last executing test programs: 57.313907918s ago: executing program 0 (id=109): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000)={0x46}, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000040)="5edefc8aef53de10fa2baabde064d4099f1cc088a91c2ebb6ddc09fb4e1414ddcdf0092cdc18f793669db926ce53a4f9f5481c28e50f9ae36b4695d9390f696d1d2dedb5ab8c69d518b843ece2f4f30811fb20a2b404317abe2d54f98d245db17f3a651a9bf06606c3a553510d641e4aaec6783f7ec6789769981f8e64461e76489994e30ca8c179c1bac5658be68b7ec3f5f10a349f1fb95c1947", 0x9b) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 57.313467155s ago: executing program 0 (id=110): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600006, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00003c9000/0x3000)=nil, 0x2) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x300}, {}]}}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d00e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x1, 0x0, 0x15}, &(0x7f0000000740)=0x40) writev(r1, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r0, r1, 0x0) 57.213271156s ago: executing program 0 (id=111): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x1010044, &(0x7f0000000000)={[{@nofavordynmods}]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1d, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') 56.463874192s ago: executing program 0 (id=120): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x80, 0x5b81, 0x0, 0x0, 0x8001, 0x9, 0x0, 0x7, 0xde}) r1 = syz_clone(0x4a080, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) setpgid(r1, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0xa) 56.409142694s ago: executing program 0 (id=122): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000000a, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x12, 0x1, 0x0, "c175f0b781eddc96e6d941c3a7f9582753f9ffff8cbae2850c67ea00"}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000003200)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf25080001000000000008004400", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) (async) r3 = socket(0x2, 0x80805, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x1dc, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x1c0, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30342b33}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf79a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f488804}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf122}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c769746}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fef730b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x417af6e3}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2af15ae0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13c6ed92}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x474dd44f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x319ba9d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e7d78bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xddba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71925319}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6599}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5cf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d7b907e}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e13d1a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae25}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x311f1b10}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x735673f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14574f2c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x241c8816}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe53d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67d3de4}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3123f14d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x602924bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x219144af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x622d5199}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16544d01}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a3e01b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f0d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf475}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3075}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa72f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x316f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45921365}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x93e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6adbdad5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xcfa71c7}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7741837f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6913cd5d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x35f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabcd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x149b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1dc}, 0x1, 0x0, 0x0, 0xc800}, 0x4000044) (async) sendmmsg$inet(r3, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="9917b1ad3d06a27855d01141e914353e8c663ed1065e32301b8acd1815ed897020c9092fe19ef95bd3c69397d675e3c19835f4c930a9bcbd49c4d872b7679a32e22015d7df39001b2d750fe2484101ef67cb628910e4cde2d8285b9017f55e84b67b72840813a8d080b71200f197d5b65f243ac4ac17d0cba3d08c98ceedf43365fc78aa0f52585ef7d8d525c049e1ae193a110f2dcfce4e6114b15de04b2720d6bd946506004cf479e742dcf73534e370150d97a55b559b5a1bedbc9290cbcac428f960e016fb88cfc21d86da2974ec3f2632992a27a4e5864623e05722eb07d27139b45171ec0cefa44e98f05dd4ff957056265edbacd81a611e4dfacb2b4879517e00c52e84728b1de1193bc88e509860ff143fc216c5100c41667a3ba5b157db616145a6d5ddb592e6b9589cdc93e3e8ef63da3cb4033d9f676cec3dcbb003ae54940e30203e1dc7b939c9c32029ad645b46ee269892e7a786bd36c2f7d962aad3b8d6e9d946adfa984a52cf7d35c5b2f492ab267c1ca948a5c0323d628364a612004c1c7feb2671a984f4dc05330a968e4b8cbe9200f111597c8ecc7ea7681ec281e168edbadc83d98de2b0dda7b187f509e487d63300932f3c76a1b66b4e01dffb07b4c80b5f5273a84b3cb0732b691738bba87517d53cf2b88b481cb325b8b912f54cee9d2546f2fdb96931bda2821eb66554abd4a21a8281c3c461df633a97f5cb3cf924fb324782399df0dc72d18d22b320e605dddf1123417dffc6452835a63fca230fbb002fd9c204b0819c56c4ce398423518b59dc8220bbf0c8b66f54c8009f1170f4c5582bfc703938bdf4d88ffe3eb87f4d2a62d442bb08ba405e11984c919fed63f9e86fd16c00843fa07cd9170919f4d07a12ad38db3f9effcfe1d631a48150e33ce07b3516fefab9587043a908dac8b0ffe361ec8e0fe7531f6d6d858cdabf7600f3a2bd90bce672cba7d366ae4ac6e33813f18340349422230cfe1d8c5757eb139321d44b57159089c68c13d7806cdbebeb42953f6f1670a313278a13076defab61b2016cf636ed37c7e7e1c49a4fb1d6a3d249e189087b37e724b6b24824bce4f77ab6f8a8d2f571d23c5120d75440e8eeda120467b5046b316e39aea9b6c7fa65eb4db56a3fed78c25fcde3afa956dee186fcad0b83f3d50a153f269113f5d9f1ccdff5ba86390c95b3a4ac782cd1121253f728b9b28a3cf59ebd82b0439d2f439e9cd00ca11a3f73515b6256b0faa56063ab761d5860a002c27fede7ce87b6336a4a146f2286ee32bb12e5a8bef04ba8cdb901c602a80eec7e74c947f88f6939ad240db8bc4baf655b941d1fc166fcbd2a64b5691e9145847ebc3ff5f8c07b8265c00176fa4617b6b7249aa801a090d4c65e36cfbbbca28913a892c3a7dd856fdf1f9a7279acfeee9fe51d14f87e4928f07f80145f54afb9a94fce7e76d38b64858327883b8f7141ccac8de649b7eb216d1b6c63f6d4d56dd9f11a2b36a6b3913917c378931e1ba3ec16aec67ef2bab2f1336a6990f7a78ab8acbc81d4ef49dc9bf02e6bae05118c706aeafa332e785ab59140d41ec0d00261ef9dd1735e19954cf1e8042b84185fa8bea4878e22ae53841b9c9752c950e5b21c7e7212b0297f22675cf8baae246e3c46a33e7228633954253add2592dbb7335b24569c834977a53ef23a84f7819deabd2c499422f23e7b682dc7f81b5d47b2ed330b83bb4f6c8f976539a8bf0d1f9b88d534c672d329ba41009f75c928ede7", 0x4e4}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30800100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r6, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff}]}, 0x34}}, 0x4000050) 56.142631335s ago: executing program 0 (id=124): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000f2000040"]) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendfile(r1, r3, 0x0, 0x8000002b) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x101001, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000400)={0x9e0000, 0x1, 0x81, r7, 0x0, &(0x7f00000003c0)={0x99032d, 0x92, '\x00', @string=&(0x7f0000000380)=0x7}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x20, 0x84, 0x77, 0xfffff03c}, {0x6, 0x4, 0xe6, 0x1}]}, 0x10) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r9 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "f700", '\x00\x00\a\x00', "480100", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$SIOCAX25CTLCON(r8, 0x89e8, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x8, 0xfffffffffffffff5, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001f00), r14) sendmsg$NLBL_UNLABEL_C_STATICLIST(r14, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002200)={0x14, r15, 0x301, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040) sendmsg$NL80211_CMD_DEL_KEY(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010003000000000000699600000008000300", @ANYRES32=r13, @ANYBLOB="2400508004"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="ff0f28c67691e32cecd85ee95f0000", @ANYRES16=r12, @ANYBLOB="000827bd7000fddbdf250b00000008000300", @ANYRES32=r13, @ANYBLOB="0a00060008021100000000002c006e800400020004000200040001000400020004000100040001000400020004000200040001000400020004000b0020006e800400020004000100040001000400020004000200040001000400020011000700a1d64caf9213356625933215b9000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) 56.118809174s ago: executing program 32 (id=124): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000f2000040"]) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendfile(r1, r3, 0x0, 0x8000002b) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x101001, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000400)={0x9e0000, 0x1, 0x81, r7, 0x0, &(0x7f00000003c0)={0x99032d, 0x92, '\x00', @string=&(0x7f0000000380)=0x7}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x20, 0x84, 0x77, 0xfffff03c}, {0x6, 0x4, 0xe6, 0x1}]}, 0x10) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r9 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "f700", '\x00\x00\a\x00', "480100", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$SIOCAX25CTLCON(r8, 0x89e8, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x8, 0xfffffffffffffff5, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001f00), r14) sendmsg$NLBL_UNLABEL_C_STATICLIST(r14, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002200)={0x14, r15, 0x301, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040) sendmsg$NL80211_CMD_DEL_KEY(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010003000000000000699600000008000300", @ANYRES32=r13, @ANYBLOB="2400508004"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="ff0f28c67691e32cecd85ee95f0000", @ANYRES16=r12, @ANYBLOB="000827bd7000fddbdf250b00000008000300", @ANYRES32=r13, @ANYBLOB="0a00060008021100000000002c006e800400020004000200040001000400020004000100040001000400020004000200040001000400020004000b0020006e800400020004000100040001000400020004000200040001000400020011000700a1d64caf9213356625933215b9000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) 23.883154415s ago: executing program 3 (id=554): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0xab6b0a96defb6e1c) sendmmsg$inet(r0, &(0x7f0000001880)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="e5f39689d6d1d0a245768a2a5adee9318f53b8dc738d4c36ec279c935accac2d1bc73fa22afa3c787854b1e52fc77424047b77796e9db9bc4c1fcfa32c3051dcdc870beb644ab7de4e5710554d05b83ceebf2fbfb03a16220c38258854190c94de7fcf264b1efeabfbe751bc2568d8b67c5f959973ad51e487421971125a9a3db2185abe74ed24212f1648b0776ee27817a2736794d202b8afcb9b36ddca78e2e295614cf18abc7ec352716282f508c67c267102438c410f88f8f49deec960965ed208c7975039ed", 0xc8}], 0x1}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000200)="74114ec47965ff76", 0x8}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="1ecd5c1aa9f4c12017eca13753be99f231d37ec891efe158a5b3aebe11", 0x1d}, {&(0x7f0000001280)="e4cc89d1651fdcb78a558d7b2fcd46fa26a2ef64ac7e2ed49da6bd86f4ae8e08a2ec1c92cb6e912f69d9fee0de8b32ff440b1b8176402154ffeac34e2df4497721aba6f92c663ab0ac87c12cfec2151eff291e002bd1379dcdf46be822dabce2014f17e99b04f2eec50da9dcb216f34a9ddfd85f37b8e2", 0x77}, {&(0x7f0000001300)="050b8a718ae883d89c53c303db89ecc0beeb7987a929969c5189e65ff73757360711ddd9", 0x24}, {&(0x7f0000001340)="ce6cacf3ca5552c9669d187c32092c09a2ee2fa98cdbed45379f0102b019e72797e034fdc8e465f508da1d731ffa2d1836ee7b1883c127cda3dcad5dd072874d15d4f5cd23e7dbdf816dee23ae8d35cb35916fab5e812216f79a908b4dc78adccb23cc683c5ed56048433c76793ab9f37ca8ce90b52eca78", 0x78}, {&(0x7f00000013c0)="46e0ca211640d5", 0x7}, {&(0x7f0000001400)="eba31e83740bfadd435a04286542aa9e70413ae7542912b327cf06b2e5cc74965566574f8bdda699d5bb703089f9cc23983b0db67bfcae277c5c38", 0x3b}], 0x8, &(0x7f00000014c0)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@generic={0x83, 0xc, "b0b583edb87baeaef298"}, @lsrr={0x83, 0xf, 0x1c, [@private=0xa010101, @multicast1, @rand_addr=0x64010101]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x78}}], 0x48}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001540)="fb1f17d603b247c7337aa076e500f1ee24a84cabbc1ddc273473c94b0863a19ff6de34cbf4eb4c01e95f5b09e8d1d9c08c2f18a5ab6f9a227524f529b9788ccd5d739c65317194daa204889497824cf92e197047e846690721dabc6275aecb1f86641833254aab00c5259e455d136449e5c16724b704081ca77304b5960a09c3bfa0", 0x82}, {&(0x7f0000001600)="d165f1d4f1d5ff3f97e8966869ded4ee0ac47c26d91ecdfa612761420f376cbf872ddb1fa7e7aba658a3847b76bb56effb1a050d9c02a011b988fa01ef19a8da23919b32aacaf521a2fe271da8a902293eb95038c8a82c8e53a29f7f83e93fdd5b7129979500b7513cbeb8113f48c9b19b36d548686d6cbab44759782e1a8020ccd90e7951c515306b732b8227f04e73d1a7b3b055545c58e64f09d7bfac3e99812b8604e78abc95a6427afe2d9617495d0f510d74d1e5f26caa75135032f32f982f59", 0xc3}, {&(0x7f0000001700)}, {&(0x7f0000001740)="15dd5644d2949c89a79ceb80de90f00f51b8a521e3c69ab2ad061f9d0cc58e7e50ba4e30f1f3206b824b02c7d6b72c85ab457de28a4b89ac0ce23a1b92fee2af40f73ed7249b209074429f31c24787", 0x4f}], 0x4, &(0x7f0000001800)=[@ip_retopts={{0x50, 0x0, 0x7, {[@noop, @ssrr={0x89, 0xf, 0xdf, [@multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x83, 0x7, "4f435d4184"}, @lsrr={0x83, 0x7, 0x8a, [@loopback]}, @lsrr={0x83, 0x17, 0x82, [@local, @local, @dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010101, @remote]}, @timestamp={0x44, 0x8, 0x82, 0x0, 0xf, [0xffffff00]}]}}}], 0x50}}], 0x3, 0x20008010) pipe2(&(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) landlock_create_ruleset(&(0x7f0000001980)={0x404a, 0x1, 0x1}, 0x18, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000019c0)=0x0) r4 = syz_pidfd_open(r3, 0x0) connect(r2, &(0x7f0000001a00)=@l2tp6={0xa, 0x0, 0xb8e, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x31, 0x2}, 0x80) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001a80), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002f00)={r1, 0xe0, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002c40)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000002c80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002cc0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000002d00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002d40), &(0x7f0000002d80), 0x8, 0xf, 0x8, 0x8, &(0x7f0000002dc0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003040)={0x18, 0x22, &(0x7f0000001ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000001c00)='syzkaller\x00', 0xfffffff1, 0x1000, &(0x7f0000001c40)=""/4096, 0x41000, 0xf, '\x00', r6, 0x0, r1, 0x8, &(0x7f0000002f40)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000002f80)={0x4, 0x9, 0x0, 0x8000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002fc0)=[r2], &(0x7f0000003000)=[{0x5, 0x2, 0xf, 0xb}], 0x10, 0x1, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r7, 0x1, 0x53, &(0x7f0000003100)={0x7, 0x7, 0x1}, &(0x7f0000003140)=0x28) r8 = syz_open_dev$swradio(&(0x7f0000003180), 0x1, 0x2) close_range(r8, r4, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000031c0)={'pim6reg0\x00', {0x2, 0x4e22, @rand_addr=0x64010102}}) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000003200), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000003240)={0x0, 0x8, 0x0, "42fe8685d90bc3c21dd76de049eb130491172b16a60663451c5c875a06cdf63d", 0x3136564e}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000032c0), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f00000033c0)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003380)={&(0x7f0000003300)={0x4c, r10, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) prlimit64(r3, 0x7, &(0x7f0000003400)={0x0, 0x400}, 0x0) getsockname$packet(r5, &(0x7f0000003440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003480)=0x14) bind$ax25(r5, &(0x7f00000034c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003800)={r5, 0xe0, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000003580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000035c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f0000003600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000003640), &(0x7f0000003680), 0x8, 0x91, 0x8, 0x8, &(0x7f00000036c0)}}, 0x10) syz_io_uring_setup(0x4fd3, &(0x7f0000003840)={0x0, 0xdf6b, 0x200, 0x1, 0x1a6, 0x0, r1}, &(0x7f00000038c0), &(0x7f0000003900)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000003940)=@IORING_OP_FADVISE={0x18, 0x74, 0x0, @fd_index=0x4, 0xc, 0x0, 0xee20, 0x0, 0x1, {0x0, r12}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000003980)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) fsopen(&(0x7f00000039c0)='gfs2meta\x00', 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000003a00)={'veth1_macvtap\x00', 0x400}) sched_setscheduler(r3, 0x2, &(0x7f0000003a40)=0x6) 23.882686903s ago: executing program 3 (id=555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0x12000021) (async, rerun: 64) r3 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) (async, rerun: 64) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000800) socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_req={{0x17, 0x4, 0x14}, {0x6, 0x1, 0x5, 0x5, [0x40, 0x5, 0x5, 0x6, 0x5, 0x81]}}}}, 0x21) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) 23.825082002s ago: executing program 3 (id=556): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_open_dev$video4linux(&(0x7f0000000600), 0xa, 0x60081) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000001cc0)={0x0, 0x0, 0x2, '\x00', &(0x7f0000001c80)=0x4}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000080000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c009900ff010000600000000500180120000000050019010c000000080026006c090000"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) dup3(r4, r0, 0x80000) 23.824323397s ago: executing program 3 (id=557): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/if_inet6\x00') pread64(r1, &(0x7f0000000300)=""/111, 0x6f, 0xc) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) r6 = getpid() setpgid(r3, r6) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file1\x00') r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=""/140, 0x8c) getdents64(r7, &(0x7f0000000180)=""/92, 0x5c) 23.707378643s ago: executing program 3 (id=558): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x40, 0x1, 0x40, 0x3, {{0x1e, 0x4, 0x0, 0x2, 0x78, 0x64, 0x0, 0x1, 0x4, 0x0, @broadcast, @loopback, {[@generic={0x94, 0x4, "c213"}, @rr={0x7, 0xf, 0x5f, [@empty, @loopback, @remote]}, @end, @rr={0x7, 0x17, 0x79, [@private=0xa010102, @rand_addr=0x64010101, @broadcast, @empty, @multicast2]}, @timestamp={0x44, 0x8, 0x4b, 0x0, 0x9, [0x8000]}, @rr={0x7, 0x17, 0xda, [@broadcast, @multicast1, @private=0xa010101, @multicast1, @multicast2]}, @ssrr={0x89, 0x17, 0x18, [@loopback, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095", @ANYBLOB="7f6a7a1217ef07503111527ceb5202301513f0ec7b5ae22463fe832bd35a05e10bc05b63e47b9a501df86c869965b943a00c369630dcc8a6fb82f426c29c7205438572db142ca3c5ca5d796c269dd2eef3ce305f674a3d5e724ca6578d7f3aa703122f36a7adcca8260db0e85f36c790", @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRESHEX=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0xfffffffffffffe05, 0x0, 0x0, 0x0, '\x00', r1, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r3}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 23.540222435s ago: executing program 3 (id=559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="0fc3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 57) 23.505334053s ago: executing program 33 (id=559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="0fc3"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 57) 16.214566554s ago: executing program 4 (id=646): r0 = getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c01000010001307000004000000000000000000000000000000ffff00000000fe8000000000000000000000000000aa00ffffffffffffff8000000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x13c}}, 0x0) r2 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000180)) 16.213063498s ago: executing program 4 (id=647): ioperm(0x0, 0x8001, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioperm(0x0, 0x80, 0x0) 16.115634475s ago: executing program 4 (id=648): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x20400) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x0, 0xc}) syz_emit_ethernet(0x846, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x0) 16.114489134s ago: executing program 4 (id=650): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f00000002c0)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 16.016045754s ago: executing program 4 (id=652): syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(0x4) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) 15.707229555s ago: executing program 4 (id=654): r0 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xff01) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='nilfs2\x00', 0x0, &(0x7f0000000980)='norecovery') (async) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_DESTROY(r2, &(0x7f00000000c0), 0x4) 15.66955729s ago: executing program 34 (id=654): r0 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xff01) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='nilfs2\x00', 0x0, &(0x7f0000000980)='norecovery') (async) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_DESTROY(r2, &(0x7f00000000c0), 0x4) 13.125117054s ago: executing program 1 (id=682): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104acbd70000000000000000000", @ANYRES64, @ANYBLOB="c23b040090150000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r1], 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) sendto$inet6(r2, &(0x7f0000000440)="2138ed333de71f6c04318b021b3c841ba4de86d268f0f2b34f99b03badb8cae0541d6a3407fd123dfcde35fd202dc344ed7e4bb87754ebc2c689b0859ca2468935763177f919f54cd913b51885fb9ca3cdde3276473d89cb1ade9db27e5c8228f7d24249e92323a191d884d7eb5e330f4611ff0605f1d998c0d67e630ecf04addd410d160548039df7d6b8d736b34e3ff686398f40260f4ae7d346d9e91cf936297647a90452f4ba9cb9b942715c4a8da31de00e7d0305919563336b45f36e42817bf8e662fbe036bb38f3631035592ff25d76a788", 0xd5, 0x40080, &(0x7f00000001c0)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x30}, 0x40}, 0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x13, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000340)={r6, r6, 0xb, 0x0, 0x0, 0x8, 0xb6, 0x7f, 0x7, 0x801, 0x2, 0x10, 'syz0\x00'}) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xd}, @hci_ev_le_ltk_req={{}, {0xc8, 0x8, 0x8}}}}, 0x10) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 12.305921497s ago: executing program 1 (id=702): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, 0x0, 0x221, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) syz_open_dev$sndctrl(&(0x7f0000000080), 0x800, 0x250401) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xffffffff}]}}]}, 0x38}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x1cc, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) 12.223158582s ago: executing program 1 (id=704): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000240)=0x3b, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 12.221759869s ago: executing program 1 (id=705): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000001000000f00000005002a000000000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x78, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x10000, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9f, 0x8, 0x143, 0x9, 0x3}, 0x4, 0x0, 0xabcc, 0x3, 0x8, 0x4, 0x1e, 0x11, 0x8, 0x8, {0x5, 0x8e, 0x9, 0x5, 0xb2e, 0x6}}}}]}, 0x78}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r8, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x840) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x4, 0xcb, 0x2, @local, @mcast2, 0x20, 0x7800, 0x8, 0x7}}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc0, r0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40027}, 0x2000c001) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r12, 0x6, 0x21, &(0x7f0000000200)="24fc911e918c74ad7a0e599e17a90ecabe833ca12054887f4142a64471dbe048", 0x20) 12.143396559s ago: executing program 1 (id=707): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000001040)={0x200f, {"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", 0x1000}}, 0x1006) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000000c0)={'ip6gre0\x00', @multicast}) 11.975658176s ago: executing program 1 (id=708): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r0, &(0x7f0000000080)=""/126, 0x7e) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r1, &(0x7f0000000240)="004ab6a62c1eb88f6013ef45f2f6f7223c5a33c44869833e1ca4452941aee44c2595cbfc03d81d8d8790858ee980b88906d059ee4bee484be366e5610cf68e79c479b056da51fdaab7a8cd52ced10b0f2e42a93b64e24646f36710b1784358b0e0161ecbadf61a1213778452714e4c242bc3d41069c998a49cc961936fc21017be41abfe5b9f19d8a9701a9666ff2ad803339075aa5209c3aa25a63b3cc4dc42d243c6b91849745d9384863fbb49", 0xfffffcd9) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) read$dsp(r0, &(0x7f0000000080)=""/126, 0x7e) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) (async) write$dsp(r1, &(0x7f0000000240)="004ab6a62c1eb88f6013ef45f2f6f7223c5a33c44869833e1ca4452941aee44c2595cbfc03d81d8d8790858ee980b88906d059ee4bee484be366e5610cf68e79c479b056da51fdaab7a8cd52ced10b0f2e42a93b64e24646f36710b1784358b0e0161ecbadf61a1213778452714e4c242bc3d41069c998a49cc961936fc21017be41abfe5b9f19d8a9701a9666ff2ad803339075aa5209c3aa25a63b3cc4dc42d243c6b91849745d9384863fbb49", 0xfffffcd9) (async) 4.35597425s ago: executing program 5 (id=809): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/85}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b702000000000d008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b7e118d35d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.343823236s ago: executing program 5 (id=811): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x83, 0x0, {0xa, 0x4e22, 0x8, @local, 0x9}}}, 0x3a) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x6, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x8000000000000003}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x2070, 0x30, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{0x205c, 0x1, [@m_csum={0x1018, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0xfe9, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x1040, 0xf, 0x0, 0x0, {{0xb}, {0x1014, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3499, 0x9, 0xe, 0xa0cf, 0x1, 0xe, 0x636, 0xb, 0x4, 0xfffffffa, 0xd, 0x4, 0x1, 0x2, 0x424188e1, 0xfffffffd, 0x6, 0xf7, 0x9, 0x1, 0x6, 0x7, 0x22, 0x6, 0x800, 0x40, 0x4, 0xffffffc0, 0x38, 0x101, 0x8001, 0x6, 0x5, 0xfffffff1, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x5, 0x5, 0x0, 0x1, 0x5, 0x3, 0x7, 0x5, 0x1ff, 0xfffffffc, 0x12, 0x266, 0x9c, 0x54, 0x8, 0x8, 0x18, 0x5, 0x9, 0x0, 0x3, 0x2, 0xf, 0x0, 0x7fffffff, 0x6, 0x9, 0x1, 0x2, 0x6, 0x3, 0x1, 0x9, 0x1, 0x0, 0xfffffffb, 0x4, 0x4, 0x1, 0xe, 0xa1, 0x4, 0x40000000, 0xb4, 0x8001, 0x3, 0x4, 0x10001, 0x3, 0x6, 0x5, 0x7, 0x2, 0x80, 0x7612, 0x6, 0xfffffffd, 0x8, 0x0, 0x77, 0x7, 0xfffffc6f, 0x9, 0xb, 0x7, 0x2, 0xfffffff8, 0x8000, 0x6, 0x8, 0x8, 0x4, 0xade0, 0x9, 0x5, 0x9, 0x2, 0x3, 0x81, 0x80000000, 0x6, 0x8, 0x0, 0x8, 0x580000, 0x7, 0x9, 0x1, 0x4, 0x94, 0x2, 0x4, 0x2, 0x80000001, 0x7ff, 0x0, 0x9, 0x8, 0x2, 0x3, 0x7, 0x8, 0x1765, 0x5, 0x1, 0x9, 0x1, 0x5, 0x10000, 0x9, 0xe873, 0x7f, 0x47f, 0x3, 0x7, 0x4, 0x348, 0xffffffff, 0x1c00, 0x8, 0x400, 0x2, 0xc, 0x1, 0x4, 0x4, 0xa, 0x9, 0x200000, 0x401, 0x4, 0x8000, 0xc71, 0x96, 0xa60, 0x9, 0x2, 0x80000001, 0xffffffff, 0xfffffffd, 0x1, 0xc, 0x7, 0x5, 0x2, 0x3, 0x7, 0x9, 0x0, 0x15fb170e, 0xd1e, 0x1000, 0x9, 0x1000, 0x40, 0x8001, 0x7, 0x8000, 0x8, 0x6, 0x4, 0x47, 0xffff, 0x6, 0xfffffff7, 0x400, 0x0, 0x4a6b23f, 0x7fffffff, 0x7, 0x9, 0x3, 0xf, 0x4, 0xc, 0x80000000, 0xffffffc3, 0x8, 0x81, 0x3ff, 0xabe, 0x3, 0x0, 0x6, 0x7, 0x0, 0xb793, 0x9, 0x7, 0x10000, 0x8, 0x7fff, 0x3, 0x7, 0x4, 0x7f3, 0x8, 0x8, 0x5, 0xc, 0x4, 0x3, 0xb1c, 0x2, 0x9, 0x9, 0x6, 0x2, 0x627af949, 0x6, 0x7b33, 0x8, 0x1, 0x0, 0xb267, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x2, 0x2000000, 0xc807, 0x17ec, 0x7, 0xc6b, 0x6, 0x7, 0x7, 0x8, 0x10001, 0x9, 0x7, 0x4, 0x8, 0x8, 0xffff, 0xb, 0x5, 0x5, 0x8, 0x100, 0x7, 0x7f, 0x0, 0x4, 0x40, 0x8, 0xfffffffe, 0x8000, 0x5, 0x3, 0x10001, 0x10000, 0x5, 0x800, 0x3, 0x21a, 0xfff, 0x0, 0x54, 0x57f, 0xc1a, 0x4, 0x0, 0x2d, 0x0, 0x2, 0x13d, 0x1, 0x155b, 0x2, 0xf5, 0x0, 0x1, 0x8001, 0x8, 0x1, 0x9, 0xffff6b21, 0x3, 0x10001, 0xffffffff, 0x10000, 0x1, 0x1, 0xfffffffb, 0xb, 0x0, 0x9103, 0x1, 0x8, 0x0, 0x8, 0x2000, 0x6e6b, 0x9, 0x2, 0x0, 0x3, 0x7, 0x2, 0x401, 0x9, 0x4, 0xe2e1, 0xfffffff8, 0xffffffff, 0x81, 0x81, 0x1000, 0x401, 0x80000000, 0xfffff800, 0x6, 0xcb, 0x1a000, 0x5, 0x0, 0x40, 0x4, 0x4, 0x6, 0x9, 0x6, 0x1da, 0x74a, 0x9, 0x3ff, 0x6, 0xa0a, 0x3, 0x0, 0xee0d, 0x1, 0x8001, 0x5, 0x3, 0x4, 0x6, 0xad, 0xa, 0x80000001, 0xf37, 0x10000000, 0x2, 0x7, 0x2, 0x4, 0xffffff01, 0x1, 0x8, 0xe9c, 0x40, 0x5, 0xf41a, 0xffffffff, 0x6, 0x1000, 0x5, 0x400, 0xfff, 0xe, 0xff, 0xf, 0x7, 0x3, 0x7f, 0x81, 0x0, 0x8, 0x62, 0x8, 0xa43, 0x1, 0x10000, 0xf, 0x3, 0x3, 0x9, 0x4, 0x4, 0x8000000, 0x8000, 0x0, 0xae5, 0xfff, 0x6, 0x0, 0x7, 0x432, 0x101, 0x5, 0x10000, 0x400, 0x8, 0x3, 0x8, 0xf61, 0x40, 0x69b8, 0x6, 0x5, 0x5d6, 0x3ff, 0xd3, 0x8, 0x5, 0x8478, 0x7fff, 0x401, 0x4, 0x11e, 0x8, 0x5, 0x5, 0x8, 0x3, 0x71, 0x6, 0xe2, 0xe1fd, 0x2, 0x4384, 0xfffffff8, 0x5, 0x7, 0xbcf6, 0xb8, 0x6, 0x81, 0xfffffff8, 0x8, 0x4, 0x0, 0x10001, 0xfffffffb, 0xc56c, 0x6, 0x8, 0x9, 0xc7, 0x2, 0xc0fed76, 0x400, 0xf7ab, 0x400, 0x7, 0x1, 0x2, 0x1, 0x4, 0x2, 0x7, 0x3, 0x9, 0x5, 0x1, 0xd106, 0xffffff7f, 0x7, 0x4fd, 0x9, 0x5, 0x3ff, 0x4, 0x4, 0x3495032e, 0x8, 0x2, 0xffff, 0x3, 0x4, 0x7fffffff, 0x85]}, @TCA_POLICE_RATE={0x404, 0x2, [0x48, 0x3, 0x9, 0xffffffff, 0xfffffff8, 0xffffffff, 0x9, 0x4, 0x1, 0x7d05, 0x8, 0x2, 0x81, 0x2, 0x8, 0x8, 0x210, 0xbd6, 0x2, 0x9e000000, 0x2, 0x60000000, 0x1f1, 0x0, 0x9, 0x3, 0x3, 0x3, 0x3, 0x645, 0x5, 0xa6, 0xfff, 0x2, 0x3, 0x4, 0x6, 0x4, 0xfffffffe, 0xfffffff0, 0x100, 0x0, 0xe, 0x0, 0xffffffff, 0x8000, 0x7ff, 0xfffffffd, 0x9, 0x2, 0x80000000, 0x3, 0xc, 0x4, 0x6, 0x6, 0xa, 0x7, 0x8, 0x2, 0xffffffff, 0x0, 0x0, 0xffff, 0x1, 0x8, 0x600, 0xedba0bf6, 0x101, 0x4, 0x3, 0x8, 0x1ff, 0x4, 0x3, 0x5, 0x5, 0x7fff, 0x8e4, 0x4, 0xffff, 0x1, 0x40, 0x10, 0x8, 0xb, 0x1, 0x1, 0x0, 0x0, 0x846e, 0x2, 0xc, 0x10000, 0xffffffff, 0x7, 0x1c, 0x122, 0x6, 0x9, 0x9, 0xa, 0xffffffe6, 0x0, 0x548, 0x6, 0x7edb, 0xff, 0x8001, 0x6, 0x401, 0x9, 0x4, 0x0, 0x1, 0x373, 0xfff, 0x19b, 0xf, 0x5, 0x2, 0x4, 0x9, 0xd, 0x6, 0x4, 0x7, 0x8e, 0x3, 0x8000, 0x248f, 0xb, 0x8, 0x800, 0x19, 0x2, 0xffffffff, 0x7, 0x8, 0xfffffffd, 0x6, 0x7f, 0x93f, 0xae5, 0x0, 0x5, 0x5, 0x3, 0x100, 0x6, 0x8000, 0x7, 0x9, 0x6, 0x2, 0x20, 0x0, 0x3, 0x6, 0x1, 0x8, 0x681e594, 0x4, 0x4, 0x6, 0x8, 0x7, 0xfffff39f, 0x2, 0xb, 0x8, 0x3dc5, 0x2, 0x22e, 0xb, 0x0, 0x1, 0x4, 0x0, 0x8, 0x9, 0x4, 0x2, 0xd83, 0x5, 0x8f, 0x9, 0xffff, 0x3, 0xa9fc, 0x3, 0xd45, 0x9, 0x6, 0x5, 0xb698, 0x4, 0x10000, 0x0, 0x0, 0x4, 0xfffffffe, 0x8b4b, 0x9, 0x7, 0x101, 0x0, 0x0, 0x2, 0xeee0, 0x1, 0x3, 0x200, 0x3, 0x0, 0x5b4, 0x6, 0x5, 0x69, 0x7f, 0x613, 0x768d, 0x6, 0xc, 0x2, 0x8001, 0xd, 0x8, 0x80000000, 0xc, 0x0, 0x401, 0x988, 0x1, 0x8, 0x1, 0x8, 0x1, 0x3, 0x3, 0xc0a9, 0x6, 0x9, 0x8001, 0x7, 0x8, 0x5, 0x499, 0xfdd1, 0x4, 0x4, 0x0, 0x2, 0x9, 0x6, 0x966a]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x101, 0x8, 0x10000, 0x6, 0x209, 0x1000, 0x3ff, 0x1, 0x8000, 0x4, 0x9, 0x7, 0xb6, 0x8a29, 0xff, 0x8, 0x7f, 0xce, 0x50000000, 0xffffffff, 0x0, 0x7, 0x10001, 0xe73d, 0xba4, 0x8, 0x3, 0x8, 0x6, 0x800, 0x3ff, 0xffffffff, 0x5, 0xb, 0xc, 0x80, 0x6c3, 0x1, 0x2, 0xfffffff9, 0x4, 0x0, 0x5, 0x1, 0x1, 0x6, 0x8, 0x2e7b, 0x3, 0x0, 0x2, 0xc346, 0x1, 0x2, 0x5, 0x4, 0x3, 0x1, 0x2, 0x7fffffff, 0xfffffffb, 0x0, 0xc, 0x8, 0x10001, 0x1, 0x8, 0x2, 0x0, 0x861, 0x7, 0x81, 0xf, 0x401, 0x0, 0x3a, 0x4479, 0x10, 0xffffffff, 0x3, 0x80000001, 0xdc, 0x400, 0x2d, 0xfffffff9, 0x6, 0x5, 0x10, 0x9, 0x50, 0x9, 0x7, 0x9, 0x1, 0x7, 0x8, 0x1, 0x0, 0xfffffff8, 0xfb, 0x0, 0x7, 0x10001, 0x35800000, 0x5, 0xfffffff9, 0x4, 0x7, 0x3fc, 0xfffffff8, 0x51f, 0x8, 0x6a, 0x7, 0x2, 0x3659, 0x3, 0xc1, 0xe, 0x81, 0x628b, 0xd0, 0x9, 0x3478, 0x8, 0xe, 0x7, 0x5, 0x80000001, 0x9, 0x7, 0x5, 0xffff8000, 0x8, 0x5, 0xb2fb1be, 0x5, 0x6, 0x7bb6c0a3, 0x7, 0x3, 0x8001, 0x8000, 0x200, 0x5, 0xffffff01, 0x1, 0x8, 0x1, 0x5, 0xe576, 0x0, 0x4, 0x44c5, 0x81, 0x2, 0x2, 0xe9c, 0x9, 0x2ebcc0, 0x9, 0x3, 0x3, 0x4, 0x9, 0x0, 0x0, 0x100, 0x1, 0x1, 0x3, 0x60d6, 0xe6, 0x7ff, 0x0, 0x2, 0x7fff, 0xb9, 0x3f23, 0x101, 0x7, 0x2, 0x62, 0x1f, 0xfb, 0xd, 0x3ff, 0x6, 0x6395, 0x10, 0x1, 0x9, 0xfffffffe, 0x2, 0x1ad, 0x8, 0x5, 0x9, 0x3, 0xa50c0, 0x9, 0x1, 0xfff, 0x4, 0x2, 0x1, 0x3, 0x9, 0x3, 0x2, 0x401, 0x100, 0x7, 0x8, 0x5, 0x8, 0x9, 0x0, 0x0, 0x5, 0x4a, 0x401, 0x7fffffff, 0x7, 0x538, 0x94cb, 0x1, 0x79, 0x5, 0x6, 0x9, 0x9, 0x0, 0x2, 0x4, 0x1, 0x5, 0xf, 0xe, 0x0, 0xbc, 0x4, 0x2, 0x5, 0x10, 0x4, 0x80000000, 0x8, 0x41f, 0x1, 0x1, 0x7, 0x3, 0x80000001, 0x3]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}]}]}, 0x2070}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) 4.10607547s ago: executing program 6 (id=817): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r2 = geteuid() r3 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f00000029c0)={0x658, 0x0, r6, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, r7, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0xffff, 0x2, 0xfffffe01, 0x3000, 0x2, r7, r8, 0x9, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r7, r8, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r7, r8, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r7, r8, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, r7, r8, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x6, 0x0, 0x5dd5, 0x3, 0x5, 0x81, {0x3, 0x100000001, 0x5, 0x2, 0x1, 0x2, 0x6, 0x69504f9e, 0x80000000, 0x2000, 0x6, r7, r8, 0x6, 0x5}}, {0x0, 0xfffffffffffffffc, 0x6, 0x4, '&\'.:&('}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf4f, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, r7, r8, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, r8, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x658) r9 = getegid() r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000006380)=ANY=[@ANYBLOB="00002e83cdfeb6d3433d8c7b8c8bc0f44d988b5a10561f529471e5532d1435641d262600d01da7da347482efaf87a1d58cc4c16eb29bdea3a683a248bd5f645d4073a3bbc3c93d00d802fb71a9d41fc928544340a4d7ed8f690e69a160b7f2", @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_linger(r11, 0x1, 0xd, 0x0, &(0x7f00000001c0)) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="fdffffff00000000000000000000df0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00fa03000000000000199404f18e2ef2c8852f000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r13}, 0x10) pivot_root(0x0, 0x0) read$FUSE(r10, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000004200)={0x50, 0x0, r14, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r10, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r10, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x150, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x10001, 0x100000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0xa000}}, {0x0, 0x0, 0x8, 0x4, 'up_id\x00\x00\x00'}}, {{0x3, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x40000, 0x0, 0x63, 0x0, 0x7, 0x0, 0xa000, 0x7, 0x0, r15, 0xfffffffd, 0x40002000}}, {0x0, 0x0, 0x8, 0x40000002, 'group_id'}}]}, 0x0, 0x0, 0x0}) r16 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r11, &(0x7f0000004280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000041c0)={&(0x7f0000004140)=@deltclass={0x44, 0x29, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xc, 0x10}, {0x4, 0xe}}, [@tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xe, 0x53}}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000814}, 0x4000000) bind$netlink(r16, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r17 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x10000000000800, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x42}}, 0xe8) connect$inet6(r17, &(0x7f0000000040)={0xa, 0x0, 0xb5, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x5e) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x4, 0xee00}, {0x2, 0x2, r1}, {0x2, 0xa}, {0x2, 0x5, r2}, {0x2, 0x3, 0xee00}, {0x2, 0x5, 0xee00}, {0x2, 0x2, r3}], {}, [{0x8, 0x1, r4}, {0x8, 0x2, r8}, {0x8, 0x0, r9}, {0x8, 0x1, r15}, {0x8, 0x7}, {0x8, 0x5, r18}], {0x10, 0x2}, {0x20, 0x8}}, 0x8c, 0x1) 4.014673251s ago: executing program 6 (id=818): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x101, 0x7e, 0x2, 0xfffffff8}, {0x7c, 0xa, 0x9, 0x3}, {0x6, 0x2, 0x1, 0x4}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000002c00)=0x9, &(0x7f0000002c40)=0x4) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, 0x0, 0x800) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="fe", 0x1}, {&(0x7f0000001240)="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", 0x450}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) sendmsg$xdp(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000c060}, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040)) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, &(0x7f0000000080)="c3bf0ad6a4c499e7da30141b9eca1b50a93065f6208f1c20cd160195490f65b492bb9e552fd7e214bd5c421dc8475cccb7008ced3d78d61be2af35dbcdec0d8ba04d189365c590e3dc68cf908749edfc655762ec029437023bd00a467f045aace79d81e7226614310bc8768433867baabed57b07bd108e7927f34e", 0x7b) 3.759117398s ago: executing program 5 (id=821): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000500)=""/173, 0xad) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000680)=0xf7ff, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r4, 0x101, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0xd}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) 3.480365821s ago: executing program 2 (id=823): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xf3) openat$cgroup_ro(r3, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) fsmount(r3, 0x0, 0x84) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000200)={@void, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x1, 0x1, 0x3}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @private2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x46) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x403, 0x70bd26, 0x0, {0x0, 0x0, 0x74, 0x0, 0x50062}}, 0x20}, 0x1, 0x0, 0x0, 0x885}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e6400000000"], 0x3c}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000003c0)={0x1d, 0x7, '\x00', [@ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @pad1, @generic={0x7}, @jumbo={0xc2, 0x4, 0x10001}, @generic={0x20, 0x14, "491a7eb3cf2d67979802f7e8ef7647d5cd687072"}, @ra={0x5, 0x2, 0x1d}]}, 0x48) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xc403bff35f261d31, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000340)={0x18, 0x1, 0x0, {0x2}}, 0x18) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x54}}, 0x0) 3.261471571s ago: executing program 2 (id=824): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@acquire={0x178, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc, 0x15, {0x35075d, 0x9ae3}}, @tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x0, @in=@multicast2}]}]}, 0x178}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8, 0xb}]}, 0x24}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r4}, 0x10) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db684dfd00000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902"], 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}], 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a"], 0x1ec}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) 2.839826822s ago: executing program 5 (id=825): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3f}}, r0}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000240)=0x8003, r3, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x4e21, 0x0, @mcast2}, r3}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x5f444b0e, "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", 0x80, 0x5, 0x3, 0x40, 0x80, 0x16, 0x2, 0x1}, r3}}, 0x120) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) 2.839174881s ago: executing program 5 (id=826): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x227e, &(0x7f00000000c0)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x50, r2, 0x101, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1, 0x0, 0x1, 0x0, {0x3, 0xc, 0x0, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x800, 0xf4, 0x5}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}, 0x1, 0x0, 0x0, 0x8884}, 0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x4, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x7, 0x7, 0x6, 0x37d7, {{0xf, 0x4, 0x1, 0x29, 0x3c, 0x68, 0x0, 0x5, 0x2f, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xd8, 0x0, 0x7, [0x200]}, @timestamp={0x44, 0x1c, 0xad, 0x0, 0xa, [0x200, 0x8, 0xb, 0x5, 0x2, 0xc]}]}}}}}) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r10 = accept4(r9, 0x0, 0x0, 0x0) readv(r10, &(0x7f0000000400)=[{&(0x7f0000000180)=""/191, 0xbf}], 0x1) r11 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f00000000c0)={0x100, 0x2, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r11, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x8, 0x3c, 0x9, 0xa400, r6, 0x7, '\x00', r7, r1, 0x4, 0x0, 0x1, 0x4, @value=r1, @void, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.753351595s ago: executing program 5 (id=827): bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000010000000000000000000000dfffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x48) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200013, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) sendto$inet6(r0, &(0x7f0000000240)="5697f76a1c1150da6bf6613575027f12d18e36e53e59a4e69846ac29692e1c2da6feb5aebb6fb359c253381a6303f3d637ea7fe51291c5b329ed69081787067c11a736fe38d931853caf189e741a5cd26c4da250a1a4d43e445e71904e50690b66ff74d160bc1370f2b0f897412ae5c7bed7f775fd9b0d2d4578bf09b04b61955ecf11c999a75edfe54382f7b47ba1614ef039e8493014f041fb15f3ed59297f162ce3149d14f93758dac09b46c3156c1cc84ec2f024f03ef2fafb", 0xbb, 0x20000050, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r4}, &(0x7f0000044000)=0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000300)) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010027bd7000fbdbdf2500000000", @ANYRES32=r8, @ANYBLOB="104e060001e2030024001280110003006260696467655f736c617665000000000c00058005001b0008"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20040006) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000380), &(0x7f00000003c0)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) timer_settime(r5, 0xffffffffffffffff, &(0x7f0000000040)={{0x77359400}, {0x0, 0x9}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=r9], 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x4000400, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20480}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x3c}}, 0x0) 2.047295569s ago: executing program 2 (id=828): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x85, 0x0) 1.200268384s ago: executing program 2 (id=829): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0xb, @vbi={0x38305543}}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f0000001540)) socket$inet6(0xa, 0x2, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd5", 0x5ad, 0x14, &(0x7f00000002c0)={0xa, 0xde20, 0x0, @mcast2, 0x4}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd28, 0x25dfdbff, {0xa, 0x1c, 0x88, 0xfe, r2}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8081}, 0x4008010) 1.111253047s ago: executing program 2 (id=830): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127b, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r7, 0x84, 0x74, &(0x7f0000000280)=""/223, &(0x7f00000000c0)=0xdf) ioctl$KVM_RUN(r4, 0xae80, 0x0) mlockall(0x5) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) setpriority(0x1, 0x0, 0x7ffffffffffffffc) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000580)='1\x00', 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) r10 = syz_clone(0x20940200, 0x0, 0x9, 0x0, 0x0, 0x0) tgkill(r10, r10, 0x11) write$sysctl(r8, &(0x7f0000000000)='2\x00', 0x2) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000240)=@x86={0x3, 0x5, 0x6, 0x0, 0x3, 0x2, 0xc4, 0xb8, 0xf7, 0x7, 0xfa, 0x9, 0x0, 0xc, 0xc, 0x9, 0x6, 0xd, 0xc, '\x00', 0xa, 0x4}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 991.083683ms ago: executing program 6 (id=831): ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000000c0)={r0, 0x3}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) timer_create(0x0, 0x0, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r5}, 0x10) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) syz_usb_connect(0x2, 0x36, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) 382.459371ms ago: executing program 6 (id=832): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x0, 0x6, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x9909c8, 0x4, '\x00', @p_u16=&(0x7f0000000100)=0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x10) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) dup2(r2, r4) setsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000003e00), 0x4) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 95.309676ms ago: executing program 2 (id=833): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x11) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000003c0)) r2 = syz_usb_connect(0x6, 0x36, &(0x7f0000000480)=ANY=[], 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r3, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r4, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x4, 0x5, 0x5, 0x7, 0x7, 0x3, 0x4, 0x3}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) syz_usb_disconnect(r2) r10 = dup(r5) readv(r10, &(0x7f0000000880), 0x0) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$KVM_SIGNAL_MSI(r10, 0x4020aea5, &(0x7f00000002c0)={0xf000, 0xeeee8000, 0x1d, 0x0, 0xb8}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000280)) sendmsg$inet(r11, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 95.040364ms ago: executing program 6 (id=834): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0xb75, 0x12, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x300, 0x0, @l2={'eth', 0x3a, 'macvlan0\x00'}}}}}, 0x38}}, 0x0) 0s ago: executing program 6 (id=835): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close(r2) r3 = socket(0x10, 0x803, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x814004, 0x0) chdir(&(0x7f0000000140)='./bus\x00') io_setup(0x1, &(0x7f00000004c0)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x401, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r6, 0x0, 0x27) io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000300)={0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f00000001c0)="ba", 0x1, 0xff010000}]) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x810}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x40) kernel console output (not intermixed with test programs): f0 [ 65.987858][ T7063] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 65.987878][ T7063] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 65.987901][ T7063] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 65.987926][ T7063] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 65.987950][ T7063] ? __pfx_lock_release+0x10/0x10 [ 65.987978][ T7063] ? selinux_file_ioctl+0x180/0x270 [ 65.987997][ T7063] ? selinux_file_ioctl+0xb4/0x270 [ 65.988019][ T7063] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 65.988037][ T7063] __x64_sys_ioctl+0x190/0x200 [ 65.988060][ T7063] do_syscall_64+0xcd/0x250 [ 65.988079][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.988099][ T7063] RIP: 0033:0x7f131fb8cde9 [ 65.988126][ T7063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.988140][ T7063] RSP: 002b:00007f1320a1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.988155][ T7063] RAX: ffffffffffffffda RBX: 00007f131fda5fa0 RCX: 00007f131fb8cde9 [ 65.988165][ T7063] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 65.988173][ T7063] RBP: 00007f1320a1a090 R08: 0000000000000000 R09: 0000000000000000 [ 65.988180][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 65.988188][ T7063] R13: 0000000000000000 R14: 00007f131fda5fa0 R15: 00007ffd706581f8 [ 65.988209][ T7063] [ 66.094442][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.227090][ T7072] XFS (nullb0): Invalid superblock magic number [ 66.288846][ T7080] evm: overlay not supported [ 66.468871][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 67.352248][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 67.400945][ T7107] FAULT_INJECTION: forcing a failure. [ 67.400945][ T7107] name failslab, interval 1, probability 0, space 0, times 0 [ 67.404332][ T7107] CPU: 2 UID: 0 PID: 7107 Comm: syz.3.276 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 67.404347][ T7107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.404354][ T7107] Call Trace: [ 67.404375][ T7107] [ 67.404379][ T7107] dump_stack_lvl+0x16c/0x1f0 [ 67.404530][ T7107] should_fail_ex+0x50a/0x650 [ 67.404641][ T7107] ? fs_reclaim_acquire+0xae/0x150 [ 67.404711][ T7107] should_failslab+0xc2/0x120 [ 67.404736][ T7107] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 67.404748][ T7107] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 67.404807][ T7107] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 67.404824][ T7107] mmu_topup_memory_caches+0x25/0x170 [ 67.404850][ T7107] kvm_mmu_load+0xda/0x22a0 [ 67.404879][ T7107] ? kvm_apic_has_interrupt+0xb6/0x190 [ 67.404896][ T7107] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 67.404911][ T7107] ? kvm_guest_time_update+0x71e/0xeb0 [ 67.404925][ T7107] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 67.404939][ T7107] ? __pfx_kvm_mmu_load+0x10/0x10 [ 67.404951][ T7107] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 67.404966][ T7107] ? kvm_check_and_inject_events+0x725/0x12e0 [ 67.404981][ T7107] vcpu_run+0x33a4/0x4f50 [ 67.404993][ T7107] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 67.405008][ T7107] ? __pfx_vcpu_run+0x10/0x10 [ 67.405018][ T7107] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 67.405055][ T7107] ? rcu_is_watching+0x12/0xc0 [ 67.405066][ T7107] ? trace_lock_acquire+0x14e/0x1f0 [ 67.405077][ T7107] ? __local_bh_enable_ip+0xa4/0x120 [ 67.405109][ T7107] ? lockdep_hardirqs_on+0x7c/0x110 [ 67.405120][ T7107] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 67.405134][ T7107] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 67.405146][ T7107] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 67.405161][ T7107] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 67.405174][ T7107] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.405189][ T7107] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 67.405217][ T7107] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 67.405235][ T7107] ? __pfx_lock_release+0x10/0x10 [ 67.405254][ T7107] ? selinux_file_ioctl+0x180/0x270 [ 67.405268][ T7107] ? selinux_file_ioctl+0xb4/0x270 [ 67.405283][ T7107] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.405295][ T7107] __x64_sys_ioctl+0x190/0x200 [ 67.405319][ T7107] do_syscall_64+0xcd/0x250 [ 67.405332][ T7107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.405348][ T7107] RIP: 0033:0x7fa6a218cde9 [ 67.405357][ T7107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.405366][ T7107] RSP: 002b:00007fa6a3038038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.405376][ T7107] RAX: ffffffffffffffda RBX: 00007fa6a23a5fa0 RCX: 00007fa6a218cde9 [ 67.405382][ T7107] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 67.405387][ T7107] RBP: 00007fa6a3038090 R08: 0000000000000000 R09: 0000000000000000 [ 67.405393][ T7107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.405398][ T7107] R13: 0000000000000000 R14: 00007fa6a23a5fa0 R15: 00007ffd32c1dd78 [ 67.405410][ T7107] [ 67.458934][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 67.477195][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 67.610916][ T7127] tmpfs: Bad value for 'mpol' [ 67.636534][ T7127] tipc: Started in network mode [ 67.638039][ T7127] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 67.641240][ T7127] tipc: Enabled bearer , priority 0 [ 67.717175][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 67.717929][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 67.727952][ T7138] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 67.736035][ T7139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.876186][ T7163] netlink: 'syz.4.287': attribute type 1 has an invalid length. [ 67.902487][ T7165] program syz.3.288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.987057][ T7169] FAULT_INJECTION: forcing a failure. [ 67.987057][ T7169] name failslab, interval 1, probability 0, space 0, times 0 [ 67.992394][ T7169] CPU: 1 UID: 0 PID: 7169 Comm: syz.4.289 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 67.992408][ T7169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.992415][ T7169] Call Trace: [ 67.992449][ T7169] [ 67.992454][ T7169] dump_stack_lvl+0x16c/0x1f0 [ 67.992688][ T7169] should_fail_ex+0x50a/0x650 [ 67.992823][ T7169] ? fs_reclaim_acquire+0xae/0x150 [ 67.992905][ T7169] should_failslab+0xc2/0x120 [ 67.992929][ T7169] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 67.992941][ T7169] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 67.992998][ T7169] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 67.993015][ T7169] mmu_topup_memory_caches+0x25/0x170 [ 67.993042][ T7169] kvm_mmu_load+0xda/0x22a0 [ 67.993069][ T7169] ? kvm_apic_has_interrupt+0xb6/0x190 [ 67.993087][ T7169] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 67.993102][ T7169] ? kvm_guest_time_update+0x71e/0xeb0 [ 67.993115][ T7169] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 67.993130][ T7169] ? __pfx_kvm_mmu_load+0x10/0x10 [ 67.993141][ T7169] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 67.993156][ T7169] ? kvm_check_and_inject_events+0x725/0x12e0 [ 67.993171][ T7169] vcpu_run+0x33a4/0x4f50 [ 67.993183][ T7169] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 67.993198][ T7169] ? __pfx_vcpu_run+0x10/0x10 [ 67.993208][ T7169] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 67.993254][ T7169] ? rcu_is_watching+0x12/0xc0 [ 67.993266][ T7169] ? trace_lock_acquire+0x14e/0x1f0 [ 67.993277][ T7169] ? __local_bh_enable_ip+0xa4/0x120 [ 67.993308][ T7169] ? lockdep_hardirqs_on+0x7c/0x110 [ 67.993319][ T7169] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 67.993333][ T7169] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 67.993349][ T7169] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 67.993364][ T7169] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 67.993377][ T7169] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.993393][ T7169] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 67.993421][ T7169] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 67.993438][ T7169] ? __pfx_lock_release+0x10/0x10 [ 67.993457][ T7169] ? selinux_file_ioctl+0x180/0x270 [ 67.993471][ T7169] ? selinux_file_ioctl+0xb4/0x270 [ 67.993487][ T7169] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 67.993499][ T7169] __x64_sys_ioctl+0x190/0x200 [ 67.993522][ T7169] do_syscall_64+0xcd/0x250 [ 67.993534][ T7169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.993551][ T7169] RIP: 0033:0x7f06abf8cde9 [ 67.993559][ T7169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.993568][ T7169] RSP: 002b:00007f06ace37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.993579][ T7169] RAX: ffffffffffffffda RBX: 00007f06ac1a5fa0 RCX: 00007f06abf8cde9 [ 67.993585][ T7169] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 67.993590][ T7169] RBP: 00007f06ace37090 R08: 0000000000000000 R09: 0000000000000000 [ 67.993595][ T7169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.993601][ T7169] R13: 0000000000000000 R14: 00007f06ac1a5fa0 R15: 00007ffd258c6c18 [ 67.993612][ T7169] [ 68.368022][ T7201] overlay: Unknown parameter 'appraise_type' [ 68.372308][ T7201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=7201 comm=syz.4.296 [ 68.428550][ T7210] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 68.430644][ T7210] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.434096][ T7210] vhci_hcd vhci_hcd.0: Device attached [ 68.440189][ T7211] usbip_core: unknown command [ 68.441560][ T7211] vhci_hcd: unknown pdu 117440515 [ 68.443064][ T7211] usbip_core: unknown command [ 68.450964][ T7214] tmpfs: Unknown parameter './file0' [ 68.451440][ T11] vhci_hcd: stop threads [ 68.454496][ T11] vhci_hcd: release socket [ 68.455842][ T11] vhci_hcd: disconnect device [ 68.662547][ T9] tipc: Node number set to 11578026 [ 68.713241][ T7237] No such timeout policy "syz1" [ 68.716174][ T7237] TCP: TCP_TX_DELAY enabled [ 68.881901][ T7263] raw_sendmsg: syz.2.310 forgot to set AF_INET. Fix it! [ 68.889477][ T7261] hsr0: entered promiscuous mode [ 68.891447][ T7261] macvlan2: entered promiscuous mode [ 69.001323][ T7278] dlm: Unknown command passed to DLM device : 8 [ 69.001323][ T7278] [ 69.019517][ T7275] can: request_module (can-proto-5) failed. [ 69.074533][ T7290] __nla_validate_parse: 3 callbacks suppressed [ 69.074548][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.315'. [ 69.079972][ T7290] bridge_slave_1: left allmulticast mode [ 69.083135][ T7290] bridge_slave_1: left promiscuous mode [ 69.085867][ T7290] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.093736][ T7290] bridge_slave_0: left allmulticast mode [ 69.095365][ T7290] bridge_slave_0: left promiscuous mode [ 69.097065][ T7290] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.295923][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 69.300148][ T7296] netlink: 'syz.2.317': attribute type 12 has an invalid length. [ 69.622300][ T7317] block nbd3: NBD_DISCONNECT [ 69.812777][ T7326] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 69.812777][ T7326] The task syz.1.324 (7326) triggered the difference, watch for misbehavior. [ 70.010091][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 70.010110][ T39] audit: type=1800 audit(1739170113.944:482): pid=7304 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.317" name="/" dev="fuse" ino=0 res=0 errno=0 [ 70.088415][ T5981] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 70.153610][ T39] audit: type=1400 audit(1739170114.094:483): avc: denied { search } for pid=7340 comm="syz.2.329" name="/" dev="configfs" ino=2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.238301][ T5981] usb 8-1: Using ep0 maxpacket: 8 [ 70.241709][ T5981] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 70.244794][ T5981] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.248286][ T5981] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.251877][ T5981] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.255182][ T5981] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.260482][ T5981] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.263086][ T5981] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.366591][ T39] audit: type=1400 audit(1739170114.304:484): avc: denied { setopt } for pid=7348 comm="syz.2.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.411258][ T7358] tipc: Started in network mode [ 70.413182][ T7358] tipc: Node identity , cluster identity 4711 [ 70.415539][ T7358] tipc: Failed to obtain node identity [ 70.417636][ T7358] tipc: Enabling of bearer rejected, failed to enable media [ 70.461070][ T7349] kvm: kvm [7348]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x501004589 [ 70.480161][ T5981] usb 8-1: usb_control_msg returned -32 [ 70.481870][ T5981] usbtmc 8-1:16.0: can't read capabilities [ 70.541709][ T39] audit: type=1400 audit(1739170114.484:485): avc: denied { shutdown } for pid=7364 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 70.549344][ T39] audit: type=1400 audit(1739170114.484:486): avc: denied { connect } for pid=7364 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 70.556325][ T39] audit: type=1400 audit(1739170114.484:487): avc: denied { name_connect } for pid=7364 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 70.601178][ T7367] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 70.602966][ T7367] syzkaller1: Linktype set failed because interface is up [ 70.608070][ T7367] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 70.610670][ T7367] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7367 comm=syz.4.336 [ 70.614435][ T7367] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7367 comm=syz.4.336 [ 70.621090][ T39] audit: type=1400 audit(1739170114.564:488): avc: denied { audit_write } for pid=7366 comm="syz.4.336" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.628678][ T6262] syzkaller1: tun_net_xmit 90 [ 70.663264][ T39] audit: type=1400 audit(1739170114.604:489): avc: denied { watch } for pid=7370 comm="syz.2.337" path="/93/file0" dev="tmpfs" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.669936][ T39] audit: type=1400 audit(1739170114.604:490): avc: denied { watch_sb watch_reads } for pid=7370 comm="syz.2.337" path="/93/file0" dev="tmpfs" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.763843][ T39] audit: type=1400 audit(1739170114.704:491): avc: denied { connect } for pid=7381 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.851610][ T7385] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7385 comm=syz.4.340 [ 70.862583][ T7389] netlink: 96 bytes leftover after parsing attributes in process `syz.2.342'. [ 70.870365][ T7389] Cannot find del_set index 4 as target [ 70.897691][ T7392] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 70.933980][ T25] usb 8-1: USB disconnect, device number 4 [ 71.551493][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.828041][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 72.035576][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 72.075780][ T7438] netlink: 56 bytes leftover after parsing attributes in process `syz.4.358'. [ 72.222043][ T7453] nbd: must specify a device to reconfigure [ 72.409056][ T7462] delete_channel: no stack [ 72.445345][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 72.588246][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 72.741183][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 72.745858][ T25] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 72.748670][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.751000][ T25] usb 6-1: Product: syz [ 72.752188][ T25] usb 6-1: Manufacturer: syz [ 72.753485][ T25] usb 6-1: SerialNumber: syz [ 72.757954][ T25] usb 6-1: config 0 descriptor?? [ 72.761838][ T25] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 72.765253][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 72.768740][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 72.771906][ T25] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 72.774865][ T25] usb 6-1: media controller created [ 72.783445][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.794234][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 72.795962][ T25] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 72.800560][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input9 [ 72.808712][ T25] dvb-usb: schedule remote query interval to 50 msecs. [ 72.810702][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 72.812425][ T25] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 72.872137][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 72.874346][ T25] dvb-usb: error while querying for an remote control event. [ 72.928728][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 72.931575][ T25] dvb-usb: error while querying for an remote control event. [ 72.963188][ T7461] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.365'. [ 72.969990][ T30] usb 6-1: USB disconnect, device number 4 [ 72.995306][ T30] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 72.997421][ T7475] netlink: 36 bytes leftover after parsing attributes in process `syz.3.370'. [ 73.001208][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.370'. [ 73.176512][ T7490] FAULT_INJECTION: forcing a failure. [ 73.176512][ T7490] name failslab, interval 1, probability 0, space 0, times 0 [ 73.181106][ T7490] CPU: 3 UID: 0 PID: 7490 Comm: syz.3.374 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 73.181121][ T7490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.181128][ T7490] Call Trace: [ 73.181164][ T7490] [ 73.181168][ T7490] dump_stack_lvl+0x16c/0x1f0 [ 73.181391][ T7490] should_fail_ex+0x50a/0x650 [ 73.181515][ T7490] ? fs_reclaim_acquire+0xae/0x150 [ 73.181597][ T7490] should_failslab+0xc2/0x120 [ 73.181621][ T7490] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 73.181633][ T7490] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 73.181691][ T7490] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 73.181708][ T7490] mmu_topup_memory_caches+0x25/0x170 [ 73.181736][ T7490] kvm_mmu_load+0xda/0x22a0 [ 73.181763][ T7490] ? kvm_apic_has_interrupt+0xb6/0x190 [ 73.181781][ T7490] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 73.181796][ T7490] ? kvm_guest_time_update+0x71e/0xeb0 [ 73.181809][ T7490] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 73.181824][ T7490] ? __pfx_kvm_mmu_load+0x10/0x10 [ 73.181835][ T7490] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 73.181850][ T7490] ? kvm_check_and_inject_events+0x725/0x12e0 [ 73.181865][ T7490] vcpu_run+0x33a4/0x4f50 [ 73.181877][ T7490] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 73.181892][ T7490] ? __pfx_vcpu_run+0x10/0x10 [ 73.181902][ T7490] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 73.181949][ T7490] ? rcu_is_watching+0x12/0xc0 [ 73.181960][ T7490] ? trace_lock_acquire+0x14e/0x1f0 [ 73.181972][ T7490] ? __local_bh_enable_ip+0xa4/0x120 [ 73.182002][ T7490] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.182013][ T7490] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 73.182028][ T7490] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 73.182039][ T7490] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 73.182054][ T7490] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 73.182067][ T7490] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 73.182082][ T7490] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 73.182110][ T7490] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 73.182127][ T7490] ? __pfx_lock_release+0x10/0x10 [ 73.182146][ T7490] ? selinux_file_ioctl+0x180/0x270 [ 73.182160][ T7490] ? selinux_file_ioctl+0xb4/0x270 [ 73.182176][ T7490] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 73.182188][ T7490] __x64_sys_ioctl+0x190/0x200 [ 73.182212][ T7490] do_syscall_64+0xcd/0x250 [ 73.182225][ T7490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.182270][ T7490] RIP: 0033:0x7fa6a218cde9 [ 73.182280][ T7490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.182289][ T7490] RSP: 002b:00007fa6a3038038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.182299][ T7490] RAX: ffffffffffffffda RBX: 00007fa6a23a5fa0 RCX: 00007fa6a218cde9 [ 73.182305][ T7490] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 73.182311][ T7490] RBP: 00007fa6a3038090 R08: 0000000000000000 R09: 0000000000000000 [ 73.182316][ T7490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.182321][ T7490] R13: 0000000000000000 R14: 00007fa6a23a5fa0 R15: 00007ffd32c1dd78 [ 73.182333][ T7490] [ 73.289265][ T1020] cfg80211: failed to load regulatory.db [ 73.323262][ T7494] netlink: 'syz.2.376': attribute type 1 has an invalid length. [ 73.349565][ T7494] bond1: entered promiscuous mode [ 73.351606][ T7494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.413094][ T7510] ptrace attach of "/syz-executor exec"[5940] was attempted by ""[7510] [ 73.414019][ T7512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7512 comm=syz.3.381 [ 73.417730][ T30] IPVS: starting estimator thread 0... [ 73.477091][ T7519] bond0: (slave wlan1): Error: Device is in use and cannot be enslaved [ 73.510119][ T7509] IPVS: using max 36 ests per chain, 86400 per kthread [ 73.544101][ T7526] FAULT_INJECTION: forcing a failure. [ 73.544101][ T7526] name failslab, interval 1, probability 0, space 0, times 0 [ 73.547873][ T7526] CPU: 3 UID: 0 PID: 7526 Comm: syz.1.386 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 73.547887][ T7526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.547893][ T7526] Call Trace: [ 73.547913][ T7526] [ 73.547918][ T7526] dump_stack_lvl+0x16c/0x1f0 [ 73.548091][ T7526] should_fail_ex+0x50a/0x650 [ 73.548186][ T7526] ? fs_reclaim_acquire+0xae/0x150 [ 73.548267][ T7526] should_failslab+0xc2/0x120 [ 73.548302][ T7526] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 73.548319][ T7526] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 73.548389][ T7526] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 73.548406][ T7526] mmu_topup_memory_caches+0x25/0x170 [ 73.548434][ T7526] kvm_mmu_load+0xda/0x22a0 [ 73.548461][ T7526] ? kvm_apic_has_interrupt+0xb6/0x190 [ 73.548479][ T7526] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 73.548494][ T7526] ? kvm_guest_time_update+0x71e/0xeb0 [ 73.548508][ T7526] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 73.548522][ T7526] ? __pfx_kvm_mmu_load+0x10/0x10 [ 73.548533][ T7526] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 73.548551][ T7526] ? kvm_check_and_inject_events+0x725/0x12e0 [ 73.548568][ T7526] vcpu_run+0x33a4/0x4f50 [ 73.548579][ T7526] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 73.548595][ T7526] ? __pfx_vcpu_run+0x10/0x10 [ 73.548604][ T7526] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 73.548643][ T7526] ? rcu_is_watching+0x12/0xc0 [ 73.548677][ T7526] ? trace_lock_acquire+0x14e/0x1f0 [ 73.548689][ T7526] ? __local_bh_enable_ip+0xa4/0x120 [ 73.548719][ T7526] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.548730][ T7526] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 73.548744][ T7526] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 73.548756][ T7526] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 73.548771][ T7526] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 73.548785][ T7526] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 73.548800][ T7526] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 73.548829][ T7526] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 73.548847][ T7526] ? __pfx_lock_release+0x10/0x10 [ 73.548865][ T7526] ? selinux_file_ioctl+0x180/0x270 [ 73.548880][ T7526] ? selinux_file_ioctl+0xb4/0x270 [ 73.548895][ T7526] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 73.548907][ T7526] __x64_sys_ioctl+0x190/0x200 [ 73.548933][ T7526] do_syscall_64+0xcd/0x250 [ 73.548946][ T7526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.548962][ T7526] RIP: 0033:0x7f5dd3b8cde9 [ 73.548971][ T7526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.548981][ T7526] RSP: 002b:00007f5dd4aa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.548991][ T7526] RAX: ffffffffffffffda RBX: 00007f5dd3da5fa0 RCX: 00007f5dd3b8cde9 [ 73.548998][ T7526] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 73.549003][ T7526] RBP: 00007f5dd4aa9090 R08: 0000000000000000 R09: 0000000000000000 [ 73.549009][ T7526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.549015][ T7526] R13: 0000000000000000 R14: 00007f5dd3da5fa0 R15: 00007fff28df0198 [ 73.549027][ T7526] [ 73.581933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.590103][ T7533] tmpfs: Bad value for 'huge' [ 73.719514][ T7536] can: request_module (can-proto-5) failed. [ 73.774079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.778304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 73.899235][ T7543] input: syz1 as /devices/virtual/input/input10 [ 74.218331][ T63] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 74.239707][ T7518] Set syz1 is full, maxelem 65536 reached [ 74.398279][ T63] usb 6-1: Using ep0 maxpacket: 8 [ 74.401590][ T63] usb 6-1: config 2 interface 0 has no altsetting 0 [ 74.405376][ T63] usb 6-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 74.412687][ T7558] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 74.412691][ T63] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.417903][ T63] usb 6-1: Product: syz [ 74.417918][ T63] usb 6-1: Manufacturer: syz [ 74.417926][ T63] usb 6-1: SerialNumber: syz [ 74.583037][ T7567] FAULT_INJECTION: forcing a failure. [ 74.583037][ T7567] name failslab, interval 1, probability 0, space 0, times 0 [ 74.586743][ T7567] CPU: 3 UID: 0 PID: 7567 Comm: syz.2.398 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 74.586758][ T7567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.586765][ T7567] Call Trace: [ 74.586769][ T7567] [ 74.586774][ T7567] dump_stack_lvl+0x16c/0x1f0 [ 74.586801][ T7567] should_fail_ex+0x50a/0x650 [ 74.586819][ T7567] ? fs_reclaim_acquire+0xae/0x150 [ 74.586837][ T7567] should_failslab+0xc2/0x120 [ 74.586850][ T7567] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 74.586861][ T7567] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 74.586879][ T7567] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 74.586900][ T7567] mmu_topup_memory_caches+0x25/0x170 [ 74.586914][ T7567] kvm_mmu_load+0xda/0x22a0 [ 74.586928][ T7567] ? kvm_apic_has_interrupt+0xb6/0x190 [ 74.586952][ T7567] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 74.586968][ T7567] ? kvm_guest_time_update+0x71e/0xeb0 [ 74.586981][ T7567] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 74.586995][ T7567] ? __pfx_kvm_mmu_load+0x10/0x10 [ 74.587006][ T7567] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 74.587021][ T7567] ? kvm_check_and_inject_events+0x725/0x12e0 [ 74.587036][ T7567] vcpu_run+0x33a4/0x4f50 [ 74.587048][ T7567] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 74.587063][ T7567] ? __pfx_vcpu_run+0x10/0x10 [ 74.587073][ T7567] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 74.587090][ T7567] ? rcu_is_watching+0x12/0xc0 [ 74.587101][ T7567] ? trace_lock_acquire+0x14e/0x1f0 [ 74.587112][ T7567] ? __local_bh_enable_ip+0xa4/0x120 [ 74.587129][ T7567] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.587139][ T7567] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 74.587154][ T7567] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 74.587165][ T7567] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 74.587180][ T7567] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 74.587193][ T7567] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 74.587208][ T7567] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 74.587226][ T7567] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 74.587244][ T7567] ? __pfx_lock_release+0x10/0x10 [ 74.587262][ T7567] ? selinux_file_ioctl+0x180/0x270 [ 74.587277][ T7567] ? selinux_file_ioctl+0xb4/0x270 [ 74.587292][ T7567] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 74.587304][ T7567] __x64_sys_ioctl+0x190/0x200 [ 74.587319][ T7567] do_syscall_64+0xcd/0x250 [ 74.587336][ T7567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.587350][ T7567] RIP: 0033:0x7f131fb8cde9 [ 74.587359][ T7567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.587374][ T7567] RSP: 002b:00007f1320a1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.587383][ T7567] RAX: ffffffffffffffda RBX: 00007f131fda5fa0 RCX: 00007f131fb8cde9 [ 74.587389][ T7567] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 74.587398][ T7567] RBP: 00007f1320a1a090 R08: 0000000000000000 R09: 0000000000000000 [ 74.587403][ T7567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.587408][ T7567] R13: 0000000000000000 R14: 00007f131fda5fa0 R15: 00007ffd706581f8 [ 74.587420][ T7567] [ 74.718335][ T63] usb 6-1: USB disconnect, device number 5 [ 74.870148][ T7580] syzkaller0: entered promiscuous mode [ 74.871724][ T7580] syzkaller0: entered allmulticast mode [ 75.204862][ T7582] __nla_validate_parse: 3 callbacks suppressed [ 75.204882][ T7582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.402'. [ 75.264362][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 75.281523][ T39] kauditd_printk_skb: 27 callbacks suppressed [ 75.281535][ T39] audit: type=1400 audit(1739170119.214:519): avc: denied { getopt } for pid=7581 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 76.216447][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 76.222800][ T7606] FAULT_INJECTION: forcing a failure. [ 76.222800][ T7606] name failslab, interval 1, probability 0, space 0, times 0 [ 76.227848][ T7606] CPU: 2 UID: 0 PID: 7606 Comm: syz.1.409 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 76.227871][ T7606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.227882][ T7606] Call Trace: [ 76.227888][ T7606] [ 76.227895][ T7606] dump_stack_lvl+0x16c/0x1f0 [ 76.227922][ T7606] should_fail_ex+0x50a/0x650 [ 76.227949][ T7606] ? fs_reclaim_acquire+0xae/0x150 [ 76.227976][ T7606] should_failslab+0xc2/0x120 [ 76.227997][ T7606] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 76.228017][ T7606] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 76.228046][ T7606] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 76.228075][ T7606] mmu_topup_memory_caches+0x25/0x170 [ 76.228098][ T7606] kvm_mmu_load+0xda/0x22a0 [ 76.228135][ T7606] ? kvm_apic_has_interrupt+0xb6/0x190 [ 76.228162][ T7606] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 76.228192][ T7606] ? kvm_guest_time_update+0x71e/0xeb0 [ 76.228213][ T7606] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 76.228233][ T7606] ? __pfx_kvm_mmu_load+0x10/0x10 [ 76.228251][ T7606] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 76.228275][ T7606] ? kvm_check_and_inject_events+0x725/0x12e0 [ 76.228301][ T7606] vcpu_run+0x33a4/0x4f50 [ 76.228321][ T7606] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 76.228349][ T7606] ? __pfx_vcpu_run+0x10/0x10 [ 76.228365][ T7606] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 76.228391][ T7606] ? rcu_is_watching+0x12/0xc0 [ 76.228409][ T7606] ? trace_lock_acquire+0x14e/0x1f0 [ 76.228426][ T7606] ? __local_bh_enable_ip+0xa4/0x120 [ 76.228450][ T7606] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.228467][ T7606] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 76.228492][ T7606] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 76.228511][ T7606] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 76.228537][ T7606] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 76.228560][ T7606] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 76.228587][ T7606] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 76.228616][ T7606] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 76.228645][ T7606] ? __pfx_lock_release+0x10/0x10 [ 76.228676][ T7606] ? selinux_file_ioctl+0x180/0x270 [ 76.228697][ T7606] ? selinux_file_ioctl+0xb4/0x270 [ 76.228721][ T7606] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 76.228741][ T7606] __x64_sys_ioctl+0x190/0x200 [ 76.228764][ T7606] do_syscall_64+0xcd/0x250 [ 76.228782][ T7606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.228803][ T7606] RIP: 0033:0x7f5dd3b8cde9 [ 76.228816][ T7606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.228831][ T7606] RSP: 002b:00007f5dd4aa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.228847][ T7606] RAX: ffffffffffffffda RBX: 00007f5dd3da5fa0 RCX: 00007f5dd3b8cde9 [ 76.228857][ T7606] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 76.228867][ T7606] RBP: 00007f5dd4aa9090 R08: 0000000000000000 R09: 0000000000000000 [ 76.228876][ T7606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.228885][ T7606] R13: 0000000000000000 R14: 00007f5dd3da5fa0 R15: 00007fff28df0198 [ 76.228908][ T7606] [ 76.319683][ T3543] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.348401][ T3543] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.372061][ T7622] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 76.392200][ T7622] bond2: entered promiscuous mode [ 76.393791][ T7622] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.399005][ T1020] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.405730][ T7622] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.407987][ T7622] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 76.411482][ T7622] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 76.415867][ T7622] bond2: (slave ip6gre1): making interface the new active one [ 76.417882][ T7622] ip6gre1: entered promiscuous mode [ 76.420339][ T7622] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 76.443291][ T7625] tmpfs: Unknown parameter 'ind' [ 76.444629][ T7631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.416'. [ 76.478445][ T833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.554728][ T7625] bond0: (slave bond_slave_0): Releasing backup interface [ 76.560266][ T7641] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 76.619146][ T1020] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.728425][ T833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.775447][ T7648] block nbd4: not configured, cannot reconfigure [ 76.779588][ T39] audit: type=1400 audit(1739170120.723:520): avc: denied { read } for pid=7647 comm="syz.4.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.786790][ T39] audit: type=1400 audit(1739170120.723:521): avc: denied { map } for pid=7647 comm="syz.4.420" path="socket:[20281]" dev="sockfs" ino=20281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.848504][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.938442][ T5998] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 77.018404][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 77.097190][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 77.344653][ T7660] FAULT_INJECTION: forcing a failure. [ 77.344653][ T7660] name failslab, interval 1, probability 0, space 0, times 0 [ 77.348043][ T7660] CPU: 3 UID: 0 PID: 7660 Comm: syz.4.424 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 77.348057][ T7660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.348063][ T7660] Call Trace: [ 77.348067][ T7660] [ 77.348071][ T7660] dump_stack_lvl+0x16c/0x1f0 [ 77.348088][ T7660] should_fail_ex+0x50a/0x650 [ 77.348105][ T7660] ? fs_reclaim_acquire+0xae/0x150 [ 77.348123][ T7660] should_failslab+0xc2/0x120 [ 77.348135][ T7660] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 77.348147][ T7660] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 77.348165][ T7660] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 77.348182][ T7660] mmu_topup_memory_caches+0x25/0x170 [ 77.348197][ T7660] kvm_mmu_load+0xda/0x22a0 [ 77.348214][ T7660] ? kvm_apic_has_interrupt+0xb6/0x190 [ 77.348231][ T7660] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 77.348246][ T7660] ? kvm_guest_time_update+0x71e/0xeb0 [ 77.348259][ T7660] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 77.348274][ T7660] ? __pfx_kvm_mmu_load+0x10/0x10 [ 77.348285][ T7660] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 77.348300][ T7660] ? kvm_check_and_inject_events+0x725/0x12e0 [ 77.348315][ T7660] vcpu_run+0x33a4/0x4f50 [ 77.348327][ T7660] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 77.348342][ T7660] ? __pfx_vcpu_run+0x10/0x10 [ 77.348352][ T7660] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 77.348369][ T7660] ? rcu_is_watching+0x12/0xc0 [ 77.348379][ T7660] ? trace_lock_acquire+0x14e/0x1f0 [ 77.348391][ T7660] ? __local_bh_enable_ip+0xa4/0x120 [ 77.348407][ T7660] ? lockdep_hardirqs_on+0x7c/0x110 [ 77.348418][ T7660] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 77.348433][ T7660] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 77.348444][ T7660] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 77.348459][ T7660] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 77.348473][ T7660] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 77.348488][ T7660] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 77.348506][ T7660] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 77.348523][ T7660] ? __pfx_lock_release+0x10/0x10 [ 77.348542][ T7660] ? selinux_file_ioctl+0x180/0x270 [ 77.348556][ T7660] ? selinux_file_ioctl+0xb4/0x270 [ 77.348572][ T7660] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 77.348584][ T7660] __x64_sys_ioctl+0x190/0x200 [ 77.348600][ T7660] do_syscall_64+0xcd/0x250 [ 77.348612][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.348627][ T7660] RIP: 0033:0x7f06abf8cde9 [ 77.348636][ T7660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.348645][ T7660] RSP: 002b:00007f06ace37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.348655][ T7660] RAX: ffffffffffffffda RBX: 00007f06ac1a5fa0 RCX: 00007f06abf8cde9 [ 77.348661][ T7660] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 77.348666][ T7660] RBP: 00007f06ace37090 R08: 0000000000000000 R09: 0000000000000000 [ 77.348672][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.348677][ T7660] R13: 0000000000000000 R14: 00007f06ac1a5fa0 R15: 00007ffd258c6c18 [ 77.348689][ T7660] [ 77.493664][ T7670] netlink: 188 bytes leftover after parsing attributes in process `syz.3.426'. [ 77.500370][ T7670] netlink: 'syz.3.426': attribute type 1 has an invalid length. [ 77.604928][ T7684] syzkaller0: entered promiscuous mode [ 77.606477][ T7684] syzkaller0: entered allmulticast mode [ 77.650242][ T39] audit: type=1400 audit(1739170121.602:522): avc: denied { setattr } for pid=7690 comm="syz.4.434" name="/" dev="9p" ino=36186058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.743975][ T7702] tmpfs: Cannot change global quota limit on remount [ 77.750563][ T39] audit: type=1400 audit(1739170121.715:523): avc: denied { accept } for pid=7680 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.824155][ T39] audit: type=1400 audit(1739170121.777:524): avc: denied { append } for pid=7700 comm="syz.2.437" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.819774][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.434'. [ 78.859562][ T7706] IPVS: set_ctl: invalid protocol: 29 172.20.20.27:20004 [ 78.927215][ T7714] FAULT_INJECTION: forcing a failure. [ 78.927215][ T7714] name failslab, interval 1, probability 0, space 0, times 0 [ 78.930643][ T7714] CPU: 0 UID: 0 PID: 7714 Comm: syz.3.441 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 78.930658][ T7714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.930664][ T7714] Call Trace: [ 78.930688][ T7714] [ 78.930692][ T7714] dump_stack_lvl+0x16c/0x1f0 [ 78.930846][ T7714] should_fail_ex+0x50a/0x650 [ 78.930942][ T7714] ? fs_reclaim_acquire+0xae/0x150 [ 78.931014][ T7714] should_failslab+0xc2/0x120 [ 78.931041][ T7714] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 78.931053][ T7714] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 78.931116][ T7714] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 78.931133][ T7714] mmu_topup_memory_caches+0x25/0x170 [ 78.931165][ T7714] kvm_mmu_load+0xda/0x22a0 [ 78.931195][ T7714] ? kvm_apic_has_interrupt+0xb6/0x190 [ 78.931213][ T7714] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 78.931228][ T7714] ? kvm_guest_time_update+0x71e/0xeb0 [ 78.931242][ T7714] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 78.931256][ T7714] ? __pfx_kvm_mmu_load+0x10/0x10 [ 78.931268][ T7714] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 78.931283][ T7714] ? kvm_check_and_inject_events+0x725/0x12e0 [ 78.931299][ T7714] vcpu_run+0x33a4/0x4f50 [ 78.931311][ T7714] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 78.931327][ T7714] ? __pfx_vcpu_run+0x10/0x10 [ 78.931336][ T7714] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 78.931375][ T7714] ? rcu_is_watching+0x12/0xc0 [ 78.931387][ T7714] ? trace_lock_acquire+0x14e/0x1f0 [ 78.931398][ T7714] ? __local_bh_enable_ip+0xa4/0x120 [ 78.931430][ T7714] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.931441][ T7714] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 78.931456][ T7714] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 78.931468][ T7714] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 78.931483][ T7714] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 78.931496][ T7714] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 78.931511][ T7714] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 78.931541][ T7714] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 78.931559][ T7714] ? __pfx_lock_release+0x10/0x10 [ 78.931591][ T7714] ? selinux_file_ioctl+0x180/0x270 [ 78.931608][ T7714] ? selinux_file_ioctl+0xb4/0x270 [ 78.931623][ T7714] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 78.931636][ T7714] __x64_sys_ioctl+0x190/0x200 [ 78.931660][ T7714] do_syscall_64+0xcd/0x250 [ 78.931673][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.931689][ T7714] RIP: 0033:0x7fa6a218cde9 [ 78.931698][ T7714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.931708][ T7714] RSP: 002b:00007fa6a3038038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.931718][ T7714] RAX: ffffffffffffffda RBX: 00007fa6a23a5fa0 RCX: 00007fa6a218cde9 [ 78.931724][ T7714] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 78.931730][ T7714] RBP: 00007fa6a3038090 R08: 0000000000000000 R09: 0000000000000000 [ 78.931735][ T7714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.931741][ T7714] R13: 0000000000000000 R14: 00007fa6a23a5fa0 R15: 00007ffd32c1dd78 [ 78.931752][ T7714] [ 79.015756][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.059690][ T7728] overlayfs: failed to resolve './bus': -2 [ 79.093210][ T7735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.443'. [ 79.102003][ T7735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.443'. [ 79.183130][ T39] audit: type=1400 audit(1739170123.177:525): avc: denied { listen } for pid=7750 comm="syz.1.452" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 79.190804][ T7756] fuse: Bad value for 'user_id' [ 79.192299][ T7756] fuse: Bad value for 'user_id' [ 79.200153][ T39] audit: type=1400 audit(1739170123.197:526): avc: denied { read } for pid=7757 comm="syz.2.454" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 79.200493][ T7758] autofs4:pid:7758:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 79.206967][ T39] audit: type=1400 audit(1739170123.197:527): avc: denied { open } for pid=7757 comm="syz.2.454" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 79.221364][ T7753] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 79.223505][ T39] audit: type=1400 audit(1739170123.197:528): avc: denied { ioctl } for pid=7757 comm="syz.2.454" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 79.229052][ T7753] cgroup: subsys name conflicts with all [ 79.256396][ T7762] netlink: 92 bytes leftover after parsing attributes in process `syz.1.455'. [ 79.265263][ T7766] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 79.323336][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 79.323620][ T7770] FAULT_INJECTION: forcing a failure. [ 79.323620][ T7770] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 79.332732][ T7770] CPU: 2 UID: 0 PID: 7770 Comm: syz.4.459 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 79.332756][ T7770] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.332766][ T7770] Call Trace: [ 79.332790][ T7770] [ 79.332797][ T7770] dump_stack_lvl+0x16c/0x1f0 [ 79.332981][ T7770] should_fail_ex+0x50a/0x650 [ 79.333087][ T7770] ? __pfx___might_resched+0x10/0x10 [ 79.333176][ T7770] should_fail_alloc_page+0xe7/0x130 [ 79.333239][ T7770] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 79.333286][ T7770] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 79.333306][ T7770] ? kasan_save_track+0x14/0x30 [ 79.333322][ T7770] ? __kasan_kmalloc+0xaa/0xb0 [ 79.333336][ T7770] ? __kmalloc_node_noprof+0x21f/0x510 [ 79.333354][ T7770] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 79.333391][ T7770] ? __kvm_mmu_topup_memory_cache+0x451/0x600 [ 79.333440][ T7770] ? mmu_topup_memory_caches+0xbc/0x170 [ 79.333472][ T7770] ? kvm_mmu_load+0xda/0x22a0 [ 79.333501][ T7770] ? vcpu_run+0x33a4/0x4f50 [ 79.333516][ T7770] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 79.333530][ T7770] ? kvm_vcpu_ioctl+0x5ea/0x16b0 [ 79.333543][ T7770] ? __x64_sys_ioctl+0x190/0x200 [ 79.333582][ T7770] ? do_syscall_64+0xcd/0x250 [ 79.333599][ T7770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.333627][ T7770] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 79.333659][ T7770] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.333701][ T7770] ? policy_nodemask+0xea/0x4e0 [ 79.333722][ T7770] alloc_pages_mpol+0x1fc/0x540 [ 79.333740][ T7770] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 79.333756][ T7770] ? trace_kmalloc+0x2d/0xd0 [ 79.333775][ T7770] ? __kmalloc_node_noprof+0x23d/0x510 [ 79.333790][ T7770] ? rcu_is_watching+0x12/0xc0 [ 79.333822][ T7770] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 79.333849][ T7770] alloc_pages_noprof+0x131/0x390 [ 79.333866][ T7770] get_free_pages_noprof+0xc/0x40 [ 79.333884][ T7770] __kvm_mmu_topup_memory_cache+0x278/0x600 [ 79.333912][ T7770] mmu_topup_memory_caches+0xbc/0x170 [ 79.333931][ T7770] kvm_mmu_load+0xda/0x22a0 [ 79.333950][ T7770] ? kvm_apic_has_interrupt+0xb6/0x190 [ 79.333974][ T7770] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 79.333996][ T7770] ? kvm_guest_time_update+0x71e/0xeb0 [ 79.334029][ T7770] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 79.334048][ T7770] ? __pfx_kvm_mmu_load+0x10/0x10 [ 79.334063][ T7770] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 79.334083][ T7770] ? kvm_check_and_inject_events+0x725/0x12e0 [ 79.334104][ T7770] vcpu_run+0x33a4/0x4f50 [ 79.334121][ T7770] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 79.334145][ T7770] ? __pfx_vcpu_run+0x10/0x10 [ 79.334158][ T7770] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 79.334211][ T7770] ? rcu_is_watching+0x12/0xc0 [ 79.334226][ T7770] ? trace_lock_acquire+0x14e/0x1f0 [ 79.334241][ T7770] ? __local_bh_enable_ip+0xa4/0x120 [ 79.334287][ T7770] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.334302][ T7770] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 79.334322][ T7770] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 79.334337][ T7770] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 79.334342][ T7777] mkiss: ax0: crc mode is auto. [ 79.334358][ T7770] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 79.334378][ T7770] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 79.334400][ T7770] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 79.334436][ T7770] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 79.334459][ T7770] ? __pfx_lock_release+0x10/0x10 [ 79.334505][ T7770] ? selinux_file_ioctl+0x180/0x270 [ 79.334523][ T7770] ? selinux_file_ioctl+0xb4/0x270 [ 79.334543][ T7770] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 79.334560][ T7770] __x64_sys_ioctl+0x190/0x200 [ 79.334581][ T7770] do_syscall_64+0xcd/0x250 [ 79.334598][ T7770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.334616][ T7770] RIP: 0033:0x7f06abf8cde9 [ 79.334629][ T7770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.334643][ T7770] RSP: 002b:00007f06ace37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.334658][ T7770] RAX: ffffffffffffffda RBX: 00007f06ac1a5fa0 RCX: 00007f06abf8cde9 [ 79.334667][ T7770] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 79.334675][ T7770] RBP: 00007f06ace37090 R08: 0000000000000000 R09: 0000000000000000 [ 79.334683][ T7770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.334691][ T7770] R13: 0000000000000000 R14: 00007f06ac1a5fa0 R15: 00007ffd258c6c18 [ 79.334711][ T7770] [ 79.853679][ T7801] wg1 speed is unknown, defaulting to 1000 [ 79.857672][ T7801] wg1 speed is unknown, defaulting to 1000 [ 79.862438][ T7801] wg1 speed is unknown, defaulting to 1000 [ 79.871300][ T7801] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 79.879442][ T7801] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 79.906100][ T7801] wg1 speed is unknown, defaulting to 1000 [ 79.916417][ T7801] wg1 speed is unknown, defaulting to 1000 [ 79.927695][ T7801] wg1 speed is unknown, defaulting to 1000 [ 79.932279][ T7801] wg1 speed is unknown, defaulting to 1000 [ 79.970243][ T7818] FAULT_INJECTION: forcing a failure. [ 79.970243][ T7818] name failslab, interval 1, probability 0, space 0, times 0 [ 79.973838][ T7818] CPU: 3 UID: 0 PID: 7818 Comm: syz.4.474 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 79.973853][ T7818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.973860][ T7818] Call Trace: [ 79.973864][ T7818] [ 79.973868][ T7818] dump_stack_lvl+0x16c/0x1f0 [ 79.973887][ T7818] should_fail_ex+0x50a/0x650 [ 79.973904][ T7818] ? fs_reclaim_acquire+0xae/0x150 [ 79.973926][ T7818] should_failslab+0xc2/0x120 [ 79.973942][ T7818] __kmalloc_node_noprof+0xd1/0x510 [ 79.973956][ T7818] ? rcu_is_watching+0x12/0xc0 [ 79.973970][ T7818] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 79.973992][ T7818] __kvmalloc_node_noprof+0xad/0x1a0 [ 79.974023][ T7818] __kvm_mmu_topup_memory_cache+0x451/0x600 [ 79.974046][ T7818] mmu_topup_memory_caches+0xbc/0x170 [ 79.974060][ T7818] kvm_mmu_load+0xda/0x22a0 [ 79.974074][ T7818] ? kvm_apic_has_interrupt+0xb6/0x190 [ 79.974091][ T7818] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 79.974106][ T7818] ? kvm_guest_time_update+0x71e/0xeb0 [ 79.974119][ T7818] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 79.974138][ T7818] ? __pfx_kvm_mmu_load+0x10/0x10 [ 79.974149][ T7818] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 79.974165][ T7818] ? kvm_check_and_inject_events+0x725/0x12e0 [ 79.974198][ T7818] vcpu_run+0x33a4/0x4f50 [ 79.974210][ T7818] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 79.974226][ T7818] ? __pfx_vcpu_run+0x10/0x10 [ 79.974236][ T7818] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 79.974252][ T7818] ? rcu_is_watching+0x12/0xc0 [ 79.974262][ T7818] ? trace_lock_acquire+0x14e/0x1f0 [ 79.974273][ T7818] ? __local_bh_enable_ip+0xa4/0x120 [ 79.974289][ T7818] ? lockdep_hardirqs_on+0x7c/0x110 [ 79.974300][ T7818] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 79.974314][ T7818] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 79.974326][ T7818] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 79.974341][ T7818] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 79.974354][ T7818] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 79.974369][ T7818] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 79.974388][ T7818] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 79.974405][ T7818] ? __pfx_lock_release+0x10/0x10 [ 79.974424][ T7818] ? selinux_file_ioctl+0x180/0x270 [ 79.974438][ T7818] ? selinux_file_ioctl+0xb4/0x270 [ 79.974453][ T7818] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 79.974466][ T7818] __x64_sys_ioctl+0x190/0x200 [ 79.974482][ T7818] do_syscall_64+0xcd/0x250 [ 79.974494][ T7818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.974509][ T7818] RIP: 0033:0x7f06abf8cde9 [ 79.974518][ T7818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.974527][ T7818] RSP: 002b:00007f06ace37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.974538][ T7818] RAX: ffffffffffffffda RBX: 00007f06ac1a5fa0 RCX: 00007f06abf8cde9 [ 79.974544][ T7818] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 79.974549][ T7818] RBP: 00007f06ace37090 R08: 0000000000000000 R09: 0000000000000000 [ 79.974555][ T7818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.974560][ T7818] R13: 0000000000000000 R14: 00007f06ac1a5fa0 R15: 00007ffd258c6c18 [ 79.974572][ T7818] [ 80.078438][ T7830] loop9: detected capacity change from 0 to 6 [ 80.225839][ T7843] netlink: 4420 bytes leftover after parsing attributes in process `syz.2.484'. [ 80.229639][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 80.229652][ T39] audit: type=1400 audit(1739170124.266:536): avc: denied { read } for pid=7842 comm="syz.2.484" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 80.239612][ T39] audit: type=1400 audit(1739170124.266:537): avc: denied { open } for pid=7842 comm="syz.2.484" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 80.367315][ T7873] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 80.376923][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 80.380448][ T7880] netlink: 124 bytes leftover after parsing attributes in process `syz.2.492'. [ 80.447281][ T7884] kvm: emulating exchange as write [ 80.460573][ T7880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7880 comm=syz.2.492 [ 80.503600][ T39] audit: type=1400 audit(1739170124.542:538): avc: denied { setattr } for pid=7890 comm="syz.2.496" name="sequencer" dev="devtmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 80.512109][ T39] audit: type=1400 audit(1739170124.542:539): avc: denied { getopt } for pid=7890 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.518132][ T7885] netlink: 19 bytes leftover after parsing attributes in process `syz.1.493'. [ 80.633598][ T7907] sp0: Synchronizing with TNC [ 80.639169][ T7907] 9pnet_fd: Insufficient options for proto=fd [ 80.750461][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.502'. [ 80.753422][ T7917] netlink: 104 bytes leftover after parsing attributes in process `syz.4.502'. [ 80.810611][ T39] audit: type=1400 audit(1739170124.850:540): avc: denied { execmod } for pid=7919 comm="syz.4.503" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=22075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 80.844638][ T39] audit: type=1400 audit(1739170124.891:541): avc: denied { read } for pid=7908 comm="syz.2.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.893513][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'. [ 80.898666][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'. [ 81.267351][ T39] audit: type=1400 audit(1739170125.322:542): avc: denied { nlmsg_write } for pid=7928 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 81.272373][ T7929] netlink: 39 bytes leftover after parsing attributes in process `syz.1.505'. [ 81.278982][ T39] audit: type=1400 audit(1739170125.332:543): avc: denied { accept } for pid=7928 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.286266][ T39] audit: type=1400 audit(1739170125.332:544): avc: denied { read } for pid=7928 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.380492][ T39] audit: type=1400 audit(1739170125.444:545): avc: denied { read } for pid=7940 comm="syz.1.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.406304][ T7941] xt_hashlimit: size too large, truncated to 1048576 [ 81.601193][ T7944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.605563][ T7944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.649843][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.510'. [ 82.010523][ T7972] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 82.018830][ T834] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 82.130784][ T5952] Bluetooth: hci0: command 0x0405 tx timeout [ 82.178401][ T834] usb 9-1: Using ep0 maxpacket: 8 [ 82.180542][ T25] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 82.185551][ T834] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 82.188714][ T834] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.192465][ T834] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.195537][ T834] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.199320][ T834] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.204474][ T834] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.208296][ T834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.364213][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 82.368970][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.372015][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.374971][ T25] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 82.377529][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.381193][ T25] usb 6-1: config 0 descriptor?? [ 82.420855][ T834] usb 9-1: usb_control_msg returned -32 [ 82.422574][ T834] usbtmc 9-1:16.0: can't read capabilities [ 82.781627][ T25] savu 0003:1E7D:2D5A.0004: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 82.996409][ T25] usb 6-1: USB disconnect, device number 6 [ 83.085780][ T8015] FAULT_INJECTION: forcing a failure. [ 83.085780][ T8015] name failslab, interval 1, probability 0, space 0, times 0 [ 83.089973][ T8015] CPU: 2 UID: 0 PID: 8015 Comm: syz.3.530 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 83.089988][ T8015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.089995][ T8015] Call Trace: [ 83.089998][ T8015] [ 83.090003][ T8015] dump_stack_lvl+0x16c/0x1f0 [ 83.090022][ T8015] should_fail_ex+0x50a/0x650 [ 83.090040][ T8015] ? fs_reclaim_acquire+0xae/0x150 [ 83.090058][ T8015] should_failslab+0xc2/0x120 [ 83.090071][ T8015] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 83.090085][ T8015] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 83.090110][ T8015] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 83.090167][ T8015] mmu_topup_memory_caches+0x25/0x170 [ 83.090190][ T8015] kvm_mmu_load+0xda/0x22a0 [ 83.090212][ T8015] ? kvm_apic_has_interrupt+0xb6/0x190 [ 83.090237][ T8015] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 83.090259][ T8015] ? kvm_guest_time_update+0x71e/0xeb0 [ 83.090280][ T8015] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 83.090302][ T8015] ? __pfx_kvm_mmu_load+0x10/0x10 [ 83.090321][ T8015] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 83.090343][ T8015] ? kvm_check_and_inject_events+0x725/0x12e0 [ 83.090368][ T8015] vcpu_run+0x33a4/0x4f50 [ 83.090385][ T8015] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 83.090410][ T8015] ? __pfx_vcpu_run+0x10/0x10 [ 83.090426][ T8015] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 83.090452][ T8015] ? rcu_is_watching+0x12/0xc0 [ 83.090473][ T8015] ? trace_lock_acquire+0x14e/0x1f0 [ 83.090489][ T8015] ? __local_bh_enable_ip+0xa4/0x120 [ 83.090510][ T8015] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.090522][ T8015] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 83.090537][ T8015] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 83.090549][ T8015] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 83.090564][ T8015] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 83.090578][ T8015] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 83.090593][ T8015] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 83.090612][ T8015] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 83.090630][ T8015] ? __pfx_lock_release+0x10/0x10 [ 83.090648][ T8015] ? selinux_file_ioctl+0x180/0x270 [ 83.090663][ T8015] ? selinux_file_ioctl+0xb4/0x270 [ 83.090678][ T8015] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 83.090690][ T8015] __x64_sys_ioctl+0x190/0x200 [ 83.090706][ T8015] do_syscall_64+0xcd/0x250 [ 83.090719][ T8015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.090734][ T8015] RIP: 0033:0x7fa6a218cde9 [ 83.090744][ T8015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.090754][ T8015] RSP: 002b:00007fa6a3038038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.090765][ T8015] RAX: ffffffffffffffda RBX: 00007fa6a23a5fa0 RCX: 00007fa6a218cde9 [ 83.090771][ T8015] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 83.090777][ T8015] RBP: 00007fa6a3038090 R08: 0000000000000000 R09: 0000000000000000 [ 83.090783][ T8015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.090788][ T8015] R13: 0000000000000000 R14: 00007fa6a23a5fa0 R15: 00007ffd32c1dd78 [ 83.090800][ T8015] [ 83.385093][ T8026] team0: Device ipip1 is of different type [ 83.465480][ T8028] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 83.517001][ T8030] netlink: 'syz.1.537': attribute type 6 has an invalid length. [ 83.586082][ T8036] sctp: [Deprecated]: syz.1.537 (pid 8036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.586082][ T8036] Use struct sctp_sack_info instead [ 83.756075][ T8040] FAULT_INJECTION: forcing a failure. [ 83.756075][ T8040] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 83.759908][ T8040] CPU: 0 UID: 0 PID: 8040 Comm: syz.3.539 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 83.759923][ T8040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.759930][ T8040] Call Trace: [ 83.759933][ T8040] [ 83.759938][ T8040] dump_stack_lvl+0x16c/0x1f0 [ 83.759957][ T8040] should_fail_ex+0x50a/0x650 [ 83.759974][ T8040] ? __pfx___might_resched+0x10/0x10 [ 83.759995][ T8040] should_fail_alloc_page+0xe7/0x130 [ 83.760009][ T8040] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 83.760026][ T8040] ? __memcg_kmem_charge_page+0x1b0/0x2b0 [ 83.760041][ T8040] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 83.760053][ T8040] ? kasan_save_track+0x14/0x30 [ 83.760062][ T8040] ? __kasan_kmalloc+0xaa/0xb0 [ 83.760071][ T8040] ? __kmalloc_node_noprof+0x21f/0x510 [ 83.760082][ T8040] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 83.760098][ T8040] ? __kvm_mmu_topup_memory_cache+0x451/0x600 [ 83.760114][ T8040] ? mmu_topup_memory_caches+0xbc/0x170 [ 83.760126][ T8040] ? kvm_mmu_load+0xda/0x22a0 [ 83.760137][ T8040] ? vcpu_run+0x33a4/0x4f50 [ 83.760148][ T8040] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 83.760160][ T8040] ? kvm_vcpu_ioctl+0x5ea/0x16b0 [ 83.760170][ T8040] ? __x64_sys_ioctl+0x190/0x200 [ 83.760183][ T8040] ? do_syscall_64+0xcd/0x250 [ 83.760194][ T8040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.760211][ T8040] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 83.760230][ T8040] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.760248][ T8040] ? policy_nodemask+0xea/0x4e0 [ 83.760262][ T8040] alloc_pages_mpol+0x1fc/0x540 [ 83.760274][ T8040] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 83.760284][ T8040] ? trace_kmalloc+0x2d/0xd0 [ 83.760296][ T8040] ? __kmalloc_node_noprof+0x23d/0x510 [ 83.760306][ T8040] ? rcu_is_watching+0x12/0xc0 [ 83.760317][ T8040] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 83.760334][ T8040] alloc_pages_noprof+0x131/0x390 [ 83.760346][ T8040] get_free_pages_noprof+0xc/0x40 [ 83.760358][ T8040] __kvm_mmu_topup_memory_cache+0x278/0x600 [ 83.760376][ T8040] mmu_topup_memory_caches+0xbc/0x170 [ 83.760393][ T8040] kvm_mmu_load+0xda/0x22a0 [ 83.760405][ T8040] ? kvm_apic_has_interrupt+0xb6/0x190 [ 83.760421][ T8040] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 83.760437][ T8040] ? kvm_guest_time_update+0x71e/0xeb0 [ 83.760449][ T8040] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 83.760463][ T8040] ? __pfx_kvm_mmu_load+0x10/0x10 [ 83.760477][ T8040] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 83.760492][ T8040] ? kvm_check_and_inject_events+0x725/0x12e0 [ 83.760506][ T8040] vcpu_run+0x33a4/0x4f50 [ 83.760518][ T8040] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 83.760534][ T8040] ? __pfx_vcpu_run+0x10/0x10 [ 83.760544][ T8040] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 83.760559][ T8040] ? rcu_is_watching+0x12/0xc0 [ 83.760569][ T8040] ? trace_lock_acquire+0x14e/0x1f0 [ 83.760580][ T8040] ? __local_bh_enable_ip+0xa4/0x120 [ 83.760597][ T8040] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.760607][ T8040] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 83.760622][ T8040] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 83.760634][ T8040] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 83.760649][ T8040] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 83.760662][ T8040] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 83.760677][ T8040] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 83.760694][ T8040] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 83.760712][ T8040] ? __pfx_lock_release+0x10/0x10 [ 83.760731][ T8040] ? selinux_file_ioctl+0x180/0x270 [ 83.760745][ T8040] ? selinux_file_ioctl+0xb4/0x270 [ 83.760761][ T8040] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 83.760773][ T8040] __x64_sys_ioctl+0x190/0x200 [ 83.760788][ T8040] do_syscall_64+0xcd/0x250 [ 83.760799][ T8040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.760813][ T8040] RIP: 0033:0x7fa6a218cde9 [ 83.760821][ T8040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.760831][ T8040] RSP: 002b:00007fa6a3038038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.760841][ T8040] RAX: ffffffffffffffda RBX: 00007fa6a23a5fa0 RCX: 00007fa6a218cde9 [ 83.760847][ T8040] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 83.760852][ T8040] RBP: 00007fa6a3038090 R08: 0000000000000000 R09: 0000000000000000 [ 83.760858][ T8040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.760863][ T8040] R13: 0000000000000000 R14: 00007fa6a23a5fa0 R15: 00007ffd32c1dd78 [ 83.760875][ T8040] [ 83.892469][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.256314][ T8057] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 84.657292][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 84.730058][ T834] usb 9-1: USB disconnect, device number 5 [ 84.814323][ T8064] kvm: pic: non byte read [ 84.816649][ T8064] kvm: pic: non byte read [ 84.818973][ T8064] kvm: pic: single mode not supported [ 84.819372][ T8064] kvm: pic: level sensitive irq not supported [ 84.821821][ T8064] kvm: pic: non byte read [ 84.825576][ T8064] kvm: pic: single mode not supported [ 84.825614][ T8064] kvm: pic: level sensitive irq not supported [ 84.827148][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.827228][ T8064] kvm: pic: non byte read [ 84.828947][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 84.835213][ T8064] kvm: pic: non byte read [ 84.836760][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 84.838274][ T8064] kvm: pic: non byte read [ 84.840524][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.842982][ T8064] kvm: pic: non byte read [ 84.845849][ T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.847097][ T8064] kvm: pic: single mode not supported [ 84.849135][ T8064] kvm: pic: level sensitive irq not supported [ 84.849155][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.850710][ T8064] kvm: pic: non byte read [ 84.856693][ T8064] kvm: pic: level sensitive irq not supported [ 84.856942][ T8064] kvm: pic: non byte read [ 84.859815][ T25] usb 6-1: config 0 descriptor?? [ 84.860102][ T8064] kvm: pic: single mode not supported [ 84.862221][ T8064] kvm: pic: non byte read [ 84.864265][ T8059] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 84.958429][ T8073] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 84.963086][ T8073] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 84.966968][ T8073] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 84.969219][ T8073] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 84.972675][ T8076] FAULT_INJECTION: forcing a failure. [ 84.972675][ T8076] name failslab, interval 1, probability 0, space 0, times 0 [ 84.976200][ T8076] CPU: 0 UID: 0 PID: 8076 Comm: syz.3.550 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 84.976214][ T8076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.976222][ T8076] Call Trace: [ 84.976243][ T8076] [ 84.976247][ T8076] dump_stack_lvl+0x16c/0x1f0 [ 84.976397][ T8076] should_fail_ex+0x50a/0x650 [ 84.976490][ T8076] ? fs_reclaim_acquire+0xae/0x150 [ 84.976559][ T8076] should_failslab+0xc2/0x120 [ 84.976585][ T8076] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 84.976597][ T8076] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 84.976655][ T8076] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 84.976672][ T8076] mmu_topup_memory_caches+0x25/0x170 [ 84.976699][ T8076] kvm_mmu_load+0xda/0x22a0 [ 84.976728][ T8076] ? kvm_apic_has_interrupt+0xb6/0x190 [ 84.976745][ T8076] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 84.976761][ T8076] ? kvm_guest_time_update+0x71e/0xeb0 [ 84.976774][ T8076] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 84.976788][ T8076] ? __pfx_kvm_mmu_load+0x10/0x10 [ 84.976800][ T8076] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 84.976815][ T8076] ? kvm_check_and_inject_events+0x725/0x12e0 [ 84.976831][ T8076] vcpu_run+0x33a4/0x4f50 [ 84.976842][ T8076] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 84.976858][ T8076] ? __pfx_vcpu_run+0x10/0x10 [ 84.976868][ T8076] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 84.976906][ T8076] ? rcu_is_watching+0x12/0xc0 [ 84.976918][ T8076] ? trace_lock_acquire+0x14e/0x1f0 [ 84.976930][ T8076] ? __local_bh_enable_ip+0xa4/0x120 [ 84.976970][ T8076] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.976982][ T8076] ? kvm_arch_vcpu_ioctl_run+0x1a8/0x17f0 [ 84.976996][ T8076] ? kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 84.977008][ T8076] kvm_arch_vcpu_ioctl_run+0x865/0x17f0 [ 84.977023][ T8076] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 84.977037][ T8076] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 84.977053][ T8076] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 84.977084][ T8076] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 84.977102][ T8076] ? __pfx_lock_release+0x10/0x10 [ 84.977121][ T8076] ? selinux_file_ioctl+0x180/0x270 [ 84.977136][ T8076] ? selinux_file_ioctl+0xb4/0x270 [ 84.977151][ T8076] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 84.977164][ T8076] __x64_sys_ioctl+0x190/0x200 [ 84.977188][ T8076] do_syscall_64+0xcd/0x250 [ 84.977201][ T8076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.977217][ T8076] RIP: 0033:0x7fa6a218cde9 [ 84.977227][ T8076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.977237][ T8076] RSP: 002b:00007fa6a3038038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.977247][ T8076] RAX: ffffffffffffffda RBX: 00007fa6a23a5fa0 RCX: 00007fa6a218cde9 [ 84.977253][ T8076] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 84.977259][ T8076] RBP: 00007fa6a3038090 R08: 0000000000000000 R09: 0000000000000000 [ 84.977264][ T8076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.977269][ T8076] R13: 0000000000000000 R14: 00007fa6a23a5fa0 R15: 00007ffd32c1dd78 [ 84.977281][ T8076] [ 84.981662][ T8073] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 85.072764][ T8073] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 85.080562][ T8073] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 85.084727][ T8073] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 85.089308][ T8073] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 85.092507][ T8073] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 85.136489][ T834] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 85.269806][ T25] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 85.273678][ T25] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 85.279518][ T25] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 85.293723][ T834] usb 9-1: Using ep0 maxpacket: 16 [ 85.298381][ T834] usb 9-1: config 1 interface 0 altsetting 76 bulk endpoint 0x1 has invalid maxpacket 1024 [ 85.301157][ T834] usb 9-1: config 1 interface 0 altsetting 76 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.305036][ T834] usb 9-1: config 1 interface 0 has no altsetting 0 [ 85.310034][ T834] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 85.312593][ T834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.315235][ T834] usb 9-1: Product: ã©¿êœ¸à¸ªçœ€ë»«æ­‡ï—šåŠ…Û [ 85.317146][ T834] usb 9-1: Manufacturer: ᓊ⩧䧴詌Θ騥忻녀å¿éš‡í’™í˜‹å¼æªë¶ì‹œè˜Žì¡ªæ¼¶ëž¶ï—µç¢‰ïµî«¥ãˆá¸·ë¥¥ë¹¤è®ºé–µäœ‰ã¨™ê¥–岈ഞ⃺쇬莩钇è’ë¾ç¹­ï¸ë£°è½¬é£Šã†—êžá¿‰í‹ížšê­¿ê»®ã¨Ÿê˜¯á—‰è¯›ï¥°ê·‹åŽ¡ë¸¨æ¸•â½´ã­™ä§å¢æ³ë¡–䄮᳾ᑩ뾕ﲑ냱酈㾠[ 85.326029][ T8067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.328053][ T8067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.444324][ T8085] netlink: 'syz.3.553': attribute type 21 has an invalid length. [ 85.446661][ T8084] netlink: 'syz.3.553': attribute type 21 has an invalid length. [ 85.467800][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 85.467836][ T39] audit: type=1400 audit(1739170129.611:554): avc: denied { setattr } for pid=8083 comm="syz.3.553" name="tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 85.467969][ T3543] usb 6-1: USB disconnect, device number 7 [ 85.529647][ T8067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.532231][ T8067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.540763][ T834] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 76 proto 1 vid 0x0525 pid 0xA4A8 [ 85.544741][ T834] usb 9-1: USB disconnect, device number 6 [ 85.554788][ T834] usblp0: removed [ 85.648572][ T8098] __nla_validate_parse: 3 callbacks suppressed [ 85.648586][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 85.999273][ T39] audit: type=1400 audit(1739170130.151:555): avc: denied { execute } for pid=8102 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 86.006506][ T39] audit: type=1400 audit(1739170130.151:556): avc: denied { execute_no_trans } for pid=8102 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 86.022867][ T8104] pim6reg: entered allmulticast mode [ 86.026034][ T8104] macvlan0: entered allmulticast mode [ 86.027635][ T8104] veth1_vlan: entered allmulticast mode [ 86.067067][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 86.109462][ T5943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.116359][ T5943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.120292][ T5943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.123302][ T5943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.125464][ T5943] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.127755][ T5943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.155279][ T8111] wg1 speed is unknown, defaulting to 1000 [ 86.184646][ T39] audit: type=1400 audit(1739170130.344:557): avc: denied { relabelfrom } for pid=8117 comm="syz.1.565" name="" dev="pipefs" ino=24717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 86.225123][ T39] audit: type=1400 audit(1739170130.385:558): avc: denied { read } for pid=8115 comm="syz.4.564" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 86.227630][ T8111] chnl_net:caif_netlink_parms(): no params data found [ 86.235101][ T39] audit: type=1400 audit(1739170130.385:559): avc: denied { open } for pid=8115 comm="syz.4.564" path="/117/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 86.243325][ T8124] block device autoloading is deprecated and will be removed. [ 86.247845][ T39] audit: type=1400 audit(1739170130.415:560): avc: denied { ioctl } for pid=8115 comm="syz.4.564" path="/117/file0/file0" dev="fuse" ino=64 ioctlcmd=0x912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 86.258726][ T8123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.566'. [ 86.317403][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.319893][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.321981][ T8111] bridge_slave_0: entered allmulticast mode [ 86.324418][ T8111] bridge_slave_0: entered promiscuous mode [ 86.327952][ T8111] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.330000][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.332110][ T8111] bridge_slave_1: entered allmulticast mode [ 86.334381][ T8111] bridge_slave_1: entered promiscuous mode [ 86.359569][ T8111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.364549][ T8111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.380178][ T8135] Bluetooth: hci4: Frame reassembly failed (-84) [ 86.385019][ T8135] Bluetooth: hci4: Frame reassembly failed (-84) [ 86.387167][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 86.402731][ T8111] team0: Port device team_slave_0 added [ 86.410859][ T8111] team0: Port device team_slave_1 added [ 86.418007][ T39] audit: type=1400 audit(1739170130.578:561): avc: denied { associate } for pid=8136 comm="syz.4.571" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 86.427314][ T39] audit: type=1400 audit(1739170130.588:562): avc: denied { lock } for pid=8136 comm="syz.4.571" path="/119/file0/file0" dev="9p" ino=36186147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.437919][ T39] audit: type=1804 audit(1739170130.599:563): pid=8137 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.571" name="/newroot/119/file0/file0" dev="9p" ino=36186147 res=1 errno=0 [ 86.451944][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.454409][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.461441][ T8111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.466771][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.468683][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.476343][ T8111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.501428][ T8111] hsr_slave_0: entered promiscuous mode [ 86.504234][ T8111] hsr_slave_1: entered promiscuous mode [ 86.507376][ T8111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.509625][ T8111] Cannot create hsr debugfs directory [ 86.560477][ T8138] 9pnet_virtio: no channels available for device syz [ 86.676695][ T8111] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.682151][ T8111] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.686772][ T8111] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.690557][ T8111] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.740759][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.758466][ T8111] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.769982][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.773412][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.788567][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.790640][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.884335][ T8111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.994472][ T8111] veth0_vlan: entered promiscuous mode [ 86.999799][ T8111] veth1_vlan: entered promiscuous mode [ 87.014522][ T8111] veth0_macvtap: entered promiscuous mode [ 87.017653][ T8111] veth1_macvtap: entered promiscuous mode [ 87.026382][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.029587][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.032544][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.035907][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.038599][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.041406][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.044263][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.047039][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.050899][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.057764][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.060697][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.063606][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.066475][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.069126][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.072366][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.075115][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.077956][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.082539][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.086960][ T8111] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.089292][ T8111] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.091754][ T8111] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.094413][ T8111] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.132745][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.134998][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.149840][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.157138][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.224456][ T8163] trusted_key: encrypted_key: master key parameter '' is invalid [ 87.712597][ T8177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.056252][ T833] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 88.164878][ T5952] Bluetooth: hci1: command tx timeout [ 88.216219][ T833] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 88.219281][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.222530][ T833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.225551][ T833] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 88.229885][ T833] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 88.232670][ T833] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 88.235506][ T833] usb 7-1: Manufacturer: syz [ 88.239890][ T833] usb 7-1: config 0 descriptor?? [ 88.403032][ T5952] Bluetooth: hci4: command 0x1003 tx timeout [ 88.403369][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 88.487389][ T8193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.544668][ T8193] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 88.574507][ T8193] netfs: Couldn't get user pages (rc=-14) [ 88.639969][ T833] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 88.642670][ T833] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 88.650432][ T833] appleir 0003:05AC:8243.0006: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 89.224679][ T8198] affs: No valid root block on device nullb0 [ 89.267625][ T8202] Bluetooth: MGMT ver 1.23 [ 89.466599][ T8208] 9pnet_virtio: no channels available for device syz [ 89.473893][ T8208] dvmrp0: entered allmulticast mode [ 89.513575][ T8210] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 89.623582][ T8217] delete_channel: no stack [ 90.204608][ T8239] random: crng reseeded on system resumption [ 90.225464][ T5943] Bluetooth: hci1: command tx timeout [ 90.604301][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 90.618692][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 90.618708][ T39] audit: type=1400 audit(1739170134.842:573): avc: denied { read } for pid=8245 comm="syz.4.598" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 90.626586][ T39] audit: type=1400 audit(1739170134.842:574): avc: denied { open } for pid=8245 comm="syz.4.598" path="/135/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 90.633691][ T39] audit: type=1400 audit(1739170134.852:575): avc: denied { ioctl } for pid=8245 comm="syz.4.598" path="/135/file0/file0" dev="fuse" ino=0 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 90.671746][ T8253] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 90.678139][ T8253] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 90.678157][ T8254] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 90.687955][ T8256] syz_tun: entered allmulticast mode [ 90.692549][ T8256] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 90.694441][ T8256] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 90.696736][ T8256] vhci_hcd vhci_hcd.0: Device attached [ 90.722401][ T63] usb 7-1: USB disconnect, device number 6 [ 90.768828][ T8255] syz_tun: left allmulticast mode [ 90.770443][ T8257] vhci_hcd: connection closed [ 90.770601][ T11] vhci_hcd: stop threads [ 90.774003][ T11] vhci_hcd: release socket [ 90.775657][ T11] vhci_hcd: disconnect device [ 90.861847][ T39] audit: type=1400 audit(1739170135.096:576): avc: denied { bind } for pid=8275 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.916266][ T39] audit: type=1400 audit(1739170135.146:577): avc: denied { mounton } for pid=8281 comm="syz.1.610" path="/132/file0/bus" dev="ramfs" ino=26920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 90.917620][ T8282] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 90.925798][ T8282] overlayfs: failed to set xattr on upper [ 90.927422][ T8282] overlayfs: ...falling back to redirect_dir=nofollow. [ 90.929328][ T8282] overlayfs: ...falling back to metacopy=off. [ 90.931039][ T8282] overlayfs: ...falling back to index=off. [ 90.932682][ T8282] overlayfs: ...falling back to uuid=null. [ 91.093425][ T1020] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 91.252936][ T1020] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 91.257187][ T1020] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.261782][ T1020] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.265637][ T1020] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 91.273549][ T1020] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 91.277168][ T1020] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 91.280328][ T1020] usb 9-1: Manufacturer: syz [ 91.286232][ T1020] usb 9-1: config 0 descriptor?? [ 91.352665][ T8292] netlink: 'syz.2.614': attribute type 12 has an invalid length. [ 91.354908][ T8292] netlink: 132 bytes leftover after parsing attributes in process `syz.2.614'. [ 91.384195][ T8295] geneve0: mtu less than device minimum [ 91.582871][ T39] audit: type=1400 audit(1739170135.825:578): avc: denied { write } for pid=8301 comm="syz.5.616" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 91.582881][ T8303] orangefs_devreq_open: device cannot be opened in blocking mode [ 91.605729][ T8306] netlink: 32 bytes leftover after parsing attributes in process `syz.2.618'. [ 91.612078][ T39] audit: type=1400 audit(1739170135.855:579): avc: denied { setopt } for pid=8304 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 91.622147][ T39] audit: type=1400 audit(1739170135.865:580): avc: denied { read } for pid=8308 comm="syz.5.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.652774][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.620'. [ 91.656314][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'. [ 91.678219][ T8312] tipc: Started in network mode [ 91.679673][ T8312] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 91.682280][ T8312] tipc: Enabling of bearer rejected, failed to enable media [ 91.691720][ T1020] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 91.693965][ T1020] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 91.697695][ T1020] appleir 0003:05AC:8243.0007: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 91.853928][ T39] audit: type=1400 audit(1739170136.098:581): avc: denied { map } for pid=8316 comm="syz.2.622" path="/156/file0" dev="tmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.226406][ T833] usb 9-1: USB disconnect, device number 7 [ 92.279388][ T5943] Bluetooth: hci1: command tx timeout [ 92.593864][ T8338] syz.5.626 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 92.727192][ T8343] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 8343 comm: syz.5.627) [ 92.732376][ T39] audit: type=1800 audit(1739170136.978:582): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.627" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=25191 res=0 errno=0 [ 92.961379][ T8366] use of bytesused == 0 is deprecated and will be removed in the future, [ 92.964167][ T8366] use the actual size instead. [ 93.132190][ T8386] xt_hashlimit: invalid rate [ 93.139679][ T8386] tmpfs: Bad value for 'mpol' [ 93.192528][ T8390] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 93.193539][ T8391] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 93.271748][ T8401] netlink: 76 bytes leftover after parsing attributes in process `syz.4.646'. [ 93.389935][ T8398] netlink: 'syz.1.645': attribute type 1 has an invalid length. [ 93.393093][ T8398] NCSI netlink: No device for ifindex 0 [ 93.395520][ T8399] netlink: 'syz.1.645': attribute type 1 has an invalid length. [ 93.399215][ T8399] NCSI netlink: No device for ifindex 0 [ 93.451727][ T8411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.651'. [ 93.504702][ T8398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.645'. [ 93.956397][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.961804][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.963875][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.964574][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.969129][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.974740][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.975642][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.978358][ T5952] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.980002][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.981790][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.984292][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.984308][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.984340][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.995693][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.998356][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.006263][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.025487][ T8429] wg1 speed is unknown, defaulting to 1000 [ 94.098009][ T8429] chnl_net:caif_netlink_parms(): no params data found [ 94.142852][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.145016][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.147503][ T8429] bridge_slave_0: entered allmulticast mode [ 94.150278][ T8429] bridge_slave_0: entered promiscuous mode [ 94.156519][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.159533][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.162304][ T8429] bridge_slave_1: entered allmulticast mode [ 94.164673][ T8429] bridge_slave_1: entered promiscuous mode [ 94.189003][ T8429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.192725][ T8429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.223998][ T8429] team0: Port device team_slave_0 added [ 94.229337][ T8429] team0: Port device team_slave_1 added [ 94.250823][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.252836][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.262843][ T8429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.267995][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.270421][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.278625][ T8429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.314707][ T8429] hsr_slave_0: entered promiscuous mode [ 94.317394][ T8429] hsr_slave_1: entered promiscuous mode [ 94.319313][ T8429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.321447][ T8429] Cannot create hsr debugfs directory [ 94.326085][ T5943] Bluetooth: hci1: command tx timeout [ 94.415836][ T8429] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 94.420762][ T8429] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 94.424418][ T8429] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 94.429042][ T8429] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 94.448614][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.451538][ T8429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.454591][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.457281][ T8429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.493665][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.503789][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.516638][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.535586][ T8429] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.540430][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.543151][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.550873][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.552974][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.599594][ T8465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.661'. [ 94.602159][ T8465] netlink: 'syz.1.661': attribute type 7 has an invalid length. [ 94.609597][ T8465] netlink: 'syz.1.661': attribute type 8 has an invalid length. [ 94.611948][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.661'. [ 94.627852][ T8429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.662885][ T8429] veth0_vlan: entered promiscuous mode [ 94.667140][ T8429] veth1_vlan: entered promiscuous mode [ 94.679472][ T8429] veth0_macvtap: entered promiscuous mode [ 94.684315][ T8429] veth1_macvtap: entered promiscuous mode [ 94.690619][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.694748][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.697419][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.700261][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.703093][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.705930][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.708640][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.711455][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.714220][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.716942][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.720430][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.724384][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.727250][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.729908][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.733608][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.736315][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.739150][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.741924][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.745067][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.747765][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.750975][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.754551][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.761291][ T8429] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.763816][ T8429] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.766199][ T8429] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.768576][ T8429] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.812956][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.815176][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.831184][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.833400][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.924918][ T8491] netlink: 'syz.1.665': attribute type 13 has an invalid length. [ 95.390742][ T8515] wg1 speed is unknown, defaulting to 1000 [ 95.459517][ T8515] netlink: 'syz.2.673': attribute type 3 has an invalid length. [ 95.553946][ T8532] overlay: ./bus is not a directory [ 95.569239][ T8530] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.989842][ T5952] Bluetooth: hci0: command tx timeout [ 96.052870][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 96.052883][ T39] audit: type=1400 audit(1739170140.343:601): avc: denied { setopt } for pid=8540 comm="syz.1.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 96.099471][ T8543] 9pnet_virtio: no channels available for device syz [ 96.244895][ T8553] __nla_validate_parse: 1 callbacks suppressed [ 96.244908][ T8553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.681'. [ 96.346544][ T8556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.682'. [ 96.349528][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 96.386045][ T5952] Bluetooth: hci1: command tx timeout [ 96.797649][ T39] audit: type=1400 audit(1739170141.089:602): avc: denied { shutdown } for pid=8574 comm="syz.2.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.799100][ T8575] netlink: 'syz.2.689': attribute type 29 has an invalid length. [ 96.807673][ T8575] netlink: 'syz.2.689': attribute type 29 has an invalid length. [ 96.810448][ T8575] netlink: 500 bytes leftover after parsing attributes in process `syz.2.689'. [ 97.045147][ T39] audit: type=1400 audit(1739170141.342:603): avc: denied { watch watch_reads } for pid=8602 comm="syz.2.696" path="/178/file1" dev="autofs" ino=28071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 97.045888][ T8605] netlink: 16 bytes leftover after parsing attributes in process `syz.5.697'. [ 97.060360][ T8605] tmpfs: Unknown parameter 'mûæ [ 97.060360][ T8605] Ý0Mode' [ 97.117180][ T39] audit: type=1400 audit(1739170141.412:604): avc: denied { append } for pid=8607 comm="syz.5.699" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.264440][ T8620] ip6gre1: entered promiscuous mode [ 97.296134][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 97.418643][ T39] audit: type=1400 audit(1739170141.725:605): avc: denied { bind } for pid=8631 comm="syz.1.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.496303][ T5951] Bluetooth: hci2: command 0x0406 tx timeout [ 97.537746][ T39] audit: type=1400 audit(1739170141.846:606): avc: denied { ioctl } for pid=8626 comm="syz.2.706" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 97.727016][ T39] audit: type=1400 audit(1739170142.027:607): avc: denied { listen } for pid=8651 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.774442][ T39] audit: type=1400 audit(1739170142.078:608): avc: denied { map } for pid=8655 comm="syz.2.714" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.780915][ T39] audit: type=1400 audit(1739170142.078:609): avc: denied { execute } for pid=8655 comm="syz.2.714" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.820779][ T8662] syz.2.715: attempt to access beyond end of device [ 97.820779][ T8662] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 97.825995][ T8662] SQUASHFS error: Failed to read block 0x0: -5 [ 97.828475][ T8662] unable to read squashfs_super_block [ 97.849735][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.873961][ T8665] syz.2.715: attempt to access beyond end of device [ 97.873961][ T8665] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 97.877587][ T8665] SQUASHFS error: Failed to read block 0x0: -5 [ 97.879524][ T8665] unable to read squashfs_super_block [ 98.051860][ T5943] Bluetooth: hci0: command tx timeout [ 98.369151][ T5943] Bluetooth: hci3: command tx timeout [ 98.634141][ T8681] tmpfs: Unknown parameter '‡õM‘ˆ@R¦ÃEgŒ^oIJ4ÊCR_¢ Í¢unüQ‘kÇX›¤fÂÓ' [ 98.719299][ T39] audit: type=1400 audit(1739170143.035:610): avc: denied { bind } for pid=8684 comm="syz.6.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.783451][ T8687] overlay: ./bus is not a directory [ 98.788271][ T8687] overlay: ./bus is not a directory [ 99.163228][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 99.163327][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 99.275833][ T8709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.348295][ T8711] FAT-fs (nullb0): bogus number of reserved sectors [ 99.350968][ T8711] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 99.484046][ T8725] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8725 comm=syz.2.735 [ 99.530923][ T8728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.595511][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.6.737'. [ 100.115985][ T5952] Bluetooth: hci0: command tx timeout [ 100.122361][ T8761] netlink: 36 bytes leftover after parsing attributes in process `syz.5.745'. [ 100.127100][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.745'. [ 100.412659][ T8777] sp0: Synchronizing with TNC [ 100.415661][ T8782] netlink: 'syz.6.752': attribute type 1 has an invalid length. [ 100.417755][ T8782] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.752'. [ 100.538833][ T8788] xt_hashlimit: invalid interval [ 100.756024][ T8804] netlink: 'syz.5.758': attribute type 178 has an invalid length. [ 100.884847][ T8812] x_tables: duplicate underflow at hook 1 [ 101.339670][ T8821] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 101.515735][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 101.515756][ T39] audit: type=1400 audit(1739170145.845:630): avc: denied { connect } for pid=8829 comm="syz.6.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 101.578655][ T8837] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 101.583138][ T8837] syz.2.769: attempt to access beyond end of device [ 101.583138][ T8837] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 101.587615][ T8837] exFAT-fs (nbd2): unable to read boot sector [ 101.589370][ T8837] exFAT-fs (nbd2): failed to read boot sector [ 101.591126][ T8837] exFAT-fs (nbd2): failed to recognize exfat type [ 101.623305][ T8839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.770'. [ 101.627346][ T8839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.770'. [ 101.710021][ T8844] netlink: 232 bytes leftover after parsing attributes in process `syz.6.772'. [ 101.712770][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.6.772'. [ 101.734102][ T8844] xt_ecn: cannot match TCP bits for non-tcp packets [ 101.807540][ T39] audit: type=1400 audit(1739170146.137:631): avc: denied { write } for pid=8849 comm="syz.6.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 101.943131][ T39] audit: type=1400 audit(1739170146.268:632): avc: denied { accept } for pid=8853 comm="syz.2.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.141468][ T8864] netlink: 36 bytes leftover after parsing attributes in process `syz.2.776'. [ 102.183917][ T5951] Bluetooth: hci0: command 0x0419 tx timeout [ 102.281903][ T6262] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 102.336121][ T8869] syz.2.779: attempt to access beyond end of device [ 102.336121][ T8869] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 102.342669][ T8869] XFS (nbd2): SB validate failed with error -5. [ 102.362433][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 102.365033][ T8875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.779'. [ 102.381361][ T39] audit: type=1400 audit(1739170146.711:633): avc: denied { ioctl } for pid=8868 comm="syz.2.779" path="socket:[30874]" dev="sockfs" ino=30874 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 102.447628][ T6262] usb 11-1: unable to get BOS descriptor or descriptor too short [ 102.452436][ T6262] usb 11-1: no configurations [ 102.454254][ T6262] usb 11-1: can't read configurations, error -22 [ 102.457429][ T8849] delete_channel: no stack [ 102.472282][ T8877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.780'. [ 102.474817][ T8877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.780'. [ 102.477289][ T8877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.780'. [ 102.544428][ T39] audit: type=1400 audit(1739170146.882:634): avc: denied { read } for pid=8878 comm="syz.2.781" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 102.695600][ T8879] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.697840][ T8879] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.704080][ T8879] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.706442][ T8879] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.712404][ T8879] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.718135][ T8879] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.721673][ T8879] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.725079][ T8879] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.729761][ T8879] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.731536][ T8879] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 103.004833][ T8896] veth0_vlan: invalid flags given to default FDB implementation [ 103.010217][ T8896] gtp0: entered promiscuous mode [ 103.036120][ T8898] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.102559][ T39] audit: type=1400 audit(1739170147.445:635): avc: denied { read } for pid=8897 comm="syz.5.787" path="socket:[28326]" dev="sockfs" ino=28326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.108143][ T8898] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 103.247972][ T8924] wg1 speed is unknown, defaulting to 1000 [ 103.278759][ T8926] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.284465][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.356625][ T8932] veth1_macvtap: left promiscuous mode [ 103.358280][ T8932] macsec0: entered promiscuous mode [ 103.359770][ T8932] macsec0: entered allmulticast mode [ 103.368784][ T8932] veth1_macvtap: entered promiscuous mode [ 103.370547][ T8932] veth1_macvtap: entered allmulticast mode [ 103.374064][ T8932] macsec0: left promiscuous mode [ 103.375735][ T8932] macsec0: left allmulticast mode [ 103.377168][ T8932] veth1_macvtap: left allmulticast mode [ 104.251116][ T8971] random: crng reseeded on system resumption [ 104.434935][ T39] audit: type=1400 audit(1739170148.783:636): avc: denied { ioctl } for pid=8970 comm="syz.5.803" path="socket:[30194]" dev="sockfs" ino=30194 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 104.547312][ T8992] random: crng reseeded on system resumption [ 104.658162][ T5951] Bluetooth: hci2: command 0x0406 tx timeout [ 104.727607][ T5951] Bluetooth: hci0: command 0x0419 tx timeout [ 104.727664][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.727706][ T5943] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.094784][ T39] audit: type=1400 audit(1739170149.446:637): avc: denied { write } for pid=9000 comm="syz.6.808" lport=40024 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 105.102209][ T39] audit: type=1400 audit(1739170149.446:638): avc: denied { setopt } for pid=9000 comm="syz.6.808" lport=40024 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 105.174003][ T39] audit: type=1400 audit(1739170149.516:639): avc: denied { bind } for pid=9007 comm="syz.5.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.298629][ T9020] 9pnet_virtio: no channels available for device syz [ 105.317227][ T9017] netfs: Couldn't get user pages (rc=-14) [ 105.329180][ T9017] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 105.346130][ T9017] 8021q: adding VLAN 0 to HW filter on device bond4 [ 105.376352][ T9017] bond4: (slave gretap1): making interface the new active one [ 105.379783][ T9017] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 105.602802][ T9034] 9pnet_fd: Insufficient options for proto=fd [ 105.606398][ T9034] trusted_key: encrypted_key: insufficient parameters specified [ 105.682403][ T9036] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 9036 comm: syz.2.820) [ 105.687744][ T9036] hsr0: entered allmulticast mode [ 105.689825][ T9036] hsr_slave_0: entered allmulticast mode [ 105.692066][ T9036] hsr_slave_1: entered allmulticast mode [ 105.697034][ T9036] hsr_slave_0: left promiscuous mode [ 105.700169][ T9036] hsr_slave_1: left promiscuous mode [ 105.702694][ T30] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 105.716016][ T9036] hsr0 (unregistering): left allmulticast mode [ 105.816568][ T9040] netlink: 'syz.5.821': attribute type 13 has an invalid length. [ 105.851862][ T30] usb 11-1: Using ep0 maxpacket: 8 [ 105.854849][ T30] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.857711][ T30] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.863558][ T30] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.866323][ T30] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.869898][ T30] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.873165][ T30] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.901989][ T9042] xt_hashlimit: size too large, truncated to 1048576 [ 106.004433][ T9046] 8021q: adding VLAN 0 to HW filter on device bond5 [ 106.016014][ T9046] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 106.024246][ T9046] bond5: (slave macvlan2): Error -95 calling set_mac_address [ 106.081843][ T30] usb 11-1: usb_control_msg returned -32 [ 106.083592][ T30] usbtmc 11-1:16.0: can't read capabilities [ 106.213478][ T5980] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 106.219669][ T5980] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz0 [ 106.469446][ T834] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 106.619670][ T834] usb 7-1: config index 0 descriptor too short (expected 16384, got 18) [ 106.622097][ T834] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.625370][ T834] usb 7-1: config 0 has no interfaces? [ 106.634634][ T834] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 106.637721][ T834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.640727][ T834] usb 7-1: Product: syz [ 106.642289][ T834] usb 7-1: Manufacturer: syz [ 106.643873][ T834] usb 7-1: SerialNumber: syz [ 106.649126][ T834] usb 7-1: config 0 descriptor?? [ 106.717787][ T5952] Bluetooth: hci2: command 0x0406 tx timeout [ 106.734706][ T9057] syz.5.827: attempt to access beyond end of device [ 106.734706][ T9057] loop5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 106.741690][ T9057] MINIX-fs: unable to read superblock [ 106.760445][ T9057] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.786983][ T9057] wg1 speed is unknown, defaulting to 1000 [ 106.797560][ T5952] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.799785][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.800418][ T5951] Bluetooth: hci0: command 0x0419 tx timeout [ 106.817531][ T9060] sctp: [Deprecated]: syz.5.827 (pid 9060) Use of int in max_burst socket option. [ 106.817531][ T9060] Use struct sctp_assoc_value instead [ 106.857243][ T9049] __nla_validate_parse: 6 callbacks suppressed [ 106.857263][ T9049] netlink: 596 bytes leftover after parsing attributes in process `syz.2.824'. [ 106.863393][ T833] usb 7-1: USB disconnect, device number 7 [ 107.086248][ T5980] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 107.215455][ T5980] usb 10-1: device descriptor read/64, error -71 [ 107.464333][ T5980] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 107.598218][ T5980] usb 10-1: device descriptor read/64, error -71 [ 107.703443][ T5980] usb usb10-port1: attempt power cycle [ 108.041777][ T5980] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 108.062240][ T5980] usb 10-1: device descriptor read/8, error -71 [ 108.310868][ T5980] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 108.331549][ T5980] usb 10-1: device descriptor read/8, error -71 [ 108.443709][ T5980] usb usb10-port1: unable to enumerate USB device [ 108.457601][ T6262] usb 11-1: USB disconnect, device number 4 [ 108.528988][ T9073] netlink: 'syz.2.830': attribute type 10 has an invalid length. [ 108.879588][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.882130][ T5951] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.087872][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 109.087886][ T39] audit: type=1400 audit(1739170153.464:651): avc: denied { create } for pid=9076 comm="syz.6.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 109.097850][ T39] audit: type=1400 audit(1739170153.464:652): avc: denied { sys_admin } for pid=9076 comm="syz.6.832" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 109.100031][ T9077] wg1 speed is unknown, defaulting to 1000 [ 109.430754][ T9083] tipc: Started in network mode [ 109.432252][ T9083] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 109.434813][ T9083] tipc: Enabled bearer , priority 10 [ 109.523096][ T9087] netfs: Couldn't get user pages (rc=-14) [ 109.526866][ T9087] ------------[ cut here ]------------ [ 109.528714][ T9087] refcount_t: underflow; use-after-free. [ 109.530885][ T9087] WARNING: CPU: 0 PID: 9087 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 109.534084][ T9087] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 109.535521][ T9087] CPU: 0 UID: 0 PID: 9087 Comm: syz.6.835 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 109.540795][ T9087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.544370][ T9087] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 109.546722][ T9087] Code: ff 89 de e8 78 71 f5 fc 84 db 0f 85 66 ff ff ff e8 cb 76 f5 fc c6 05 e5 68 86 0b 01 90 48 c7 c7 00 fb d2 8b e8 97 b2 b5 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 a8 76 f5 fc 0f b6 1d c0 68 86 0b 31 [ 109.553178][ T9087] RSP: 0018:ffffc90005847c68 EFLAGS: 00010286 [ 109.555118][ T9087] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90006fb1000 [ 109.557894][ T9087] RDX: 0000000000080000 RSI: ffffffff817a1166 RDI: 0000000000000001 [ 109.560250][ T9087] RBP: ffff888029121ec8 R08: 0000000000000001 R09: 0000000000000000 [ 109.562643][ T9087] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 109.565281][ T9087] R13: ffff88805fd50000 R14: ffff888029121e00 R15: ffff888029121eb8 [ 109.568563][ T9087] FS: 00007f1ce6ecc6c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 109.571397][ T9087] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.573260][ T9087] CR2: 00007f1ce6eab000 CR3: 00000000523d2000 CR4: 0000000000352ef0 [ 109.576191][ T9087] Call Trace: [ 109.577445][ T9087] [ 109.578437][ T9087] ? __warn+0xea/0x3c0 [ 109.579751][ T9087] ? __pfx_vprintk_emit+0x10/0x10 [ 109.581212][ T9087] ? refcount_warn_saturate+0x14a/0x210 [ 109.582950][ T9087] ? report_bug+0x3c0/0x580 [ 109.584385][ T9087] ? handle_bug+0x54/0xa0 [ 109.585719][ T9087] ? exc_invalid_op+0x17/0x50 [ 109.587080][ T9087] ? asm_exc_invalid_op+0x1a/0x20 [ 109.588543][ T9087] ? __warn_printk+0x1a6/0x350 [ 109.589915][ T9087] ? refcount_warn_saturate+0x14a/0x210 [ 109.591641][ T9087] ? refcount_warn_saturate+0x149/0x210 [ 109.593198][ T9087] io_submit_one+0x103f/0x1da0 [ 109.594677][ T9087] ? __pfx_io_submit_one+0x10/0x10 [ 109.596202][ T9087] ? __might_fault+0x13b/0x190 [ 109.597593][ T9087] ? lock_acquire+0x2f/0xb0 [ 109.598887][ T9087] ? __might_fault+0xe3/0x190 [ 109.600246][ T9087] ? __x64_sys_io_submit+0x1b2/0x340 [ 109.601843][ T9087] __x64_sys_io_submit+0x1b2/0x340 [ 109.603711][ T9087] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 109.605490][ T9087] do_syscall_64+0xcd/0x250 [ 109.606796][ T9087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.608445][ T9087] RIP: 0033:0x7f1ce5f8cde9 [ 109.609719][ T9087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.609734][ T9087] RSP: 002b:00007f1ce6ecc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 109.609748][ T9087] RAX: ffffffffffffffda RBX: 00007f1ce61a5fa0 RCX: 00007f1ce5f8cde9 [ 109.609755][ T9087] RDX: 00004000000002c0 RSI: 0000000000000001 RDI: 00007f1ce6eab000 [ 109.609763][ T9087] RBP: 00007f1ce600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 109.609771][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.609779][ T9087] R13: 0000000000000000 R14: 00007f1ce61a5fa0 R15: 00007ffc99ccd0f8 [ 109.629010][ T9087] [ 109.629976][ T9087] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.632545][ T9087] CPU: 0 UID: 0 PID: 9087 Comm: syz.6.835 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 109.636369][ T9087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.640078][ T9087] Call Trace: [ 109.641058][ T9087] [ 109.641928][ T9087] dump_stack_lvl+0x3d/0x1f0 [ 109.643531][ T9087] panic+0x71d/0x800 [ 109.644870][ T9087] ? __pfx_panic+0x10/0x10 [ 109.646384][ T9087] ? show_trace_log_lvl+0x29d/0x3d0 [ 109.648145][ T9087] ? refcount_warn_saturate+0x14a/0x210 [ 109.650140][ T9087] check_panic_on_warn+0xab/0xb0 [ 109.651979][ T9087] __warn+0xf6/0x3c0 [ 109.653148][ T9087] ? __pfx_vprintk_emit+0x10/0x10 [ 109.654587][ T9087] ? refcount_warn_saturate+0x14a/0x210 [ 109.656141][ T9087] report_bug+0x3c0/0x580 [ 109.657422][ T9087] handle_bug+0x54/0xa0 [ 109.658940][ T9087] exc_invalid_op+0x17/0x50 [ 109.660585][ T9087] asm_exc_invalid_op+0x1a/0x20 [ 109.662142][ T9087] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 109.664040][ T9087] Code: ff 89 de e8 78 71 f5 fc 84 db 0f 85 66 ff ff ff e8 cb 76 f5 fc c6 05 e5 68 86 0b 01 90 48 c7 c7 00 fb d2 8b e8 97 b2 b5 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 a8 76 f5 fc 0f b6 1d c0 68 86 0b 31 [ 109.670367][ T9087] RSP: 0018:ffffc90005847c68 EFLAGS: 00010286 [ 109.672410][ T9087] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90006fb1000 [ 109.675237][ T9087] RDX: 0000000000080000 RSI: ffffffff817a1166 RDI: 0000000000000001 [ 109.678056][ T9087] RBP: ffff888029121ec8 R08: 0000000000000001 R09: 0000000000000000 [ 109.680850][ T9087] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 109.683194][ T9087] R13: ffff88805fd50000 R14: ffff888029121e00 R15: ffff888029121eb8 [ 109.685387][ T9087] ? __warn_printk+0x1a6/0x350 [ 109.686749][ T9087] ? refcount_warn_saturate+0x149/0x210 [ 109.688294][ T9087] io_submit_one+0x103f/0x1da0 [ 109.689644][ T9087] ? __pfx_io_submit_one+0x10/0x10 [ 109.691117][ T9087] ? __might_fault+0x13b/0x190 [ 109.692455][ T9087] ? lock_acquire+0x2f/0xb0 [ 109.693748][ T9087] ? __might_fault+0xe3/0x190 [ 109.695086][ T9087] ? __x64_sys_io_submit+0x1b2/0x340 [ 109.696560][ T9087] __x64_sys_io_submit+0x1b2/0x340 [ 109.697994][ T9087] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 109.699561][ T9087] do_syscall_64+0xcd/0x250 [ 109.700841][ T9087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.702531][ T9087] RIP: 0033:0x7f1ce5f8cde9 [ 109.703781][ T9087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.709050][ T9087] RSP: 002b:00007f1ce6ecc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 109.711390][ T9087] RAX: ffffffffffffffda RBX: 00007f1ce61a5fa0 RCX: 00007f1ce5f8cde9 [ 109.713576][ T9087] RDX: 00004000000002c0 RSI: 0000000000000001 RDI: 00007f1ce6eab000 [ 109.715759][ T9087] RBP: 00007f1ce600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 109.718103][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.720683][ T9087] R13: 0000000000000000 R14: 00007f1ce61a5fa0 R15: 00007ffc99ccd0f8 [ 109.723264][ T9087] [ 109.724860][ T9087] Kernel Offset: disabled [ 109.726252][ T9087] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:49:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85403ed5 RDI=ffffffff9ab7b740 RBP=ffffffff9ab7b700 RSP=ffffc900058475e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000004 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9ab7b700 R15=0000000000000000 RIP=ffffffff85403eff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1ce6ecc6c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1ce6eab000 CR3=00000000523d2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812bf4a3 ffffffff812bf4a3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff812bf4a3 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce600f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce600f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce600f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce600f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce600f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce600f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812bf4a3 ffffffff812bf4a3 ffffffff812bf4a3 ffffffff812bf4a3 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce6cdd100 00007f1ce617c440 00007f1c00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce617c498 00007f1ce617c490 00007f1ce617c488 00007f1ce617c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffffff90626934 RCX=0000001980fc1406 RDX=0000000000000000 RSI=ffff888027040018 RDI=ffff88806a73f9b8 RBP=ffffc90003d9f558 RSP=ffffc90003d9f3c0 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff90623617 R11=0000000000000000 R12=ffff8880229d2440 R13=ffff88806a73f710 R14=0000001980c59732 R15=ffff88806a73ec00 RIP=ffffffff8b5756cd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007efc09e91d00 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000562680304908 CR3=00000000270a8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000003400003 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697270203a732500 7325207461206465 7269707865207972 746e65203a732500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c5755051f560000 5600055144054140 574c555d40055c57 514b40051f560000 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=cdc0e050cdc0e050 cdc0e050cdc0e050 cdc0e050cdc0e050 cdc0e050cdc0e050 cdc0e050cdc0e050 cdc0e050cdc0e050 cdc0e050cdc0e050 cdc0e050cdc0e050 ZMM22=725f4eb8725f4eb8 725f4eb8725f4eb8 725f4eb8725f4eb8 725f4eb8725f4eb8 725f4eb8725f4eb8 725f4eb8725f4eb8 725f4eb8725f4eb8 725f4eb8725f4eb8 ZMM23=d1e8af53d1e8af53 d1e8af53d1e8af53 d1e8af53d1e8af53 d1e8af53d1e8af53 d1e8af53d1e8af53 d1e8af53d1e8af53 d1e8af53d1e8af53 d1e8af53d1e8af53 ZMM24=e0538ac2e0538ac2 e0538ac2e0538ac2 e0538ac2e0538ac2 e0538ac2e0538ac2 e0538ac2e0538ac2 e0538ac2e0538ac2 e0538ac2e0538ac2 e0538ac2e0538ac2 ZMM25=743b066a743b066a 743b066a743b066a 743b066a743b066a 743b066a743b066a 743b066a743b066a 743b066a743b066a 743b066a743b066a 743b066a743b066a ZMM26=57ae630757ae6307 57ae630757ae6307 57ae630757ae6307 57ae630757ae6307 57ae630757ae6307 57ae630757ae6307 57ae630757ae6307 57ae630757ae6307 ZMM27=370ed846370ed846 370ed846370ed846 370ed846370ed846 370ed846370ed846 370ed846370ed846 370ed846370ed846 370ed846370ed846 370ed846370ed846 ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7f0400007f040000 7f0400007f040000 7f0400007f040000 7f0400007f040000 7f0400007f040000 7f0400007f040000 7f0400007f040000 7f0400007f040000 info registers vcpu 2 CPU#2 RAX=00000000000e946f RBX=0000000000000002 RCX=ffffffff8b567469 RDX=0000000000000000 RSI=ffffffff8b6ced20 RDI=ffffffff8bd34e00 RBP=ffffed1003b55000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d506f85 R10=ffff88806a837c2b R11=0000000000000000 R12=0000000000000002 R13=ffff88801daa8000 R14=ffffffff90623610 R15=0000000000000000 RIP=ffffffff8b56884f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1ce5f72b80 CR3=00000000523d2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffff0 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73e4f759fe1a60dc 583c8af7f6ffc1ac ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 53a1f6d670b2c41d e8332104a251d345 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f424089560d5e5a e56c01960b6cb7a2 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec5a620a2d3af8e1 0ae3693ff5e65145 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000cc0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 de00000056000000 438e829c000fdd15 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 46000000a7000000 a0000000f5000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc000000438d7daa 438d53e3438d2523 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 438f0881000078bd 80000000438cbd46 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8812f33ed6107fd2 91bd03b7babb751c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 db339af7acfd5776 c03a1a96561ffaa8 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce617c488 00007f1ce617c480 00007f1ce617c478 00007f1ce617c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce6cdd100 00007f1ce617c440 00007f1ce617c458 00007f1ce617c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ce617c498 00007f1ce617c490 00007f1ce617c488 00007f1ce617c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000d96a1 RBX=0000000000000003 RCX=ffffffff8b567469 RDX=0000000000000000 RSI=ffffffff8b6ced20 RDI=ffffffff8bd34e00 RBP=ffffed1003b55488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526f85 R10=ffff88806a937c2b R11=0000000000000000 R12=0000000000000003 R13=ffff88801daaa440 R14=ffffffff90623610 R15=0000000000000000 RIP=ffffffff8b56884f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffdce13cbc CR3=00000000270a8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=cdc0e050cdc0e050 cdc0e050cdc0e050 cdc0e050cdc0e050 cdc0e050cdc0e050 cdc0e050cdc0e050 cdc0e050cdc0e050 cdc0e050cdc0e050 cdc0e050cdc0e050 ZMM22=725f4eb8725f4eb8 725f4eb8725f4eb8 725f4eb8725f4eb8 725f4eb8725f4eb8 725f4eb8725f4eb8 725f4eb8725f4eb8 725f4eb8725f4eb8 725f4eb8725f4eb8 ZMM23=d1e8af53d1e8af53 d1e8af53d1e8af53 d1e8af53d1e8af53 d1e8af53d1e8af53 d1e8af53d1e8af53 d1e8af53d1e8af53 d1e8af53d1e8af53 d1e8af53d1e8af53 ZMM24=e0538ac2e0538ac2 e0538ac2e0538ac2 e0538ac2e0538ac2 e0538ac2e0538ac2 e0538ac2e0538ac2 e0538ac2e0538ac2 e0538ac2e0538ac2 e0538ac2e0538ac2 ZMM25=743b066a743b066a 743b066a743b066a 743b066a743b066a 743b066a743b066a 743b066a743b066a 743b066a743b066a 743b066a743b066a 743b066a743b066a ZMM26=57ae630757ae6307 57ae630757ae6307 57ae630757ae6307 57ae630757ae6307 57ae630757ae6307 57ae630757ae6307 57ae630757ae6307 57ae630757ae6307 ZMM27=370ed846370ed846 370ed846370ed846 370ed846370ed846 370ed846370ed846 370ed846370ed846 370ed846370ed846 370ed846370ed846 370ed846370ed846 ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7f0400007f040000 7f0400007f040000 7f0400007f040000 7f0400007f040000 7f0400007f040000 7f0400007f040000 7f0400007f040000 7f0400007f040000