T6089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.489884][T14591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.527168][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2204'. [ 204.532006][T15203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2204'. [ 204.652992][T14591] veth0_vlan: entered promiscuous mode [ 204.660793][T14591] veth1_vlan: entered promiscuous mode [ 204.672762][T15226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24320 sclass=netlink_route_socket pid=15226 comm=syz.1.2208 [ 204.680294][T14591] veth0_macvtap: entered promiscuous mode [ 204.686044][T14591] veth1_macvtap: entered promiscuous mode [ 204.695573][T14591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.702949][T14591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.711936][ T6109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.720536][ T6109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.731300][ T6109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.734391][ T6109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.790857][ T6108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.796231][ T6108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.814860][ T6109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.822660][ T6109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.902429][ T40] audit: type=1400 audit(2000000050.980:7815): avc: denied { mount } for pid=15259 comm="syz.5.2215" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 204.914362][T15261] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 204.932098][ T5944] Bluetooth: hci3: command tx timeout [ 204.954715][ T40] audit: type=1400 audit(2000000050.990:7816): avc: denied { mounton } for pid=15259 comm="syz.5.2215" path="/20/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 205.005550][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.009869][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.012928][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.019225][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.022057][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.188795][T15289] could not allocate digest TFM handle cbcmac-aes-ce [ 205.221982][ T40] audit: type=1400 audit(2000000051.300:7817): avc: denied { unmount } for pid=14087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 205.252848][T15274] lo speed is unknown, defaulting to 1000 [ 205.294061][ T40] audit: type=1400 audit(2000000051.370:7818): avc: denied { nlmsg_read } for pid=15310 comm="syz.5.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.408541][T15274] chnl_net:caif_netlink_parms(): no params data found [ 205.412363][T15295] cgroup: fork rejected by pids controller in /syz4 [ 205.461483][ T40] audit: type=1400 audit(2000000051.540:7819): avc: denied { read } for pid=15343 comm="syz.5.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 205.476751][ T40] audit: type=1400 audit(2000000051.550:7820): avc: denied { watch } for pid=15340 comm="syz.1.2226" path="pipe:[63224]" dev="pipefs" ino=63224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 205.539407][T15274] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.542077][T15274] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.545158][T15274] bridge_slave_0: entered allmulticast mode [ 205.548072][T15274] bridge_slave_0: entered promiscuous mode [ 205.551483][T15274] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.554015][T15274] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.558468][T15274] bridge_slave_1: entered allmulticast mode [ 205.561326][T15274] bridge_slave_1: entered promiscuous mode [ 205.577485][T15274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.598696][T15274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.656188][T15361] team0 (unregistering): Port device team_slave_0 removed [ 205.663353][T15361] team0 (unregistering): Port device team_slave_1 removed [ 205.670960][T15274] team0: Port device team_slave_0 added [ 205.678961][T15369] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 205.684624][T15369] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 205.705757][T15369] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 205.708964][T15369] UDF-fs: Scanning with blocksize 512 failed [ 205.713054][T15369] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 205.718540][T15369] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 205.722526][T15369] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 205.733795][T15369] UDF-fs: Scanning with blocksize 1024 failed [ 205.738673][T15369] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 205.740410][T15274] team0: Port device team_slave_1 added [ 205.743393][T15369] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 205.750092][T15369] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 205.753267][T15369] UDF-fs: Scanning with blocksize 2048 failed [ 205.758599][T15369] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 205.762637][T15369] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 205.768254][T15369] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 205.771675][T15369] UDF-fs: Scanning with blocksize 4096 failed [ 205.774345][T15369] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 205.806587][T15274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.821954][T15274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.832950][T15274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.838880][T15274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.841184][T15274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.851072][T15274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.888220][ T6109] netdevsim netdevsim2 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.900585][T15274] hsr_slave_0: entered promiscuous mode [ 205.903020][T15274] hsr_slave_1: entered promiscuous mode [ 205.905389][T15274] debugfs: 'hsr0' already exists in 'hsr' [ 205.907369][T15274] Cannot create hsr debugfs directory [ 205.930219][ T6108] netdevsim netdevsim2 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.987600][ T6109] netdevsim netdevsim2 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.016479][ T6109] netdevsim netdevsim2 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.022005][T15396] fuse: Bad value for 'fd' [ 206.026006][T15396] fuse: Bad value for 'fd' [ 206.178379][ T6089] bond1 (unregistering): (slave erspan2): Releasing active interface [ 206.181485][ T6089] erspan2 (unregistering): left promiscuous mode [ 206.391925][ T6089] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.405422][ T6089] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.409599][ T6089] .` (unregistering): Released all slaves [ 206.415602][ T6089] bond1 (unregistering): Released all slaves [ 206.426759][ T6089] bond2 (unregistering): Released all slaves [ 206.435186][ T6089] bond3 (unregistering): Released all slaves [ 206.441889][ T6089] bond4 (unregistering): Released all slaves [ 206.449621][ T6089] bond5 (unregistering): Released all slaves [ 206.459799][ T6089] bond6 (unregistering): Released all slaves [ 206.466922][ T6089] bond0 (unregistering): Released all slaves [ 206.473927][ T6089] bond7 (unregistering): Released all slaves [ 206.484121][ T6089] bond8 (unregistering): Released all slaves [ 206.541200][T15274] netdevsim netdevsim2 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.582411][T15421] tipc: Enabling of bearer rejected, failed to enable media [ 206.622567][ T6089] tipc: Disabling bearer [ 206.634562][ T6089] tipc: Left network mode [ 206.679981][T15274] netdevsim netdevsim2 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.780048][T15274] netdevsim netdevsim2 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.842985][T15274] netdevsim netdevsim2 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.084972][ T63] Bluetooth: hci4: command tx timeout [ 207.243026][ T6089] hsr_slave_0: left promiscuous mode [ 207.250075][ T6089] hsr_slave_1: left promiscuous mode [ 207.252452][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.320025][ T6089] team0 (unregistering): Port device team_slave_1 removed [ 207.328641][ T6089] team0 (unregistering): Port device team_slave_0 removed [ 207.403356][ T864] lo speed is unknown, defaulting to 1000 [ 207.406256][ T864] infiniband syz2: ib_query_port failed (-19) [ 207.670305][T15456] netlink: 'syz.4.2252': attribute type 1 has an invalid length. [ 207.673041][T15456] netlink: 'syz.4.2252': attribute type 3 has an invalid length. [ 207.676395][T15456] __nla_validate_parse: 11 callbacks suppressed [ 207.676406][T15456] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2252'. [ 207.763439][T15463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2254'. [ 207.795620][ T6089] IPVS: stop unused estimator thread 0... [ 208.071027][ T50] IPVS: starting estimator thread 0... [ 208.080640][T15473] (syz.5.2258,15473,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 208.085449][T15473] (syz.5.2258,15473,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 208.087982][T15473] (syz.5.2258,15473,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 208.090937][T15473] (syz.5.2258,15473,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 208.165265][T15474] IPVS: using max 43 ests per chain, 103200 per kthread [ 208.532622][T15523] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2269'. [ 208.574686][T15528] kAFS: No cell specified [ 208.629968][T15534] netlink: 252 bytes leftover after parsing attributes in process `syz.5.2272'. [ 208.792160][T15530] fuse: Bad value for 'fd' [ 208.888398][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 208.888410][ T40] audit: type=1400 audit(2000000054.970:7830): avc: denied { create } for pid=15550 comm="syz.1.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 209.164622][ T63] Bluetooth: hci4: command tx timeout [ 209.187985][T15570] kAFS: No cell specified [ 209.226439][ T6080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.229195][ T6080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.345478][T15532] overlayfs: statfs failed on './file0' [ 209.413473][T15608] kAFS: No cell specified [ 209.450334][T15612] overlayfs: failed to clone upperpath [ 209.465056][T15614] netlink: 'syz.4.2289': attribute type 15 has an invalid length. [ 209.468688][T15614] netlink: 'syz.4.2289': attribute type 15 has an invalid length. [ 209.601353][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2291'. [ 209.604624][T15628] netlink: 'syz.5.2291': attribute type 1 has an invalid length. [ 209.607218][T15628] nbd: error processing sock list [ 209.645180][T15631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2292'. [ 209.649125][T15631] nbd: must specify at least one socket [ 209.652090][T15631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2292'. [ 209.656504][T15631] nbd: must specify at least one socket [ 209.661143][T15635] IPVS: set_ctl: invalid protocol: 47 172.20.20.68:20003 [ 209.821197][T15645] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2294'. [ 209.835172][T15645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2294'. [ 209.839298][T15645] ip6_vti0: entered promiscuous mode [ 209.841202][T15645] ip6_vti0: entered allmulticast mode [ 210.210785][T15657] netlink: 'syz.4.2295': attribute type 21 has an invalid length. [ 210.213786][T15657] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2295'. [ 211.254518][ T63] Bluetooth: hci4: command tx timeout [ 211.474603][ T2307] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 211.636681][ T2307] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 211.639788][ T2307] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 211.642593][ T2307] usb 9-1: Product: syz [ 211.644009][ T2307] usb 9-1: Manufacturer: syz [ 211.645992][ T2307] usb 9-1: SerialNumber: syz [ 211.649029][ T2307] usb 9-1: config 0 descriptor?? [ 211.653560][ T2307] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 211.656820][ T2307] dvb-usb: bulk message failed: -22 (2/0) [ 211.661977][ T2307] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.666013][ T2307] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 211.668776][ T2307] usb 9-1: media controller created [ 211.676742][ T2307] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.889912][T15752] vxfs: unable to read disk superblock at 1 [ 211.892567][T15752] vxfs: unable to read disk superblock at 8 [ 211.898886][T15752] vxfs: can't find superblock. [ 211.987431][ T40] audit: type=1400 audit(2000000058.070:7831): avc: denied { read } for pid=15751 comm="syz.5.2305" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 211.997044][ T40] audit: type=1400 audit(2000000058.070:7832): avc: denied { open } for pid=15751 comm="syz.5.2305" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 212.006682][ T40] audit: type=1400 audit(2000000058.070:7833): avc: denied { ioctl } for pid=15751 comm="syz.5.2305" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 212.141125][T15274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.156926][T15274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.161902][T15274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.175311][T15274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.270948][T15274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.287937][T15274] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.293118][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.295592][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.328632][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.331013][ T6089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.486164][ T40] audit: type=1400 audit(2000000058.570:7834): avc: denied { name_bind } for pid=15780 comm="syz.4.2306" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 212.497142][T15781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.500636][T15781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.548406][T15274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.600499][T15274] veth0_vlan: entered promiscuous mode [ 212.609529][T15274] veth1_vlan: entered promiscuous mode [ 212.623231][ T2307] cxusb: set interface failed [ 212.626163][ T2307] dvb-usb: bulk message failed: -22 (1/0) [ 212.635772][T15274] veth0_macvtap: entered promiscuous mode [ 212.640316][T15274] veth1_macvtap: entered promiscuous mode [ 212.658437][T15789] kAFS: No cell specified [ 212.659041][ T2307] DVB: Unable to find symbol mt352_attach() [ 212.662192][ T2307] dvb-usb: bulk message failed: -22 (5/0) [ 212.665712][ T2307] zl10353_read_register: readreg error (reg=127, ret==-121) [ 212.668139][ T2307] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 212.676527][T15274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.681841][T15274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.694298][ T6080] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.699675][ T6080] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.709580][ T6080] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.715216][ T2307] rc_core: IR keymap rc-dvico-mce not found [ 212.719587][ T6080] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.724082][ T2307] Registered IR keymap rc-empty [ 212.728641][T15793] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 212.732675][ T2307] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 212.740201][T15793] overlayfs: failed to set xattr on upper [ 212.742667][T15793] overlayfs: ...falling back to redirect_dir=nofollow. [ 212.745961][ T2307] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input21 [ 212.749766][T15793] overlayfs: ...falling back to index=off. [ 212.751919][T15793] overlayfs: ...falling back to uuid=null. [ 212.754263][T15793] overlayfs: ...falling back to xino=off. [ 212.757647][ T2307] dvb-usb: schedule remote query interval to 100 msecs. [ 212.760083][T15793] overlayfs: conflicting lowerdir path [ 212.762051][ T2307] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 212.772364][ T2307] usb 9-1: USB disconnect, device number 2 [ 212.866959][ T2307] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 212.877475][ T6108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.880616][ T6108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.930668][ T6108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.934120][ T6108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.002739][T15815] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2313'. [ 213.006293][T15815] sch_fq: defrate 4294967295 ignored. [ 213.011373][T15815] overlayfs: failed to clone upperpath [ 213.034349][T15818] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 213.048473][T15818] kvm: Disabled LAPIC found during irq injection [ 213.051516][T15818] bpf: Bad value for 'uid' [ 213.100113][T15824] kAFS: No cell specified [ 213.107504][T15825] random: crng reseeded on system resumption [ 213.238984][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.250355][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.255974][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.260053][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.263622][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.326616][ T63] Bluetooth: hci4: command tx timeout [ 213.346647][T15838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15838 comm=syz.2.2319 [ 213.519996][T15843] bad cache= option: nonw [ 213.519996][T15843] [ 213.527452][T15843] CIFS: VFS: bad cache= option: nonw [ 213.556938][T15838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.577729][T15838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.596562][T15838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2319'. [ 213.605389][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2319'. [ 213.766471][T15828] chnl_net:caif_netlink_parms(): no params data found [ 213.958629][T15828] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.961147][T15828] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.963739][T15828] bridge_slave_0: entered allmulticast mode [ 213.969046][T15828] bridge_slave_0: entered promiscuous mode [ 213.972732][T15828] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.975518][T15828] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.978128][T15828] bridge_slave_1: entered allmulticast mode [ 213.981085][T15828] bridge_slave_1: entered promiscuous mode [ 214.002076][T15828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.008186][T15828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.029815][T15828] team0: Port device team_slave_0 added [ 214.033874][T15828] team0: Port device team_slave_1 added [ 214.049127][T15828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.051521][T15828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.060802][T15828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.065577][T15828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.067992][T15828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.078247][T15828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.105329][T15828] hsr_slave_0: entered promiscuous mode [ 214.107957][T15828] hsr_slave_1: entered promiscuous mode [ 214.110356][T15828] debugfs: 'hsr0' already exists in 'hsr' [ 214.112245][T15828] Cannot create hsr debugfs directory [ 214.180919][T15880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2324'. [ 214.227533][ T6109] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.346182][ T6109] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.459153][ T6109] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.570910][ T6109] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.697757][ T6108] netdevsim netdevsim1 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.713764][ T6080] netdevsim netdevsim1 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.728641][ T6080] netdevsim netdevsim1 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.752280][ T6108] netdevsim netdevsim1 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.828742][T15908] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 214.845465][T15908] overlayfs: missing 'lowerdir' [ 214.858923][T15908] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2328'. [ 214.903455][ T6109] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 215.019187][T15915] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15915 comm=syz.5.2328 [ 215.067406][T15917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2329'. [ 215.071267][T15917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2329'. [ 215.112837][T15924] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2330'. [ 215.199652][ T6109] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 215.202514][ T6109] bridge3 (unregistering): left promiscuous mode [ 215.324940][ T63] Bluetooth: hci0: command tx timeout [ 215.350467][ T6109] bond1 (unregistering): Released all slaves [ 215.357653][ T6109] bond2 (unregistering): Released all slaves [ 215.365110][ T6109] bond3 (unregistering): Released all slaves [ 215.372915][ T6109] bond0 (unregistering): Released all slaves [ 215.385348][ T6109] bond4 (unregistering): Released all slaves [ 215.400573][ T6109] bond5 (unregistering): Released all slaves [ 215.427385][T15828] netdevsim netdevsim1 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.450143][ T40] audit: type=1800 audit(2000000061.530:7835): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.2.2325" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 215.450263][T15886] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 215.465544][T15886] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 215.470660][T15886] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 215.470665][ T40] audit: type=1400 audit(2000000061.550:7836): avc: denied { firmware_load } for pid=15885 comm="syz.2.2325" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 215.516705][T15828] netdevsim netdevsim1 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.541638][T15929] afs: Unknown parameter 'dy' [ 215.582363][ T40] audit: type=1400 audit(2000000061.660:7837): avc: denied { setattr } for pid=15930 comm="syz.2.2331" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 215.597459][ T6109] tipc: Left network mode [ 215.598002][ T40] audit: type=1400 audit(2000000061.660:7838): avc: denied { create } for pid=15933 comm="syz.5.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 215.636885][ T6109] IPVS: stopping backup sync thread 7040 ... [ 215.646103][T15828] netdevsim netdevsim1 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.668179][ T40] audit: type=1400 audit(2000000061.750:7839): avc: denied { getopt } for pid=15933 comm="syz.5.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 215.675413][T15934] 9p: Unknown uid 00000000004294967295 [ 215.737504][T15828] netdevsim netdevsim1 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.924917][ T833] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 216.104649][ T833] usb 7-1: Using ep0 maxpacket: 8 [ 216.116822][ T833] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.120485][ T833] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.123728][ T833] usb 7-1: config 0 interface 0 has no altsetting 0 [ 216.126574][ T833] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 216.129692][ T833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.138575][ T833] usb 7-1: config 0 descriptor?? [ 216.217511][ T6109] hsr_slave_0: left promiscuous mode [ 216.220794][ T6109] hsr_slave_1: left promiscuous mode [ 216.227371][ T6109] veth1_vlan: left promiscuous mode [ 216.230616][ T6109] veth0_vlan: left promiscuous mode [ 216.340434][T15987] Bluetooth: MGMT ver 1.23 [ 216.464717][ T6087] smc: removing ib device syz0 [ 216.469423][ T40] audit: type=1400 audit(2000000062.550:7840): avc: denied { append } for pid=15998 comm="syz.4.2345" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 217.025778][ T833] usbhid 7-1:0.0: can't add hid device: -71 [ 217.028048][ T833] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 217.037580][ T833] usb 7-1: USB disconnect, device number 7 [ 217.092652][ T6109] IPVS: stop unused estimator thread 0... [ 217.406096][ T63] Bluetooth: hci0: command tx timeout [ 217.454743][T15867] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 217.509486][T16055] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 217.514336][ T40] audit: type=1400 audit(2000000063.590:7841): avc: denied { block_suspend } for pid=16054 comm="syz.4.2352" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 217.625973][T15867] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 217.628991][T15867] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 217.632587][T15867] usb 10-1: config 0 interface 0 has no altsetting 0 [ 217.637647][T15867] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 217.640708][T15867] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 217.643449][T15867] usb 10-1: Product: syz [ 217.647899][T15867] usb 10-1: Manufacturer: syz [ 217.649647][T15867] usb 10-1: SerialNumber: syz [ 217.653152][T15867] usb 10-1: config 0 descriptor?? [ 217.658634][T15867] hub 10-1:0.0: bad descriptor, ignoring hub [ 217.660642][T15867] hub 10-1:0.0: probe with driver hub failed with error -5 [ 217.670714][T15867] usb 10-1: selecting invalid altsetting 0 [ 217.734855][ T1031] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 217.762332][T16080] netlink: 'syz.4.2355': attribute type 10 has an invalid length. [ 217.767577][T16080] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2355'. [ 217.773370][T16080] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 217.873590][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2347'. [ 217.879428][T16038] icmp: detected local route for 172.30.1.6 during ICMP sending, src 10.1.1.0 [ 217.918689][ T1031] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 217.921584][ T1031] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.926452][ T1031] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 217.929613][ T1031] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 217.932332][ T1031] usb 7-1: Manufacturer: syz [ 217.944224][ T1031] usb 7-1: config 0 descriptor?? [ 218.014534][ T1031] rc_core: IR keymap rc-hauppauge not found [ 218.017027][ T1031] Registered IR keymap rc-empty [ 218.021362][ T1031] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 218.029449][ T1031] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input22 [ 218.167769][T12432] usb 7-1: USB disconnect, device number 8 [ 218.356165][T15867] usb 10-1: USB disconnect, device number 3 [ 218.422202][T16110] ceph: No mds server is up or the cluster is laggy [ 218.519339][T16129] netlink: 'syz.5.2361': attribute type 3 has an invalid length. [ 218.522628][T16129] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2361'. [ 218.641836][T16135] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 218.706478][T16147] netlink: 'syz.4.2365': attribute type 1 has an invalid length. [ 218.720261][T16147] bond1: entered promiscuous mode [ 218.722342][T16147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.746116][T16147] bond1: (slave bridge1): making interface the new active one [ 218.758879][T16147] bridge1: entered promiscuous mode [ 218.762141][T16147] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 218.827542][T16159] xt_hashlimit: size too large, truncated to 1048576 [ 218.912316][ T40] audit: type=1400 audit(2000000064.990:7842): avc: denied { write } for pid=16170 comm="syz.5.2372" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 218.923187][ T40] audit: type=1400 audit(2000000064.990:7843): avc: denied { open } for pid=16170 comm="syz.5.2372" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 218.935848][ T40] audit: type=1400 audit(2000000064.990:7844): avc: denied { ioctl } for pid=16170 comm="syz.5.2372" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 219.166657][T16190] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 219.170558][T16190] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 219.274646][ T1031] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 219.447512][ T1031] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 219.451607][ T1031] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.465744][ T1031] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 219.469852][ T1031] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 219.473157][ T1031] usb 9-1: Manufacturer: syz [ 219.478620][ T1031] usb 9-1: config 0 descriptor?? [ 219.487129][ T63] Bluetooth: hci0: command tx timeout [ 219.545274][ T1031] rc_core: IR keymap rc-hauppauge not found [ 219.550317][ T1031] Registered IR keymap rc-empty [ 219.556518][ T1031] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 219.563088][ T1031] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input23 [ 219.691016][ T833] usb 9-1: USB disconnect, device number 3 [ 219.870868][T16229] usb usb7: usbfs: process 16229 (syz.2.2379) did not claim interface 0 before use [ 219.968303][T16237] netdevsim netdevsim2 ªªªªªª: renamed from netdevsim0 (while UP) [ 220.026512][T16234] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 220.235861][T16247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19216 sclass=netlink_route_socket pid=16247 comm=syz.5.2383 [ 220.300239][T16253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2385'. [ 220.311184][T16255] netlink: 'syz.5.2384': attribute type 1 has an invalid length. [ 220.338186][ T63] block nbd0: Receive control failed (result -107) [ 220.485476][ T40] kauditd_printk_skb: 99 callbacks suppressed [ 220.485491][ T40] audit: type=1400 audit(2000000066.570:7944): avc: denied { mount } for pid=16269 comm="syz.2.2388" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 220.505221][ T40] audit: type=1400 audit(2000000066.570:7945): avc: denied { read write } for pid=16266 comm="syz.5.2386" name="file0" dev="fuse" ino=16387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 220.519061][ T40] audit: type=1400 audit(2000000066.570:7946): avc: denied { open } for pid=16266 comm="syz.5.2386" path="/75/file0/file0" dev="fuse" ino=16387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 220.521278][T16273] block device autoloading is deprecated and will be removed. [ 220.532042][ T40] audit: type=1400 audit(2000000066.600:7947): avc: denied { unmount } for pid=15274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 220.551891][ T40] audit: type=1400 audit(2000000066.630:7948): avc: denied { unmount } for pid=14087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 220.604824][ T40] audit: type=1400 audit(2000000066.680:7949): avc: denied { append } for pid=16276 comm="syz.5.2390" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 220.617296][ T40] audit: type=1400 audit(2000000066.680:7950): avc: denied { open } for pid=16276 comm="syz.5.2390" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 220.628459][ T40] audit: type=1400 audit(2000000066.690:7951): avc: denied { write } for pid=16276 comm="syz.5.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 220.637201][ T40] audit: type=1400 audit(2000000066.710:7952): avc: denied { read } for pid=16278 comm="syz.4.2391" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 220.645798][ T40] audit: type=1400 audit(2000000066.710:7953): avc: denied { open } for pid=16278 comm="syz.4.2391" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 220.681362][T15828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.692362][T15828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 220.698122][T15828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 220.705049][T15828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 220.712922][T16283] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2393'. [ 220.763443][T16291] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2394'. [ 220.780717][T15828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.793030][T15828] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.800013][ T6108] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.802928][ T6108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.805501][T16291] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2394'. [ 220.824611][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 220.830102][ T6108] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.832782][ T6108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.922068][ T5935] udevd[5935]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 220.933215][ T5935] udevd[5935]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 220.978856][T16313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2399'. [ 220.999019][ T24] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 221.018127][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.028982][ T24] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 221.032210][ T24] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 221.037603][ T24] usb 7-1: Manufacturer: syz [ 221.040610][ T24] usb 7-1: config 0 descriptor?? [ 221.073417][T15828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.097189][T16329] bond0: Error: Cannot enslave bond to itself. [ 221.114650][ T24] rc_core: IR keymap rc-hauppauge not found [ 221.114671][ T24] Registered IR keymap rc-empty [ 221.115309][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 221.116164][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input24 [ 221.119525][T15828] veth0_vlan: entered promiscuous mode [ 221.134826][T15828] veth1_vlan: entered promiscuous mode [ 221.151494][T15828] veth0_macvtap: entered promiscuous mode [ 221.157881][T15828] veth1_macvtap: entered promiscuous mode [ 221.179197][T15828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.194243][T15828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.195047][T16334] SELinux: policydb magic number 0x69766564 does not match expected magic number 0xf97cff8c [ 221.203363][ T6109] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.203605][T16334] SELinux: failed to load policy [ 221.206594][ T6109] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.206653][ T6109] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.206722][ T6109] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.232054][T16333] SELinux: policydb magic number 0x69766564 does not match expected magic number 0xf97cff8c [ 221.237508][T16333] SELinux: failed to load policy [ 221.262486][ T24] usb 7-1: USB disconnect, device number 9 [ 221.290475][ T6080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.293295][ T6080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.321532][ T6109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.325022][ T6109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.330804][T16345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2404'. [ 221.425094][T16353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.564849][ T63] Bluetooth: hci0: command tx timeout [ 221.579124][T16364] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 222.404607][ T5998] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 222.554529][ T5998] usb 6-1: Using ep0 maxpacket: 8 [ 222.559397][ T5998] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 222.563596][ T5998] usb 6-1: config 179 has no interface number 0 [ 222.567512][ T5998] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 222.572857][ T5998] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 222.581534][ T5998] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 222.588113][ T5998] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 222.593635][ T5998] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 222.599683][T16436] MTD: Couldn't look up '/dev/sg0': -15 [ 222.600602][ T5998] usb 6-1: config 179 interface 65 has no altsetting 0 [ 222.602897][T16436] /dev/sg0: Can't lookup blockdev [ 222.610601][ T5998] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 222.610819][T16434] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 222.614855][ T5998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.655897][ T5998] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input26 [ 222.704875][ T5327] input input26: unable to receive magic message: -110 [ 222.724484][ T5327] input input26: unable to receive magic message: -32 [ 222.737648][ T5327] input input26: unable to receive magic message: -32 [ 222.747896][ T5327] input input26: unable to receive magic message: -32 [ 222.758171][ T5327] input input26: unable to receive magic message: -32 [ 222.762427][ T5327] input input26: unable to receive magic message: -32 [ 222.833750][T16406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2417'. [ 222.842882][T16406] fuse: Bad value for 'user_id' [ 222.844723][T16406] fuse: Bad value for 'user_id' [ 222.847784][T16406] Invalid source name [ 222.849240][T16406] UBIFS error (pid: 16406): cannot open "./file0", error -22 [ 222.853865][ T5998] usb 6-1: USB disconnect, device number 23 [ 222.856623][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 223.068756][T16449] vivid-000: kernel_thread() failed [ 223.644514][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 224.123746][T16492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2432'. [ 224.131142][T16492] vlan2: entered promiscuous mode [ 224.133120][T16492] gretap0: entered promiscuous mode [ 224.177565][T16503] FAULT_INJECTION: forcing a failure. [ 224.177565][T16503] name failslab, interval 1, probability 0, space 0, times 0 [ 224.182661][T16503] CPU: 3 UID: 0 PID: 16503 Comm: syz.4.2436 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.182682][T16503] Tainted: [L]=SOFTLOCKUP [ 224.182686][T16503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.182693][T16503] Call Trace: [ 224.182710][T16503] [ 224.182715][T16503] dump_stack_lvl+0x100/0x190 [ 224.182747][T16503] should_fail_ex.cold+0x5/0xa [ 224.182787][T16503] should_failslab+0xc2/0x120 [ 224.182800][T16503] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 224.182818][T16503] ? do_getname+0x35/0x390 [ 224.182833][T16503] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.182862][T16503] do_getname+0x35/0x390 [ 224.182880][T16503] user_path_at+0x26/0x60 [ 224.182892][T16503] __x64_sys_mount+0x1fb/0x310 [ 224.182908][T16503] ? __pfx___x64_sys_mount+0x10/0x10 [ 224.182928][T16503] do_syscall_64+0x106/0xf80 [ 224.182944][T16503] ? clear_bhb_loop+0x40/0x90 [ 224.182959][T16503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.182972][T16503] RIP: 0033:0x7fe23a79c799 [ 224.182983][T16503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.182995][T16503] RSP: 002b:00007fe23b5c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 224.183007][T16503] RAX: ffffffffffffffda RBX: 00007fe23aa15fa0 RCX: 00007fe23a79c799 [ 224.183015][T16503] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 224.183022][T16503] RBP: 00007fe23b5c5090 R08: 0000000000000000 R09: 0000000000000000 [ 224.183029][T16503] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 224.183036][T16503] R13: 00007fe23aa16038 R14: 00007fe23aa15fa0 R15: 00007ffe9ca006d8 [ 224.183056][T16503] [ 224.467470][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2439'. [ 224.473184][T16523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16523 comm=syz.1.2439 [ 224.499330][T16527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16527 comm=syz.4.2440 [ 224.794997][ T34] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 224.946023][ T34] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x1 has invalid maxpacket 252, setting to 64 [ 224.950090][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 224.969055][ T34] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 224.972456][ T34] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 224.984480][ T34] usb 10-1: Product: syz [ 224.986207][ T34] usb 10-1: Manufacturer: syz [ 224.988106][ T34] usb 10-1: SerialNumber: syz [ 224.991323][ T34] usb 10-1: config 0 descriptor?? [ 225.006598][ T34] usb 10-1: selecting invalid altsetting 0 [ 225.213948][T16534] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 225.228290][ T832] usb 10-1: USB disconnect, device number 4 [ 225.357964][T16560] kvm: pic: non byte write [ 225.389125][T16571] FAULT_INJECTION: forcing a failure. [ 225.389125][T16571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.395136][T16571] CPU: 2 UID: 0 PID: 16571 Comm: syz.4.2446 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.395165][T16571] Tainted: [L]=SOFTLOCKUP [ 225.395171][T16571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.395182][T16571] Call Trace: [ 225.395188][T16571] [ 225.395195][T16571] dump_stack_lvl+0x100/0x190 [ 225.395230][T16571] should_fail_ex.cold+0x5/0xa [ 225.395259][T16571] strncpy_from_user+0x3b/0x2d0 [ 225.395306][T16571] do_getname+0x78/0x390 [ 225.395332][T16571] user_path_at+0x26/0x60 [ 225.395349][T16571] __x64_sys_mount+0x1fb/0x310 [ 225.395372][T16571] ? __pfx___x64_sys_mount+0x10/0x10 [ 225.395402][T16571] do_syscall_64+0x106/0xf80 [ 225.395424][T16571] ? clear_bhb_loop+0x40/0x90 [ 225.395447][T16571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.395464][T16571] RIP: 0033:0x7fe23a79c799 [ 225.395478][T16571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.395494][T16571] RSP: 002b:00007fe23b5c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 225.395511][T16571] RAX: ffffffffffffffda RBX: 00007fe23aa15fa0 RCX: 00007fe23a79c799 [ 225.395523][T16571] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 225.395534][T16571] RBP: 00007fe23b5c5090 R08: 0000000000000000 R09: 0000000000000000 [ 225.395544][T16571] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 225.395554][T16571] R13: 00007fe23aa16038 R14: 00007fe23aa15fa0 R15: 00007ffe9ca006d8 [ 225.395578][T16571] [ 225.522544][ T40] kauditd_printk_skb: 71 callbacks suppressed [ 225.522562][ T40] audit: type=1400 audit(2000000071.600:8025): avc: denied { setopt } for pid=16578 comm="syz.4.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.536676][ T40] audit: type=1400 audit(2000000071.620:8026): avc: denied { accept } for pid=16578 comm="syz.4.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 225.543773][ T40] audit: type=1400 audit(2000000071.620:8027): avc: denied { read } for pid=16578 comm="syz.4.2447" path="socket:[72089]" dev="sockfs" ino=72089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 225.595109][ T40] audit: type=1400 audit(2000000071.680:8028): avc: denied { write } for pid=16578 comm="syz.4.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 225.603306][T16580] comedi comedi4: bad chanlist[0]=0x0000000d chan=13 range length=2 [ 225.654552][ T832] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 225.792718][ T40] audit: type=1400 audit(2000000071.870:8029): avc: denied { remove_name } for pid=16599 comm="syz.4.2453" name="file0" dev="9p" ino=71827757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.801144][ T40] audit: type=1400 audit(2000000071.870:8030): avc: denied { unlink } for pid=16599 comm="syz.4.2453" name="file0" dev="9p" ino=71827757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 225.805706][ T832] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 225.811686][ T40] audit: type=1400 audit(2000000071.880:8031): avc: denied { add_name } for pid=16599 comm="syz.4.2453" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.824593][ T832] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.824709][ T40] audit: type=1400 audit(2000000071.880:8032): avc: denied { create } for pid=16599 comm="syz.4.2453" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 225.828275][ T832] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.836584][ T40] audit: type=1400 audit(2000000071.880:8033): avc: denied { associate } for pid=16599 comm="syz.4.2453" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 225.842134][ T832] usb 10-1: config 0 interface 0 has no altsetting 0 [ 225.852644][ T832] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.857654][ T832] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.862308][ T832] usb 10-1: config 0 interface 0 has no altsetting 0 [ 225.868137][ T832] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.872098][ T832] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.876794][ T832] usb 10-1: config 0 interface 0 has no altsetting 0 [ 225.880966][ T832] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.885155][ T832] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.889760][ T832] usb 10-1: config 0 interface 0 has no altsetting 0 [ 225.892777][ T832] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.897177][ T832] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.901489][ T832] usb 10-1: config 0 interface 0 has no altsetting 0 [ 225.904550][ T832] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.908166][ T832] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.912572][ T832] usb 10-1: config 0 interface 0 has no altsetting 0 [ 225.918690][ T832] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.921560][ T832] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.925618][ T832] usb 10-1: config 0 interface 0 has no altsetting 0 [ 225.928887][ T832] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.931906][ T832] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.935867][ T832] usb 10-1: config 0 interface 0 has no altsetting 0 [ 225.941059][ T832] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 225.944309][ T832] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 225.947303][ T832] usb 10-1: Product: syz [ 225.948709][ T832] usb 10-1: Manufacturer: syz [ 225.950235][ T832] usb 10-1: SerialNumber: syz [ 225.953143][ T832] usb 10-1: config 0 descriptor?? [ 225.959460][ T832] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 225.975481][T11893] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 226.164868][T11893] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 226.168212][T11893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.171030][T11893] usb 6-1: Product: syz [ 226.172452][T11893] usb 6-1: Manufacturer: syz [ 226.174070][T11893] usb 6-1: SerialNumber: syz [ 226.176623][T16564] program syz.5.2445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.180561][ T40] audit: type=1400 audit(2000000072.260:8034): avc: denied { bind } for pid=16563 comm="syz.5.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 226.214039][T16623] FAULT_INJECTION: forcing a failure. [ 226.214039][T16623] name failslab, interval 1, probability 0, space 0, times 0 [ 226.218932][T16623] CPU: 3 UID: 0 PID: 16623 Comm: syz.4.2456 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.218951][T16623] Tainted: [L]=SOFTLOCKUP [ 226.218955][T16623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.218961][T16623] Call Trace: [ 226.218965][T16623] [ 226.218969][T16623] dump_stack_lvl+0x100/0x190 [ 226.218992][T16623] should_fail_ex.cold+0x5/0xa [ 226.219007][T16623] should_failslab+0xc2/0x120 [ 226.219019][T16623] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 226.219035][T16623] ? __d_alloc+0x34/0xa80 [ 226.219048][T16623] ? __lock_acquire+0x4a5/0x2630 [ 226.219061][T16623] __d_alloc+0x34/0xa80 [ 226.219076][T16623] d_alloc_parallel+0x111/0x14e0 [ 226.219094][T16623] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 226.219106][T16623] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 226.219119][T16623] ? __pfx_d_alloc_parallel+0x10/0x10 [ 226.219145][T16623] ? lockdep_init_map_type+0x5c/0x250 [ 226.219156][T16623] ? lockdep_init_map_type+0x5c/0x250 [ 226.219170][T16623] __lookup_slow+0x193/0x460 [ 226.219186][T16623] ? __pfx___lookup_slow+0x10/0x10 [ 226.219226][T16623] lookup_slow+0x50/0x70 [ 226.219243][T16623] path_lookupat+0x5e8/0xc40 [ 226.219263][T16623] filename_lookup+0x202/0x590 [ 226.219275][T16623] ? __pfx_filename_lookup+0x10/0x10 [ 226.219297][T16623] ? strncpy_from_user+0x19d/0x2d0 [ 226.219319][T16623] user_path_at+0x3c/0x60 [ 226.219330][T16623] __x64_sys_mount+0x1fb/0x310 [ 226.219344][T16623] ? __pfx___x64_sys_mount+0x10/0x10 [ 226.219363][T16623] do_syscall_64+0x106/0xf80 [ 226.219377][T16623] ? clear_bhb_loop+0x40/0x90 [ 226.219391][T16623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.219402][T16623] RIP: 0033:0x7fe23a79c799 [ 226.219412][T16623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.219423][T16623] RSP: 002b:00007fe23b5c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 226.219434][T16623] RAX: ffffffffffffffda RBX: 00007fe23aa15fa0 RCX: 00007fe23a79c799 [ 226.219441][T16623] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 226.219447][T16623] RBP: 00007fe23b5c5090 R08: 0000000000000000 R09: 0000000000000000 [ 226.219453][T16623] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 226.219460][T16623] R13: 00007fe23aa16038 R14: 00007fe23aa15fa0 R15: 00007ffe9ca006d8 [ 226.219474][T16623] [ 226.318943][T16629] geneve2: entered promiscuous mode [ 226.320876][T16629] geneve2: entered allmulticast mode [ 226.340626][ T6080] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.343526][ T6080] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.346541][T16564] nbd1: detected capacity change from 0 to 549680316416 [ 226.349497][T16563] delete_channel: no stack [ 226.351811][ T63] block nbd1: Receive control failed (result -32) [ 226.352470][ T6080] netdevsim netdevsim0 eth4: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.357183][ T6080] netdevsim netdevsim0 eth5: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.359812][ T6080] netdevsim netdevsim3 eth6: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.362521][ T6080] netdevsim netdevsim3 eth7: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.366459][ T6080] netdevsim netdevsim3 eth8: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.369633][ T6080] netdevsim netdevsim3 eth9: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.372594][ T6080] netdevsim netdevsim5 eth10: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.375574][ T6080] netdevsim netdevsim5 eth11: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.378229][ T6080] netdevsim netdevsim5 eth12: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.380955][ T6080] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.382387][T10118] block nbd1: Dead connection, failed to find a fallback [ 226.388788][T10118] block nbd1: shutting down sockets [ 226.392747][T10118] blk_print_req_error: 206 callbacks suppressed [ 226.392763][T10118] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 226.403014][T10118] buffer_io_error: 223 callbacks suppressed [ 226.403038][T10118] Buffer I/O error on dev nbd1, logical block 0, async page read [ 226.409431][T10118] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 226.413577][T10118] Buffer I/O error on dev nbd1, logical block 0, async page read [ 226.417493][T10118] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 226.421928][T10118] Buffer I/O error on dev nbd1, logical block 0, async page read [ 226.422440][T16596] SELinux: truncated policydb string identifier [ 226.426026][T10118] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 226.429016][T16596] SELinux: failed to load policy [ 226.430378][T10118] Buffer I/O error on dev nbd1, logical block 0, async page read [ 226.435113][T10118] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 226.438026][T16596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2452'. [ 226.438262][T10118] Buffer I/O error on dev nbd1, logical block 0, async page read [ 226.443742][T10118] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 226.447316][T10118] Buffer I/O error on dev nbd1, logical block 0, async page read [ 226.449899][T10118] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 226.453071][T10118] Buffer I/O error on dev nbd1, logical block 0, async page read [ 226.456082][T10118] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 226.459178][T10118] Buffer I/O error on dev nbd1, logical block 0, async page read [ 226.461978][T10118] ldm_validate_partition_table(): Disk read failed. [ 226.465173][T10118] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 226.469268][T10118] Buffer I/O error on dev nbd1, logical block 0, async page read [ 226.472659][T10118] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 226.477073][T10118] Buffer I/O error on dev nbd1, logical block 0, async page read [ 226.480856][T10118] Dev nbd1: unable to read RDB block 0 [ 226.483619][T10118] nbd1: unable to read partition table [ 226.490379][T10118] ldm_validate_partition_table(): Disk read failed. [ 226.493504][T10118] Dev nbd1: unable to read RDB block 0 [ 226.496646][T10118] nbd1: unable to read partition table [ 226.598292][T16646] trusted_key: encrypted_key: insufficient parameters specified [ 226.719789][T11893] usb 6-1: unit 4: unexpected type 0x0d [ 226.725484][T11893] usb 6-1: unit 14 not found! [ 226.751019][T11893] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 226.764104][T11893] usb 6-1: unit 4: unexpected type 0x0d [ 226.767125][T11893] usb 6-1: unit 14 not found! [ 226.773132][T11893] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 226.781817][T11893] usb 6-1: unit 4: unexpected type 0x0d [ 226.785523][T11893] usb 6-1: unit 14 not found! [ 226.847591][T11893] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 226.855148][T11893] usb 6-1: USB disconnect, device number 24 [ 226.879025][T10115] udevd[10115]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.203995][T16679] xt_socket: unknown flags 0xc [ 227.320930][T16679] syz.2.2465 (16679) used greatest stack depth: 18904 bytes left [ 227.336540][T16685] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 227.407137][ T34] usb 10-1: USB disconnect, device number 5 [ 227.410195][ T34] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 227.509228][T16708] FAT-fs (sr0): bogus number of reserved sectors [ 227.511575][T16708] FAT-fs (sr0): Can't find a valid FAT filesystem [ 227.818565][T16745] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 227.868690][T16753] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2480'. [ 227.903555][T16753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.967386][T16753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.988990][T16753] bond0 (unregistering): Released all slaves [ 228.053162][ T832] syz1: Port: 1 Link DOWN [ 228.078457][T16766] ipvlan2: entered allmulticast mode [ 228.080218][T16766] batadv_slave_1: entered allmulticast mode [ 228.192333][T16775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2486'. [ 228.197832][T16777] Invalid source name [ 228.199549][T16777] UBIFS error (pid: 16777): cannot open "/dev/sg0", error -22 [ 228.450748][T16795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=16795 comm=syz.1.2493 [ 228.458160][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2493'. [ 228.512398][T16799] FAULT_INJECTION: forcing a failure. [ 228.512398][T16799] name failslab, interval 1, probability 0, space 0, times 0 [ 228.519421][T16799] CPU: 3 UID: 0 PID: 16799 Comm: syz.1.2494 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.519441][T16799] Tainted: [L]=SOFTLOCKUP [ 228.519445][T16799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.519452][T16799] Call Trace: [ 228.519456][T16799] [ 228.519460][T16799] dump_stack_lvl+0x100/0x190 [ 228.519483][T16799] should_fail_ex.cold+0x5/0xa [ 228.519498][T16799] ? afs_alloc_vlserver_list+0x24/0xa0 [ 228.519511][T16799] should_failslab+0xc2/0x120 [ 228.519523][T16799] __kmalloc_noprof+0xe0/0x850 [ 228.519538][T16799] ? lockdep_init_map_type+0x5c/0x250 [ 228.519553][T16799] afs_alloc_vlserver_list+0x24/0xa0 [ 228.519565][T16799] afs_lookup_cell+0x15fa/0x1b10 [ 228.519583][T16799] ? __pfx_afs_lookup_cell+0x10/0x10 [ 228.519596][T16799] ? find_held_lock+0x2b/0x80 [ 228.519611][T16799] ? net_generic+0xea/0x2a0 [ 228.519621][T16799] ? net_generic+0xea/0x2a0 [ 228.519635][T16799] afs_dynroot_lookup+0x2e2/0xa80 [ 228.519646][T16799] ? __d_lookup_rcu+0x4c6/0x500 [ 228.519664][T16799] ? __pfx_afs_dynroot_lookup+0x10/0x10 [ 228.519676][T16799] ? lockdep_init_map_type+0x5c/0x250 [ 228.519688][T16799] ? lockdep_init_map_type+0x5c/0x250 [ 228.519701][T16799] __lookup_slow+0x251/0x460 [ 228.519718][T16799] ? __pfx___lookup_slow+0x10/0x10 [ 228.519748][T16799] lookup_slow+0x50/0x70 [ 228.519763][T16799] path_lookupat+0x5e8/0xc40 [ 228.519783][T16799] filename_lookup+0x202/0x590 [ 228.519796][T16799] ? __pfx_filename_lookup+0x10/0x10 [ 228.519817][T16799] ? strncpy_from_user+0x19d/0x2d0 [ 228.519840][T16799] user_path_at+0x3c/0x60 [ 228.519852][T16799] __x64_sys_mount+0x1fb/0x310 [ 228.519869][T16799] ? __pfx___x64_sys_mount+0x10/0x10 [ 228.519890][T16799] do_syscall_64+0x106/0xf80 [ 228.519907][T16799] ? clear_bhb_loop+0x40/0x90 [ 228.519922][T16799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.519935][T16799] RIP: 0033:0x7f50b859c799 [ 228.519946][T16799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.519958][T16799] RSP: 002b:00007f50b93fb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 228.519971][T16799] RAX: ffffffffffffffda RBX: 00007f50b8815fa0 RCX: 00007f50b859c799 [ 228.519979][T16799] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 228.519986][T16799] RBP: 00007f50b93fb090 R08: 0000000000000000 R09: 0000000000000000 [ 228.519993][T16799] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 228.520000][T16799] R13: 00007f50b8816038 R14: 00007f50b8815fa0 R15: 00007ffd39291018 [ 228.520016][T16799] [ 228.649810][T16805] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 228.652100][T16805] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.656163][T16805] vhci_hcd vhci_hcd.0: Device attached [ 228.662390][T16805] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 228.664576][T16805] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 228.679603][T16805] vhci_hcd vhci_hcd.0: Device attached [ 228.682159][T16806] vhci_hcd: connection closed [ 228.687047][ T6089] vhci_hcd vhci_hcd.1: stop threads [ 228.690271][ T6089] vhci_hcd vhci_hcd.1: release socket [ 228.692018][ T6089] vhci_hcd vhci_hcd.1: disconnect device [ 228.695933][T16811] vhci_hcd: connection closed [ 228.699980][ T6109] vhci_hcd vhci_hcd.1: stop threads [ 228.706098][ T6109] vhci_hcd vhci_hcd.1: release socket [ 228.708150][ T6109] vhci_hcd vhci_hcd.1: disconnect device [ 228.949040][T16833] 9pnet_fd: p9_fd_create_unix (16833): problem connecting socket: ./file0: -111 [ 228.979673][T16836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2500'. [ 229.023233][T16836] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16836 comm=syz.4.2500 [ 229.283575][T16857] FAULT_INJECTION: forcing a failure. [ 229.283575][T16857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.286806][T16853] kvm: pic: non byte read [ 229.290602][T16853] kvm: pic: non byte read [ 229.292013][T16857] CPU: 1 UID: 0 PID: 16857 Comm: syz.1.2504 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.292039][T16857] Tainted: [L]=SOFTLOCKUP [ 229.292045][T16857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.292052][T16857] Call Trace: [ 229.292056][T16857] [ 229.292060][T16857] dump_stack_lvl+0x100/0x190 [ 229.292082][T16857] should_fail_ex.cold+0x5/0xa [ 229.292097][T16857] _copy_to_user+0x32/0xd0 [ 229.292110][T16857] simple_read_from_buffer+0xcb/0x170 [ 229.292130][T16857] proc_fail_nth_read+0x1af/0x230 [ 229.292146][T16857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.292162][T16857] ? rw_verify_area+0xce/0x6d0 [ 229.292184][T16857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.292205][T16857] vfs_read+0x1e4/0xb30 [ 229.292238][T16857] ? __pfx_vfs_read+0x10/0x10 [ 229.292269][T16857] ? __fget_files+0x215/0x3d0 [ 229.292284][T16857] ? __fget_files+0x21f/0x3d0 [ 229.292303][T16857] ksys_read+0x12a/0x250 [ 229.292326][T16857] ? __pfx_ksys_read+0x10/0x10 [ 229.292357][T16857] do_syscall_64+0x106/0xf80 [ 229.292378][T16857] ? clear_bhb_loop+0x40/0x90 [ 229.292398][T16857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.292415][T16857] RIP: 0033:0x7f50b855cfce [ 229.292424][T16857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 229.292435][T16857] RSP: 002b:00007f50b93fafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 229.292446][T16857] RAX: ffffffffffffffda RBX: 00007f50b93fb6c0 RCX: 00007f50b855cfce [ 229.292453][T16857] RDX: 000000000000000f RSI: 00007f50b93fb0a0 RDI: 0000000000000004 [ 229.292459][T16857] RBP: 00007f50b93fb090 R08: 0000000000000000 R09: 0000000000000000 [ 229.292466][T16857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.292472][T16857] R13: 00007f50b8816038 R14: 00007f50b8815fa0 R15: 00007ffd39291018 [ 229.292487][T16857] [ 229.353816][T16853] kvm: pic: non byte read [ 229.355717][T16853] kvm: pic: non byte read [ 229.357217][T16853] kvm: pic: non byte read [ 229.358623][T16853] kvm: pic: non byte read [ 229.360060][T16853] kvm: pic: non byte read [ 229.361487][T16853] kvm: pic: non byte read [ 229.362899][T16853] kvm: pic: non byte read [ 229.365010][T16853] kvm: pic: non byte read [ 229.410513][T16867] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 229.417742][T16867] xt_hashlimit: max too large, truncated to 1048576 [ 229.427106][T16867] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 229.536514][T16876] Invalid source name [ 229.543047][T16876] UBIFS error (pid: 16876): cannot open "/dev/sg0", error -22 [ 229.685077][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2514'. [ 229.693655][T16894] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.990962][T16937] netlink: 'syz.2.2517': attribute type 18 has an invalid length. [ 229.994481][T16937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2517'. [ 230.019840][ T6109] netdevsim netdevsim2 ªªªªªª: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.022571][T16937] netlink: 'syz.2.2517': attribute type 18 has an invalid length. [ 230.022586][T16937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2517'. [ 230.039352][ T6109] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.044507][ T6109] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.048883][ T6109] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.142658][T16948] Invalid source name [ 230.146916][T16948] UBIFS error (pid: 16948): cannot open "/dev/sg0", error -22 [ 230.193384][T16952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2521'. [ 231.018938][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 231.018951][ T40] audit: type=1400 audit(2000000077.100:8082): avc: denied { wake_alarm } for pid=16972 comm="syz.1.2528" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 231.074525][ T2307] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 231.119063][ T40] audit: type=1400 audit(2000000077.200:8083): avc: denied { ioctl } for pid=16977 comm="syz.5.2529" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 231.128476][ T40] audit: type=1400 audit(2000000077.200:8084): avc: denied { set_context_mgr } for pid=16977 comm="syz.5.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 231.168282][ T40] audit: type=1400 audit(2000000077.250:8085): avc: denied { getopt } for pid=16981 comm="syz.1.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 231.181325][T16984] binder: BINDER_SET_CONTEXT_MGR already set [ 231.183876][T16984] binder: 16977:16984 ioctl 4018620d 200000000040 returned -16 [ 231.234873][ T2307] usb 9-1: Using ep0 maxpacket: 8 [ 231.238459][ T2307] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 231.241204][ T2307] usb 9-1: config 0 has no interface number 0 [ 231.243191][ T2307] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.243303][T16989] tipc: Started in network mode [ 231.247407][ T2307] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 231.248790][T16989] tipc: Node identity 0900000000000000000000000000008, cluster identity 4711 [ 231.252376][ T2307] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 17784, setting to 1024 [ 231.252398][ T2307] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 231.253961][ T2307] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 231.266883][ T40] audit: type=1400 audit(2000000077.340:8086): avc: denied { mount } for pid=16988 comm="syz.2.2531" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 231.274889][ T2307] usb 9-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 231.278623][ T2307] usb 9-1: Product: syz [ 231.282686][ T2307] usb 9-1: config 0 descriptor?? [ 231.288148][T16971] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 231.295549][ T2307] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 231.341532][ T40] audit: type=1400 audit(2000000077.420:8087): avc: denied { read write } for pid=16994 comm="syz.2.2533" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 231.350951][ T40] audit: type=1400 audit(2000000077.420:8088): avc: denied { open } for pid=16994 comm="syz.2.2533" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 231.416537][ T5998] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 231.428418][ T40] audit: type=1400 audit(2000000077.510:8089): avc: denied { read } for pid=17002 comm="syz.2.2535" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 231.436825][ T40] audit: type=1400 audit(2000000077.510:8090): avc: denied { open } for pid=17002 comm="syz.2.2535" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 231.493818][ T40] audit: type=1400 audit(2000000077.570:8091): avc: denied { open } for pid=16970 comm="syz.4.2527" path="/dev/ptyqc" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 231.495414][T16971] ldusb 9-1:0.55: Write buffer overflow, 2147479232 bytes dropped [ 231.564598][ T5998] usb 6-1: Using ep0 maxpacket: 8 [ 231.568730][ T5998] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 231.572410][ T5998] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.576762][ T5998] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 231.580984][ T5998] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.585354][ T5998] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.591077][ T5998] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 231.595259][ T5998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.701225][T17018] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2538'. [ 231.705393][T17018] netlink: 4376 bytes leftover after parsing attributes in process `syz.2.2538'. [ 231.710605][T17018] netlink: 4376 bytes leftover after parsing attributes in process `syz.2.2538'. [ 231.758835][T17025] netlink: 'syz.2.2539': attribute type 1 has an invalid length. [ 231.783894][T17025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.808264][ T5998] usb 6-1: usb_control_msg returned -32 [ 231.810514][ T5998] usbtmc 6-1:16.0: can't read capabilities [ 231.827699][T15867] usb 6-1: USB disconnect, device number 25 [ 231.946889][T16978] binder: 16977:16978 ioctl c0306201 200000000180 returned -14 [ 232.020146][T17038] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 232.030054][ T6089] Bluetooth: hci2: Frame reassembly failed (-84) [ 232.174583][T15867] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 232.189324][T17048] nft_compat: unsupported protocol 0 [ 232.336534][T15867] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 232.339573][T15867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.343618][T15867] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 232.348600][T15867] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 232.351562][T15867] usb 6-1: Manufacturer: syz [ 232.357162][T15867] usb 6-1: config 0 descriptor?? [ 232.404544][T15867] rc_core: IR keymap rc-hauppauge not found [ 232.406864][T15867] Registered IR keymap rc-empty [ 232.409233][T15867] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 232.413980][T15867] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input28 [ 232.571982][ T6007] usb 6-1: USB disconnect, device number 26 [ 232.634001][T17075] FAULT_INJECTION: forcing a failure. [ 232.634001][T17075] name failslab, interval 1, probability 0, space 0, times 0 [ 232.638553][T17075] CPU: 0 UID: 0 PID: 17075 Comm: syz.5.2546 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.638575][T17075] Tainted: [L]=SOFTLOCKUP [ 232.638579][T17075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.638585][T17075] Call Trace: [ 232.638589][T17075] [ 232.638593][T17075] dump_stack_lvl+0x100/0x190 [ 232.638616][T17075] should_fail_ex.cold+0x5/0xa [ 232.638630][T17075] ? tomoyo_realpath_from_path+0xb6/0x690 [ 232.638646][T17075] should_failslab+0xc2/0x120 [ 232.638671][T17075] __kmalloc_noprof+0xe0/0x850 [ 232.638691][T17075] tomoyo_realpath_from_path+0xb6/0x690 [ 232.638730][T17075] tomoyo_path_number_perm+0x23c/0x580 [ 232.638744][T17075] ? tomoyo_path_number_perm+0x22e/0x580 [ 232.638759][T17075] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 232.638787][T17075] ? find_held_lock+0x2b/0x80 [ 232.638801][T17075] ? __fget_files+0x215/0x3d0 [ 232.638812][T17075] ? hook_file_ioctl_common+0x146/0x410 [ 232.638834][T17075] ? __fget_files+0x21f/0x3d0 [ 232.638847][T17075] security_file_ioctl+0xd3/0x230 [ 232.638863][T17075] __x64_sys_ioctl+0xb7/0x210 [ 232.638881][T17075] do_syscall_64+0x106/0xf80 [ 232.638895][T17075] ? clear_bhb_loop+0x40/0x90 [ 232.638909][T17075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.638920][T17075] RIP: 0033:0x7fa41cf9c799 [ 232.638930][T17075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.638940][T17075] RSP: 002b:00007fa41dea8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.638951][T17075] RAX: ffffffffffffffda RBX: 00007fa41d215fa0 RCX: 00007fa41cf9c799 [ 232.638958][T17075] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 232.638964][T17075] RBP: 00007fa41dea8090 R08: 0000000000000000 R09: 0000000000000000 [ 232.638970][T17075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.638976][T17075] R13: 00007fa41d216038 R14: 00007fa41d215fa0 R15: 00007fffc31257d8 [ 232.638991][T17075] [ 232.639046][T17075] ERROR: Out of memory at tomoyo_realpath_from_path. [ 233.120088][T17086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17086 comm=syz.1.2547 [ 233.139943][T17086] netlink: 'syz.1.2547': attribute type 1 has an invalid length. [ 233.169036][T17086] bond1: (slave bridge1): making interface the new active one [ 233.171846][T17086] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 233.566278][ T1031] usb 9-1: USB disconnect, device number 4 [ 233.570753][ T1031] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 233.916706][T15867] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 234.044623][ T63] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 234.044655][ T5944] Bluetooth: hci2: command 0x1003 tx timeout [ 234.105067][T15867] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 234.114876][T15867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.122476][T15867] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 234.126568][T15867] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 234.129279][T15867] usb 6-1: Manufacturer: syz [ 234.147610][T15867] usb 6-1: config 0 descriptor?? [ 234.147749][T17147] xt_NFQUEUE: number of total queues is 0 [ 234.182804][T17150] tmpfs: Unknown parameter 'grpqyS%imit' [ 234.224761][T15867] rc_core: IR keymap rc-hauppauge not found [ 234.227011][T15867] Registered IR keymap rc-empty [ 234.233214][T15867] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 234.237524][T17150] syzkaller0: entered promiscuous mode [ 234.239634][T17150] syzkaller0: entered allmulticast mode [ 234.245900][T15867] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input29 [ 234.359697][ T2307] usb 6-1: USB disconnect, device number 27 [ 236.157740][T17171] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 236.158481][T17175] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2562'. [ 236.199932][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 236.199946][ T40] audit: type=1400 audit(2000000082.280:8104): avc: denied { getopt } for pid=17180 comm="syz.1.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.294035][T17201] Cannot find add_set index 65532 as target [ 236.337661][T17207] program syz.5.2569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.405012][T17213] FAULT_INJECTION: forcing a failure. [ 236.405012][T17213] name failslab, interval 1, probability 0, space 0, times 0 [ 236.409826][T17213] CPU: 2 UID: 0 PID: 17213 Comm: syz.4.2570 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.409846][T17213] Tainted: [L]=SOFTLOCKUP [ 236.409850][T17213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.409857][T17213] Call Trace: [ 236.409862][T17213] [ 236.409867][T17213] dump_stack_lvl+0x100/0x190 [ 236.409905][T17213] should_fail_ex.cold+0x5/0xa [ 236.409921][T17213] ? tomoyo_encode2+0xfb/0x3c0 [ 236.409946][T17213] should_failslab+0xc2/0x120 [ 236.409958][T17213] __kmalloc_noprof+0xe0/0x850 [ 236.409978][T17213] tomoyo_encode2+0xfb/0x3c0 [ 236.409996][T17213] tomoyo_encode+0x29/0x50 [ 236.410011][T17213] tomoyo_realpath_from_path+0x18c/0x690 [ 236.410031][T17213] tomoyo_path_number_perm+0x23c/0x580 [ 236.410045][T17213] ? tomoyo_path_number_perm+0x22e/0x580 [ 236.410060][T17213] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 236.410087][T17213] ? find_held_lock+0x2b/0x80 [ 236.410103][T17213] ? __fget_files+0x215/0x3d0 [ 236.410114][T17213] ? hook_file_ioctl_common+0x146/0x410 [ 236.410135][T17213] ? __fget_files+0x21f/0x3d0 [ 236.410149][T17213] security_file_ioctl+0xd3/0x230 [ 236.410166][T17213] __x64_sys_ioctl+0xb7/0x210 [ 236.410184][T17213] do_syscall_64+0x106/0xf80 [ 236.410207][T17213] ? clear_bhb_loop+0x40/0x90 [ 236.410221][T17213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.410233][T17213] RIP: 0033:0x7fe23a79c799 [ 236.410244][T17213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.410259][T17213] RSP: 002b:00007fe23b5c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.410271][T17213] RAX: ffffffffffffffda RBX: 00007fe23aa15fa0 RCX: 00007fe23a79c799 [ 236.410278][T17213] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 236.410285][T17213] RBP: 00007fe23b5c5090 R08: 0000000000000000 R09: 0000000000000000 [ 236.410291][T17213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.410298][T17213] R13: 00007fe23aa16038 R14: 00007fe23aa15fa0 R15: 00007ffe9ca006d8 [ 236.410312][T17213] [ 236.410325][T17213] ERROR: Out of memory at tomoyo_realpath_from_path. [ 236.589781][ T40] audit: type=1400 audit(2000000082.670:8105): avc: denied { append } for pid=17235 comm="syz.2.2575" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 236.624624][ T2307] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 236.643152][ T40] audit: type=1400 audit(2000000082.720:8106): avc: denied { setopt } for pid=17235 comm="syz.2.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 236.650981][T17239] input: syz0 as /devices/virtual/input/input30 [ 236.778231][ T2307] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 236.781207][ T2307] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.785929][ T2307] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 236.789203][ T2307] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 236.792125][ T2307] usb 10-1: Manufacturer: syz [ 236.795558][ T2307] usb 10-1: config 0 descriptor?? [ 236.844726][ T2307] rc_core: IR keymap rc-hauppauge not found [ 236.847020][ T2307] Registered IR keymap rc-empty [ 236.855142][ T2307] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 236.865541][ T2307] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input31 [ 237.003067][ T2307] usb 10-1: USB disconnect, device number 6 [ 237.491339][T17269] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2576'. [ 237.579577][ T40] audit: type=1400 audit(2000000083.660:8107): avc: denied { ioctl } for pid=17274 comm="syz.5.2578" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 237.594906][T17276] fuse: Unknown parameter 'rootmde' [ 237.706076][T17285] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2580'. [ 237.715571][ T40] audit: type=1400 audit(2000000083.800:8108): avc: denied { read write } for pid=17279 comm="syz.5.2580" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 237.739295][ T40] audit: type=1400 audit(2000000083.800:8109): avc: denied { open } for pid=17279 comm="syz.5.2580" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 237.775046][ T40] audit: type=1400 audit(2000000083.850:8110): avc: denied { write } for pid=17279 comm="syz.5.2580" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 237.808851][T17293] Bluetooth: MGMT ver 1.23 [ 237.827865][ T40] audit: type=1400 audit(2000000083.910:8111): avc: denied { ioctl } for pid=17279 comm="syz.5.2580" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0xaebc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 237.834277][T17293] mkiss: ax0: crc mode is auto. [ 237.842328][T17293] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.853514][ T40] audit: type=1400 audit(2000000083.930:8112): avc: denied { lock } for pid=17292 comm="syz.2.2581" path="socket:[77908]" dev="sockfs" ino=77908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 237.999909][T17301] netlink: 'syz.2.2582': attribute type 21 has an invalid length. [ 238.002889][T17301] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2582'. [ 238.012452][T17301] netlink: 'syz.2.2582': attribute type 21 has an invalid length. [ 238.020301][T17301] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2582'. [ 238.029111][T17301] netlink: 'syz.2.2582': attribute type 21 has an invalid length. [ 238.031960][T17302] netlink: 'syz.2.2582': attribute type 21 has an invalid length. [ 238.037322][T17301] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2582'. [ 238.040483][T17302] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2582'. [ 238.121804][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2584'. [ 238.129415][T17314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2584'. [ 238.808827][ T40] audit: type=1400 audit(2000000084.890:8113): avc: denied { read write } for pid=17352 comm="syz.5.2591" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 238.839544][T17355] No control pipe specified [ 239.208729][ T5947] block nbd5: Receive control failed (result -32) [ 239.208772][ T5944] block nbd5: Receive control failed (result -32) [ 239.244614][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout [ 239.260906][T17362] block nbd5: shutting down sockets [ 239.964538][T17378] FAULT_INJECTION: forcing a failure. [ 239.964538][T17378] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 239.976726][T17378] CPU: 0 UID: 0 PID: 17378 Comm: syz.1.2598 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.976746][T17378] Tainted: [L]=SOFTLOCKUP [ 239.976749][T17378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 239.976756][T17378] Call Trace: [ 239.976760][T17378] [ 239.976764][T17378] dump_stack_lvl+0x100/0x190 [ 239.976787][T17378] should_fail_ex.cold+0x5/0xa [ 239.976813][T17378] ? prepare_alloc_pages+0x16d/0x5f0 [ 239.976828][T17378] should_fail_alloc_page+0xeb/0x140 [ 239.976841][T17378] prepare_alloc_pages+0x1f0/0x5f0 [ 239.976856][T17378] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 239.976874][T17378] ? __lock_acquire+0x4a5/0x2630 [ 239.976891][T17378] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 239.976909][T17378] ? unwind_next_frame+0x3be/0x1ea0 [ 239.976929][T17378] ? update_cfs_rq_load_avg+0x51/0x550 [ 239.976947][T17378] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 239.976964][T17378] ? policy_nodemask+0xed/0x4f0 [ 239.976977][T17378] alloc_pages_mpol+0x1fb/0x550 [ 239.976988][T17378] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 239.977004][T17378] folio_alloc_mpol_noprof+0x36/0x340 [ 239.977018][T17378] vma_alloc_folio_noprof+0xed/0x1d0 [ 239.977031][T17378] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 239.977049][T17378] do_anonymous_page+0xb3a/0x1fb0 [ 239.977069][T17378] __handle_mm_fault+0x1d42/0x2b60 [ 239.977088][T17378] ? __pfx___handle_mm_fault+0x10/0x10 [ 239.977103][T17378] ? pte_offset_map_lock+0x174/0x320 [ 239.977122][T17378] ? find_held_lock+0x2b/0x80 [ 239.977141][T17378] ? follow_page_pte+0x5b3/0x1400 [ 239.977158][T17378] handle_mm_fault+0x36d/0xa20 [ 239.977176][T17378] __get_user_pages+0xf9c/0x34d0 [ 239.977191][T17378] ? down_read_killable+0x30e/0x4c0 [ 239.977210][T17378] ? __pfx___get_user_pages+0x10/0x10 [ 239.977222][T17378] ? __pfx_gup_fast_fallback+0x10/0x10 [ 239.977237][T17378] get_user_pages_unlocked+0x1cb/0x7d0 [ 239.977252][T17378] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 239.977264][T17378] ? get_user_pages_fast_only+0xae/0xf0 [ 239.977277][T17378] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 239.977289][T17378] ? __pfx___might_resched+0x10/0x10 [ 239.977303][T17378] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 239.977321][T17378] hva_to_pfn+0x871/0xe60 [ 239.977336][T17378] ? __pfx_hva_to_pfn+0x10/0x10 [ 239.977348][T17378] ? __lock_acquire+0x4a5/0x2630 [ 239.977360][T17378] ? rcu_is_watching+0x12/0xc0 [ 239.977374][T17378] ? trace_kvm_tdp_mmu_spte_changed+0x83/0x270 [ 239.977394][T17378] kvm_follow_pfn+0x291/0x430 [ 239.977407][T17378] __kvm_faultin_pfn+0x11c/0x1a0 [ 239.977418][T17378] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 239.977430][T17378] ? __pfx_xa_load+0x10/0x10 [ 239.977448][T17378] ? kvm_tdp_mmu_map+0xaf9/0x21f0 [ 239.977467][T17378] kvm_mmu_faultin_pfn+0xa57/0x2130 [ 239.977485][T17378] ? __pfx_fast_page_fault+0x10/0x10 [ 239.977500][T17378] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 239.977515][T17378] ? __kvm_mmu_topup_memory_cache+0x332/0x5f0 [ 239.977532][T17378] ? find_held_lock+0x2b/0x80 [ 239.977546][T17378] ? kvm_tdp_page_fault+0x295/0x3d0 [ 239.977567][T17378] kvm_tdp_page_fault+0x182/0x3d0 [ 239.977589][T17378] kvm_mmu_do_page_fault+0x5a4/0x6c0 [ 239.977609][T17378] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 239.977626][T17378] ? find_held_lock+0x2b/0x80 [ 239.977644][T17378] ? kvm_sched_in+0x9a/0xf0 [ 239.977655][T17378] ? finish_task_switch.isra.0+0x4b8/0xb80 [ 239.977673][T17378] kvm_mmu_page_fault+0x1dd/0x1aa0 [ 239.977689][T17378] ? rcu_qs+0x2a/0xe0 [ 239.977701][T17378] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 239.977713][T17378] ? __lock_acquire+0x4a5/0x2630 [ 239.977723][T17378] ? mark_held_locks+0x40/0x70 [ 239.977740][T17378] ? irqentry_exit+0x180/0x670 [ 239.977767][T17378] ? lockdep_hardirqs_on+0x78/0x100 [ 239.977782][T17378] ? irqentry_exit+0x180/0x670 [ 239.977799][T17378] handle_ept_violation+0x323/0x7c0 [ 239.977814][T17378] ? __pfx_handle_ept_violation+0x10/0x10 [ 239.977827][T17378] vmx_handle_exit+0x84d/0x1f40 [ 239.977841][T17378] vcpu_run+0x34cf/0x5ca0 [ 239.977861][T17378] ? __pfx_vcpu_run+0x10/0x10 [ 239.977879][T17378] ? rcu_is_watching+0x12/0xc0 [ 239.977893][T17378] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 239.977906][T17378] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 239.977924][T17378] kvm_vcpu_ioctl+0x730/0x1730 [ 239.977942][T17378] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 239.977959][T17378] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 239.977975][T17378] ? do_vfs_ioctl+0x226/0x13e0 [ 239.977993][T17378] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 239.978009][T17378] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 239.978031][T17378] ? __fget_files+0x215/0x3d0 [ 239.978042][T17378] ? hook_file_ioctl_common+0x146/0x410 [ 239.978064][T17378] ? selinux_file_ioctl+0x139/0x290 [ 239.978079][T17378] ? selinux_file_ioctl+0xb4/0x290 [ 239.978095][T17378] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 239.978112][T17378] __x64_sys_ioctl+0x18e/0x210 [ 239.978130][T17378] do_syscall_64+0x106/0xf80 [ 239.978144][T17378] ? clear_bhb_loop+0x40/0x90 [ 239.978158][T17378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.978169][T17378] RIP: 0033:0x7f50b859c799 [ 239.978179][T17378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.978190][T17378] RSP: 002b:00007f50b93fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.978201][T17378] RAX: ffffffffffffffda RBX: 00007f50b8815fa0 RCX: 00007f50b859c799 [ 239.978208][T17378] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 239.978215][T17378] RBP: 00007f50b93fb090 R08: 0000000000000000 R09: 0000000000000000 [ 239.978221][T17378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.978227][T17378] R13: 00007f50b8816038 R14: 00007f50b8815fa0 R15: 00007ffd39291018 [ 239.978242][T17378] [ 241.698702][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 241.698714][ T40] audit: type=1400 audit(2000000087.780:8123): avc: denied { remount } for pid=17444 comm="syz.2.2610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 241.756387][ T6080] Bluetooth: hci2: Frame reassembly failed (-84) [ 242.244487][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 242.244504][T17478] overlayfs: overlapping lowerdir path [ 242.416411][ T10] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 242.419539][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.423657][ T10] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 242.427136][ T10] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 242.430189][ T10] usb 10-1: Manufacturer: syz [ 242.434909][ T10] usb 10-1: config 0 descriptor?? [ 242.494576][ T10] rc_core: IR keymap rc-hauppauge not found [ 242.496911][ T10] Registered IR keymap rc-empty [ 242.499842][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 242.506077][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input32 [ 242.534592][ T833] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 242.643454][ T10] usb 10-1: USB disconnect, device number 7 [ 242.698611][ T40] audit: type=1400 audit(2000000088.780:8124): avc: denied { nlmsg_write } for pid=17495 comm="syz.4.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 242.709860][ T833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 242.716350][ T833] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 242.720587][ T833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.724031][ T833] usb 6-1: Product: syz [ 242.729398][ T833] usb 6-1: Manufacturer: syz [ 242.732064][ T833] usb 6-1: SerialNumber: syz [ 242.737866][ T833] usb 6-1: config 0 descriptor?? [ 242.746347][ T833] hub 6-1:0.0: bad descriptor, ignoring hub [ 242.749486][ T833] hub 6-1:0.0: probe with driver hub failed with error -5 [ 242.756299][ T833] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input33 [ 242.765172][ T40] audit: type=1400 audit(2000000088.850:8125): avc: denied { ioctl } for pid=17500 comm="syz.4.2619" path="socket:[79928]" dev="sockfs" ino=79928 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 242.784885][ T40] audit: type=1400 audit(2000000088.860:8126): avc: denied { ioctl } for pid=17500 comm="syz.4.2619" path="socket:[79930]" dev="sockfs" ino=79930 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 242.825402][ T40] audit: type=1400 audit(2000000088.910:8127): avc: denied { getopt } for pid=17504 comm="syz.4.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 243.005262][ T833] usb 6-1: USB disconnect, device number 28 [ 243.204083][ T40] audit: type=1400 audit(2000000089.280:8128): avc: denied { ioctl } for pid=17520 comm="syz.5.2622" path="/dev/ptyqe" dev="devtmpfs" ino=141 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 243.214013][T17522] vivid-000: kernel_thread() failed [ 243.218426][T17521] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 243.298881][T17529] FAULT_INJECTION: forcing a failure. [ 243.298881][T17529] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 243.303893][T17529] CPU: 3 UID: 0 PID: 17529 Comm: syz.5.2623 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.303926][T17529] Tainted: [L]=SOFTLOCKUP [ 243.303932][T17529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.303938][T17529] Call Trace: [ 243.303951][T17529] [ 243.303956][T17529] dump_stack_lvl+0x100/0x190 [ 243.303986][T17529] should_fail_ex.cold+0x5/0xa [ 243.304000][T17529] ? prepare_alloc_pages+0x16d/0x5f0 [ 243.304014][T17529] should_fail_alloc_page+0xeb/0x140 [ 243.304031][T17529] prepare_alloc_pages+0x1f0/0x5f0 [ 243.304046][T17529] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 243.304065][T17529] ? __lock_acquire+0x4a5/0x2630 [ 243.304083][T17529] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 243.304108][T17529] ? unwind_next_frame+0x3be/0x1ea0 [ 243.304127][T17529] ? lock_acquire+0x1cf/0x380 [ 243.304138][T17529] ? find_held_lock+0x2b/0x80 [ 243.304153][T17529] ? page_table_check_set+0x49a/0xa10 [ 243.304171][T17529] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.304188][T17529] ? policy_nodemask+0xed/0x4f0 [ 243.304202][T17529] alloc_pages_mpol+0x1fb/0x550 [ 243.304214][T17529] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 243.304225][T17529] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 243.304247][T17529] folio_alloc_mpol_noprof+0x36/0x340 [ 243.304262][T17529] vma_alloc_folio_noprof+0xed/0x1d0 [ 243.304276][T17529] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 243.304294][T17529] do_anonymous_page+0xb3a/0x1fb0 [ 243.304315][T17529] __handle_mm_fault+0x1d42/0x2b60 [ 243.304335][T17529] ? __pfx___handle_mm_fault+0x10/0x10 [ 243.304350][T17529] ? pte_offset_map_lock+0x174/0x320 [ 243.304369][T17529] ? find_held_lock+0x2b/0x80 [ 243.304389][T17529] ? follow_page_pte+0x5b3/0x1400 [ 243.304404][T17529] handle_mm_fault+0x36d/0xa20 [ 243.304422][T17529] __get_user_pages+0xf9c/0x34d0 [ 243.304438][T17529] ? down_read_killable+0x30e/0x4c0 [ 243.304463][T17529] ? __pfx___get_user_pages+0x10/0x10 [ 243.304476][T17529] ? __pfx_gup_fast_fallback+0x10/0x10 [ 243.304491][T17529] get_user_pages_unlocked+0x1cb/0x7d0 [ 243.304507][T17529] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 243.304519][T17529] ? get_user_pages_fast_only+0xae/0xf0 [ 243.304531][T17529] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 243.304545][T17529] ? __pfx___might_resched+0x10/0x10 [ 243.304558][T17529] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 243.304577][T17529] hva_to_pfn+0x871/0xe60 [ 243.304592][T17529] ? __pfx_hva_to_pfn+0x10/0x10 [ 243.304604][T17529] ? __lock_acquire+0x4a5/0x2630 [ 243.304616][T17529] ? rcu_is_watching+0x12/0xc0 [ 243.304630][T17529] ? trace_kvm_tdp_mmu_spte_changed+0x83/0x270 [ 243.304651][T17529] kvm_follow_pfn+0x291/0x430 [ 243.304663][T17529] __kvm_faultin_pfn+0x11c/0x1a0 [ 243.304675][T17529] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 243.304686][T17529] ? __pfx_xa_load+0x10/0x10 [ 243.304706][T17529] ? __resched_curr+0xf8/0x3b0 [ 243.304720][T17529] ? vmx_vcpu_pi_load+0x102/0x8d0 [ 243.304735][T17529] kvm_mmu_faultin_pfn+0xa57/0x2130 [ 243.304754][T17529] ? __pfx_fast_page_fault+0x10/0x10 [ 243.304769][T17529] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 243.304783][T17529] ? set_next_entity+0x11e/0x9c0 [ 243.304795][T17529] ? __kvm_mmu_topup_memory_cache+0x332/0x5f0 [ 243.304812][T17529] ? vmx_vcpu_load_vmcs+0x222/0x770 [ 243.304832][T17529] kvm_tdp_page_fault+0x182/0x3d0 [ 243.304851][T17529] kvm_mmu_do_page_fault+0x5a4/0x6c0 [ 243.304870][T17529] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 243.304889][T17529] ? find_held_lock+0x2b/0x80 [ 243.304907][T17529] ? kvm_sched_in+0x9a/0xf0 [ 243.304920][T17529] ? finish_task_switch.isra.0+0x2c6/0xb80 [ 243.304938][T17529] kvm_mmu_page_fault+0x1dd/0x1aa0 [ 243.304954][T17529] ? rcu_qs+0x2a/0xe0 [ 243.304967][T17529] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 243.304979][T17529] ? __lock_acquire+0x4a5/0x2630 [ 243.304990][T17529] ? __vmx_complete_interrupts+0x129/0x570 [ 243.305004][T17529] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.305024][T17529] handle_ept_violation+0x323/0x7c0 [ 243.305038][T17529] ? __pfx_handle_ept_violation+0x10/0x10 [ 243.305052][T17529] vmx_handle_exit+0x84d/0x1f40 [ 243.305067][T17529] vcpu_run+0x34cf/0x5ca0 [ 243.305086][T17529] ? __pfx_vcpu_run+0x10/0x10 [ 243.305162][T17529] ? rcu_is_watching+0x12/0xc0 [ 243.305179][T17529] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 243.305192][T17529] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 243.305210][T17529] kvm_vcpu_ioctl+0x730/0x1730 [ 243.305229][T17529] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 243.305247][T17529] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 243.305264][T17529] ? do_vfs_ioctl+0x226/0x13e0 [ 243.305282][T17529] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 243.305299][T17529] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 243.305351][T17529] ? __fget_files+0x215/0x3d0 [ 243.305362][T17529] ? hook_file_ioctl_common+0x146/0x410 [ 243.305385][T17529] ? selinux_file_ioctl+0x139/0x290 [ 243.305401][T17529] ? selinux_file_ioctl+0xb4/0x290 [ 243.305417][T17529] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 243.305437][T17529] __x64_sys_ioctl+0x18e/0x210 [ 243.305456][T17529] do_syscall_64+0x106/0xf80 [ 243.305471][T17529] ? clear_bhb_loop+0x40/0x90 [ 243.305485][T17529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.305498][T17529] RIP: 0033:0x7fa41cf9c799 [ 243.305509][T17529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.305520][T17529] RSP: 002b:00007fa41dea8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.305531][T17529] RAX: ffffffffffffffda RBX: 00007fa41d215fa0 RCX: 00007fa41cf9c799 [ 243.305541][T17529] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 243.305548][T17529] RBP: 00007fa41dea8090 R08: 0000000000000000 R09: 0000000000000000 [ 243.305554][T17529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.305561][T17529] R13: 00007fa41d216038 R14: 00007fa41d215fa0 R15: 00007fffc31257d8 [ 243.305583][T17529] [ 243.806857][ T63] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 243.858580][ T40] audit: type=1400 audit(2000000089.940:8129): avc: denied { map } for pid=17541 comm="syz.2.2624" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 243.878448][ T40] audit: type=1400 audit(2000000089.940:8130): avc: denied { execute } for pid=17541 comm="syz.2.2624" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 244.568708][T17576] netlink: 'syz.2.2626': attribute type 1 has an invalid length. [ 244.666866][T17587] netlink: 'syz.2.2629': attribute type 4 has an invalid length. [ 245.066541][T17615] kvm: user requested TSC rate below hardware speed [ 245.341328][ T40] audit: type=1400 audit(2000000091.420:8131): avc: denied { bind } for pid=17629 comm="syz.1.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 245.349159][T17630] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2637'. [ 245.354721][T17630] netlink: Conntrack attr has 4 unknown bytes [ 245.367758][ T40] audit: type=1400 audit(2000000091.450:8132): avc: denied { ioctl } for pid=17631 comm="syz.4.2638" path="socket:[78188]" dev="sockfs" ino=78188 ioctlcmd=0x8937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.389352][T17630] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.431939][T17636] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 245.436751][T17636] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 245.440073][T17636] overlayfs: missing 'lowerdir' [ 245.487082][T17630] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.501983][T17638] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 245.505157][T17638] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 245.576546][T17630] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.634333][T17630] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.641128][T17630] [ 245.642037][T17630] ====================================================== [ 245.644511][T17630] WARNING: possible circular locking dependency detected [ 245.647309][T17630] syzkaller #0 Tainted: G L [ 245.650271][T17630] ------------------------------------------------------ [ 245.653583][T17630] syz.1.2637/17630 is trying to acquire lock: [ 245.656146][T17630] ffff88801caf6988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x2f/0x50 [ 245.660064][T17630] [ 245.660064][T17630] but task is already holding lock: [ 245.663377][T17630] ffffffff8f752108 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xcd/0x260 [ 245.667488][T17630] [ 245.667488][T17630] which lock already depends on the new lock. [ 245.667488][T17630] [ 245.671972][T17630] [ 245.671972][T17630] the existing dependency chain (in reverse order) is: [ 245.675720][T17630] [ 245.675720][T17630] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 245.678563][T17630] __mutex_lock+0x1a2/0x1b90 [ 245.680622][T17630] get_device_parent+0xff/0x4c0 [ 245.682738][T17630] device_add+0xc36/0x1950 [ 245.684484][T17630] device_create_groups_vargs+0x1f8/0x270 [ 245.686686][T17630] device_create+0xed/0x130 [ 245.688452][T17630] msr_device_create+0x31/0x70 [ 245.690377][T17630] cpuhp_invoke_callback+0x3ab/0x9a0 [ 245.692660][T17630] cpuhp_thread_fun+0x3e9/0x7c0 [ 245.694690][T17630] smpboot_thread_fn+0x3d3/0xaa0 [ 245.696690][T17630] kthread+0x370/0x450 [ 245.698353][T17630] ret_from_fork+0x754/0xd80 [ 245.700186][T17630] ret_from_fork_asm+0x1a/0x30 [ 245.702191][T17630] [ 245.702191][T17630] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 245.705324][T17630] cpuhp_thread_fun+0x146/0x7c0 [ 245.707152][T17630] smpboot_thread_fn+0x3d3/0xaa0 [ 245.708963][T17630] kthread+0x370/0x450 [ 245.710470][T17630] ret_from_fork+0x754/0xd80 [ 245.712264][T17630] ret_from_fork_asm+0x1a/0x30 [ 245.714452][T17630] [ 245.714452][T17630] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 245.717510][T17630] cpus_read_lock+0x42/0x170 [ 245.719314][T17630] static_key_disable+0x12/0x20 [ 245.721131][T17630] __inet_hash_connect+0x1378/0x1e40 [ 245.723044][T17630] tcp_v4_connect+0xeb0/0x1b40 [ 245.724759][T17630] __inet_stream_connect+0x208/0xfa0 [ 245.726833][T17630] inet_stream_connect+0x57/0xa0 [ 245.728745][T17630] __sys_connect_file+0x141/0x1a0 [ 245.731261][T17630] __sys_connect+0x141/0x170 [ 245.733675][T17630] __x64_sys_connect+0x72/0xb0 [ 245.735753][T17630] do_syscall_64+0x106/0xf80 [ 245.737600][T17630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.739811][T17630] [ 245.739811][T17630] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 245.742426][T17630] lock_sock_nested+0x41/0xf0 [ 245.744155][T17630] inet_shutdown+0x67/0x410 [ 245.745838][T17630] nbd_mark_nsock_dead+0xae/0x5c0 [ 245.747878][T17630] recv_work+0x5fb/0x8c0 [ 245.749577][T17630] process_one_work+0xa23/0x19a0 [ 245.751645][T17630] worker_thread+0x5ef/0xe50 [ 245.753422][T17630] kthread+0x370/0x450 [ 245.755110][T17630] ret_from_fork+0x754/0xd80 [ 245.756870][T17630] ret_from_fork_asm+0x1a/0x30 [ 245.758636][T17630] [ 245.758636][T17630] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 245.761153][T17630] __mutex_lock+0x1a2/0x1b90 [ 245.763026][T17630] nbd_queue_rq+0x428/0x1080 [ 245.765080][T17630] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 245.767439][T17630] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 245.769886][T17630] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 245.772080][T17630] blk_mq_run_hw_queue+0x23c/0x670 [ 245.773931][T17630] blk_mq_dispatch_list+0x51d/0x1360 [ 245.775872][T17630] blk_mq_flush_plug_list+0x130/0x600 [ 245.778130][T17630] __blk_flush_plug+0x2c4/0x4b0 [ 245.780243][T17630] __submit_bio+0x584/0x6c0 [ 245.782238][T17630] submit_bio_noacct_nocheck+0x562/0xc10 [ 245.784598][T17630] submit_bio_noacct+0xd17/0x2010 [ 245.786489][T17630] submit_bh_wbc+0x59c/0x770 [ 245.788238][T17630] block_read_full_folio+0x4c8/0x8e0 [ 245.790164][T17630] filemap_read_folio+0xfc/0x3b0 [ 245.791995][T17630] do_read_cache_folio+0x2d7/0x6b0 [ 245.793883][T17630] read_part_sector+0xd1/0x370 [ 245.795660][T17630] adfspart_check_ICS+0x93/0x910 [ 245.797458][T17630] bdev_disk_changed+0x7f8/0xc80 [ 245.799576][T17630] blkdev_get_whole+0x187/0x290 [ 245.801617][T17630] bdev_open+0x2c7/0xe40 [ 245.803343][T17630] blkdev_open+0x34e/0x4f0 [ 245.805098][T17630] do_dentry_open+0x6d8/0x1660 [ 245.806768][T17630] vfs_open+0x82/0x3f0 [ 245.808369][T17630] path_openat+0x208c/0x31a0 [ 245.810163][T17630] do_file_open+0x20e/0x430 [ 245.812025][T17630] do_sys_openat2+0x10d/0x1e0 [ 245.814042][T17630] __x64_sys_openat+0x12d/0x210 [ 245.816099][T17630] do_syscall_64+0x106/0xf80 [ 245.817863][T17630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.820199][T17630] [ 245.820199][T17630] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 245.822570][T17630] __mutex_lock+0x1a2/0x1b90 [ 245.824565][T17630] nbd_queue_rq+0xba/0x1080 [ 245.826470][T17630] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 245.828602][T17630] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 245.830908][T17630] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 245.833118][T17630] blk_mq_run_hw_queue+0x23c/0x670 [ 245.835041][T17630] blk_mq_dispatch_list+0x51d/0x1360 [ 245.837131][T17630] blk_mq_flush_plug_list+0x130/0x600 [ 245.839407][T17630] __blk_flush_plug+0x2c4/0x4b0 [ 245.841473][T17630] __submit_bio+0x584/0x6c0 [ 245.843324][T17630] submit_bio_noacct_nocheck+0x562/0xc10 [ 245.845493][T17630] submit_bio_noacct+0xd17/0x2010 [ 245.847502][T17630] submit_bh_wbc+0x59c/0x770 [ 245.849409][T17630] block_read_full_folio+0x4c8/0x8e0 [ 245.851718][T17630] filemap_read_folio+0xfc/0x3b0 [ 245.853833][T17630] do_read_cache_folio+0x2d7/0x6b0 [ 245.855812][T17630] read_part_sector+0xd1/0x370 [ 245.857597][T17630] adfspart_check_ICS+0x93/0x910 [ 245.859427][T17630] bdev_disk_changed+0x7f8/0xc80 [ 245.861239][T17630] blkdev_get_whole+0x187/0x290 [ 245.863134][T17630] bdev_open+0x2c7/0xe40 [ 245.864999][T17630] blkdev_open+0x34e/0x4f0 [ 245.866943][T17630] do_dentry_open+0x6d8/0x1660 [ 245.868886][T17630] vfs_open+0x82/0x3f0 [ 245.870422][T17630] path_openat+0x208c/0x31a0 [ 245.872140][T17630] do_file_open+0x20e/0x430 [ 245.873808][T17630] do_sys_openat2+0x10d/0x1e0 [ 245.875783][T17630] __x64_sys_openat+0x12d/0x210 [ 245.877690][T17630] do_syscall_64+0x106/0xf80 [ 245.879429][T17630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.881549][T17630] [ 245.881549][T17630] -> #4 (set->srcu){.+.+}-{0:0}: [ 245.883861][T17630] __synchronize_srcu+0xa1/0x2a0 [ 245.885825][T17630] blk_mq_quiesce_queue+0x149/0x1c0 [ 245.887833][T17630] elevator_switch+0x17b/0x7e0 [ 245.889587][T17630] elevator_change+0x352/0x530 [ 245.891353][T17630] elevator_set_default+0x29e/0x360 [ 245.893305][T17630] blk_register_queue+0x412/0x590 [ 245.895387][T17630] __add_disk+0x73f/0xe40 [ 245.897224][T17630] add_disk_fwnode+0x118/0x5c0 [ 245.899068][T17630] nbd_dev_add+0x77a/0xb10 [ 245.900740][T17630] nbd_init+0x291/0x2b0 [ 245.902500][T17630] do_one_initcall+0x11d/0x760 [ 245.904465][T17630] kernel_init_freeable+0x6e5/0x7a0 [ 245.906593][T17630] kernel_init+0x1f/0x1e0 [ 245.908417][T17630] ret_from_fork+0x754/0xd80 [ 245.910253][T17630] ret_from_fork_asm+0x1a/0x30 [ 245.912037][T17630] [ 245.912037][T17630] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 245.914845][T17630] __mutex_lock+0x1a2/0x1b90 [ 245.916839][T17630] elevator_change+0x1bc/0x530 [ 245.918644][T17630] elevator_set_none+0x92/0xf0 [ 245.920396][T17630] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 245.922486][T17630] nbd_start_device+0x1a6/0xbd0 [ 245.924525][T17630] nbd_ioctl+0x4a6/0xd30 [ 245.926226][T17630] blkdev_ioctl+0x5ad/0x6f0 [ 245.928019][T17630] __x64_sys_ioctl+0x18e/0x210 [ 245.929779][T17630] do_syscall_64+0x106/0xf80 [ 245.931543][T17630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.933904][T17630] [ 245.933904][T17630] -> #2 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 245.937221][T17630] blk_alloc_queue+0x610/0x790 [ 245.939149][T17630] blk_mq_alloc_queue+0x174/0x290 [ 245.941184][T17630] __blk_mq_alloc_disk+0x29/0x120 [ 245.943107][T17630] nbd_dev_add+0x492/0xb10 [ 245.944967][T17630] nbd_init+0x291/0x2b0 [ 245.946836][T17630] do_one_initcall+0x11d/0x760 [ 245.949027][T17630] kernel_init_freeable+0x6e5/0x7a0 [ 245.951237][T17630] kernel_init+0x1f/0x1e0 [ 245.952951][T17630] ret_from_fork+0x754/0xd80 [ 245.954725][T17630] ret_from_fork_asm+0x1a/0x30 [ 245.956793][T17630] [ 245.956793][T17630] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 245.959529][T17630] fs_reclaim_acquire+0xc4/0x100 [ 245.961345][T17630] kmem_cache_alloc_lru_noprof+0x51/0x6e0 [ 245.963392][T17630] alloc_inode+0x183/0x250 [ 245.965109][T17630] iget_locked+0x1d9/0x6d0 [ 245.966834][T17630] kernfs_get_inode+0x46/0x470 [ 245.968668][T17630] kernfs_get_tree+0x63e/0xbb0 [ 245.970485][T17630] sysfs_get_tree+0x41/0x140 [ 245.972302][T17630] vfs_get_tree+0x92/0x320 [ 245.973991][T17630] path_mount+0x7d0/0x23d0 [ 245.975725][T17630] __x64_sys_mount+0x293/0x310 [ 245.977641][T17630] do_syscall_64+0x106/0xf80 [ 245.979435][T17630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.981729][T17630] [ 245.981729][T17630] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 245.984341][T17630] __lock_acquire+0x14b8/0x2630 [ 245.986184][T17630] lock_acquire+0x1cf/0x380 [ 245.988204][T17630] down_write+0x8b/0x1f0 [ 245.989891][T17630] kernfs_remove+0x2f/0x50 [ 245.991617][T17630] sysfs_remove_dir+0xc8/0x110 [ 245.993825][T17630] __kobject_del+0xe2/0x220 [ 245.995594][T17630] kobject_del+0x3f/0x60 [ 245.997404][T17630] cleanup_glue_dir+0x203/0x260 [ 245.999327][T17630] device_del+0x63b/0x9b0 [ 246.001033][T17630] unregister_netdevice_many_notify+0x1817/0x2580 [ 246.003298][T17630] unregister_netdevice_queue+0x30b/0x3c0 [ 246.005348][T17630] nsim_destroy+0x1a0/0x830 [ 246.007056][T17630] __nsim_dev_port_del+0x189/0x240 [ 246.008895][T17630] nsim_dev_reload_destroy+0x10a/0x4a0 [ 246.010870][T17630] nsim_dev_reload_down+0x66/0xd0 [ 246.012674][T17630] devlink_reload+0x173/0x790 [ 246.014370][T17630] devlink_nl_reload_doit+0xd84/0x1280 [ 246.016325][T17630] genl_family_rcv_msg_doit+0x214/0x300 [ 246.018538][T17630] genl_rcv_msg+0x560/0x800 [ 246.020614][T17630] netlink_rcv_skb+0x159/0x420 [ 246.022577][T17630] genl_rcv+0x28/0x40 [ 246.024162][T17630] netlink_unicast+0x5aa/0x870 [ 246.025934][T17630] netlink_sendmsg+0x8b0/0xda0 [ 246.027736][T17630] ____sys_sendmsg+0x9e1/0xb70 [ 246.029504][T17630] ___sys_sendmsg+0x190/0x1e0 [ 246.031253][T17630] __sys_sendmsg+0x170/0x220 [ 246.032999][T17630] do_syscall_64+0x106/0xf80 [ 246.034959][T17630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.037204][T17630] [ 246.037204][T17630] other info that might help us debug this: [ 246.037204][T17630] [ 246.040723][T17630] Chain exists of: [ 246.040723][T17630] &root->kernfs_rwsem --> cpuhp_state-up --> gdp_mutex [ 246.040723][T17630] [ 246.045424][T17630] Possible unsafe locking scenario: [ 246.045424][T17630] [ 246.047945][T17630] CPU0 CPU1 [ 246.049816][T17630] ---- ---- [ 246.051581][T17630] lock(gdp_mutex); [ 246.052878][T17630] lock(cpuhp_state-up); [ 246.055352][T17630] lock(gdp_mutex); [ 246.057684][T17630] lock(&root->kernfs_rwsem); [ 246.059262][T17630] [ 246.059262][T17630] *** DEADLOCK *** [ 246.059262][T17630] [ 246.062150][T17630] 5 locks held by syz.1.2637/17630: [ 246.064241][T17630] #0: ffffffff906bdc10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 246.067291][T17630] #1: ffff88805792d0e8 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x2ff/0x420 [ 246.070755][T17630] #2: ffff888058ef9250 (&devlink->lock_key#22){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x307/0x420 [ 246.074591][T17630] #3: ffffffff906118e8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x108/0x830 [ 246.077881][T17630] #4: ffffffff8f752108 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xcd/0x260 [ 246.081102][T17630] [ 246.081102][T17630] stack backtrace: [ 246.083143][T17630] CPU: 3 UID: 0 PID: 17630 Comm: syz.1.2637 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.083161][T17630] Tainted: [L]=SOFTLOCKUP [ 246.083165][T17630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.083172][T17630] Call Trace: [ 246.083178][T17630] [ 246.083184][T17630] dump_stack_lvl+0x100/0x190 [ 246.083206][T17630] print_circular_bug.cold+0x178/0x1c7 [ 246.083226][T17630] check_noncircular+0x146/0x160 [ 246.083247][T17630] __lock_acquire+0x14b8/0x2630 [ 246.083258][T17630] ? __lock_acquire+0x4a5/0x2630 [ 246.083269][T17630] lock_acquire+0x1cf/0x380 [ 246.083278][T17630] ? kernfs_remove+0x2f/0x50 [ 246.083292][T17630] ? __pfx___might_resched+0x10/0x10 [ 246.083309][T17630] down_write+0x8b/0x1f0 [ 246.083326][T17630] ? kernfs_remove+0x2f/0x50 [ 246.083337][T17630] ? __pfx_down_write+0x10/0x10 [ 246.083355][T17630] kernfs_remove+0x2f/0x50 [ 246.083366][T17630] sysfs_remove_dir+0xc8/0x110 [ 246.083383][T17630] __kobject_del+0xe2/0x220 [ 246.083401][T17630] kobject_del+0x3f/0x60 [ 246.083416][T17630] cleanup_glue_dir+0x203/0x260 [ 246.083431][T17630] device_del+0x63b/0x9b0 [ 246.083448][T17630] ? __pfx_device_del+0x10/0x10 [ 246.083464][T17630] ? netdev_unregister_kobject+0x2da/0x540 [ 246.083482][T17630] unregister_netdevice_many_notify+0x1817/0x2580 [ 246.083502][T17630] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 246.083517][T17630] ? __kfree_rcu_sheaf+0x195/0x720 [ 246.083536][T17630] ? __pfx___mutex_lock+0x10/0x10 [ 246.083550][T17630] ? __kfree_rcu_sheaf+0x19a/0x720 [ 246.083568][T17630] unregister_netdevice_queue+0x30b/0x3c0 [ 246.083584][T17630] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 246.083601][T17630] nsim_destroy+0x1a0/0x830 [ 246.083613][T17630] ? nsim_dev_reload_destroy+0x10a/0x4a0 [ 246.083628][T17630] __nsim_dev_port_del+0x189/0x240 [ 246.083641][T17630] nsim_dev_reload_destroy+0x10a/0x4a0 [ 246.083655][T17630] nsim_dev_reload_down+0x66/0xd0 [ 246.083669][T17630] devlink_reload+0x173/0x790 [ 246.083683][T17630] ? __pfx_devlink_reload+0x10/0x10 [ 246.083697][T17630] devlink_nl_reload_doit+0xd84/0x1280 [ 246.083710][T17630] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 246.083722][T17630] ? __pfx_devlink_get_from_attrs_lock+0x10/0x10 [ 246.083742][T17630] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 246.083763][T17630] genl_family_rcv_msg_doit+0x214/0x300 [ 246.083781][T17630] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 246.083805][T17630] ? bpf_lsm_capable+0x9/0x10 [ 246.083817][T17630] ? security_capable+0x80/0x260 [ 246.083831][T17630] genl_rcv_msg+0x560/0x800 [ 246.083849][T17630] ? __pfx_genl_rcv_msg+0x10/0x10 [ 246.083866][T17630] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 246.083884][T17630] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 246.083897][T17630] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 246.083917][T17630] netlink_rcv_skb+0x159/0x420 [ 246.083933][T17630] ? __pfx_genl_rcv_msg+0x10/0x10 [ 246.083951][T17630] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 246.083969][T17630] ? netlink_deliver_tap+0x1ae/0xcc0 [ 246.083985][T17630] genl_rcv+0x28/0x40 [ 246.084000][T17630] netlink_unicast+0x5aa/0x870 [ 246.084016][T17630] ? __pfx_netlink_unicast+0x10/0x10 [ 246.084034][T17630] netlink_sendmsg+0x8b0/0xda0 [ 246.084050][T17630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.084065][T17630] ? __might_fault+0x60/0x140 [ 246.084082][T17630] ____sys_sendmsg+0x9e1/0xb70 [ 246.084100][T17630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.084115][T17630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.084133][T17630] ? __pfx_futex_wake_mark+0x10/0x10 [ 246.084148][T17630] ___sys_sendmsg+0x190/0x1e0 [ 246.084166][T17630] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.084190][T17630] __sys_sendmsg+0x170/0x220 [ 246.084204][T17630] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.084217][T17630] ? __x64_sys_futex+0x34f/0x4d0 [ 246.084231][T17630] do_syscall_64+0x106/0xf80 [ 246.084246][T17630] ? clear_bhb_loop+0x40/0x90 [ 246.084259][T17630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.084271][T17630] RIP: 0033:0x7f50b859c799 [ 246.084282][T17630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.084293][T17630] RSP: 002b:00007f50b93fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.084306][T17630] RAX: ffffffffffffffda RBX: 00007f50b8815fa0 RCX: 00007f50b859c799 [ 246.084313][T17630] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 246.084319][T17630] RBP: 00007f50b8632c99 R08: 0000000000000000 R09: 0000000000000000 [ 246.084326][T17630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.084333][T17630] R13: 00007f50b8816038 R14: 00007f50b8815fa0 R15: 00007ffd39291018 [ 246.084343][T17630] [ 246.388974][ T6089] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.396577][ T6089] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.404615][ T6089] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.413474][ T6087] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0