last executing test programs: 2m38.821224544s ago: executing program 1 (id=44): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000380), &(0x7f00000000c0)=r2}, 0x20) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x800, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x18}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x4008000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x20, 0x5, 0x4, {{0x1b, 0x4, 0x3, 0x14, 0x6c, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x71, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x22}, 0x80}]}, @lsrr={0x83, 0x7, 0xba, [@multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xd1, 0x3, 0x1, [{@broadcast, 0x5}, {@local}, {@local, 0x7}, {@multicast1}, {@private=0xa010102, 0x6}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0x64, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @noop]}}}}}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r11, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r10, 0x0, 0x2000, 0x1000000, 0x0, 0x10}]) sendmsg$nl_route_sched_retired(r4, &(0x7f0000001580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001540)={&(0x7f00000002c0)=@newchain={0x1254, 0x64, 0x800, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffe0, 0x5}, {0x9, 0x2}, {0xd, 0x9}}, [@f_rsvp={{0x9}, {0x414, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x6, 0x3, 0x3, 0x2d, 0x1, 0x9, 0x7, 0x5, 0x6, 0x2, 0x9, 0xd90, 0x7, 0x8, 0x2cac884b, 0x9, 0x80000001, 0x0, 0x6, 0x3, 0x308, 0x6, 0x401, 0x5, 0x8, 0xfffffff8, 0x800, 0xfff, 0x2, 0x6, 0x2, 0x5, 0x4, 0x3fa, 0xffff9fe3, 0x1, 0x2, 0x4, 0x2, 0xa, 0xc, 0x7ff, 0x2, 0x7f, 0x4014, 0xde6, 0x0, 0x2, 0x6, 0x2, 0xfffffff9, 0x2a, 0x1ff, 0x6, 0x1, 0x8, 0x10, 0xffffff00, 0x6, 0x4, 0x9, 0x4, 0x0, 0x2, 0xffff7fff, 0x85, 0xa, 0x0, 0x8, 0x2, 0xfffffffa, 0x6, 0x9, 0x4, 0x8, 0x4, 0x1, 0x20, 0x2, 0x6, 0x0, 0x1, 0xd9, 0xb, 0x3ff, 0x1, 0xfac7, 0x0, 0x3, 0xa, 0xb39c, 0x9, 0x4, 0x9, 0xe, 0x5, 0x3ff, 0x0, 0x1, 0x9, 0xc2, 0xce6d, 0x3, 0x1, 0x6, 0x180000, 0x81, 0xe, 0x89, 0x8000, 0x1, 0x357, 0x6, 0x0, 0x2, 0x7, 0x5, 0x4, 0x200, 0xcd, 0x6, 0x1, 0x1000, 0xffff, 0x7, 0x1, 0x4, 0xfffffffd, 0x27, 0xfffffb95, 0x8, 0x4c9d, 0x3, 0xa1, 0x80, 0x0, 0x9, 0x1, 0x4, 0x3, 0x5, 0x4, 0x40, 0x9, 0xf, 0x2, 0x2, 0x2ea, 0x0, 0xcd9, 0x1169, 0x7, 0x3, 0x5, 0x9, 0xf6b8, 0x80, 0xfff, 0x0, 0x9, 0x9, 0x8, 0x4d49, 0x81, 0x7ff, 0x200, 0x44f, 0x1, 0x4, 0x2, 0x9, 0x10000, 0x8, 0xb, 0x0, 0x3000, 0x2, 0x7, 0x2, 0xffff9691, 0x1, 0x2, 0x7, 0x80000001, 0x3, 0x9, 0x1, 0x7, 0xd, 0x9, 0x800, 0x0, 0x50, 0x81, 0x6, 0x4, 0xdfc1, 0x10001, 0xb, 0x8d, 0x4, 0x7, 0x20000000, 0x7, 0xf, 0xfffffe00, 0xfff, 0x9, 0x7f, 0x1, 0x2, 0x401, 0x80000001, 0x6, 0x8, 0x4, 0x3, 0x1366, 0x1, 0x2, 0x7ff, 0x0, 0x8, 0x9, 0x1, 0x10001, 0x8, 0x2, 0x5, 0x2, 0x7fff, 0x7, 0x336, 0x4, 0x5, 0x736b, 0x800, 0x1, 0x5, 0x0, 0x80000000, 0x400, 0x1, 0x8, 0xffffd838, 0x8, 0x0, 0x7, 0x2, 0x5, 0x4, 0x1, 0x9, 0x5, 0x2]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}, @f_rsvp={{0x9}, {0x978, 0x2, [@TCA_RSVP_ACT={0x90c, 0x6, [@m_nat={0x184, 0x11, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8136, 0xeb5c, 0x7, 0x2}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xf23a, 0x10000000, 0x7, 0x47e2}, @broadcast, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0xffffffffffffffff, 0x800, 0x7}, @private=0xa010100, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x7fffffff, 0x20000000, 0x308723cd, 0x6}, @multicast1, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xfffffffe, 0x8, 0x7fffffff, 0x8}, @multicast2, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x2, 0x20000000, 0x6, 0x6}, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010101}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10000, 0x4, 0x0, 0x8, 0x9}, @local, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x539, 0x10000000, 0x4, 0x15}, @rand_addr=0x64010101, @empty, 0xff000000}}]}, {0x1b, 0x6, "5eefae56b879bb23294925c2dbd8cc1c7ae19cca9776ff"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x74, 0x1e, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5b4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x8, 0x6, "9b0b17fc"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x9c, 0xb, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfbd, 0x3, 0x7, 0x5, 0x8}, 0x2}}]}, {0x50, 0x6, "155fcba6bf4889da6ed8160af4fe79cb8316ab4597e5c7889c2d98e60d20a859722bfd7e8e61bcb58f0ad8d320a218c9a75f99d47c35b2982e0253ae6df8372fa9a23882a6bba6ec22f3a8d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0xd4, 0x1b, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x12ef}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x49, 0x6, "2d159e7c0714e1b75297ddab124b338096412bbaeb5efbceeddabcf05dc28298f194c953ae2cf3756c1ec877b8afbd167475299fdc3468b3b007fab920bc06c52645e498c6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_vlan={0x178, 0x13, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x6, 0x6, 0xfffffffb, 0x10001}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x6, 0x3, 0x1, 0x8}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x29c}]}, {0xec, 0x6, "152b36959ea41f89cbf939fb12e005c03f149bf5ccb70a39bd27ac0b082ced7e5c06c7d5c52c6f05b3299dda239786e0c4acf857c966b5ea9e5cfab5a176bac71ea30991670a136a71ed492ae3df5786124acd63d42ad8cd92eaf0c18e698b13543bac9e06f1cea842397a219d5e312612e8e2a1580b7c62bfec3629fe7222a2b7cebeb8b5e5a803d8d897548381806186c35193edeae6e6305168a02ac10d605d2b11b08840dfecf9058857ad47239823ca8f9eac1856c1af4d7e63958e9d4d524e8b07506bcc85e7d984d1888d648ccd9fc9a687d51e6db03b6e89eda7e643ea7e1d1b52fdb96b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x148, 0x0, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8906}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x670, 0x5, 0x4, 0x39, 0x10001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0xdada}, @TCA_MPLS_PROTO={0x6, 0x4, 0x15}]}, {0xd6, 0x6, "86fada172534e892b1bd54149d8cb7064a5099a82786c1f4ba934b971167e1d81e6ff7a00e0c323f96d6fbecf07021539a96384c21c1e6c7d286a310aa770d70284cb78fb3bd903dc9d4204bffdbd59e9b95e0c7f8a07bb2ed859dcb41c2aee52b258d18e971dbfab5a0fd409d2da15fb08dc88bc1be37fb1d56223cdae594b2270e86dba7f7665063d536ae217dff94e781451f9949cd519c042e8b1075b8460551449e3eedf4d77b0f9bdaeff9e2a61ccc005e09b7f1d1215eabd69535a556e6192dbbb2b41cc3b09a03565995b20ba1c6"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0xac, 0x5, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x85d}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x97, 0x2, 0x10000, 0x706685a4}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x1, 0x20000000, 0x89ea, 0xb}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0x1e, 0x6, "c580ac2d97dd88ef1afe732d65d55b3ad3c0433500a8b427e71b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x140, 0x2, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x9, 0x1, 0xfffffff7, 0x7fff}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe13, 0x5, 0x10000000, 0x6, 0x5}, 0x3, r9}}]}, {0xd2, 0x6, "233de311aed8f7783eea49495a76fdc2711eedd6b3293d223df04f6218f98f39ccd93f8f8a87b4c43d6bc8281e18d85015662d1a1777f7929be397a500283b74e76a8c1a36dbc61e3f38484a1c3695372487d45b64a5ec725e49be289022fd3ac93b580e5a25b8e43dd1c674acbd5b739b523aeaee295eed95ddb1ad890400929adcadfd13a10fdfd9b0eacf5d40125aeacb852d71b2127022331973fe866ae5896028bd4b4f57c9ae799e71348fad4bf5949417a6dc651997a4791ea6d51c65dfacc1c9962876e07fc8167ba9b4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0xf4, 0x18, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x10, 0x5, 0x0, 0x7f, 0x9}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x9d, 0x6, "562a888a2a700b8421bb583f607e687f392fbcc4bfb57d30b5897ec6cc17f55307027243680a37793ee4be5453bc87c8049d62401c674d8e08ed08e399371021de444cae7e233314bf098b13717a1471169c19c3a4978b7690d25dda35c7b7a5b7904f489b9d8c96156c23baf562597787e25c26ba7323430720c64a44292dd816ca9613702d391fae65afbaa62d143e49a5df09f0d8ea57e3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xd2f, 0x2, 0x1}, {0x1, 0x5d46, 0x7fffffff}, 0x89, 0xfb, 0x6}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x1001d, 0xfff3}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x53a, 0x1, 0x80000000}, {0x101, 0x5, 0x5}, 0x5e, 0x1, 0xde}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0x1ff, 0x7}, {0x6, 0x5, 0x4}, 0xc, 0x0, 0xb}}]}}, @f_rsvp6={{0xa}, {0x450, 0x2, [@TCA_RSVP_POLICE={0x424, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1d1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x10, 0x8000, 0xdbd3, 0x7, 0x0, 0x6, 0x1, 0x1000, 0x9, 0xc4, 0x3, 0xd, 0x0, 0xa, 0x16, 0x9, 0xfffffec3, 0x41b, 0x7f, 0x80, 0x7, 0x9, 0xb, 0x2, 0x1a, 0xd, 0x3ff, 0xa09, 0xffffffff, 0x0, 0x8000, 0x2, 0x0, 0x1000, 0x5, 0x1, 0x9, 0x8, 0x6, 0xd6, 0x8, 0x2, 0x8, 0x5, 0x3, 0x8, 0xfffffff7, 0xe2, 0x3, 0x6, 0x4, 0xc, 0x9, 0x80000000, 0x10, 0x1, 0x57, 0x8d37, 0xfffffff0, 0x0, 0x9, 0x401, 0xd, 0x89d, 0x9, 0x8000, 0x0, 0xffffffff, 0x4, 0x5, 0x99, 0x401, 0x9394, 0x2, 0x38000000, 0x101, 0x400, 0xfffffff2, 0x8, 0x548, 0x1, 0x8001, 0x3ff, 0x9, 0x1, 0x4, 0x5, 0xfffffff9, 0x401, 0x9, 0x9, 0xfffffffb, 0x52, 0x6, 0xfffffbff, 0x7f, 0x9, 0xbd7, 0x85, 0x7751, 0x8, 0x2, 0x216, 0x0, 0xfff, 0x478, 0x9, 0x7fff, 0x2, 0x4, 0x4026, 0x4, 0x4, 0x0, 0xfbf, 0x8, 0x100, 0x5, 0x4, 0x5, 0x7, 0xc405, 0x101, 0x3, 0x3, 0xfffffff9, 0x8, 0x40, 0xd2a, 0xa5a, 0xa0b, 0x10, 0x7ff, 0xfffffff9, 0x80000000, 0x8001, 0x23b2ffdc, 0x8001, 0x67, 0x0, 0x5109fbc4, 0x158, 0x2, 0xb4a83a83, 0xd6, 0x5, 0x7, 0xff, 0x2, 0x8, 0x30, 0x3, 0x6, 0xffff6e99, 0xd, 0x0, 0x8000, 0x5, 0x6, 0x6, 0x9bb3, 0x5, 0x7, 0x6, 0x40, 0x100, 0x8, 0x3, 0x7, 0x7fffffff, 0x4, 0x69d, 0x1, 0x9, 0x2, 0x401, 0xb76f, 0x6, 0x0, 0x4, 0x3, 0x0, 0xfffffeff, 0x4, 0x7, 0x7, 0xb748, 0x7fff, 0x9, 0x8, 0x200, 0x2, 0xfffffff8, 0x1000, 0xf34, 0xd, 0xfffffffd, 0x0, 0x1, 0x0, 0x6, 0x200, 0x8, 0x7, 0x3, 0x81be, 0x10000, 0xffff, 0xde, 0x8000000, 0x5, 0x2, 0xa0e9, 0xb, 0x5, 0x1, 0xffff6e34, 0xe4, 0x0, 0x1, 0x3b6, 0x4, 0x6, 0xdf6, 0xb, 0x2, 0x3, 0x5b, 0x2, 0x4, 0x8, 0x2, 0x400, 0x2, 0x8, 0x3, 0x9, 0x1, 0x1, 0x9, 0x5, 0xffff60f0, 0x0, 0x3, 0x6a, 0xffffffff, 0x3, 0x40000000, 0x6, 0x200, 0xa, 0x4, 0xb9, 0x7, 0xc91]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]}, @TCA_RSVP_SRC={0x14, 0x3, @local}, @TCA_RSVP_DST={0x14, 0x2, @mcast2}]}}, @f_rsvp6={{0xa}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xf, 0x2, 0x6}, {0xa, 0x7, 0x5}, 0x67, 0x80, 0xef}}]}}]}, 0x1254}, 0x1, 0x0, 0x0, 0x4008010}, 0x20000000) 2m38.065648291s ago: executing program 1 (id=50): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x48, {0x2}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x400c) 2m37.768901336s ago: executing program 1 (id=52): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000200)=0x6, 0x4) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x4, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000340)=[0x346], &(0x7f0000000380)=[r6], &(0x7f00000001c0), 0x0, 0x2}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2m37.528191203s ago: executing program 1 (id=54): socket$packet(0x11, 0x3, 0x300) userfaultfd(0x80001) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc91, 0x0, 0x20002fb}) r1 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x2, {0x1, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0x8001, 0xffffffffffffffff, 0xfffffff3, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffffffe, 0x0, 0xffffffffffffc2f3, 0x0, {0xfffffffffffffffd, 0xfffffffc}, {0x5}, {0x0, 0x4}, {0x5, 0xfffffffe}, 0x62, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x2) socket(0x10, 0x803, 0x0) socket(0x10, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f00000001c0)}, 0xfffffffffffffe23) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000080)={0x600, 0x0, &(0x7f0000000080), &(0x7f0000000200)=[0x6, 0x5, 0x5d], &(0x7f0000000080), &(0x7f00000001c0), 0x0, 0x10000000000009}) 2m37.038229615s ago: executing program 1 (id=56): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7520757365723a6e657f20"], 0x1a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910fd595dda0000610400000000000094000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r7, r5, 0x4, r5}, 0x10) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/208, 0xd0}], 0x1}, 0x40001002) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x0, 0x5000003, 0x50, r1, 0x3000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x0, &(0x7f0000bfe000/0x400000)=nil, 0x2) 2m36.76862446s ago: executing program 1 (id=58): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000280)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r6, 0x1, 0x1070bd2f, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 2m21.51093733s ago: executing program 32 (id=58): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000280)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r6, 0x1, 0x1070bd2f, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 45.794819643s ago: executing program 0 (id=1068): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000000000000c22500050000003a0000001f0100000000000008001c00c90000003032baca69"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x890) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) (rerun: 32) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r4, &(0x7f0000000380)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x1, 0xd2, "ec9ba3425e7f7bc7b68ad39a20f2ede5a3ecd79235658af49bf971592dd880730ccea7d668f7373fe80ee8b84f3b44ad4b49c071095eb16661cc94106376f5", 0x3a}, 0x60) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r3, 0x0, 0x0) (async) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x1) (async) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0xa, 0x0, @val=@tracing={0xffffffffffffffff, 0x8}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r6, r2, 0x4, r2}, 0x10) (async) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) (async) r7 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32) r8 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) (rerun: 32) pwritev(r8, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) (async) sendfile(r7, r8, 0x0, 0x8000fb00) 45.684625977s ago: executing program 0 (id=1071): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, &(0x7f0000000000)) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000340)=ANY=[], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000240)={{0x80, 0x2}, 'port1\x00', 0x93, 0x20cda, 0x8, 0x8000007, 0x3, 0x4, 0xca, 0x0, 0x4}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mprotect(&(0x7f00000fd000/0x4000)=nil, 0x4000, 0x1000002) 45.472284581s ago: executing program 0 (id=1072): unshare(0x6a060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) process_madvise(r2, 0x0, 0x0, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x400000) 43.935384625s ago: executing program 0 (id=1106): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) setns(0xc9, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000180)='./file1/file0\x00', 0x191) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x8890ca, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b090d, 0x2, '\x00', @p_u32=0x0}}) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x1, 0x12) setxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x1) 43.798233955s ago: executing program 0 (id=1112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8243, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000012300)={0x0, 0x12c, @ioapic={0x70000, 0xc8f, 0xfffff5ab, 0x7fffffff, 0x0, [{0x8, 0x81, 0xfd, '\x00', 0x7}, {0x0, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0xa, '\x00', 0x2}, {0xd, 0x1, 0xe9, '\x00', 0x3}, {0xff, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x1, '\x00', 0x6f}, {0x45, 0x51, 0x3}, {0x10, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x9a, '\x00', 0x4b}, {0x5, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x7}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0x3, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x5, '\x00', 0x6}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0x87, 0x21, 0x7, '\x00', 0x7}, {0x1, 0x9, 0x0, '\x00', 0x46}]}}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x544f67e09f014d68, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'syzkaller0\x00', {0x102}, 0xd}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) setuid(0xee00) getresuid(&(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x9000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x0, 0x1, 0x3, 0x3}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0xf, 0x7, 0xff, 0xc6, 0x6, 0x3, 0x6, 0x1, 0x3}, {0x3000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x80, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0xb, 0x0, 0xf, 0x10, 0x6, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0x0, 0x10, 0x4, 0x7, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000002, 0x0, 0x25000, [0x5, 0x3, 0x4000000000000009, 0x7]}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 43.204998302s ago: executing program 0 (id=1116): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r0, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=8000,nqn=n', 0x31) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr', 0x1b) write(r1, &(0x7f0000000140)='e:my_read_msr2 msr/read_msr', 0x1b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1', 0x1) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) pread64(r4, &(0x7f0000000340)=""/8, 0x8, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) write$sysctl(r2, &(0x7f0000000380)='5\x00', 0x2) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000180), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000a00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x101a02, 0x0) writev(r10, &(0x7f0000000680)=[{&(0x7f0000000080)="d02525187d3ebf57a9a1769e897c9f466cf398127d9673f17443dca3e0ca2b05769edb07c13173814c8cfeb2516ebe6311622401ec2d72e34969db35df4c4f63a0bf6f4974f5a6885b08d09f914a53e78f2dde08c3efb1dcb1bde47b5d3e727074cbd18dc162dd67df1ee76e380377b9e9ffccb790d25426c676295e7feb5722", 0x80}, {&(0x7f0000000100)="8af2051aa7b3486b1c46763b7a5313b9efc90296adffadb1f0d45b77da0f68ac878d942724f0a6b3c23d7022d58d6cb20498bf9f15fdf929cef170a80c3a9dbf140c6485c119980e1f0c01665c6ffe5cc2a692a3d419258016ddb1406770283a9f3f560cd3d2", 0x66}, {&(0x7f0000000840)="5a014a28d67831089a72347768e5ff2923965eb697c55665eab11b325eead87f595eb781b93f7859f894977f7a7f570b9b31c2cc39ecb3cf11a478aecc94054060aafac9eafdc2cac5c0026c916a5262e6b88cc2b7760ddd7768b045024b82e7b76005dd20750e98c63bfb7e8ad2d45e7aa3c7177b09f06db7ebe0a57878833354ee91460e6ec126088eabfd06b36e1d4d6bcaeadc76b7a9bb39498b62e6a43b260ac05097782e19f7aadf94", 0xac}, {&(0x7f00000002c0)="4fb45000200973b03aa63d112d1c1cc43d2803bb835efef33d035f4992f9d7cb1806761173242d1b691fe584228b572892207a6dec623e654a36c19a9e2521ed81e36a4b977b598addef0c5f1900395facbdf96e3f29d41e2aaf0c505ef8b1", 0x5f}, {&(0x7f0000000240)="c5823c267e955b2f3ef6e315b74cc4704cc8f00bbb5a3780328ebbc94d34220e0579b5ba1c7007d894be29b0360cd344f3fe582fd4f50d1f89f9f39b7404acf43fbc2d2756cc310c111d3162752669e76d87fede402a5644c6854e0f", 0x5c}, {&(0x7f0000000740)="2f5421b9dd767a15c1e709a09c1da2121a1125a4dadcd44c256c66403ab5a4bf13d0cbbbfd20457035e2cbfee5161889917c0bd68d0ed2dddb1919060fac425bf17886e861ae693560de0a37f9defaaa338cd061915c6a688b09ec807fb113328c418089490911076e9637bf6a297de51b30794a716dcc6d5b7e93ac38d08614a17f3124bbe4116ed912f0a09304e07c25a2e063103dae9e8dc8959025124884505de4aaf9f0fece644f3bbcec038bb234984a47eb7f44de110e3bd9d0041a924f59", 0xc2}, {&(0x7f00000003c0)="409aa787e4d24e2a13c22ac89660828659aeba5bc023eb08b9fafb8520a5bc3caa3133808ffdc4c52835678a5c1edb15968ed0a9c5fb1cfd1a05f8bd0d33fe273cc015ad66f0beb49a7e04ddd7076a25fabdf1503c3a1d5a8be6a5a8c811d256cab030c3007bceedc14238e637c1726ec05eb5920a6f38b1eaaed728a67904005c004285e754b6c624b9a6e0b3911ef681ba6a9bbc4e0994bb848d4d08a6f6e1a73a1ca8f27a15bb1ff06a3f6014556477637413ca3929a194d678b14f1e7b959a43459e501906e1af386c13", 0xcc}, {&(0x7f0000000900)="75ba45b9916f71a737585b4567d6be13578394fe52dec87067575a34973be0916c58802a2c8f6eb7f6493a2983a327a30813a4e80a90a4c37f34320e991cd8b7bd23692cc70152beb068780c608a31ffa7a7472f9dc50bbb676243d7eb9180bec8760adef17afd3dee13f8922c0c99455aabf1be0e9fa910d449de764486fe3fb9817440483c21ba0be9bc8d0a578dc287950296850f65eb54665f2b99a72140a64bd8cfb9bcf41642f26e3778a365e8c83bf26bc6af3bd2add7539644b0a557452ab244090b356343c5e7e8fa026c6f", 0xd0}, {&(0x7f00000005c0)="7c52a55dea2637ce9f9f72ac80d2b6f360890e33b4cb5fdf033a0b1b1176a9e89957dfc91f3fb91e67f4bc48ac8a68771e5fb75629b2230a29e48cb33a7edef0a5979ba66a8532028fd238374f6fc2ec1f073f5f48217a8ae67517c5299b7d60efc19e659b644ed8e0732e555afcee9911d480ff669e3ddc930649d38dca41939ccf91423fb8a1e5c390e59eaf41ee423c5645d5f8ed", 0x96}], 0x9) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x80, 0x84, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @private2}, @IFA_CACHEINFO={0x14, 0x6, {0x1f, 0x5, 0x3, 0x4}}]}, 0x40}}, 0x4000) sendfile(r10, r10, 0x0, 0x9) 43.147230325s ago: executing program 33 (id=1116): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r0, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=8000,nqn=n', 0x31) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr', 0x1b) write(r1, &(0x7f0000000140)='e:my_read_msr2 msr/read_msr', 0x1b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1', 0x1) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) pread64(r4, &(0x7f0000000340)=""/8, 0x8, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) write$sysctl(r2, &(0x7f0000000380)='5\x00', 0x2) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000180), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000a00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x101a02, 0x0) writev(r10, &(0x7f0000000680)=[{&(0x7f0000000080)="d02525187d3ebf57a9a1769e897c9f466cf398127d9673f17443dca3e0ca2b05769edb07c13173814c8cfeb2516ebe6311622401ec2d72e34969db35df4c4f63a0bf6f4974f5a6885b08d09f914a53e78f2dde08c3efb1dcb1bde47b5d3e727074cbd18dc162dd67df1ee76e380377b9e9ffccb790d25426c676295e7feb5722", 0x80}, {&(0x7f0000000100)="8af2051aa7b3486b1c46763b7a5313b9efc90296adffadb1f0d45b77da0f68ac878d942724f0a6b3c23d7022d58d6cb20498bf9f15fdf929cef170a80c3a9dbf140c6485c119980e1f0c01665c6ffe5cc2a692a3d419258016ddb1406770283a9f3f560cd3d2", 0x66}, {&(0x7f0000000840)="5a014a28d67831089a72347768e5ff2923965eb697c55665eab11b325eead87f595eb781b93f7859f894977f7a7f570b9b31c2cc39ecb3cf11a478aecc94054060aafac9eafdc2cac5c0026c916a5262e6b88cc2b7760ddd7768b045024b82e7b76005dd20750e98c63bfb7e8ad2d45e7aa3c7177b09f06db7ebe0a57878833354ee91460e6ec126088eabfd06b36e1d4d6bcaeadc76b7a9bb39498b62e6a43b260ac05097782e19f7aadf94", 0xac}, {&(0x7f00000002c0)="4fb45000200973b03aa63d112d1c1cc43d2803bb835efef33d035f4992f9d7cb1806761173242d1b691fe584228b572892207a6dec623e654a36c19a9e2521ed81e36a4b977b598addef0c5f1900395facbdf96e3f29d41e2aaf0c505ef8b1", 0x5f}, {&(0x7f0000000240)="c5823c267e955b2f3ef6e315b74cc4704cc8f00bbb5a3780328ebbc94d34220e0579b5ba1c7007d894be29b0360cd344f3fe582fd4f50d1f89f9f39b7404acf43fbc2d2756cc310c111d3162752669e76d87fede402a5644c6854e0f", 0x5c}, {&(0x7f0000000740)="2f5421b9dd767a15c1e709a09c1da2121a1125a4dadcd44c256c66403ab5a4bf13d0cbbbfd20457035e2cbfee5161889917c0bd68d0ed2dddb1919060fac425bf17886e861ae693560de0a37f9defaaa338cd061915c6a688b09ec807fb113328c418089490911076e9637bf6a297de51b30794a716dcc6d5b7e93ac38d08614a17f3124bbe4116ed912f0a09304e07c25a2e063103dae9e8dc8959025124884505de4aaf9f0fece644f3bbcec038bb234984a47eb7f44de110e3bd9d0041a924f59", 0xc2}, {&(0x7f00000003c0)="409aa787e4d24e2a13c22ac89660828659aeba5bc023eb08b9fafb8520a5bc3caa3133808ffdc4c52835678a5c1edb15968ed0a9c5fb1cfd1a05f8bd0d33fe273cc015ad66f0beb49a7e04ddd7076a25fabdf1503c3a1d5a8be6a5a8c811d256cab030c3007bceedc14238e637c1726ec05eb5920a6f38b1eaaed728a67904005c004285e754b6c624b9a6e0b3911ef681ba6a9bbc4e0994bb848d4d08a6f6e1a73a1ca8f27a15bb1ff06a3f6014556477637413ca3929a194d678b14f1e7b959a43459e501906e1af386c13", 0xcc}, {&(0x7f0000000900)="75ba45b9916f71a737585b4567d6be13578394fe52dec87067575a34973be0916c58802a2c8f6eb7f6493a2983a327a30813a4e80a90a4c37f34320e991cd8b7bd23692cc70152beb068780c608a31ffa7a7472f9dc50bbb676243d7eb9180bec8760adef17afd3dee13f8922c0c99455aabf1be0e9fa910d449de764486fe3fb9817440483c21ba0be9bc8d0a578dc287950296850f65eb54665f2b99a72140a64bd8cfb9bcf41642f26e3778a365e8c83bf26bc6af3bd2add7539644b0a557452ab244090b356343c5e7e8fa026c6f", 0xd0}, {&(0x7f00000005c0)="7c52a55dea2637ce9f9f72ac80d2b6f360890e33b4cb5fdf033a0b1b1176a9e89957dfc91f3fb91e67f4bc48ac8a68771e5fb75629b2230a29e48cb33a7edef0a5979ba66a8532028fd238374f6fc2ec1f073f5f48217a8ae67517c5299b7d60efc19e659b644ed8e0732e555afcee9911d480ff669e3ddc930649d38dca41939ccf91423fb8a1e5c390e59eaf41ee423c5645d5f8ed", 0x96}], 0x9) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x80, 0x84, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @private2}, @IFA_CACHEINFO={0x14, 0x6, {0x1f, 0x5, 0x3, 0x4}}]}, 0x40}}, 0x4000) sendfile(r10, r10, 0x0, 0x9) 2.711059257s ago: executing program 3 (id=1704): syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 2.709940384s ago: executing program 3 (id=1705): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x0, 0x2}) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0xea965674c388d485, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) writev(r2, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0x2000}], 0x2) (async) syz_emit_ethernet(0x11, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES8=r2, @ANYRESHEX=r0], 0x0) (async) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) (async) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)}) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x7, 0x0, 0x45) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x103200, 0x0) ioctl$EVIOCSABS2F(r5, 0x401845ef, &(0x7f0000000480)={0x5, 0x6, 0x8, 0x4, 0x2, 0x200}) (async) r6 = socket$unix(0x1, 0x5, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0xe, 0xd, {0xffffffffffffffff}, {0xee00}, 0xa1, 0xa0b9}) quotactl_fd$Q_GETINFO(r6, 0xffffffff80000500, r7, &(0x7f00000003c0)) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r8, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r11 = socket(0x5, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffbffff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040041}, 0x10) r12 = syz_open_dev$MSR(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000200)={0x7, 0x0, '\x00', {0x0, @reserved}}) (async) read$msr(r12, &(0x7f0000000040)=""/4, 0x4) 2.630635034s ago: executing program 3 (id=1706): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 2.629584384s ago: executing program 3 (id=1708): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x3a0c, &(0x7f00000003c0)={0x0, 0x9055, 0x400, 0x3, 0x22b}, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="012242000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, &(0x7f0000001640)=""/106, 0x6a}, 0x100}], 0x40000000000008f, 0x12300, 0x0) close(r0) 2.441061659s ago: executing program 3 (id=1713): rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') (async) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000001c0)={@isdn={0x22, 0x2, 0x5, 0xae, 0x7}, {&(0x7f0000000080)=""/243, 0xf3}, &(0x7f0000000180), 0x9}, 0xa0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000280)={{0xa, 0x8000}, 0x100, './file0\x00'}) lsetxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@v1={0x1000000, [{0x2, 0x4}]}, 0xc, 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x200000, 0xd1) (async) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000004c0)) r3 = syz_open_dev$evdev(&(0x7f0000000500), 0x2, 0x80) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000540)=[0xd77, 0x6]) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000580)={0x6, [0xfff8, 0x0, 0x8, 0x3, 0x1, 0x6]}, 0x10) (async) mount$9p_tcp(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x2, &(0x7f0000000680)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '/dev/input/event#\x00'}}, {@cache_mmap}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x66, 0x32, 0x66, 0x32, 0x37, 0x34, 0x30], 0x2d, [0x39, 0x32, 0x35, 0x37], 0x2d, [0x38, 0x38, 0x30, 0x35], 0x2d, [0x0, 0x36, 0x38, 0x66], 0x2d, [0x61, 0x63, 0x61, 0x63, 0x57, 0x37, 0x37, 0x36]}}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000940)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000009c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000740), r5, 0x1}}, 0x18) (async) r6 = open$dir(&(0x7f0000000a00)='./file0\x00', 0x5000, 0x14) mkdirat(r6, &(0x7f0000000a40)='./file0\x00', 0x1) (async) recvfrom(r4, &(0x7f0000000a80)=""/217, 0xd9, 0x2, &(0x7f0000000b80)=@sco={0x1f, @none}, 0x80) (async) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000c00)={{0x7, 0x4}, 0x100, './file0\x00'}) (async) r7 = syz_io_uring_setup(0x3d49, &(0x7f0000000d40)={0x0, 0xd29b, 0x200, 0x0, 0x25e}, &(0x7f0000000dc0), &(0x7f0000000e00), &(0x7f0000000e40)=0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r7, 0x1f, &(0x7f0000000f00)={0x28, 0x2, 0x0, r0, &(0x7f0000000e80)="e62a810a6cd802e57deaf6118cf3284932ad22d85b8c467c4a50b7fadb074de1c34eb28053f14bf0a2cf7aab8d19678c8604996bc54e799f7ac9110e53de85ddfb9840c4f3ff15832cadbb52990bb0998a5345a8f004a97c", 0x0, 0x8, 0x0, 0x1, {0x0, 0x0, r0, 0x4}}, 0x1) (async) setxattr(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)=@known='user.syz\x00', &(0x7f0000000fc0)='&&\x00', 0x3, 0x0) r9 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001000), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000001040)={[{0x2b, 'freezer'}, {0x2d, 'cpuset'}, {0x2d, 'rlimit'}]}, 0x19) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000001100)={'broute\x00', 0x0, 0x0, 0x0, [0x100, 0x80, 0x7, 0xfda, 0x7fff, 0x245], 0x6, &(0x7f0000001080)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) (async) syz_ublk_setup_io_uring(0x566b, &(0x7f0000001200)={0x0, 0x9c5e, 0x200, 0x3, 0x10b, 0x0, r9}, &(0x7f0000001280)=0x0, &(0x7f00000012c0), &(0x7f0000001300)) (async) r11 = mmap$IORING_OFF_PBUF_RING(0x0, 0x0, 0x8, 0x40010, r7, 0x864ff2a3) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, r8, &(0x7f00000013c0)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, r1, &(0x7f0000001340)='./file1\x00', &(0x7f0000001380)='./file0\x00', r1, 0x7, 0x1, {0x0, r12}}) 2.436066533s ago: executing program 3 (id=1716): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x3b, 0x0, &(0x7f0000000380)=0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r0, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40, 0x4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="f40000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000090000d"], 0xf4}}, 0x804) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000020000680080001"], 0x84}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000400)={0x48, 0x1, r10, 0x0, 0x8, 0xcf77}) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r6, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7faff0700000a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1c0e9524d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b6247dab3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c66c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc6eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb40000000000000006f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b8dd9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x0, {0x8ce}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r11, 0x10, 0x460e, 0x3) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000001200)={&(0x7f0000000340)={0x50, 0x0, 0x1000002, {0x7, 0x2d, 0x5, 0x1240c004, 0x7ff, 0x4, 0x80000006, 0x6, 0x0, 0x0, 0x100, 0xfff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41800, 0x66840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) 1.767199347s ago: executing program 5 (id=1738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x11, 0xfe, 0x0, 0x0, {0x5}}}, 0x8c}}, 0x400c) 1.681054837s ago: executing program 5 (id=1741): r0 = socket(0x2, 0x80805, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001240)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x0, @vsock={0x28, 0x0, 0x2710, @host}, @nl=@kern={0x10, 0x0, 0x0, 0x6130019}, @vsock={0x28, 0x0, 0x2710, @hyper}, 0x6a2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='pim6reg\x00', 0x200, 0x1, 0x7}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r7, 0x25, 0x0, @void}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000001800ac3e0180140002006e657464657673696d3000000000ea0005000b0002000000"], 0x34}}, 0x4044890) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r8, r9, 0x4, r9}, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfffffdd5, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000080)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f00000018c0)=""/4111, &(0x7f0000001040)=0x100f) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r8}, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0), 0x12000, 0x0) 1.510016398s ago: executing program 4 (id=1746): pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2c020400) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x1) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000240)={0x3, 0x0, [{0x1, 0x0, 0x7}, {0x5c, 0x0, 0x6}, {0xa9a, 0x0, 0x7}, {0x1, 0x0, 0x9}, {0x3, 0x0, 0x30}, {0x4000100, 0x0, 0x1000}, {0x8001, 0x0, 0x8}, {0x8, 0x0, 0x5}, {0x6}, {0x1, 0x0, 0x8}, {0xe, 0x0, 0x1}, {0x4, 0x0, 0x5}, {0x5, 0x0, 0x9}, {0x9, 0x0, 0x6}, {0xffff7fff, 0x0, 0x8001}, {0x10000, 0x0, 0x8}]}) (async) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000240)={0x3, 0x0, [{0x1, 0x0, 0x7}, {0x5c, 0x0, 0x6}, {0xa9a, 0x0, 0x7}, {0x1, 0x0, 0x9}, {0x3, 0x0, 0x30}, {0x4000100, 0x0, 0x1000}, {0x8001, 0x0, 0x8}, {0x8, 0x0, 0x5}, {0x6}, {0x1, 0x0, 0x8}, {0xe, 0x0, 0x1}, {0x4, 0x0, 0x5}, {0x5, 0x0, 0x9}, {0x9, 0x0, 0x6}, {0xffff7fff, 0x0, 0x8001}, {0x10000, 0x0, 0x8}]}) migrate_pages(r3, 0x2, &(0x7f0000000140)=0xa4a2, &(0x7f0000000200)=0x3) r7 = io_uring_setup(0x5be4, &(0x7f0000000180)={0x0, 0xa3a7, 0x0, 0x21, 0xab}) io_uring_enter(r7, 0x78ce, 0x60e, 0x0, 0x0, 0x0) (async) io_uring_enter(r7, 0x78ce, 0x60e, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x8, 0x40, 0x0, 0xf9, @local}, 0x10) (async) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x8, 0x40, 0x0, 0xf9, @local}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) set_tid_address(&(0x7f0000000100)) setpgid(r3, r3) (async) setpgid(r3, r3) getpid() (async) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x0, 0x0, 0x10000000000001) (async) pidfd_send_signal(r10, 0x0, 0x0, 0x10000000000001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) setpgid(0x0, r3) unshare(0x38000e00) (async) unshare(0x38000e00) fchdir(r2) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0) 1.506140851s ago: executing program 5 (id=1748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}, 0x1, 0x0, 0x100000000000000}, 0x400c) 1.418212472s ago: executing program 5 (id=1749): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$KVM_CAP_HYPERV_VP_INDEX(r1, 0x4068aea3, &(0x7f0000000180)) r5 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000280)={r6, 0x0, 0x0, 0xfffffa31, 0x4, 0x330, 0x3, 0x3, 0x1659, 0x7, 0x10000, 0x4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000400)="64f3420f096547633c6f64420f01df66baa000b897660000ef67400f0966baf80cb8e8e23780ef66bafc0cb8340a3b9fefc744240031000000c74424020d000000ff2c24f22665470f01dff2400f1a2d0000010026663e640f08", 0x5a}], 0x24, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="653636650f71f24d660f72f5862e3e0fc759790f01f0b9800000c00f3235010000000f300f20e10f5bda0f01c9c4e2450c02c4e2dd0402", 0x37}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$DVD_READ_STRUCT(r8, 0x5390, &(0x7f0000001040)=@bca={0x3, 0xbc, "3672ace483bbb4982bff1297dc4ba5ffcca97ee574485edbce3b6d0a592f98cecd3b6e9ab371232b4bb37b2b0a8d877e2313dc7d3c404c4ed4ae604cbe7971007d9b140a9fe85827e62c852a1366bd322ba4d31cf3a82a4d19a635b3ad3b829618973d5667301251f418cd08478850a02517be3f03b3910dd7d82bbb1c78b369c69a41ccd8f11f36097f69c9a0e27eb6052dbf8dad8420a76a8060513300af859d09cd58b106860fa502d46076c1c6619e55e50e547dffb8f3fef351"}) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') recvmmsg(r7, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000019c0)=""/4110, 0x100e}], 0x1}, 0x8001}], 0x1, 0x2100, 0x0) 1.231350495s ago: executing program 5 (id=1754): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x4e93, &(0x7f0000000040)={0x0, 0x4c3e, 0x4000, 0x1, 0xc}, &(0x7f00000000c0), &(0x7f00000001c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000002080)='./mnt\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000003200)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r0, &(0x7f0000003240)=""/8192, 0x2000) 901.294575ms ago: executing program 2 (id=1761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x11, 0x1, 0x12, 0x0, {0x5}}}, 0x8c}}, 0x400c) 900.931886ms ago: executing program 2 (id=1762): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0xee}, &(0x7f0000000480), &(0x7f0000000040), &(0x7f00000001c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x48001, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r8, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x0) write(r2, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x4, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x24f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x200, 0x6, 0xffffffff}}], 0x1, 0x0, 0x0) 731.085797ms ago: executing program 5 (id=1763): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x180, 0xff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r2, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x2000, 0x0, 0x1f) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=@newtclass={0x8a4, 0x28, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xd, 0xffff}, {0xfff2, 0xd}, {0x0, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x1f, 0x3}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0xa, 0x2, 0x5, 0xd798, 0xb525, 0x9}, {0x7, 0x0, 0x73, 0x0, 0x8, 0xa6d7}, 0xfffffffb, 0x9, 0x4, 0x7, 0x9}}, @TCA_HTB_RTAB={0x404, 0x4, [0xfffffffd, 0x8001, 0x7, 0x1, 0x1, 0x10001, 0x2, 0x9, 0x5, 0xfffffffd, 0x80000001, 0x8, 0x3, 0x2, 0x10000, 0xdb, 0x7, 0x401, 0x400, 0x8, 0x1ff, 0x0, 0x0, 0xfffffff7, 0x5, 0x300000, 0x8, 0x5, 0x9, 0x3, 0xfffffffc, 0x0, 0x42, 0x4, 0xd40, 0xe, 0xffff, 0xa, 0x4, 0x40000, 0xd5c9, 0x7ff, 0x7f80, 0x80000000, 0x4, 0xfffffffe, 0x81, 0x3, 0x2, 0x4, 0x0, 0xffffff07, 0x6, 0x0, 0x1f039dfc, 0x8, 0x0, 0x81, 0x0, 0x8, 0xf96, 0x2, 0x4, 0xa1, 0x0, 0x9000000, 0xc, 0x6, 0x9, 0x3, 0x7, 0x36, 0x7ff, 0x3, 0xffffffff, 0x3, 0xc, 0x716c, 0x1, 0x81, 0x400, 0x8, 0x200, 0xc84d, 0x80, 0x8, 0x9d5, 0x5, 0x40, 0x3, 0x24, 0x80000000, 0x4, 0x200, 0x73, 0x3, 0x4, 0x0, 0x2, 0x8, 0x401, 0x9, 0x3, 0xe23, 0xc, 0x1, 0xef75, 0x4, 0x11c999c3, 0x6, 0x8, 0x9, 0xa9af, 0x2, 0x8, 0x10, 0x6, 0x1, 0x7f, 0x9, 0x3, 0xffffffff, 0x7f, 0x8, 0x5, 0x200, 0x80, 0x9, 0x6, 0x6, 0x80000000, 0x2, 0x5, 0x7, 0x7, 0x0, 0x7fffffff, 0x7, 0x3, 0xfff, 0x5, 0x0, 0x3, 0x8, 0x1000, 0x10, 0x0, 0xfffffff7, 0xc, 0x31, 0xf90, 0xc, 0x1, 0xffffff01, 0x2, 0x417, 0x6, 0x2, 0x6, 0x401, 0x8, 0x80, 0x7, 0x7, 0x5, 0x2, 0x4, 0xff, 0x293b, 0x1000, 0xb82, 0x4d, 0x7fff, 0x5, 0xe, 0x0, 0x2410, 0x3df0, 0x9, 0x2, 0x55c4, 0x4, 0x7, 0x0, 0xd, 0x2, 0x10000, 0x2, 0x0, 0x2, 0x6, 0xff, 0x3, 0x9, 0x2, 0x8, 0x5, 0x7fff, 0x4b7d, 0x1, 0x2, 0x7, 0x8000, 0x5, 0x2d43, 0x1, 0x8, 0xffffffff, 0x5, 0x3, 0xe, 0x7, 0x5, 0x1000, 0x8, 0xc, 0x0, 0x200, 0xfffffffe, 0xff, 0x7, 0x1, 0x8001, 0xce5, 0x7, 0xfffffffc, 0x3ba0, 0x2, 0x4, 0x101, 0x3, 0x5, 0xd9, 0x7, 0xd, 0x9, 0x3, 0x6, 0x6, 0x0, 0x9, 0x0, 0x6, 0xe492, 0x4, 0x200, 0x400, 0x2da, 0x8001, 0xfffffff7, 0x5, 0x83f, 0x66d4, 0xf, 0x6, 0x4]}, @TCA_HTB_RTAB={0x404, 0x4, [0x7fff, 0x6, 0x7d2, 0x5, 0x0, 0x8, 0x7ff, 0x0, 0x5, 0x0, 0xc, 0x2, 0xcb11, 0x7fff, 0xff, 0x6f37d87a, 0xe05e, 0xc63a, 0x200, 0xe8b2, 0x5, 0x2, 0xd5a, 0x5, 0x4, 0x6f2f, 0x4, 0x2, 0x7, 0x81, 0xf7, 0x26, 0xb, 0x6, 0xfffffff7, 0x4, 0x7d, 0xfffffff8, 0x8001, 0x7fff, 0x5, 0x1, 0x1, 0x8, 0x7, 0x0, 0x80, 0x61, 0x3, 0x5c, 0x81, 0x7, 0x9, 0x5, 0x4, 0x3df, 0x8, 0x1ff, 0x8, 0x7, 0x8, 0xc, 0xbf9, 0x200, 0x9, 0x5, 0x9, 0x2, 0x8, 0x6, 0x8001, 0x1009, 0x4, 0x2, 0x5, 0x3, 0x5, 0x4, 0x40, 0x7, 0xffffbfe4, 0x0, 0x400, 0xffff, 0x200, 0x6, 0x6, 0x2, 0x1, 0x9, 0x6, 0x8, 0xffff478f, 0xeb, 0x0, 0x2, 0x10000, 0xfffffff9, 0x7f, 0x1ff, 0x5, 0xe, 0x80, 0x9, 0x8, 0x55e, 0x4, 0xffffffff, 0x0, 0x4, 0x7, 0x7, 0xd, 0x1, 0x4, 0x0, 0xe7, 0x2f, 0x2, 0x0, 0x1000, 0x3, 0x3, 0x5, 0x8, 0x8, 0x77, 0xe19, 0x21, 0xc, 0x0, 0x9, 0x40, 0x2, 0x9, 0x9, 0x8001, 0x7, 0x8, 0x1b, 0x4, 0x9, 0x1000, 0x7, 0x80000001, 0x917, 0x40, 0x9, 0x0, 0x0, 0x6, 0x13e6, 0x40, 0x0, 0xef, 0x3ff, 0x80, 0x1, 0x4, 0x8, 0x58, 0x1, 0x0, 0x2, 0x80, 0x100, 0x0, 0x0, 0x80, 0x4, 0x10001, 0x8, 0xffff, 0xeed, 0x1000, 0xec, 0x9, 0x1ff, 0x4, 0x8, 0x1, 0x2000bd9c, 0x5, 0xa, 0x2, 0x5, 0x8001, 0x2, 0x4, 0x200, 0x80, 0x4, 0x8, 0x7, 0x1, 0x8001, 0x2, 0x4, 0x4, 0x5, 0x5, 0x684, 0xff, 0x1000, 0xfffffff8, 0xfffffff8, 0x8, 0x4, 0x6, 0x3, 0xc3, 0x2, 0x10001, 0x8, 0x9, 0x7, 0x7, 0xf5, 0xfa03, 0xffff, 0x5, 0x4, 0x925, 0x3, 0xf830, 0x9, 0x7, 0x3, 0x0, 0xd91, 0x6, 0x10001, 0x9, 0x8, 0x55, 0x9, 0x5, 0x1, 0x5, 0x0, 0x100, 0x3ff, 0x4, 0x9, 0x0, 0x4, 0x5, 0x7, 0xf5, 0xd86, 0xfffc0000, 0xa5, 0x80000001, 0xb4b, 0x2, 0x7]}]}}, @TCA_RATE={0x6, 0x5, {0xe5, 0x80}}, @TCA_RATE={0x6, 0x5, {0x5, 0xc}}, @TCA_RATE={0x6, 0x5, {0x0, 0xb}}, @tclass_kind_options=@c_cake={0x9}]}, 0x8a4}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getroute={0x14, 0x1a, 0x408, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x4080) 659.550991ms ago: executing program 34 (id=1763): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x180, 0xff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r2, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x2000, 0x0, 0x1f) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=@newtclass={0x8a4, 0x28, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xd, 0xffff}, {0xfff2, 0xd}, {0x0, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x1f, 0x3}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0xa, 0x2, 0x5, 0xd798, 0xb525, 0x9}, {0x7, 0x0, 0x73, 0x0, 0x8, 0xa6d7}, 0xfffffffb, 0x9, 0x4, 0x7, 0x9}}, @TCA_HTB_RTAB={0x404, 0x4, [0xfffffffd, 0x8001, 0x7, 0x1, 0x1, 0x10001, 0x2, 0x9, 0x5, 0xfffffffd, 0x80000001, 0x8, 0x3, 0x2, 0x10000, 0xdb, 0x7, 0x401, 0x400, 0x8, 0x1ff, 0x0, 0x0, 0xfffffff7, 0x5, 0x300000, 0x8, 0x5, 0x9, 0x3, 0xfffffffc, 0x0, 0x42, 0x4, 0xd40, 0xe, 0xffff, 0xa, 0x4, 0x40000, 0xd5c9, 0x7ff, 0x7f80, 0x80000000, 0x4, 0xfffffffe, 0x81, 0x3, 0x2, 0x4, 0x0, 0xffffff07, 0x6, 0x0, 0x1f039dfc, 0x8, 0x0, 0x81, 0x0, 0x8, 0xf96, 0x2, 0x4, 0xa1, 0x0, 0x9000000, 0xc, 0x6, 0x9, 0x3, 0x7, 0x36, 0x7ff, 0x3, 0xffffffff, 0x3, 0xc, 0x716c, 0x1, 0x81, 0x400, 0x8, 0x200, 0xc84d, 0x80, 0x8, 0x9d5, 0x5, 0x40, 0x3, 0x24, 0x80000000, 0x4, 0x200, 0x73, 0x3, 0x4, 0x0, 0x2, 0x8, 0x401, 0x9, 0x3, 0xe23, 0xc, 0x1, 0xef75, 0x4, 0x11c999c3, 0x6, 0x8, 0x9, 0xa9af, 0x2, 0x8, 0x10, 0x6, 0x1, 0x7f, 0x9, 0x3, 0xffffffff, 0x7f, 0x8, 0x5, 0x200, 0x80, 0x9, 0x6, 0x6, 0x80000000, 0x2, 0x5, 0x7, 0x7, 0x0, 0x7fffffff, 0x7, 0x3, 0xfff, 0x5, 0x0, 0x3, 0x8, 0x1000, 0x10, 0x0, 0xfffffff7, 0xc, 0x31, 0xf90, 0xc, 0x1, 0xffffff01, 0x2, 0x417, 0x6, 0x2, 0x6, 0x401, 0x8, 0x80, 0x7, 0x7, 0x5, 0x2, 0x4, 0xff, 0x293b, 0x1000, 0xb82, 0x4d, 0x7fff, 0x5, 0xe, 0x0, 0x2410, 0x3df0, 0x9, 0x2, 0x55c4, 0x4, 0x7, 0x0, 0xd, 0x2, 0x10000, 0x2, 0x0, 0x2, 0x6, 0xff, 0x3, 0x9, 0x2, 0x8, 0x5, 0x7fff, 0x4b7d, 0x1, 0x2, 0x7, 0x8000, 0x5, 0x2d43, 0x1, 0x8, 0xffffffff, 0x5, 0x3, 0xe, 0x7, 0x5, 0x1000, 0x8, 0xc, 0x0, 0x200, 0xfffffffe, 0xff, 0x7, 0x1, 0x8001, 0xce5, 0x7, 0xfffffffc, 0x3ba0, 0x2, 0x4, 0x101, 0x3, 0x5, 0xd9, 0x7, 0xd, 0x9, 0x3, 0x6, 0x6, 0x0, 0x9, 0x0, 0x6, 0xe492, 0x4, 0x200, 0x400, 0x2da, 0x8001, 0xfffffff7, 0x5, 0x83f, 0x66d4, 0xf, 0x6, 0x4]}, @TCA_HTB_RTAB={0x404, 0x4, [0x7fff, 0x6, 0x7d2, 0x5, 0x0, 0x8, 0x7ff, 0x0, 0x5, 0x0, 0xc, 0x2, 0xcb11, 0x7fff, 0xff, 0x6f37d87a, 0xe05e, 0xc63a, 0x200, 0xe8b2, 0x5, 0x2, 0xd5a, 0x5, 0x4, 0x6f2f, 0x4, 0x2, 0x7, 0x81, 0xf7, 0x26, 0xb, 0x6, 0xfffffff7, 0x4, 0x7d, 0xfffffff8, 0x8001, 0x7fff, 0x5, 0x1, 0x1, 0x8, 0x7, 0x0, 0x80, 0x61, 0x3, 0x5c, 0x81, 0x7, 0x9, 0x5, 0x4, 0x3df, 0x8, 0x1ff, 0x8, 0x7, 0x8, 0xc, 0xbf9, 0x200, 0x9, 0x5, 0x9, 0x2, 0x8, 0x6, 0x8001, 0x1009, 0x4, 0x2, 0x5, 0x3, 0x5, 0x4, 0x40, 0x7, 0xffffbfe4, 0x0, 0x400, 0xffff, 0x200, 0x6, 0x6, 0x2, 0x1, 0x9, 0x6, 0x8, 0xffff478f, 0xeb, 0x0, 0x2, 0x10000, 0xfffffff9, 0x7f, 0x1ff, 0x5, 0xe, 0x80, 0x9, 0x8, 0x55e, 0x4, 0xffffffff, 0x0, 0x4, 0x7, 0x7, 0xd, 0x1, 0x4, 0x0, 0xe7, 0x2f, 0x2, 0x0, 0x1000, 0x3, 0x3, 0x5, 0x8, 0x8, 0x77, 0xe19, 0x21, 0xc, 0x0, 0x9, 0x40, 0x2, 0x9, 0x9, 0x8001, 0x7, 0x8, 0x1b, 0x4, 0x9, 0x1000, 0x7, 0x80000001, 0x917, 0x40, 0x9, 0x0, 0x0, 0x6, 0x13e6, 0x40, 0x0, 0xef, 0x3ff, 0x80, 0x1, 0x4, 0x8, 0x58, 0x1, 0x0, 0x2, 0x80, 0x100, 0x0, 0x0, 0x80, 0x4, 0x10001, 0x8, 0xffff, 0xeed, 0x1000, 0xec, 0x9, 0x1ff, 0x4, 0x8, 0x1, 0x2000bd9c, 0x5, 0xa, 0x2, 0x5, 0x8001, 0x2, 0x4, 0x200, 0x80, 0x4, 0x8, 0x7, 0x1, 0x8001, 0x2, 0x4, 0x4, 0x5, 0x5, 0x684, 0xff, 0x1000, 0xfffffff8, 0xfffffff8, 0x8, 0x4, 0x6, 0x3, 0xc3, 0x2, 0x10001, 0x8, 0x9, 0x7, 0x7, 0xf5, 0xfa03, 0xffff, 0x5, 0x4, 0x925, 0x3, 0xf830, 0x9, 0x7, 0x3, 0x0, 0xd91, 0x6, 0x10001, 0x9, 0x8, 0x55, 0x9, 0x5, 0x1, 0x5, 0x0, 0x100, 0x3ff, 0x4, 0x9, 0x0, 0x4, 0x5, 0x7, 0xf5, 0xd86, 0xfffc0000, 0xa5, 0x80000001, 0xb4b, 0x2, 0x7]}]}}, @TCA_RATE={0x6, 0x5, {0xe5, 0x80}}, @TCA_RATE={0x6, 0x5, {0x5, 0xc}}, @TCA_RATE={0x6, 0x5, {0x0, 0xb}}, @tclass_kind_options=@c_cake={0x9}]}, 0x8a4}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getroute={0x14, 0x1a, 0x408, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x4080) 600.894865ms ago: executing program 2 (id=1765): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffee2, &(0x7f0000000040)={&(0x7f00000000c0)=@setneightbl={0x12, 0x43, 0x1, 0x70bd25, 0x25dfdbfb, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x7fff}, @NDTA_THRESH1={0x8, 0x2, 0x8}, @NDTA_THRESH3={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40008c4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000100)={0xc633, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}) 600.456404ms ago: executing program 2 (id=1766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0x4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) getsockname(r1, 0x0, &(0x7f00000002c0)) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000280)={{r0}, "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"}) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, 0x6}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="c4e239a62d03000000f30fc731c4e258f3d5b8010000000f01d966baf80cb828e04e88ef66bafc0cec64660f38817b213e660f73d1a90f01dfc4c1c5e59000000000c1ca96", 0x45}], 0x1, 0x24, 0x0, 0x0) r4 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='zstd', 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) 599.887275ms ago: executing program 4 (id=1767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}, 0x1, 0x0, 0x300000000000000}, 0x400c) 521.001224ms ago: executing program 4 (id=1768): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x2b}}], 0x5, 0x4040000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume_offset', 0x8a881, 0x20) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000008000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}}) ioctl$LOOP_CLR_FD(r0, 0x4c01) 407.074171ms ago: executing program 2 (id=1769): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) pipe2$9p(&(0x7f0000000000), 0x4080) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x2c, 0x10, 0x403, 0x78bd28, 0x0, {}, [@IFLA_IFALIASn={0x4}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400074100000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 319.939356ms ago: executing program 4 (id=1770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x11, 0x1, 0x48, 0x0, {0x5}}}, 0x8c}}, 0x400c) 260.069007ms ago: executing program 4 (id=1771): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/68, 0x44}], 0x1}, 0x0) 141.178216ms ago: executing program 4 (id=1772): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x0, 0x2, 0x2, 0x5, 0x8d], 0x70000, 0x284e97}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) mq_open(&(0x7f0000000000)='\xd0O\xe4\xde!\xbd!|]\x85\xf3\xde\xebR76\xf1\xeb\xe9\x8e%q\xc4\xf7\x91\xc52\xf9Z\x04\x9d\x11\xcbv*\xe1\x98d\xa0\xb5\xf3;\x87\x1b\xfdG\xfd\xdb\xf5\xe8[@\xd6\xa7\x9c\xb7\xff\f\xb1\xdd\x9b\xa1f\x89[\x04\xab8\x0e\x86\xd5\xce\xda\x06\n\xd3\xd86q^\x91}r\x87\xf6\xdb5b\x90\x83*\xe94\xf0\xbd\x0f\xb4c\x8ec\xf4o0D#Y', 0x2, 0x181, 0x0) (async) mq_open(&(0x7f0000000000)='\xd0O\xe4\xde!\xbd!|]\x85\xf3\xde\xebR76\xf1\xeb\xe9\x8e%q\xc4\xf7\x91\xc52\xf9Z\x04\x9d\x11\xcbv*\xe1\x98d\xa0\xb5\xf3;\x87\x1b\xfdG\xfd\xdb\xf5\xe8[@\xd6\xa7\x9c\xb7\xff\f\xb1\xdd\x9b\xa1f\x89[\x04\xab8\x0e\x86\xd5\xce\xda\x06\n\xd3\xd86q^\x91}r\x87\xf6\xdb5b\x90\x83*\xe94\xf0\xbd\x0f\xb4c\x8ec\xf4o0D#Y', 0x2, 0x181, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$can_raw(0x1d, 0x3, 0x1) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r8}, 0x10, &(0x7f00000003c0)={&(0x7f0000000380)=@can={{0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "67a71ebc03e75ca1"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0xc000) (async) sendmsg$can_raw(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r8}, 0x10, &(0x7f00000003c0)={&(0x7f0000000380)=@can={{0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "67a71ebc03e75ca1"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0xc000) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/dynamic_events\x00', 0x0, 0x0) read(r9, &(0x7f0000000180), 0x1000) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) 0s ago: executing program 2 (id=1773): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="0200000000000038", 0x8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@private2, @in=@multicast2}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in6=@remote, @in=@empty}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, {0xe, 0x6}, {0x391a, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x0, 0xfe, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2d, 0x0, 0x2}}]}, 0x154}}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@allocspi={0x104, 0x16, 0x1, 0x70bd26, 0x25dfdbff, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x4e20, 0x0, 0x4e23, 0x8, 0xa, 0x0, 0xa0, 0x2f, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x4d2, 0x33}, @in=@remote, {0xfffffffffffffff8, 0x3, 0x3ec, 0x2, 0x7, 0x6, 0xe, 0x8}, {0xe374, 0x0, 0x6, 0xf377}, {0x7f, 0x0, 0x2}, 0x70bd2c, 0x3504, 0x2, 0x2, 0x2}, 0x0, 0x1b1d}, [@lastused={0xc, 0xf, 0xfffffffffffffff8}]}, 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000340)={0xf010000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x980912, 0x400, '\x00', @p_u8=0x0}}) 0s ago: executing program 2 (id=1774): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./myconfig\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000280)='./myconfig\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="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", 0x109) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x81}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x81}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) symlinkat(&(0x7f00000005c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') kernel console output (not intermixed with test programs): ng 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 250.522724][ T1342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.526669][ T1342] usb 5-1: Product: syz [ 250.528455][ T1342] usb 5-1: Manufacturer: syz [ 250.530471][ T1342] usb 5-1: SerialNumber: syz [ 250.539104][ T1342] cdc_mbim 5-1:1.0: skipping garbage [ 250.565790][ T5828] usb usb7-port1: unable to enumerate USB device [ 250.741326][ T8772] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 251.016730][ T43] audit: type=1400 audit(1787672232.197:717): avc: denied { getopt } for pid=8773 comm="syz.4.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 251.024012][ T8774] openvswitch: netlink: Flow key attr not present in new flow. [ 251.028622][ T8774] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 251.138086][ T8778] loop2: detected capacity change from 0 to 7 [ 251.145921][ T8778] loop2: [ 251.147397][ T8778] loop2: partition table partially beyond EOD, truncated [ 251.197986][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 251.201150][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 251.250107][ T8782] jffs2: notice: (8782) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 251.355922][ T8772] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 251.359971][ T1342] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 251.363161][ T1342] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 251.374844][ T1342] wwan wwan0: port wwan0mbim0 attached [ 251.389226][ T1342] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 22:bb:e7:cb:94:af [ 251.495561][ T65] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 251.496105][ T43] audit: type=1400 audit(1787672232.677:718): avc: denied { write } for pid=8785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.551650][ T43] audit: type=1400 audit(1787672232.727:719): avc: denied { write } for pid=8790 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.560929][ T43] audit: type=1400 audit(1787672232.737:720): avc: denied { read write } for pid=8791 comm="syz.3.828" name="vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 251.565991][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 251.571338][ T43] audit: type=1400 audit(1787672232.737:721): avc: denied { open } for pid=8791 comm="syz.3.828" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 251.572517][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 251.582393][ T43] audit: type=1400 audit(1787672232.737:722): avc: denied { read write } for pid=8771 comm="syz.0.821" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 251.584867][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 251.594620][ T43] audit: type=1400 audit(1787672232.737:723): avc: denied { open } for pid=8771 comm="syz.0.821" path="/244/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 251.595793][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 251.596797][ T8772] tipc: Enabling not permitted [ 251.597130][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 251.597143][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 251.597489][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 251.597499][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 251.597676][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 251.597687][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 251.597858][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 251.597868][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 251.598048][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 251.598058][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 251.600375][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 251.600389][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 251.600563][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 251.600573][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 251.600804][ C2] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 251.600846][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 251.607682][ T43] audit: type=1400 audit(1787672232.737:724): avc: denied { ioctl } for pid=8771 comm="syz.0.821" path="/244/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 251.613076][ T8772] tipc: Enabling of bearer rejected, failed to enable media [ 251.623435][ T8793] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 251.645169][ T65] usb 9-1: Using ep0 maxpacket: 8 [ 251.645935][ T65] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 251.646360][ T5438] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 251.697881][ T65] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 251.701638][ T65] usb 9-1: config 0 has no interface number 0 [ 251.704263][ T65] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 251.706004][ C2] cdc_mbim 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 251.710277][ T65] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 251.712122][ T5855] usb 5-1: USB disconnect, device number 15 [ 251.716563][ T65] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 251.722837][ T65] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 251.727996][ T5855] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 251.729501][ T65] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.738045][ T65] usb 9-1: config 0 descriptor?? [ 251.749256][ T65] ldusb 9-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 251.834212][ T8810] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 251.857798][ T5855] wwan wwan0: port wwan0mbim0 disconnected [ 251.914002][ T8813] bond0: option slaves: invalid value (-veth0) [ 251.986936][ T8822] loop5: detected capacity change from 0 to 7 [ 252.017486][ T8822] Dev loop5: unable to read RDB block 7 [ 252.021617][ T8822] loop5: unable to read partition table [ 252.023546][ T8822] loop5: partition table beyond EOD, truncated [ 252.030365][ T8822] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 252.101573][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 252.110572][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.837'. [ 252.266597][ T8855] netlink: 'syz.3.843': attribute type 10 has an invalid length. [ 252.278137][ T8855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.281988][ T8855] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 252.603050][ T1342] usb 9-1: USB disconnect, device number 11 [ 252.609311][ T1342] ldusb 9-1:0.55: LD USB Device #1 now disconnected [ 254.323758][ T8885] input: syz1 as /devices/virtual/input/input13 [ 254.354653][ T8885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.853'. [ 254.713704][ T8867] mmap: syz.4.847 (8867) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 254.966062][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 254.966080][ T43] audit: type=1800 audit(1787672236.130:742): pid=8900 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.853" name="/" dev="fuse" ino=6 res=0 errno=0 [ 255.267713][ T8919] EXT4-fs (nbd0): unable to read superblock [ 255.320387][ T8930] loop2: detected capacity change from 0 to 7 [ 255.339073][ T8930] loop2: [ 255.340320][ T8930] loop2: partition table partially beyond EOD, truncated [ 255.352299][ T43] audit: type=1400 audit(1787672236.520:743): avc: denied { unmount } for pid=5747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 255.407898][ T8935] tipc: Trying to set illegal importance in message [ 255.464607][ T8939] netlink: 'syz.0.866': attribute type 10 has an invalid length. [ 255.468650][ T8939] syz_tun: entered promiscuous mode [ 255.483891][ T8939] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 255.593041][ T43] audit: type=1400 audit(1787672236.760:744): avc: denied { append } for pid=8941 comm="syz.0.870" name="uprobe_events" dev="tracefs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 255.609558][ T8942] jffs2: notice: (8942) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 255.746115][ T43] audit: type=1400 audit(1787672236.920:745): avc: denied { append } for pid=8951 comm="syz.0.873" name="001" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 255.943312][ T43] audit: type=1400 audit(1788196525.114:746): avc: denied { create } for pid=8951 comm="syz.0.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 255.957582][ T43] audit: type=1400 audit(1788196525.114:747): avc: denied { bind } for pid=8951 comm="syz.0.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 256.038123][ T8964] netlink: 32 bytes leftover after parsing attributes in process `syz.0.876'. [ 256.079137][ T8968] overlayfs: invalid redirect ((null)) [ 256.090800][ T8964] netlink: 52 bytes leftover after parsing attributes in process `syz.0.876'. [ 256.148412][ T8964] bond3: option downdelay: invalid value (18446744073709551615) [ 256.156077][ T8964] bond3: option downdelay: allowed values 0 - 2147483647 [ 256.160202][ T8964] bond3 (unregistering): Released all slaves [ 256.253047][ T8979] loop2: detected capacity change from 0 to 7 [ 256.258919][ T8979] loop2: [ 256.260812][ T8979] loop2: partition table partially beyond EOD, truncated [ 256.293663][ T43] audit: type=1400 audit(1788196525.464:748): avc: denied { name_bind } for pid=8980 comm="syz.0.882" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 256.342716][ T43] audit: type=1400 audit(1788196525.514:749): avc: denied { map } for pid=8984 comm="syz.4.885" path="pipe:[26835]" dev="pipefs" ino=26835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 256.355019][ T43] audit: type=1400 audit(1788196525.514:750): avc: denied { execute } for pid=8984 comm="syz.4.885" path="pipe:[26835]" dev="pipefs" ino=26835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 256.363671][ T43] audit: type=1400 audit(1788196525.534:751): avc: denied { name_bind } for pid=8980 comm="syz.0.882" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 256.610873][ T9006] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 257.051221][ T9039] loop2: detected capacity change from 0 to 7 [ 257.055270][ T9039] loop2: [ 257.056590][ T9039] loop2: partition table partially beyond EOD, truncated [ 257.138699][ T9046] netlink: 'syz.4.901': attribute type 1 has an invalid length. [ 257.157577][ T9046] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.203573][ T9054] loop8: detected capacity change from 0 to 7 [ 257.211746][ T9054] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 257.220011][ T9054] loop8: partition table partially beyond EOD, truncated [ 257.222891][ T9054] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 257.227612][ T9054] loop8: p2 start 121280928 is beyond EOD, truncated [ 257.240746][ T9054] netlink: 'syz.0.903': attribute type 1 has an invalid length. [ 257.260053][ T5762] udevd[5762]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 257.279303][ T9056] openvswitch: netlink: Message has 8 unknown bytes. [ 257.289489][ T9056] netlink: 32 bytes leftover after parsing attributes in process `syz.4.904'. [ 257.431517][ T9063] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 257.898052][ T9066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.908'. [ 257.902015][ T9066] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 258.105219][ T9070] netlink: 'syz.2.910': attribute type 28 has an invalid length. [ 258.107720][ T9070] netlink: 'syz.2.910': attribute type 3 has an invalid length. [ 258.110168][ T9070] netlink: 132 bytes leftover after parsing attributes in process `syz.2.910'. [ 258.190913][ T9074] vlan3: entered allmulticast mode [ 258.193022][ T9074] macsec0: entered allmulticast mode [ 258.195001][ T9074] veth1_macvtap: entered allmulticast mode [ 258.318484][ T80] IPVS: starting estimator thread 0... [ 258.322442][ T9088] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20002 [ 258.423487][ T9089] IPVS: using max 45 ests per chain, 108000 per kthread [ 258.467712][ T9085] program syz.0.916 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.919905][ T9100] syzkaller0: entered promiscuous mode [ 258.922173][ T9100] syzkaller0: entered allmulticast mode [ 259.019113][ T9102] Mount JFS Failure: -22 [ 259.021736][ T9102] jfs_mount failed w/return code = -22 [ 259.026234][ T9102] Mount JFS Failure: -22 [ 259.027698][ T9102] jfs_mount failed w/return code = -22 [ 259.030154][ T9102] Mount JFS Failure: -22 [ 259.032297][ T9102] jfs_mount failed w/return code = -22 [ 259.034840][ T9102] Mount JFS Failure: -22 [ 259.036302][ T9102] jfs_mount failed w/return code = -22 [ 259.042389][ T9102] Mount JFS Failure: -22 [ 259.044503][ T9102] jfs_mount failed w/return code = -22 [ 259.050767][ T9102] Mount JFS Failure: -22 [ 259.053430][ T9102] jfs_mount failed w/return code = -22 [ 259.055983][ T9102] Mount JFS Failure: -22 [ 259.057447][ T9102] jfs_mount failed w/return code = -22 [ 259.059762][ T9102] Mount JFS Failure: -22 [ 259.061480][ T9102] jfs_mount failed w/return code = -22 [ 259.064236][ T9102] Mount JFS Failure: -22 [ 259.065776][ T9102] jfs_mount failed w/return code = -22 [ 259.209720][ T9118] loop2: detected capacity change from 0 to 7 [ 259.217271][ T9118] loop2: [ 259.218301][ T9118] loop2: partition table partially beyond EOD, truncated [ 259.396499][ T9135] netlink: 'syz.0.930': attribute type 1 has an invalid length. [ 259.415050][ T9135] 8021q: adding VLAN 0 to HW filter on device bond3 [ 259.419924][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 259.423798][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.930'. [ 259.440162][ T9135] bond3: (slave geneve3): making interface the new active one [ 259.450058][ T9135] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 259.476084][ T5898] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.481684][ T5898] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.485152][ T5898] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.488063][ T5898] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.548418][ T9154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42324 sclass=netlink_route_socket pid=9154 comm=syz.2.935 [ 259.579811][ T9158] netlink: 48 bytes leftover after parsing attributes in process `syz.3.938'. [ 259.624173][ T9166] jffs2: notice: (9166) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 259.632082][ T9168] syzkaller1: entered promiscuous mode [ 259.633915][ T9168] syzkaller1: entered allmulticast mode [ 259.764970][ T9178] netlink: 'syz.4.944': attribute type 4 has an invalid length. [ 259.769470][ T9178] netlink: 224 bytes leftover after parsing attributes in process `syz.4.944'. [ 259.958946][ T9187] netlink: 'syz.0.948': attribute type 1 has an invalid length. [ 259.978042][ T9187] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.048534][ T65] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 260.204174][ T65] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 260.211239][ T65] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.214081][ T65] usb 9-1: Product: syz [ 260.215391][ T65] usb 9-1: Manufacturer: syz [ 260.217472][ T65] usb 9-1: SerialNumber: syz [ 260.259206][ T5867] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 260.408495][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 260.408507][ T43] audit: type=1400 audit(1788196529.481:759): avc: denied { unlink } for pid=9195 comm="syz.0.951" name="file0" dev="9p" ino=78396019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 260.420306][ T43] audit: type=1400 audit(1788196529.481:760): avc: denied { create } for pid=9195 comm="syz.0.951" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 260.757022][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.952'. [ 260.822620][ T43] audit: type=1400 audit(1788196529.880:761): avc: denied { append } for pid=9214 comm="syz.2.957" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 260.830029][ T43] audit: type=1400 audit(1788196529.880:762): avc: denied { open } for pid=9214 comm="syz.2.957" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 260.872983][ T9217] overlayfs: overlapping lowerdir path [ 260.881240][ T9180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.883128][ T9217] overlayfs: overlapping lowerdir path [ 260.886057][ T9180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.901226][ T1342] usb 9-1: USB disconnect, device number 12 [ 260.920428][ T43] audit: type=1400 audit(1788196529.968:763): avc: denied { watch } for pid=9222 comm="syz.2.960" path="/proc/733/fdinfo" dev="proc" ino=25480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 260.930243][ T43] audit: type=1400 audit(1788196529.968:764): avc: denied { watch_sb watch_reads } for pid=9222 comm="syz.2.960" path="/proc/733/fdinfo" dev="proc" ino=25480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 260.987402][ T9227] bond4: option downdelay: invalid value (18446744073709551615) [ 260.990433][ T9227] bond4: option downdelay: allowed values 0 - 2147483647 [ 261.024524][ T9227] bond4 (unregistering): Released all slaves [ 261.133001][ T9234] loop2: detected capacity change from 0 to 7 [ 261.136534][ T9234] loop2: [ 261.137545][ T9234] loop2: partition table partially beyond EOD, truncated [ 261.235262][ T9244] xt_ecn: cannot match TCP bits for non-tcp packets [ 261.468049][ T9255] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 261.475571][ T43] audit: type=1400 audit(1788196530.524:765): avc: denied { read write } for pid=9254 comm="syz.2.973" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 261.485348][ T43] audit: type=1400 audit(1788196530.524:766): avc: denied { open } for pid=9254 comm="syz.2.973" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 261.740569][ T5867] usb 9-1: Service connection timeout for: 256 [ 261.742543][ T5867] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 261.746446][ T5867] ath9k_htc: Failed to initialize the device [ 261.753714][ T1342] usb 9-1: ath9k_htc: USB layer deinitialized [ 261.780542][ T43] audit: type=1400 audit(1788196530.817:767): avc: denied { append } for pid=9268 comm="syz.2.975" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 261.855006][ T9277] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 262.011967][ T5855] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 262.016405][ T5855] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 262.061452][ T9290] fido_id[9290]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 262.184425][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 262.188046][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.983'. [ 262.310811][ T43] audit: type=1400 audit(1788196531.335:768): avc: denied { append } for pid=9309 comm="syz.0.989" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 262.359980][ T9310] kvm: MONITOR instruction emulated as NOP! [ 263.039459][ T9336] bonding: bond0 is being created... [ 263.056492][ T9336] bonding: bond0 already exists [ 263.319725][ T9359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1008'. [ 263.479268][ T5855] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 263.643463][ T5855] usb 7-1: not running at top speed; connect to a high speed hub [ 263.646116][ T5855] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 263.650129][ T5855] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 263.654604][ T5855] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 263.659960][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.662481][ T5855] usb 7-1: Product: syz [ 263.664006][ T5855] usb 7-1: Manufacturer: syz [ 263.665506][ T5855] usb 7-1: SerialNumber: syz [ 263.676436][ T5855] oti6858 7-1:1.0: oti6858 converter detected [ 263.687180][ T5855] usb 7-1: oti6858 converter now attached to ttyUSB0 [ 263.757469][ T9382] Unable to locate . in FUNC.INSTANCE [ 263.796668][ T9384] Device name not specified. [ 263.796668][ T9384] [ 263.804465][ T9384] team0: No ports can be present during mode change [ 264.001674][ T9351] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 264.004157][ T9398] tmpfs: Invalid uid '0x00000000ffffffff' [ 264.009498][ T5855] usb 7-1: USB disconnect, device number 13 [ 264.025404][ T5855] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 264.028430][ T5855] oti6858 7-1:1.0: device disconnected [ 264.031230][ T9401] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x2901 instead [ 264.038763][ T9401] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x000c instead [ 264.046982][ T9401] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xb0b1 instead [ 264.050361][ T9401] jffs2: notice: (9401) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 264.697903][ T9432] syzkaller0: entered promiscuous mode [ 264.699945][ T9432] syzkaller0: entered allmulticast mode [ 264.811588][ T9442] netlink: 'syz.3.1039': attribute type 10 has an invalid length. [ 264.825087][ T9442] team0: Port device dummy0 added [ 264.994898][ T9453] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1043'. [ 265.181463][ T9465] netlink: 'syz.4.1047': attribute type 1 has an invalid length. [ 265.193697][ T5855] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 265.197144][ T9465] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.257973][ T9471] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1049'. [ 265.346978][ T5855] usb 5-1: Using ep0 maxpacket: 8 [ 265.365574][ T5855] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.390865][ T5855] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 265.400590][ T5855] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 265.406075][ T5855] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.410010][ T5855] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.413895][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.550216][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 265.550230][ T43] audit: type=1400 audit(1788196534.508:785): avc: denied { unmount } for pid=5747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 265.624382][ T9516] ipt_ECN: cannot use operation on non-tcp rule [ 265.641675][ T50] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 265.655038][ T5855] usb 5-1: GET_CAPABILITIES returned 0 [ 265.656724][ T5855] usbtmc 5-1:16.0: can't read capabilities [ 265.677359][ T5855] usb 5-1: USB disconnect, device number 16 [ 265.716492][ T9522] loop2: detected capacity change from 0 to 7 [ 265.719566][ T9522] loop2: [ 265.720767][ T9522] loop2: partition table partially beyond EOD, truncated [ 265.732708][ T5136] loop2: [ 265.735762][ T5136] loop2: partition table partially beyond EOD, truncated [ 265.738657][ T43] audit: type=1400 audit(1788196534.695:786): avc: denied { create } for pid=9523 comm="syz.2.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 265.795011][ T50] usb 9-1: Using ep0 maxpacket: 16 [ 265.798294][ T50] usb 9-1: unable to get BOS descriptor or descriptor too short [ 265.800852][ T50] usb 9-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 265.805849][ T50] usb 9-1: config 1 has an invalid interface number: 232 but max is 0 [ 265.808571][ T50] usb 9-1: config 1 has no interface number 0 [ 265.810436][ T50] usb 9-1: config 1 interface 232 altsetting 93 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 265.814278][ T50] usb 9-1: config 1 interface 232 altsetting 93 endpoint 0xE has invalid wMaxPacketSize 0 [ 265.824519][ T50] usb 9-1: config 1 interface 232 has no altsetting 0 [ 265.830280][ T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.833937][ T50] usb 9-1: Product: syz [ 265.838594][ T50] usb 9-1: Manufacturer: syz [ 265.840057][ T50] usb 9-1: SerialNumber: syz [ 265.905978][ T9540] device-mapper: table: 248:0: zero-length target [ 265.908416][ T9540] device-mapper: ioctl: error adding target to table [ 266.004523][ T43] audit: type=1400 audit(1788196534.950:787): avc: denied { connect } for pid=9546 comm="syz.0.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 266.068717][ T50] hub 9-1:1.232: bad descriptor, ignoring hub [ 266.071963][ T50] hub 9-1:1.232: probe with driver hub failed with error -5 [ 266.075999][ T50] option 9-1:1.232: GSM modem (1-port) converter detected [ 266.100476][ T50] usb 9-1: USB disconnect, device number 13 [ 266.110930][ T50] option 9-1:1.232: device disconnected [ 266.724606][ T9594] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 266.761615][ T50] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 266.761748][ T9595] ceph: No mds server is up or the cluster is laggy [ 266.771039][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 266.773592][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 266.904821][ T9613] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1085'. [ 266.914944][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 266.920017][ T50] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 266.923555][ T50] usb 5-1: config 0 has no interfaces? [ 266.926479][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.942358][ T50] usb 5-1: config 0 descriptor?? [ 266.983840][ T9618] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 267.078851][ T9624] netlink: 'syz.2.1088': attribute type 3 has an invalid length. [ 267.081825][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'. [ 267.202084][ T9631] loop2: detected capacity change from 0 to 7 [ 267.208469][ T5896] usb 5-1: USB disconnect, device number 17 [ 267.209731][ T9631] loop2: [ 267.211667][ T9631] loop2: partition table partially beyond EOD, truncated [ 267.374725][ T43] audit: type=1400 audit(1788196536.307:788): avc: denied { wake_alarm } for pid=9638 comm="syz.2.1095" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 267.375400][ T9642] netlink: 'syz.4.1096': attribute type 7 has an invalid length. [ 267.385734][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1096'. [ 267.388973][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 267.595012][ T9655] loop2: detected capacity change from 0 to 7 [ 267.601547][ T9655] loop2: [ 267.602824][ T9655] loop2: partition table partially beyond EOD, truncated [ 267.648813][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1102'. [ 267.651793][ T9659] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 267.704344][ T5913] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 267.707686][ T5913] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 267.712335][ T5913] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 267.715629][ T5913] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 267.719417][ T5913] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 267.722451][ T5913] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 267.725332][ T5913] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 267.728936][ T5913] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 267.731823][ T5913] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 267.734785][ T5913] hid-generic 0006:0008:0008.0006: unknown main item tag 0x0 [ 267.745791][ T5913] hid-generic 0006:0008:0008.0006: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 267.786953][ T9666] fido_id[9666]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 267.886005][ T43] audit: type=1400 audit(1788196536.798:789): avc: denied { read write } for pid=9676 comm="syz.4.1108" name="cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 267.893835][ T43] audit: type=1400 audit(1788196536.798:790): avc: denied { open } for pid=9676 comm="syz.4.1108" path="/181/dev/cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 267.915893][ T43] audit: type=1400 audit(1788196536.828:791): avc: denied { mounton } for pid=9672 comm="syz.0.1106" path="/314/file0/file0" dev="9p" ino=78395939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 267.932119][ T43] audit: type=1400 audit(1788196536.828:792): avc: denied { mount } for pid=9672 comm="syz.0.1106" name="/" dev="hugetlbfs" ino=31172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 267.993081][ T9686] loop2: detected capacity change from 0 to 7 [ 267.997168][ T9686] loop2: [ 267.998431][ T9686] loop2: partition table partially beyond EOD, truncated [ 268.004934][ T43] audit: type=1326 audit(1788196536.926:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9688 comm="syz.4.1113" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f046d19e0d9 code=0x0 [ 268.039985][ T7587] syz_tun (unregistering): left allmulticast mode [ 268.044656][ T7587] bond0: (slave syz_tun): Releasing backup interface [ 268.061412][ T9690] xt_time: unknown flags 0x78 [ 268.064142][ T9690] batman_adv: batadv0: Adding interface: veth0 [ 268.064423][ T9692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1114'. [ 268.066350][ T9690] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.077529][ T9690] batman_adv: batadv0: Interface activated: veth0 [ 268.085887][ T9690] batman_adv: batadv0: Interface deactivated: veth0 [ 268.115165][ T9690] batman_adv: batadv0: Removing interface: veth0 [ 268.247838][ T9698] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.252549][ T9696] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.255880][ T9696] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.259349][ T9696] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.440465][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.442930][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.705500][ T5751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.710385][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.714327][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 268.724392][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 268.727125][ T5751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.015219][ T9735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.021316][ T9735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.026904][ T9735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.030622][ T9735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.175542][ T9752] input: syz0 as /devices/virtual/input/input14 [ 269.211757][ T43] audit: type=1400 audit(1788196538.108:794): avc: denied { bind } for pid=9755 comm="syz.2.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 269.254356][ T9707] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.263585][ T9707] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.267076][ T9707] bridge_slave_0: entered allmulticast mode [ 269.273106][ T9707] bridge_slave_0: entered promiscuous mode [ 269.282766][ T9707] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.285554][ T9707] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.288555][ T9707] bridge_slave_1: entered allmulticast mode [ 269.296236][ T9707] bridge_slave_1: entered promiscuous mode [ 269.332656][ T9707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.340883][ T9707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.346630][ T9763] loop2: detected capacity change from 0 to 7 [ 269.351479][ T9763] loop2: [ 269.357683][ T9763] loop2: partition table partially beyond EOD, truncated [ 269.383557][ T9707] team0: Port device team_slave_0 added [ 269.387437][ T9707] team0: Port device team_slave_1 added [ 269.431888][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.436277][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.447887][ T9707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.454148][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.457435][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.467831][ T9707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.502908][ T9707] hsr_slave_0: entered promiscuous mode [ 269.506040][ T9707] hsr_slave_1: entered promiscuous mode [ 269.508302][ T9707] debugfs: 'hsr0' already exists in 'hsr' [ 269.510310][ T9707] Cannot create hsr debugfs directory [ 269.530021][ T9770] ip_tables: iptables: counters copy to user failed while replacing table [ 269.693970][ T9777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1139'. [ 269.714986][ T9707] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 269.720240][ T9707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 269.723134][ T9707] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 269.728292][ T9707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 269.731188][ T9707] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 269.737082][ T9707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 269.741811][ T9707] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.745788][ T9707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.764062][ T9707] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.766300][ T9707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.768629][ T9707] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.770972][ T9707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.803091][ T9707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.812472][ T9494] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.816615][ T9494] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.827945][ T9707] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.835029][ T9494] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.837698][ T9494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.850322][ T9494] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.852577][ T9494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.866604][ T9787] random: crng reseeded on system resumption [ 269.905237][ T9789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26230 sclass=netlink_route_socket pid=9789 comm=syz.4.1142 [ 270.270669][ T9707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.302251][ T9828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1150'. [ 270.351446][ T9828] lo: entered allmulticast mode [ 270.363078][ T9827] lo: left allmulticast mode [ 270.500736][ T9707] veth0_vlan: entered promiscuous mode [ 270.506614][ T9707] veth1_vlan: entered promiscuous mode [ 270.507512][ T9843] devpts: Unknown parameter '9p' [ 270.535209][ T9707] veth0_macvtap: entered promiscuous mode [ 270.541334][ T9707] veth1_macvtap: entered promiscuous mode [ 270.564023][ T9707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.572054][ T9707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.635122][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.642505][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.688917][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.693228][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.706892][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 270.706904][ T43] audit: type=1400 audit(1788196539.578:802): avc: denied { mounton } for pid=9707 comm="syz-executor" path="/syzkaller.MBrTSL/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 270.721182][ T14] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.729022][ T14] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.730718][ T43] audit: type=1400 audit(1788196539.597:803): avc: denied { mounton } for pid=9707 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 270.740628][ T43] audit: type=1400 audit(1788196539.617:804): avc: denied { mounton } for pid=9707 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 270.742186][ T14] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.753927][ T14] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.792028][ T5749] Bluetooth: hci0: command tx timeout [ 270.981643][ T43] audit: type=1400 audit(1788196539.854:805): avc: denied { listen } for pid=9856 comm="syz.5.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 271.048323][ T9859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.059987][ T9859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.492955][ T43] audit: type=1400 audit(1788196540.357:806): avc: denied { mount } for pid=9860 comm="syz.3.1162" name="/" dev="rpc_pipefs" ino=32037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 271.507804][ T43] audit: type=1400 audit(1788196540.367:807): avc: denied { accept } for pid=9860 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 271.515071][ T43] audit: type=1400 audit(1788196540.367:808): avc: denied { read } for pid=9860 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 271.716994][ T43] audit: type=1400 audit(1788196540.575:809): avc: denied { map } for pid=9871 comm="syz.4.1167" path="socket:[28509]" dev="sockfs" ino=28509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 271.729948][ T43] audit: type=1400 audit(1788196540.575:810): avc: denied { read } for pid=9871 comm="syz.4.1167" path="socket:[28509]" dev="sockfs" ino=28509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 271.734677][ T9872] af_packet: packet size is too long (25449 > 2016) [ 272.012948][ T9882] usb3503 0-0008: unknown mode is requested [ 272.015700][ T9882] usb3503 0-0008: usb3503_probe: probed in standby mode [ 272.029787][ T9882] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 272.034718][ T9882] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 272.053404][ T43] audit: type=1400 audit(1788196540.911:811): avc: denied { ioctl } for pid=9881 comm="syz.4.1172" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x5664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 272.138762][ T42] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 272.200257][ T9887] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 272.301066][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 272.303302][ T42] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 272.307766][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.331976][ T42] pvrusb2: Hardware description: Terratec Grabster AV400 [ 272.340768][ T42] pvrusb2: ********** [ 272.345727][ T42] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 272.349857][ T42] pvrusb2: Important functionality might not be entirely working. [ 272.353798][ T42] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 272.356225][ T9894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.359071][ T42] pvrusb2: ********** [ 272.529928][ T2515] pvrusb2: Invalid write control endpoint [ 272.574684][ T2515] pvrusb2: Invalid write control endpoint [ 272.580149][ T2515] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 272.585463][ T2515] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 272.587753][ T2515] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 272.590681][ T2515] pvrusb2: Device being rendered inoperable [ 272.597653][ T2515] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 272.603640][ T2515] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 272.611362][ T2515] pvrusb2: Attached sub-driver cx25840 [ 272.613403][ T2515] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 272.617262][ T2515] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 272.730621][ T9878] pvrusb2: Attempted to execute control transfer when device not ok [ 272.738427][ T9878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1170'. [ 272.742563][ T9878] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 272.750424][ T5913] usb 7-1: USB disconnect, device number 14 [ 272.887949][ T5749] Bluetooth: hci0: command tx timeout [ 272.897793][ T5828] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 273.059632][ T5828] usb 10-1: Using ep0 maxpacket: 32 [ 273.062385][ T5828] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 273.066963][ T5828] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 273.072680][ T5828] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 273.077010][ T5828] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.081763][ T5828] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 273.088918][ T5828] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.091746][ T5828] usb 10-1: Product: syz [ 273.093390][ T5828] usb 10-1: Manufacturer: syz [ 273.095081][ T5828] usb 10-1: SerialNumber: syz [ 273.105161][ C2] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 273.119782][ T5828] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input16 [ 273.268021][ T9910] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 273.341579][ T5828] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 273.345361][ T5828] (id 0x00) [ 273.385723][ T9916] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1185'. [ 273.403964][ T5828] rc_core: IR keymap rc-imon-pad not found [ 273.409432][ T5828] Registered IR keymap rc-empty [ 273.411478][ T5828] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 273.419713][ T5828] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 273.530441][ T5828] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 273.541621][ T5828] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input17 [ 273.561324][ T5828] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:2> initialized [ 273.575402][ T5828] usb 10-1: USB disconnect, device number 2 [ 273.812776][ T9949] netlink: 'syz.3.1196': attribute type 10 has an invalid length. [ 273.819647][ T9949] geneve1: entered promiscuous mode [ 273.833133][ T9949] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 273.850812][ T9953] Bluetooth: MGMT ver 1.23 [ 273.988938][ T9969] netlink: 'syz.4.1202': attribute type 32 has an invalid length. [ 274.211104][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1206'. [ 274.360253][ T9990] overlay: Unknown parameter 'fowner>00000000000000000000' [ 274.387985][ T9992] syzkaller1: entered promiscuous mode [ 274.390279][ T9992] syzkaller1: entered allmulticast mode [ 274.549329][ T9999] xt_hashlimit: size too large, truncated to 1048576 [ 274.797111][T10008] ./cgroup: Can't lookup blockdev [ 274.858384][T10011] echo interval is out of bounds [ 274.858384][T10011] [ 274.863878][T10011] CIFS: VFS: echo interval is out of bounds [ 274.989972][ T5749] Bluetooth: hci0: command tx timeout [ 275.016974][T10027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1222'. [ 275.232003][T10039] FAULT_INJECTION: forcing a failure. [ 275.232003][T10039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.242505][T10039] CPU: 0 UID: 0 PID: 10039 Comm: syz.2.1227 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.242530][T10039] Tainted: [L]=SOFTLOCKUP [ 275.242534][T10039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.242541][T10039] Call Trace: [ 275.242546][T10039] [ 275.242551][T10039] dump_stack_lvl+0x100/0x190 [ 275.242584][T10039] should_fail_ex.cold+0x5/0xa [ 275.242602][T10039] _copy_from_user+0x2e/0xd0 [ 275.242633][T10039] copy_msghdr_from_user+0x9f/0x4c0 [ 275.242655][T10039] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 275.242679][T10039] ___sys_sendmsg+0x106/0x1e0 [ 275.242697][T10039] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.242714][T10039] ? get_pid_task+0x106/0x250 [ 275.242734][T10039] ? find_held_lock+0x2b/0x80 [ 275.242759][T10039] __sys_sendmsg+0x160/0x210 [ 275.242772][T10039] ? __pfx___sys_sendmsg+0x10/0x10 [ 275.242792][T10039] do_syscall_64+0x123/0x790 [ 275.242812][T10039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.242826][T10039] RIP: 0033:0x7f7c9699e0d9 [ 275.242837][T10039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.242850][T10039] RSP: 002b:00007f7c97818028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.242862][T10039] RAX: ffffffffffffffda RBX: 00007f7c96c25fa0 RCX: 00007f7c9699e0d9 [ 275.242870][T10039] RDX: 0000000004000080 RSI: 0000200000001280 RDI: 0000000000000003 [ 275.242878][T10039] RBP: 00007f7c97818090 R08: 0000000000000000 R09: 0000000000000000 [ 275.242885][T10039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.242892][T10039] R13: 00007f7c96c26038 R14: 00007f7c96c25fa0 R15: 00007fff58e30368 [ 275.242908][T10039] [ 275.335100][T10046] netlink: 'syz.4.1231': attribute type 2 has an invalid length. [ 275.558969][ T5867] wiimote 0005:057E:0306.0007: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 275.563035][ T5867] wiimote 0005:057E:0306.0007: New device registered [ 275.567436][ T204] rpcbind: server 127.0.0.1 not responding, timed out [ 275.747390][ T65] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 275.775988][T10070] FAULT_INJECTION: forcing a failure. [ 275.775988][T10070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.784309][T10070] CPU: 2 UID: 0 PID: 10070 Comm: syz.3.1239 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.784338][T10070] Tainted: [L]=SOFTLOCKUP [ 275.784344][T10070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.784354][T10070] Call Trace: [ 275.784360][T10070] [ 275.784366][T10070] dump_stack_lvl+0x100/0x190 [ 275.784395][T10070] should_fail_ex.cold+0x5/0xa [ 275.784418][T10070] _copy_from_user+0x2e/0xd0 [ 275.784445][T10070] ____sys_sendmsg+0x1d1/0xbe0 [ 275.784468][T10070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.784499][T10070] ___sys_sendmsg+0x190/0x1e0 [ 275.784522][T10070] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.784543][T10070] ? get_pid_task+0x106/0x250 [ 275.784582][T10070] ? find_held_lock+0x2b/0x80 [ 275.784615][T10070] __sys_sendmsg+0x160/0x210 [ 275.784632][T10070] ? __pfx___sys_sendmsg+0x10/0x10 [ 275.784661][T10070] do_syscall_64+0x123/0x790 [ 275.784681][T10070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.784699][T10070] RIP: 0033:0x7f788a39e0d9 [ 275.784714][T10070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.784730][T10070] RSP: 002b:00007f788b33d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.784747][T10070] RAX: ffffffffffffffda RBX: 00007f788a625fa0 RCX: 00007f788a39e0d9 [ 275.784758][T10070] RDX: 0000000004000080 RSI: 0000200000001280 RDI: 0000000000000003 [ 275.784769][T10070] RBP: 00007f788b33d090 R08: 0000000000000000 R09: 0000000000000000 [ 275.784778][T10070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.784788][T10070] R13: 00007f788a626038 R14: 00007f788a625fa0 R15: 00007ffca77ac148 [ 275.784810][T10070] [ 275.919189][ T65] usb 9-1: Using ep0 maxpacket: 8 [ 275.921703][ T65] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 275.925305][ T65] usb 9-1: config 0 has no interfaces? [ 275.929105][ T65] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.931892][ T65] usb 9-1: Product: syz [ 275.933429][ T65] usb 9-1: Manufacturer: syz [ 275.935849][ T65] usb 9-1: SerialNumber: syz [ 275.939297][ T65] usb 9-1: config 0 descriptor?? [ 276.147154][ T50] wiimote 0005:057E:0306.0007: detected device: Nintendo Wii Remote (Gen 1) [ 276.230007][ T50] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input19 [ 276.247535][ T50] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input20 [ 276.266996][ T50] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input18 [ 276.280756][T10090] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 276.384802][ T1342] usb 9-1: USB disconnect, device number 14 [ 276.393304][T10054] wiimote 0005:057E:0306.0007: Device removed [ 276.605733][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 276.605751][ T43] audit: type=1400 audit(1788196545.423:833): avc: denied { setopt } for pid=10095 comm="syz.5.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 276.710084][ T43] audit: type=1400 audit(1788196545.522:834): avc: denied { getopt } for pid=10100 comm="syz.2.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 276.735835][ T43] audit: type=1400 audit(1788196545.542:835): avc: denied { create } for pid=10100 comm="syz.2.1249" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 276.766141][T10103] FAULT_INJECTION: forcing a failure. [ 276.766141][T10103] name failslab, interval 1, probability 0, space 0, times 0 [ 276.772541][T10103] CPU: 1 UID: 0 PID: 10103 Comm: syz.5.1250 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.772572][T10103] Tainted: [L]=SOFTLOCKUP [ 276.772577][T10103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 276.772585][T10103] Call Trace: [ 276.772590][T10103] [ 276.772596][T10103] dump_stack_lvl+0x100/0x190 [ 276.772621][T10103] should_fail_ex.cold+0x5/0xa [ 276.772640][T10103] should_failslab+0xc2/0x120 [ 276.772680][T10103] __kmalloc_cache_noprof+0x91/0x6b0 [ 276.772711][T10103] ? __scm_send+0xeb4/0x1620 [ 276.772737][T10103] __scm_send+0xeb4/0x1620 [ 276.772763][T10103] ? __pfx___scm_send+0x10/0x10 [ 276.772788][T10103] unix_stream_sendmsg+0xd63/0x1310 [ 276.772814][T10103] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 276.772840][T10103] ? selinux_socket_sendmsg+0x198/0x2f0 [ 276.772861][T10103] ____sys_sendmsg+0xa4d/0xbe0 [ 276.772905][T10103] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 276.772928][T10103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.772953][T10103] ___sys_sendmsg+0x190/0x1e0 [ 276.772972][T10103] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.772990][T10103] ? get_pid_task+0x106/0x250 [ 276.773012][T10103] ? find_held_lock+0x2b/0x80 [ 276.773036][T10103] __sys_sendmsg+0x160/0x210 [ 276.773049][T10103] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.773069][T10103] do_syscall_64+0x123/0x790 [ 276.773084][T10103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.773097][T10103] RIP: 0033:0x7fee27f9e0d9 [ 276.773108][T10103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.773120][T10103] RSP: 002b:00007fee28e1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.773132][T10103] RAX: ffffffffffffffda RBX: 00007fee28225fa0 RCX: 00007fee27f9e0d9 [ 276.773140][T10103] RDX: 0000000004000080 RSI: 0000200000001280 RDI: 0000000000000003 [ 276.773147][T10103] RBP: 00007fee28e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 276.773154][T10103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.773161][T10103] R13: 00007fee28226038 R14: 00007fee28225fa0 R15: 00007fff5f6ab658 [ 276.773177][T10103] [ 276.963591][T10107] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.970643][T10107] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.974955][T10107] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 277.076041][T10107] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.080384][T10107] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.084099][T10107] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 277.099781][ T5749] Bluetooth: hci0: command tx timeout [ 277.198458][T10107] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.201979][T10107] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.205169][T10107] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 277.305191][T10107] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.309521][T10107] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.314072][T10107] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 277.432718][ T14] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.437329][ T14] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 277.441064][ T14] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 277.445648][ T14] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.448994][ T14] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 277.452142][ T14] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 277.493606][ T14] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.497738][ T14] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 277.500698][ T14] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 277.503788][ T14] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.506836][ T14] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 277.509729][ T14] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 277.638840][T10125] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 278.148544][ T1342] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 278.300176][ T1342] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 278.304728][ T1342] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 278.309908][ T1342] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.313654][ T1342] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.317450][ T1342] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 278.323362][ T1342] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 278.325982][ T1342] usb 10-1: Manufacturer: syz [ 278.330579][ T1342] usb 10-1: config 0 descriptor?? [ 278.577402][ T43] audit: type=1400 audit(1788196547.376:836): avc: denied { setopt } for pid=10133 comm="syz.2.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 278.629455][T10136] FAULT_INJECTION: forcing a failure. [ 278.629455][T10136] name failslab, interval 1, probability 0, space 0, times 0 [ 278.635585][T10136] CPU: 0 UID: 0 PID: 10136 Comm: syz.2.1260 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.635618][T10136] Tainted: [L]=SOFTLOCKUP [ 278.635625][T10136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.635638][T10136] Call Trace: [ 278.635645][T10136] [ 278.635655][T10136] dump_stack_lvl+0x100/0x190 [ 278.635688][T10136] should_fail_ex.cold+0x5/0xa [ 278.635716][T10136] should_failslab+0xc2/0x120 [ 278.635746][T10136] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 278.635775][T10136] ? __alloc_skb+0x5b7/0x710 [ 278.635803][T10136] ? __alloc_skb+0x140/0x710 [ 278.635836][T10136] __alloc_skb+0x140/0x710 [ 278.635863][T10136] ? __alloc_skb+0x5b7/0x710 [ 278.635892][T10136] ? __pfx___alloc_skb+0x10/0x10 [ 278.635927][T10136] alloc_skb_with_frags+0xdd/0x760 [ 278.635957][T10136] sock_alloc_send_pskb+0x801/0x980 [ 278.635989][T10136] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 278.636028][T10136] ? __pfx___scm_send+0x10/0x10 [ 278.636063][T10136] unix_stream_sendmsg+0x3f4/0x1310 [ 278.636102][T10136] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 278.636138][T10136] ? selinux_socket_sendmsg+0x198/0x2f0 [ 278.636169][T10136] ____sys_sendmsg+0xa4d/0xbe0 [ 278.636193][T10136] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 278.636224][T10136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.636261][T10136] ___sys_sendmsg+0x190/0x1e0 [ 278.636286][T10136] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.636310][T10136] ? get_pid_task+0x106/0x250 [ 278.636344][T10136] ? find_held_lock+0x2b/0x80 [ 278.636381][T10136] __sys_sendmsg+0x160/0x210 [ 278.636420][T10136] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.636455][T10136] do_syscall_64+0x123/0x790 [ 278.636480][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.636501][T10136] RIP: 0033:0x7f7c9699e0d9 [ 278.636519][T10136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.636537][T10136] RSP: 002b:00007f7c97818028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.636557][T10136] RAX: ffffffffffffffda RBX: 00007f7c96c25fa0 RCX: 00007f7c9699e0d9 [ 278.636571][T10136] RDX: 0000000004000080 RSI: 0000200000001280 RDI: 0000000000000003 [ 278.636583][T10136] RBP: 00007f7c97818090 R08: 0000000000000000 R09: 0000000000000000 [ 278.636595][T10136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.636606][T10136] R13: 00007f7c96c26038 R14: 00007f7c96c25fa0 R15: 00007fff58e30368 [ 278.636633][T10136] [ 278.770094][ T1342] hid_parser_main: 7 callbacks suppressed [ 278.770108][ T1342] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 278.777652][ T1342] appleir 0003:05AC:8243.0008: hiddev0,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 278.871609][ T43] audit: type=1400 audit(1788196547.664:837): avc: denied { setopt } for pid=10137 comm="syz.2.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 279.359240][T10141] /dev/sr0: Can't open blockdev [ 279.365873][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1258'. [ 279.370570][T10141] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1258'. [ 279.676962][T10143] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 279.789073][T10147] netlink: 'syz.2.1264': attribute type 4 has an invalid length. [ 279.796661][T10147] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 280.365581][ T43] audit: type=1400 audit(1788196549.143:838): avc: denied { cmd } for pid=10154 comm="syz.3.1267" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 280.393331][ T43] audit: type=1400 audit(1788196549.173:839): avc: denied { map } for pid=10154 comm="syz.3.1267" path="/dev/ublkc0" dev="devtmpfs" ino=3386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 280.406372][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1267'. [ 280.410877][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1267'. [ 280.897034][ T1342] usb 10-1: USB disconnect, device number 3 [ 280.945382][T10161] FAULT_INJECTION: forcing a failure. [ 280.945382][T10161] name failslab, interval 1, probability 0, space 0, times 0 [ 280.951379][T10161] CPU: 1 UID: 0 PID: 10161 Comm: syz.5.1269 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.951406][T10161] Tainted: [L]=SOFTLOCKUP [ 280.951411][T10161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.951419][T10161] Call Trace: [ 280.951425][T10161] [ 280.951431][T10161] dump_stack_lvl+0x100/0x190 [ 280.951459][T10161] should_fail_ex.cold+0x5/0xa [ 280.951480][T10161] should_failslab+0xc2/0x120 [ 280.951504][T10161] __kmalloc_cache_noprof+0x91/0x6b0 [ 280.951524][T10161] ? unix_prepare_fpl+0xd6/0x330 [ 280.951544][T10161] unix_prepare_fpl+0xd6/0x330 [ 280.951563][T10161] unix_scm_to_skb+0x3ba/0x520 [ 280.951586][T10161] unix_stream_sendmsg+0x41f/0x1310 [ 280.951615][T10161] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 280.951641][T10161] ? selinux_socket_sendmsg+0x198/0x2f0 [ 280.951667][T10161] ____sys_sendmsg+0xa4d/0xbe0 [ 280.951684][T10161] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 280.951709][T10161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.951738][T10161] ___sys_sendmsg+0x190/0x1e0 [ 280.951759][T10161] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.951778][T10161] ? get_pid_task+0x106/0x250 [ 280.951805][T10161] ? find_held_lock+0x2b/0x80 [ 280.951838][T10161] __sys_sendmsg+0x160/0x210 [ 280.951853][T10161] ? __pfx___sys_sendmsg+0x10/0x10 [ 280.951880][T10161] do_syscall_64+0x123/0x790 [ 280.951899][T10161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.951915][T10161] RIP: 0033:0x7fee27f9e0d9 [ 280.951930][T10161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.951954][T10161] RSP: 002b:00007fee28e1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.951969][T10161] RAX: ffffffffffffffda RBX: 00007fee28225fa0 RCX: 00007fee27f9e0d9 [ 280.951978][T10161] RDX: 0000000004000080 RSI: 0000200000001280 RDI: 0000000000000003 [ 280.951988][T10161] RBP: 00007fee28e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 280.951996][T10161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.952005][T10161] R13: 00007fee28226038 R14: 00007fee28225fa0 R15: 00007fff5f6ab658 [ 280.952028][T10161] [ 281.112295][ T65] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 281.262489][ T65] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 281.267222][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 281.271223][ T65] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 281.276876][ T43] audit: type=1400 audit(1788196550.057:840): avc: denied { getopt } for pid=10169 comm="syz.5.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 281.288136][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.291349][ T65] usb 7-1: Product: syz [ 281.293660][ T65] usb 7-1: Manufacturer: syz [ 281.295508][ T65] usb 7-1: SerialNumber: syz [ 281.304270][T10170] xt_l2tp: v2 doesn't support IP mode [ 281.465967][ T43] audit: type=1400 audit(1788196550.245:841): avc: denied { shutdown } for pid=10177 comm="syz.5.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 281.478797][ T43] audit: type=1400 audit(1788196550.255:842): avc: denied { read } for pid=10177 comm="syz.5.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 281.509418][ T65] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 281.566730][T10182] affs: No valid root block on device sr0 [ 281.709882][ T43] audit: type=1400 audit(1788196550.484:843): avc: denied { ioctl } for pid=10158 comm="syz.2.1268" path="/dev/usb/lp0" dev="devtmpfs" ino=3390 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 281.746850][T10159] Invalid argument reading file caps for ./file0 [ 282.271178][ T65] usb 7-1: USB disconnect, device number 15 [ 282.285728][ T65] usblp0: removed [ 283.015318][T10208] program syz.2.1282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.021781][ T43] audit: type=1400 audit(1788196551.786:844): avc: denied { nlmsg_read } for pid=10207 comm="syz.2.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 283.023182][T10208] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1282'. [ 283.034241][T10208] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1282'. [ 283.040876][ T43] audit: type=1400 audit(1788196551.805:845): avc: denied { read } for pid=10207 comm="syz.2.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 283.436924][ T43] audit: type=1400 audit(1788196552.203:846): avc: denied { unmount } for pid=5747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 283.604673][T10220] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1288'. [ 283.832995][T10230] GUP no longer grows the stack in syz.5.1289 (10230): 200000007000-20000000a000 (200000004000) [ 283.841931][T10230] CPU: 2 UID: 0 PID: 10230 Comm: syz.5.1289 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.841958][T10230] Tainted: [L]=SOFTLOCKUP [ 283.841963][T10230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 283.841972][T10230] Call Trace: [ 283.841978][T10230] [ 283.841985][T10230] dump_stack_lvl+0x100/0x190 [ 283.842013][T10230] gup_vma_lookup.cold+0x83/0x96 [ 283.842038][T10230] __get_user_pages+0x252/0x3280 [ 283.842059][T10230] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 283.842078][T10230] ? __pfx___get_user_pages+0x10/0x10 [ 283.842094][T10230] ? __pfx_down_read_killable+0x10/0x10 [ 283.842113][T10230] __gup_longterm_locked+0x87d/0x16f0 [ 283.842131][T10230] ? stack_trace_save+0x8e/0xc0 [ 283.842149][T10230] ? __pfx___gup_longterm_locked+0x10/0x10 [ 283.842167][T10230] ? lock_acquire+0x1b9/0x370 [ 283.842189][T10230] gup_fast_fallback+0x16dc/0x2790 [ 283.842216][T10230] ? __pfx_gup_fast_fallback+0x10/0x10 [ 283.842235][T10230] ? __lock_acquire+0x4c5/0x1ec0 [ 283.842253][T10230] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 283.842272][T10230] ? lockdep_hardirqs_on+0x7d/0x110 [ 283.842286][T10230] get_user_pages_fast+0xa7/0xf0 [ 283.842303][T10230] ? __pfx_get_user_pages_fast+0x10/0x10 [ 283.842325][T10230] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 283.842346][T10230] ? __mutex_lock+0x26c/0x1bc0 [ 283.842359][T10230] ? pipe_lock+0x69/0x80 [ 283.842377][T10230] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 283.842396][T10230] ? __pfx___mutex_lock+0x10/0x10 [ 283.842416][T10230] ? import_ubuf+0x1b6/0x220 [ 283.842436][T10230] iov_iter_get_pages2+0xa3/0x100 [ 283.842454][T10230] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 283.842472][T10230] ? wait_for_space+0x2ca/0x3b0 [ 283.842493][T10230] __do_sys_vmsplice+0x7dd/0x13c0 [ 283.842508][T10230] ? __pfx_futex_hash+0x10/0x10 [ 283.842520][T10230] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 283.842535][T10230] ? __pfx_futex_wait+0x10/0x10 [ 283.842555][T10230] ? __pfx___sys_sendmmsg+0x10/0x10 [ 283.842567][T10230] ? __fget_files+0x215/0x3d0 [ 283.842601][T10230] ? do_syscall_64+0x123/0x790 [ 283.842613][T10230] do_syscall_64+0x123/0x790 [ 283.842626][T10230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.842639][T10230] RIP: 0033:0x7fee27f9e0d9 [ 283.842649][T10230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.842660][T10230] RSP: 002b:00007fee28e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 283.842672][T10230] RAX: ffffffffffffffda RBX: 00007fee28225fa0 RCX: 00007fee27f9e0d9 [ 283.842680][T10230] RDX: 0000000000000001 RSI: 00002000000013c0 RDI: 00000000000000fe [ 283.842686][T10230] RBP: 00007fee28035024 R08: 0000000000000000 R09: 0000000000000000 [ 283.842693][T10230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.842699][T10230] R13: 00007fee28226038 R14: 00007fee28225fa0 R15: 00007fff5f6ab658 [ 283.842714][T10230] [ 284.122668][ T43] audit: type=1400 audit(1788196552.879:847): avc: denied { connect } for pid=10245 comm="syz.5.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 284.286084][T10258] loop2: detected capacity change from 0 to 7 [ 284.288692][T10258] loop2: [ 284.289837][T10258] loop2: partition table partially beyond EOD, truncated [ 284.406337][T10269] pimreg: entered allmulticast mode [ 284.409073][T10269] pimreg: left allmulticast mode [ 284.440821][ T43] audit: type=1400 audit(1788196553.198:848): avc: denied { write } for pid=10263 comm="syz.2.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 285.836935][T10280] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10280 comm=syz.4.1305 [ 286.430970][ T5751] Bluetooth: hci1: command 0x1003 tx timeout [ 286.435025][ T5749] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 286.547398][ T43] audit: type=1800 audit(1788196555.297:849): pid=10287 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1306" name="file0" dev="overlay" ino=1850 res=0 errno=0 [ 286.659032][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1308'. [ 286.707175][T10295] netlink: 'syz.4.1310': attribute type 7 has an invalid length. [ 286.852445][ T43] audit: type=1400 audit(1788196555.595:850): avc: denied { ioctl } for pid=10313 comm="syz.3.1315" path="socket:[34239]" dev="sockfs" ino=34239 ioctlcmd=0x61f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 287.376932][T10264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.468279][T10325] ip_tables: iptables: counters copy to user failed while replacing table [ 287.632102][T10332] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10000 [ 287.637891][T10332] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 287.640692][T10332] raw: 00fff00000002000 ffffea0000400008 ffffea0000400008 0000000000000000 [ 287.644052][T10332] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 287.647770][T10332] page dumped because: unmovable page [ 287.650524][T10332] page_owner info is not present (never set?) [ 287.927373][T10348] overlayfs: missing 'lowerdir' [ 288.041310][ T43] audit: type=1804 audit(1788196556.780:851): pid=10352 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1329" name="/newroot/232/file0" dev="tmpfs" ino=1282 res=1 errno=0 [ 288.042894][T10352] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 288.060632][T10352] ref_ctr increment failed for inode: 0x502 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880249f0cc0 [ 288.071335][T10352] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 288.079490][T10352] ref_ctr decrement failed for inode: 0x502 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880249f0cc0 [ 288.084141][T10352] uprobe: syz.4.1329:10352 failed to unregister, leaking uprobe [ 288.423178][T10358] syzkaller1: entered promiscuous mode [ 288.425975][T10358] syzkaller1: entered allmulticast mode [ 288.432190][ T43] audit: type=1400 audit(1788196557.168:852): avc: denied { watch watch_reads } for pid=10366 comm="syz.2.1334" path="pipe:[35218]" dev="pipefs" ino=35218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 288.447087][ T43] audit: type=1400 audit(1788196557.178:853): avc: denied { getopt } for pid=10366 comm="syz.2.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.520351][T10369] xt_CT: No such helper "netbios-ns" [ 288.523419][T10368] xt_CT: No such helper "netbios-ns" [ 288.657986][T10383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1339'. [ 288.669752][T10383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1339'. [ 288.675788][T10383] netlink: 'syz.4.1339': attribute type 7 has an invalid length. [ 288.679710][T10383] netlink: 'syz.4.1339': attribute type 8 has an invalid length. [ 288.686089][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1339'. [ 288.898699][T10396] netlink: 'syz.2.1345': attribute type 1 has an invalid length. [ 288.902215][T10396] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1345'. [ 288.906372][T10396] netlink: 'syz.2.1345': attribute type 1 has an invalid length. [ 288.909865][T10396] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1345'. [ 288.914606][T10396] netlink: 'syz.2.1345': attribute type 1 has an invalid length. [ 288.918128][T10396] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1345'. [ 288.924659][T10396] netlink: 'syz.2.1345': attribute type 1 has an invalid length. [ 288.930165][T10396] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1345'. [ 288.934376][T10396] netlink: 'syz.2.1345': attribute type 1 has an invalid length. [ 288.937987][T10396] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1345'. [ 288.943485][T10396] netlink: 'syz.2.1345': attribute type 1 has an invalid length. [ 288.946861][T10396] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1345'. [ 288.951484][T10396] netlink: 'syz.2.1345': attribute type 1 has an invalid length. [ 289.349337][T10416] loop2: detected capacity change from 0 to 7 [ 289.352463][T10416] loop2: [ 289.353992][T10416] loop2: partition table partially beyond EOD, truncated [ 289.447255][ T43] audit: type=1400 audit(1788196558.184:854): avc: denied { node_bind } for pid=10421 comm="syz.4.1353" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 289.517576][T10425] IPVS: Error connecting to the multicast addr [ 289.813517][ T43] audit: type=1400 audit(1788196558.543:855): avc: denied { map } for pid=10431 comm="syz.5.1356" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 290.037439][ T43] audit: type=1400 audit(1788196558.772:856): avc: denied { create } for pid=10445 comm="syz.2.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 290.044910][ T43] audit: type=1400 audit(1788196558.772:857): avc: denied { getopt } for pid=10445 comm="syz.2.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 290.138339][ T42] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 290.297587][ T42] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 290.301475][ T42] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 290.305645][ T42] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 290.309458][ T42] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 290.314096][ T42] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 290.319698][ T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.322752][ T42] usb 10-1: Product: syz [ 290.324263][ T42] usb 10-1: Manufacturer: syz [ 290.325946][ T42] usb 10-1: SerialNumber: syz [ 290.332512][ T42] usb 10-1: config 0 descriptor?? [ 290.440761][T10457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.487913][ T43] audit: type=1400 audit(1788196559.210:858): avc: denied { connect } for pid=10458 comm="syz.4.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 290.546639][ T42] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 290.552655][ T42] usb 10-1: USB disconnect, device number 4 [ 290.739812][ T43] audit: type=1400 audit(1788196559.469:859): avc: denied { read write } for pid=10436 comm="syz.5.1358" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 290.898837][T10474] fuse: Bad value for 'fd' [ 290.901846][T10474] size and base must be multiples of 4 kiB [ 290.903927][T10474] CPU: 1 UID: 0 PID: 10474 Comm: syz.5.1372 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.903957][T10474] Tainted: [L]=SOFTLOCKUP [ 290.903964][T10474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 290.903975][T10474] Call Trace: [ 290.903982][T10474] [ 290.903991][T10474] dump_stack_lvl+0x100/0x190 [ 290.904035][T10474] mtrr_add.cold+0x74/0x87 [ 290.904056][T10474] mtrr_ioctl+0x25a/0xcf0 [ 290.904098][T10474] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 290.904136][T10474] ? __pfx_mtrr_ioctl+0x10/0x10 [ 290.904162][T10474] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 290.904207][T10474] ? __pfx_mtrr_ioctl+0x10/0x10 [ 290.904235][T10474] proc_reg_unlocked_ioctl+0x229/0x320 [ 290.904256][T10474] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 290.904277][T10474] __x64_sys_ioctl+0x18e/0x210 [ 290.904301][T10474] do_syscall_64+0x123/0x790 [ 290.904331][T10474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.904350][T10474] RIP: 0033:0x7fee27f9e0d9 [ 290.904368][T10474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.904387][T10474] RSP: 002b:00007fee28e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.904407][T10474] RAX: ffffffffffffffda RBX: 00007fee28225fa0 RCX: 00007fee27f9e0d9 [ 290.904428][T10474] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 000000000000000a [ 290.904440][T10474] RBP: 00007fee28035024 R08: 0000000000000000 R09: 0000000000000000 [ 290.904453][T10474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.904464][T10474] R13: 00007fee28226038 R14: 00007fee28225fa0 R15: 00007fff5f6ab658 [ 290.904486][T10474] [ 291.219297][T10492] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 291.283031][T10490] SELinux: failed to load policy [ 291.559909][T10511] 8021q: adding VLAN 0 to HW filter on device bond4 [ 291.821584][T10530] binder_alloc: binder_alloc_mmap_handler: 10529 200000ffd000-200001000000 already mapped failed -16 [ 291.823997][T10531] binder_alloc: 10529: binder_alloc_buf, no vma [ 291.840936][T10530] __nla_validate_parse: 5 callbacks suppressed [ 291.840962][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1390'. [ 291.848783][T10530] binder_alloc: 10529: binder_alloc_buf, no vma [ 292.001029][T10525] infiniband syz0: set active [ 292.008429][T10525] infiniband syz0: added bond_slave_1 [ 292.019677][T10525] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 292.022133][T10525] infiniband syz0: Couldn't open port 1 [ 292.029525][T10525] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 292.034204][T10525] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 292.039821][T10525] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 292.095892][T10525] RDS/IB: syz0: added [ 292.097654][T10525] smc: adding ib device syz0 with port count 1 [ 292.099880][T10525] smc: ib device syz0 port 1 has no pnetid [ 292.216103][T10552] netlink: 4376 bytes leftover after parsing attributes in process `syz.4.1396'. [ 292.218988][T10552] netlink: 4376 bytes leftover after parsing attributes in process `syz.4.1396'. [ 292.273580][T10554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10554 comm=syz.2.1397 [ 292.440928][T10569] loop2: detected capacity change from 0 to 7 [ 292.444585][T10569] loop2: [ 292.445891][T10569] loop2: partition table partially beyond EOD, truncated [ 292.541676][T10573] MTD: Couldn't look up './bus': -15 [ 292.868933][T10597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1408'. [ 292.874130][T10588] could not allocate digest TFM handle cryptd(blake2b-160) [ 292.894939][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 292.894956][ T43] audit: type=1400 audit(1788196561.612:862): avc: denied { setopt } for pid=10587 comm="syz.3.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 292.904191][T10588] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 293.042511][T10605] loop2: detected capacity change from 0 to 7 [ 293.047669][T10605] loop2: [ 293.048859][T10605] loop2: partition table partially beyond EOD, truncated [ 293.089453][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 293.121189][ T43] audit: type=1400 audit(1788196561.841:863): avc: denied { write } for pid=10606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.145956][ T43] audit: type=1326 audit(1788196561.861:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10607 comm="syz.3.1414" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f788a39e0d9 code=0x0 [ 293.152567][T10617] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 293.183864][ T43] audit: type=1400 audit(1788196561.901:865): avc: denied { ioctl } for pid=10612 comm="syz.5.1415" path="socket:[34687]" dev="sockfs" ino=34687 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 293.195355][T10616] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 293.204014][T10614] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 293.207124][ T43] audit: type=1400 audit(1788196561.901:866): avc: denied { write } for pid=10618 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.217012][T10616] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 293.330552][ T43] audit: type=1400 audit(1788196562.041:867): avc: denied { remove_name } for pid=10628 comm="syz.5.1421" name="0x409" dev="configfs" ino=34704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 293.347928][ T43] audit: type=1400 audit(1788196562.051:868): avc: denied { rmdir } for pid=10628 comm="syz.5.1421" name="0x409" dev="configfs" ino=34704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 293.387174][ T43] audit: type=1400 audit(1788196562.101:869): avc: denied { write } for pid=10631 comm="syz.4.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 293.443587][T10644] Mass Storage Function, version: 2009/09/11 [ 293.451086][T10644] LUN: removable file: (no medium) [ 293.484124][T10644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1427'. [ 293.692446][ T43] audit: type=1400 audit(1788196562.410:870): avc: denied { setopt } for pid=10672 comm="syz.2.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 293.814486][ T43] audit: type=1400 audit(1788196562.529:871): avc: denied { create } for pid=10688 comm="syz.2.1441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=llc_socket permissive=1 [ 293.852413][T10687] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 293.857609][T10692] loop2: detected capacity change from 0 to 7 [ 293.858620][T10692] loop2: [ 293.862311][T10692] loop2: partition table partially beyond EOD, truncated [ 294.102383][T10709] macvlan0: left promiscuous mode [ 294.112815][T10709] validate_nla: 1 callbacks suppressed [ 294.112838][T10709] netlink: 'syz.3.1447': attribute type 1 has an invalid length. [ 294.118518][T10709] netlink: 'syz.3.1447': attribute type 2 has an invalid length. [ 294.123051][T10709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=10709 comm=syz.3.1447 [ 294.196182][T10714] kAFS: No cell specified [ 294.289136][T10721] x_tables: duplicate underflow at hook 2 [ 294.291548][T10721] x_tables: duplicate underflow at hook 2 [ 294.293520][T10721] x_tables: duplicate underflow at hook 2 [ 294.295415][T10721] x_tables: duplicate underflow at hook 2 [ 294.297278][T10721] x_tables: duplicate underflow at hook 2 [ 294.299061][T10721] x_tables: duplicate underflow at hook 2 [ 294.301096][T10721] x_tables: duplicate underflow at hook 2 [ 294.302932][T10721] x_tables: duplicate underflow at hook 2 [ 294.304818][T10721] x_tables: duplicate underflow at hook 2 [ 294.306646][T10721] x_tables: duplicate underflow at hook 2 [ 294.382268][ T5749] Bluetooth: hci0: Malformed LE Event: 0x0d [ 294.385191][T10731] loop2: detected capacity change from 0 to 7 [ 294.386327][T10731] loop2: [ 294.389496][T10731] loop2: partition table partially beyond EOD, truncated [ 294.611531][T10747] netlink: 'syz.3.1461': attribute type 2 has an invalid length. [ 294.614246][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1461'. [ 294.617912][T10748] netlink: 'syz.3.1461': attribute type 2 has an invalid length. [ 294.621805][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1461'. [ 294.626009][T10747] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1461'. [ 294.763547][T10764] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1463'. [ 294.801146][T10766] loop2: detected capacity change from 0 to 7 [ 294.809428][T10766] loop2: [ 294.810543][T10766] loop2: partition table partially beyond EOD, truncated [ 294.945272][T10771] netlink: 'syz.5.1468': attribute type 13 has an invalid length. [ 294.966419][T10771] netlink: 'syz.5.1468': attribute type 13 has an invalid length. [ 294.982428][ T5821] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.990388][ T5821] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.000390][ T5821] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.009787][ T5821] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.051871][T10776] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 295.056087][T10776] block device autoloading is deprecated and will be removed. [ 295.200444][T10786] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 295.624090][T10814] bridge0: port 3(macvlan2) entered blocking state [ 295.627181][T10814] bridge0: port 3(macvlan2) entered disabled state [ 295.630100][T10814] macvlan2: entered allmulticast mode [ 295.645667][T10814] macvlan2: left allmulticast mode [ 295.852599][T10830] e1000e 0000:00:02.0 eth1: removed PHC [ 295.891816][T10836] loop2: detected capacity change from 0 to 7 [ 295.900223][T10836] loop2: [ 295.904809][T10836] loop2: partition table partially beyond EOD, truncated [ 296.127897][T10830] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 296.219945][T10824] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.418577][T10867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.428648][T10834] amd5536udc-pci 0000:00:02.0: Synopsys USB Device Controller [ 296.444605][T10834] amd5536udc-pci 0000:00:02.0: DMA mode (PPBNDU) [ 296.672638][T10887] xfrm1: entered allmulticast mode [ 296.745931][T10896] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 296.783123][T10899] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 296.824729][T10899] input: syz0 as /devices/virtual/input/input21 [ 296.969565][T10915] __nla_validate_parse: 5 callbacks suppressed [ 296.969576][T10915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'. [ 296.991885][T10919] loop2: detected capacity change from 0 to 7 [ 296.995264][T10919] loop2: [ 296.996511][T10919] loop2: partition table partially beyond EOD, truncated [ 297.256640][T10954] syzkaller0: entered promiscuous mode [ 297.259514][T10954] syzkaller0: entered allmulticast mode [ 297.266196][T10954] tipc: Started in network mode [ 297.268881][T10954] tipc: Node identity eaa024a13726, cluster identity 4711 [ 297.271780][T10954] tipc: Enabled bearer , priority 0 [ 297.278607][T10953] tipc: Resetting bearer [ 297.299907][T10953] tipc: Disabling bearer [ 297.621493][T10983] wg1: entered promiscuous mode [ 297.623345][T10983] wg1: entered allmulticast mode [ 297.629119][T10983] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1519'. [ 297.984200][T11005] nilfs2: Unknown parameter 'barrierer0' [ 297.987463][ T43] kauditd_printk_skb: 1774 callbacks suppressed [ 297.987479][ T43] audit: type=1400 audit(1788196566.689:2646): avc: denied { write } for pid=11002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.057147][ T43] audit: type=1400 audit(1788196566.758:2647): avc: denied { write } for pid=11008 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.126169][T11018] loop2: detected capacity change from 0 to 7 [ 298.135745][T11018] loop2: [ 298.137815][T11018] loop2: partition table partially beyond EOD, truncated [ 298.153406][ T43] audit: type=1400 audit(1788196566.858:2648): avc: denied { write } for pid=11019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.200325][ T43] audit: type=1400 audit(1788196566.898:2649): avc: denied { write } for pid=11024 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.248287][T10964] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.254507][T10964] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 298.267082][T10964] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 298.271081][T10964] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 298.367350][T10964] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 298.369305][T10964] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 298.406428][T10964] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 298.409147][T11041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1530'. [ 298.413565][T10964] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 298.534639][T11044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1531'. [ 298.538072][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'. [ 298.586165][T11050] loop2: detected capacity change from 0 to 7 [ 298.588887][T11050] loop2: [ 298.589917][T11050] loop2: partition table partially beyond EOD, truncated [ 298.684408][T11060] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 298.686886][T11060] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 298.698320][T11060] vhci_hcd vhci_hcd.0: Device attached [ 298.861661][ T5850] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 298.931837][ T65] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 299.012113][ T5850] usb 9-1: Invalid ep0 maxpacket: 64 [ 299.092032][T11072] jffs2: notice: (11072) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 299.142237][ T5850] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 299.292464][ T5850] usb 9-1: Invalid ep0 maxpacket: 64 [ 299.295006][ T5850] usb usb9-port1: attempt power cycle [ 299.297876][ T43] audit: type=1400 audit(1788196568.006:2650): avc: denied { create } for pid=11080 comm="syz.5.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 299.538596][T11092] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1546'. [ 299.545621][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1546'. [ 299.549451][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1546'. [ 299.606386][T11094] random: crng reseeded on system resumption [ 299.622106][T11094] bond0: (slave ip_vti0): Error: Device can not be enslaved while up [ 299.643187][ T5850] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 299.665763][ T5850] usb 9-1: Invalid ep0 maxpacket: 64 [ 299.711434][T11101] loop2: detected capacity change from 0 to 7 [ 299.714606][T11101] loop2: [ 299.715717][T11101] loop2: partition table partially beyond EOD, truncated [ 299.803552][ T5850] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 299.834099][ T5850] usb 9-1: Invalid ep0 maxpacket: 64 [ 299.835890][ T5850] usb usb9-port1: unable to enumerate USB device [ 299.843830][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1552'. [ 299.846706][T11106] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1552'. [ 300.307041][T11123] input: syz0 as /devices/virtual/input/input23 [ 300.322680][ T43] audit: type=1400 audit(1788196569.024:2651): avc: denied { lock } for pid=11122 comm="syz.2.1556" path="/dev/uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 300.323516][T11123] ata1.00: invalid multi_count 1 ignored [ 300.458845][T11132] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11132 comm=syz.2.1558 [ 300.463375][T11132] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11132 comm=syz.2.1558 [ 300.496103][T11134] loop2: detected capacity change from 0 to 7 [ 300.499103][T11134] loop2: [ 300.500295][T11134] loop2: partition table partially beyond EOD, truncated [ 300.607097][T11137] netlink: 'syz.2.1560': attribute type 1 has an invalid length. [ 300.607104][T11136] netlink: 'syz.2.1560': attribute type 1 has an invalid length. [ 300.919121][T11159] loop2: detected capacity change from 0 to 7 [ 300.923441][T11159] loop2: [ 300.924518][T11159] loop2: partition table partially beyond EOD, truncated [ 300.969432][T11162] bridge_slave_0: left allmulticast mode [ 300.971317][T11162] bridge_slave_0: left promiscuous mode [ 300.973432][T11162] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.981775][T11162] bridge_slave_1: left allmulticast mode [ 300.983726][T11162] bridge_slave_1: left promiscuous mode [ 300.985719][T11162] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.992157][T11162] bond0: (slave bond_slave_0): Releasing backup interface [ 300.997623][T11162] bond0: (slave bond_slave_1): Releasing backup interface [ 301.009994][T11162] team0: Port device team_slave_0 removed [ 301.022440][T11162] team0: Port device team_slave_1 removed [ 301.026280][T11162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.028707][T11162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.031956][T11162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.034390][T11162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.038783][T11162] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 301.062160][T11164] team0: Port device xfrm0 added [ 301.069859][T11162] tipc: Started in network mode [ 301.071612][T11162] tipc: Node identity 8e8c1c11b9b6, cluster identity 4711 [ 301.073995][T11162] tipc: Enabled bearer , priority 0 [ 301.081201][ T43] audit: type=1326 audit(1788196569.782:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11160 comm="syz.2.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9699e0d9 code=0x7ffc0000 [ 301.091897][ T43] audit: type=1326 audit(1788196569.782:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11160 comm="syz.2.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9699e0d9 code=0x7ffc0000 [ 301.106065][ T43] audit: type=1326 audit(1788196569.782:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11160 comm="syz.2.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f7c9699e0d9 code=0x7ffc0000 [ 301.115272][ T43] audit: type=1326 audit(1788196569.782:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11160 comm="syz.2.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9699e0d9 code=0x7ffc0000 [ 301.236566][T11172] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 301.249493][T11172] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 301.251719][T11172] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 301.255533][T11172] vhci_hcd vhci_hcd.0: Device attached [ 301.374107][T11173] vhci_hcd: connection closed [ 301.376839][ T5898] vhci_hcd vhci_hcd.2: stop threads [ 301.382593][ T5898] vhci_hcd vhci_hcd.2: release socket [ 301.389719][ T5898] vhci_hcd vhci_hcd.2: disconnect device [ 301.427229][ T843] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 301.482520][T11183] CIFS mount error: No usable UNC path provided in device string! [ 301.482520][T11183] [ 301.486882][T11183] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 301.491601][T11181] fuse: Bad value for 'user_id' [ 301.493204][T11181] fuse: Bad value for 'user_id' [ 301.545560][T11188] loop2: detected capacity change from 0 to 7 [ 301.548932][T11188] loop2: [ 301.549944][T11188] loop2: partition table partially beyond EOD, truncated [ 301.644379][T11194] tmpfs: Unknown parameter 'l' [ 301.685974][T11061] vhci_hcd: connection reset by peer [ 301.695133][ T5898] vhci_hcd vhci_hcd.3: stop threads [ 301.706726][ T5898] vhci_hcd vhci_hcd.3: release socket [ 301.712151][ T5898] vhci_hcd vhci_hcd.3: disconnect device [ 302.091964][ T5850] tipc: Node number set to 926555153 [ 302.548199][T11222] pim6reg1: entered promiscuous mode [ 302.549916][T11222] pim6reg1: entered allmulticast mode [ 302.763896][T11231] __nla_validate_parse: 4 callbacks suppressed [ 302.763913][T11231] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1592'. [ 303.172162][ T43] kauditd_printk_skb: 30 callbacks suppressed [ 303.172176][ T43] audit: type=1400 audit(1788196571.869:2686): avc: denied { search } for pid=11275 comm="syz.2.1602" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 303.189566][ T43] audit: type=1400 audit(1788196571.869:2687): avc: denied { read write } for pid=11275 comm="syz.2.1602" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 303.204700][ T43] audit: type=1400 audit(1788196571.869:2688): avc: denied { open } for pid=11275 comm="syz.2.1602" path="/438/nfsd/filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 303.225916][T11279] CUSE: unknown device info "" [ 303.227803][T11279] CUSE: unknown device info "" [ 303.229425][T11279] CUSE: unknown device info "" [ 303.232564][T11279] CUSE: unknown device info "" [ 303.234207][T11279] CUSE: zero length info key specified [ 303.236820][ T43] audit: type=1400 audit(1788196571.928:2689): avc: denied { getattr } for pid=11275 comm="syz.2.1602" path="/438/nfsd/filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 303.274119][ T43] audit: type=1400 audit(1788196571.968:2690): avc: denied { link } for pid=11285 comm="syz.4.1605" name="#25" dev="tmpfs" ino=1620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 303.288165][ T43] audit: type=1400 audit(1788196571.968:2691): avc: denied { rename } for pid=11285 comm="syz.4.1605" name="#26" dev="tmpfs" ino=1620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 303.405874][T11298] loop2: detected capacity change from 0 to 7 [ 303.409433][T11298] loop2: [ 303.410527][T11298] loop2: partition table partially beyond EOD, truncated [ 303.447645][T11301] overlayfs: failed to clone upperpath [ 303.455662][ T43] audit: type=1400 audit(1788196572.148:2692): avc: denied { accept } for pid=11303 comm="syz.2.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 303.558372][T11309] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 303.877026][T11333] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 303.919122][ T43] audit: type=1400 audit(1788196572.607:2693): avc: denied { setattr } for pid=11332 comm="syz.5.1622" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 303.963243][T11331] netlink: 'syz.2.1623': attribute type 3 has an invalid length. [ 304.071937][ T65] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 304.125615][ T43] audit: type=1400 audit(1788196572.827:2694): avc: denied { ioctl } for pid=11339 comm="syz.2.1626" path="socket:[40559]" dev="sockfs" ino=40559 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 304.217134][T11350] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 304.266766][ T43] audit: type=1400 audit(1788196572.967:2695): avc: denied { mounton } for pid=11355 comm="syz.2.1631" path="/449/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 304.373500][T11367] nfs: Unknown parameter 'mountprototcp' [ 304.838771][T11387] input: syz1 as /devices/virtual/input/input24 [ 304.887845][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1641'. [ 305.092163][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1642'. [ 305.421028][T11417] Cannot find set identified by id 65534 to match [ 305.464270][T11422] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1650'. [ 305.468805][T11422] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11422 comm=syz.5.1650 [ 305.529943][T11425] netlink: 'syz.5.1651': attribute type 2 has an invalid length. [ 305.587312][T11425] : entered promiscuous mode [ 305.628033][T11430] loop2: detected capacity change from 0 to 7 [ 305.632065][T11430] loop2: [ 305.634028][T11430] loop2: partition table partially beyond EOD, truncated [ 305.725829][T11432] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 305.730361][T11432] overlayfs: failed to set xattr on upper [ 305.732463][T11432] overlayfs: ...falling back to redirect_dir=nofollow. [ 305.745258][T11432] overlayfs: ...falling back to index=off. [ 305.747128][T11432] overlayfs: ...falling back to uuid=null. [ 305.766308][T11441] netlink: 'syz.4.1654': attribute type 10 has an invalid length. [ 305.777170][T11443] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1657'. [ 305.780612][T11443] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 305.795296][T11441] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.799778][T11441] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 305.821054][T11432] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1654'. [ 305.875841][T11432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.888638][T11432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.914024][T11432] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 305.940999][T11432] bond0 (unregistering): Released all slaves [ 305.964712][T11446] qnx6: unable to set blocksize [ 305.984029][T11455] loop5: detected capacity change from 0 to 7 [ 305.988391][ C1] blk_print_req_error: 5 callbacks suppressed [ 305.988403][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.993273][ C1] buffer_io_error: 5 callbacks suppressed [ 305.993283][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 306.005035][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.008445][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 306.011398][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.015763][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 306.022493][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.027118][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 306.030624][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.033920][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 306.041671][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.045496][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 306.052134][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.056423][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 306.059775][T11455] ldm_validate_partition_table(): Disk read failed. [ 306.114542][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.117807][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 306.122912][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.126983][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 306.130906][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 306.135174][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 306.139297][T11455] Dev loop5: unable to read RDB block 0 [ 306.143765][T11455] loop5: unable to read partition table [ 306.149175][T11455] loop5: partition table beyond EOD, truncated [ 306.155465][T11455] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 306.233758][T11477] overlayfs: failed to resolve './debug/dri/0/name': -2 [ 306.406071][T11485] loop2: detected capacity change from 0 to 7 [ 306.410239][T11485] loop2: [ 306.411510][T11485] loop2: partition table partially beyond EOD, truncated [ 306.467797][T11489] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 306.878821][T11520] 9pnet_virtio: no channels available for device 127.0.0.1 [ 307.223127][T11528] /dev/sr0: Can't open blockdev [ 307.836982][T11548] SET target dimension over the limit! [ 307.843993][T11547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1691'. [ 308.004390][ T5828] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 308.130051][T11557] pi3usb30532 0-0005: Error reading config register -6 [ 308.144473][T11557] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 308.164781][ T5828] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.168662][ T5828] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 308.171298][ T5828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.175567][ T5828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.178668][ T5828] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.182945][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.188589][ T5828] usb 7-1: config 0 descriptor?? [ 308.274147][T11566] gadgetfs: bound to dummy_udc driver [ 308.396984][ T5828] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.401538][ T5828] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.407610][ T5828] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.409990][ T5828] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.412307][ T5828] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.417486][ T5828] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.419962][ T5828] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.422250][ T5828] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.427611][ T5828] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.430873][ T5828] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 308.447728][ T5828] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 308.458595][ T5828] usb 7-1: USB disconnect, device number 16 [ 308.475517][T11572] xt_ecn: cannot match TCP bits for non-tcp packets [ 308.501184][T11573] fido_id[11573]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/report_descriptor': No such file or directory [ 308.524205][ T5913] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 308.527064][ C2] gadgetfs: connected [ 308.529241][T11565] gadgetfs: suspended from state 3 [ 308.531466][T11565] gadgetfs: disconnected [ 308.656093][ T5749] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 308.659618][ T5751] Bluetooth: hci1: command 0x1003 tx timeout [ 308.925877][T11593] program syz.2.1703 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.192704][T11609] netlink: 'syz.4.1709': attribute type 11 has an invalid length. [ 309.321281][T11622] loop2: detected capacity change from 0 to 7 [ 309.329650][T11622] loop2: [ 309.330955][T11622] loop2: partition table partially beyond EOD, truncated [ 309.391168][T11631] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1716'. [ 309.405843][T11631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1716'. [ 309.474379][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 309.474396][ T43] audit: type=1400 audit(1788196578.174:2700): avc: denied { setopt } for pid=11625 comm="syz.4.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 309.494801][T11638] netlink: 'syz.5.1718': attribute type 12 has an invalid length. [ 309.740571][ T43] audit: type=1400 audit(1788196578.434:2701): avc: denied { ioctl } for pid=11652 comm="syz.2.1723" path="/dev/usbmon0" dev="devtmpfs" ino=736 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 309.777270][T11658] loop2: detected capacity change from 0 to 7 [ 309.780478][T11658] loop2: [ 309.781453][T11658] loop2: partition table partially beyond EOD, truncated [ 309.923224][T11676] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 309.940064][T11679] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 309.978277][T11685] loop2: detected capacity change from 0 to 7 [ 309.981411][T11685] loop2: [ 309.983170][T11685] loop2: partition table partially beyond EOD, truncated [ 309.988768][ T5136] loop2: [ 309.989800][ T5136] loop2: partition table partially beyond EOD, truncated [ 310.018736][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1737'. [ 310.181866][ T43] audit: type=1400 audit(1788196578.874:2702): avc: denied { ioctl } for pid=11701 comm="syz.5.1741" path="socket:[45288]" dev="sockfs" ino=45288 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 310.247299][T11703] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1741'. [ 310.279526][T11724] loop2: detected capacity change from 0 to 7 [ 310.284823][T11724] loop2: [ 310.286266][T11724] loop2: partition table partially beyond EOD, truncated [ 310.291187][ T43] audit: type=1400 audit(1788196578.984:2703): avc: denied { connect } for pid=11718 comm="syz.4.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 310.360882][T11733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1751'. [ 310.567556][T11742] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1755'. [ 310.697212][T11754] loop2: detected capacity change from 0 to 7 [ 310.700282][T11754] loop2: [ 310.701763][T11754] loop2: partition table partially beyond EOD, truncated [ 310.795667][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.799231][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.882712][T11760] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 310.919991][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.924474][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.939498][T11760] ip6gre1: entered promiscuous mode [ 310.941316][T11760] ip6gre1: entered allmulticast mode [ 311.029008][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.033989][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.118412][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.122701][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.217762][ T5751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.219370][T11772] loop4: detected capacity change from 0 to 7 [ 311.223908][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.229325][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.236822][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.242391][ T5751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.281962][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.285307][ T5099] blk_print_req_error: 10 callbacks suppressed [ 311.285319][ T5099] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.290474][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.292283][ T5099] buffer_io_error: 10 callbacks suppressed [ 311.292293][ T5099] Buffer I/O error on dev loop4, logical block 0, async page read [ 311.297445][T11772] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.301079][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.301947][T11772] Buffer I/O error on dev loop4, logical block 0, async page read [ 311.308038][T11772] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.311089][T11772] Buffer I/O error on dev loop4, logical block 0, async page read [ 311.313664][T11772] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.315015][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.317141][T11772] Buffer I/O error on dev loop4, logical block 0, async page read [ 311.321482][T11772] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.324797][T11772] Buffer I/O error on dev loop4, logical block 0, async page read [ 311.325078][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.327100][T11772] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.332166][T11772] Buffer I/O error on dev loop4, logical block 0, async page read [ 311.335356][T11772] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.338930][T11772] Buffer I/O error on dev loop4, logical block 0, async page read [ 311.341481][T11772] ldm_validate_partition_table(): Disk read failed. [ 311.343664][T11772] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.347475][T11772] Buffer I/O error on dev loop4, logical block 0, async page read [ 311.350734][T11772] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.354624][T11772] Buffer I/O error on dev loop4, logical block 0, async page read [ 311.357267][T11772] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.360313][T11772] Buffer I/O error on dev loop4, logical block 0, async page read [ 311.363132][T11772] Dev loop4: unable to read RDB block 0 [ 311.365104][T11772] loop4: unable to read partition table [ 311.367265][T11772] loop4: partition table beyond EOD, truncated [ 311.370836][T11772] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 311.375451][T11776] netlink: 'syz.2.1769': attribute type 1 has an invalid length. [ 311.384760][ T13] bridge_slave_1: left promiscuous mode [ 311.390510][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.410548][ T13] bridge_slave_0: left allmulticast mode [ 311.412374][ T13] bridge_slave_0: left promiscuous mode [ 311.416937][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.637648][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.646358][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.652164][ T13] bond0 (unregistering): Released all slaves [ 311.673550][T11776] 8021q: adding VLAN 0 to HW filter on device bond5 [ 311.707619][ T1342] syz0: Port: 1 Link DOWN [ 311.746035][ T13] : left promiscuous mode [ 311.776274][ T43] audit: type=1400 audit(1788196580.474:2704): avc: denied { write } for pid=11799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.834197][ T43] audit: type=1400 audit(1788196580.524:2705): avc: denied { write } for pid=11807 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.843760][T11809] ================================================================== [ 311.846597][T11809] BUG: KASAN: invalid-free in f_uac2_opts_p_srate_store+0x1d4/0x260 [ 311.849288][T11809] Free of addr ffff88803ffb3d6d by task syz.2.1774/11809 [ 311.852949][T11809] [ 311.854734][T11809] CPU: 1 UID: 0 PID: 11809 Comm: syz.2.1774 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.854759][T11809] Tainted: [L]=SOFTLOCKUP [ 311.854764][T11809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 311.854774][T11809] Call Trace: [ 311.854780][T11809] [ 311.854786][T11809] dump_stack_lvl+0x100/0x190 [ 311.854811][T11809] print_report+0x13d/0x4b0 [ 311.854834][T11809] ? __virt_addr_valid+0x239/0x430 [ 311.854856][T11809] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 311.854879][T11809] kasan_report_invalid_free+0xb8/0x190 [ 311.854914][T11809] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 311.854936][T11809] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 311.854956][T11809] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 311.854976][T11809] check_slab_allocation+0xe1/0xf0 [ 311.854996][T11809] ? f_uac2_opts_p_srate_store+0x1c0/0x260 [ 311.855017][T11809] kfree+0x1b6/0x6c0 [ 311.855032][T11809] ? __asan_memcpy+0x3c/0x60 [ 311.855051][T11809] f_uac2_opts_p_srate_store+0x1d4/0x260 [ 311.855072][T11809] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 311.855095][T11809] ? configfs_write_iter+0x388/0x4e0 [ 311.855113][T11809] configfs_write_iter+0x302/0x4e0 [ 311.855130][T11809] vfs_write+0x6af/0x1050 [ 311.855149][T11809] ? __pfx_configfs_write_iter+0x10/0x10 [ 311.855164][T11809] ? __pfx_vfs_write+0x10/0x10 [ 311.855180][T11809] ? find_held_lock+0x2b/0x80 [ 311.855203][T11809] ksys_write+0x12a/0x250 [ 311.855219][T11809] ? __pfx_ksys_write+0x10/0x10 [ 311.855239][T11809] do_syscall_64+0x123/0x790 [ 311.855260][T11809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.855275][T11809] RIP: 0033:0x7f7c9699e0d9 [ 311.855288][T11809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.855302][T11809] RSP: 002b:00007f7c97818028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 311.855317][T11809] RAX: ffffffffffffffda RBX: 00007f7c96c25fa0 RCX: 00007f7c9699e0d9 [ 311.855326][T11809] RDX: 0000000000000109 RSI: 0000200000000080 RDI: 0000000000000003 [ 311.855340][T11809] RBP: 00007f7c96a35024 R08: 0000000000000000 R09: 0000000000000000 [ 311.855349][T11809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.855357][T11809] R13: 00007f7c96c26038 R14: 00007f7c96c25fa0 R15: 00007fff58e30368 [ 311.855371][T11809] [ 311.855377][T11809] [ 311.936956][T11809] Allocated by task 11809: [ 311.938814][T11809] kasan_save_stack+0x30/0x50 [ 311.940821][T11809] kasan_save_track+0x14/0x30 [ 311.942973][T11809] __kasan_kmalloc+0xaa/0xb0 [ 311.945041][T11809] __kmalloc_node_track_caller_noprof+0x333/0x830 [ 311.947753][T11809] kstrdup+0x51/0xe0 [ 311.949413][T11809] f_uac2_opts_p_srate_store+0x113/0x260 [ 311.951632][T11809] configfs_write_iter+0x302/0x4e0 [ 311.953478][T11809] vfs_write+0x6af/0x1050 [ 311.954832][T11809] ksys_write+0x12a/0x250 [ 311.956200][T11809] do_syscall_64+0x123/0x790 [ 311.957658][T11809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.959482][T11809] [ 311.960314][T11809] The buggy address belongs to the object at ffff88803ffb3d00 [ 311.960314][T11809] which belongs to the cache kmalloc-128 of size 128 [ 311.964617][T11809] The buggy address is located 109 bytes inside of [ 311.964617][T11809] 121-byte region [ffff88803ffb3d00, ffff88803ffb3d79) [ 311.968881][T11809] [ 311.969653][T11809] The buggy address belongs to the physical page: [ 311.971803][T11809] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3ffb3 [ 311.975052][T11809] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 311.977744][T11809] page_type: f5(slab) [ 311.979670][T11809] raw: 00fff00000000000 ffff88801c042a00 dead000000000100 dead000000000122 [ 311.983442][T11809] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 311.986541][T11809] page dumped because: kasan: bad access detected [ 311.988478][T11809] page_owner tracks the page as allocated [ 311.990241][T11809] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5911, tgid 5911 (syz.0.9), ts 148505261502 [ 311.995899][T11809] post_alloc_hook+0xfd/0x120 [ 311.997617][T11809] get_page_from_freelist+0x110d/0x35b0 [ 311.999451][T11809] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 312.001328][T11809] new_slab+0xa5/0x640 [ 312.002635][T11809] refill_objects+0xe3/0x410 [ 312.004095][T11809] __pcs_replace_empty_main+0x372/0x680 [ 312.005901][T11809] __kmalloc_noprof+0x66b/0x820 [ 312.007451][T11809] lsm_blob_alloc+0x68/0x90 [ 312.008997][T11809] security_task_alloc+0x2a/0x260 [ 312.010524][T11809] copy_process+0x2c11/0x8370 [ 312.011942][T11809] kernel_clone+0x176/0x9d0 [ 312.013324][T11809] __do_sys_clone3+0x214/0x290 [ 312.014810][T11809] do_syscall_64+0x123/0x790 [ 312.016298][T11809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.018164][T11809] page last free pid 34 tgid 34 ts 148237547402 stack trace: [ 312.020530][T11809] __free_frozen_pages+0x79f/0x10f0 [ 312.022246][T11809] tlb_remove_table_rcu+0x2cf/0x380 [ 312.023871][T11809] rcu_core+0x5a2/0x10e0 [ 312.025140][T11809] handle_softirqs+0x1e6/0x9d0 [ 312.026694][T11809] run_ksoftirqd+0x38/0x60 [ 312.028086][T11809] smpboot_thread_fn+0x3d3/0xab0 [ 312.029633][T11809] kthread+0x373/0x450 [ 312.030938][T11809] ret_from_fork+0x730/0xd60 [ 312.032414][T11809] ret_from_fork_asm+0x1a/0x30 [ 312.034175][T11809] [ 312.034964][T11809] Memory state around the buggy address: [ 312.036760][T11809] ffff88803ffb3c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.039258][T11809] ffff88803ffb3c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 312.042009][T11809] >ffff88803ffb3d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 [ 312.044454][T11809] ^ [ 312.046778][T11809] ffff88803ffb3d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 312.049363][T11809] ffff88803ffb3e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.052332][T11809] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 312.057568][ T43] audit: type=1400 audit(1788196580.754:2706): avc: denied { write } for pid=5723 comm="syz-executor" path="pipe:[7422]" dev="pipefs" ino=7422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 312.058478][ T5438] 8021q: adding VLAN 0 to HW filter on device eth1 [ 312.066205][T11809] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 312.066226][T11809] CPU: 1 UID: 0 PID: 11809 Comm: syz.2.1774 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.066251][T11809] Tainted: [L]=SOFTLOCKUP [ 312.066257][T11809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 312.066268][T11809] Call Trace: [ 312.066275][T11809] [ 312.066281][T11809] dump_stack_lvl+0x100/0x190 [ 312.066310][T11809] vpanic+0x553/0x970 [ 312.066327][T11809] ? __pfx_vpanic+0x10/0x10 [ 312.066344][T11809] ? mark_held_locks+0x40/0x70 [ 312.066369][T11809] panic+0xd1/0xe0 [ 312.066390][T11809] ? __pfx_panic+0x10/0x10 [ 312.066407][T11809] ? preempt_schedule_common+0x3c/0xb0 [ 312.066426][T11809] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 312.066453][T11809] check_panic_on_warn.cold+0x19/0x34 [ 312.066472][T11809] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 312.066495][T11809] end_report.part.0+0x3a/0x90 [ 312.066519][T11809] kasan_report_invalid_free.cold+0xd/0x12 [ 312.066546][T11809] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 312.066572][T11809] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 312.066596][T11809] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 312.066620][T11809] check_slab_allocation+0xe1/0xf0 [ 312.066644][T11809] ? f_uac2_opts_p_srate_store+0x1c0/0x260 [ 312.066667][T11809] kfree+0x1b6/0x6c0 [ 312.066685][T11809] ? __asan_memcpy+0x3c/0x60 [ 312.066707][T11809] f_uac2_opts_p_srate_store+0x1d4/0x260 [ 312.066733][T11809] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 312.066760][T11809] ? configfs_write_iter+0x388/0x4e0 [ 312.066800][T11809] configfs_write_iter+0x302/0x4e0 [ 312.066822][T11809] vfs_write+0x6af/0x1050 [ 312.066844][T11809] ? __pfx_configfs_write_iter+0x10/0x10 [ 312.066863][T11809] ? __pfx_vfs_write+0x10/0x10 [ 312.066882][T11809] ? find_held_lock+0x2b/0x80 [ 312.066905][T11809] ksys_write+0x12a/0x250 [ 312.066925][T11809] ? __pfx_ksys_write+0x10/0x10 [ 312.066947][T11809] do_syscall_64+0x123/0x790 [ 312.066965][T11809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.066984][T11809] RIP: 0033:0x7f7c9699e0d9 [ 312.066996][T11809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.067013][T11809] RSP: 002b:00007f7c97818028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 312.067032][T11809] RAX: ffffffffffffffda RBX: 00007f7c96c25fa0 RCX: 00007f7c9699e0d9 [ 312.067044][T11809] RDX: 0000000000000109 RSI: 0000200000000080 RDI: 0000000000000003 [ 312.067055][T11809] RBP: 00007f7c96a35024 R08: 0000000000000000 R09: 0000000000000000 [ 312.067066][T11809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.067075][T11809] R13: 00007f7c96c26038 R14: 00007f7c96c25fa0 R15: 00007fff58e30368 [ 312.067090][T11809] [ 312.068386][T11809] Kernel Offset: disabled VM DIAGNOSIS: 15:38:14 Registers: info registers vcpu 0 CPU#0 RAX=000000000018a829 RBX=ffffffff8ea91500 RCX=ffffffff8bc6f115 RDX=0000000000000001 RSI=ffffffff8e3d3fc0 RDI=ffffffff8c615f80 RBP=fffffbfff1d522a0 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bc6d6bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ba2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f900f047e9c CR3=000000000eb94000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020000 Opmask01=0000000004008111 Opmask02=00000000fff7ffdf Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f900f3b78f0 00007f900f3b7310 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f900f378050 00007f900f3770c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f900f378580 00007f900f377b20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f900f07a0c0 00007f900f378ab0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f900f3b6da0 00007f900f3775f0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f900f07a6b0 00007f900f07a0c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f900f378ab0 00007f900f378580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f900f377b20 00007f900f378050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6f7365722f6574 6174732d6b6f6f68 2f6463706368642f 6e75722f7261762f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d64657275676966 6e6f635f6669006b 6e696c2e31687465 2e666e6f632e766c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85aa2d70 RDI=ffffffff9bc21640 RBP=ffffffff9bc21600 RSP=ffffc900250cf5c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2065657246 R12=0000000000000000 R13=ffffffff9bc21650 R14=ffffffff9b9131e0 R15=0000000000000000 RIP=ffffffff85aa2d97 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7c978186c0 ffffffff 00c00000 GS =0000 ffff8880d5ca2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7c96870000 CR3=0000000029a25000 CR4=00352ef0 DR0=ffffffffffffffff DR1=20000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000fc02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff58e30856 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff58e30856 00007fff58e3085c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c96a35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c96a35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c96a357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c96a35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c96bf25f8 00007f7c96bf25c8 00007f7c96bf2600 00007f7c96bf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000010005 RDX=ffff88801f290000 RSI=ffffffff81b81f4c RDI=ffff88801f290000 RBP=ffffffff9b911ef0 RSP=ffffc900001070a8 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000001 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a63c900 R15=0000000000000000 RIP=ffffffff81b81f4d RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5da2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff58e2ef80 CR3=00000000388ff000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ff02fefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73746e6576652e70 6177732e79726f6d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf14d8b66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf14d8b66 00007ffcf14d8b6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f046d235607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f046d235647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f046d2357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f046d235639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffffffff9b911ef0 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffffffff9b911ef2 RBP=dffffc0000000000 RSP=ffffc900251ff920 R8 =0000000000000001 R9 =fffffbfff37223de R10=ffffffff9b911ef3 R11=0000000000000000 R12=0000000000005da1 R13=fffffbfff37223de R14=ffff88806a73c900 R15=0000000000000000 RIP=ffffffff8bc9f1f4 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557f276500 ffffffff 00c00000 GS =0000 ffff8880d5ea2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005640b392a300 CR3=0000000037330000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000001800 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000fc02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f64656772656d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff58e30856 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff58e30856 00007fff58e3085c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c96a35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c96a35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c96a357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c96a35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000