last executing test programs: 2m9.336288158s ago: executing program 3 (id=989): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000005e0000000000000000000f300f222566baf80c7741364a81143a3d420f07b8010000000f01c1f20f22e6"], 0x5e}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0x8) r3 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x6a, 0x4, 0x20000002, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000200)={r5, 0x2}, 0xc) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m9.19271937s ago: executing program 3 (id=991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x283cd0fbea958b33, 0xd}, {}, {0xa, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x280000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x80000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x283cd0fbea958b33, 0xd}, {}, {0xa, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x280000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x80000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) 2m9.094503773s ago: executing program 3 (id=993): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0x28, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x74, 0x10, 0x8, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x0, 0xa000}, [@IFLA_LINKINFO={0xfffffffffffffe1a, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x3c}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044081) 2m8.967903069s ago: executing program 3 (id=994): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) bind$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc) msgget$private(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x2000, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) msgctl$IPC_RMID(0x0, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002abd7000fcdbdf250400000008000100", @ANYRES32=r2, @ANYBLOB="0800040001000000080004000100000005000a000100000005000a000000000008000400ffffffff08000100", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="05000a0001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='loginuid\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5111) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x29, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) 2m8.860347415s ago: executing program 3 (id=995): syz_emit_vhci(&(0x7f0000009a80)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_le_read_def_data_len={{0xfd}, {0xff, 0xfffb, 0x36d}}}}, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) close(0x3) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0) syz_clone(0xc0290400, &(0x7f00000000c0)="366e8ed4e1204a204f3b1844d0df2aeda0a86eb4fb033ccfde595dc52a554c74d34109d3e90d339d7cf4e7c57a0c7a1b071685eeace861dc32c7c1b24a15223203ba6a17ecadbe10f31a026e564a3461f00e23f2e3f6", 0x56, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000440)="44e5787f6c78926c78b44d581546eeb09dbcb74bb47937fb0b5e3b3fa72733ee0108cb0e01c0366941b248aa5a34f44ba0342c15f089700cb54db38aae26dd23a91251bb8a53ad03ea2c1d0fe8bf48a5e205f536d935cfbdc8ecf02d61dd80b9974f6a30e62f9bed120601c0cf13843437c270033b87f80047476509fae496ea3b7b1b250df6949c2a960fa0b9b415ac061b4927e904a9bf175796fd11540ab34788850abc3aa98acc161d30476ef3fe7fd37dc9dea228d62bb62fc08b6cce4f27") socket$unix(0x1, 0x5, 0x0) 2m8.644862423s ago: executing program 3 (id=996): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe000001000000008400120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c44cfe0a4b2f215a2603de81692e755e6e830b6a54affb526df1426a976c7b0ccf27b8b0ff670c00ca6ae381e85abdc876cd9cd9a4d24b9314f5e8ff5b76b7f447d47e505d8e81513ac4b3dfbd7f6e44438fe351ac2c35d67c7615c27da21c327509a65fb83086507811e9ba1d5a474e9d27b9ab5dec170a0381240f17c7bf74b6fe6e0b268b46cd70ac6c36f550c17d69946a572130c5c994cf3c504d848b0315b74484e2f53a4a11ef7378769e3d3c5557d2eb7381ace5e987f48340843126de9b217c1039feae050a215a3d4e6c4"], 0xa0}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x7d, &(0x7f0000000000)={r7, 0xffff0006}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e24, 0xfffffffa, @mcast2, 0x4}}, 0x0, 0xfffc}, &(0x7f0000000300)=0x90) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m53.605934566s ago: executing program 32 (id=996): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x7d, &(0x7f0000000000)={r7, 0xffff0006}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e24, 0xfffffffa, @mcast2, 0x4}}, 0x0, 0xfffc}, &(0x7f0000000300)=0x90) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m49.149840357s ago: executing program 2 (id=1227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000440)) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x8, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xa4a3, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r5, 0x47bc, 0x20, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) fstat(r0, &(0x7f0000000240)) (async) setresuid(0xffffffffffffffff, r1, 0xffffffffffffffff) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) accept4(r2, 0x0, 0x0, 0x80800) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000440)) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x8, 0x0, 0xc0}, &(0x7f00000002c0), &(0x7f0000000640)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xa4a3, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) (async) io_uring_enter(r5, 0x47bc, 0x20, 0x0, 0x0, 0x0) (async) 1m49.149618269s ago: executing program 2 (id=1228): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x2000) (async) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x2000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r2}) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@ieee802154={0x24, @short={0x2, 0x2, 0x1ebb147cff9d4c59}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000440)="35a488c04376f776be1561a838578e75ec673bae3b8a536c7c2e99c2741a529245076c000887f0e3c43487a2c5bc8953c378d057d21a404e4bdc4b47d4de6ef49e748751175fb9b6cc4cf128607e010f77b247347efaf66e289cbdc94be5dfcc47d4fc52e9955c2d7e5ea0800950d22f766aae07dd6b891cf28f264038527d1123d1146f5effae36eb72a2cafecfab5d0b4246a8caa92b8dd1c55671779c4d570f22d0cf75eb4e9b60dfa5ae2d81602b7d8cf0ef578764bb060af7e905fb08ab02ddcf3750b9d85892c6eea25d9a82674091279c89e50253371c70cdb54d5ce6c513a62afc2fba3c401533ae45ec9ad98e0fb59233d020a6", 0xf8}, {&(0x7f0000000600)="d26a146b09290ff993c682b57a3a8f7df1999bee586e0c9b88b3d02a13d52829ba3b0b4177af11cc3b3a23905dfe88d33bbc595a15e61deae8f4a6b4e956241b7ac69f87052522d3e324e2043a5973b60c8a07b82590af9ee45362f3fd39955bcba53b7b6996f14360ef545e21671ea7fe7438671322beb8438a2b451f658d9f48aa5c299da296a48e8b5bc3", 0x8c}, {&(0x7f00000000c0)="e6b7b4d90de49292be5be25782bbed95593362aa4e66", 0x16}, {&(0x7f00000006c0)="8ea3af522d882a662a5ba0a7d896a0db1241a164ad6ef89d9c57a02e8169d094b25ba164b9bd20bb16b2f31daf2e1203b63bbc815b01ba0138c60f1dd44848f17f04d115380e971e0660b9b4be425a9b9782f0815b406ade30fe8f7cfe5a39a0600f69db7688d142aa3938d82622661e9cd022c33456a9df2cb6e378379a06ea145817dfbd170297d38704ce8483", 0x8e}, {&(0x7f0000000780)="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", 0xfe}, {&(0x7f0000000880)="1e2b86e81432520fc7190233c9ec14d7af2cd64870f669ab3dfd65cfe178df2e53b090dc6efb66a122b1855eaeda3c55799e64ac607a9d0ddba27ba0c063243b9d7673ddb1c90477b3678064652f6f67f6048c39d510e9571258ae06038233d0e8c24e475e5af7fe3737075d9b86cb54424f2dcd4fb75c4fee62e7bbec6d287034fbbfed200512e47bd987d7729f54940e83e2e7d3eb6630c96e881fea900fd3d3425a83f8523888c4069701ed5d5dffc6d715ff7c3ed54e89ee29417c116eaede0e48992ffa48821d9d27aceb69e83349e31a8503447d138f4970cb03ca68f03e0e1f7c2d", 0xfb}, {&(0x7f0000000280)="3c5d856cb5a6d21956f19dc34731f6cf57191157391d071a920bc4865b5cce606e04590a6c4026a090595a9fdd1ea9cc056044eeea1256", 0x37}], 0x7, &(0x7f0000000bc0)=[{0x100, 0x109, 0x6, "268b570be53629c87774e57bfa39914376b1710fdc7d6de92f5ffb9b2df8c231dc820d5c9c484a012d20c21df6c65ca9506fd41d649a3fd6b0ed87650768ff9768403c48726dc23c1277cad958821061aae122f5ce98a5959d2158da3a3023c20cec4e4489fcc56c08afc4d3aff6e8922a5fd0ba994232cffd47daddd99517979caeeeca68f51005dc12350d435f13e509cc1c17b12a90db176b8fd70ebce9f41fead23cdd74e0f659bc7b4b835c4d70810affdfeec61209071734a66b0df75fbea075bb53a41ef2cb38c9246e82ca560332698c94f3ce883d5351d718a7ef9bc39e7225e24862574fcb18108c14ad6a"}], 0x7}, 0x4000850) chdir(&(0x7f0000000340)='./bus\x00') (async) chdir(&(0x7f0000000340)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) 1m49.06026665s ago: executing program 2 (id=1229): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x18, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1m48.751794663s ago: executing program 2 (id=1230): clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x0, 0x989680}, 0xfffffffffffffffe) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x100010, 0xffffffffffffffff, 0x8000000) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, 0xffffffffffffffff, 0x10000000) r2 = socket$kcm(0x29, 0x5, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000001940)=@IORING_OP_RECVMSG={0xa, 0x24, 0x0, r2, 0x0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/26, 0x1a}, 0x0, 0x12000, 0x1, {0x3}}) chroot(&(0x7f0000000100)='./file0/../file0\x00') r3 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r3, &(0x7f0000000300)={&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000000500)=""/171, 0xab}, {&(0x7f00000005c0)=""/204, 0xcc}], 0x3}, 0x60010023) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x101091, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0/../file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000000c0)='./file0/../file0\x00') ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1m47.885814961s ago: executing program 2 (id=1242): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) prctl$PR_SET_THP_DISABLE(0x41, 0x1) mprotect(&(0x7f0000832000/0x4000)=nil, 0x4000, 0xd) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000002840)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x3, 0x20, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xc7}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) close(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6664be03bd8cecf2bf663d7605", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002880)={0x2020, 0x0, 0x0, 0x0}, 0x20d1) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r3, {0x7, 0x1f, 0xfdfffffd, 0xa5a020b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x8001, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006100)="d1f89c14e7f8640b43b1f1d1e00b2b0b3146d223d281c321953af4ade40d696d07f4b7d2ed1c1fd5691291056351901df48500519139568c88f49bb32801f1eb24b30efbab27313a3acab179fd6ce1f7150b0f0aae8cde4dd46b4f63cd60f647ea9bcf83f107e981a050f61f5d1bb5c7883f93269bba25e4122796c0f88ab27d913586d055f8c977ffcb05c85210f93cbad91499fedb2ab95e06bf009e54b422f66cef043560f4d77ae5c083cc67fcb0d3f10699aac8cceaf6d3b8f32e15555924edbc42b4ca3d2f4a92f5d30c18176c3abd17db4de2ef74472ffb637dd07460aeb7c882811c089217d88cbb5eec41d2be903e1c65cad2ad742f9ba8b512adab575f89d539492034ddfe4fd28205c8f27c52f0f631703d384634bfcad149ea9e842125062ac67006ca474be31f708b4f4f1e0c97a4eb2f26b671e172e251e8a6e9e1510bb74931aaf6b6ff84f8aefd63591f18f2ae8028985d78fcc5ed2d57bf595d3068e904387eeddd19bd359721a432bed0bff033cbca6acfddb6529fb11290bf1563b45034bd9b6c331091efef04303ca9942fcb64e56f3ff74d610e14c8f8a87e41582aebb272e5d6e945fdc7095bd181b93f13ddbdc18545f9cfc4db7f134c9ffa6add6727ab8755a06dca23d24a67658fda84321bb97fc475ace3b9912dad73f0ee6c8b2d6d58d7328ca63d1aeceb22a419fe4ec4c3b943051e9d276c559c33e6a45a97813bfcf80c7d79ebe04b1827878c4c8c2da2d598f9f3e444ae82f142716827dddcd94f8997d88a30be2a76432641125e28d5a0896b3e040a8b6805abc98da90844261468826b89f6cbac8d7b5eb6cd8a23f7c7ae9b99dfa6616f9dd10ac48e8c53a38ebfcee8c0ae1be1ee982515ce12a1ebf5d2d1902203007a9bd062c453845ce75f54dd07e3d8079e19b3b116dc51f7a07d005ba682da13b73e3854bb60059fb021b8f4b9430629d408b32ccd3678bf1dc149a3493c44b2a52a5572c128957e0db8a4a214848b64bea6733bb48fc17a4e42474e2b1f47b507d038bb87a3fc32e7bf471685a61f736a414772cc1825e9342c58768640c83486dbf058050dd6c8a9843c106d1a4efa5e5b36deae71448e55f4ef2721d2d210ce075bdc52c97bd6c097a9a4120a507f6c99cd9054579c250cd5b207684deadf75f2f8c54349a57500625be7577fd6c81ca72111935f577c74c2bd1e9419344e2a3563b5a7d6026722469a30a061d123b45f93027a01c7d38863589118d25e333c07f5c3eb85d4dde937d8f1421b72035f8733754ef4793acdc8d1362ef08ac1e9f0246bfb478647ada002f809a3e63433d031e6d5e4f86218ace6a6221103608705719c3106b4659c377f7e3b6ae1777075ea45a68df2004deb6ef742c5971c23d409278be94c5de68153d93d1a2378f1b1656786ec896b72de0da8259a6f181be8829f9cb7cb98ce0b169e734e4a240508952f6ce3ca984eef7e0cd549996147fe56a0bb1598f015ab955df145a51d783397366084e53455840d5688cb9b7d2cdf8abbfcdf850a7de4073eada567d6ca989611c4910e692e44677a857eec2b654f8dc66b2be192786dce3b9780f9806652bdef013304a43dba3f8d15e5105414f6d1fb2a57dea02211fa311b489088a9802e36d649ada97d72a216f54ca6da090a51c01f5638a04f364a3cbf24bb374f644fda38856a7e0f5c3c9cd7b00555d105daf57561379cf1d77bce66d12de44f202a866a43a7a05a6e0910a1f0ab5b1341d8ae992ae9d95fa2c876db1bcd3635d7851f03dde1eddae6dcf95b182edab72a0521c88c8c3a8c2ad3c6ec2cc44321ce1550d51476e95a18ae5fdab801ef4f5a7a56580261d850f392929061ae5808ba390b2f7d8fe7325df9c07c39faadeeb0ee1ed95db7ccf49c9b93fca83e06be745156d422c8b936d65b8e7e76d9eeb2bbf19c1f9a59b8ee6b55d594d4794a869b2d3b37b0b936866894f00e6a90c788c22e0fb87d0ac53ce75e519765647deee2862552c77ceb75d419627e0627067ba24571807cbfae0bd959fa95cb14c2812a1ce41f76d2ad620c55df55f473e56cb219f7b13bed8cc4a98dddfda9d3b9b5650754f73c34bf00496993a1c4056aeb44e4160c3e2090d733604b2b13f40ae346b726a31365b7a230d8f66665dcb726594280678a258f8ddddfe69d424d62abe910db05c0efa5e773d0f6d8ef8c4c49926b46568a7a1321d996eacabb2f716539a020e34a02afc3bfead458287dd2050000000000000068853637dba0b2eb5e5318750b63c829ab0145c02d6bc05aef4113ee0ea0ba97c44d74cedcc89adff648eb5d7fe932a7a76c772b1e2e36c148dd3be951cfa0cfe11bc58635b38708fa1ff88f949eb15f4a4a3de71c33e2915c799d8204d7d1f9cf7c13c608e6ddf29e12b409028ee5edf37353df7982f67a120ff1871001094b1a3148ed5f4f75d9372aa21b2bb6e02b470336a2c20efee8af866032acd6dc56d1fa7a84dc314cafea1a7bba5fbae89e037a4a5597d2eefd153406d67ddbb3b4eeed6d981b229c2c1b76347b05d20835ecc979b697a2981f6785df853d3d5ce07c624136c805d4dc6c7419d68afe2ad4822aea38da761742b33de8394bcd2462518b35c6ef265eb2a9b130e5a3d669b55d457f92500a7b69156475e001989d55547fc831edf2afe2290591e902858914af73ad4e87ddb8ea3a719f435fe1c2839a39fe088ccc863e7c82e96b66e1b6d32ddbdc42bf2f6076b9e93ed2ec4b6ba6fce5dd3a8f5b3aa105aecf72a5cc9108d02a0b923de2d490ad90aed3a45c46d4594948e7b3f3cc7d153f4b2837ca378fb4af215657f016fd9c66395b98357c1d12a655ce07268beccb35acb3f928c1522bea5df98a0337c751308bfb361e68f3775c75e020ac9570283119264d4f8916c143ccc28d8e0709df356de6b6f35fccde79a677606b5b4d846fdad7c271fc5c2ae5f5e2fbcd6fbf21508a2615ab8f0208e276164bce80fb886b648b4cb085c7922a829c2bccdd850cec329870c866f7923c2c1cd59d6c2653263f7aa1f13d84c82575a021793ef875954ce8737c98abee465e780ab64f1d23da92828e62908543850e5730099eb34f5e47dee740581f596413b8e2711bbfc9d25e4a35b57416a741a60ba650b52ae2189cdd125f64565544f9e75bd8c2cbd898ed2dbdd704ee40d1746715eab4155a51289cf7d89a19ab7a355609dff8111c94f6cdf94a94c667508d7201eab7e86569b8b08bca2291cf3fb166df68f6d6da05398e8a1c0c5c66ca3cee621727a77f19b92927569ba44709302c1102683f338150989d971ea6d0151b69865e540ad4e5a186ad9fc8ce57a56ad114487c5ad99c0beae0fd49927c52380de839cc952f8e41e167006573b4ffc39ebec8f9f9fb4168386a78fe52c00cf3c3be6dbcd4ab32ac7cb8fdd1bae70a5c3da6f555aa6c8e6bd7e668391bd5d87e39ee21f9035b0b14dd50b3c4e211794bfd7e8fbc48658044eab550f6b564d8f663c25ddb30233fb260e2d30bc9956f7293fd5532df2f74019f639c7313ca029280c513c2fc3c77dc4d0e7f5a9f273fda00349c28319743bc8f7eaeacc7f487bcf5866a55b2fa5b66e31964f090ac448a1ccd3b8cbc9735db5d7d1dd2f2bcdad1ee48b4f8a36688d8ddead1f166a5afb2efe12e943ce6ca41f1f45fe650536860881c28ff04a66ddce9cd19b4304c26e3238f114a1f4080999aaf6ff1f4b8b59ef5d54c10cd8a6598420949f1c0eff13259ba7da9f4c749b58f31f01627b780c2502cc6d1d82f68271e2bc945ddcb6784532e1aba414385096eeeb45afca0ddec570b16b476fbf7b4818275a05afe4beec9086e1c816ebf96608ed57a570c931577ca5b14c9359718b4b31b4789f291f5cb012f832e5763ba53521f58d3ee0a10930d3b4ea7747c5c751cfb476159287a9d371530e5d7cffa6ab09f049d2435960b0ad34f7890df22a3cfd6ce052b08409e67a1291f8459a59b988d7b97d2534f306d83656fd43313eebce1732837b6c22dc60a80d03c54b695b4efbf31381916c7da9644ef8e0f6739c98e7892ca89bf696715391c989c3bd53362e01b81d998e50e46fab088f9312465d200c034691b7e5dcb22ead3c3f3225f16a5588b2be09470e225290d8073dce5cd955d31e7acd452950505597f01c4b54a6f16f2e7d00ab182258f26e40bb70db783b2a10aae019f87708e1306e1957fcc081dac3659d603d4044c10b0a1fe61f4482e56d031d43fc355100a9dcf822db16d0895e554b439bd032e6103df725123da3fdd4a48b68863e6bb36e05343136e171d39d86168be30188bf1ebac4a1d748115167033149ac61bb4f8d4cad7f4c68c32de226b03fb42d24d5e37ba886fa357100644e64d869f6395e3d6d3768a30f53e2aca3688408807bd4818a2c5150f8ee770121a4a6402c7dc334a9ee5e876566d19867e45d4bdc73477ff7f543a23f38d5f0bf666219b0391e66457af4238c5bd9a05586333556f8972aca1def4507c4b073d1bc1c3051f0bf34f71673ccc1de9c69170c9fc5299ac733569cfde6a7bbb3cd60b601cfca16510bf7fbb26ffab3b674000844daf55fbf4ab48eade708cf7f5de901454acc8cc95c63fd2ee771bffaf19205e9a119b847931bcfb4c738e39701a3882cef4ff47b46b72ce26ac207a1ccaa253cd3ddae2b2eb61d5b9b3c8156928a169d7dbb2874b884c3b2097cb8ea92ce7fe70af90514c11887df33c4f7ec3d3ee6c327e7129b0188b0ca8c777451b17d8f489d547d711404bef72d1914f66a5676e9d716ede8c4282526419adb31d071d241db47a58bb55ee6ebcb67c82765a25e5e6fedc4c8d1d9b17e2b5bac5e0af3c63ea870ad8c5f9521390b660fc735d331e6eb326abde284256cdb381b4651d05f55807f4ad1b5b883bf6b55ee87285fad8de366f3248ae0b9c32bf85fc95d5bc19a716ac2a5f41e4e58d26bfdfa582be5d506f9929bfe7cea70184c81722ef7300f779d5d64c08a225a083d44ce75ced73f3a016f5047af67245bc8a81214024e905f383252cc0228085aa5fc184cbcb41db3eccede89480e0a1c1d1754cc3ffa53edc27c337ec86ae2f68c6225edb0027c1c5bf9aee1b94b62f6144e4631887272a36add32d908add308207559064cd61576f917db864845e5e89efcb27c80d259eb6fd5fca398da0c7e62fc423511bb8eb3969732c862de33448e95aa5e15d2028b84b3b8348a50abb39c5c10ac7fdc2034d1ceeae9870dc4486f48ac6aae573a775716ec380ed57665b9bf1c77f6869f720e428f8b94170b14c23786ff1cacf95a66ae631c70245bf264ce5078c3bddb4aaa7928eb6f1261d52e45ae5fde6f1b3bff90cd560c6c2f77ecfcf553db137051685c925be70def2be6c9bdd5825eac58d4c892a6d4ad5dcc078c6582ca140e5a75993e5ab7b487f31e5c601844f18f13039c099317f5e512eb9e054dcd8535106a9bd8977bf74254b68753b7f3a9b385d4a38ccaa17e029bd9ab4ff9b9b561b2a7e613ea05eb18a50fc231f32b79b9f32514469193a3d12269f58f3c932e501513e48e81774ad389275d9f00b4f8c677b8bb584b503201f83c7ad2e934e909f9ae1fc540f544dd2327fe1d8e3bb86984a252e2ffa88e2aed6d65a302d1883e51654fdb046d35270130fb9f8e4a4861d7278a07ee627fe272dcf99d294d7b1ce72f2f804cddfe4fa7aeb2c9543ef2665bf826c8ce0ca82dc7d4e57b7181b55a5d96ad83417b79376793235ed5a320a3ffac3a025aefa669450a6df20d830042034c0953836097c9461bc0d9c1446485692d1b9d5c991086f3f118a49bfe2a0888a5af8a868d880e31946dbd0c7ddcfcd27dcf5c62c9c5ff8fa9750d129f32e3c4f524eb3c31d5c9cb33fbcf52384a04a9f4faa216020e45be91181efeb7393d96b1f3ad8e9fadcffe49bec1bf36e70c2291475356ec5a416feb5d3b4f1331052271679d1186b338163682ac5b6bb79c64d6d0f8ddfec84d0d9870f45a64413f529c8dd93b358e66c9da2fd233e53b73ae2761f363ee69a38a0d7320a149c90c086e6a426abca5c461088747a2fb5006919ad7640aad79b1ec03cf6f49206f37382ad3105fcbd0e08d00815029d8cc3ca16472e58226f1def116bfab456c32a2a2323bb5a661eacb3b7c915d1eaa8c5aa8b1bf25c3a7bc9a2e047c499d8f2fbf2fe25606fc7f0ae5a539af68830b1955f82962f596e2ad0feb3e99b1982ffe3e553f102b4360b8e1d659575a8f713b8bb88d97dbcfd98f91c147a97e896646a47a43334569da8a01541b012063e0465c4122cb96b57484b0ab8c5f0c8f346c0766be69decf4e3ebef7f74f153ef8c6b6e9c5fe224e8f995f11c1867c5600cd7a345afacafec9076d4ccfca741fd41e445478a3b71a5f06b0d0cf596c755235408782a5e37abeb1f2dad79c83e59a1040c4b3b6a5a2acce9df0ebdb607c9c0549a4b16028595f7a9cd9da115dab0189f3d98b0dc2b8ddf6be4de2b38421a2071d91f14f8752c74df31fecb64de59dce09da2c3a1a2826446d982509baaa89b76379d8320bf3c1f76448e0ddc0889fe57ba756ab1403949cd2ca9ab520fa485576eca5acb471002a14a31e8d7f54c8c3edda8f416b0ae9d9fdfc445b54ed8fb34ed7c1d11b3c57a2c5ad92217ab2fdebafc195d09fee7a518e027ccf9d2e8de8cef1e0ad52144d82b65519495b8a5c314e85361adca8953dce587cf461a461dc9bbc0eb13a54144964930d80d8b4a015676f3efd10ccfd0ec5fe64deb93b5901b506581461bf2aaf04fa9f8118936c5e67e1cee60ccfc4f011ee2812eb9716af42b22c40d83c55d4e4c4838826cc34387a2085aa3e17219c78255ace7bb1fc30ec80676449084744c0887dc4e7696d25a544f3e4b365cc6ad800931d5787be99d678347ea4d6cdeab5662f6cbcb5fa80590e513c4ca96d73d378085026e0e7c71d968a670aefd48519e35beaeef9c67506db6f9b3edb62ef1b3b52b9c2db876b76101644e7dcf5a5056a8d916a0f69ea5bf096e7a4c2f8f1d0da29dbcef9d2ad1b82179ccd0ef95006b7a1d542a847e3e0f864d63434c15d6de4fecad18b788a867da5515e3d51871417bfd783d2dffd852953ea7113d3a61aac3c7c1a4efb449faa928456eb570e62d0ff9542a971b542d7c1fed9d633eb4a81499c105d0f73c5165badb54b0e83f8192d3d51d46ddd9908b04e9f57d5a4e6b65affee3799ae7cc51b4098f71e8ee947ffdeee4fd03095536376e1281ef8158fd1da4a39aebdad37fad75f6217bf45bfad16f2f1a80f5e8a3eea1141a56beb91319fe948bb44350a6e79959c140a5dad9955fb287aeba0a8a45d1fd8d692d30c96d01c9100e417082ae6edf62965fef7e190af60a99145925a307d1e11534d2a64484be3c6cd642432a2db66ba6d3ab1b7ea645edf4e54623d2ba0619bcc2a917cc2df8b0dbed096951947445ed5f08c626e1f9a5f566515bf106c48174f73587314b513962ed556fa7f16d8c6a953bcdda72f083a9b16357b3262c13cd500dfa09cc3d09240a7338514031768ea3053caa5166c8e4e090b3128464a88ccdc751d8ee1b3b1098997c9eaa2b3a13a47e43723a49e5d011dabb22c0d9605e48d5e26b90a47519536fd77c5260bc713e2b510fa6da698069f6c1df7a72462399d7dd288be19a0eab18adb072677268a306f19685c2d813564bab4ac90b7389c2fb87c0517e769577c081ced55572da71b40d18e4979b6b6290afcde4caa610166920549286dfa80197a10ff074b08d6b96c97110e36742fdbc5607f4c48ea9dd53301eecb5c25fce4eec9381b84e6b5af767c5bcca600149a3021c3f4aa237a0143363549a705c5768b5aa6ed51fd1ca9f0f9dd242f0df21f7c3eaf321fca97837d989ca101b5462d2dc248316c21339cb2b4e3451bb483390c09c958d474c6df2f2eac208ef704cbae5c9f6597c19ce48c4c9161c1b14622ed824b0e8669cbe6746051729fd2fcabb020190764a468c58ce369528bfca46cf8ec51ab69e711a53c4121476d2a5d2ceb19c332a5a86a52cabb246d2be739f361d97a6efc2c1d408b6f079ff5cbfdfa7ffb5da3af4611e42f876a44f8180ebadf8efe05645f3326fd1b1bb7f82753ee13e25c406469a6b103b9083ac06d590a48543240bca6e467eafc7069c97aa93a3a4ef61b6043383b6e990d174637d695893bd910f217c9c2465688eccd8a171cb5270fca2e002261f2e3e595f3484b67c0bbd7b50ea53a470e3935c0eafc6226521f0a15fc7cf5494b67fcfb705019a86a5972a9dd285bc50985947e42ca8519de25510db7ba6553419d4e368fe56c2a7acec8e77cd734f557a0f1b507e0869d2d5c9913c52fcd78b42b8f59ad3ae92226e292ea4439b5486629b739f4cca3d7f21cef79045427656fd1679dc5ab23686e13500dcb6284df60599ce81e2570d1cd5c7c2e0026640177bf1395fcf6e999acac08e3a993c3700ad891b1a68d5efc32a4b4f9cc8841e837e778c2500eb6cffc1b9970b2adf724839c7711ebbb2ee3e55f7aa97746d7538153589deafeef63eee6dfbd43fc72e0b763a0e4709da3deb26691303e99230a93c490029383b322099363ba3b2f76b4773c0c43907361b578cfb312cde55ea6de2f477c351ac82786d15b52f08a42385b2a3349116d34f8719264f79082d7c24165423a8e6764c53b922a0b3121cbb88976e6f53c455be77521bc1ad4997135ff24c520b2fa0002cbcc8eb8ee5cb33b1140dc811ee36816f47f23ff0b77d6680d597ec2fe77f5bfe1bb75c3eddb2356940c01e694da66d1c4fd78f7df5857111c01bb5e9954585e54086af287dc0ce861d921b378e9a2a9c9c5a37d9812595063643b1dae4afa57d884501ee0de2d7e39692ed5ecbd2ba1d9bf4e3f291cf0b1dfb809a2f915ae90bd5fbe76d5848752c298f34e69d8e95f6f3c8a8ef365d0927811b8a90c8f58836da07c058f71b01025af8c9829f761d71465d3d813e1e08a7d8f66dcb0f98daa19bb106fb9b25d49a35e8900e6de4502668cecbb9638c5b0d158317970e802be345ab3570f6a452e18da421fb4957429ec4b6c481b5393be9c7f1cea3d77ad1c935ce6cab01ed08f7f24e5b01d25105211d5e28b25d3a5fea30e3c4cd1289bc2606728f127574cdfed91d7c19d7381c3e532c92d7e532e74f3d24281cbf0f4e1908dd4f5cf145daeb21db6b34f2fe175aafd1c20224544c113f132cefe620bd99c5caff7b74d6acf8a1aae2fda5212ec64c80d647308439d5f90f6f481101599b539cd09a1bdfc510b6c9027c879f76bfd397dce9d3985ff01e62ee0455372960b68202412c6d5eb7b09c36f265b7b8b3822aa489dc169f8079e71dc96e0b75de2ade686761b067416e4915287dfdd6309946487a68115ee9d0bec73ffc63223e9463a30b819297d24824cb20724c6b524d58af1e03264e8e2b8dce59377c78dbd5ff5977782181aeaa8c2bd6d9f3d25ec566fa4a01eb5aeaeb6912acad55ca7336d28e305781bf128d6575dba16110d64c55ec9840f299e353fcc5628f248bd660f4dfa5f3a1bb7fbdac78ec727e87a134c98a98f405a4cd3773e79bd4f22bd3239a5fa8cd5806601e07241b25678f048b05bab6f8da56818f8dd9c97d001f4a7ea8beb3fa65ed7a951878bcef7e1da873e21ac6208cf0852c6cb297c10c84b74582bf59aaa11e7d8239997c9e7fd3c5bbee5b8466c17394fa61771aa10a3541f88419b16bb4fa36126745e99c292911d30ed0fa366dcd62c10879a6826609ab2b80b3a0c2de3d877805a564ce925916063c53d9698bb918eed2b49315fb83465a0db1a63a0528a887f5106dd054edbf381280989581c859a517573a6eb4946e0fcc61956fd5868fd37c788090fd7c3341028cf1bcb38ed595a4fd845ccd45558282c6e23d92d4268875f80ebad1c24f8d247595de2f8b83708b504f674447bc6fa1748b86fdfc971c9275baedda1348324c4dbde22d423744e2d537a4e28d95771b18302bc5d92f9e0ba6b1029a3e73761080a4e6e1b52a9ebe3538cb3e982586c23f0b0cfa78126198a0a496d96734880885e4aef7b35d90af287f9d5b18998fba69cf5a13b9153edc5f1c3cd0d181c1cecb4936a489f34682b056eaf5c57caea4a9ebd9fc7d842bc3850046f925dc430769863922ce5bea6709fa9bf7f21098097d7f47c74269b524c4194bceae0571fe968ebdda85a28fa5be7f794632189da179e248fde037a3ba3fd53845e42db45747caa6cebf574e9abb75e3b33c1096e40e0e845385d6f961c56fd1c71f92ae31a0c9088b2100b457cf2f8b33ac984fe79ceeb65fde350f9c6229433aa20d226aeb7677e0e7e8002e3e220fb74d4a1bc07ca43fa23fcf9cbabe7799b5b8daeb63b35923c4a92d2c636d36d58e719e6855b57445a26072d716aba7b653dfcdee115b3310b0c8af8649337597c1ac8bcee8b0533cb458d165b4ca4ee72c60a49f4a7061aab09449a318a6dc1d5b1a4f2a7f82c5af241e1f0cbe3e9fd5079e385ec86bc978ca82aaf1de5b470dcbb06b5f0360142857a0519583e3a77a6fbdadfff48de440bb5c3dcb2c3e6624800fa7898ab00242b7109809d58e5aa8a25705266d9bb04f165f843f1c61c23b41f010ad67f80aa8e455385cf3ff89073dc9434ce9be78993d6c73a8adf4db6b540e7a9f60d8dbcf3133a8f5c5c59f8378f2e5aad07f31707fb9834c66d6d0ded8a8b2d984ff5b6bfe70bb6479aecf208beb8f4da7b23957ce77d574993e1a44de0b3a5cb245f0ebf8ea32a22472270798defec3deeb94a4d025d1fe276612ebfe0f4e6e639de1300d47e542fb032150ab0aded71ba693817feb9cb43beb6f3074c2d7bfb77b9b2783e0335449c9a9775ccf9060ab2468a6644ebddd41f70add6d2d24fb9dd377c4f0dce3439283f22075ff3973e4e70e0bdcb53001be03800392084d6768c3e8f7fad09b192a497a36f602d07655d3e6a7ccab561ab92c79506e1e06aad05975accc9b8b48c41da8bc611d331717ee312d77403f9f66ee9a81fa4e624cca690540dca722986dc740a919597f7836ee95b554d3c34db3443ee5b6908f8623b2c82f32b65c3e8c20ee92825d9c82745bb5368ddda47036390910e26470b96cfd7c4e7b0df89f897153fd5ab4302de65fcda1f48206346d6051a94d8e0c32b959d914c218f54813811d13d99ef6259f54c0e635c04f875772b38524e94fae3a73109f60d0b00c96c1809f37e8fb37e61620690b07d726d388e9ae5dbc3a1c3557d1e4288da0622d77081ab4cd00ce22243824c363ad1be5cb0ceaad6336a797d8ca6d988c4373b3c00667d651452d50f81a830ac6ebb71559590181eea67dce1599d10000000000000000736dcc7c36782c1788cdc8d5c3820d68093ea84d56daaeaac19c19724ed7d3ebc1b8c1e3092839314dc6eddd99dc0eede13dbcb7fd22d401df8eb7f679a04f785006d3b4c4012bf78b7e43b1b355a9f6d04ca0e86c32d44f73fa514d1e2b14746400", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0xa, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x448002) connect(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80) 1m47.738213613s ago: executing program 2 (id=1243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000111c0)='ext4_sync_fs\x00', r3, 0x0, 0x5}, 0x18) sync() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000111c0)='ext4_sync_fs\x00', r3, 0x0, 0x5}, 0x18) (async) sync() (async) 1m47.667918322s ago: executing program 33 (id=1243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000111c0)='ext4_sync_fs\x00', r3, 0x0, 0x5}, 0x18) sync() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000111c0)='ext4_sync_fs\x00', r3, 0x0, 0x5}, 0x18) (async) sync() (async) 1m39.701218826s ago: executing program 0 (id=1362): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x20000000009) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001214010002000000fcdbdf2508004b0013000000080001000000000008004f000000000008001500040000000800030001"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x80) 1m37.510413013s ago: executing program 0 (id=1392): r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x1}) (async) setpriority(0x1, 0x0, 0x5) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000010000001d04"]) (async) userfaultfd(0x1) 1m37.505157914s ago: executing program 0 (id=1394): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000100000000000000fe80000000000000ff0300000000000000000000000000000000000000d00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c0044"], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x11) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0xae, @empty, 0x7}, 0x1c) 1m37.420168909s ago: executing program 0 (id=1395): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, {[@timestamp_addr={0x44, 0xc, 0xa7, 0x1, 0x2, [{@rand_addr=0x64010101, 0x6e230b54}]}]}}}}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$inet(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000001c0)="ce81d1fdcbc96f169d613817ff28989023f511b462c8423d0e1c4f96d3b794605b9df0133bdbf89fb716d8ef77797803088860d88ea6b89942a00181f85a696c2604059b4d2ff91e79245aadc78fa193101475efdd0fe17f84914b47e65b27ea7b485950b4a1c688a5b24a1df5045dc639fd1767d866915957d65d5a560c56ed30bd1469b2e0611afd63797d37d7d7a9816c0f381b83727ba709d187bfd05c596714f17729d5f91f0b096a72562d1e1cb7b6589f3ad06711313028e359f9ff5f2f68e2912e768386e3e94f702f64e87c90eae31e40b57e4a539d3a2219af127952c4456bbb5f87f47cb76be6dae72d40a1061aaa85ef7227686a0ff06f1a96bb8381187bfc", 0x105}], 0x1}, 0x1) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000030100000000000000000000000000000000000000760f00000000000000000000000000000000000007"]) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file1\x00') setpgid(r7, 0x0) setpgid(0x0, r7) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000440)) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r8, 0x101, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x200080c0}, 0x810) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1m37.300146285s ago: executing program 0 (id=1399): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000a40)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x1d, r3}, 0x10, &(0x7f00000005c0)={&(0x7f0000000540)={0x7, 0x402, 0x8, {0x77359400}, {0x77359400}, {0x3, 0x1, 0x0, 0x1}, 0x1, @can={{}, 0x6, 0x2, 0x0, 0x0, "6e653a7a1b1d7302"}}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x569020, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f306635800000000f22e0f30f26c8", 0x47}], 0x1, 0x21, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000001dc0), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x846, 0x4, 0x7ff}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010000000000ecffffff00000000", @ANYRES32=r8, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c00028006000f000000000006000e00"], 0x50}}, 0x0) 1m37.231195702s ago: executing program 0 (id=1401): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6", 0x25}], 0x1}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f0000000400)="ed8f70b9cb22231ec0cfc3c1ec4612ba859b9859c645d2c66827c1dbd35d78ef8edb7cfd86496cc404030bae8d950e4a1e69988e66a6b50e88285c18c6d713f565cba6dcc506c18341503887735bfdab2816be8611b426b5562660d80194ae0f30aff9bfe3962a25f9817acc4783a79df703ac7b352ff7c661cee7639f7277d661e4bd5df68bf4413597ba47e849fff893b3d43818094500de67cb46c290575387a64d3a06bf763e6271bca507e4d9b00eb6d596bb48a307f72fbf3a28d3", 0xbe, 0x9, 0x0, 0x7}, &(0x7f0000000140)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="042c"], 0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x40) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f01f}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_hci(r5, 0x60066c87, &(0x7f0000000000)="ca5d179d9ef2971249c470d0b12b63") sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1m37.172693894s ago: executing program 34 (id=1401): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6", 0x25}], 0x1}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f0000000400)="ed8f70b9cb22231ec0cfc3c1ec4612ba859b9859c645d2c66827c1dbd35d78ef8edb7cfd86496cc404030bae8d950e4a1e69988e66a6b50e88285c18c6d713f565cba6dcc506c18341503887735bfdab2816be8611b426b5562660d80194ae0f30aff9bfe3962a25f9817acc4783a79df703ac7b352ff7c661cee7639f7277d661e4bd5df68bf4413597ba47e849fff893b3d43818094500de67cb46c290575387a64d3a06bf763e6271bca507e4d9b00eb6d596bb48a307f72fbf3a28d3", 0xbe, 0x9, 0x0, 0x7}, &(0x7f0000000140)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="042c"], 0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x40) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f01f}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_hci(r5, 0x60066c87, &(0x7f0000000000)="ca5d179d9ef2971249c470d0b12b63") sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 50.032572337s ago: executing program 6 (id=1957): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x1000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x18, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 49.582850546s ago: executing program 6 (id=1962): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090204000000fedbdf250100000008000600ac1414bb06000a004e23000004000500080008"], 0x50}}, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) r5 = dup(r4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000015000100000000000000ff00fe8800000000000000000000800000010000000000000000000000000000000000040000000000000000b10000000000", @ANYRES32, @ANYRES16=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x68}}, 0x0) (async, rerun: 32) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x1b3002, 0xc) listen(r7, 0x20000000) 49.333129746s ago: executing program 6 (id=1963): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x2, 0x2, 0xfffffff9, 0x0, 0x4}}) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0xffffffffffffffff) (async) syz_clone3(&(0x7f0000000200)={0x18001080, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb7AJ\n\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8\x1cXVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x62, 0x0, 0x0) 49.332336866s ago: executing program 6 (id=1966): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x887dab077f121382, 0x0) (async) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$getflags(r1, 0x401) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000300)=0x4, &(0x7f0000000340)=0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1d, &(0x7f0000000540)=@raw=[@call={0x85, 0x0, 0x0, 0xa3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6dc974b8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x3, 0x6, 0xa, 0x40}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, @call={0x85, 0x0, 0x0, 0x39}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000014c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '\x00'}, {0x20, '\xf8C\xca\xd3\xb5\xaa\x9b\xc5\x19\x06\xaf\xa4\"=\xda\xf2\x8c\xb1\xc7\xc7U|{rz\xca\xf6'}, {0x20, '#! '}], 0xa, "dbd1f51130c0c1bbe1f42bcc881b7a34a8884083be6e1cf9ed3d188e09222d1c0b8a32fe548a00dc3b1bc900"/53}, 0xcf) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) 49.011278878s ago: executing program 6 (id=1969): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) (async, rerun: 64) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r1}) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (rerun: 64) close_range(r2, r2, 0x2) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 49.010570128s ago: executing program 6 (id=1971): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x18000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x18, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 33.313426807s ago: executing program 35 (id=1971): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x18000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x18, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 4.013457685s ago: executing program 1 (id=2502): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000003780), 0x4) r1 = socket(0x400000000010, 0x3, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x10880) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x441}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa05, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0xb, 0x0, 0x2, 0x0, 0xd7a5}}) 3.534425696s ago: executing program 5 (id=2504): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff}) munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) munmap(&(0x7f0000f62000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000080)={0xa, 0x4}, 0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) munmap(&(0x7f0000eb0000/0x3000)=nil, 0x3000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) splice(r1, 0x0, r5, 0x0, 0x2, 0x4) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000003c0), 0x100000000000022d) 3.454167367s ago: executing program 5 (id=2505): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5819}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES32=r0]) (async) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x78, 0x0, 0xffff, {0x200000000000000, 0x40200, 0x0, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x522, 0xc000, 0x400000, 0x0, 0x0, 0x1000000, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (rerun: 32) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 3.453887529s ago: executing program 5 (id=2506): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x5a8c, @loopback, 0x6}, 0x1c) (async) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000100000200000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x4000) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000340)=""/157, 0x9d, 0x0, &(0x7f0000000500)=""/193, 0xc1}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x13, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fchdir(r0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x4}, 0x10) (async) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000040)) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000004000000000800040001000000", 0x24) fchdir(r0) 3.404274093s ago: executing program 5 (id=2507): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x33, 0x1, 0x2, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2", 0x20363159}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xc1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000100001070000000000000000"], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x8000) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7010fddbdf25050000000600010005000000080009000200000008000b00feffffff08000c00000000000c021600d999ba4400000000"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 3.344449766s ago: executing program 5 (id=2508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'lo\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xe) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x103100, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0), 0x80080, 0x0) socket(0x21, 0x1, 0x7) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000001600)) ioctl$DVD_READ_STRUCT(r3, 0x5392, &(0x7f0000000880)=@disckey={0x2, 0x1, "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"}) ioctl$CDROM_TIMED_MEDIA_CHANGE(r3, 0x5396, &(0x7f0000000040)={0xd5}) 3.241558704s ago: executing program 4 (id=2510): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}]}}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 3.114285487s ago: executing program 1 (id=2511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) move_pages(0x0, 0x9, &(0x7f0000000140)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f00800", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) 3.053725465s ago: executing program 1 (id=2512): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@subsystem='rdma'}, {}, {@favordynmods}, {@clone_children}, {@noprefix}, {@noprefix}, {@noprefix}, {@nofavordynmods}], [{@subj_type={'subj_type', 0x3d, 'syzkaller1\x00'}}, {@context={'context', 0x3d, 'root'}}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="9b39aa2cd66d"}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) umount2(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000002c0)='.\x00', 0x500, 0x104) getdents(r5, 0x0, 0x0) 1.879784619s ago: executing program 4 (id=2515): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newspdinfo={0x64, 0x24, 0x8, 0x70bd2b, 0x25dfdbff, 0x1, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0x5}}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000100)=@l={0x92, 0x3, 0xe0, 0x0, 0x0, 0x0, 0x3}) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0x8}, {0x0, 0x4}], 0x2, 0x0, 0x0) 1.879612591s ago: executing program 4 (id=2516): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) 1.879275784s ago: executing program 5 (id=2517): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, &(0x7f0000000300)={0x0, 0x24, 0x2, {0x2, 0x21}}, &(0x7f0000000180)={0x0, 0x3, 0xa3, @string={0xa3, 0x3, "752e9635e810aabf9ae01c5ca849437ffe11d00ae9dccca7b944c88b4865002265ac5b724d0421a5492a353e6eacfd60762ab069862a03714e4d890c68e52e2b5f365ed43f4f77df34af10c24452e079bdfba267f0fc5e65329061a537fa214d4c22e96c0211f8896badd47af3a6a6b754d140d4720e28152ec6368b41cd6205d7fc593ad1b233035f284dd4ff17b330331b14e587b3ca65e40a63eb94a327d549"}}, 0x0, 0x0}, 0x0) 1.744764808s ago: executing program 1 (id=2520): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x11) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '/.{'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044800}, 0x80) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.743168643s ago: executing program 1 (id=2522): clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x4, 0x0, 0x5, 0x0, 0x4, 0x800, 0x80000, 0x2, 0x2, 0x100, 0x0, 0x0, 0x2000000000000, 0x3, 0x3, 0x1, 0x4000000000200, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x37, 0x6}) 1.742199099s ago: executing program 1 (id=2523): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x515002, 0xc6) r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000000c0)={0x9, {0x2, 0xff, 0x800, 0xb}}) 1.594163128s ago: executing program 7 (id=2525): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x63, 0x63, 0x5, [@float={0xd, 0x0, 0x0, 0x10, 0x10}, @datasec={0xa, 0x6, 0x0, 0xf, 0x3, [{0x2, 0x5, 0xfffffffa}, {0x3, 0xa, 0x6}, {0x4, 0x80, 0x7fffffff}, {0x4, 0xa, 0x4}, {0x4, 0x8000, 0x8}, {0x1, 0xfd, 0x1}], "9ec55b"}]}, {0x0, [0x0, 0x61, 0x0]}}, &(0x7f0000000200)=""/165, 0x81, 0xa5, 0x1, 0x9, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x24b5, 0x1be, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r1, 0x40045431, &(0x7f0000000040)) (async) creat(&(0x7f0000000000)='./file0\x00', 0x15e) 1.483449783s ago: executing program 7 (id=2526): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000300)='./cgroup\x00', 0x0, 0x10}, 0x18) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="b70b00000000ffffffff05000000cbbc51701e09cd3bf91566bf3bdb821267c4c086be89667477d5d780e3a6bb3c23d31164ba01868a2814ec806930c1489fa66902670fc7a33ce1ec83fd7ecd3098c695051f15fd89fa7267bf632047f29c733c9ba0b64858706045d34355572617ea88f1a67e15b91ad8627987a8a0319fded4cd9a9bafefefb1f38dfb90610c03e7dad9091eccdf851d9c00f4bece160b98ada57988cc21e6d86a6177a8672a63a0091369452046ae0de4427dea93d8f267c81f30108c3f76140082e66164290f7245d4f68ac7cc2dd462ed6e0b1198278b43a07320e5d02fb6f534e8e7b07ed69d6f010a9b52ecbbd70e2ccb414a44a03c17e7"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000340)={@remote, @broadcast}, &(0x7f0000000380)=0x8) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x68, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7dd4c225}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_NEWSETELEM={0x4fac, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x13a4, 0x3, 0x0, 0x1, [{0x11c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x10d8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xd38fa5aeb0df179b}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x13, 0x1, "05db55aa064b190bb11ad2138dee7d"}, @NFTA_DATA_VALUE={0x13, 0x1, "1c528842b9da91850405adc55abee9"}]}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x24}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8}]}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}, {0x17c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY={0x98, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x2c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "236e6f6a0776c0c291153d0633abb48b99d5cbe36f5e479e1be958704bba2f4b66"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x38, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_RESULT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3bc8, 0x3, 0x0, 0x1, [{0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x198, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xad, 0x1, "450c958c348f8529532115731cfb666d2b808332e80a8d6e5bf65180441d0e6af13dd43909b101032d22194e1781c30d7c8ef801ef8d9cc532435e5e8b2172ff9227a1f51772067b6eb225d2f594aea5b6e9a0f2898eb3408eb2a17c4b6b4467ec2407214e27e882b778dd77700ac0f7eebb427f0d3ef8abf632421e17e0e8bd727d5d93dfd99d3b7accf012d20f89ab68fb465a4cd2ec401724551b535b113d4d704f17783fcc85a3"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xaa, 0x1, "07650b47f086addd890907de8bfde654d44a73a7d4eaa068a4280dfb5553f8aa1644ad1968b4cece87fbd05d9d1f601a52f128bf22507440a35b5388babb5e39db6f5452e8e18ffcade6bc1a326936ce10d26869df26f25d77c2a6cf43aa6ba13d6a4374280a91294b98700dc0ab8a9c261b2071f9d01a13abf806239529247b0c4500e37b517904d4e7372f68d89939b0451ab298ef5255d3241a62d8e9f95e890853fdeff9"}]}]}, {0x118c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x106c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "56f5915d26a56b43889dc4948e1b3f39bd9dcfa9951f9a9467a1de"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY_END={0x108, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x99, 0x1, "d0647f4f0c8eab22bc073d4cbcc368dea9eacd203a0f3e180ed80b5f70ddb6bf16271c39327b2fc80f7cdc544640a6bc2ba51b02576063a01115d33f8b6cb122eb956d06d2e3491fde11e4fccfb434303a5c25b8734f6d2cd33d0cdbbc11e4ea9ac9ac7aef04812142d175e356f4dc4e1ed4400f3c0f598a7927a0e77762dd0272c709437f98db21ffc44008c1e08e8adbf86c5b4a"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x50de4e44ca410c9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x84, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}]}}}]}]}, {0x2488, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x2460, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x44}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x235c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x234c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xffff}, @NFTA_BITWISE_MASK={0x103c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DATA={0x64, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_BITWISE_MASK={0x10ec, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x67, 0x1, "483016eb9a90634590a7f4aa78d303be50ad649e9c644e92aef0d9fc86ed9931b73aec5968ccc70a4262b871b98940fdda52b9cd89b6a5a3b9990a42bcb93aaa8054bf0450edc77b0901b81e239908baa03432c1a55c13cbc426e278d2fd4096285d17"}]}, @NFTA_BITWISE_DATA={0x198, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xba, 0x1, "089124fc9ef302d3e6468f8097a4290ca167caba4eefa8dff935df5fdac7ef93a81a7d0fa7352161c24bac38120a3003dab56625d4f032ed0ea7e093dfa3099dc3cc90b87e72a4d7e1e03cf1aefe876d7832238e534b92ef23d3df4e921b28df8d951ef96d98e3f53affd1b0dc632a4a8bf36e4227112d59d7bbd90108f28f13333fbe0959ec1b6b7fde462e111787e2de0fb0add6d54ec18223df0e92237309a4179e93c15824b1c1132abe35bb30b85fd717bacc96"}, @NFTA_DATA_VALUE={0x77, 0x1, "9144757dcacec1b0b280ea3d5d653ac5148ec08675c75cb6131535653dec0a482847d3a6c8f208b6c88a97ea6f99a544f4466b31819c63ce3bc213ff7e4666f720bf32d1f3ce6ca50873deef64aa88f83dae9b6d95141b98ae5ef4250aabe435cf135d6d72673d7dded1a7213571236deeaaba"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8}]}}}, {0x68, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_DYNSET_EXPR={0x44, 0x7, 0x0, 0x1, {{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}]}, {0x220, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x11c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa2, 0x1, "1813295ddf37c95a3e38ae5334c2f0439551799fc67f1a03bd2d617a541bc6599e19add6814316bd0d85b17dad7a88ebb2decac7e6e1198916d6806c89d333e3327594036db8db02828e47483b7930ca5b1e237013acca084db3a62565367fefd324214c4d29fd59198a7828c081abd7e7a1fb4030786d8f170a0456f972f9de7c4e2dcebf83cf4b98e29b5880aaa639c5e3f2386c353a535f9ae7cfd9c1"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x676}, @NFTA_SET_ELEM_KEY={0xe8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7fffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x164, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x154, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x98, 0x1, "67282199ab61b8b42b4e5c8f22df17e470413aa38712bbe9b0d47993ddc42440c72ea8e9120a9c9df035254a1abbceb225a3c9bb98c4b44a28dec85b43e02cfd85e76e8dcd579ad9e54a93b713fc7f23a3eabe3293f8b6ac3a23bf9db131d56967b26b8b1a92ea576ecb4b3ba73978eefcb0a4f3cbe94270d4eee71d2ed53fb38858770cb7bbd7fbfa2c701bb6406af4823b61df"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2d4, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_DESC={0x2c0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd98}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1fe}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x96}, @NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc26b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x58, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x36}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}]}, @NFTA_SET_DESC_CONCAT={0x68, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3c7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x70dd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x33c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x320, 0x3, 0x0, 0x1, [{0x31c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xa8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x26, 0x1, "2b01c364cfdea7c886dc6e2edffcd6669e1b3c456fd9ac9073573097c65eabd11354"}, @NFTA_DATA_VALUE={0x7c, 0x1, "1e18ad327d7f52cea562734a117e534fa3c47757a1917f32581e6a867ac7f2c306682c3e4fc9b6244c36c5a897184ae9fd8e9029e7a7273a771eee1c6eb2331962375359d4d3000c53a0630f1967d76311ce4272eedcb1f9ca3766351f7bc77f857e6513b45db87f1cdcc9748856b2326047bd00b7608ffa"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x30}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3c}, @NFTA_FIB_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x40, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x535a367c}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0x51, 0x6, 0x1, 0x0, "04f8f3375590d3756a0a0fad4b4d7bf4407468cb3c7a974ff9e8e6f95d2c263a1c30c61c266f7b64d5c352ad6b72228c7f97a88ced75538d6089973385404046994b6972a361d683f3e876f0b1"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x401}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1c, 0x1, "2f33805b071d0e61d2bc586115ad8b93252a5d003ee5b6fe"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x49, 0x1, "d7085f23318a45d334753530c4b735b628b53049da9372b4f998ccc78b678a1f517747da3213ab0b4d0ba4a8404a4eee890b0521e3b7ab2ec9ab6c61779c719b2ce681f11b"}, @NFTA_DATA_VALUE={0x56, 0x1, "f4e91ad7c05a836aa2142f7dc5697f05dd62404412ab27c553c87bb988d7a2c71701932cdaab7808c192396637edceb37987ca040c04a2bfd8b61213673d455166f1c471d509f66be6812e1a3a7a206df177"}, @NFTA_DATA_VALUE={0x36, 0x1, "ece420e54423e2d65813f2e2921fc94f4999cb601e3ca471121b4c66d9f4e02d4a936e522ddc9a3cdddf7ac13ff0ddaa7add"}]}]}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x44, 0x12, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x30, 0x4, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_FLAGS={0x8}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x57b4}, 0x1, 0x0, 0x0, 0x4000}, 0x2000000) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f00000003c0)={0x0, 0x0, 0x103, 0x4, {0xd5, 0x0, 0x6, 0x5}}) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000280)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "c378423352e79c242fb9e364d40c4a00c1a3d10aaf30dfed5a2873c0d03323f6", "d46888c7cb5ad595e9b51cdc3b7d0d1676ff0aaa7e6440956d5914c316e77135", "85cb01bed4e5ad08d984fc6e6c19e75b11e40c9faa3eb827a355ba5de2eadce7", "50725da5596b91c4fc2902fd64118c77a37faa6f5159598d4b578e058943bfe4", "43d5dd774a4a53440ef61e80d1ced8a59e8f913fcd427cecd141bfffd57c4c9c", "b022bd843156fbfb84f4e2d4", 0x7, 0x7, 0xe, 0x2, 0xffff7fff}}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000040)={0xfffffffffffffeff, r4}) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 278.967125ms ago: executing program 7 (id=2527): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) io_setup(0xa, &(0x7f0000000240)) io_setup(0x2, &(0x7f0000000100)=0x0) pipe2(&(0x7f0000000040), 0x0) r2 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x7b9c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '\x00'}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r7, 0x40047452, &(0x7f0000000000)=0xfffffff7) io_getevents(r1, 0x1, 0x0, &(0x7f0000000340), &(0x7f0000000000)={0x77359400}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f000093c000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000fe5000/0x4000)=nil, 0x4000}}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000140)={0xc}) 216.915856ms ago: executing program 4 (id=2528): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) rt_sigreturn() sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c00044000000000000000090c0005"], 0xe8}}, 0x44810) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) umount2(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000002c0)='.\x00', 0x500, 0x104) getdents(r5, 0x0, 0x0) 206.293801ms ago: executing program 4 (id=2529): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) 121.639398ms ago: executing program 7 (id=2530): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) fcntl$setown(0xffffffffffffffff, 0x8, r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000500, r3, &(0x7f0000000140)) r4 = accept$netrom(r2, &(0x7f0000000180)={{0x3, @null}, [@bcast, @rose, @default, @remote, @rose, @bcast, @rose]}, &(0x7f0000000200)=0x48) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000240)=0x2, &(0x7f0000000280)=0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x800, 0x1d7, 0xf6, 0x7, 0xffffff81}, &(0x7f0000000300)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000340)={r6, 0x4}, 0x8) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r7, 0x0, 0xcf, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000400)=r6, 0x4) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000440)={0x2, 0x2, 0x4, 0xe000, 0xfff, {0x77359400}, {0x3, 0xc, 0x8, 0xb3, 0x9, 0x4, "d479ff23"}, 0x42a, 0x4, {0xffffffffffffffff}, 0x10001}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000004c0)={0x1, 0x9, 0x4, 0x400, 0x5b, {}, {0x4, 0x8, 0x1, 0x2, 0x10, 0x81, "0a61197f"}, 0x88, 0x4, {0xffffffffffffffff}, 0x9}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f00000005c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000600)=@multiplanar_fd={0x2, 0x2, 0x4, 0xe000, 0x86b, {0x0, 0x2710}, {0x6, 0x1, 0x3, 0xe, 0x0, 0x80, "ca4dd20b"}, 0x9, 0x4, {&(0x7f0000000540)=[{0x4, 0x60e, {r9}, 0x3}, {0xd84d, 0xffff, {r10}, 0x2}]}, 0xf, 0x0, r11}) r13 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680), 0x200000, 0x0) r14 = openat$fb1(0xffffffffffffff9c, &(0x7f00000006c0), 0x30d182, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r13, 0x6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)=[r9, r5, r14]}, 0x3) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000780)) r15 = syz_open_dev$sndmidi(&(0x7f00000007c0), 0x8, 0x28882) r16 = socket$nl_audit(0x10, 0x3, 0x9) poll(&(0x7f0000000800)=[{r12}, {r12, 0x180}, {r9, 0x50}, {r15, 0x21}, {r16}], 0x5, 0x1) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f0000000840), 0x4) syz_emit_ethernet(0x32, &(0x7f0000000880)={@random="da6d6bcc25f6", @random="8070918908e1", @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x1, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="7eeb82a3e98f", @empty, @local, @multicast1}}}}, 0x0) syz_open_dev$video4linux(&(0x7f00000008c0), 0x1, 0x8000) 121.069493ms ago: executing program 4 (id=2531): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x4d0, 0xf0, 0x310, 0xffffffff, 0x220, 0xf0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffff00]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, @ipv4=@dev={0xac, 0x14, 0x14, 0x3e}, @gre_key=0x7, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x9}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) read(r2, &(0x7f00000001c0)=""/36, 0x24) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x633fb000) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0xf1, 0x9c}}]}}]}}, 0x0) 120.788859ms ago: executing program 7 (id=2532): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="180100001f00010000000000000000000601008014000300fc010000000000000000000000000000140001"], 0x118}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x2}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x1a0, 0xd0, 0x3d0, 0xd0, 0x300, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x2, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0={0xfc, 0x0, '\x00', 0xfc}, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x1, 0xfffffffe}, 0x1c}}, 0x0) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r3, 0xa, 0x1, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r11 = dup3(r1, r2, 0x80000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r8, r9, 0x22, 0x0, @val=@tcx={@void, @value=r11, @void, @void, r10}}, 0x1c) 0s ago: executing program 7 (id=2533): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) sendmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000e00)="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", 0x647}], 0x1}}], 0x1, 0x84004) kernel console output (not intermixed with test programs): ser+0x2e/0xd0 [ 217.271893][T12915] binder_get_object+0xdd/0x290 [ 217.271912][T12915] binder_transaction+0x1e6b/0x9d10 [ 217.271948][T12915] ? __pfx_binder_transaction+0x10/0x10 [ 217.271970][T12915] ? find_held_lock+0x2b/0x80 [ 217.271985][T12915] ? __lock_acquire+0xb8a/0x1c90 [ 217.272006][T12915] ? find_held_lock+0x2b/0x80 [ 217.272016][T12915] ? __might_fault+0xe3/0x190 [ 217.272029][T12915] ? __might_fault+0xe3/0x190 [ 217.272045][T12915] binder_thread_write+0xaae/0x4df0 [ 217.272068][T12915] ? __pfx_binder_thread_write+0x10/0x10 [ 217.272085][T12915] ? binder_debug+0xde/0x1a0 [ 217.272101][T12915] ? binder_debug+0xde/0x1a0 [ 217.272114][T12915] ? __pfx_binder_debug+0x10/0x10 [ 217.272128][T12915] ? find_held_lock+0x2b/0x80 [ 217.272146][T12915] binder_ioctl+0x26a7/0x7300 [ 217.272167][T12915] ? tomoyo_path_number_perm+0x18d/0x580 [ 217.272185][T12915] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.272205][T12915] ? __pfx_binder_ioctl+0x10/0x10 [ 217.272221][T12915] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 217.272242][T12915] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 217.272259][T12915] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 217.272277][T12915] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 217.272297][T12915] ? hook_file_ioctl_common+0x145/0x410 [ 217.272312][T12915] ? selinux_file_ioctl+0x180/0x270 [ 217.272326][T12915] ? selinux_file_ioctl+0xb4/0x270 [ 217.272343][T12915] ? __pfx_binder_ioctl+0x10/0x10 [ 217.272359][T12915] __x64_sys_ioctl+0x18b/0x210 [ 217.272377][T12915] do_syscall_64+0xcd/0x4c0 [ 217.272392][T12915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.272403][T12915] RIP: 0033:0x7f315438e969 [ 217.272412][T12915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.272422][T12915] RSP: 002b:00007f31521d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.272433][T12915] RAX: ffffffffffffffda RBX: 00007f31545b6080 RCX: 00007f315438e969 [ 217.272440][T12915] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 217.272446][T12915] RBP: 00007f31521d5090 R08: 0000000000000000 R09: 0000000000000000 [ 217.272452][T12915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.272458][T12915] R13: 0000000000000000 R14: 00007f31545b6080 R15: 00007fffb3e1f598 [ 217.272472][T12915] [ 217.366340][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.368543][ C1] hpet: Lost 5 RTC interrupts [ 217.592327][ T5975] appleir 0003:05AC:8243.0020: unknown main item tag 0x0 [ 217.595496][ T5975] appleir 0003:05AC:8243.0020: No inputs registered, leaving [ 217.602912][ T5975] appleir 0003:05AC:8243.0020: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 217.658152][ T40] audit: type=1400 audit(1748540342.934:1073): avc: denied { read } for pid=12920 comm="syz.4.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 217.702578][T12924] bridge3: entered promiscuous mode [ 217.737165][T12926] overlayfs: missing 'workdir' [ 218.065907][T12942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2058'. [ 218.518088][T12945] binder: 12943:12945 ioctl c0306201 2000000003c0 returned -14 [ 218.522764][T12945] FAULT_INJECTION: forcing a failure. [ 218.522764][T12945] name failslab, interval 1, probability 0, space 0, times 0 [ 218.527877][T12945] CPU: 0 UID: 0 PID: 12945 Comm: syz.5.2059 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 218.527901][T12945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 218.527912][T12945] Call Trace: [ 218.527918][T12945] [ 218.527925][T12945] dump_stack_lvl+0x16c/0x1f0 [ 218.527949][T12945] should_fail_ex+0x512/0x640 [ 218.527974][T12945] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 218.527996][T12945] should_failslab+0xc2/0x120 [ 218.528018][T12945] __kmalloc_cache_noprof+0x6a/0x3e0 [ 218.528035][T12945] ? binder_add_fixup+0x54/0x4b0 [ 218.528063][T12945] binder_add_fixup+0x54/0x4b0 [ 218.528082][T12945] ? binder_get_object+0x1b0/0x290 [ 218.528106][T12945] binder_transaction+0x2033/0x9d10 [ 218.528159][T12945] ? __pfx_binder_transaction+0x10/0x10 [ 218.528197][T12945] ? find_held_lock+0x2b/0x80 [ 218.528218][T12945] ? __lock_acquire+0xb8a/0x1c90 [ 218.528251][T12945] ? find_held_lock+0x2b/0x80 [ 218.528266][T12945] ? __might_fault+0xe3/0x190 [ 218.528285][T12945] ? __might_fault+0xe3/0x190 [ 218.528316][T12945] binder_thread_write+0xaae/0x4df0 [ 218.528351][T12945] ? __pfx_binder_thread_write+0x10/0x10 [ 218.528376][T12945] ? binder_debug+0xde/0x1a0 [ 218.528399][T12945] ? binder_debug+0xde/0x1a0 [ 218.528418][T12945] ? __pfx_binder_debug+0x10/0x10 [ 218.528442][T12945] ? find_held_lock+0x2b/0x80 [ 218.528473][T12945] binder_ioctl+0x26a7/0x7300 [ 218.528507][T12945] ? tomoyo_path_number_perm+0x18d/0x580 [ 218.528530][T12945] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.528559][T12945] ? __pfx_binder_ioctl+0x10/0x10 [ 218.528583][T12945] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 218.528617][T12945] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 218.528642][T12945] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 218.528666][T12945] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 218.528696][T12945] ? hook_file_ioctl_common+0x145/0x410 [ 218.528718][T12945] ? selinux_file_ioctl+0x180/0x270 [ 218.528741][T12945] ? selinux_file_ioctl+0xb4/0x270 [ 218.528769][T12945] ? __pfx_binder_ioctl+0x10/0x10 [ 218.528794][T12945] __x64_sys_ioctl+0x18b/0x210 [ 218.528819][T12945] do_syscall_64+0xcd/0x4c0 [ 218.528841][T12945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.528857][T12945] RIP: 0033:0x7f7106b8e969 [ 218.528870][T12945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.528886][T12945] RSP: 002b:00007f7107930038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.528904][T12945] RAX: ffffffffffffffda RBX: 00007f7106db6080 RCX: 00007f7106b8e969 [ 218.528916][T12945] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 218.528927][T12945] RBP: 00007f7107930090 R08: 0000000000000000 R09: 0000000000000000 [ 218.528937][T12945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 218.528946][T12945] R13: 0000000000000000 R14: 00007f7106db6080 R15: 00007fff141b18f8 [ 218.528970][T12945] [ 218.778186][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2061'. [ 218.781357][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2061'. [ 218.784427][T12950] netlink: 'syz.5.2061': attribute type 3 has an invalid length. [ 218.815704][T12952] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 219.016144][T12966] binder: 12963:12966 ioctl c0046686 2000000004c0 returned -22 [ 219.359589][T12968] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 219.531591][T12975] binder: 12970:12975 ioctl c0306201 2000000003c0 returned -14 [ 219.534867][T12975] FAULT_INJECTION: forcing a failure. [ 219.534867][T12975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.538956][T12975] CPU: 1 UID: 0 PID: 12975 Comm: syz.1.2069 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 219.538971][T12975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.538977][T12975] Call Trace: [ 219.538981][T12975] [ 219.538986][T12975] dump_stack_lvl+0x16c/0x1f0 [ 219.539003][T12975] should_fail_ex+0x512/0x640 [ 219.539021][T12975] _copy_from_user+0x2e/0xd0 [ 219.539039][T12975] binder_transaction+0x211b/0x9d10 [ 219.539071][T12975] ? __pfx_binder_transaction+0x10/0x10 [ 219.539092][T12975] ? find_held_lock+0x2b/0x80 [ 219.539106][T12975] ? __lock_acquire+0xb8a/0x1c90 [ 219.539128][T12975] ? find_held_lock+0x2b/0x80 [ 219.539138][T12975] ? __might_fault+0xe3/0x190 [ 219.539150][T12975] ? __might_fault+0xe3/0x190 [ 219.539167][T12975] binder_thread_write+0xaae/0x4df0 [ 219.539190][T12975] ? __pfx_binder_thread_write+0x10/0x10 [ 219.539207][T12975] ? binder_debug+0xde/0x1a0 [ 219.539222][T12975] ? binder_debug+0xde/0x1a0 [ 219.539240][T12975] ? __pfx_binder_debug+0x10/0x10 [ 219.539254][T12975] ? find_held_lock+0x2b/0x80 [ 219.539271][T12975] binder_ioctl+0x26a7/0x7300 [ 219.539293][T12975] ? tomoyo_path_number_perm+0x18d/0x580 [ 219.539309][T12975] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 219.539329][T12975] ? __pfx_binder_ioctl+0x10/0x10 [ 219.539345][T12975] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 219.539365][T12975] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 219.539394][T12975] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 219.539412][T12975] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 219.539433][T12975] ? hook_file_ioctl_common+0x145/0x410 [ 219.539448][T12975] ? selinux_file_ioctl+0x180/0x270 [ 219.539462][T12975] ? selinux_file_ioctl+0xb4/0x270 [ 219.539478][T12975] ? __pfx_binder_ioctl+0x10/0x10 [ 219.539495][T12975] __x64_sys_ioctl+0x18b/0x210 [ 219.539512][T12975] do_syscall_64+0xcd/0x4c0 [ 219.539527][T12975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.539538][T12975] RIP: 0033:0x7f248fd8e969 [ 219.539547][T12975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.539557][T12975] RSP: 002b:00007f2490c0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.539568][T12975] RAX: ffffffffffffffda RBX: 00007f248ffb6080 RCX: 00007f248fd8e969 [ 219.539575][T12975] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 219.539581][T12975] RBP: 00007f2490c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 219.539588][T12975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.539594][T12975] R13: 0000000000000000 R14: 00007f248ffb6080 R15: 00007ffdeb021ab8 [ 219.539607][T12975] [ 219.629104][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.631281][ C1] hpet: Lost 4 RTC interrupts [ 219.717037][ T60] usb 6-1: USB disconnect, device number 37 [ 219.822117][T12982] netlink: 'syz.4.2071': attribute type 21 has an invalid length. [ 219.824678][T12982] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2071'. [ 219.893770][T12985] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 220.087560][ T40] audit: type=1400 audit(1748540345.364:1074): avc: denied { ioctl } for pid=12986 comm="syz.4.2073" path="/dev/cpu/2/msr" dev="devtmpfs" ino=91 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 220.195094][T12998] binder: BINDER_SET_CONTEXT_MGR already set [ 220.197059][T12998] binder: 12996:12998 ioctl 4018620d 200000000040 returned -16 [ 220.511097][ T5975] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 220.662418][ T5975] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 220.665863][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.669622][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.673090][ T5975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 220.677949][ T5975] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 220.681047][ T5975] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 220.683567][ T5975] usb 6-1: Manufacturer: syz [ 220.691236][ T5975] usb 6-1: config 0 descriptor?? [ 220.959631][T13019] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 221.005383][T13021] xt_policy: output policy not valid in PREROUTING and INPUT [ 221.103659][ T5975] appleir 0003:05AC:8243.0021: unknown main item tag 0x0 [ 221.106308][ T5975] appleir 0003:05AC:8243.0021: No inputs registered, leaving [ 221.123080][ T5975] appleir 0003:05AC:8243.0021: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 221.141888][T13028] binder: BINDER_SET_CONTEXT_MGR already set [ 221.143806][T13028] binder: 13024:13028 ioctl 4018620d 200000000040 returned -16 [ 221.146327][T13028] binder: 13024:13028 ioctl c0306201 2000000003c0 returned -14 [ 221.398646][T13037] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 221.400570][T13037] PKCS7: Only support pkcs7_signedData type [ 221.691819][ T60] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 221.854216][ T60] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 221.857076][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.859577][ T60] usb 9-1: Product: syz [ 221.861959][ T60] usb 9-1: Manufacturer: syz [ 221.863429][ T60] usb 9-1: SerialNumber: syz [ 221.869805][ T60] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 221.884477][ T5883] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 222.094852][T13037] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2087'. [ 222.098487][T13037] binder: 13036:13037 ioctl c0306201 2000000003c0 returned -22 [ 222.103187][ T5975] usb 9-1: USB disconnect, device number 19 [ 222.308515][ T5940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.313045][ T5940] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.317609][ T5940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.322590][ T5940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.326018][ T5940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.347936][T13045] lo speed is unknown, defaulting to 1000 [ 222.432637][T13045] chnl_net:caif_netlink_parms(): no params data found [ 222.441588][ T838] usb 10-1: new low-speed USB device number 18 using dummy_hcd [ 222.509446][T13045] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.511832][T13045] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.514306][T13045] bridge_slave_0: entered allmulticast mode [ 222.516991][T13045] bridge_slave_0: entered promiscuous mode [ 222.521398][T13045] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.523671][T13045] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.526146][T13045] bridge_slave_1: entered allmulticast mode [ 222.528767][T13045] bridge_slave_1: entered promiscuous mode [ 222.583485][ T1143] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.586905][ T1143] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.592392][ T838] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.596353][ T838] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 222.599287][ T838] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 222.601145][T13045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.602812][ T838] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.607557][T13045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.608534][ T838] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 222.615082][ T838] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.623230][ T838] hub 10-1:1.0: bad descriptor, ignoring hub [ 222.625157][ T838] hub 10-1:1.0: probe with driver hub failed with error -5 [ 222.627810][ T838] cdc_wdm 10-1:1.0: skipping garbage [ 222.629534][ T838] cdc_wdm 10-1:1.0: skipping garbage [ 222.634261][ T838] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device [ 222.636262][ T838] cdc_wdm 10-1:1.0: Unknown control protocol [ 222.668868][T13055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2090'. [ 222.682272][ T1143] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.685396][ T1143] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.697158][T13045] team0: Port device team_slave_0 added [ 222.700901][T13045] team0: Port device team_slave_1 added [ 222.732169][T13045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.734381][T13045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.742518][T13045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.746799][T13045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.748983][T13045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.756965][T13045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.771310][ T1143] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.774670][ T1143] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.818244][T13045] hsr_slave_0: entered promiscuous mode [ 222.820486][T13045] hsr_slave_1: entered promiscuous mode [ 222.822926][T13045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.825279][T13045] Cannot create hsr debugfs directory [ 222.839208][ T1143] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.842655][ T1143] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.891064][ T5883] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 222.894574][ T5883] ath9k_htc: Failed to initialize the device [ 222.897451][ T5975] usb 9-1: ath9k_htc: USB layer deinitialized [ 222.918565][T13062] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 222.941152][ T10] usb 10-1: USB disconnect, device number 18 [ 222.984728][T13045] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 222.992452][T13045] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 222.998406][T13045] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 223.014954][T13045] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 223.036437][T13045] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.038673][T13045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.041494][T13045] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.043751][T13045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.069503][T13076] batadv_slave_1: entered promiscuous mode [ 223.076694][T13076] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 223.087685][ T1143] bridge_slave_1: left promiscuous mode [ 223.090683][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.095051][ T1143] bridge_slave_0: left allmulticast mode [ 223.096841][ T1143] bridge_slave_0: left promiscuous mode [ 223.099135][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.117070][T13079] binder: BINDER_SET_CONTEXT_MGR already set [ 223.119028][T13079] binder: 13077:13079 ioctl 4018620d 200000000040 returned -16 [ 223.201286][ T6578] usb 6-1: USB disconnect, device number 38 [ 223.443243][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.448141][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.452576][ T1143] bond0 (unregistering): Released all slaves [ 223.463532][T13075] batadv_slave_1: left promiscuous mode [ 223.469740][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.475245][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.503016][T13090] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 223.514272][T13085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13085 comm=syz.4.2100 [ 223.546663][T13045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.575462][T13045] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.628739][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.631097][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.635931][ T40] audit: type=1400 audit(1748540348.914:1075): avc: denied { remount } for pid=13098 comm="syz.4.2104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 223.636608][T13099] 9pnet_fd: Insufficient options for proto=fd [ 223.644340][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.644443][ T40] audit: type=1400 audit(1748540348.914:1076): avc: denied { mounton } for pid=13098 comm="syz.4.2104" path="/286/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 223.646063][T13099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2104'. [ 223.646574][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.714140][T13104] netlink: 'syz.4.2104': attribute type 1 has an invalid length. [ 223.716672][T13104] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2104'. [ 223.721158][ T40] audit: type=1400 audit(1748540349.004:1077): avc: denied { getopt } for pid=13098 comm="syz.4.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 223.750732][ T6578] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 223.780013][ T1143] hsr_slave_0: left promiscuous mode [ 223.782980][ T1143] hsr_slave_1: left promiscuous mode [ 223.785065][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.787404][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.821152][ T1143] veth1_macvtap: left promiscuous mode [ 223.823366][ T1143] veth0_macvtap: left promiscuous mode [ 223.825173][ T1143] veth1_vlan: left promiscuous mode [ 223.827016][ T1143] veth0_vlan: left promiscuous mode [ 223.935597][ T6578] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 223.938960][ T6578] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.943373][ T6578] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.946425][ T6578] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 223.953796][ T6578] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 223.956667][ T6578] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 223.959188][ T6578] usb 10-1: Manufacturer: syz [ 223.966777][ T6578] usb 10-1: config 0 descriptor?? [ 224.376863][ T6578] appleir 0003:05AC:8243.0022: unknown main item tag 0x0 [ 224.382381][ T6578] appleir 0003:05AC:8243.0022: No inputs registered, leaving [ 224.396238][ T6578] appleir 0003:05AC:8243.0022: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 224.410891][ T5938] Bluetooth: hci0: command tx timeout [ 224.696336][T13122] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 224.724202][T13125] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 224.814408][T13129] binder: 13126:13129 ioctl c0306201 2000000003c0 returned -14 [ 224.899834][ T5979] usb 10-1: USB disconnect, device number 19 [ 225.106114][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2109'. [ 225.108063][T13045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.124817][T13133] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 225.179183][ T40] audit: type=1400 audit(1748540350.454:1078): avc: denied { getopt } for pid=13138 comm="syz.1.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 225.269693][T13152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.281829][T13045] veth0_vlan: entered promiscuous mode [ 225.287702][T13045] veth1_vlan: entered promiscuous mode [ 225.320302][T13045] veth0_macvtap: entered promiscuous mode [ 225.329066][T13045] veth1_macvtap: entered promiscuous mode [ 225.339613][T13045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.349103][T13045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.354724][T13045] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.357920][T13045] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.361374][T13045] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.364110][T13045] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.456148][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.459442][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.481239][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.484660][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.512694][ T40] audit: type=1400 audit(1748540350.794:1079): avc: denied { lock } for pid=13156 comm="syz.4.2115" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 225.526860][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2115'. [ 225.543922][T13170] binder: 13168:13170 ioctl c0306201 2000000003c0 returned -14 [ 225.713552][T13186] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 225.718019][T13186] FAULT_INJECTION: forcing a failure. [ 225.718019][T13186] name failslab, interval 1, probability 0, space 0, times 0 [ 225.723028][T13186] CPU: 1 UID: 0 PID: 13186 Comm: syz.7.2118 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 225.723043][T13186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 225.723051][T13186] Call Trace: [ 225.723055][T13186] [ 225.723059][T13186] dump_stack_lvl+0x16c/0x1f0 [ 225.723078][T13186] should_fail_ex+0x512/0x640 [ 225.723094][T13186] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 225.723107][T13186] should_failslab+0xc2/0x120 [ 225.723127][T13186] __kmalloc_cache_noprof+0x6a/0x3e0 [ 225.723137][T13186] ? __pfx___might_resched+0x10/0x10 [ 225.723150][T13186] ? __pfx___might_resched+0x10/0x10 [ 225.723162][T13186] ? ovl_iterate+0x7bb/0xe40 [ 225.723178][T13186] ovl_iterate+0x7bb/0xe40 [ 225.723190][T13186] ? __pfx_down_write+0x10/0x10 [ 225.723206][T13186] ? __pfx_down_read_killable+0x10/0x10 [ 225.723223][T13186] ? __pfx_ovl_iterate+0x10/0x10 [ 225.723235][T13186] wrap_directory_iterator+0x9f/0xe0 [ 225.723254][T13186] iterate_dir+0x296/0xb40 [ 225.723266][T13186] __x64_sys_getdents+0x13c/0x2b0 [ 225.723277][T13186] ? __pfx___x64_sys_getdents+0x10/0x10 [ 225.723286][T13186] ? fput+0x70/0xf0 [ 225.723300][T13186] ? __pfx_filldir+0x10/0x10 [ 225.723314][T13186] do_syscall_64+0xcd/0x4c0 [ 225.723329][T13186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.723341][T13186] RIP: 0033:0x7f3cf518e969 [ 225.723349][T13186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.723360][T13186] RSP: 002b:00007f3cf6016038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 225.723371][T13186] RAX: ffffffffffffffda RBX: 00007f3cf53b5fa0 RCX: 00007f3cf518e969 [ 225.723378][T13186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 225.723384][T13186] RBP: 00007f3cf6016090 R08: 0000000000000000 R09: 0000000000000000 [ 225.723390][T13186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.723396][T13186] R13: 0000000000000000 R14: 00007f3cf53b5fa0 R15: 00007ffda25b4fa8 [ 225.723410][T13186] [ 225.793755][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.795909][ C1] hpet: Lost 3 RTC interrupts [ 225.859178][T13199] overlay: Bad value for 'workdir' [ 225.871305][T13202] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 225.874438][T13204] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 226.150592][ T6578] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 226.170668][ T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 226.210727][ T5975] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 226.300339][T13236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32016 sclass=netlink_route_socket pid=13236 comm=syz.4.2127 [ 226.311869][ T6578] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 226.315260][ T6578] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.318675][ T6578] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.323770][ T6578] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 226.328563][ T6578] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 226.330665][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 226.333422][ T6578] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 226.335525][ T10] usb 6-1: too many endpoints for config 1 interface 0 altsetting 7: 108, using maximum allowed: 30 [ 226.335973][ T6578] usb 10-1: Manufacturer: syz [ 226.342746][ T6578] usb 10-1: config 0 descriptor?? [ 226.350659][ T10] usb 6-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 108 [ 226.354690][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 226.358533][ T10] usb 6-1: New USB device found, idVendor=0306, idProduct=ff3f, bcdDevice= 0.40 [ 226.360676][ T5975] usb 12-1: Using ep0 maxpacket: 8 [ 226.364418][ T5975] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.367711][ T5975] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 226.369871][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.370861][ T5975] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 226.370877][ T5975] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 226.370898][ T5975] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 226.370909][ T5975] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.374422][ T5975] hub 12-1:1.0: bad descriptor, ignoring hub [ 226.377443][ T10] usb 6-1: Product: ⊠[ 226.377454][ T10] usb 6-1: Manufacturer: ê°î»šä‹©æ²–ﮠꑸ婋ꠛ꽮︀㩦嵣䃪俲욡⫚⛘孇霛湿꤅ဉ厴ᰬ唥ڹ佖䧆ç¬ã¼©ê†¸ï°®Çšéƒ“⵺煆î·é ›éŸ¨ëš‡æ†œï€‘뇛ẞ㬒ç¡ï·‚ç˜ã™ºç–ªã¹µØ©ì‚·í’€ç’“䮼敔঱基쎶褕踇桙䰒唰ᠤä°çº–ꀥ昛抮ព㓓ë†è³â¡ªê•¡å™¬íœï»ë·˜æ‡«ê¡ æ©¯à¹•ä²€ê¬ªí™¥ë‡“彂툀갆뜖ㄎ㟃喥瓗뭩㔠㟥朷癉瞖냧켄슄뺮쩎 [ 226.381233][ T5975] hub 12-1:1.0: probe with driver hub failed with error -5 [ 226.385340][ T10] usb 6-1: SerialNumber: ÑŒ [ 226.387033][ T5975] cdc_wdm 12-1:1.0: skipping garbage [ 226.406301][ T5975] cdc_wdm 12-1:1.0: skipping garbage [ 226.408858][ T5975] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 226.410909][ T5975] cdc_wdm 12-1:1.0: Unknown control protocol [ 226.490504][ T5938] Bluetooth: hci0: command tx timeout [ 226.601244][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 226.603260][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 226.607793][ T10] usb 6-1: USB disconnect, device number 39 [ 226.752645][ T6578] appleir 0003:05AC:8243.0023: unknown main item tag 0x0 [ 226.755544][ T6578] appleir 0003:05AC:8243.0023: No inputs registered, leaving [ 227.060558][T13248] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 227.064912][T13248] FAULT_INJECTION: forcing a failure. [ 227.064912][T13248] name failslab, interval 1, probability 0, space 0, times 0 [ 227.068759][T13248] CPU: 3 UID: 0 PID: 13248 Comm: syz.4.2128 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 227.068774][T13248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 227.068781][T13248] Call Trace: [ 227.068785][T13248] [ 227.068789][T13248] dump_stack_lvl+0x16c/0x1f0 [ 227.068806][T13248] should_fail_ex+0x512/0x640 [ 227.068823][T13248] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 227.068837][T13248] should_failslab+0xc2/0x120 [ 227.068851][T13248] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 227.068862][T13248] ? make_vfsuid+0xec/0x140 [ 227.068878][T13248] ? alloc_empty_file+0x55/0x1e0 [ 227.068895][T13248] alloc_empty_file+0x55/0x1e0 [ 227.068911][T13248] dentry_open+0x46/0xd0 [ 227.068925][T13248] ovl_path_open+0x198/0x1f0 [ 227.068944][T13248] ovl_dir_read_merged+0x175/0x5c0 [ 227.068958][T13248] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 227.068973][T13248] ? __pfx_ovl_fill_merge+0x10/0x10 [ 227.068994][T13248] ovl_iterate+0x86c/0xe40 [ 227.069007][T13248] ? __pfx_down_read_killable+0x10/0x10 [ 227.069025][T13248] ? __pfx_ovl_iterate+0x10/0x10 [ 227.069037][T13248] wrap_directory_iterator+0x9f/0xe0 [ 227.069056][T13248] iterate_dir+0x296/0xb40 [ 227.069068][T13248] __x64_sys_getdents+0x13c/0x2b0 [ 227.069078][T13248] ? __pfx___x64_sys_getdents+0x10/0x10 [ 227.069088][T13248] ? fput+0x70/0xf0 [ 227.069100][T13248] ? __pfx_filldir+0x10/0x10 [ 227.069115][T13248] do_syscall_64+0xcd/0x4c0 [ 227.069130][T13248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.069142][T13248] RIP: 0033:0x7f315438e969 [ 227.069151][T13248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.069161][T13248] RSP: 002b:00007f31521f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 227.069172][T13248] RAX: ffffffffffffffda RBX: 00007f31545b5fa0 RCX: 00007f315438e969 [ 227.069178][T13248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 227.069185][T13248] RBP: 00007f31521f6090 R08: 0000000000000000 R09: 0000000000000000 [ 227.069191][T13248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.069197][T13248] R13: 0000000000000000 R14: 00007f31545b5fa0 R15: 00007fffb3e1f598 [ 227.069211][T13248] [ 227.176018][T13253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2130'. [ 227.206050][ T40] audit: type=1400 audit(1748540352.484:1080): avc: denied { write } for pid=13254 comm="syz.4.2131" name="/" dev="configfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 227.292712][T13216] usb 12-1: reset high-speed USB device number 2 using dummy_hcd [ 227.297042][T13216] usb 12-1: device reset changed ep0 maxpacket size! [ 227.299582][T13216] cdc_wdm 12-1:1.0: Error autopm - -16 [ 227.299682][ T1338] usb 12-1: USB disconnect, device number 2 [ 227.304681][ T6578] appleir 0003:05AC:8243.0023: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 227.440558][ T1338] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 227.489682][ T40] audit: type=1400 audit(1748540352.764:1081): avc: denied { unmount } for pid=10018 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 227.512504][T13262] netlink: 'syz.4.2132': attribute type 30 has an invalid length. [ 227.600589][ T1338] usb 12-1: Using ep0 maxpacket: 16 [ 227.605706][ T1338] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 227.608672][ T1338] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.611436][ T1338] usb 12-1: Product: syz [ 227.612785][ T1338] usb 12-1: Manufacturer: syz [ 227.614286][ T1338] usb 12-1: SerialNumber: syz [ 227.617481][ T1338] usb 12-1: config 0 descriptor?? [ 227.631919][T13261] /dev/sr0: Can't open blockdev [ 227.711021][T13261] /dev/sr0: Can't open blockdev [ 227.821203][T13261] /dev/sr0: Can't open blockdev [ 227.821856][ T1338] usb 12-1: USB disconnect, device number 3 [ 227.900966][T13261] /dev/sr0: Can't open blockdev [ 228.041701][T13261] /dev/sr0: Can't open blockdev [ 228.118223][T13272] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.171381][T13261] /dev/sr0: Can't open blockdev [ 228.184112][T13274] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.271248][T13261] /dev/sr0: Can't open blockdev [ 228.284834][T13276] team0: Port device bond0 removed [ 228.287404][T13276] bridge_slave_0: left allmulticast mode [ 228.289264][T13276] bridge_slave_0: left promiscuous mode [ 228.291411][T13276] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.294863][T13276] bridge_slave_1: left allmulticast mode [ 228.296708][T13276] bridge_slave_1: left promiscuous mode [ 228.298592][T13276] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.304596][T13276] bond0: (slave bond_slave_0): Releasing backup interface [ 228.308033][T13276] bond0: (slave bond_slave_1): Releasing backup interface [ 228.316159][T13276] team0: Port device team_slave_0 removed [ 228.319090][T13276] team0: Port device team_slave_1 removed [ 228.321978][T13276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.325289][T13276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.328986][T13276] bond0: (slave wlan1): Releasing backup interface [ 228.339862][T13276] bond3: (slave ip6gretap1): Releasing backup interface [ 228.351608][T13261] /dev/sr0: Can't open blockdev [ 228.356070][T13278] team0: Mode changed to "loadbalance" [ 228.409342][T13293] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.417361][T13293] FAULT_INJECTION: forcing a failure. [ 228.417361][T13293] name failslab, interval 1, probability 0, space 0, times 0 [ 228.422227][T13293] CPU: 3 UID: 0 PID: 13293 Comm: syz.7.2140 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 228.422243][T13293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.422249][T13293] Call Trace: [ 228.422253][T13293] [ 228.422257][T13293] dump_stack_lvl+0x16c/0x1f0 [ 228.422275][T13293] should_fail_ex+0x512/0x640 [ 228.422291][T13293] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 228.422305][T13293] should_failslab+0xc2/0x120 [ 228.422319][T13293] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 228.422331][T13293] ? security_file_alloc+0x34/0x2b0 [ 228.422350][T13293] security_file_alloc+0x34/0x2b0 [ 228.422367][T13293] init_file+0x93/0x4c0 [ 228.422382][T13293] alloc_empty_file+0x73/0x1e0 [ 228.422398][T13293] dentry_open+0x46/0xd0 [ 228.422412][T13293] ovl_path_open+0x198/0x1f0 [ 228.422427][T13293] ovl_dir_read_merged+0x175/0x5c0 [ 228.422441][T13293] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 228.422456][T13293] ? __pfx_ovl_fill_merge+0x10/0x10 [ 228.422477][T13293] ovl_iterate+0x86c/0xe40 [ 228.422490][T13293] ? __pfx_down_read_killable+0x10/0x10 [ 228.422508][T13293] ? __pfx_ovl_iterate+0x10/0x10 [ 228.422521][T13293] wrap_directory_iterator+0x9f/0xe0 [ 228.422539][T13293] iterate_dir+0x296/0xb40 [ 228.422551][T13293] __x64_sys_getdents+0x13c/0x2b0 [ 228.422562][T13293] ? __pfx___x64_sys_getdents+0x10/0x10 [ 228.422571][T13293] ? fput+0x70/0xf0 [ 228.422584][T13293] ? __pfx_filldir+0x10/0x10 [ 228.422599][T13293] do_syscall_64+0xcd/0x4c0 [ 228.422614][T13293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.422626][T13293] RIP: 0033:0x7f3cf518e969 [ 228.422635][T13293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.422646][T13293] RSP: 002b:00007f3cf6016038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 228.422656][T13293] RAX: ffffffffffffffda RBX: 00007f3cf53b5fa0 RCX: 00007f3cf518e969 [ 228.422662][T13293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 228.422668][T13293] RBP: 00007f3cf6016090 R08: 0000000000000000 R09: 0000000000000000 [ 228.422675][T13293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.422681][T13293] R13: 0000000000000000 R14: 00007f3cf53b5fa0 R15: 00007ffda25b4fa8 [ 228.422695][T13293] [ 228.471163][T13295] binder: 13292:13295 ioctl c0306201 2000000003c0 returned -14 [ 228.511047][T13295] binder_alloc: 13292: binder_alloc_buf, no vma [ 228.537649][T13305] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.586828][T13309] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.588642][ T5938] Bluetooth: hci0: command tx timeout [ 228.596272][T13311] netlink: 'syz.1.2145': attribute type 3 has an invalid length. [ 228.598775][T13311] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2145'. [ 228.607143][T13311] netlink: 'syz.1.2145': attribute type 3 has an invalid length. [ 228.610047][T13311] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2145'. [ 228.829452][T13387] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.836993][T13387] FAULT_INJECTION: forcing a failure. [ 228.836993][T13387] name failslab, interval 1, probability 0, space 0, times 0 [ 228.850668][T13387] CPU: 1 UID: 0 PID: 13387 Comm: syz.7.2152 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 228.850684][T13387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.850692][T13387] Call Trace: [ 228.850696][T13387] [ 228.850700][T13387] dump_stack_lvl+0x16c/0x1f0 [ 228.850718][T13387] should_fail_ex+0x512/0x640 [ 228.850734][T13387] ? fs_reclaim_acquire+0xae/0x150 [ 228.850752][T13387] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 228.850781][T13387] should_failslab+0xc2/0x120 [ 228.850796][T13387] __kmalloc_noprof+0xd2/0x510 [ 228.850812][T13387] tomoyo_realpath_from_path+0xc2/0x6e0 [ 228.850832][T13387] tomoyo_check_open_permission+0x2ab/0x3c0 [ 228.850846][T13387] ? security_file_alloc+0x34/0x2b0 [ 228.850863][T13387] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 228.850880][T13387] ? ovl_path_open+0x198/0x1f0 [ 228.850899][T13387] ? wrap_directory_iterator+0x9f/0xe0 [ 228.850922][T13387] ? iterate_dir+0x296/0xb40 [ 228.850958][T13387] ? do_raw_spin_lock+0x12c/0x2b0 [ 228.850982][T13387] tomoyo_file_open+0x6b/0x90 [ 228.851014][T13387] security_file_open+0x84/0x1e0 [ 228.851043][T13387] do_dentry_open+0x596/0x1c10 [ 228.851065][T13387] ? lockdep_init_map_type+0x5c/0x280 [ 228.851090][T13387] vfs_open+0x82/0x3f0 [ 228.851116][T13387] dentry_open+0x71/0xd0 [ 228.851146][T13387] ovl_path_open+0x198/0x1f0 [ 228.851169][T13387] ovl_dir_read_merged+0x175/0x5c0 [ 228.851192][T13387] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 228.851218][T13387] ? __pfx_ovl_fill_merge+0x10/0x10 [ 228.851253][T13387] ovl_iterate+0x86c/0xe40 [ 228.851277][T13387] ? __pfx_down_read_killable+0x10/0x10 [ 228.851305][T13387] ? __pfx_ovl_iterate+0x10/0x10 [ 228.851325][T13387] wrap_directory_iterator+0x9f/0xe0 [ 228.851353][T13387] iterate_dir+0x296/0xb40 [ 228.851374][T13387] __x64_sys_getdents+0x13c/0x2b0 [ 228.851391][T13387] ? __pfx___x64_sys_getdents+0x10/0x10 [ 228.851406][T13387] ? fput+0x70/0xf0 [ 228.851427][T13387] ? __pfx_filldir+0x10/0x10 [ 228.851453][T13387] do_syscall_64+0xcd/0x4c0 [ 228.851478][T13387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.851496][T13387] RIP: 0033:0x7f3cf518e969 [ 228.851510][T13387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.851526][T13387] RSP: 002b:00007f3cf6016038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 228.851543][T13387] RAX: ffffffffffffffda RBX: 00007f3cf53b5fa0 RCX: 00007f3cf518e969 [ 228.851554][T13387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 228.851564][T13387] RBP: 00007f3cf6016090 R08: 0000000000000000 R09: 0000000000000000 [ 228.851574][T13387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.851583][T13387] R13: 0000000000000000 R14: 00007f3cf53b5fa0 R15: 00007ffda25b4fa8 [ 228.851608][T13387] [ 228.851656][T13387] ERROR: Out of memory at tomoyo_realpath_from_path. [ 228.913605][ T1338] usb 10-1: USB disconnect, device number 20 [ 228.915969][T13393] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.976144][T13395] overlayfs: workdir and upperdir must reside under the same mount [ 228.979808][T13395] overlayfs: workdir and upperdir must reside under the same mount [ 228.984524][T13395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.992638][T13395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.009111][ T40] audit: type=1400 audit(1748540354.285:1082): avc: denied { execute } for pid=13396 comm="syz.7.2156" path="/memory.stat" dev="ramfs" ino=51134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 229.066497][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2158'. [ 229.123129][T13402] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2158'. [ 229.126168][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2158'. [ 229.128924][T13402] tipc: MTU too low for tipc bearer [ 229.225545][T13405] netlink: 'syz.5.2159': attribute type 20 has an invalid length. [ 229.346424][T13410] binder: BINDER_SET_CONTEXT_MGR already set [ 229.348178][T13410] binder: 13408:13410 ioctl 4018620d 200000000040 returned -16 [ 229.353970][T13410] xt_hashlimit: size too large, truncated to 1048576 [ 229.567663][T13418] team0: Device gtp1 is up. Set it down before adding it as a team port [ 229.648503][T13421] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 229.652883][T13421] FAULT_INJECTION: forcing a failure. [ 229.652883][T13421] name failslab, interval 1, probability 0, space 0, times 0 [ 229.656489][T13421] CPU: 0 UID: 0 PID: 13421 Comm: syz.1.2164 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 229.656505][T13421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 229.656511][T13421] Call Trace: [ 229.656516][T13421] [ 229.656520][T13421] dump_stack_lvl+0x16c/0x1f0 [ 229.656538][T13421] should_fail_ex+0x512/0x640 [ 229.656554][T13421] ? fs_reclaim_acquire+0xae/0x150 [ 229.656572][T13421] ? tomoyo_encode2+0x100/0x3e0 [ 229.656588][T13421] should_failslab+0xc2/0x120 [ 229.656602][T13421] __kmalloc_noprof+0xd2/0x510 [ 229.656614][T13421] ? d_absolute_path+0x136/0x1a0 [ 229.656633][T13421] tomoyo_encode2+0x100/0x3e0 [ 229.656650][T13421] tomoyo_encode+0x29/0x50 [ 229.656665][T13421] tomoyo_realpath_from_path+0x18f/0x6e0 [ 229.656686][T13421] tomoyo_check_open_permission+0x2ab/0x3c0 [ 229.656700][T13421] ? security_file_alloc+0x34/0x2b0 [ 229.656717][T13421] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 229.656731][T13421] ? ovl_path_open+0x198/0x1f0 [ 229.656744][T13421] ? wrap_directory_iterator+0x9f/0xe0 [ 229.656761][T13421] ? iterate_dir+0x296/0xb40 [ 229.656783][T13421] ? do_raw_spin_lock+0x12c/0x2b0 [ 229.656797][T13421] tomoyo_file_open+0x6b/0x90 [ 229.656809][T13421] security_file_open+0x84/0x1e0 [ 229.656826][T13421] do_dentry_open+0x596/0x1c10 [ 229.656838][T13421] ? lockdep_init_map_type+0x5c/0x280 [ 229.656856][T13421] vfs_open+0x82/0x3f0 [ 229.656872][T13421] dentry_open+0x71/0xd0 [ 229.656886][T13421] ovl_path_open+0x198/0x1f0 [ 229.656900][T13421] ovl_dir_read_merged+0x175/0x5c0 [ 229.656913][T13421] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 229.656929][T13421] ? __pfx_ovl_fill_merge+0x10/0x10 [ 229.656949][T13421] ovl_iterate+0x86c/0xe40 [ 229.656963][T13421] ? __pfx_down_read_killable+0x10/0x10 [ 229.656980][T13421] ? __pfx_ovl_iterate+0x10/0x10 [ 229.656993][T13421] wrap_directory_iterator+0x9f/0xe0 [ 229.657011][T13421] iterate_dir+0x296/0xb40 [ 229.657023][T13421] __x64_sys_getdents+0x13c/0x2b0 [ 229.657033][T13421] ? __pfx___x64_sys_getdents+0x10/0x10 [ 229.657042][T13421] ? fput+0x70/0xf0 [ 229.657055][T13421] ? __pfx_filldir+0x10/0x10 [ 229.657070][T13421] do_syscall_64+0xcd/0x4c0 [ 229.657086][T13421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.657097][T13421] RIP: 0033:0x7f248fd8e969 [ 229.657106][T13421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.657116][T13421] RSP: 002b:00007f2490c2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 229.657127][T13421] RAX: ffffffffffffffda RBX: 00007f248ffb5fa0 RCX: 00007f248fd8e969 [ 229.657134][T13421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 229.657140][T13421] RBP: 00007f2490c2b090 R08: 0000000000000000 R09: 0000000000000000 [ 229.657146][T13421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.657157][T13421] R13: 0000000000000000 R14: 00007f248ffb5fa0 R15: 00007ffdeb021ab8 [ 229.657171][T13421] [ 229.657184][T13421] ERROR: Out of memory at tomoyo_realpath_from_path. [ 229.901868][T13401] orangefs_mount: mount request failed with -4 [ 229.942237][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2170'. [ 229.942773][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2170'. [ 229.975557][T13439] vxcan0: tx address claim with dlc 0 [ 229.978736][ T40] audit: type=1400 audit(1748540355.255:1083): avc: denied { checkpoint_restore } for pid=13438 comm="syz.7.2171" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 230.050500][ T1338] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 230.051283][T13446] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 230.057533][T13446] FAULT_INJECTION: forcing a failure. [ 230.057533][T13446] name failslab, interval 1, probability 0, space 0, times 0 [ 230.063848][T13446] CPU: 3 UID: 0 PID: 13446 Comm: syz.4.2174 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 230.063864][T13446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 230.063870][T13446] Call Trace: [ 230.063874][T13446] [ 230.063879][T13446] dump_stack_lvl+0x16c/0x1f0 [ 230.063897][T13446] should_fail_ex+0x512/0x640 [ 230.063913][T13446] ? __kmalloc_noprof+0xbf/0x510 [ 230.063928][T13446] ? ovl_cache_entry_new+0x3d/0x730 [ 230.063941][T13446] should_failslab+0xc2/0x120 [ 230.063954][T13446] __kmalloc_noprof+0xd2/0x510 [ 230.063969][T13446] ovl_cache_entry_new+0x3d/0x730 [ 230.063984][T13446] ovl_fill_merge+0x601/0xa90 [ 230.064000][T13446] ? __pfx_ovl_fill_merge+0x10/0x10 [ 230.064011][T13446] offset_readdir+0x1c4/0x6d0 [ 230.064027][T13446] iterate_dir+0x296/0xb40 [ 230.064039][T13446] ovl_dir_read_merged+0x20d/0x5c0 [ 230.064052][T13446] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 230.064068][T13446] ? __pfx_ovl_fill_merge+0x10/0x10 [ 230.064088][T13446] ovl_iterate+0x86c/0xe40 [ 230.064102][T13446] ? __pfx_down_read_killable+0x10/0x10 [ 230.064120][T13446] ? __pfx_ovl_iterate+0x10/0x10 [ 230.064132][T13446] wrap_directory_iterator+0x9f/0xe0 [ 230.064150][T13446] iterate_dir+0x296/0xb40 [ 230.064163][T13446] __x64_sys_getdents+0x13c/0x2b0 [ 230.064173][T13446] ? __pfx___x64_sys_getdents+0x10/0x10 [ 230.064182][T13446] ? fput+0x70/0xf0 [ 230.064196][T13446] ? __pfx_filldir+0x10/0x10 [ 230.064210][T13446] do_syscall_64+0xcd/0x4c0 [ 230.064226][T13446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.064238][T13446] RIP: 0033:0x7f315438e969 [ 230.064247][T13446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.064257][T13446] RSP: 002b:00007f31521f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 230.064268][T13446] RAX: ffffffffffffffda RBX: 00007f31545b5fa0 RCX: 00007f315438e969 [ 230.064274][T13446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 230.064280][T13446] RBP: 00007f31521f6090 R08: 0000000000000000 R09: 0000000000000000 [ 230.064286][T13446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.064293][T13446] R13: 0000000000000000 R14: 00007f31545b5fa0 R15: 00007fffb3e1f598 [ 230.064306][T13446] [ 230.153079][T13452] netlink: 'syz.7.2176': attribute type 4 has an invalid length. [ 230.182624][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2177'. [ 230.202424][ T1338] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 230.205769][ T1338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.209078][ T1338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.215557][ T1338] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 230.220457][ T1338] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 230.223248][ T1338] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 230.225887][ T1338] usb 6-1: Manufacturer: syz [ 230.235204][T13456] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2178'. [ 230.239531][T13455] overlay: ./file0 is not a directory [ 230.241404][ T1338] usb 6-1: config 0 descriptor?? [ 230.332291][T13456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.337241][T13456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.341953][T13456] bond0 (unregistering): Released all slaves [ 230.438429][T13477] netlink: 'syz.4.2183': attribute type 2 has an invalid length. [ 230.504298][T13487] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 230.539061][T13489] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 230.546955][ T40] audit: type=1400 audit(1748540355.825:1084): avc: denied { write } for pid=13475 comm="syz.5.2184" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 230.556903][T13489] FAULT_INJECTION: forcing a failure. [ 230.556903][T13489] name failslab, interval 1, probability 0, space 0, times 0 [ 230.562958][T13489] CPU: 3 UID: 0 PID: 13489 Comm: syz.4.2187 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 230.562973][T13489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 230.562981][T13489] Call Trace: [ 230.562984][T13489] [ 230.562989][T13489] dump_stack_lvl+0x16c/0x1f0 [ 230.563007][T13489] should_fail_ex+0x512/0x640 [ 230.563022][T13489] ? __kmalloc_noprof+0xbf/0x510 [ 230.563036][T13489] ? ovl_cache_entry_new+0x3d/0x730 [ 230.563048][T13489] should_failslab+0xc2/0x120 [ 230.563062][T13489] __kmalloc_noprof+0xd2/0x510 [ 230.563077][T13489] ovl_cache_entry_new+0x3d/0x730 [ 230.563094][T13489] ovl_fill_merge+0x601/0xa90 [ 230.563108][T13489] ? __pfx_ovl_fill_merge+0x10/0x10 [ 230.563126][T13489] offset_readdir+0x28f/0x6d0 [ 230.563146][T13489] iterate_dir+0x296/0xb40 [ 230.563159][T13489] ovl_dir_read_merged+0x20d/0x5c0 [ 230.563172][T13489] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 230.563188][T13489] ? __pfx_ovl_fill_merge+0x10/0x10 [ 230.563208][T13489] ovl_iterate+0x86c/0xe40 [ 230.563222][T13489] ? __pfx_down_read_killable+0x10/0x10 [ 230.563240][T13489] ? __pfx_ovl_iterate+0x10/0x10 [ 230.563253][T13489] wrap_directory_iterator+0x9f/0xe0 [ 230.563271][T13489] iterate_dir+0x296/0xb40 [ 230.563297][T13489] __x64_sys_getdents+0x13c/0x2b0 [ 230.563309][T13489] ? __pfx___x64_sys_getdents+0x10/0x10 [ 230.563319][T13489] ? fput+0x70/0xf0 [ 230.563332][T13489] ? __pfx_filldir+0x10/0x10 [ 230.563347][T13489] do_syscall_64+0xcd/0x4c0 [ 230.563363][T13489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.563374][T13489] RIP: 0033:0x7f315438e969 [ 230.563383][T13489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.563394][T13489] RSP: 002b:00007f31521f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 230.563410][T13489] RAX: ffffffffffffffda RBX: 00007f31545b5fa0 RCX: 00007f315438e969 [ 230.563420][T13489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 230.563426][T13489] RBP: 00007f31521f6090 R08: 0000000000000000 R09: 0000000000000000 [ 230.563435][T13489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.563441][T13489] R13: 0000000000000000 R14: 00007f31545b5fa0 R15: 00007fffb3e1f598 [ 230.563462][T13489] [ 230.649420][ T1338] appleir 0003:05AC:8243.0024: unknown main item tag 0x0 [ 230.650553][ T5938] Bluetooth: hci0: command tx timeout [ 230.654214][ T1338] appleir 0003:05AC:8243.0024: No inputs registered, leaving [ 230.661191][T13492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2188'. [ 230.661401][ T1338] appleir 0003:05AC:8243.0024: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 230.721479][ T5979] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 230.750957][ T40] audit: type=1400 audit(1748540356.025:1085): avc: denied { getopt } for pid=13497 comm="syz.4.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 230.828011][T13505] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2192'. [ 230.850241][T13505] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2192'. [ 230.850388][ T5979] usb 12-1: device descriptor read/64, error -71 [ 231.028562][T13513] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 231.031547][T13513] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 231.034284][T13513] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 231.037266][T13513] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 231.040991][T13513] geneve3: entered promiscuous mode [ 231.042651][T13513] geneve3: entered allmulticast mode [ 231.088921][ T40] audit: type=1400 audit(1748540356.365:1086): avc: denied { getopt } for pid=13514 comm="syz.4.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 231.090418][ T5979] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 231.095350][ T40] audit: type=1400 audit(1748540356.365:1087): avc: denied { getopt } for pid=13514 comm="syz.4.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 231.125076][T13518] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 231.129735][T13518] FAULT_INJECTION: forcing a failure. [ 231.129735][T13518] name failslab, interval 1, probability 0, space 0, times 0 [ 231.134618][T13518] CPU: 1 UID: 0 PID: 13518 Comm: syz.4.2196 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 231.134634][T13518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 231.134641][T13518] Call Trace: [ 231.134645][T13518] [ 231.134649][T13518] dump_stack_lvl+0x16c/0x1f0 [ 231.134680][T13518] should_fail_ex+0x512/0x640 [ 231.134696][T13518] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 231.134711][T13518] should_failslab+0xc2/0x120 [ 231.134725][T13518] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 231.134736][T13518] ? make_vfsuid+0xec/0x140 [ 231.134752][T13518] ? alloc_empty_file+0x55/0x1e0 [ 231.134770][T13518] alloc_empty_file+0x55/0x1e0 [ 231.134785][T13518] dentry_open+0x46/0xd0 [ 231.134799][T13518] ovl_path_open+0x198/0x1f0 [ 231.134814][T13518] ovl_dir_read_merged+0x349/0x5c0 [ 231.134828][T13518] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 231.134844][T13518] ? __pfx_ovl_fill_merge+0x10/0x10 [ 231.134865][T13518] ovl_iterate+0x86c/0xe40 [ 231.134879][T13518] ? __pfx_down_read_killable+0x10/0x10 [ 231.134897][T13518] ? __pfx_ovl_iterate+0x10/0x10 [ 231.134910][T13518] wrap_directory_iterator+0x9f/0xe0 [ 231.134929][T13518] iterate_dir+0x296/0xb40 [ 231.134941][T13518] __x64_sys_getdents+0x13c/0x2b0 [ 231.134952][T13518] ? __pfx___x64_sys_getdents+0x10/0x10 [ 231.134962][T13518] ? fput+0x70/0xf0 [ 231.134975][T13518] ? __pfx_filldir+0x10/0x10 [ 231.134990][T13518] do_syscall_64+0xcd/0x4c0 [ 231.135006][T13518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.135017][T13518] RIP: 0033:0x7f315438e969 [ 231.135027][T13518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.135037][T13518] RSP: 002b:00007f31521f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 231.135048][T13518] RAX: ffffffffffffffda RBX: 00007f31545b5fa0 RCX: 00007f315438e969 [ 231.135055][T13518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 231.135062][T13518] RBP: 00007f31521f6090 R08: 0000000000000000 R09: 0000000000000000 [ 231.135068][T13518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.135074][T13518] R13: 0000000000000000 R14: 00007f31545b5fa0 R15: 00007fffb3e1f598 [ 231.135089][T13518] [ 231.163876][ T1338] usb 6-1: USB disconnect, device number 40 [ 231.164468][ C1] hpet: Lost 1 RTC interrupts [ 231.213821][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.215942][ C1] hpet: Lost 2 RTC interrupts [ 231.243596][T13521] binder: 13520:13521 ioctl c0306201 200000000640 returned -22 [ 231.270530][ T5979] usb 12-1: device descriptor read/64, error -71 [ 231.380581][ T5979] usb usb12-port1: attempt power cycle [ 231.703298][ T40] audit: type=1400 audit(1748540356.985:1088): avc: denied { ioctl } for pid=13531 comm="syz.5.2200" path="socket:[55301]" dev="sockfs" ino=55301 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 231.712184][ T40] audit: type=1400 audit(1748540356.995:1089): avc: denied { read } for pid=13531 comm="syz.5.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 231.720601][ T5979] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 231.733429][T13540] netlink: 'syz.1.2201': attribute type 1 has an invalid length. [ 231.760987][ T5979] usb 12-1: device descriptor read/8, error -71 [ 231.762336][T13546] netlink: 'syz.5.2202': attribute type 21 has an invalid length. [ 231.797397][T13546] program syz.5.2202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.898568][T13558] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 231.906713][T13558] FAULT_INJECTION: forcing a failure. [ 231.906713][T13558] name failslab, interval 1, probability 0, space 0, times 0 [ 231.911674][T13558] CPU: 0 UID: 0 PID: 13558 Comm: syz.5.2205 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 231.911691][T13558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 231.911699][T13558] Call Trace: [ 231.911703][T13558] [ 231.911708][T13558] dump_stack_lvl+0x16c/0x1f0 [ 231.911727][T13558] should_fail_ex+0x512/0x640 [ 231.911744][T13558] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 231.911760][T13558] should_failslab+0xc2/0x120 [ 231.911774][T13558] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 231.911794][T13558] ? security_file_alloc+0x34/0x2b0 [ 231.911815][T13558] security_file_alloc+0x34/0x2b0 [ 231.911833][T13558] init_file+0x93/0x4c0 [ 231.911848][T13558] alloc_empty_file+0x73/0x1e0 [ 231.911865][T13558] dentry_open+0x46/0xd0 [ 231.911880][T13558] ovl_path_open+0x198/0x1f0 [ 231.911897][T13558] ovl_dir_read_merged+0x349/0x5c0 [ 231.911911][T13558] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 231.911928][T13558] ? __pfx_ovl_fill_merge+0x10/0x10 [ 231.911949][T13558] ovl_iterate+0x86c/0xe40 [ 231.911964][T13558] ? __pfx_down_read_killable+0x10/0x10 [ 231.911983][T13558] ? __pfx_ovl_iterate+0x10/0x10 [ 231.911997][T13558] wrap_directory_iterator+0x9f/0xe0 [ 231.912020][T13558] iterate_dir+0x296/0xb40 [ 231.912033][T13558] __x64_sys_getdents+0x13c/0x2b0 [ 231.912044][T13558] ? __pfx___x64_sys_getdents+0x10/0x10 [ 231.912055][T13558] ? fput+0x70/0xf0 [ 231.912068][T13558] ? __pfx_filldir+0x10/0x10 [ 231.912084][T13558] do_syscall_64+0xcd/0x4c0 [ 231.912101][T13558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.912113][T13558] RIP: 0033:0x7f7106b8e969 [ 231.912123][T13558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.912135][T13558] RSP: 002b:00007f7107951038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 231.912146][T13558] RAX: ffffffffffffffda RBX: 00007f7106db5fa0 RCX: 00007f7106b8e969 [ 231.912154][T13558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 231.912161][T13558] RBP: 00007f7107951090 R08: 0000000000000000 R09: 0000000000000000 [ 231.912167][T13558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.912174][T13558] R13: 0000000000000000 R14: 00007f7106db5fa0 R15: 00007fff141b18f8 [ 231.912189][T13558] [ 232.040579][ T5979] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 232.060835][ T5979] usb 12-1: device descriptor read/8, error -71 [ 232.171993][ T6578] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 232.181125][ T5979] usb usb12-port1: unable to enumerate USB device [ 232.186096][T13583] netlink: 'syz.5.2213': attribute type 10 has an invalid length. [ 232.301778][T13576] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 232.303870][T13576] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 232.306909][T13576] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 232.308906][T13576] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.312802][T13576] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 232.316847][T13576] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 232.331576][ T6578] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 232.334941][ T6578] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.338334][ T6578] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.343066][ T6578] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 232.347836][ T6578] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 232.351436][ T6578] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 232.353985][ T6578] usb 6-1: Manufacturer: syz [ 232.356763][ T6578] usb 6-1: config 0 descriptor?? [ 232.455956][T13600] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 232.463350][T13600] FAULT_INJECTION: forcing a failure. [ 232.463350][T13600] name failslab, interval 1, probability 0, space 0, times 0 [ 232.467237][T13600] CPU: 2 UID: 0 PID: 13600 Comm: syz.5.2216 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 232.467253][T13600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.467260][T13600] Call Trace: [ 232.467265][T13600] [ 232.467270][T13600] dump_stack_lvl+0x16c/0x1f0 [ 232.467288][T13600] should_fail_ex+0x512/0x640 [ 232.467305][T13600] ? fs_reclaim_acquire+0xae/0x150 [ 232.467323][T13600] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 232.467340][T13600] should_failslab+0xc2/0x120 [ 232.467354][T13600] __kmalloc_noprof+0xd2/0x510 [ 232.467370][T13600] tomoyo_realpath_from_path+0xc2/0x6e0 [ 232.467391][T13600] tomoyo_check_open_permission+0x2ab/0x3c0 [ 232.467405][T13600] ? security_file_alloc+0x34/0x2b0 [ 232.467422][T13600] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 232.467436][T13600] ? ovl_path_open+0x198/0x1f0 [ 232.467450][T13600] ? wrap_directory_iterator+0x9f/0xe0 [ 232.467467][T13600] ? iterate_dir+0x296/0xb40 [ 232.467489][T13600] ? do_raw_spin_lock+0x12c/0x2b0 [ 232.467505][T13600] tomoyo_file_open+0x6b/0x90 [ 232.467517][T13600] security_file_open+0x84/0x1e0 [ 232.467534][T13600] do_dentry_open+0x596/0x1c10 [ 232.467547][T13600] ? lockdep_init_map_type+0x5c/0x280 [ 232.467565][T13600] vfs_open+0x82/0x3f0 [ 232.467581][T13600] dentry_open+0x71/0xd0 [ 232.467595][T13600] ovl_path_open+0x198/0x1f0 [ 232.467609][T13600] ovl_dir_read_merged+0x349/0x5c0 [ 232.467623][T13600] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 232.467639][T13600] ? __pfx_ovl_fill_merge+0x10/0x10 [ 232.467659][T13600] ovl_iterate+0x86c/0xe40 [ 232.467673][T13600] ? __pfx_down_read_killable+0x10/0x10 [ 232.467691][T13600] ? __pfx_ovl_iterate+0x10/0x10 [ 232.467704][T13600] wrap_directory_iterator+0x9f/0xe0 [ 232.467722][T13600] iterate_dir+0x296/0xb40 [ 232.467735][T13600] __x64_sys_getdents+0x13c/0x2b0 [ 232.467745][T13600] ? __pfx___x64_sys_getdents+0x10/0x10 [ 232.467755][T13600] ? fput+0x70/0xf0 [ 232.467768][T13600] ? __pfx_filldir+0x10/0x10 [ 232.467783][T13600] do_syscall_64+0xcd/0x4c0 [ 232.467803][T13600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.467815][T13600] RIP: 0033:0x7f7106b8e969 [ 232.467824][T13600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.467835][T13600] RSP: 002b:00007f7107951038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 232.467846][T13600] RAX: ffffffffffffffda RBX: 00007f7106db5fa0 RCX: 00007f7106b8e969 [ 232.467853][T13600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 232.467860][T13600] RBP: 00007f7107951090 R08: 0000000000000000 R09: 0000000000000000 [ 232.467866][T13600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.467872][T13600] R13: 0000000000000000 R14: 00007f7106db5fa0 R15: 00007fff141b18f8 [ 232.467887][T13600] [ 232.467892][T13600] ERROR: Out of memory at tomoyo_realpath_from_path. [ 232.644566][T13606] ipip0: entered promiscuous mode [ 232.646780][T13606] ipip0: entered allmulticast mode [ 232.708511][T13612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.712166][T13612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.765277][ T6578] appleir 0003:05AC:8243.0025: unknown main item tag 0x0 [ 232.772194][ T6578] appleir 0003:05AC:8243.0025: No inputs registered, leaving [ 232.776361][ T6578] appleir 0003:05AC:8243.0025: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 232.917642][T13635] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 232.923903][T13635] overlay: Unknown parameter 'fowner<00000000000000060928' [ 233.079842][T13638] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 233.084535][T13638] FAULT_INJECTION: forcing a failure. [ 233.084535][T13638] name failslab, interval 1, probability 0, space 0, times 0 [ 233.088894][T13638] CPU: 1 UID: 0 PID: 13638 Comm: syz.5.2225 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 233.088908][T13638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 233.088916][T13638] Call Trace: [ 233.088920][T13638] [ 233.088925][T13638] dump_stack_lvl+0x16c/0x1f0 [ 233.088943][T13638] should_fail_ex+0x512/0x640 [ 233.088959][T13638] ? fs_reclaim_acquire+0xae/0x150 [ 233.088978][T13638] ? tomoyo_encode2+0x100/0x3e0 [ 233.088993][T13638] should_failslab+0xc2/0x120 [ 233.089007][T13638] __kmalloc_noprof+0xd2/0x510 [ 233.089024][T13638] tomoyo_encode2+0x100/0x3e0 [ 233.089041][T13638] tomoyo_encode+0x29/0x50 [ 233.089057][T13638] tomoyo_realpath_from_path+0x18f/0x6e0 [ 233.089077][T13638] tomoyo_check_open_permission+0x2ab/0x3c0 [ 233.089092][T13638] ? security_file_alloc+0x34/0x2b0 [ 233.089109][T13638] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 233.089123][T13638] ? ovl_path_open+0x198/0x1f0 [ 233.089143][T13638] ? wrap_directory_iterator+0x9f/0xe0 [ 233.089160][T13638] ? iterate_dir+0x296/0xb40 [ 233.089183][T13638] ? do_raw_spin_lock+0x12c/0x2b0 [ 233.089198][T13638] tomoyo_file_open+0x6b/0x90 [ 233.089210][T13638] security_file_open+0x84/0x1e0 [ 233.089226][T13638] do_dentry_open+0x596/0x1c10 [ 233.089240][T13638] ? lockdep_init_map_type+0x5c/0x280 [ 233.089258][T13638] vfs_open+0x82/0x3f0 [ 233.089275][T13638] dentry_open+0x71/0xd0 [ 233.089289][T13638] ovl_path_open+0x198/0x1f0 [ 233.089303][T13638] ovl_dir_read_merged+0x349/0x5c0 [ 233.089317][T13638] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 233.089333][T13638] ? __pfx_ovl_fill_merge+0x10/0x10 [ 233.089353][T13638] ovl_iterate+0x86c/0xe40 [ 233.089368][T13638] ? __pfx_down_read_killable+0x10/0x10 [ 233.089386][T13638] ? __pfx_ovl_iterate+0x10/0x10 [ 233.089399][T13638] wrap_directory_iterator+0x9f/0xe0 [ 233.089417][T13638] iterate_dir+0x296/0xb40 [ 233.089430][T13638] __x64_sys_getdents+0x13c/0x2b0 [ 233.089440][T13638] ? __pfx___x64_sys_getdents+0x10/0x10 [ 233.089450][T13638] ? fput+0x70/0xf0 [ 233.089463][T13638] ? __pfx_filldir+0x10/0x10 [ 233.089479][T13638] do_syscall_64+0xcd/0x4c0 [ 233.089494][T13638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.089506][T13638] RIP: 0033:0x7f7106b8e969 [ 233.089515][T13638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.089526][T13638] RSP: 002b:00007f7107951038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 233.089537][T13638] RAX: ffffffffffffffda RBX: 00007f7106db5fa0 RCX: 00007f7106b8e969 [ 233.089544][T13638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 233.089551][T13638] RBP: 00007f7107951090 R08: 0000000000000000 R09: 0000000000000000 [ 233.089557][T13638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.089564][T13638] R13: 0000000000000000 R14: 00007f7106db5fa0 R15: 00007fff141b18f8 [ 233.089578][T13638] [ 233.089607][T13638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 233.275001][ T5979] usb 6-1: USB disconnect, device number 41 [ 233.508704][T13644] : entered promiscuous mode [ 233.900360][ T6578] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 234.040662][ T5979] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 234.043999][T13649] exFAT-fs (nullb0): invalid boot record signature [ 234.046256][T13649] exFAT-fs (nullb0): failed to read boot sector [ 234.048208][T13649] exFAT-fs (nullb0): failed to recognize exfat type [ 234.061757][ T6578] usb 12-1: config index 0 descriptor too short (expected 13625, got 36) [ 234.070458][ T6578] usb 12-1: config 146 has too many interfaces: 218, using maximum allowed: 32 [ 234.073314][ T6578] usb 12-1: config 146 has an invalid descriptor of length 0, skipping remainder of the config [ 234.077108][ T6578] usb 12-1: config 146 has 0 interfaces, different from the descriptor's value: 218 [ 234.081757][ T6578] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 234.084634][ T6578] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.087264][ T6578] usb 12-1: Product: syz [ 234.088628][ T6578] usb 12-1: Manufacturer: syz [ 234.090170][ T6578] usb 12-1: SerialNumber: syz [ 234.190290][ T5979] usb 6-1: Using ep0 maxpacket: 8 [ 234.193418][ T5979] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.196844][ T5979] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.199832][ T5979] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.203065][ T5979] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.206924][ T5979] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.209716][ T5979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.250942][ T5938] Bluetooth: hci3: command 0x0c1a tx timeout [ 234.302708][T13655] tipc: Enabling of bearer rejected, failed to enable media [ 234.330354][ T5938] Bluetooth: hci0: command 0x0c1a tx timeout [ 234.330428][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 234.332026][ T5939] Bluetooth: hci4: command 0x0c1a tx timeout [ 234.416938][ T5979] usb 6-1: GET_CAPABILITIES returned 0 [ 234.418678][ T5979] usbtmc 6-1:16.0: can't read capabilities [ 234.622094][ T10] usb 6-1: USB disconnect, device number 42 [ 235.189282][T13663] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 235.194097][T13663] FAULT_INJECTION: forcing a failure. [ 235.194097][T13663] name failslab, interval 1, probability 0, space 0, times 0 [ 235.198682][T13663] CPU: 1 UID: 0 PID: 13663 Comm: syz.5.2234 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 235.198706][T13663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 235.198719][T13663] Call Trace: [ 235.198725][T13663] [ 235.198732][T13663] dump_stack_lvl+0x16c/0x1f0 [ 235.198751][T13663] should_fail_ex+0x512/0x640 [ 235.198767][T13663] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 235.198783][T13663] should_failslab+0xc2/0x120 [ 235.198797][T13663] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 235.198809][T13663] ? selinux_file_open+0x39e/0x510 [ 235.198825][T13663] ? __d_alloc+0x31/0xaa0 [ 235.198842][T13663] __d_alloc+0x31/0xaa0 [ 235.198857][T13663] d_alloc_cursor+0x3e/0xe0 [ 235.198875][T13663] dcache_dir_open+0x3b/0x90 [ 235.198892][T13663] do_dentry_open+0x741/0x1c10 [ 235.198905][T13663] ? __pfx_dcache_dir_open+0x10/0x10 [ 235.198924][T13663] vfs_open+0x82/0x3f0 [ 235.198940][T13663] dentry_open+0x71/0xd0 [ 235.198954][T13663] ovl_path_open+0x198/0x1f0 [ 235.198970][T13663] ovl_dir_read_merged+0x349/0x5c0 [ 235.198984][T13663] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 235.199000][T13663] ? __pfx_ovl_fill_merge+0x10/0x10 [ 235.199021][T13663] ovl_iterate+0x86c/0xe40 [ 235.199035][T13663] ? __pfx_down_read_killable+0x10/0x10 [ 235.199053][T13663] ? __pfx_ovl_iterate+0x10/0x10 [ 235.199066][T13663] wrap_directory_iterator+0x9f/0xe0 [ 235.199085][T13663] iterate_dir+0x296/0xb40 [ 235.199097][T13663] __x64_sys_getdents+0x13c/0x2b0 [ 235.199108][T13663] ? __pfx___x64_sys_getdents+0x10/0x10 [ 235.199123][T13663] ? fput+0x70/0xf0 [ 235.199136][T13663] ? __pfx_filldir+0x10/0x10 [ 235.199151][T13663] do_syscall_64+0xcd/0x4c0 [ 235.199167][T13663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.199179][T13663] RIP: 0033:0x7f7106b8e969 [ 235.199189][T13663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.199200][T13663] RSP: 002b:00007f7107951038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 235.199211][T13663] RAX: ffffffffffffffda RBX: 00007f7106db5fa0 RCX: 00007f7106b8e969 [ 235.199218][T13663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 235.199225][T13663] RBP: 00007f7107951090 R08: 0000000000000000 R09: 0000000000000000 [ 235.199231][T13663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.199238][T13663] R13: 0000000000000000 R14: 00007f7106db5fa0 R15: 00007fff141b18f8 [ 235.199252][T13663] [ 235.230345][ T5940] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 235.231011][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.281231][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.283240][ C1] hpet: Lost 4 RTC interrupts [ 235.389811][ T40] audit: type=1400 audit(1748540360.665:1090): avc: denied { getopt } for pid=13671 comm="syz.1.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 235.396905][ T40] audit: type=1400 audit(1748540360.675:1091): avc: denied { write } for pid=13671 comm="syz.1.2239" path="socket:[54642]" dev="sockfs" ino=54642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 235.412968][T13676] __nla_validate_parse: 4 callbacks suppressed [ 235.412979][T13676] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2240'. [ 235.418214][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2240'. [ 235.438190][T13680] set match dimension is over the limit! [ 235.468476][T13683] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 235.473958][T13683] FAULT_INJECTION: forcing a failure. [ 235.473958][T13683] name failslab, interval 1, probability 0, space 0, times 0 [ 235.478219][T13683] CPU: 2 UID: 0 PID: 13683 Comm: syz.1.2243 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 235.478242][T13683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 235.478253][T13683] Call Trace: [ 235.478260][T13683] [ 235.478267][T13683] dump_stack_lvl+0x16c/0x1f0 [ 235.478294][T13683] should_fail_ex+0x512/0x640 [ 235.478319][T13683] ? __kmalloc_noprof+0xbf/0x510 [ 235.478342][T13683] ? ovl_cache_entry_new+0x3d/0x730 [ 235.478361][T13683] should_failslab+0xc2/0x120 [ 235.478376][T13683] __kmalloc_noprof+0xd2/0x510 [ 235.478387][T13683] ? lock_acquire+0x179/0x350 [ 235.478404][T13683] ? find_held_lock+0x2b/0x80 [ 235.478417][T13683] ovl_cache_entry_new+0x3d/0x730 [ 235.478431][T13683] ? do_raw_spin_unlock+0x172/0x230 [ 235.478442][T13683] ovl_fill_merge+0x2c1/0xa90 [ 235.478456][T13683] ? __pfx_ovl_fill_merge+0x10/0x10 [ 235.478470][T13683] dcache_readdir+0x1fa/0x850 [ 235.478486][T13683] iterate_dir+0x296/0xb40 [ 235.478499][T13683] ovl_dir_read_merged+0x3e1/0x5c0 [ 235.478512][T13683] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 235.478528][T13683] ? __pfx_ovl_fill_merge+0x10/0x10 [ 235.478549][T13683] ovl_iterate+0x86c/0xe40 [ 235.478563][T13683] ? __pfx_down_read_killable+0x10/0x10 [ 235.478581][T13683] ? __pfx_ovl_iterate+0x10/0x10 [ 235.478594][T13683] wrap_directory_iterator+0x9f/0xe0 [ 235.478612][T13683] iterate_dir+0x296/0xb40 [ 235.478625][T13683] __x64_sys_getdents+0x13c/0x2b0 [ 235.478635][T13683] ? __pfx___x64_sys_getdents+0x10/0x10 [ 235.478645][T13683] ? fput+0x70/0xf0 [ 235.478658][T13683] ? __pfx_filldir+0x10/0x10 [ 235.478674][T13683] do_syscall_64+0xcd/0x4c0 [ 235.478689][T13683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.478700][T13683] RIP: 0033:0x7f248fd8e969 [ 235.478710][T13683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.478721][T13683] RSP: 002b:00007f2490c2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 235.478732][T13683] RAX: ffffffffffffffda RBX: 00007f248ffb5fa0 RCX: 00007f248fd8e969 [ 235.478738][T13683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 235.478745][T13683] RBP: 00007f2490c2b090 R08: 0000000000000000 R09: 0000000000000000 [ 235.478751][T13683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.478758][T13683] R13: 0000000000000000 R14: 00007f248ffb5fa0 R15: 00007ffdeb021ab8 [ 235.478772][T13683] [ 235.516185][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2245'. [ 235.569195][T13688] program syz.4.2245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.597875][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2246'. [ 235.600745][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2246'. [ 235.603564][T13692] netlink: 'syz.1.2246': attribute type 12 has an invalid length. [ 235.656373][T13694] pim6reg1: entered promiscuous mode [ 235.658159][T13694] pim6reg1: entered allmulticast mode [ 235.705599][T13698] netlink: 'syz.4.2248': attribute type 2 has an invalid length. [ 235.708107][T13698] netlink: 1192 bytes leftover after parsing attributes in process `syz.4.2248'. [ 235.752148][T13703] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 235.755908][T13704] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 235.759414][T13703] overlayfs: cannot append lower layer [ 235.781259][ T40] audit: type=1400 audit(1748540361.065:1092): avc: denied { mounton } for pid=13705 comm="syz.1.2250" path="/547/file0" dev="proc" ino=4026533455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 235.857797][ T40] audit: type=1400 audit(1748540361.135:1093): avc: denied { setattr } for pid=13709 comm="syz.1.2252" path="socket:[53010]" dev="sockfs" ino=53010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 235.866067][ T40] audit: type=1400 audit(1748540361.145:1094): avc: denied { mount } for pid=13709 comm="syz.1.2252" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 235.874941][ T40] audit: type=1400 audit(1748540361.155:1095): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 235.933013][T13714] team0: Device gtp1 is up. Set it down before adding it as a team port [ 235.968898][T13716] Bluetooth: MGMT ver 1.23 [ 236.093192][T13726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2256'. [ 236.095989][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2256'. [ 236.104279][T13726] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2256'. [ 236.241216][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2258'. [ 236.244547][T13745] netlink: 'syz.1.2258': attribute type 20 has an invalid length. [ 236.295909][T13748] lo speed is unknown, defaulting to 1000 [ 236.371077][T13755] tipc: Failed to remove unknown binding: 66,1,1/0:468435162/468435164 [ 236.373855][T13755] tipc: Failed to remove unknown binding: 66,1,1/0:468435162/468435164 [ 236.411943][ T5940] Bluetooth: hci0: command 0x0c1a tx timeout [ 236.447775][ T40] audit: type=1400 audit(1748540361.725:1096): avc: denied { map } for pid=13761 comm="syz.1.2263" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 236.475219][T13765] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 236.527278][T13770] netlink: 'syz.1.2265': attribute type 2 has an invalid length. [ 236.528313][ T6578] usb 12-1: USB disconnect, device number 8 [ 236.604661][ T5940] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 236.891528][T13801] tmpfs: Group quota block hardlimit too large. [ 237.250983][ T5975] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 237.410482][ T5975] usb 10-1: Using ep0 maxpacket: 32 [ 237.418072][ T5975] usb 10-1: config 0 interface 0 has no altsetting 0 [ 237.431279][ T5975] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 237.434797][ T5975] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.437900][ T5975] usb 10-1: Product: syz [ 237.439639][ T5975] usb 10-1: Manufacturer: syz [ 237.443958][ T5975] usb 10-1: SerialNumber: syz [ 237.447719][ T5975] usb 10-1: config 0 descriptor?? [ 237.452866][ T5975] gs_usb 10-1:0.0: Required endpoints not found [ 237.517625][T13834] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 237.522617][T13834] FAULT_INJECTION: forcing a failure. [ 237.522617][T13834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.527294][T13834] CPU: 0 UID: 0 PID: 13834 Comm: syz.1.2284 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 237.527319][T13834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.527331][T13834] Call Trace: [ 237.527339][T13834] [ 237.527347][T13834] dump_stack_lvl+0x16c/0x1f0 [ 237.527376][T13834] should_fail_ex+0x512/0x640 [ 237.527405][T13834] _copy_from_user+0x2e/0xd0 [ 237.527432][T13834] kstrtouint_from_user+0xd6/0x1d0 [ 237.527454][T13834] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 237.527475][T13834] ? __lock_acquire+0xb8a/0x1c90 [ 237.527510][T13834] proc_fail_nth_write+0x83/0x250 [ 237.527531][T13834] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 237.527557][T13834] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 237.527575][T13834] vfs_write+0x29d/0x1150 [ 237.527599][T13834] ? __pfx___mutex_lock+0x10/0x10 [ 237.527623][T13834] ? __pfx_vfs_write+0x10/0x10 [ 237.527649][T13834] ? __fget_files+0x20e/0x3c0 [ 237.527678][T13834] ksys_write+0x12a/0x250 [ 237.527696][T13834] ? __pfx_ksys_write+0x10/0x10 [ 237.527721][T13834] do_syscall_64+0xcd/0x4c0 [ 237.527748][T13834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.527766][T13834] RIP: 0033:0x7f248fd8d41f [ 237.527782][T13834] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 237.527800][T13834] RSP: 002b:00007f2490c2b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 237.527824][T13834] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f248fd8d41f [ 237.527836][T13834] RDX: 0000000000000001 RSI: 00007f2490c2b0a0 RDI: 0000000000000004 [ 237.527847][T13834] RBP: 00007f2490c2b090 R08: 0000000000000000 R09: 0000000000000000 [ 237.527858][T13834] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 237.527870][T13834] R13: 0000000000000000 R14: 00007f248ffb5fa0 R15: 00007ffdeb021ab8 [ 237.527895][T13834] [ 237.689055][ T6578] usb 10-1: USB disconnect, device number 21 [ 237.873452][T13872] nfsd: Unknown parameter '€…Ey`«cÀ`رYâM”·ýW½ê/' [ 237.876594][ T40] audit: type=1400 audit(1748540363.155:1097): avc: denied { mounton } for pid=13869 comm="syz.4.2290" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 238.001222][T13872] Process accounting resumed [ 238.030372][ T53] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 238.190267][ T53] usb 6-1: Using ep0 maxpacket: 16 [ 238.199441][ T53] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.203316][ T53] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 238.206212][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.220364][ T53] usb 6-1: config 0 descriptor?? [ 238.307145][T13890] lo speed is unknown, defaulting to 1000 [ 238.500973][ T5940] Bluetooth: hci0: command 0x0c1a tx timeout [ 238.633841][T13903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=13903 comm=syz.5.2299 [ 238.769256][T13919] netdevsim netdevsim5: Direct firmware load for ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ failed with error -2 [ 238.784173][T13919] netdevsim netdevsim5: Falling back to sysfs fallback for: ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ [ 238.880936][ T5975] usb 6-1: USB disconnect, device number 43 [ 239.668094][T13956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1554 sclass=netlink_route_socket pid=13956 comm=syz.1.2312 [ 239.674825][T13955] bridge7: entered promiscuous mode [ 239.807054][T13962] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 239.887690][T13966] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 239.955863][T13969] ip6t_srh: unknown srh match flags B153 [ 239.979470][ T5940] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 240.011525][ T5940] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 240.061857][T13979] bridge1: entered promiscuous mode [ 240.082088][T13981] @: renamed from vlan0 (while UP) [ 240.474231][ T5940] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 240.476835][T14004] usb usb9: usbfs: process 14004 (syz.4.2331) did not claim interface 0 before use [ 240.506167][T14007] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 240.649363][T14016] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 240.655325][T14016] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 240.659893][T14016] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 240.671305][T14015] __nla_validate_parse: 5 callbacks suppressed [ 240.671323][T14015] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2329'. [ 240.750941][T14027] netlink: 'syz.5.2339': attribute type 12 has an invalid length. [ 240.753464][T14027] netlink: 'syz.5.2339': attribute type 29 has an invalid length. [ 240.755724][T14027] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2339'. [ 240.958706][ T5940] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 240.960290][ T40] audit: type=1400 audit(1748540366.235:1098): avc: denied { shutdown } for pid=14038 comm="syz.5.2343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.171630][ T40] audit: type=1326 audit(1748540366.455:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.7.2329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf518e969 code=0x7fc00000 [ 241.189586][T14057] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 241.301202][T14057] /dev/sr0: Can't open blockdev [ 241.379782][T14072] policy can only be matched on NF_INET_PRE_ROUTING [ 241.379795][T14072] unable to load match [ 241.384711][T14058] /dev/sr0: Can't open blockdev [ 241.636296][ T40] audit: type=1400 audit(1748540366.915:1100): avc: denied { ioctl } for pid=14087 comm="syz.4.2360" path="socket:[55234]" dev="sockfs" ino=55234 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 241.956785][ T40] audit: type=1326 audit(1748540367.235:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14112 comm="syz.5.2369" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7106b8e969 code=0x0 [ 242.042017][T14114] support for the xor transformation has been removed. [ 242.322529][T14131] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2375'. [ 242.338341][ T40] audit: type=1400 audit(1748540367.615:1102): avc: denied { read } for pid=14133 comm="syz.4.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 242.352775][ T40] audit: type=1400 audit(1748540367.635:1103): avc: denied { getopt } for pid=14133 comm="syz.4.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 242.490068][T14142] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2379'. [ 242.493814][T14142] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2379'. [ 242.780183][ T10] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 242.881475][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2385'. [ 242.885200][T14162] tmpfs: Invalid gid '0x00000000ffffffff' [ 242.892104][T14162] pim6reg1: entered promiscuous mode [ 242.893812][T14162] pim6reg1: entered allmulticast mode [ 242.896352][T14162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2385'. [ 242.942484][ T10] usb 12-1: unable to get BOS descriptor or descriptor too short [ 242.947216][ T10] usb 12-1: config 8 has an invalid interface number: 135 but max is 0 [ 242.951211][ T10] usb 12-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 242.955194][ T10] usb 12-1: config 8 has no interface number 0 [ 242.955238][ T10] usb 12-1: config 8 interface 135 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 8 [ 242.962263][ T10] usb 12-1: config 8 interface 135 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 242.966337][ T10] usb 12-1: config 8 interface 135 altsetting 8 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 242.972329][ T10] usb 12-1: config 8 interface 135 altsetting 8 endpoint 0x82 has invalid maxpacket 26904, setting to 1024 [ 242.977183][ T10] usb 12-1: config 8 interface 135 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 242.981483][ T10] usb 12-1: config 8 interface 135 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 242.985879][ T10] usb 12-1: config 8 interface 135 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 242.989939][ T10] usb 12-1: config 8 interface 135 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 0 [ 242.994469][ T10] usb 12-1: config 8 interface 135 has no altsetting 0 [ 242.999585][ T10] usb 12-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=4f.58 [ 243.003576][ T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.006943][ T10] usb 12-1: Product: syz [ 243.008765][ T10] usb 12-1: Manufacturer: syz [ 243.010832][ T10] usb 12-1: SerialNumber: syz [ 243.011222][T14166] netlink: 'syz.1.2387': attribute type 21 has an invalid length. [ 243.017810][T14147] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 243.020379][ T5975] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 243.020675][T14147] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 243.025256][T14147] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 243.180802][ T837] usb 10-1: new low-speed USB device number 22 using dummy_hcd [ 243.190155][ T5975] usb 9-1: Using ep0 maxpacket: 8 [ 243.201236][ T5975] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.205302][ T5975] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.209417][ T5975] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.213991][ T5975] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.219129][ T5975] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 243.222313][ T5975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.232865][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2380'. [ 243.330541][ T837] usb 10-1: Invalid ep0 maxpacket: 16 [ 243.432387][ T5975] usb 9-1: GET_CAPABILITIES returned 0 [ 243.434175][ T5975] usbtmc 9-1:16.0: can't read capabilities [ 243.460189][ T837] usb 10-1: new low-speed USB device number 23 using dummy_hcd [ 243.630165][ T837] usb 10-1: Invalid ep0 maxpacket: 16 [ 243.632773][ T837] usb usb10-port1: attempt power cycle [ 243.638350][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.642787][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.645640][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.648646][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.651661][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.654744][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.658063][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.660937][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.663774][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.666576][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.669477][ C3] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.674094][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.676874][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.679630][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.682721][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.685578][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 243.688847][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2384'. [ 243.691794][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2384'. [ 243.695185][T14160] futex_wake_op: syz.4.2384 tries to shift op by -1; fix this program [ 243.702178][ T9] usb 9-1: USB disconnect, device number 21 [ 243.793226][ T10] sierra 12-1:8.135: Sierra USB modem converter detected [ 243.798173][ T10] usb 12-1: Sierra USB modem converter now attached to ttyUSB0 [ 243.802821][ T10] usb 12-1: Sierra USB modem converter now attached to ttyUSB1 [ 243.811828][ T10] usb 12-1: USB disconnect, device number 9 [ 243.819547][ T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 243.826805][ T10] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 243.830491][ T10] sierra 12-1:8.135: device disconnected [ 243.871868][ T5940] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 243.873585][T14184] binder: 14183:14184 ioctl c0306201 200000000280 returned -14 [ 243.971683][ T837] usb 10-1: new low-speed USB device number 24 using dummy_hcd [ 243.992188][ T837] usb 10-1: Invalid ep0 maxpacket: 16 [ 244.050663][T14194] openvswitch: netlink: EtherType 0 is less than min 600 [ 244.120477][ T837] usb 10-1: new low-speed USB device number 25 using dummy_hcd [ 244.141233][ T837] usb 10-1: Invalid ep0 maxpacket: 16 [ 244.147356][ T837] usb usb10-port1: unable to enumerate USB device [ 244.373190][ T40] audit: type=1400 audit(1748540369.655:1104): avc: denied { compute_member } for pid=14209 comm="syz.4.2399" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 244.390247][ T5973] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 244.517287][T14218] netlink: 'syz.7.2402': attribute type 1 has an invalid length. [ 244.543359][ T5973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.546688][ T5973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.549810][ T5973] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 244.551902][T14223] netlink: 'syz.7.2403': attribute type 10 has an invalid length. [ 244.553065][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.556154][T14223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.560436][ T5973] usb 6-1: config 0 descriptor?? [ 244.946111][T14251] program syz.7.2413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.952753][T14251] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 244.955366][T14251] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 244.958849][T14251] vhci_hcd vhci_hcd.0: Device attached [ 244.964669][T14251] program syz.7.2413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.965617][T14256] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(7) [ 244.970810][T14256] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 244.972529][T14249] wireguard0: entered allmulticast mode [ 244.972921][ T5973] elan 0003:04F3:0755.0026: unknown main item tag 0x0 [ 244.972939][ T5973] elan 0003:04F3:0755.0026: unknown main item tag 0x0 [ 244.972952][ T5973] elan 0003:04F3:0755.0026: unknown main item tag 0x0 [ 244.972964][ T5973] elan 0003:04F3:0755.0026: unknown main item tag 0x0 [ 244.972976][ T5973] elan 0003:04F3:0755.0026: unknown main item tag 0x0 [ 244.973310][ T5973] elan 0003:04F3:0755.0026: failed to start in urb: -90 [ 244.974373][T14256] vhci_hcd vhci_hcd.0: Device attached [ 244.974679][T14257] vhci_hcd: connection closed [ 244.974922][T14253] vhci_hcd: connection closed [ 244.981631][ T5940] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 244.981674][ T5940] Bluetooth: hci1: Injecting HCI hardware error event [ 244.982865][ T5940] Bluetooth: hci1: hardware error 0x00 [ 244.988072][ T5973] elan 0003:04F3:0755.0026: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 244.990150][ T1262] vhci_hcd: stop threads [ 244.990290][ T1262] vhci_hcd: release socket [ 244.990298][ T1262] vhci_hcd: disconnect device [ 244.990691][ T1262] vhci_hcd: stop threads [ 245.010955][ T1262] vhci_hcd: release socket [ 245.012402][ T1262] vhci_hcd: disconnect device [ 245.412716][ T40] audit: type=1400 audit(1748540370.695:1105): avc: denied { write } for pid=14277 comm="syz.4.2418" path="socket:[57647]" dev="sockfs" ino=57647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 245.421637][T14278] lo speed is unknown, defaulting to 1000 [ 245.499936][T14282] random: crng reseeded on system resumption [ 245.860167][ T6578] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 246.021514][ T6578] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 246.024348][ T6578] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 246.026876][ T6578] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 246.030202][ T6578] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 246.033755][ T6578] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 246.036983][ T6578] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 246.041018][ T6578] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 246.047416][ T6578] usb 9-1: string descriptor 0 read error: -22 [ 246.049423][ T6578] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 246.053652][ T6578] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.057319][ T6578] usb 9-1: config 0 descriptor?? [ 246.059999][ T6578] hub 9-1:0.0: bad descriptor, ignoring hub [ 246.062293][ T6578] hub 9-1:0.0: probe with driver hub failed with error -5 [ 246.064999][ T40] audit: type=1400 audit(1748540371.345:1106): avc: denied { ioctl } for pid=14318 comm="syz.5.2430" path="socket:[58780]" dev="sockfs" ino=58780 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 246.074157][ T6578] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input25 [ 246.153997][T14325] fuseblk: Unknown parameter 'ff' [ 246.164129][ T40] audit: type=1400 audit(1748540371.445:1107): avc: denied { listen } for pid=14324 comm="syz.5.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.216357][ T40] audit: type=1400 audit(1748540371.495:1108): avc: denied { accept } for pid=14324 comm="syz.5.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 246.236887][T14327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63760 sclass=netlink_route_socket pid=14327 comm=syz.7.2432 [ 246.261651][T14327] netlink: 'syz.7.2432': attribute type 12 has an invalid length. [ 246.299269][ T5979] usb 9-1: USB disconnect, device number 22 [ 246.323707][ T40] audit: type=1400 audit(1748540371.595:1109): avc: denied { map } for pid=14330 comm="syz.5.2433" path="socket:[60498]" dev="sockfs" ino=60498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 246.518417][T14350] openvswitch: netlink: Missing key (keys=40, expected=80) [ 246.523110][ T40] audit: type=1400 audit(1748540371.805:1110): avc: denied { ioctl } for pid=14349 comm="syz.7.2439" path="socket:[60526]" dev="sockfs" ino=60526 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 246.536523][ T40] audit: type=1400 audit(1748540371.815:1111): avc: denied { ioctl } for pid=14351 comm="syz.5.2440" path="socket:[59809]" dev="sockfs" ino=59809 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 246.582705][T14355] __nla_validate_parse: 2 callbacks suppressed [ 246.582715][T14355] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2441'. [ 246.589019][T14357] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2441'. [ 246.629283][T14359] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2442'. [ 246.847939][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2444'. [ 246.891401][ T5975] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 247.041597][ T5975] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 247.045002][ T5975] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.047904][ T5975] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.050271][ T5940] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 247.053844][T14359] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 247.058276][ T5975] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 247.269095][ T5979] usb 12-1: USB disconnect, device number 10 [ 247.491638][T14408] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 247.623120][ T40] audit: type=1400 audit(1748540372.905:1112): avc: denied { mounton } for pid=14414 comm="syz.5.2452" path="/305/file0/file0" dev="bpf" ino=59904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=file permissive=1 [ 247.635569][ T40] audit: type=1400 audit(1748540372.915:1113): avc: denied { open } for pid=14419 comm="syz.4.2454" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=58846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 247.744456][T14424] syz.4.2455: attempt to access beyond end of device [ 247.744456][T14424] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 247.748851][T14424] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 248.110288][ T5975] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 248.282645][ T5975] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.287366][ T5975] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.291798][ T5975] usb 12-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 248.294851][ T5975] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.298805][ T5975] usb 12-1: config 0 descriptor?? [ 248.505028][ T5975] usbhid 12-1:0.0: can't add hid device: -71 [ 248.507074][ T5975] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 248.511022][ T5975] usb 12-1: USB disconnect, device number 11 [ 248.950138][ T5975] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 249.100277][ T5975] usb 12-1: Using ep0 maxpacket: 32 [ 249.104308][ T5975] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.108861][ T5975] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.113587][ T5975] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 249.117586][ T5975] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.123435][ T5975] usb 12-1: config 0 descriptor?? [ 249.132538][ T5975] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 249.139510][ T5975] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 249.327954][T14433] ldusb 12-1:0.0: Couldn't submit interrupt_in_urb -90 [ 249.332604][ T40] audit: type=1400 audit(1748540374.615:1114): avc: denied { read open } for pid=14432 comm="syz.7.2459" path="/" dev="configfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.333628][ T5975] usb 12-1: USB disconnect, device number 12 [ 249.343542][ T5975] ldusb 12-1:0.0: LD USB Device #0 now disconnected [ 249.679242][T14441] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2461'. [ 250.065505][ T40] audit: type=1400 audit(1748540375.345:1115): avc: denied { setopt } for pid=14453 comm="syz.7.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 250.406115][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2470'. [ 250.408234][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2470'. [ 250.500473][ T10] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 250.667939][ T5975] usb 6-1: USB disconnect, device number 44 [ 250.684026][ T10] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 250.687358][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.690921][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.693939][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 250.698876][ T10] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 250.702255][ T10] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 250.704918][ T10] usb 9-1: Manufacturer: syz [ 250.710224][ T10] usb 9-1: config 0 descriptor?? [ 250.991126][T14505] mkiss: ax0: crc mode is auto. [ 251.097848][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 251.097859][ T40] audit: type=1400 audit(1748540376.375:1119): avc: denied { listen } for pid=14514 comm="syz.7.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 251.124146][ T10] appleir 0003:05AC:8243.0027: unknown main item tag 0x0 [ 251.126723][ T10] appleir 0003:05AC:8243.0027: No inputs registered, leaving [ 251.139615][ T10] appleir 0003:05AC:8243.0027: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 251.154518][T14520] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 251.234999][T14533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.301671][T14527] program syz.5.2492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.306336][T14527] netlink: zone id is out of range [ 251.308515][T14527] netlink: zone id is out of range [ 251.310275][T14546] macvlan0: entered promiscuous mode [ 251.311741][T14527] netlink: zone id is out of range [ 251.313043][T14546] macvlan0: entered allmulticast mode [ 251.315047][T14527] netlink: zone id is out of range [ 251.319620][T14546] veth1_vlan: entered allmulticast mode [ 251.321953][T14527] tmpfs: Bad value for 'mpol' [ 251.549573][ T40] audit: type=1326 audit(1748540376.825:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14567 comm="syz.7.2503" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cf518e969 code=0x0 [ 251.643609][ T5975] usb 9-1: USB disconnect, device number 23 [ 252.078077][T14585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2507'. [ 252.188208][ T40] audit: type=1400 audit(1748540377.465:1121): avc: denied { connect } for pid=14588 comm="syz.4.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 252.568846][T14610] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 253.600299][T14605] syzkaller1: entered promiscuous mode [ 253.765244][T14630] fuse: Bad value for 'fd' [ 253.860276][ T837] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 253.880221][ T6578] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 253.937318][ T5938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.943272][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.946618][ T5938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.951424][ T5938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.955241][ T5938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.973737][T14634] lo speed is unknown, defaulting to 1000 [ 254.021479][ T837] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 254.025446][ T837] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.028812][ T837] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.032780][ T837] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 254.037682][ T837] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 254.040969][ T837] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 254.043483][ T837] usb 10-1: Manufacturer: syz [ 254.046251][ T837] usb 10-1: config 0 descriptor?? [ 254.052603][ T6578] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 254.056788][ T6578] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.061053][ T6578] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.062910][T14634] chnl_net:caif_netlink_parms(): no params data found [ 254.064725][ T6578] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 254.073480][ T6578] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 254.076953][ T6578] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 254.080080][ T6578] usb 9-1: Manufacturer: syz [ 254.086662][ T6578] usb 9-1: config 0 descriptor?? [ 254.155067][T14634] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.158304][T14634] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.161450][T14634] bridge_slave_0: entered allmulticast mode [ 254.164572][T14634] bridge_slave_0: entered promiscuous mode [ 254.168504][T14634] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.171058][T14634] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.173683][T14634] bridge_slave_1: entered allmulticast mode [ 254.176311][T14634] bridge_slave_1: entered promiscuous mode [ 254.213245][ T5883] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 254.222734][T14634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.229445][T14634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.275554][T14634] team0: Port device team_slave_0 added [ 254.281182][T14634] team0: Port device team_slave_1 added [ 254.321962][T14634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.324721][T14634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.335452][T14634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.341055][T14634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.343692][T14634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.352613][T14634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.370575][ T5883] usb 12-1: Using ep0 maxpacket: 32 [ 254.373691][ T5883] usb 12-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 254.376571][ T5883] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.383700][ T5883] usb 12-1: config 0 descriptor?? [ 254.390187][ T5883] as10x_usb: device has been detected [ 254.392535][ T5883] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 254.406989][ T5883] usb 12-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 254.429823][T14634] hsr_slave_0: entered promiscuous mode [ 254.433046][T14634] hsr_slave_1: entered promiscuous mode [ 254.436034][T14634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.437030][ T5883] as10x_usb: error during firmware upload part1 [ 254.439460][T14634] Cannot create hsr debugfs directory [ 254.441555][ T5883] Registered device nBox DVB-T Dongle [ 254.455995][ T837] appleir 0003:05AC:8243.0028: unknown main item tag 0x0 [ 254.460236][ T837] appleir 0003:05AC:8243.0028: No inputs registered, leaving [ 254.467295][ T837] appleir 0003:05AC:8243.0028: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 254.496471][ T6578] appleir 0003:05AC:8243.0029: unknown main item tag 0x0 [ 254.500089][ T6578] appleir 0003:05AC:8243.0029: No inputs registered, leaving [ 254.504769][ T6578] appleir 0003:05AC:8243.0029: hiddev2,hidraw2: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 254.621230][ T5973] usb 12-1: USB disconnect, device number 13 [ 254.640112][ T5973] Unregistered device nBox DVB-T Dongle [ 254.641414][ T5973] as10x_usb: device has been disconnected [ 254.696172][ T837] usb 9-1: USB disconnect, device number 24 [ 254.995800][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.258647][T14652] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 255.301622][ T1174] bond0 (unregistering): Released all slaves [ 255.311626][ T1174] bond1 (unregistering): Released all slaves [ 255.322243][ T1174] bond2 (unregistering): Released all slaves [ 255.343268][ T1174] bond3 (unregistering): Released all slaves [ 255.349766][ T1174] bond4 (unregistering): Released all slaves [ 255.384023][T14660] netlink: 'syz.7.2532': attribute type 3 has an invalid length. [ 255.386531][T14660] netlink: 'syz.7.2532': attribute type 1 has an invalid length. [ 255.388948][T14660] netlink: 220 bytes leftover after parsing attributes in process `syz.7.2532'. [ 255.423922][ T1174] : left promiscuous mode [ 255.459655][T14662] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2533'. [ 255.462929][T14662] netlink: 'syz.7.2533': attribute type 30 has an invalid length. [ 255.470461][T14662] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.473101][T14662] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.476111][T14662] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.479289][T14662] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.497493][ T1174] tipc: Left network mode [ 255.598110][ T10] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 255.636998][ T1174] hsr_slave_0: left promiscuous mode [ 255.639257][ T1174] hsr_slave_1: left promiscuous mode [ 255.754215][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 255.769300][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.773514][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 255.784607][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 255.789040][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 255.794486][ T10] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 255.798210][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.807014][ T10] hub 9-1:1.0: bad descriptor, ignoring hub [ 255.814594][ T10] hub 9-1:1.0: probe with driver hub failed with error -5 [ 255.822607][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 255.824221][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 255.830734][ T10] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 255.832521][ T10] cdc_wdm 9-1:1.0: Unknown control protocol [ 256.064768][ T5938] Bluetooth: hci2: command tx timeout [ 256.075655][T14666] ================================================================== [ 256.078062][T14666] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x21d2/0x43c0 [ 256.080584][T14666] Write of size 1280 at addr ffffc90005edebe1 by task vivid-000-vid-c/14666 [ 256.082852][ T40] audit: type=1400 audit(1749064669.316:1122): avc: denied { write } for pid=5918 comm="syz-executor" path="pipe:[5263]" dev="pipefs" ino=5263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 256.084575][T14666] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 256.084584][T14666] CPU: 0 UID: 0 PID: 14666 Comm: vivid-000-vid-c Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 256.084598][T14666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 256.084606][T14666] Call Trace: [ 256.084611][T14666] [ 256.084615][T14666] dump_stack_lvl+0x116/0x1f0 [ 256.084636][T14666] print_report+0xcd/0x680 [ 256.084649][T14666] ? __virt_addr_valid+0x81/0x610 [ 256.084662][T14666] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 256.084677][T14666] kasan_report+0xe0/0x110 [ 256.084690][T14666] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 256.084706][T14666] kasan_check_range+0x100/0x1b0 [ 256.084722][T14666] __asan_memcpy+0x3c/0x60 [ 256.084732][T14666] tpg_fill_plane_buffer+0x21d2/0x43c0 [ 256.084753][T14666] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 256.084770][T14666] vivid_fillbuff+0x8d2/0x4250 [ 256.084787][T14666] ? do_raw_spin_lock+0x12c/0x2b0 [ 256.084801][T14666] ? __pfx_vivid_fillbuff+0x10/0x10 [ 256.084819][T14666] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 256.084830][T14666] ? lockdep_hardirqs_on+0x7c/0x110 [ 256.084844][T14666] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 256.084858][T14666] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 256.084874][T14666] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 256.084890][T14666] vivid_thread_vid_cap+0x454/0xda0 [ 256.084906][T14666] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 256.084922][T14666] ? do_raw_spin_lock+0x12c/0x2b0 [ 256.084931][T14666] ? find_held_lock+0x2b/0x80 [ 256.084943][T14666] ? rcu_is_watching+0x12/0xc0 [ 256.084955][T14666] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 256.084967][T14666] ? lockdep_hardirqs_on+0x7c/0x110 [ 256.084980][T14666] ? __kthread_parkme+0x19e/0x250 [ 256.084995][T14666] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 256.085009][T14666] kthread+0x3c2/0x780 [ 256.085025][T14666] ? __pfx_kthread+0x10/0x10 [ 256.085041][T14666] ? rcu_is_watching+0x12/0xc0 [ 256.085052][T14666] ? __pfx_kthread+0x10/0x10 [ 256.085068][T14666] ret_from_fork+0x5d4/0x6f0 [ 256.085082][T14666] ? __pfx_kthread+0x10/0x10 [ 256.085098][T14666] ret_from_fork_asm+0x1a/0x30 [ 256.085112][T14666] [ 256.085116][T14666] [ 256.156230][T14666] The buggy address belongs to the virtual mapping at [ 256.156230][T14666] [ffffc90005ed7000, ffffc90005ee0000) created by: [ 256.156230][T14666] vb2_vmalloc_alloc+0x135/0x3f0 [ 256.161497][T14666] [ 256.162379][T14666] The buggy address belongs to the physical page: [ 256.164879][T14666] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ee75 [ 256.168291][T14666] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 256.171028][T14666] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 256.174475][T14666] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 256.178016][T14666] page dumped because: kasan: bad access detected [ 256.180671][T14666] page_owner tracks the page as allocated [ 256.183018][T14666] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 14665, tgid 14657 (syz.4.2531), ts 256067882787, free_ts 255486994613 [ 256.190430][T14666] post_alloc_hook+0x1c0/0x230 [ 256.191931][T14666] get_page_from_freelist+0x135c/0x3950 [ 256.193613][T14666] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 256.195447][T14666] alloc_pages_mpol+0x1fb/0x550 [ 256.196950][T14666] alloc_pages_noprof+0x131/0x390 [ 256.198440][T14666] __vmalloc_node_range_noprof+0x732/0x1520 [ 256.200245][T14666] vmalloc_user_noprof+0x9e/0xe0 [ 256.201756][T14666] vb2_vmalloc_alloc+0x135/0x3f0 [ 256.203290][T14666] __vb2_queue_alloc+0x8c6/0x1280 [ 256.204840][T14666] vb2_core_reqbufs+0xa90/0xfe0 [ 256.206371][T14666] __vb2_init_fileio+0x3f1/0x1100 [ 256.207917][T14666] __vb2_perform_fileio+0x9c2/0x1660 [ 256.209537][T14666] vb2_fop_read+0x215/0x3e0 [ 256.210947][T14666] v4l2_read+0x226/0x360 [ 256.212310][T14666] vfs_read+0x1e4/0xc60 [ 256.213595][T14666] ksys_read+0x12a/0x250 [ 256.214887][T14666] page last free pid 6578 tgid 6578 stack trace: [ 256.216792][T14666] __free_frozen_pages+0x7fe/0x1180 [ 256.218412][T14666] vfree+0x176/0xa40 [ 256.219681][T14666] delayed_vfree_work+0x56/0x70 [ 256.221184][T14666] process_one_work+0x9cc/0x1b70 [ 256.223048][T14666] worker_thread+0x6c8/0xf10 [ 256.225003][T14666] kthread+0x3c2/0x780 [ 256.226737][T14666] ret_from_fork+0x5d4/0x6f0 [ 256.228302][T14666] ret_from_fork_asm+0x1a/0x30 [ 256.229796][T14666] [ 256.230550][T14666] Memory state around the buggy address: [ 256.232281][T14666] ffffc90005edef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 256.234708][T14666] ffffc90005edef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 256.237168][T14666] >ffffc90005edf000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 256.239617][T14666] ^ [ 256.240875][T14666] ffffc90005edf080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 256.243385][T14666] ffffc90005edf100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 256.245815][T14666] ================================================================== [ 256.250942][ T6578] usb 9-1: USB disconnect, device number 25 [ 256.263583][T14666] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 256.265851][T14666] CPU: 0 UID: 0 PID: 14666 Comm: vivid-000-vid-c Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 256.269522][T14666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 256.272873][T14666] Call Trace: [ 256.273934][T14666] [ 256.274881][T14666] dump_stack_lvl+0x3d/0x1f0 [ 256.276312][T14666] panic+0x71c/0x800 [ 256.277530][T14666] ? __pfx_panic+0x10/0x10 [ 256.278943][T14666] ? irqentry_exit+0x3b/0x90 [ 256.280356][T14666] ? lockdep_hardirqs_on+0x7c/0x110 [ 256.281980][T14666] ? preempt_schedule_thunk+0x16/0x30 [ 256.283622][T14666] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 256.285348][T14666] ? preempt_schedule_common+0x44/0xc0 [ 256.287037][T14666] ? check_panic_on_warn+0x1f/0xb0 [ 256.288609][T14666] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 256.290382][T14666] check_panic_on_warn+0xab/0xb0 [ 256.291923][T14666] end_report+0x107/0x170 [ 256.293239][T14666] kasan_report+0xee/0x110 [ 256.294634][T14666] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 256.296347][T14666] kasan_check_range+0x100/0x1b0 [ 256.297886][T14666] __asan_memcpy+0x3c/0x60 [ 256.299264][T14666] tpg_fill_plane_buffer+0x21d2/0x43c0 [ 256.300943][T14666] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 256.302713][T14666] vivid_fillbuff+0x8d2/0x4250 [ 256.304186][T14666] ? do_raw_spin_lock+0x12c/0x2b0 [ 256.305779][T14666] ? __pfx_vivid_fillbuff+0x10/0x10 [ 256.307374][T14666] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 256.309059][T14666] ? lockdep_hardirqs_on+0x7c/0x110 [ 256.310667][T14666] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 256.312484][T14666] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 256.314246][T14666] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 256.316006][T14666] vivid_thread_vid_cap+0x454/0xda0 [ 256.317612][T14666] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 256.319380][T14666] ? do_raw_spin_lock+0x12c/0x2b0 [ 256.320942][T14666] ? find_held_lock+0x2b/0x80 [ 256.322354][T14666] ? rcu_is_watching+0x12/0xc0 [ 256.323773][T14666] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 256.325509][T14666] ? lockdep_hardirqs_on+0x7c/0x110 [ 256.327100][T14666] ? __kthread_parkme+0x19e/0x250 [ 256.328647][T14666] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 256.330403][T14666] kthread+0x3c2/0x780 [ 256.331666][T14666] ? __pfx_kthread+0x10/0x10 [ 256.333229][T14666] ? rcu_is_watching+0x12/0xc0 [ 256.334727][T14666] ? __pfx_kthread+0x10/0x10 [ 256.336139][T14666] ret_from_fork+0x5d4/0x6f0 [ 256.337526][T14666] ? __pfx_kthread+0x10/0x10 [ 256.338922][T14666] ret_from_fork_asm+0x1a/0x30 [ 256.340387][T14666] [ 256.341865][T14666] Kernel Offset: disabled [ 256.343164][T14666] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:39:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8557f6b5 RDI=ffffffff9ae67620 RBP=ffffffff9ae675e0 RSP=ffffc90003747158 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000065 R14=ffffffff9ae675e0 R15=ffffffff8557f650 RIP=ffffffff8557f6df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6974000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1294772774 CR3=0000000032c42000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0023766564646968 2f6273752f766564 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7106c11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7106c11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7106c11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7106c11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7106c11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7106c11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 220065488bc844b9 a7ccdce90ad011fe 7f4349a85c1ce09a bfaa10e835962e75 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b2ee5680c894d4e 71032a8669b02a76 60fdac6e3e352a49 a521044d725bac65 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d21fa37a5619032 655efcf067a2fbbd 79e05244c210af34 df774f3fd45e365f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0562cd418b36c62e 15280e72d440d154 b7a6a6f37ad4ad6b 89f811026ce9224c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49d527a394eb630a e465cab387e5141b 3330b317ffd44d28 5f0333b2d13a59fc ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d70562cd418b36c6 2e15280e72d440d1 54b7a6a6f37ad4ad 6b89f811026ce922 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c4d21fa37a56190 32655efcf067a2fb bd79e05244c210af 34df774f3fd45e36 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f2b2ee5680c894d 4e71032a8669b02a 7660fdac6e3e352a 49a521044d725bac ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff82170bc4 RBX=ffffc900006a07f8 RCX=ffffc900006a074c RDX=1ffff920000d4108 RSI=ffffffff82170bc4 RDI=ffffc900006a08b8 RBP=ffffc900006a0888 RSP=ffffc900006a07f0 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=00000000000121cb R12=ffffffff81a6e1b0 R13=ffffc900006a08b8 R14=0000000000000000 R15=ffff88801dab2440 RIP=ffffffff81a6e1b0 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a74000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000857000 CR3=0000000032c42000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0023766564646968 2f6273752f766564 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7106c11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7106c11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7106c11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7106c11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7106c11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7106c11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 220065488bc844b9 a7ccdce90ad011fe 7f4349a85c1ce09a bfaa10e835962e75 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b2ee5680c894d4e 71032a8669b02a76 60fdac6e3e352a49 a521044d725bac65 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d21fa37a5619032 655efcf067a2fbbd 79e05244c210af34 df774f3fd45e365f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0562cd418b36c62e 15280e72d440d154 b7a6a6f37ad4ad6b 89f811026ce9224c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49d527a394eb630a e465cab387e5141b 3330b317ffd44d28 5f0333b2d13a59fc ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d70562cd418b36c6 2e15280e72d440d1 54b7a6a6f37ad4ad 6b89f811026ce922 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c4d21fa37a56190 32655efcf067a2fb bd79e05244c210af 34df774f3fd45e36 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f2b2ee5680c894d 4e71032a8669b02a 7660fdac6e3e352a 49a521044d725bac ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=00000000000000ef RCX=ffffffff819af5b2 RDX=ffff88801f2a0000 RSI=ffffffff819af5a0 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000078fb98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920000f1f75 R13=0000000000000200 R14=ffff88803c702440 R15=ffffc9000078fc60 RIP=ffffffff819af5a2 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b74000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f31521d4f98 CR3=0000000032c42000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3154411a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3154411a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3154411a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3154411aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3154411b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3154411c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000376f65 6469762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000144c46 474a550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff822d99cb RBX=ffffea000171b0c0 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8e3c27c0 RBP=ffffffff8dd08440 RSP=ffffc900040b7750 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffea000171b0c0 R13=0000000000000001 R14=ffff88802ebc8661 R15=0000000000000065 RIP=ffffffff822d99d7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c74000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc0d3ee7d60 CR3=00000000322bc000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000000b DR2=0000000000000002 DR3=0000000000000009 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc0d33836a3 00007fc0d33836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd022e4a30 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555587839c6a 0000555587839ae0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555878309c5 0000555587830900 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060171b01c808080 8204880022dc0302 d4020022da03aaaa aaaaaa01ffffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104808010000210 00238004060174aa 0023766564627573 2d6c34762f766564 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f01ffffffffffff ffffdd082380030f ffffffffffff0422 8004641000060171 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b01c808080820488 0022dc0302d40200 22da03aaaaaaaaaa 01ffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fff50822d0030004 880022c8038fe9a3 82eb7e0c0822bc03 0404840022b80308 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000