last executing test programs: 3m24.478227927s ago: executing program 2 (id=181): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x50622}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x4000) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x80082) 3m24.411624232s ago: executing program 2 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0xffffffffffffffda, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mpol=inverleave=relative:']) 3m24.409569119s ago: executing program 2 (id=186): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000004c0)="65660f38814d470f01c566b96c08000066b80900000066ba00000080aa26f30f6fd066b8be0000000f23c00f21f86635030000000f23f82e3e0f01c5baf80c66b80c00348966efba7efc0c0cb8040000000f21590f01c8660fc73601003e65672edd37", 0x63}], 0xb39, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) ftruncate(r6, 0x9) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_GET(r7, 0x4b66, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m23.442513915s ago: executing program 2 (id=204): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000080)={0x12, 0x3, {0xc0c, @struct={0x2, 0x4}, 0x0, 0x6, 0x2dc0bf09, 0x3, 0x8, 0xdff, 0x4ed, @struct={0x2d, 0x9}, 0x7, 0xa012b9f, [0x4, 0xa77, 0x1ff, 0x6, 0xfffffffffffffffa, 0x6]}, {0x7, @usage=0x2, 0x0, 0xc, 0x7fffffff, 0x401, 0xffffffffffff0001, 0x593, 0x20, @usage, 0x8055, 0xc5, [0x6, 0x7ff, 0x9, 0x3, 0x4199, 0x75]}, {0x2, @usage=0x9, 0x0, 0x9, 0x2, 0x0, 0x1, 0x1, 0x40, @struct={0xe, 0x9}, 0x6, 0x400, [0x0, 0x793, 0x4, 0xe0, 0x6, 0x1]}, {0x7bd, 0x5, 0x7fffffff}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000480)={0x0, 0xcd6, 0xe, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r4, &(0x7f0000000280)="02042800ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57", 0xfdef, 0x800, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f00000010c0)={0xa7, "f2abd5b21ac2d1140bd375fc619c4a6a2d66048dc77241d1ad438d6f5b51d5a759a9fb0622addedd6f77933ba45421a77a76674a24214e1ac674c16e9a1462149d87adfcfd0b9b93e4ec9f00f814cb65f47d9acdb1d2ba083756bbd00974b33881c5716d36c684762c6d0d72c8a4460c0c930b7c0ea5c1827ff4a3b3d9a7282bdb5b3cd0baa785d6adc7aa4abc81766778af0b3f20f7a13bef04d3436eeb919497596ea2c26246"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000880)={0x0, 0x4, 0x6f85}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000c80)={0xa, 0x0, {0x7ff, @usage=0x5, r1, 0xfa, 0x0, 0x3, 0x5, 0x280, 0x90, @struct={0x8, 0x1}, 0x6, 0x7f, [0x100000000, 0x7fffffffffffffff, 0x35ba, 0x0, 0xe9, 0x6]}, {0x200, @usage=0x8, r2, 0x7fffffffffffffff, 0x10, 0xfffffffffffffff7, 0x10, 0x1ff, 0x414, @struct={0x2, 0x9}, 0xfffffff7, 0x8, [0xbac000000000000, 0x1, 0x7da, 0xfc12, 0x8, 0x9]}, {0x0, @usage=0x6, r7, 0x8e, 0x0, 0x200, 0x1, 0x1, 0x47, @struct={0x6, 0x40}, 0x5, 0x7, [0x4, 0x7, 0x3, 0xb6b3, 0x2, 0x3]}, {0xfdc4, 0x5, 0x2}}) r8 = dup3(r0, r0, 0x0) mkdirat$cgroup(r8, &(0x7f0000001080)='syz0\x00', 0x1ff) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000040)=0x3) 3m23.391563821s ago: executing program 2 (id=207): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x180) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x44008, &(0x7f00000001c0)={[{@redirect_dir_follow}, {@xino_on}, {@index_on}, {@workdir={'workdir', 0x3d, './file0'}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@euid_gt={'euid>', r0}}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r1, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x180) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0) (async) setresuid(0x0, r0, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x44008, &(0x7f00000001c0)={[{@redirect_dir_follow}, {@xino_on}, {@index_on}, {@workdir={'workdir', 0x3d, './file0'}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@euid_gt={'euid>', r0}}]}) (async) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async) pread64(r1, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) (async) 3m23.391315625s ago: executing program 2 (id=208): pipe2$9p(&(0x7f00000000c0), 0x84800) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000008}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x28, r4, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_PHYS(r6, 0x4008556c, 0x0) (async) ioctl$UI_SET_PHYS(r6, 0x4008556c, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r7}, 0x10) ftruncate(r8, 0x9) (async) ftruncate(r8, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 3m15.331433999s ago: executing program 1 (id=318): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000b56a0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x101040, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x44, r8, 0xb97534d5fe9704cf, 0x0, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x581}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x44}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x5], [0xfffffffd, 0x5, 0x8000, 0xfffffffe], [0x0, 0x0, 0x0, 0x1000000]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r11}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x2) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 3m15.327602019s ago: executing program 1 (id=320): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a01020000000000000000010000010900010073797a30000000000900030073797a3200000000080007006e6174005c000000060a0104000000000000000001"], 0xd8}}, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000080)="1c5bdb1160ace0", 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000540)="0fa20367553f46836b4876760fc71a66ba4100edb9800000c00f320f4285a15a00000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3e}], 0x1, 0x20, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES64=r0]) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r3, 0x0) openat(r3, &(0x7f0000000000)='./file0\x00', 0x80000, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m15.201184836s ago: executing program 1 (id=322): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file0/file0', [{0x20, 'cpuacct.usage_percpu\x00'}, {0x20, '\xfe'}, {0x20, '},.:}('}], 0xa, "06174998db2eefe0a9488c4b2abe7d16308e090d25600d9385869302fa4b8a9d368fd44b082d0ecfb131365b155bb75046cef0acbccefbe666fa5f323a643508008b9c63fda3f545032a592cc147850af98f0fd25fa281851f809986a924fe001ef56dc54187418dcc3ec26b2cd7d0a386ec5f1732f604c22e25cb833522e2353e545aae278c9f3a92c37b134d6be802b718f067e42b9111f72e"}, 0xca) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="cc0000000000000012"]) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000000000006005, 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r4 = dup2(r3, r3) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r6, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000002c0)=0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000300)={'\x00', 0xbda, 0xa, 0x7, 0x0, 0x80000, r7}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) getsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000180)=""/49, &(0x7f00000001c0)=0x31) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x25) 3m15.190232516s ago: executing program 32 (id=322): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file0/file0', [{0x20, 'cpuacct.usage_percpu\x00'}, {0x20, '\xfe'}, {0x20, '},.:}('}], 0xa, "06174998db2eefe0a9488c4b2abe7d16308e090d25600d9385869302fa4b8a9d368fd44b082d0ecfb131365b155bb75046cef0acbccefbe666fa5f323a643508008b9c63fda3f545032a592cc147850af98f0fd25fa281851f809986a924fe001ef56dc54187418dcc3ec26b2cd7d0a386ec5f1732f604c22e25cb833522e2353e545aae278c9f3a92c37b134d6be802b718f067e42b9111f72e"}, 0xca) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="cc0000000000000012"]) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000000000006005, 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r4 = dup2(r3, r3) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r6, &(0x7f0000001600)=[{&(0x7f0000000040)=""/35, 0x2b}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000002c0)=0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000300)={'\x00', 0xbda, 0xa, 0x7, 0x0, 0x80000, r7}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) getsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000180)=""/49, &(0x7f00000001c0)=0x31) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x25) 3m8.3717413s ago: executing program 33 (id=208): pipe2$9p(&(0x7f00000000c0), 0x84800) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000008}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x28, r4, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_PHYS(r6, 0x4008556c, 0x0) (async) ioctl$UI_SET_PHYS(r6, 0x4008556c, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r7}, 0x10) ftruncate(r8, 0x9) (async) ftruncate(r8, 0x9) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 2m2.424199879s ago: executing program 5 (id=1328): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @local, @val={@void, {0x8100, 0x5, 0x0, 0x2}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x20, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote, {[@hopopts={0x2f, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x453}, @jumbo={0xc2, 0x4, 0xc}, @ra={0x5, 0x2, 0x80}]}]}}}}}, 0x0) 2m2.423879835s ago: executing program 5 (id=1329): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r2, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000180)=[r3], 0x7fffffffffe, 0x1, 0xb}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xbb67, 0x1000, 0x0, 0x400, r1, 0x8, '\x00', 0x0, r0, 0x5, 0x0, 0x4, 0xd, @void, @value, @void, @value}, 0x50) lseek(r0, 0x851, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000400)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x800}}, './file0\x00'}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r8, @ANYRES32=r8, @ANYRESDEC=r5, @ANYRESDEC=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x4004000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="ea7f2b5b827e13a5a1d58b86fb7bf199f7191f73cb5739d1d8afb32d9f80b12e76c9140bf7164bf907f450808a5c8e6ad7b521f7add6a5210d", @ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r8, @ANYRES32=r5], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r7, 0x28, 0x6, &(0x7f0000000240), 0x10) 2m1.631301078s ago: executing program 5 (id=1335): pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) dup(r1) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) (async) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) sendmsg$AUDIT_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x300, 0x70bd28, 0x25dfdbfc, {0x44, 0x0, 0x1, 0x0, 0x0, 0x5, 0xc2b, 0x9, 0x0, 0x4, 0x800}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x635e, 0x12) 2m1.576778946s ago: executing program 5 (id=1338): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a4c000/0xf000)=nil, 0xf000, 0x4000, 0x3, &(0x7f00008dd000/0x4000)=nil) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mknodat$loop(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0xc0400, &(0x7f0000000100)={[{@noswap}, {@grpquota}, {@inode32}, {@inode32}], [{@obj_role={'obj_role', 0x3d, 'net/tcp\x00'}}]}) r2 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r2, &(0x7f0000004440)={0x2020}, 0x2020) linkat(r2, &(0x7f0000000140)='./file1\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x0) 2m1.371458114s ago: executing program 5 (id=1341): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xbb, 0x35}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x6, '\x00', @p_u16=&(0x7f0000000240)}}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xbb, 0x35}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) (async) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x6, '\x00', @p_u16=&(0x7f0000000240)}}) (async) 2m0.651361403s ago: executing program 5 (id=1345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000b0000000c000580080001"], 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "004001", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], "e4073d2d9d9074f6738f6fe9"}}}}}}}, 0x0) 2m0.613527834s ago: executing program 34 (id=1345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000b0000000c000580080001"], 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "004001", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], "e4073d2d9d9074f6738f6fe9"}}}}}}}, 0x0) 1m17.639503315s ago: executing program 4 (id=1932): ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0\x00', 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x4e24, @private=0xa010100}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r4}}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000ea336106cc8a00000000ffffec000a0000a1381aee0d00000000100201000000000020000000dca0de19e2dfefae32dd967ea59e07e1f1a2ed1b604e76cae50f0db54c9c22ce13335ddd71b418f9f6c145058d00232a74c8e968191d19d6abb0ce5b8bcc0ae77a929f8d85535cf9faa34770bd226afe"], 0x24, 0x0) syz_clone(0x61000000, &(0x7f0000000080)="d16ffd94c0a49c6ac6dfba7db723dd5f141b1315bf", 0x15, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="fd4687818ce7586289d53d80a3fd74bc81c8cdc535024ef54d721ac871c09b308eabd8fff389e831f231f096739c537d86c5b4dadd4e2fe5571b92bbd9425c5a2148bb64d19c8fff56b43d5668f827da577331c1") 1m17.471491534s ago: executing program 4 (id=1936): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) (rerun: 32) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 1m17.470165153s ago: executing program 4 (id=1937): ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0xb, 0xffff, 0x4, 0x84880, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xb9}}, './file0\x00'}) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000340)={0x5, "72eb1337fea2e906b417cf68a892697d1c9e608d4d19c92f71753c8342453142", 0x7a38b73c571fc89f, 0x9, 0x0, 0x4, 0x1}) syz_open_dev$sndmidi(&(0x7f0000000080), 0xc, 0x109042) syz_open_dev$amidi(&(0x7f0000000040), 0x2, 0x2) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x8, 0x4, 0x5, 0xaaf, 0x1ff, 0x8000000000000000}, {0x2, 0x400, 0x9, 0x1, 0x7, 0xf1}], ['\x00', '\x00', '\x00', '\x00']}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0x799000, 0x8d) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$midi(&(0x7f0000000280), 0x2, 0x30f802) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f00000002c0)) ioctl$KDENABIO(r3, 0x4b36) r5 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="cc0000000000000012"]) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) 1m17.39088737s ago: executing program 4 (id=1939): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x150, 0x150, 0xd0, 0x90a, 0x1c0, 0x238, 0x238, 0x1c0, 0x238, 0xf, 0x0, {[{{@uncond, 0x500, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x8}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'dvmrp0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0xfff, 0x1) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x101091, 0x0) 1m17.320530765s ago: executing program 4 (id=1940): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x2, @win={{0x6, 0x4, 0x3, 0x3}, 0x1, 0x6, 0x0, 0x0, 0x0, 0x1}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)="6941c43b78eeda4918160798ef967cb9254c327158c51dc69eeda809ba0f") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000500)="c4e31d6c510000c4e36949c1800f0118660f383a990200000066b8c1000f00d066b871000f00d8660fe81b66b8b7008ec866ba4200b80f000000ef2e643e0fc76d7e", 0x42}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = dup(r7) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a000000000900020073797a3200000000140000001100000000000000000000000ac8669b3340d41d0a8d422469ee325895cb55262a7c58418a5dee368e93e57e3894e0fd6b000000"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000080abf1b0000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0x60}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0x9}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x0, 0x0, 0x0) close_range(r9, r10, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c010000100013070000000000000000ffffffff0000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x14c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1m17.021149066s ago: executing program 4 (id=1943): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000480)=[{&(0x7f0000000100)=""/90, 0x5a}, {&(0x7f0000000180)=""/248, 0xf8}, {&(0x7f0000000280)=""/124, 0x7c}, {&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f00000003c0)=""/178, 0xb2}], 0x5, &(0x7f0000000500)=""/20, 0x14}, 0x80000001}], 0x1, 0x0, 0x0) 1m16.991903584s ago: executing program 35 (id=1943): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000480)=[{&(0x7f0000000100)=""/90, 0x5a}, {&(0x7f0000000180)=""/248, 0xf8}, {&(0x7f0000000280)=""/124, 0x7c}, {&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f00000003c0)=""/178, 0xb2}], 0x5, &(0x7f0000000500)=""/20, 0x14}, 0x80000001}], 0x1, 0x0, 0x0) 47.451075067s ago: executing program 0 (id=2316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xb0}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x100, @fixed, 0x0, 0x2}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'gretap0\x00', @multicast}) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x79d, 0x0, 0x0, 0x0, 0x104}) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000380)=""/219, 0xdb}], 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 47.319527853s ago: executing program 0 (id=2318): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="20061700000017232a000000005806362b7585000000e9a4c9e0bb43bb"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async, rerun: 64) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x331000, 0x0) (async, rerun: 32) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (async, rerun: 32) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) (async) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 32) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) (async, rerun: 64) getsockopt$inet6_int(r5, 0x29, 0x46, 0x0, &(0x7f0000004d80)) (async, rerun: 64) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x64}, "728d84deae2e7aef0515ebf7bcf40cf5941ea7691b192d62e25d88059af23c6d9a941c8f9c42ebd0b6743c11776239b865152e820f0684afa6a15d84e48238ddc63505c8e47ee3c94a9647fd4ed3f2f58fcf53c35d56e87c4cb4b3b33deb1c79354e7541"}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x10) (async) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)) (async) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', '', [], 0xa, "3a6b52c8fb57e45bc6724a7ac264a465cd902bc2c470557db2d8785d103a193cdc61eed32fd94fc512e93d3eaf291195c1bb44e3f3ae53f8569632fef0d3be14f1bd68c4c5fb560c13c0b3ae3879814fcd4554892651ef0d458085b68c19"}, 0x62) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0x10) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 32) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a9a0a007800baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x4e}], 0x1, 0x0, 0x0, 0x0) 46.300977584s ago: executing program 0 (id=2324): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r1, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee9ad6c4ad054ab2e24488ca", 0xe}], 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 44.389527218s ago: executing program 0 (id=2332): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r0 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000300)='1\x00', 0xffffff4a) syz_clone(0x1208000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) acct(&(0x7f0000000100)='./file0/bus\x00') close(r0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000280)='./file0\x00', 0x0) 44.301128983s ago: executing program 0 (id=2336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x0, 0x0, {0x30}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}}, 0x48800) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f0000000f40)={0x5, 0x0, [{0x8000, 0x3, 0xfffff714, [0x9, 0x1000009, 0x1af, 0xb9a1, 0x1, 0x10, 0x8, 0x2]}, {0x8081, 0x2006, 0x9, [0x9f7, 0x3, 0x80001, 0x0, 0x4, 0xf, 0x55, 0x200]}, {0x1ff, 0x9, 0x1ff, [0x94c, 0x1, 0x73e5d9cb, 0x9, 0x0, 0x9, 0xfffffff7, 0x400]}, {0x5, 0x7ffbffff, 0xf, [0xbf, 0xaa02, 0x0, 0x810000, 0x8001, 0xca, 0x100, 0xf08b9bb]}, {0x2e, 0x3, 0x8, [0x8, 0x6, 0xb1, 0x7, 0x7, 0x0, 0x100, 0x4]}]}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x4000) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x14c, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20004801}, 0x40) 44.040410092s ago: executing program 0 (id=2345): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='proc\x00', 0x10800, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000001a80)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 43.998429596s ago: executing program 36 (id=2345): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='proc\x00', 0x10800, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000001a80)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 14.340910676s ago: executing program 3 (id=2718): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001a05000000000000000000000a000000000000000000000006001d0000000000"], 0x24}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x7000000) fcntl$setpipe(r2, 0x407, 0x100000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex, 0x9, 0x1, 0xb56, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002f00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r1, r2, 0x34, 0x2020, 0x0, @void, @void, @value=r4, @void, r3}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) 14.340616341s ago: executing program 3 (id=2719): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x0) connect(r0, &(0x7f0000000140)=@isdn={0x22, 0x7, 0x5, 0x8, 0x4}, 0x80) 14.250710302s ago: executing program 3 (id=2720): r0 = socket$kcm(0x10, 0x2, 0x0) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {0x1}, {0x4000}, {0x0, 0x0, 0x0, 0x420004}]}) (async) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000003"], 0x48) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xc0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x0, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x1, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 14.244451401s ago: executing program 3 (id=2721): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x1000, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c611000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e110bfc01ffffffffffffffffffffffffff08a8f7"], 0x14) close(0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x1}, 0x4, 0x4000000, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x4d4, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000000}}, 0xe8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"]) 11.159500339s ago: executing program 3 (id=2756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x28, r1, 0x8, 0x70bd28, 0x25dfdbfd, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11.014380575s ago: executing program 3 (id=2761): r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x10220}, [@IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa8, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x10) fcntl$setlease(r0, 0x400, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) getpeername(r5, &(0x7f0000000500)=@caif=@util, &(0x7f00000005c0)=0x80) 10.978167384s ago: executing program 37 (id=2761): r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x10220}, [@IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa8, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x10) fcntl$setlease(r0, 0x400, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) getpeername(r5, &(0x7f0000000500)=@caif=@util, &(0x7f00000005c0)=0x80) 10.93065749s ago: executing program 8 (id=2763): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0xaa900, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000340)={0x40000000, 0x102, "ee0b475f66676f4830037c8cbf8d80c7eb94851fc0932bb29593a16dc5d7d522", 0x7fff, 0x40, 0x5e, 0x80000001, 0x4, 0x81, 0x0, 0x4, [0x3, 0x9, 0x800, 0x200000]}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f00000000c0)='./file0\x00', 0x10d) mkdir(&(0x7f00000009c0)='./file0\x00', 0x188) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000200)='./bus\x00', 0x0, 0x101091, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2}}}], 0x20}}], 0x2, 0x840) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@uuid_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 10.88022052s ago: executing program 8 (id=2766): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/102}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0xffffffffffffff87, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7924001175f37538e486dd63"], 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100e8ffffff00000000250000002000018008000100", @ANYRES32=r7, @ANYBLOB="14000200776731"], 0x34}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x2}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10.70057753s ago: executing program 8 (id=2769): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000b40)=ANY=[@ANYBLOB="380100001a0001000000000000000000ac1414aa000000000000000000000000e00000020000000000000000000000004e220002000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000526773d52164d2ab00001000000000000000000000000000ffffff03020003000000000000000000480003006c7a7300"/240], 0x138}}, 0x0) 10.700041389s ago: executing program 8 (id=2770): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004800050300000000010000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002000400000014000100000000000000000000000000f1"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004800050300000000010000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002000400000014000100000000000000000000000000f1"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 10.650619878s ago: executing program 8 (id=2771): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x840, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0xfcfd, 0x0, 0x0) 10.300365595s ago: executing program 8 (id=2777): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r0], 0xa0}}, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="1400010000400000000000000000000000000000140002"], 0x54}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000600)=[{{&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'lo\x00'}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)="e8b8de5f4a11d7c889538fad048f6f33d3dcd3c73497656f5b571529e88f30cde0bf43d46c4b05f49e819ab04959833e410979dcb91739d3139bcb9c1d975d0ac5719287d5af3604707bdab640e3e739bf5e423cf8671d051e4b292247ef3d393469c681da455bb7e220ed2a0c6e5e60e721ddfe511fe36cf93e4de3da4b699b5a6ae20e5ec4a8e2f0a36a", 0x8b}, {&(0x7f0000001880)="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", 0x1000}], 0x2}}, {{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x3, @private=0xa010102}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)="fd88b051d6e481ab92e971e663f6ec92013b79d4205a335010890c07cd06e2104752191d671e16f9042d57b0f4f9fb934e746c7bd40784c432c6f0f41c746e4aa8109b301d7beded9530fbff154965286eac4cc2005eb6761b570839d2a1875467e7fdab169215fd228b34cc38e3df9786dee999670914c1a7467a1994b5478c917e030f5b86948bccebefaa0b9d78aa565c20", 0x93}, {&(0x7f0000000480)="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", 0xfc}], 0x2, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0x2a0}}], 0x2, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) r6 = socket$inet(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, 0x0, &(0x7f0000000100)=0x1e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000020000f0700000000000000000a00739083b7000012000100140002"], 0x30}}, 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60"], 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYRES16=r5, @ANYRES64=r3, @ANYRES32=r5, @ANYBLOB="78a071d215ee9b7e7d21283dd69e4e6aae29b7a5281655d71c918b74e1976fdd2096c1798d07868b0543f22c31ffc67b44c2c79d1e2b8b8691f6", @ANYBLOB="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", @ANYRES16=r4, @ANYRES32=r4], 0x14}}, 0x0) 4.159654018s ago: executing program 7 (id=2800): iopl(0x3) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) pread64(r0, &(0x7f0000000080)=""/221, 0xdd, 0x7fffffffffffffff) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x80801, 0x88, 0x20}, 0x18) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = getuid() lchown(&(0x7f0000000140)='./file0\x00', r2, 0xee01) iopl(0xc) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xa, 0x3}) 4.090978308s ago: executing program 7 (id=2802): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 4.090168015s ago: executing program 7 (id=2804): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x9, &(0x7f0000000400)=ANY=[@ANYRES16], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3006d6ac", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000001c000180060005004e230000060001000200000008000300ac1414aa"], 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x7}]}}, 0x0, 0x26, 0x0, 0x1, 0x3, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0x7, 0x0, 0x1}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000040)="5aee41", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$cdrom(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000200), 0xfffffecc) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) ioctl$CDROMVOLREAD(r7, 0x5313, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) 2.98654525s ago: executing program 7 (id=2808): mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x800, 0x0, 0x10, 0x2}, 0x10) write(r1, &(0x7f0000001fc0)="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", 0xfc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000060000000000050000000800090002000000180001801400020073697430000000000000000000000000050007"], 0x3c}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @local}}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003"], 0x54}}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x9) ioctl$sock_netdev_private(r6, 0x8924, &(0x7f0000000000)) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r7 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001480)="2eec116d8cb4d8eb000786c758837b78", 0x10}], 0x1}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r8, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r7, &(0x7f0000000080)='=', 0x11}]) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) r10 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r10, r9, 0x0, 0x6) lstat(&(0x7f00000002c0)='\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x8098, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x10001}}, {@max_read={'max_read', 0x3d, 0x4}}, {@blksize={'blksize', 0x3d, 0xa00}}, {@blksize}, {@allow_other}], [{@subj_type={'subj_type', 0x3d, '(\\.'}}]}}) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8afa89, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) io_submit(r8, 0x3, &(0x7f0000000740)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x4, r7, &(0x7f0000000480)="87299b1dd454a43beffeb3f546385c9d606f83c36adbae5ba1c76865d18189b5987b320b08806efddaf17357519a01c9f8c0c386d5", 0x35, 0x9480, 0x0, 0x6}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0xdc, r7, &(0x7f00000005c0)="1290a0c4a6339b99e6cd9fdf015714b151d61c48503adda45a2a161c047658add625c999a386df9a72e78d94f516e7002cbb868d9200bc4ecd255ccca0f178f06f25da45579e98f265825825d72d279dc425271341d051f6a35b5f84ee89a8546738854645d9bbb81a5e9874a69e793ff963a727cd1c86e4c4b186e4fa05d8527d55253c31e62a7a169fbcc53d8754c385a0680d851bd3125f38cd1de1e536e74e2c1d81415b5b569464682b9f859c62b9d90dd8", 0xb4, 0x0, 0x0, 0x2, r10}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x7, r10, &(0x7f0000000680)="43dcf34a9ba7dd4b8e212ea4d701b372575eda5f56b1c35a3d27d5be36bfda9adff212ad56a2b555247fb2b4aad3494c9130c3209cb09a34fa710811986b1b1308d7fd3a76f341a4094cf2953fe8240e6e5f2ceeebeb91a13da674348c798169df3af8747e652773623b738142f36bc4d36be99c3a17d5f606625af701d31e7f8e53892184c28849156a83629debb091", 0x90, 0xb, 0x0, 0x2, r9}]) 2.820193012s ago: executing program 7 (id=2809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) 729.844039ms ago: executing program 9 (id=2762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f0000000540)={0x2020}, 0x2020) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f00000004c0)="9e", 0x1, 0x100490d5, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x20}, 0xc) sendmsg$inet6(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x30400}], 0x1}, 0x0) sendmmsg$inet6(r4, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000006c0)='\n', 0x34000}], 0x1}}], 0x1, 0x1) close(0x3) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x288}]}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x5}]}}]}, 0x48}}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r11, 0x100, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) 600.644464ms ago: executing program 7 (id=2816): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10900) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0xfffffffffffffffb) (async) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x1) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 564.095949ms ago: executing program 38 (id=2816): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10900) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0xfffffffffffffffb) (async) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x1) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 520.492402ms ago: executing program 9 (id=2819): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73}, {@in6=@loopback, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, {}, {}, 0x70bd26, 0x3502, 0x2, 0x0, 0x0, 0x40}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0) 520.217829ms ago: executing program 9 (id=2820): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x4, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) socket(0x10, 0x803, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005000000", @ANYRES32, @ANYBLOB="000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) (async) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 439.927982ms ago: executing program 9 (id=2821): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x140, 0x0, 0x1, [@typed={0x8, 0x9a, 0x0, 0x0, @uid}, @generic="715b5b729d9d7747bed625d3e668373100925bda2fe8b67d900854a72e3938cdbb1228490b6382a03767f310122638bf46a9b7a005d0fa399e313fbd98bf860597607e819db056ec4b6f73fda81a0e30ec9b4c13992e19d9cbf39deee2a58a862d54c3a4f369eba4be1ef8d3d61766de67201110a6ebf796baacfed1fb29cf77fc5000535716d9dcbf8e8e455fee62a2459e66bd771a3a68836c389dc6fd5760f3f9b4939d16b9a3b44606129ef0365ae8f516", @nested={0x2d, 0x21, 0x0, 0x1, [@generic="fd674e4e0083038a0101c5e0a623ca7ce910c433625aaa8c1740dea9353d3fa1bf92eb6a75ca50339a"]}, @nested={0x8, 0xb6, 0x0, 0x1, [@nested={0x4, 0x72}]}, @generic="f3caef3f34049f72f575df25"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x8804}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r3) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff690000000000000004bafff200000000861f4104bfeacd1f639265dd530700", 0x28, r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$vim2m(&(0x7f0000000200), 0x5, 0x2) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) write$UHID_CREATE2(r13, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r13, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r10, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_GET_DEVICE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1a000000", @ANYRES16=r9, @ANYBLOB="81012dbd7000d902000001000000080001"], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r14 = io_uring_setup(0x1d33, &(0x7f0000000240)={0x0, 0x4bcc, 0x800, 0x10004, 0x11a}) io_uring_enter(r14, 0x40ff, 0xafe2, 0x14, &(0x7f0000000500)={[0x1]}, 0x8) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r8, 0x40047211, &(0x7f0000000400)) 439.420469ms ago: executing program 6 (id=2822): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x3, [@volatile={0x10, 0x0, 0x0, 0x9, 0x5}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x80, 0x4}, @typedef, @enum64={0xe, 0x4, 0x0, 0x13, 0x0, 0x9, [{0xb, 0x2, 0x787}, {0x3, 0x9, 0xb}, {0xf, 0x7, 0x6}, {0xa, 0x4, 0x1}]}, @typedef={0x6, 0x0, 0x0, 0x8, 0x2}, @var={0x8, 0x0, 0x0, 0xe, 0x3, 0x1}, @var={0xa, 0x0, 0x0, 0xe, 0x1}, @func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000500)=""/4096, 0xb7, 0x1000, 0x1, 0x6, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r4, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x10c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0xf0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x9, 0x4, 0x886}, {0x3, 0x0, 0x9, 0x6}, {0x4, 0x7, 0x81, 0xcae1}, {0xfffa, 0x6, 0x9, 0xc}, {0x2, 0x1, 0x5, 0xd3}, {0x9, 0x80, 0x3, 0x1}, {0x6, 0x7, 0x8, 0x7}]}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc020) 430.672391ms ago: executing program 1 (id=2817): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = io_uring_setup(0xe63, &(0x7f00000000c0)={0x0, 0xd622, 0x100, 0x1, 0x2b7}) io_uring_enter(r0, 0x2530, 0xba46, 0x7, &(0x7f0000000000), 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000000000000000}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@exit, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd598}}, @alu={0x7, 0x1, 0x3, 0x5, 0x2, 0xb, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 428.401997ms ago: executing program 9 (id=2823): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x2d, 0x1, 0x1, "0000000000000000000000003742d300", 0x32314d56}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, 0x4, 0x3d0, 0x0, 0x200, 0x110, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @empty}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@remote, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4, 0x5) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0), 0xfdef) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/resume_offset', 0x400000, 0x80) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(r7, r7, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000130a010200efffffff000000020000000900010073797a3100000000"], 0x20}}, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x134, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0x4}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x3, 0xfffffffc, 0xe7, 0xf81f]}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc0}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x400}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xeeb1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_NAT_DST={0x54, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2b}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4800}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r9, 0x28, 0x0, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) read(r8, &(0x7f0000001480)=""/4096, 0x1000) 308.282911ms ago: executing program 6 (id=2824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) 307.807798ms ago: executing program 6 (id=2825): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3, 0x400}) r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = semget$private(0x0, 0x0, 0x88) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f00000000c0)=""/249) 210.773187ms ago: executing program 6 (id=2826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]}) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) unlink(&(0x7f0000000300)='./file0/file0\x00') 210.170543ms ago: executing program 1 (id=2817): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = io_uring_setup(0xe63, &(0x7f00000000c0)={0x0, 0xd622, 0x100, 0x1, 0x2b7}) io_uring_enter(r0, 0x2530, 0xba46, 0x7, &(0x7f0000000000), 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000000000000000}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@exit, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd598}}, @alu={0x7, 0x1, 0x3, 0x5, 0x2, 0xb, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 70.991732ms ago: executing program 6 (id=2827): r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r0, 0x200002) (async) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) (async, rerun: 64) sendfile(r2, r1, 0x0, 0x80001d00c0d0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000080)=0x9, 0x4) 638.069µs ago: executing program 6 (id=2828): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x28040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3], 0x48}}, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x19) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000080)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01062bbd7000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004"], 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x20040090) 0s ago: executing program 1 (id=2817): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = io_uring_setup(0xe63, &(0x7f00000000c0)={0x0, 0xd622, 0x100, 0x1, 0x2b7}) io_uring_enter(r0, 0x2530, 0xba46, 0x7, &(0x7f0000000000), 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000000000000000}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@exit, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd598}}, @alu={0x7, 0x1, 0x3, 0x5, 0x2, 0xb, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.0.2293'. [ 213.034249][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2293'. [ 213.037052][T14376] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2293'. [ 213.085281][ T5320] block nbd0: Receive control failed (result -107) [ 213.114652][T14376] nbd0: detected capacity change from 0 to 256 [ 213.124702][ T9885] block nbd0: Dead connection, failed to find a fallback [ 213.128001][ T9885] block nbd0: shutting down sockets [ 213.129852][ T9885] blk_print_req_error: 40 callbacks suppressed [ 213.129860][ T9885] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.134364][ T9885] buffer_io_error: 40 callbacks suppressed [ 213.134374][ T9885] Buffer I/O error on dev nbd0, logical block 0, async page read [ 213.138585][ T9885] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.140949][ T9885] Buffer I/O error on dev nbd0, logical block 0, async page read [ 213.143246][ T9885] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.145766][ T9885] Buffer I/O error on dev nbd0, logical block 0, async page read [ 213.147826][ T9885] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.150225][ T9885] Buffer I/O error on dev nbd0, logical block 0, async page read [ 213.152816][ T9885] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.155300][ T9885] Buffer I/O error on dev nbd0, logical block 0, async page read [ 213.157366][ T9885] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.159693][ T9885] Buffer I/O error on dev nbd0, logical block 0, async page read [ 213.161810][ T9885] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.165331][ T9885] Buffer I/O error on dev nbd0, logical block 0, async page read [ 213.168111][ T9885] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.170709][ T9885] Buffer I/O error on dev nbd0, logical block 0, async page read [ 213.172885][ T9885] ldm_validate_partition_table(): Disk read failed. [ 213.174931][ T9885] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.176562][T14347] Can't find a SQUASHFS superblock on nullb0 [ 213.177283][ T9885] Buffer I/O error on dev nbd0, logical block 0, async page read [ 213.181919][ T9885] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.185901][ T9885] Buffer I/O error on dev nbd0, logical block 0, async page read [ 213.188935][ T9885] Dev nbd0: unable to read RDB block 0 [ 213.191092][ T9885] nbd0: unable to read partition table [ 213.194299][ T9885] ldm_validate_partition_table(): Disk read failed. [ 213.196216][ T9885] Dev nbd0: unable to read RDB block 0 [ 213.197826][ T9885] nbd0: unable to read partition table [ 213.485660][ T39] audit: type=1400 audit(1732497275.195:38775): avc: denied { mounton } for pid=14389 comm="syz.0.2298" path="/162/bus" dev="tmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 213.488169][T14390] syz.0.2298: attempt to access beyond end of device [ 213.488169][T14390] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 213.497127][T14390] FAT-fs (loop0): unable to read boot sector [ 214.006261][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2309'. [ 214.009195][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2309'. [ 214.032196][T14431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.036201][T14431] batadv_slave_1: entered promiscuous mode [ 214.044050][T14434] netlink: 'syz.7.2312': attribute type 21 has an invalid length. [ 214.046817][T14434] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2312'. [ 214.069100][T14436] lo speed is unknown, defaulting to 1000 [ 214.619154][ T75] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 214.637481][T14461] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 214.639833][T14461] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 214.642042][T14461] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 214.774181][ T75] usb 5-1: Using ep0 maxpacket: 16 [ 214.777778][ T75] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.781294][ T75] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.784762][ T75] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 214.789171][ T75] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 214.792480][ T75] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.797069][ T75] usb 5-1: config 0 descriptor?? [ 214.828800][ T39] audit: type=1400 audit(1732497276.535:38776): avc: denied { open } for pid=14462 comm="syz.6.2322" path="/dev/ttyr0" dev="devtmpfs" ino=399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 214.869870][T14468] CUSE: zero length info key specified [ 215.204872][ T39] audit: type=1400 audit(1732497276.905:38777): avc: denied { read } for pid=14450 comm="syz.0.2318" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 215.212510][ T39] audit: type=1400 audit(1732497276.905:38778): avc: denied { open } for pid=14450 comm="syz.0.2318" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 215.225930][ T75] input: HID 0955:7214 Haptics as /devices/virtual/input/input32 [ 215.242235][ T75] shield 0003:0955:7214.000B: Registered Thunderstrike controller [ 215.244450][ T75] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 215.304675][T14471] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 215.306345][T14471] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 215.308157][T14468] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 215.312867][T14471] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 215.314831][T14471] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 215.316452][T14471] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 215.322504][T14471] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 215.342840][ T6015] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 215.342989][ T5993] usb 5-1: USB disconnect, device number 51 [ 215.346460][ T6015] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 215.350606][ T6015] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 215.356841][ T6015] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 215.393234][T14475] siw: device registration error -23 [ 215.762850][ T39] audit: type=1400 audit(1732497277.465:38779): avc: denied { read } for pid=14481 comm="syz.6.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 215.771652][ T39] audit: type=1400 audit(1732497277.465:38780): avc: denied { mount } for pid=14481 comm="syz.6.2327" name="/" dev="configfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 215.777271][T14484] __nla_validate_parse: 1 callbacks suppressed [ 215.777280][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2327'. [ 215.780418][ T39] audit: type=1400 audit(1732497277.475:38781): avc: denied { read } for pid=14481 comm="syz.6.2327" name="/" dev="configfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.781362][T14484] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2327'. [ 215.790244][ T39] audit: type=1400 audit(1732497277.475:38782): avc: denied { open } for pid=14481 comm="syz.6.2327" path="/303/file0" dev="configfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.562863][ T39] audit: type=1400 audit(1732497278.265:38783): avc: denied { setattr } for pid=14485 comm="syz.3.2328" name="DCCPv6" dev="sockfs" ino=65662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 217.326298][T14502] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2335'. [ 217.326409][ T5320] Bluetooth: hci1: command 0x0c1a tx timeout [ 217.328904][ T5963] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.332087][ T5320] Bluetooth: hci4: command 0x0c1a tx timeout [ 217.332200][ T5963] Bluetooth: hci2: command 0x0c1a tx timeout [ 217.348493][T14499] Process accounting resumed [ 217.460955][T14509] xt_hashlimit: size too large, truncated to 1048576 [ 217.463424][T14509] xt_hashlimit: max too large, truncated to 1048576 [ 217.578990][T14513] sg_write: process 961 (syz.6.2340) changed security contexts after opening file descriptor, this is not allowed. [ 217.590329][T14513] program syz.6.2340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.654138][ C3] net_ratelimit: 113 callbacks suppressed [ 217.654156][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.822178][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.827166][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.829990][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.836943][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.839740][ T5955] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.841758][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.853389][T14530] lo speed is unknown, defaulting to 1000 [ 217.866011][T14531] lo speed is unknown, defaulting to 1000 [ 217.986942][T14530] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 217.999142][T14531] chnl_net:caif_netlink_parms(): no params data found [ 218.045282][T11972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.054608][ T831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.059147][ T1337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.109124][T14531] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.111104][T14531] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.113047][T14531] bridge_slave_0: entered allmulticast mode [ 218.115334][T14531] bridge_slave_0: entered promiscuous mode [ 218.118125][T14531] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.120040][T14531] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.121981][T14531] bridge_slave_1: entered allmulticast mode [ 218.124233][T14531] bridge_slave_1: entered promiscuous mode [ 218.194603][T14531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.200696][T14531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.231187][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 218.231199][ T39] audit: type=1400 audit(1732497279.935:38788): avc: denied { map } for pid=14542 comm="syz.7.2348" path="socket:[66894]" dev="sockfs" ino=66894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 218.241798][ T39] audit: type=1400 audit(1732497279.935:38789): avc: denied { read } for pid=14542 comm="syz.7.2348" path="socket:[66894]" dev="sockfs" ino=66894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 218.342112][T14531] team0: Port device team_slave_0 added [ 218.347005][T14531] team0: Port device team_slave_1 added [ 218.361600][T14552] input: syz0 as /devices/virtual/input/input33 [ 218.367839][ T8649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.372131][T14531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.373955][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.384502][T14531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.397875][T14531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.399709][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.407868][T14531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.432394][T14531] hsr_slave_0: entered promiscuous mode [ 218.437210][T14531] hsr_slave_1: entered promiscuous mode [ 218.439827][T14531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.442047][T14531] Cannot create hsr debugfs directory [ 218.534373][T14561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 218.544660][T14561] macsec0: entered promiscuous mode [ 218.561036][T14531] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 218.564382][T14531] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 218.568813][T14531] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 218.575281][T14531] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 218.624786][T14531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.643983][T14531] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.658036][T11972] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.660084][T11972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.664408][ T39] audit: type=1400 audit(1732497280.365:38790): avc: denied { accept } for pid=14568 comm="syz.6.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 218.669231][T11971] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.672877][ T39] audit: type=1400 audit(1732497280.375:38791): avc: denied { ioctl } for pid=14568 comm="syz.6.2356" path="/dev/ptyr1" dev="devtmpfs" ino=144 ioctlcmd=0x5436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 218.673202][T11971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.684099][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 218.687530][T14571] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 218.689624][T14571] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 218.781932][ T39] audit: type=1400 audit(1732497280.485:38792): avc: denied { map } for pid=14581 comm="syz.3.2361" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 218.797013][T14531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.938798][T14531] veth0_vlan: entered promiscuous mode [ 218.943369][T14531] veth1_vlan: entered promiscuous mode [ 218.973109][T14531] veth0_macvtap: entered promiscuous mode [ 218.980788][T14531] veth1_macvtap: entered promiscuous mode [ 218.992378][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.997523][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.000736][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.002532][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2364'. [ 219.005259][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.011001][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.014516][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.017752][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.021222][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.024615][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.028278][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.031561][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.035228][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.038593][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.042216][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.047376][T14531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.053888][ T39] audit: type=1400 audit(1732497280.755:38793): avc: denied { connect } for pid=14617 comm="syz.3.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 219.063192][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.067416][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.070993][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.074956][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.078150][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.081641][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.085464][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.085657][ T57] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 219.088861][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.088885][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.088897][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.088917][T14531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.088928][T14531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.090537][T14531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.113488][T14531] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.116599][T14531] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.119390][T14531] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.122297][T14531] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.160546][T14625] netlink: 'syz.3.2366': attribute type 1 has an invalid length. [ 219.168264][T14625] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2366'. [ 219.217081][T11961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.219251][T11961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.242108][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.246829][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.254160][ T57] usb 11-1: Using ep0 maxpacket: 32 [ 219.258021][ T57] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 219.261379][ T57] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 219.264612][ T57] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 219.267897][ T57] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 219.271362][ T57] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 219.277413][ T57] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 219.281976][ T57] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 219.299102][ T57] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.314742][ T57] usb 11-1: config 0 descriptor?? [ 219.382361][T14653] serio: Serial port ptm0 [ 219.405125][ T8649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.409151][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 219.435775][T14653] binder: 14651:14653 ioctl 84009422 20000880 returned -22 [ 219.472395][ T39] audit: type=1400 audit(1732497281.175:38794): avc: denied { setopt } for pid=14666 comm="syz.7.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 219.519095][ T57] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 219.530700][ T57] usb 11-1: USB disconnect, device number 13 [ 219.538271][ T57] usblp0: removed [ 219.541121][T14671] xt_hashlimit: size too large, truncated to 1048576 [ 219.734093][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 219.884670][ T5955] Bluetooth: hci0: command tx timeout [ 219.954108][ T57] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 220.114181][ T57] usb 11-1: Using ep0 maxpacket: 32 [ 220.116941][ T57] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 220.119269][ T57] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 220.121980][ T57] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 220.126205][ T97] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.130066][ T57] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 220.132660][ T57] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 220.140084][ T57] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 220.144909][ T57] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 220.148156][ T57] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.152246][ T57] usb 11-1: config 0 descriptor?? [ 220.358136][ T57] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 220.459404][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2380'. [ 220.466573][T14692] xt_cgroup: path and classid specified [ 220.469777][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2380'. [ 220.473154][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2380'. [ 220.501146][T14698] netlink: 'syz.8.2382': attribute type 27 has an invalid length. [ 220.503660][ T39] audit: type=1400 audit(1732497282.205:38795): avc: denied { getopt } for pid=14697 comm="syz.8.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 220.522980][T14692] netlink: 'syz.3.2381': attribute type 1 has an invalid length. [ 220.560232][ T39] audit: type=1400 audit(1732497282.265:38796): avc: denied { read write } for pid=14573 comm="syz.6.2359" name="lp0" dev="devtmpfs" ino=3408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 220.568136][ T39] audit: type=1400 audit(1732497282.265:38797): avc: denied { open } for pid=14573 comm="syz.6.2359" path="/dev/usb/lp0" dev="devtmpfs" ino=3408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 220.599119][ T831] usb 11-1: USB disconnect, device number 14 [ 220.604327][ T831] usblp0: removed [ 220.683101][T14709] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 220.692776][T14710] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 220.713411][T14706] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 220.821444][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2388'. [ 220.836290][T14717] netlink: 'syz.8.2387': attribute type 30 has an invalid length. [ 221.029483][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2390'. [ 221.032683][T14744] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2390'. [ 221.095695][ T5955] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 221.380134][T14779] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2399'. [ 221.833552][T14817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14817 comm=syz.6.2406 [ 221.839565][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2406'. [ 222.845204][ C3] net_ratelimit: 11 callbacks suppressed [ 222.845217][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 222.854285][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.174263][ T5955] Bluetooth: hci0: command tx timeout [ 223.328606][T11976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.337596][ T8649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.345534][ T1337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.723759][T14830] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 223.894107][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.894775][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.937646][T14869] Bluetooth: MGMT ver 1.23 [ 224.097567][T14911] xt_hashlimit: size too large, truncated to 1048576 [ 224.308488][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 224.308499][ T39] audit: type=1326 audit(1732497286.015:38809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14923 comm="syz.8.2431" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8fcd7e819 code=0x0 [ 224.815247][T14939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11259 sclass=netlink_route_socket pid=14939 comm=syz.3.2434 [ 224.924105][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 224.924585][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.942057][T14948] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2437'. [ 225.016109][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2441'. [ 225.085320][T14965] MPI: mpi too large (16392 bits) [ 225.178639][ T39] audit: type=1400 audit(1732497286.885:38810): avc: denied { listen } for pid=14980 comm="syz.7.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 225.183697][ T39] audit: type=1400 audit(1732497286.885:38811): avc: denied { accept } for pid=14980 comm="syz.7.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 225.219610][T14992] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2453'. [ 225.220454][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2451'. [ 225.225595][T14992] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 225.226206][ T39] audit: type=1400 audit(1732497286.925:38812): avc: denied { write } for pid=14993 comm="syz.7.2454" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 225.254677][ T5955] Bluetooth: hci0: command tx timeout [ 225.358604][ T39] audit: type=1400 audit(1732497287.065:38813): avc: denied { unmount } for pid=14531 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 225.469661][T15031] SET target dimension over the limit! [ 225.555519][T15041] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2467'. [ 225.560853][T15039] lo speed is unknown, defaulting to 1000 [ 225.611472][ T39] audit: type=1400 audit(1732497287.315:38814): avc: denied { create } for pid=15028 comm="syz.6.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 225.621863][T15045] syzkaller1: entered promiscuous mode [ 225.623380][T15045] syzkaller1: entered allmulticast mode [ 225.673481][ T39] audit: type=1400 audit(1732497287.375:38815): avc: denied { accept } for pid=15028 comm="syz.6.2464" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 225.675692][T15039] xt_hashlimit: size too large, truncated to 1048576 [ 225.680653][T15039] xt_hashlimit: max too large, truncated to 1048576 [ 225.719960][ T39] audit: type=1400 audit(1732497287.425:38816): avc: denied { read } for pid=15047 comm="syz.8.2469" path="socket:[69336]" dev="sockfs" ino=69336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.886145][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.911827][ T39] audit: type=1400 audit(1732497287.615:38817): avc: denied { connect } for pid=15060 comm="syz.8.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 225.981445][T15059] syzkaller0: entered promiscuous mode [ 225.983210][T15059] syzkaller0: entered allmulticast mode [ 227.034722][ T39] audit: type=1400 audit(1732497288.745:38818): avc: denied { getopt } for pid=15070 comm="syz.8.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 227.072468][T15074] __nla_validate_parse: 2 callbacks suppressed [ 227.072483][T15074] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2479'. [ 228.054098][ C3] net_ratelimit: 4 callbacks suppressed [ 228.054109][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 228.060513][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.254725][T15077] netem: unknown loss type 5 [ 228.256699][T15077] netem: change failed [ 228.260014][T15078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.264993][T15078] batadv_slave_1: entered promiscuous mode [ 228.276166][T15079] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.281792][T15079] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.360099][T15083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2483'. [ 228.376316][T15085] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.378558][T15085] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.382630][T15085] bridge0: entered allmulticast mode [ 228.424817][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2482'. [ 228.448506][ T5963] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 228.453460][ T97] Bluetooth: hci5: Frame reassembly failed (-84) [ 228.544739][T15101] lo speed is unknown, defaulting to 1000 [ 228.580527][T15106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.596746][T15111] binder: BINDER_SET_CONTEXT_MGR already set [ 228.598348][T15111] binder: 15108:15111 ioctl 4018620d 20000340 returned -16 [ 228.603560][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x6 [ 228.606125][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x3 [ 228.608046][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.609951][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.612735][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.615280][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.617491][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.619405][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.621434][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.623367][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.625773][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.627693][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.629830][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.631828][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.633858][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.636272][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.638189][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.640519][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.643255][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.646339][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.648371][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.650286][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.652354][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.654655][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.656642][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.658991][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.661381][ T58] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 228.669172][ T58] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz0] on syz0 [ 228.924273][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.072127][T15136] Process accounting resumed [ 229.084170][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 229.090280][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.102805][T15138] overlayfs: missing 'lowerdir' [ 229.236550][T15149] netlink: 'syz.6.2503': attribute type 10 has an invalid length. [ 229.242761][T15149] syz_tun: entered promiscuous mode [ 229.244569][T15149] syz_tun: entered allmulticast mode [ 229.246426][T15149] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 229.312613][T15155] netlink: 'syz.6.2505': attribute type 32 has an invalid length. [ 229.314819][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2505'. [ 229.317139][T15155] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 229.337023][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 229.337035][ T39] audit: type=1400 audit(1732497291.045:38823): avc: denied { ioctl } for pid=15154 comm="syz.6.2505" path="socket:[69558]" dev="sockfs" ino=69558 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 229.369559][T15158] netlink: 134744 bytes leftover after parsing attributes in process `syz.6.2506'. [ 229.373004][T15158] openvswitch: netlink: Message has 76 unknown bytes. [ 229.421911][ T39] audit: type=1400 audit(1732497291.125:38824): avc: denied { ioctl } for pid=15162 comm="syz.6.2507" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 229.588376][T15171] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2510'. [ 229.790732][T15179] input: syz0 as /devices/virtual/input/input34 [ 229.828994][T15183] ntfs3(nullb0): Primary boot signature is not NTFS. [ 229.831273][T15183] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 229.962810][T15196] tun0: tun_chr_ioctl cmd 1074025675 [ 229.964747][T15196] tun0: persist enabled [ 229.966125][T15196] tun0: tun_chr_ioctl cmd 1074025675 [ 229.967502][T15196] tun0: persist enabled [ 229.998988][T15198] fuseblk: Bad value for 'fd' [ 230.014482][T15200] syz.8.2519[15200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.014554][T15200] syz.8.2519[15200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.017821][T15200] syz.8.2519[15200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.090309][ T39] audit: type=1400 audit(1732497291.795:38825): avc: denied { name_connect } for pid=15207 comm="syz.8.2522" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 230.124789][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.134094][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 230.216041][ T39] audit: type=1400 audit(1732497291.925:38826): avc: denied { append } for pid=15215 comm="syz.8.2524" name="dlm_plock" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.320579][T15220] overlayfs: missing 'lowerdir' [ 230.524207][ T5963] Bluetooth: hci5: command 0x1003 tx timeout [ 230.524302][ T5955] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 230.593146][T15227] usb usb9: check_ctrlrecip: process 15227 (syz.8.2528) requesting ep 01 but needs 81 [ 230.595942][T15227] usb usb9: usbfs: process 15227 (syz.8.2528) did not claim interface 0 before use [ 230.799118][T15250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15250 comm=syz.8.2534 [ 230.800894][T15251] netlink: '': attribute type 1 has an invalid length. [ 230.812055][T15251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.815731][T15250] tmpfs: Unknown parameter '' [ 230.823582][T15250] bond2: (slave gretap1): making interface the new active one [ 230.827193][T15250] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 230.894711][ T39] audit: type=1400 audit(1732497292.595:38827): avc: denied { listen } for pid=15256 comm="syz.8.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.900024][T15257] usb usb9: usbfs: process 15257 (syz.8.2536) did not claim interface 28 before use [ 230.936713][T15269] netlink: 'syz.7.2541': attribute type 4 has an invalid length. [ 230.938734][T15269] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2541'. [ 230.942344][T15272] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 230.976974][ T39] audit: type=1400 audit(1732497292.685:38828): avc: denied { ioctl } for pid=15275 comm="syz.8.2543" path="socket:[72966]" dev="sockfs" ino=72966 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 231.019858][ T39] audit: type=1400 audit(1732497292.725:38829): avc: denied { accept } for pid=15283 comm="syz.8.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 231.111260][T15298] xt_hashlimit: size too large, truncated to 1048576 [ 231.152461][T15294] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2546'. [ 231.164291][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.675531][T15313] binder: BINDER_SET_CONTEXT_MGR already set [ 231.677779][T15313] binder: 15310:15313 ioctl 4018620d 20000040 returned -16 [ 232.002669][T15343] vxcan1: tx address claim with different name [ 232.134093][ T6015] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 232.304094][ T6015] usb 11-1: Using ep0 maxpacket: 8 [ 232.307237][ T6015] usb 11-1: config index 0 descriptor too short (expected 5924, got 36) [ 232.309617][ T6015] usb 11-1: config 250 has an invalid interface number: 228 but max is -1 [ 232.316152][ T6015] usb 11-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 232.318579][ T6015] usb 11-1: config 250 has no interface number 0 [ 232.320299][ T6015] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 232.323351][ T6015] usb 11-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 232.326937][ T6015] usb 11-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 232.330280][ T6015] usb 11-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 232.334770][ T6015] usb 11-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 232.338962][ T6015] usb 11-1: config 250 interface 228 has no altsetting 0 [ 232.342462][ T6015] usb 11-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 232.345655][ T6015] usb 11-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 232.348285][ T6015] usb 11-1: Product: syz [ 232.349744][ T6015] usb 11-1: SerialNumber: syz [ 232.358843][ T6015] hub 11-1:250.228: bad descriptor, ignoring hub [ 232.361215][ T6015] hub 11-1:250.228: probe with driver hub failed with error -5 [ 232.373740][T15366] FAULT_INJECTION: forcing a failure. [ 232.373740][T15366] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 232.378295][T15366] CPU: 1 UID: 0 PID: 15366 Comm: syz.3.2569 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 232.381050][T15366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.383891][T15366] Call Trace: [ 232.384818][T15366] [ 232.385634][T15366] dump_stack_lvl+0x16c/0x1f0 [ 232.386916][T15366] should_fail_ex+0x497/0x5b0 [ 232.388194][T15366] ? fs_reclaim_acquire+0xae/0x150 [ 232.389574][T15366] should_fail_alloc_page+0xe7/0x130 [ 232.390997][T15366] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 232.392637][T15366] __alloc_pages_noprof+0x190/0x25a0 [ 232.394066][T15366] ? hlock_class+0x4e/0x130 [ 232.395289][T15366] ? mark_lock+0xb5/0xc60 [ 232.396459][T15366] ? hlock_class+0x4e/0x130 [ 232.397677][T15366] ? __pfx_mark_lock+0x10/0x10 [ 232.398953][T15366] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 232.400470][T15366] ? __lock_acquire+0x15a9/0x3c40 [ 232.401818][T15366] ? mark_lock+0xb5/0xc60 [ 232.402986][T15366] ? hlock_class+0x4e/0x130 [ 232.404204][T15366] ? __lock_acquire+0xcc5/0x3c40 [ 232.405533][T15366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 232.407108][T15366] ? policy_nodemask+0xea/0x4e0 [ 232.408432][T15366] alloc_pages_mpol_noprof+0x2c9/0x610 [ 232.409906][T15366] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 232.411519][T15366] ? __lock_acquire+0xcc5/0x3c40 [ 232.412852][T15366] folio_alloc_mpol_noprof+0x36/0xd0 [ 232.414265][T15366] vma_alloc_folio_noprof+0xee/0x1b0 [ 232.415663][T15366] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 232.417236][T15366] ? find_held_lock+0x2d/0x110 [ 232.418514][T15366] do_pte_missing+0x2021/0x3e70 [ 232.419823][T15366] __handle_mm_fault+0x103c/0x2a40 [ 232.421198][T15366] ? lock_vma_under_rcu+0x6b9/0x980 [ 232.422593][T15366] ? __pfx___handle_mm_fault+0x10/0x10 [ 232.424084][T15366] handle_mm_fault+0x3fa/0xaa0 [ 232.425386][T15366] do_user_addr_fault+0x60d/0x13f0 [ 232.426751][T15366] exc_page_fault+0x5c/0xc0 [ 232.427974][T15366] asm_exc_page_fault+0x26/0x30 [ 232.429285][T15366] RIP: 0033:0x7fc10d045e3a [ 232.430453][T15366] Code: b2 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 bf 00 00 c0 fe 41 56 41 55 41 54 45 31 e4 55 53 48 81 ec 08 1b 00 00 <48> 89 7c 24 78 48 8d 9c 24 f0 06 00 00 48 89 74 24 70 48 89 54 24 [ 232.435557][T15366] RSP: 002b:00007fc10deaf4f0 EFLAGS: 00010206 [ 232.437187][T15366] RAX: 00007fc10d045e20 RBX: 00007fc10d335fa0 RCX: 0000000020000300 [ 232.439285][T15366] RDX: 0000000020000000 RSI: 0000000000000007 RDI: ffffffffffffffff [ 232.441393][T15366] RBP: 00007fc10deb1090 R08: 0000000000000001 R09: 0000000000000000 [ 232.443448][T15366] R10: ffffffffffffffff R11: 0000000020000000 R12: 0000000000000000 [ 232.445548][T15366] R13: 0000000000000000 R14: 00007fc10d335fa0 R15: 00000000fec00000 [ 232.447643][T15366] [ 232.448574][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.450509][ C1] hpet: Lost 4 RTC interrupts [ 232.453852][T15366] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 232.574649][ T6015] usblp 11-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 232.699660][T15387] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 232.737415][T15387] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2575'. [ 232.756097][T15393] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2577'. [ 232.767216][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2577'. [ 232.825616][T15400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.829187][T15400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.969067][ T39] audit: type=1400 audit(1732497294.675:38830): avc: denied { append } for pid=15398 comm="syz.8.2578" name="nbd8" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.024542][T15405] netlink: 'syz.8.2581': attribute type 63 has an invalid length. [ 233.034552][T15407] FAULT_INJECTION: forcing a failure. [ 233.034552][T15407] name failslab, interval 1, probability 0, space 0, times 1 [ 233.037970][T15407] CPU: 0 UID: 0 PID: 15407 Comm: syz.7.2580 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 233.040731][T15407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 233.043642][T15407] Call Trace: [ 233.044568][T15407] [ 233.045369][T15407] dump_stack_lvl+0x16c/0x1f0 [ 233.046657][T15407] should_fail_ex+0x497/0x5b0 [ 233.047944][T15407] ? fs_reclaim_acquire+0xae/0x150 [ 233.049346][T15407] should_failslab+0xc2/0x120 [ 233.050609][T15407] __kmalloc_noprof+0xcb/0x400 [ 233.051914][T15407] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 233.053461][T15407] tomoyo_realpath_from_path+0xb9/0x720 [ 233.055008][T15407] ? tomoyo_path_number_perm+0x235/0x590 [ 233.056522][T15407] ? tomoyo_path_number_perm+0x235/0x590 [ 233.058105][T15407] tomoyo_path_number_perm+0x248/0x590 [ 233.059558][T15407] ? tomoyo_path_number_perm+0x235/0x590 [ 233.061075][T15407] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 233.062696][T15407] ? __pfx_lock_release+0x10/0x10 [ 233.064054][T15407] ? trace_lock_acquire+0x146/0x1e0 [ 233.065450][T15407] ? lock_acquire+0x2f/0xb0 [ 233.066661][T15407] ? __fget_files+0x40/0x3a0 [ 233.067902][T15407] ? __fget_files+0x206/0x3a0 [ 233.069170][T15407] security_file_ioctl+0x9b/0x240 [ 233.070710][T15407] __x64_sys_ioctl+0xb7/0x200 [ 233.071987][T15407] do_syscall_64+0xcd/0x250 [ 233.073273][T15407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.074869][T15407] RIP: 0033:0x7f3e12d7e41b [ 233.076074][T15407] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 233.081158][T15407] RSP: 002b:00007f3e13bb8490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 233.083374][T15407] RAX: ffffffffffffffda RBX: 00007f3e13bb8be0 RCX: 00007f3e12d7e41b [ 233.085477][T15407] RDX: 00007f3e13bb8aa0 RSI: 000000008138ae83 RDI: 0000000000000007 [ 233.087566][T15407] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000000000000000 [ 233.089711][T15407] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000018 [ 233.091813][T15407] R13: 0000000020018000 R14: 0000000020000000 R15: 00000000fec00000 [ 233.093944][T15407] [ 233.096000][T15407] ERROR: Out of memory at tomoyo_realpath_from_path. [ 233.121183][T15411] overlayfs: missing 'lowerdir' [ 233.220357][T15415] SELinux: syz.7.2583 (15415) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 233.226390][T15415] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2583'. [ 233.245789][ T8649] net_ratelimit: 4 callbacks suppressed [ 233.245804][ T8649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.254122][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.488036][T15333] usb 11-1: reset high-speed USB device number 15 using dummy_hcd [ 233.634125][ T1337] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 233.634208][T15333] usb 11-1: device descriptor read/64, error -71 [ 233.794249][ T1337] usb 12-1: Using ep0 maxpacket: 8 [ 233.797694][ T1337] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 233.799758][ T1337] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.802315][ T1337] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.805715][ T1337] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.808982][ T1337] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.813408][ T1337] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.816724][ T1337] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.874253][T15333] usb 11-1: reset high-speed USB device number 15 using dummy_hcd [ 234.005954][T15333] usb 11-1: device descriptor read/64, error -71 [ 234.019962][T15427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=15427 comm=syz.8.2588 [ 234.025116][ T1337] usb 12-1: usb_control_msg returned -32 [ 234.026723][ T1337] usbtmc 12-1:16.0: can't read capabilities [ 234.274178][T15333] usb 11-1: reset high-speed USB device number 15 using dummy_hcd [ 234.286014][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 234.289985][ T8649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.304646][T15333] usb 11-1: device descriptor read/8, error -71 [ 234.554142][T15333] usb 11-1: reset high-speed USB device number 15 using dummy_hcd [ 234.576701][T15333] usb 11-1: device descriptor read/8, error -71 [ 234.688977][ T58] usb 11-1: USB disconnect, device number 15 [ 234.692175][ T58] usblp0: removed [ 234.824269][ T58] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 234.954198][ T58] usb 11-1: device descriptor read/64, error -71 [ 235.004469][ T1337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.165050][T15448] xt_hashlimit: size too large, truncated to 1048576 [ 235.334131][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 235.336141][ T8649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.449834][T15455] Attempt to restore checkpoint with obsolete wellknown handles [ 235.456008][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2594'. [ 235.834073][ T7771] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 235.876465][ T6512] bond0: (slave syz_tun): Releasing backup interface [ 235.889202][ T5963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.896003][ T5963] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.898770][ T5963] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.901972][ T5963] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.904836][ T5963] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 235.907028][ T5963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.927426][T15478] lo speed is unknown, defaulting to 1000 [ 236.011244][T11972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.025328][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2603'. [ 236.109514][T11972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.118381][ T39] audit: type=1400 audit(1732497297.825:38831): avc: denied { bind } for pid=15486 comm="syz.6.2604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 236.129814][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.149806][T15478] chnl_net:caif_netlink_parms(): no params data found [ 236.214888][T11972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.236080][T15478] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.238733][T15478] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.241324][T15478] bridge_slave_0: entered allmulticast mode [ 236.244432][T15478] bridge_slave_0: entered promiscuous mode [ 236.250153][T15478] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.252749][T15478] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.257149][T15478] bridge_slave_1: entered allmulticast mode [ 236.260257][T15478] bridge_slave_1: entered promiscuous mode [ 236.285245][T11972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.317752][T15478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.328223][T15478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.366133][T15478] team0: Port device team_slave_0 added [ 236.375080][T15478] team0: Port device team_slave_1 added [ 236.376751][ T8649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.390841][ T1337] usb 12-1: USB disconnect, device number 12 [ 236.428239][T15478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.430591][T15478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.439502][T15478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.460810][T15478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.462639][T15478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.474815][T15478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.509541][T15499] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2605'. [ 236.525804][T11972] bridge_slave_1: left allmulticast mode [ 236.527907][T11972] bridge_slave_1: left promiscuous mode [ 236.530103][T11972] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.534368][T11972] bridge_slave_0: left allmulticast mode [ 236.536341][T11972] bridge_slave_0: left promiscuous mode [ 236.538417][T11972] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.672398][T15501] tls_set_device_offload: netdev not found [ 236.939174][ T5955] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 237.024183][ T39] audit: type=1400 audit(1732497298.725:38832): avc: denied { append } for pid=15508 comm="syz.6.2609" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 237.033094][ T39] audit: type=1400 audit(1732497298.735:38833): avc: denied { ioctl } for pid=15508 comm="syz.6.2609" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae8d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 237.280039][T11972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.285457][T11972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.289077][T11972] bond0 (unregistering): Released all slaves [ 237.293763][T11972] bond1 (unregistering): Released all slaves [ 237.297861][T11972] bond2 (unregistering): Released all slaves [ 237.302422][T11972] bond3 (unregistering): Released all slaves [ 237.310991][T11972] bond4 (unregistering): Released all slaves [ 237.318862][T11972] bond5 (unregistering): Released all slaves [ 237.335822][T15478] hsr_slave_0: entered promiscuous mode [ 237.339089][T15478] hsr_slave_1: entered promiscuous mode [ 237.341508][T15478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.344241][T15478] Cannot create hsr debugfs directory [ 237.360407][T15509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.404731][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 237.451609][T11972] tipc: Disabling bearer [ 237.462592][T11972] tipc: Left network mode [ 237.545515][T15500] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 237.554352][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2610'. [ 237.588100][T15522] bridge_slave_1: left allmulticast mode [ 237.589681][T15522] bridge_slave_1: left promiscuous mode [ 237.591475][T15522] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.594560][T15522] bridge_slave_0: left allmulticast mode [ 237.596480][T15522] bridge_slave_0: left promiscuous mode [ 237.598447][T15522] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.630247][ T39] audit: type=1400 audit(1732497299.335:38834): avc: denied { bind } for pid=15528 comm="syz.7.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 237.890912][T15547] binder: 15545:15547 ioctl c0306201 20000200 returned -11 [ 237.894252][T15547] kvm: user requested TSC rate below hardware speed [ 237.964292][ T5955] Bluetooth: hci3: command tx timeout [ 237.982153][T15554] ptrace attach of "/syz-executor exec"[10844] was attempted by "/syz-executor exec"[15554] [ 238.038783][T11972] hsr_slave_0: left promiscuous mode [ 238.041685][T11972] hsr_slave_1: left promiscuous mode [ 238.043836][T11972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.050806][T11972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.055084][T11972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.057070][T11972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.086682][T11972] veth1_macvtap: left promiscuous mode [ 238.088351][T11972] veth0_macvtap: left promiscuous mode [ 238.090241][T11972] veth1_vlan: left promiscuous mode [ 238.091999][T11972] veth0_vlan: left promiscuous mode [ 238.189453][ T5955] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 238.190083][ T39] audit: type=1400 audit(1732497299.895:38835): avc: denied { getopt } for pid=15555 comm="syz.8.2617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 238.444322][ T58] net_ratelimit: 2 callbacks suppressed [ 238.444333][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.454176][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 238.564217][ T1337] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 238.734144][ T1337] usb 12-1: Using ep0 maxpacket: 8 [ 238.738983][ T1337] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 238.741224][ T1337] usb 12-1: config 179 has no interface number 0 [ 238.743015][ T1337] usb 12-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 238.746426][ T1337] usb 12-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 238.749479][ T1337] usb 12-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 51, changing to 9 [ 238.752470][ T1337] usb 12-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8292, setting to 1024 [ 238.755999][ T1337] usb 12-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 238.760194][ T1337] usb 12-1: config 179 interface 65 has no altsetting 0 [ 238.762355][ T1337] usb 12-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 238.771250][ T1337] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.779896][T15560] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 238.806296][ T1337] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:179.65/input/input36 [ 238.876038][ T5354] input input36: unable to receive magic message: -110 [ 238.894251][ T5354] input input36: unable to receive magic message: -32 [ 238.912814][ T5354] input input36: unable to receive magic message: -32 [ 238.925065][ T5354] input input36: unable to receive magic message: -32 [ 238.948501][ T5354] input input36: unable to receive magic message: -32 [ 238.962251][ T5354] input input36: unable to receive magic message: -32 [ 238.980678][ T5354] input input36: unable to receive magic message: -32 [ 239.012273][T15560] input input36: unable to receive magic message: -32 [ 239.128169][ T6015] usb 12-1: USB disconnect, device number 13 [ 239.130300][ C3] xpad 12-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 239.136360][ T6015] xpad 12-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 239.171325][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.433685][T11972] team0 (unregistering): Port device team_slave_1 removed [ 239.484129][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.494838][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.551597][T11972] team0 (unregistering): Port device team_slave_0 removed [ 240.044318][ T5955] Bluetooth: hci3: command tx timeout [ 240.350257][T15566] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2619'. [ 240.353526][T15566] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2619'. [ 240.461830][T15573] devpts: called with bogus options [ 240.464170][ T39] audit: type=1400 audit(1732497302.165:38836): avc: denied { mount } for pid=15572 comm="syz.6.2621" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 240.464198][ T39] audit: type=1400 audit(1732497302.165:38837): avc: denied { remount } for pid=15572 comm="syz.6.2621" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 240.496296][T15577] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 240.498771][ T39] audit: type=1400 audit(1732497302.205:38838): avc: denied { accept } for pid=15576 comm="syz.7.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 240.517634][ T39] audit: type=1400 audit(1732497302.225:38839): avc: denied { unmount } for pid=10844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 240.524157][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.534412][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.545396][T15577] netlink: 'syz.7.2622': attribute type 21 has an invalid length. [ 240.547442][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2622'. [ 240.572346][T15478] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 240.585871][T15478] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 240.595414][T15478] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 240.599626][T15478] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 240.652227][T15598] hsr0: entered allmulticast mode [ 240.653091][T15601] netlink: 'syz.7.2627': attribute type 11 has an invalid length. [ 240.654647][T15598] hsr_slave_0: entered allmulticast mode [ 240.655008][ T5955] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 240.659529][T15598] hsr_slave_1: entered allmulticast mode [ 240.663046][ T39] audit: type=1400 audit(1732497302.365:38840): avc: denied { shutdown } for pid=15579 comm="syz.8.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 240.670712][T15598] hsr_slave_0: left promiscuous mode [ 240.676446][T15598] hsr_slave_1: left promiscuous mode [ 240.705519][T15598] hsr0 (unregistering): left allmulticast mode [ 240.758927][T15478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.770790][T15478] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.778352][ T6829] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.780281][ T6829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.787628][T11961] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.789528][T11961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.829155][T15614] lo speed is unknown, defaulting to 1000 [ 240.831331][T11972] IPVS: stop unused estimator thread 0... [ 240.906530][T15478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.939534][T15478] veth0_vlan: entered promiscuous mode [ 240.943378][T15478] veth1_vlan: entered promiscuous mode [ 240.970707][T15478] veth0_macvtap: entered promiscuous mode [ 240.973720][T15478] veth1_macvtap: entered promiscuous mode [ 240.981927][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.984874][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.987396][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.990092][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.992641][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.996612][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.999211][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.001934][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.004845][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.007578][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.010134][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.013635][ T5955] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 241.013688][ T5955] Bluetooth: hci4: Injecting HCI hardware error event [ 241.016296][ T5955] Bluetooth: hci4: hardware error 0x00 [ 241.024247][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.027548][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.031222][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.045715][T15478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.050891][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.053687][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.056953][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.059833][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.062415][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.065985][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.068663][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.071418][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.074505][T15478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.077265][T15478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.083095][T15478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.095977][T15478] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.098252][T15478] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.100555][T15478] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.102946][T15478] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.176535][ T97] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 241.195802][T15633] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 241.229386][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.230213][T15643] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2637'. [ 241.231340][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.252064][T11972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.254915][T11972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.324818][ T3229] libceph: connect (1)[c::]:6789 error -101 [ 241.327149][ T3229] libceph: mon0 (1)[c::]:6789 connect error [ 241.344841][T15652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2601'. [ 241.347205][T15652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2601'. [ 241.370734][T15649] ceph: No mds server is up or the cluster is laggy [ 241.377170][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 241.377180][ T39] audit: type=1400 audit(1732497303.075:38844): avc: denied { bind } for pid=15648 comm="syz.6.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 241.464264][T15662] binder: 15661:15662 ioctl c018620c 20000040 returned -22 [ 241.560490][ T39] audit: type=1400 audit(1732497303.265:38845): avc: denied { accept } for pid=15658 comm="syz.6.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 241.561676][T15660] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 241.566064][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 241.568661][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.572745][T15660] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 241.585702][T15668] netlink: 'syz.7.2641': attribute type 1 has an invalid length. [ 241.587888][T15668] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2641'. [ 241.628657][T15668] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=770954412 (770954412 ns) > initial count (134138459 ns). Using initial count to start timer. [ 242.124248][ T5963] Bluetooth: hci3: command tx timeout [ 242.159540][ T39] audit: type=1400 audit(1732497303.865:38846): avc: denied { bind } for pid=15672 comm="syz.3.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 242.165549][T15673] syz.3.2645: attempt to access beyond end of device [ 242.165549][T15673] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 242.170817][T15673] syz.3.2645: attempt to access beyond end of device [ 242.170817][T15673] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 242.204405][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.215765][ T5963] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 242.219174][ T5963] Bluetooth: hci0: Injecting HCI hardware error event [ 242.223967][ T5963] Bluetooth: hci0: hardware error 0x00 [ 242.566420][T15692] siw: device registration error -23 [ 242.742246][T15720] FAULT_INJECTION: forcing a failure. [ 242.742246][T15720] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 242.745793][T15720] CPU: 2 UID: 0 PID: 15720 Comm: syz.3.2662 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 242.748432][T15720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.751334][T15720] Call Trace: [ 242.752233][T15720] [ 242.753020][T15720] dump_stack_lvl+0x16c/0x1f0 [ 242.754286][T15720] should_fail_ex+0x497/0x5b0 [ 242.755750][T15720] strncpy_from_user+0x3b/0x2d0 [ 242.757096][T15720] getname_flags.part.0+0x8f/0x550 [ 242.758466][T15720] getname+0x8d/0xe0 [ 242.759522][T15720] do_sys_openat2+0x104/0x1e0 [ 242.760868][T15720] ? __pfx_do_sys_openat2+0x10/0x10 [ 242.762250][T15720] ? __pfx_lock_release+0x10/0x10 [ 242.763585][T15720] __x64_sys_openat+0x175/0x210 [ 242.764909][T15720] ? __pfx___x64_sys_openat+0x10/0x10 [ 242.766323][T15720] ? selinux_file_ioctl+0xb4/0x270 [ 242.767678][T15720] do_syscall_64+0xcd/0x250 [ 242.768898][T15720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.770459][T15720] RIP: 0033:0x7f1bf097d1b0 [ 242.771655][T15720] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 242.777050][T15720] RSP: 002b:00007f1bf168c470 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 242.779112][T15720] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1bf097d1b0 [ 242.781406][T15720] RDX: 0000000000000002 RSI: 00007f1bf09f1ddc RDI: 00000000ffffff9c [ 242.783455][T15720] RBP: 00007f1bf09f1ddc R08: 0000000000000000 R09: 0000000000000080 [ 242.785589][T15720] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 242.787660][T15720] R13: 0000000000000063 R14: 0000000020000000 R15: 0000000020001800 [ 242.789751][T15720] [ 242.864100][ T58] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 242.941687][T15741] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 242.970508][T15745] xt_CT: No such helper "pptp" [ 242.980703][ T39] audit: type=1400 audit(1732497304.685:38847): avc: denied { shutdown } for pid=15744 comm="syz.8.2668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 243.006019][ T58] usb 11-1: device descriptor read/64, error -71 [ 243.079211][ T39] audit: type=1400 audit(1732497304.785:38848): avc: denied { unmount } for pid=15478 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 243.084489][ T5955] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 243.244814][ T58] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 243.394484][ T58] usb 11-1: device descriptor read/64, error -71 [ 243.464192][ T6012] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 243.514375][ T58] usb usb11-port1: attempt power cycle [ 243.604118][ T6012] usb 12-1: device descriptor read/64, error -71 [ 243.644177][ C3] net_ratelimit: 2 callbacks suppressed [ 243.644195][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 243.650377][ T8649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.854130][ T6012] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 243.856408][ T58] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 243.874630][ T58] usb 11-1: device descriptor read/8, error -71 [ 243.985367][ T6012] usb 12-1: device descriptor read/64, error -71 [ 244.094374][ T6012] usb usb12-port1: attempt power cycle [ 244.114122][ T58] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 244.135027][ T58] usb 11-1: device descriptor read/8, error -71 [ 244.204388][ T5955] Bluetooth: hci3: command tx timeout [ 244.244427][ T58] usb usb11-port1: unable to enumerate USB device [ 244.284287][ T5963] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 244.435365][ T6012] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 244.455124][ T6012] usb 12-1: device descriptor read/8, error -71 [ 244.684283][ T5963] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 244.684576][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.687944][ T5963] Bluetooth: hci1: Injecting HCI hardware error event [ 244.694149][ T6012] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 244.694433][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 244.700018][ T5963] Bluetooth: hci1: hardware error 0x00 [ 244.714591][ T6012] usb 12-1: device descriptor read/8, error -71 [ 244.834980][ T6012] usb usb12-port1: unable to enumerate USB device [ 244.862749][ T39] audit: type=1400 audit(1732499866.567:38849): avc: denied { setopt } for pid=15789 comm="syz.8.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 245.199875][ T39] audit: type=1400 audit(1732499866.907:38850): avc: denied { create } for pid=15799 comm="syz.8.2684" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 245.206216][ T39] audit: type=1400 audit(1732499866.907:38851): avc: denied { remove_name } for pid=15799 comm="syz.8.2684" name="control" dev="9p" ino=35922898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.213156][ T39] audit: type=1400 audit(1732499866.907:38852): avc: denied { rmdir } for pid=15799 comm="syz.8.2684" name="control" dev="9p" ino=35922898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.244314][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.726943][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.734337][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.308403][T15843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2694'. [ 246.319983][ T39] audit: type=1400 audit(1732499868.027:38853): avc: denied { bind } for pid=15842 comm="syz.3.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 246.415542][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 246.415558][ T39] audit: type=1400 audit(1732499868.127:38856): avc: denied { listen } for pid=15846 comm="syz.3.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 246.426088][ T39] audit: type=1400 audit(1732499868.127:38857): avc: denied { accept } for pid=15846 comm="syz.3.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 246.455051][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2698'. [ 246.515304][T15860] FAULT_INJECTION: forcing a failure. [ 246.515304][T15860] name failslab, interval 1, probability 0, space 0, times 0 [ 246.520370][T15860] CPU: 0 UID: 0 PID: 15860 Comm: syz.3.2699 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 246.524070][T15860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.527807][T15860] Call Trace: [ 246.528756][T15860] [ 246.529622][T15860] dump_stack_lvl+0x16c/0x1f0 [ 246.530944][T15860] should_fail_ex+0x497/0x5b0 [ 246.532305][T15860] ? fs_reclaim_acquire+0xae/0x150 [ 246.534037][T15860] should_failslab+0xc2/0x120 [ 246.535671][T15860] __kmalloc_noprof+0xcb/0x400 [ 246.537029][T15860] tomoyo_encode2+0x100/0x3e0 [ 246.538415][T15860] tomoyo_encode+0x29/0x50 [ 246.539975][T15860] tomoyo_realpath_from_path+0x19d/0x720 [ 246.542121][T15860] tomoyo_check_open_permission+0x2ad/0x3c0 [ 246.544372][T15860] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 246.546888][T15860] ? avc_has_perm_noaudit+0x119/0x3a0 [ 246.548529][T15860] ? __pfx_hook_file_open+0x10/0x10 [ 246.550518][T15860] ? lock_acquire+0x2f/0xb0 [ 246.552323][T15860] tomoyo_file_open+0x6b/0x90 [ 246.554173][T15860] security_file_open+0x84/0x1e0 [ 246.556108][T15860] do_dentry_open+0x57e/0x1ea0 [ 246.557978][T15860] ? inode_permission+0xdd/0x5f0 [ 246.559879][T15860] vfs_open+0x82/0x3f0 [ 246.561310][T15860] ? may_open+0x1f2/0x400 [ 246.562885][T15860] path_openat+0x1e6a/0x2d60 [ 246.564595][T15860] ? __pfx_path_openat+0x10/0x10 [ 246.566551][T15860] ? __pfx___lock_acquire+0x10/0x10 [ 246.568567][T15860] ? lock_acquire.part.0+0x11b/0x380 [ 246.570457][T15860] ? find_held_lock+0x2d/0x110 [ 246.572230][T15860] do_filp_open+0x20c/0x470 [ 246.573987][T15860] ? __pfx_do_filp_open+0x10/0x10 [ 246.575779][T15860] ? find_held_lock+0x2d/0x110 [ 246.577558][T15860] ? alloc_fd+0x41f/0x760 [ 246.579156][T15860] do_sys_openat2+0x17a/0x1e0 [ 246.580883][T15860] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.582812][T15860] ? __pfx_lock_release+0x10/0x10 [ 246.584646][T15860] __x64_sys_openat+0x175/0x210 [ 246.586354][T15860] ? __pfx___x64_sys_openat+0x10/0x10 [ 246.588226][T15860] ? selinux_file_ioctl+0xb4/0x270 [ 246.590184][T15860] do_syscall_64+0xcd/0x250 [ 246.591781][T15860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.593899][T15860] RIP: 0033:0x7f1bf097d1b0 [ 246.595555][T15860] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 246.602169][T15860] RSP: 002b:00007f1bf168c470 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 246.605152][T15860] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1bf097d1b0 [ 246.608010][T15860] RDX: 0000000000000002 RSI: 00007f1bf09f1ddc RDI: 00000000ffffff9c [ 246.610764][T15860] RBP: 00007f1bf09f1ddc R08: 0000000000000000 R09: 0000000000000080 [ 246.613466][T15860] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 246.616195][T15860] R13: 0000000000000063 R14: 0000000020000000 R15: 0000000020001800 [ 246.618946][T15860] [ 246.624553][T15860] ERROR: Out of memory at tomoyo_realpath_from_path. [ 246.680100][T15863] overlay: Unknown parameter 'permit_directio' [ 246.764383][ T5963] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 246.765304][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.775180][T15873] autofs: Unknown parameter 'fœb0x0000000000000000' [ 246.778544][T15873] overlay: ./bus is not a directory [ 246.927488][T15884] tmpfs: Bad value for 'mpol' [ 247.004451][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.020136][T15887] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2709'. [ 247.044235][ T25] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 247.113392][ T39] audit: type=1400 audit(1732499868.817:38858): avc: denied { read } for pid=15888 comm="syz.3.2710" path="socket:[77272]" dev="sockfs" ino=77272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 247.196417][ T25] usb 12-1: device descriptor read/64, error -71 [ 247.348057][T15916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1306 sclass=netlink_route_socket pid=15916 comm=syz.3.2718 [ 247.383497][ T39] audit: type=1400 audit(1732499869.087:38859): avc: denied { write } for pid=15903 comm="syz.8.2715" name="/" dev="configfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 247.395572][T15919] bridge1: entered promiscuous mode [ 247.397472][T15919] bridge1: entered allmulticast mode [ 247.435741][T15922] netlink: 'syz.3.2720': attribute type 10 has an invalid length. [ 247.446674][ T25] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 247.452471][T15922] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 247.464605][ T6012] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 247.482643][ T39] audit: type=1400 audit(1732499869.187:38860): avc: denied { setopt } for pid=15924 comm="syz.3.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 247.485452][ T5963] Bluetooth: hci3: Malformed LE Event: 0x0b [ 247.574337][ T25] usb 12-1: device descriptor read/64, error -71 [ 247.634129][ T6012] usb 11-1: Using ep0 maxpacket: 16 [ 247.637674][ T6012] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 36077, setting to 64 [ 247.642141][ T6012] usb 11-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 247.646354][ T6012] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.648495][ T6012] usb 11-1: Product: syz [ 247.649627][ T6012] usb 11-1: Manufacturer: syz [ 247.650930][ T6012] usb 11-1: SerialNumber: syz [ 247.653377][ T6012] usb 11-1: config 0 descriptor?? [ 247.684512][ T25] usb usb12-port1: attempt power cycle [ 247.804138][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.857962][ T6012] hub 11-1:0.0: bad descriptor, ignoring hub [ 247.859697][ T6012] hub 11-1:0.0: probe with driver hub failed with error -5 [ 247.862650][ T6012] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input38 [ 247.884294][ T6012] usb 11-1: USB disconnect, device number 22 [ 248.034152][ T25] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 248.056241][ T25] usb 12-1: device descriptor read/8, error -71 [ 248.137429][T15929] veth1_to_bond: default FDB implementation only supports local addresses [ 248.147036][T15929] tap0: tun_chr_ioctl cmd 1074025677 [ 248.148586][T15929] tap0: linktype set to 1 [ 248.294111][ T25] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 248.317245][ T25] usb 12-1: device descriptor read/8, error -71 [ 248.424478][ T25] usb usb12-port1: unable to enumerate USB device [ 248.448181][T15937] sctp: [Deprecated]: syz.6.2727 (pid 15937) Use of int in max_burst socket option deprecated. [ 248.448181][T15937] Use struct sctp_assoc_value instead [ 248.610086][ T39] audit: type=1400 audit(1732499870.317:38861): avc: denied { getopt } for pid=15952 comm="syz.6.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 248.656372][ T39] audit: type=1400 audit(1732499870.367:38862): avc: denied { read } for pid=15956 comm="syz.8.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 248.705618][T15959] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 248.844224][ T25] net_ratelimit: 2 callbacks suppressed [ 248.844236][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.074337][T15971] can0: slcan on ttynull. [ 249.093721][T15973] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2738'. [ 249.124637][T15970] can0 (unregistered): slcan off ttynull. [ 249.213243][T15983] netlink: 763 bytes leftover after parsing attributes in process `syz.6.2741'. [ 249.554151][ T58] usb 11-1: new full-speed USB device number 23 using dummy_hcd [ 249.707200][ T58] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.710911][ T58] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 249.714259][ T58] usb 11-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 249.717239][ T58] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.721453][ T58] usb 11-1: config 0 descriptor?? [ 249.733849][ T58] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 249.736429][ T58] dvb-usb: bulk message failed: -22 (3/0) [ 249.740564][ T58] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 249.743988][ T58] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 249.746092][ T58] usb 11-1: media controller created [ 249.747890][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.753744][ T58] dvb-usb: bulk message failed: -22 (6/0) [ 249.756531][ T58] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 249.760444][ T58] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb11/11-1/input/input40 [ 249.765762][ T58] dvb-usb: schedule remote query interval to 150 msecs. [ 249.768425][ T58] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 249.884080][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 249.894819][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.903592][T15997] FAULT_INJECTION: forcing a failure. [ 249.903592][T15997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.908211][T15997] CPU: 1 UID: 0 PID: 15997 Comm: syz.7.2746 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 249.911862][T15997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.915754][T15997] Call Trace: [ 249.917076][T15997] [ 249.918198][T15997] dump_stack_lvl+0x16c/0x1f0 [ 249.920025][T15997] should_fail_ex+0x497/0x5b0 [ 249.921768][T15997] _copy_to_user+0x32/0xd0 [ 249.923366][T15997] kvm_dev_ioctl_get_cpuid+0x4c0/0x640 [ 249.925322][T15997] ? __pfx_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 249.926770][ T58] dvb-usb: bulk message failed: -22 (1/0) [ 249.927216][T15997] ? __might_fault+0xe3/0x190 [ 249.929690][ T58] dvb-usb: error while querying for an remote control event. [ 249.930556][T15997] ? __might_fault+0xe3/0x190 [ 249.934379][T15997] kvm_arch_dev_ioctl+0x40e/0x730 [ 249.935911][T15997] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 249.937670][T15997] ? do_vfs_ioctl+0x513/0x1990 [ 249.939346][T15997] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 249.940842][T15997] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 249.942424][T15997] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 249.943862][T15997] kvm_dev_ioctl+0x781/0x1aa0 [ 249.945042][T15997] ? __pfx_lock_release+0x10/0x10 [ 249.946282][T15997] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 249.947608][T15997] ? selinux_file_ioctl+0x180/0x270 [ 249.949028][T15997] ? selinux_file_ioctl+0xb4/0x270 [ 249.950711][T15997] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 249.952628][T15997] __x64_sys_ioctl+0x190/0x200 [ 249.954430][T15997] do_syscall_64+0xcd/0x250 [ 249.956002][T15997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.957588][T15997] RIP: 0033:0x7f3e12d7e41b [ 249.958818][T15997] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 249.964206][T15997] RSP: 002b:00007f3e13bb8490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.967217][T15997] RAX: ffffffffffffffda RBX: 00007f3e13bb8be0 RCX: 00007f3e12d7e41b [ 249.970131][T15997] RDX: 00007f3e13bb8be0 RSI: 00000000c008ae05 RDI: 0000000000000009 [ 249.973083][T15997] RBP: 0000000020001000 R08: 0000000000000000 R09: 0000000000000009 [ 249.975925][T15997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.978816][T15997] R13: 0000000000000063 R14: 0000000020000000 R15: 0000000020001800 [ 249.981736][T15997] [ 249.983359][ C1] hpet: Lost 4 RTC interrupts [ 249.988753][T15986] dvb-usb: bulk message failed: -22 (2/0) [ 249.991512][ T75] usb 11-1: USB disconnect, device number 23 [ 250.007051][ T75] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 250.089353][T16000] loop2: detected capacity change from 0 to 7 [ 250.092282][T16000] Dev loop2: unable to read RDB block 7 [ 250.094434][T16000] loop2: AHDI p1 p2 [ 250.096040][T16000] loop2: partition table partially beyond EOD, truncated [ 250.098931][T16000] loop2: p1 size 150995200 extends beyond EOD, truncated [ 250.365527][T16029] fuse: Unknown parameter 'Îd' [ 250.566379][T15478] bond0: (slave syz_tun): Releasing backup interface [ 250.629479][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2759'. [ 250.701428][ T39] audit: type=1400 audit(1732499872.397:38863): avc: denied { setopt } for pid=16049 comm="syz.6.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 250.706582][ T6829] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.761292][ T39] audit: type=1400 audit(1732499872.467:38864): avc: denied { setattr } for pid=16057 comm="syz.8.2763" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.766842][T16059] overlay: ./file0 is not a directory [ 250.801790][ T6829] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.853463][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.858654][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.861700][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.870284][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.873771][ T5955] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 250.875845][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.903120][T16064] lo speed is unknown, defaulting to 1000 [ 250.924128][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 250.936274][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.940405][ T6829] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.035098][ T6829] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.163770][T16064] chnl_net:caif_netlink_parms(): no params data found [ 251.195133][T16091] FAULT_INJECTION: forcing a failure. [ 251.195133][T16091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.198717][T16091] CPU: 3 UID: 0 PID: 16091 Comm: syz.6.2774 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 251.201475][T16091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.204335][T16091] Call Trace: [ 251.205233][T16091] [ 251.206034][T16091] dump_stack_lvl+0x16c/0x1f0 [ 251.207491][T16091] should_fail_ex+0x497/0x5b0 [ 251.208797][T16091] _copy_to_user+0x32/0xd0 [ 251.209999][T16091] kvm_dev_ioctl_get_cpuid+0x4c0/0x640 [ 251.211456][T16091] ? __pfx_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 251.213050][T16091] ? __might_fault+0xe3/0x190 [ 251.214352][T16091] ? __might_fault+0xe3/0x190 [ 251.215610][T16091] kvm_arch_dev_ioctl+0x40e/0x730 [ 251.216920][T16091] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 251.218251][T16091] ? do_vfs_ioctl+0x513/0x1990 [ 251.219466][T16091] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 251.220863][T16091] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 251.222648][T16091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.224169][T16091] kvm_dev_ioctl+0x781/0x1aa0 [ 251.225365][T16091] ? __pfx_lock_release+0x10/0x10 [ 251.226603][T16091] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 251.227921][T16091] ? selinux_file_ioctl+0x180/0x270 [ 251.229644][T16091] ? selinux_file_ioctl+0xb4/0x270 [ 251.231340][T16091] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 251.232663][T16091] __x64_sys_ioctl+0x190/0x200 [ 251.233954][T16091] do_syscall_64+0xcd/0x250 [ 251.235103][T16091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.236680][T16091] RIP: 0033:0x7f717b37e41b [ 251.237869][T16091] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 251.242913][T16091] RSP: 002b:00007f717c11b490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.245196][T16091] RAX: ffffffffffffffda RBX: 00007f717c11bbe0 RCX: 00007f717b37e41b [ 251.247209][T16091] RDX: 00007f717c11bbe0 RSI: 00000000c008ae05 RDI: 0000000000000009 [ 251.249240][T16091] RBP: 0000000020001000 R08: 0000000000000000 R09: 0000000000000009 [ 251.251295][T16091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.253269][T16091] R13: 0000000000000063 R14: 0000000020000000 R15: 0000000020001800 [ 251.255277][T16091] [ 251.256153][ C3] vkms_vblank_simulate: vblank timer overrun [ 251.298319][T16064] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.300325][T16064] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.302481][T16064] bridge_slave_0: entered allmulticast mode [ 251.304827][T16064] bridge_slave_0: entered promiscuous mode [ 251.312894][T16064] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.314821][T16064] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.316707][T16064] bridge_slave_1: entered allmulticast mode [ 251.319112][T16064] bridge_slave_1: entered promiscuous mode [ 251.334248][ T1337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.334788][ T6829] bridge_slave_1: left allmulticast mode [ 251.338364][ T6829] bridge_slave_1: left promiscuous mode [ 251.340939][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.349354][ T6829] bridge_slave_0: left allmulticast mode [ 251.351337][ T6829] bridge_slave_0: left promiscuous mode [ 251.353450][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.536346][ T39] audit: type=1400 audit(1732499873.247:38865): avc: denied { remount } for pid=16103 comm="syz.6.2778" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 251.606906][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.619693][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.623878][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.631718][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.635657][ T5955] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 251.638474][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.886664][ T6829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.890774][ T6829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.891198][ T39] audit: type=1400 audit(1732499873.597:38866): avc: denied { setopt } for pid=16114 comm="syz.6.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 251.900120][ T39] audit: type=1400 audit(1732499873.607:38867): avc: denied { connect } for pid=16114 comm="syz.6.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 251.906210][ T39] audit: type=1400 audit(1732499873.607:38868): avc: denied { read } for pid=16114 comm="syz.6.2780" path="socket:[75731]" dev="sockfs" ino=75731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 251.913545][ T6829] bond0 (unregistering): Released all slaves [ 251.938655][T16064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.941373][T16100] tipc: Started in network mode [ 251.942715][T16100] tipc: Node identity c668f2278539, cluster identity 4711 [ 251.944886][T16100] tipc: Enabled bearer , priority 0 [ 251.959804][T16101] tipc: Resetting bearer [ 251.964108][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.965522][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.034040][ T6824] tipc: Resetting bearer [ 252.043749][T16064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.047585][T16095] tipc: Resetting bearer [ 252.934964][ T5963] Bluetooth: hci3: command tx timeout [ 253.004109][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 253.005676][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.024213][ T25] tipc: Node number set to 1129443879 [ 253.737739][ T5963] Bluetooth: hci0: command tx timeout [ 253.840977][T16095] tipc: Disabling bearer [ 253.917461][T16064] team0: Port device team_slave_0 added [ 253.922120][T16064] team0: Port device team_slave_1 added [ 253.977988][T16131] FAULT_INJECTION: forcing a failure. [ 253.977988][T16131] name failslab, interval 1, probability 0, space 0, times 0 [ 253.985355][T16131] CPU: 3 UID: 0 PID: 16131 Comm: syz.7.2783 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 253.988061][T16131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 253.990833][T16131] Call Trace: [ 253.991767][T16131] [ 253.992573][T16131] dump_stack_lvl+0x16c/0x1f0 [ 253.993827][T16131] should_fail_ex+0x497/0x5b0 [ 253.995157][T16131] ? fs_reclaim_acquire+0xae/0x150 [ 253.996506][T16131] should_failslab+0xc2/0x120 [ 253.997746][T16131] __kmalloc_noprof+0xcb/0x400 [ 253.998998][T16131] tomoyo_encode2+0x100/0x3e0 [ 254.000252][T16131] tomoyo_encode+0x29/0x50 [ 254.001423][T16131] tomoyo_realpath_from_path+0x19d/0x720 [ 254.002891][T16131] ? tomoyo_path_number_perm+0x235/0x590 [ 254.004380][T16131] tomoyo_path_number_perm+0x248/0x590 [ 254.005812][T16131] ? tomoyo_path_number_perm+0x235/0x590 [ 254.007281][T16131] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 254.008997][T16131] ? __pfx_lock_release+0x10/0x10 [ 254.010393][T16131] ? trace_lock_acquire+0x146/0x1e0 [ 254.011800][T16131] ? lock_acquire+0x2f/0xb0 [ 254.013006][T16131] ? __fget_files+0x40/0x3a0 [ 254.014219][T16131] ? __fget_files+0x206/0x3a0 [ 254.015545][T16131] security_file_ioctl+0x9b/0x240 [ 254.016963][T16131] __x64_sys_ioctl+0xb7/0x200 [ 254.018203][T16131] do_syscall_64+0xcd/0x250 [ 254.019444][T16131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.021013][T16131] RIP: 0033:0x7f3e12d7e41b [ 254.022181][T16131] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 254.027190][T16131] RSP: 002b:00007f3e13bb8490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.029393][T16131] RAX: ffffffffffffffda RBX: 00007f3e13bb8be0 RCX: 00007f3e12d7e41b [ 254.031451][T16131] RDX: 00007f3e13bb8be0 RSI: 000000004008ae90 RDI: 0000000000000007 [ 254.033533][T16131] RBP: 0000000020001000 R08: 0000000000000000 R09: 0000000000000009 [ 254.035566][T16131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.037610][T16131] R13: 0000000000000063 R14: 0000000020000000 R15: 0000000020001800 [ 254.039657][T16131] [ 254.041000][T16131] ERROR: Out of memory at tomoyo_realpath_from_path. [ 254.043701][T16064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.045399][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.045736][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 254.049696][T16136] netlink: 'syz.6.2784': attribute type 10 has an invalid length. [ 254.051435][T16064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.059363][T16064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.063204][T16064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.065721][T16064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.072840][T16064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.076294][T16109] lo speed is unknown, defaulting to 1000 [ 254.091975][T16136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.095925][T16136] batadv0: entered promiscuous mode [ 254.097366][T16136] batadv0: entered allmulticast mode [ 254.098912][T16136] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 254.188502][T16064] hsr_slave_0: entered promiscuous mode [ 254.191420][T16064] hsr_slave_1: entered promiscuous mode [ 254.193366][T16064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.195753][T16064] Cannot create hsr debugfs directory [ 254.319458][ T6829] hsr_slave_0: left promiscuous mode [ 254.321348][ T6829] hsr_slave_1: left promiscuous mode [ 254.323516][ T6829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.325521][ T6829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.329348][ T6829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.331633][ T6829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.356004][T16155] input: syz0 as /devices/virtual/input/input41 [ 254.364501][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.397634][ T6829] veth1_macvtap: left promiscuous mode [ 254.399535][ T6829] veth0_macvtap: left promiscuous mode [ 254.401976][ T6829] veth1_vlan: left promiscuous mode [ 254.403835][ T6829] veth0_vlan: left promiscuous mode [ 254.559898][T16157] netlink: 'syz.7.2789': attribute type 39 has an invalid length. [ 255.006858][ T5963] Bluetooth: hci3: command tx timeout [ 255.084252][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 255.084313][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.329365][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.503953][ T6829] team0 (unregistering): Port device team_slave_1 removed [ 255.610924][ T6829] team0 (unregistering): Port device team_slave_0 removed [ 255.814199][ T5963] Bluetooth: hci0: command tx timeout [ 256.124180][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 256.124953][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.462021][T16159] smc: net device wg0 applied user defined pnetid SYZ0 [ 256.479924][T16157] smc: removing net device wg0 with user defined pnetid SYZ0 [ 256.528036][T16109] chnl_net:caif_netlink_parms(): no params data found [ 256.606629][ T3229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.715046][T16109] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.719656][T16109] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.721855][T16109] bridge_slave_0: entered allmulticast mode [ 256.743488][T16109] bridge_slave_0: entered promiscuous mode [ 256.747450][T16109] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.749962][T16109] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.752579][T16109] bridge_slave_1: entered allmulticast mode [ 256.755874][T16109] bridge_slave_1: entered promiscuous mode [ 256.790452][T16183] FAULT_INJECTION: forcing a failure. [ 256.790452][T16183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.802821][T16183] CPU: 2 UID: 0 PID: 16183 Comm: syz.7.2793 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 256.806697][T16183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 256.810489][T16183] Call Trace: [ 256.811681][T16183] [ 256.812743][T16183] dump_stack_lvl+0x16c/0x1f0 [ 256.814439][T16183] should_fail_ex+0x497/0x5b0 [ 256.816117][T16183] _copy_from_user+0x2e/0xd0 [ 256.817755][T16183] kvm_arch_vcpu_ioctl+0x2ed8/0x5070 [ 256.819619][T16183] ? hlock_class+0x4e/0x130 [ 256.821258][T16183] ? __lock_acquire+0x15a9/0x3c40 [ 256.823220][T16183] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 256.825249][T16183] ? kasan_save_track+0x14/0x30 [ 256.826968][T16183] ? __kasan_slab_free+0x51/0x70 [ 256.828728][T16183] ? __pfx___lock_acquire+0x10/0x10 [ 256.830575][T16183] ? __x64_sys_ioctl+0xb7/0x200 [ 256.832311][T16183] ? do_syscall_64+0xcd/0x250 [ 256.833975][T16183] ? hlock_class+0x4e/0x130 [ 256.835593][T16183] ? lock_acquire.part.0+0x11b/0x380 [ 256.837469][T16183] ? __mutex_trylock_common+0xea/0x250 [ 256.839444][T16183] ? __pfx___mutex_trylock_common+0x10/0x10 [ 256.841417][T16183] ? kvm_vcpu_ioctl+0x1de/0x1520 [ 256.843057][T16183] ? rcu_is_watching+0x12/0xc0 [ 256.844693][T16183] ? trace_contention_end+0xea/0x140 [ 256.846488][T16183] ? __mutex_lock+0x1cc/0xa60 [ 256.848161][T16183] ? kvm_vcpu_ioctl+0x1de/0x1520 [ 256.849918][T16183] ? tomoyo_path_number_perm+0x298/0x590 [ 256.851906][T16183] ? __pfx___mutex_lock+0x10/0x10 [ 256.853698][T16183] ? tomoyo_path_number_perm+0x190/0x590 [ 256.855750][T16183] ? kvm_vcpu_ioctl+0x9df/0x1520 [ 256.857489][T16183] kvm_vcpu_ioctl+0x9df/0x1520 [ 256.859174][T16183] ? do_vfs_ioctl+0x513/0x1990 [ 256.860899][T16183] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 256.862730][T16183] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 256.864797][T16183] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 256.866593][T16183] ? __pfx_lock_release+0x10/0x10 [ 256.867924][T16183] ? selinux_file_ioctl+0x180/0x270 [ 256.869307][T16183] ? selinux_file_ioctl+0xb4/0x270 [ 256.870748][T16183] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 256.872106][T16183] __x64_sys_ioctl+0x190/0x200 [ 256.873381][T16183] do_syscall_64+0xcd/0x250 [ 256.874587][T16183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.876160][T16183] RIP: 0033:0x7f3e12d7e41b [ 256.877351][T16183] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 256.882375][T16183] RSP: 002b:00007f3e13bb8490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.884573][T16183] RAX: ffffffffffffffda RBX: 00007f3e13bb8be0 RCX: 00007f3e12d7e41b [ 256.886696][T16183] RDX: 00007f3e13bb8be0 RSI: 000000004008ae90 RDI: 0000000000000007 [ 256.888769][T16183] RBP: 0000000020001000 R08: 0000000000000000 R09: 0000000000000009 [ 256.890872][T16183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.892948][T16183] R13: 0000000000000063 R14: 0000000020000000 R15: 0000000020001800 [ 256.895026][T16183] [ 256.904721][T16064] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 256.909289][T16064] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 256.916251][T16109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.920059][T16109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.922518][T16064] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 256.932066][T16064] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 257.024244][T16109] team0: Port device team_slave_0 added [ 257.028515][T16109] team0: Port device team_slave_1 added [ 257.070731][T16109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.072612][T16109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.079915][T16109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.084872][ T5963] Bluetooth: hci3: command tx timeout [ 257.098478][T16109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.100240][T16109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.107008][T16109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.130093][ T39] audit: type=1400 audit(1732499878.837:38869): avc: denied { accept } for pid=16194 comm="syz.7.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 257.164272][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.165631][T16109] hsr_slave_0: entered promiscuous mode [ 257.174616][T16109] hsr_slave_1: entered promiscuous mode [ 257.178324][T16109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.180192][T16109] Cannot create hsr debugfs directory [ 257.220510][T11976] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.290789][T16064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.357286][T11976] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.370984][T16064] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.390139][ T6829] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.392553][ T6829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.399903][ T6829] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.402224][ T6829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.404546][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.440867][T11976] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.461957][T16216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.466779][T16216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.470923][T16216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.473714][ T39] audit: type=1400 audit(1732499879.177:38870): avc: denied { ioctl } for pid=16215 comm="syz.7.2799" path="socket:[78099]" dev="sockfs" ino=78099 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 257.481357][T16216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.534568][T11976] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.596608][T16234] siw: device registration error -23 [ 257.603426][T16064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.674417][T11976] bridge_slave_1: left promiscuous mode [ 257.675974][T11976] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.679403][ T39] audit: type=1400 audit(1732499879.387:38871): avc: denied { connect } for pid=16236 comm="syz.6.2803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 257.686079][T11976] bridge_slave_0: left allmulticast mode [ 257.687577][T11976] bridge_slave_0: left promiscuous mode [ 257.689201][T11976] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.847348][T11976] bond2 (unregistering): (slave gretap1): Releasing active interface [ 257.885665][ T5963] Bluetooth: hci0: command tx timeout [ 258.155842][T11976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.161553][T11976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.167434][T11976] bond0 (unregistering): Released all slaves [ 258.173934][T11976] bond1 (unregistering): Released all slaves [ 258.317342][T11976] bond2 (unregistering): Released all slaves [ 258.459220][T16064] veth0_vlan: entered promiscuous mode [ 258.464238][T16064] veth1_vlan: entered promiscuous mode [ 258.500231][T16064] veth0_macvtap: entered promiscuous mode [ 258.503550][T16064] veth1_macvtap: entered promiscuous mode [ 258.504995][T16239] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 258.530128][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.532825][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.536505][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.539462][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.542337][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.547539][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.550210][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.553029][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.555777][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.558908][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.561586][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.564883][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.568348][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.571144][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.574986][T16064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.579747][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.583341][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.587438][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.591184][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.595282][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.598944][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.602104][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.606610][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.609823][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.613145][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.617236][T16064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.658594][T16064] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.661733][T16064] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.665039][T16064] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.668275][T16064] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.723422][T16268] fuse: blksize only supported for fuseblk [ 258.790524][ T6824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.793419][ T6824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.824690][T11976] hsr_slave_0: left promiscuous mode [ 258.828828][T11976] hsr_slave_1: left promiscuous mode [ 258.833876][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.837644][T11976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.840241][T11976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.870646][T11976] veth1_macvtap: left promiscuous mode [ 258.872741][T11976] veth0_macvtap: left promiscuous mode [ 258.874481][T11976] veth1_vlan: left promiscuous mode [ 258.875907][T11976] veth0_vlan: left promiscuous mode [ 258.884531][ T39] audit: type=1400 audit(1732499880.587:38872): avc: denied { unlink } for pid=13053 comm="syz-executor" name="userfaultfd" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 259.050156][ T39] audit: type=1400 audit(1732499880.757:38873): avc: denied { unlink } for pid=13053 comm="syz-executor" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 259.174250][ T5963] Bluetooth: hci3: command tx timeout [ 259.244139][ C3] net_ratelimit: 2 callbacks suppressed [ 259.244156][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 259.256186][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.886099][T11976] team0 (unregistering): Port device team_slave_1 removed [ 259.964185][ T5963] Bluetooth: hci0: command tx timeout [ 259.992003][T11976] team0 (unregistering): Port device team_slave_0 removed [ 260.284192][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 260.284275][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.484102][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.823064][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.825417][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.905010][ T39] audit: type=1400 audit(1732499882.607:38874): avc: denied { write } for pid=16285 comm="dhcpcd-run-hook" name="/" dev="devtmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 260.910477][ T39] audit: type=1400 audit(1732499882.607:38875): avc: denied { add_name } for pid=16285 comm="dhcpcd-run-hook" name="null" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 260.917953][ T39] audit: type=1400 audit(1732499882.617:38876): avc: denied { create } for pid=16285 comm="dhcpcd-run-hook" name="null" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=file permissive=1 [ 260.920227][T16109] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 260.926379][ T39] audit: type=1400 audit(1732499882.617:38877): avc: denied { write open } for pid=16285 comm="dhcpcd-run-hook" path="/dev/null" dev="devtmpfs" ino=3583 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=file permissive=1 [ 260.936840][ T39] audit: type=1400 audit(1732499882.617:38878): avc: denied { getattr } for pid=16285 comm="dhcpcd-run-hook" path="/dev/null" dev="devtmpfs" ino=3583 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:device_t tclass=file permissive=1 [ 260.949444][T16109] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 260.952495][T16109] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 260.957405][T16109] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 261.027697][T16109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.037745][T16109] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.046890][T11962] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.048899][T11962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.052856][T11961] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.054765][T11961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.187872][T16109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.248513][T16327] netlink: 248 bytes leftover after parsing attributes in process `syz.9.2821'. [ 261.321223][T16109] veth0_vlan: entered promiscuous mode [ 261.324734][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.326981][T16109] veth1_vlan: entered promiscuous mode [ 261.334064][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 261.339176][T16109] veth0_macvtap: entered promiscuous mode [ 261.342051][T16109] veth1_macvtap: entered promiscuous mode [ 261.350322][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.352983][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.356363][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.358940][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.361334][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.363843][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.369455][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.372176][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.375170][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.377868][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.380358][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.382909][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.386557][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.389106][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.392581][T16109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.403920][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.407698][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.410381][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.413055][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.415883][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.418658][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.421164][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.423844][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.426789][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.429476][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.432025][T16109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.435324][T16109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.438796][T16109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.442053][T16109] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.444560][T16109] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.446806][T16109] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.449342][T16109] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.480403][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2823'. [ 261.678968][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2828'. [ 261.737162][T16352] team1: Mode "" not found [ 261.771735][ T43] ================================================================== [ 261.773912][ T43] BUG: KASAN: use-after-free in isolate_migratepages_block+0x3e83/0x5690 [ 261.776138][ T43] Read of size 8 at addr ffff888024c96038 by task kcompactd0/43 [ 261.778302][ T43] [ 261.779518][ T43] CPU: 3 UID: 0 PID: 43 Comm: kcompactd0 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 261.783228][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 261.786544][ T43] Call Trace: [ 261.787441][ T43] [ 261.788244][ T43] dump_stack_lvl+0x116/0x1f0 [ 261.789484][ T43] print_report+0xc3/0x620 [ 261.790701][ T43] ? __virt_addr_valid+0x5e/0x590 [ 261.792086][ T43] ? __phys_addr+0xc6/0x150 [ 261.793293][ T43] kasan_report+0xd9/0x110 [ 261.794474][ T43] ? isolate_migratepages_block+0x3e83/0x5690 [ 261.796349][ T43] ? isolate_migratepages_block+0x3e83/0x5690 [ 261.798418][ T43] kasan_check_range+0xef/0x1a0 [ 261.800024][ T43] isolate_migratepages_block+0x3e83/0x5690 [ 261.801952][ T43] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 261.804102][ T43] ? __pfx___might_resched+0x10/0x10 [ 261.805576][ T43] compact_zone+0x1a5c/0x4280 [ 261.806920][ T43] ? __free_zapped_classes+0x2e0/0x320 [ 261.808380][ T43] ? __lock_acquire+0x15a9/0x3c40 [ 261.809699][ T43] ? __pfx___lock_acquire+0x10/0x10 [ 261.811047][ T43] ? __pfx_compact_zone+0x10/0x10 [ 261.812391][ T43] ? lock_acquire.part.0+0x11b/0x380 [ 261.813761][ T43] compact_node+0x1a2/0x2d0 [ 261.814944][ T43] ? __pfx_compact_node+0x10/0x10 [ 261.816326][ T43] ? __pfx_extfrag_for_order+0x10/0x10 [ 261.817730][ T43] kcompactd+0x779/0xdf0 [ 261.818827][ T43] ? __pfx_kcompactd+0x10/0x10 [ 261.820073][ T43] ? __pfx_autoremove_wake_function+0x10/0x10 [ 261.821640][ T43] ? lockdep_hardirqs_on+0x7c/0x110 [ 261.823064][ T43] ? __kthread_parkme+0x148/0x220 [ 261.824409][ T43] ? __pfx_kcompactd+0x10/0x10 [ 261.825774][ T43] kthread+0x2c1/0x3a0 [ 261.826834][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.828183][ T43] ? __pfx_kthread+0x10/0x10 [ 261.829388][ T43] ret_from_fork+0x45/0x80 [ 261.830555][ T43] ? __pfx_kthread+0x10/0x10 [ 261.831755][ T43] ret_from_fork_asm+0x1a/0x30 [ 261.833032][ T43] [ 261.833835][ T43] [ 261.834456][ T43] The buggy address belongs to the physical page: [ 261.836286][ T43] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24c96 [ 261.838559][ T43] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 261.840380][ T43] raw: 00fff00000000000 0000000000000000 ffffea0000932588 0000000000000000 [ 261.842589][ T43] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 261.844813][ T43] page dumped because: kasan: bad access detected [ 261.846651][ T43] page_owner tracks the page as freed [ 261.848005][ T43] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 37, tgid 37 (kdevtmpfs), ts 5561614776, free_ts 261359595515 [ 261.853174][ T43] post_alloc_hook+0x2d1/0x350 [ 261.854741][ T43] get_page_from_freelist+0xfce/0x2f80 [ 261.856295][ T43] __alloc_pages_noprof+0x223/0x25a0 [ 261.858006][ T43] alloc_pages_mpol_noprof+0x2c9/0x610 [ 261.859844][ T43] new_slab+0x2c9/0x410 [ 261.861000][ T43] ___slab_alloc+0xdac/0x1880 [ 261.862238][ T43] __slab_alloc.constprop.0+0x56/0xb0 [ 261.863617][ T43] kmem_cache_alloc_lru_noprof+0x2a0/0x2f0 [ 261.865124][ T43] shmem_alloc_inode+0x25/0x50 [ 261.866372][ T43] alloc_inode+0x5d/0x230 [ 261.867484][ T43] new_inode+0x22/0x210 [ 261.868561][ T43] shmem_get_inode+0x194/0xf00 [ 261.869854][ T43] shmem_mknod+0x1a8/0x450 [ 261.870987][ T43] vfs_mknod+0x5d7/0x8e0 [ 261.872101][ T43] devtmpfs_work_loop+0x1a8/0x7d0 [ 261.873405][ T43] devtmpfsd+0x4c/0x50 [ 261.874444][ T43] page last free pid 16335 tgid 16335 stack trace: [ 261.876101][ T43] free_unref_page+0x661/0x1080 [ 261.877355][ T43] qlist_free_all+0x4e/0x120 [ 261.878560][ T43] kasan_quarantine_reduce+0x195/0x1e0 [ 261.879956][ T43] __kasan_slab_alloc+0x69/0x90 [ 261.881217][ T43] kmem_cache_alloc_noprof+0x121/0x2f0 [ 261.882610][ T43] jbd2__journal_start+0x193/0x6a0 [ 261.883926][ T43] __ext4_journal_start_sb+0x19f/0x660 [ 261.885348][ T43] ext4_dirty_inode+0xa1/0x130 [ 261.886603][ T43] __mark_inode_dirty+0x1f7/0xe60 [ 261.887906][ T43] ext4_setattr+0x380/0x2a70 [ 261.889117][ T43] notify_change+0x6a6/0x1230 [ 261.890357][ T43] chmod_common+0x210/0x460 [ 261.891533][ T43] __x64_sys_chmod+0x108/0x1c0 [ 261.892777][ T43] do_syscall_64+0xcd/0x250 [ 261.893945][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.895387][ T43] [ 261.896007][ T43] Memory state around the buggy address: [ 261.897447][ T43] ffff888024c95f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 261.899481][ T43] ffff888024c95f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 261.901696][ T43] >ffff888024c96000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 261.904388][ T43] ^ [ 261.906407][ T43] ffff888024c96080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 261.909190][ T43] ffff888024c96100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 261.912067][ T43] ================================================================== [ 261.917650][ T43] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 261.920240][ T43] CPU: 3 UID: 0 PID: 43 Comm: kcompactd0 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 261.923777][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 261.927487][ T43] Call Trace: [ 261.928364][ T43] [ 261.929277][ T43] dump_stack_lvl+0x3d/0x1f0 [ 261.931034][ T43] panic+0x71d/0x800 [ 261.932492][ T43] ? __pfx_panic+0x10/0x10 [ 261.934255][ T43] ? preempt_schedule_thunk+0x1a/0x30 [ 261.936190][ T43] ? preempt_schedule_common+0x44/0xc0 [ 261.938136][ T43] ? check_panic_on_warn+0x1f/0xb0 [ 261.940090][ T43] check_panic_on_warn+0xab/0xb0 [ 261.941872][ T43] end_report+0x117/0x180 [ 261.943428][ T43] kasan_report+0xe9/0x110 [ 261.945048][ T43] ? isolate_migratepages_block+0x3e83/0x5690 [ 261.947223][ T43] ? isolate_migratepages_block+0x3e83/0x5690 [ 261.949443][ T43] kasan_check_range+0xef/0x1a0 [ 261.951215][ T43] isolate_migratepages_block+0x3e83/0x5690 [ 261.953343][ T43] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 261.955595][ T43] ? __pfx___might_resched+0x10/0x10 [ 261.957499][ T43] compact_zone+0x1a5c/0x4280 [ 261.959192][ T43] ? __free_zapped_classes+0x2e0/0x320 [ 261.961149][ T43] ? __lock_acquire+0x15a9/0x3c40 [ 261.962977][ T43] ? __pfx___lock_acquire+0x10/0x10 [ 261.964918][ T43] ? __pfx_compact_zone+0x10/0x10 [ 261.966715][ T43] ? lock_acquire.part.0+0x11b/0x380 [ 261.968617][ T43] compact_node+0x1a2/0x2d0 [ 261.970251][ T43] ? __pfx_compact_node+0x10/0x10 [ 261.972095][ T43] ? __pfx_extfrag_for_order+0x10/0x10 [ 261.974049][ T43] kcompactd+0x779/0xdf0 [ 261.975624][ T43] ? __pfx_kcompactd+0x10/0x10 [ 261.977363][ T43] ? __pfx_autoremove_wake_function+0x10/0x10 [ 261.979591][ T43] ? lockdep_hardirqs_on+0x7c/0x110 [ 261.981481][ T43] ? __kthread_parkme+0x148/0x220 [ 261.983303][ T43] ? __pfx_kcompactd+0x10/0x10 [ 261.985043][ T43] kthread+0x2c1/0x3a0 [ 261.986526][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.988406][ T43] ? __pfx_kthread+0x10/0x10 [ 261.990082][ T43] ret_from_fork+0x45/0x80 [ 261.991741][ T43] ? __pfx_kthread+0x10/0x10 [ 261.993419][ T43] ret_from_fork_asm+0x1a/0x30 [ 261.995192][ T43] [ 261.996668][ T43] Kernel Offset: disabled [ 261.997772][ T43] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:15:23 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000011 RCX=ffffffff8182cd97 RDX=ffff88802b8e8000 RSI=ffffffff8182cd85 RDI=0000000000000005 RBP=ffffc900054efb00 RSP=ffffc900054efa20 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff92000a9df48 R13=0000000000000000 R14=0000000000000001 R15=ffff88806a93fb80 RIP=ffffffff8182cd8b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f717b5062d8 CR3=0000000040ac8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 74657366666f5f65 6d757365722f7265 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32e93f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32e93f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32e93f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32e93f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32e93f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32e93f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000317a7973 0001000900000002 000000ffffffef00 02010a1300000020 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000001 RBX=ffff888031f47b58 RCX=ffffffff817bceff RDX=ffff8880244e2440 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000008 RSP=ffffc90003a8fb48 R8 =0000000000000007 R9 =0000000000000000 R10=0000003ced154c5b R11=0000000000000001 R12=0000003ced154c5b R13=0000003ced154c53 R14=0000003ced154c53 R15=0000003ced154c53 RIP=ffffffff818ebae3 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f32ea1d46c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdd6bd83440 CR3=0000000040ac8000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32e93f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32e93f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32e93f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32e93f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32e93f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f32e93f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000376f65 6469762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000144c46 474a550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000108 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffc900048b8000 RDX=ffffc900048b8001 RSI=ffffc900048b7f58 RDI=ffffc900048b7950 RBP=ffffc900048b7998 RSP=ffffc900048b78c0 R8 =ffffffff91a57674 R9 =ffffffff91a575b2 R10=ffffc900048b7950 R11=00000000000a4001 R12=ffffc900048b79a0 R13=ffffc900048b7960 R14=ffffc900048b7958 R15=ffffc900048b0000 RIP=ffffffff813dfe79 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe817c6c580 CR3=00000000306a0000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004040101 Opmask01=0000000000000000 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff19a269b0 0000003000000010 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff19a269b0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff000000ff000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5548474953004d52 4c4147495300676e 697361656c657200 4d52455447495300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5548474953004d52 4c4147495300424b 4c56444049405700 4d52455447495300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000181 0000000000000030 316874652f74656e 2f386d6973766564 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564f8cb86850 0000564f8cb86290 0000000000000181 000000346e616c77 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000564fe9d08233 73656d5f70636864 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f0f8d63a33661 72610ff77fed737f 6567777ffbf5ffff 7f7f7d7f75777965 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85067aa5 RDI=ffffffff9ab05bc0 RBP=ffffffff9ab05b80 RSP=ffffc900007b71c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000020 R14=ffffffff85067a40 R15=0000000000000000 RIP=ffffffff85067acf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa21e00d8c5 CR3=0000000027afe000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000c000000 Opmask01=0000000000000000 Opmask02=0000000019f001ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000004e50828 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff19a26d00 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff19a12a20 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6970726100656c 69666f7270000920 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000c0fe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1600000000000000 00000000000002ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1600000000000000 00000000000002ff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73203a7325007373 6572646461204c4c 20726f66206e6f69 7461746963696c6f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 56051f5600005656 4057414144054c4c 05574a43054b4a4c 5144514c464c494a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000035 0000000000000000 0000000000747369 6c5f747365757165 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000065676173 73656d5f70636864 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000001100000021 000000000500010e 0000005765676162 73656d5f70636870 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f5fdfefef3efd 72615fbff7a57f6f 6567617777777fff 7f7f7d7f75777977 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020