last executing test programs: 1m52.521588427s ago: executing program 3 (id=811): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0xa22061, &(0x7f0000000000)={[{@mode={'mode', 0x3d, 0x8000}}]}) 1m52.43619144s ago: executing program 3 (id=812): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000004240)='mountstats\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000b000000000fe019078ac1e0001ac1414aa0301907803240000450000000001000000010002000000aa640101028677ffffffff000ce256b28c59881681fb520009020007651442eb000e7434954373561de584b703c80009e706d30bd224f80207cfa11cab1a00108475be675de6a70a05a0dc91e5c6000a6580a5e97612fe86001273bc23f9ffffffa30900a301c84600000012c8f46976e79ea788f03d9d3205927ea4112c"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001a0001000000000000000000fe80000000000000000000000000001eac1414bb00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x138}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="1900019c", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x64, r4, 0x201, 0x70bd26, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xd}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x64}, 0x8, 0x3000000000002, 0x0, 0x20004004}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 1m52.43419406s ago: executing program 3 (id=813): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xff05, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x94) 1m52.369965337s ago: executing program 3 (id=815): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f0000000180)=[{}, {}, {}, {}], r1, 0x0, '\x00', 0x34, 0x666687a}) io_setup(0x12, &(0x7f0000000480)=0x0) r3 = gettid() tkill(r3, 0x16) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000600)={0x1bbe0, 0x3, {r3}, {r4}, 0x2, 0x6}) (async) io_getevents(r2, 0xc000000000000, 0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a00), r6) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r7, 0x401, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xa0}]}, 0x24}, 0x1, 0x0, 0x0, 0xd1}, 0x4040884) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, 0x0) setpgid(0x0, r8) (async) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96) (async) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000280), &(0x7f00000003c0)=r9}, 0x20) (async) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) 1m52.179040404s ago: executing program 3 (id=817): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async) socket$kcm(0x29, 0x7, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) (async) write$binfmt_script(r1, &(0x7f0000000780)={'#! ', './file0'}, 0xb) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 1m52.091844606s ago: executing program 3 (id=819): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r2 = socket(0x10, 0x803, 0xfffffffc) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffdb8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2, 0x10}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd26, 0x35dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x9}, {0x0, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4810}, 0x48c0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0xff06, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0xb, 0x3) 1m51.98193079s ago: executing program 32 (id=819): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r2 = socket(0x10, 0x803, 0xfffffffc) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffdb8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2, 0x10}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd26, 0x35dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x9}, {0x0, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4810}, 0x48c0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0xff06, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0xb, 0x3) 1m44.713778794s ago: executing program 1 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) write(r0, &(0x7f0000000000)='U', 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) (async) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x28, r3, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}]]}, 0x28}, 0x1, 0x0, 0x0, 0x44850}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') (async) r5 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x16) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 1m44.710708536s ago: executing program 1 (id=879): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x403}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000640)={@remote, @private0, @empty, 0x40000, 0x40, 0x0, 0x100, 0x0, 0x40180043, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @multicast2}}, [0x6, 0xd, 0xf04b, 0x8b, 0xc836, 0x1, 0x8, 0xa53, 0x1, 0x7f, 0x7, 0x3ff, 0x1ff, 0x5, 0x8]}, &(0x7f0000000380)=0x100) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100)={r9}, &(0x7f0000000080)=0x8) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0xe, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000087}, 0x80) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x58, r7, 0x1, 0x70bd28, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x2e}, {0x8, 0x4, 0x1}}}]}}]}, 0x58}, 0x1, 0xf000, 0x0, 0x3000011}, 0x8c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff00007b0002000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x10040}, 0x4000850) 1m44.498495408s ago: executing program 1 (id=881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r1, &(0x7f0000001240)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x10000, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e4174345", 0x14}], 0x1}, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x202, 0x0) dup3(0xffffffffffffffff, r6, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c05"], 0x30}, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}, 0x0, 0xfffffffe}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/asound/card0/oss_mixer\x00', 0x40, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000200)={0x28003, 0x0, [0x40, 0x4, 0x3, 0x10e3, 0xfffffffffffffffc, 0x3ff, 0x200000001, 0x9]}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0xb5, 0x5, 0x6, 0x0, 0x7fffffff, 0x4, 0xf, 0xc0, 0x40, 0x4, 0x60, 0x6, 0x0, 0x6e8, 0xffffbfc3, 0xf0, 0x4, 0x0, 0x7, '\x00', 0xcb, 0xffffffffffffff59}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0xdddd1000, 0x59a35420, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9, 0x0, '\x00', 0x3a}, {}, {}, {0x0, 0x35}, {0x1d, 0x3}, {0x0, 0x0, 0x6}, {}, {0x2, 0x6}, {}, {0x73, 0x6, 0x2}, {0x0, 0x0, 0xfe}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0x40}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5}, {0x0, 0x0, 0x10}]}}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m44.211613884s ago: executing program 1 (id=884): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_IO_FLUSHER(0x4c, 0x2) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) 1m44.209145703s ago: executing program 1 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x23, 0x2}, {0x3, 0x4}, {0xc8, 0x7}, {0x6, 0x2}, {0x1, 0x7}, {0xff, 0x1}, {0x8, 0x2}, {0x7, 0x4}, {0x10, 0x4}, {0xaf, 0x6}, {0x7, 0x6}, {0x8, 0x4}, {0x7, 0x2}, {0x4, 0x6}, {0x83, 0x4}, {0x4, 0x4}, {0x3, 0x3}, {0x6, 0x2}, {0x6f, 0x3}, {0x6, 0x7}], "a68a4e95f2348b85"}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4041080}, 0x40000) sendmsg$alg(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000002c0)="5efa1852abcf6906dec10d2d0e726c9ba743040e200c478127b1acafc65f7e942a6530962e6b0f9d211d734d8a", 0x2d}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="fc", 0x1}, {&(0x7f0000001340)="6c3e912705a53d003c6c792d47e618123d8e889534da1659d2553d49bc4f59cea6944899f2c6a29cb616d51990fda623d054b43e528cbee399e1016839a54152e12d96acf33a96dd564a3479999f970d6a2756c4ad570414751d71f396af690635451eb7935bf180", 0x68}, {&(0x7f00000013c0)="42ef6f75e65353f745f3530c6a9b3e40cd51af2c47d5630ecf23a72c8ff0a2384803d80df5573d2c964290c8c14a954d9e5288364dd8ae1eb87310a0ebbaeab6d3491c89bf0ad1be9274c5b09e539993997b616168d988b53ce02d30e83f9fca15d9d139767f3d508876f22fb0039f9073a14b262b6e02a03951c39713468a25678769419683fba34f039a", 0x8b}], 0x5, &(0x7f0000001500)=[@assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x40}, @op={0x18, 0x117, 0x3, 0x1}], 0x90, 0x400c000}, 0x4002040) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000001840)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001800)={&(0x7f0000001640)={0x1b4, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1b4}}, 0x4000080) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, &(0x7f00000018c0)) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000001940), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001a80)={'tunl0\x00', &(0x7f0000001980)={'sit0\x00', 0x0, 0x10, 0x80, 0x5, 0x7fff, {{0x2f, 0x4, 0x1, 0x6, 0xbc, 0x68, 0x0, 0x2, 0x4, 0x0, @empty, @private=0xa010101, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x40, 0x1, 0x7, [{@rand_addr=0x64010101, 0x800}, {@loopback, 0x4}, {@private=0xa010101, 0x6}, {@multicast1, 0x5}]}, @cipso={0x86, 0x2c, 0x0, [{0x5, 0xd, "8b1f918dbd9f6fe79c08b5"}, {0x0, 0x3, "bc"}, {0x0, 0x12, "1419689356dfaa5e1fd40ddb6d5454bd"}, {0x1, 0x4, "2ada"}]}, @ssrr={0x89, 0x7, 0x29, [@rand_addr=0x6]}, @lsrr={0x83, 0x7, 0x85, [@local]}, @ssrr={0x89, 0xf, 0xfc, [@multicast1, @multicast2, @empty]}, @cipso={0x86, 0x21, 0x3, [{0x2, 0xb, "341f229e260b921fab"}, {0x7, 0x10, "71b67594f2b9e68168a06e2661dd"}]}, @ssrr={0x89, 0xf, 0x1f, [@loopback, @multicast1, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001ac0)={'gre0\x00', 0x0, 0x40, 0x7800, 0x3, 0x4, {{0x37, 0x4, 0x3, 0x19, 0xdc, 0x65, 0x0, 0x8d, 0x2f, 0x0, @remote, @remote, {[@end, @lsrr={0x83, 0x1b, 0xd9, [@private=0xa010100, @rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}, @loopback]}, @cipso={0x86, 0x18, 0x3, [{0x5, 0x5, "8ed04c"}, {0x2, 0xd, "3805f97de89e98b7aaadf1"}]}, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0x23, 0xe5, [@remote, @rand_addr=0x64010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @multicast2, @multicast1]}, @timestamp_addr={0x44, 0x2c, 0xe7, 0x1, 0xd, [{@broadcast, 0xb5}, {@broadcast}, {@multicast1, 0x1}, {@rand_addr=0x64010101, 0xf4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}]}, @cipso={0x86, 0xc, 0x3, [{0x1, 0x4, "4adc"}, {0x7, 0x2}]}, @cipso={0x86, 0x32, 0x2, [{0x1, 0x3, 'A'}, {0x5, 0xe, "6cbbb059d671fcfd75c66e3b"}, {0x5, 0x6, "fb2dc21b"}, {0x0, 0x11, "1551c88dff248c76d467a57e978a6d"}, {0x6, 0x4, "d06b"}]}]}}}}}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000001cc0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x5c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) socketpair(0x25, 0x2, 0x9, &(0x7f0000001d00)={0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) recvmmsg(r8, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001d40)=""/164, 0xa4}, {&(0x7f0000001e00)=""/132, 0x84}], 0x2, &(0x7f0000001f00)=""/223, 0xdf}, 0x10000}, {{&(0x7f0000002000)=@ethernet={0x0, @local}, 0x80, &(0x7f0000002340)=[{&(0x7f0000002080)=""/14, 0xe}, {&(0x7f00000020c0)=""/158, 0x9e}, {&(0x7f0000002180)=""/212, 0xd4}, {&(0x7f0000002280)=""/188, 0xbc}], 0x4, &(0x7f0000002380)=""/66, 0x42}, 0x9}, {{&(0x7f0000002400)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003700)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/238, 0xee}, {&(0x7f0000003580)=""/132, 0x84}, {&(0x7f0000003640)=""/161, 0xa1}], 0x4}, 0x1ff}], 0x3, 0x0, &(0x7f0000003800)) r9 = syz_io_uring_setup(0x5ff9, &(0x7f0000003840)={0x0, 0xded1, 0x2000, 0x3, 0x383}, &(0x7f00000038c0)=0x0, &(0x7f0000003900)=0x0) syz_io_uring_submit(r10, 0x0, &(0x7f0000003940)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1}) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000039c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003a00)={0x44c, r12, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ea8c15d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40a61481}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x247e58a2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5af6ed10}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1015}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36020b69}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f5005e1}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d57}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x480e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10f4a587}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x74, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x680e0412}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a04}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe7e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x419b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x72ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41215334}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x703c1a59}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x320e8c19}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab50}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f189eb4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3577}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4743684f}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d4a5fc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x611bb8fa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x599121f6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x91d836d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65c7c939}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a2f1a5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x581f07d3}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbcb6da1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e480ef5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67e1190a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6eaa772b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53486c96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x465459a3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30d8391a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x17a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc1b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ce73a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf8fc}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x184, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf0be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ee6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf87f7f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3028015e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5de4fd71}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa5f}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x257eabb7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ebf1c40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e4ba41f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19997200}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c40ba84}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5835}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c9c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x518e748f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1120494d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe3ee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7eb74b1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ad9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17bb3e8a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf1c4b13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5610d44}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5723430f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x380b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e6183e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f89322b}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6de5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c2eb910}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x771d5961}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb32c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52e73fc9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd7c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf156}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71993c34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3fb1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x614b496e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5533a408}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x174f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa222}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb373}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f68b0a0}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4731c10a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc46d}]}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x40000}, 0x845) syz_genetlink_get_family_id$ipvs(&(0x7f0000003f00), 0xffffffffffffffff) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000003f40)={0x0, 0x7fff, 0x2}) r13 = openat$sr(0xffffffffffffff9c, &(0x7f0000003f80), 0x101000, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8924, &(0x7f0000003fc0)={'ip6tnl0\x00'}) r14 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r14, &(0x7f0000004000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000004100)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x30, r5, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000004180)=@IORING_OP_MKDIRAT={0x25, 0x18, 0x0, r13, 0x0, &(0x7f0000004140)='./file0\x00', 0x34, 0x0, 0x0, {0x0, r15}}) 1m44.043822639s ago: executing program 1 (id=888): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000009de00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000160001002abd"], 0x2c}}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (rerun: 32) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) 1m43.919124013s ago: executing program 33 (id=888): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000009de00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000160001002abd"], 0x2c}}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (rerun: 32) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) 1m32.891568035s ago: executing program 5 (id=1016): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x62f) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0xd5, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2a8, r0, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x284, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe7}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, ')$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa5e}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff7d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1d4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1ac, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x2, 0x1, 0x38fab243}, @ETHTOOL_A_BITSET_BIT_NAME={0x163, 0x2, 'ethtool\x00\xe6\xfb0\x85&\x8e\x9a6=\vl\x84\xf5\xdc\xf3\x00)\xe5\xfc\x84\xc3\xa3H\xc3+\xfa\x85c\xac\x13\xc2\xdc\x88\xfc\xb5\xf0\xda[k\x8310x0}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x58, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xa}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0xd1) (async) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280080007003b070000050006"], 0x4c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000500000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f00000011c0)) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, r7, 0x2) (async) kexec_load(0x81, 0x0, 0x0, 0x160000) (async) r8 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r8, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x10040}, 0xc) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000040)={0x44, [[0x8, 0xbcab, 0x8000, 0x6, 0x292, 0x7, 0x1, 0x7], [0x4, 0x7ae3, 0x40, 0xed, 0x1b8b, 0x1ff, 0x3, 0x7], [0x7, 0x9, 0xe, 0x3, 0x9e, 0x7f, 0x91, 0x6addd8f7]], '\x00', [{0x6, 0x9, 0x1, 0x1}, {0x7, 0x9a, 0x1, 0x0, 0x1}, {0x2, 0xfff, 0x1, 0x0, 0x0, 0x1}, {0xa, 0xf, 0x1}, {0x3, 0x70, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x80000001, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x0, 0x1}, {0x80000000, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x5d5, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x7f, 0x1, 0x0, 0x1}, {0x0, 0x686, 0x0, 0x0, 0x1}, {0x2, 0x8000, 0x0, 0x1, 0x1}], '\x00', 0x4}) 1m32.626186612s ago: executing program 5 (id=1018): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, 0x0) chdir(&(0x7f0000001180)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x7ff, 0x1) getdents64(r0, 0x0, 0x10) 1m32.572565522s ago: executing program 5 (id=1019): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pK \x00'}, 0x63) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x1f, 0x4, {{0xa, 0x4, 0x3, 0x3, 0x28, 0x5, 0x0, 0x2, 0x4, 0x0, @multicast2, @remote, {[@generic={0x88, 0x8, "7fb5b7d3e0d0"}, @cipso={0x86, 0xb, 0x0, [{0x0, 0x5, "760374"}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xc, &(0x7f0000000240)=@raw=[@ringbuf_query, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x216}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x0, 0x3, 0x0, 0x7, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x8, 0x5, 0xb, 0x8, 0xfffffffffffffffc}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}], &(0x7f00000002c0)='syzkaller\x00', 0x7fff, 0x87, &(0x7f0000000400)=""/135, 0x1e00, 0x42, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x3, 0xc, 0x7, 0x80}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000009c0)=[{0x5, 0x3, 0xb, 0x8}, {0x4, 0x1, 0xf}, {0x0, 0x3, 0x4, 0x7}, {0x3, 0x1, 0x5, 0x8}], 0x10, 0x8, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000004c0)=[@sack_perm, @window={0x3, 0x3}, @sack_perm, @timestamp, @sack_perm, @timestamp, @timestamp, @timestamp, @sack_perm, @sack_perm, @timestamp, @window={0x3, 0x7, 0x8000}], 0xc) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) clock_settime(0x0, &(0x7f0000009ac0)) read$FUSE(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f0000000b40)=0x60, 0x80800) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f0000000b80)=0x3fb, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0xc, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[@hopopts={0x2f}]}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000540)) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {0xa, 0x0, 0x2}}, 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m32.417870765s ago: executing program 5 (id=1020): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x0, 0x4, 0xe, 0xfffffff9, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x700, 0x4, 0x8}}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000a80)={0x1, 0x0, [{0xa50a27af40c9b30b, 0xb8, &(0x7f0000000940)=""/184}]}) r6 = dup(r5) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000340), 0x8) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x4) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r10, 0xedaa7000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r13, 0x0, r12, 0x0, 0x46) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0xe, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x26, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x8, 0xb1, &(0x7f0000000300)=""/177, 0x41100, 0x28, '\x00', r3, 0x0, r6, 0x8, &(0x7f0000000480)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x8, 0x2, 0x6f07}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000700)=[r8, 0xffffffffffffffff, r9, r10, r11, r13, r14, r0], &(0x7f0000000740)=[{0x3, 0x4, 0x10, 0x5}, {0x3, 0x5, 0xb, 0x7}, {0x0, 0x3, 0x6, 0x9}, {0x1, 0x4, 0xe, 0x1}], 0x10, 0x80, @void, @value}, 0x94) 1m32.327325435s ago: executing program 5 (id=1021): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) fcntl$setlease(r0, 0x400, 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80000}) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffc, 0x220000) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000200)={r4, 0x0, r5, 0x0, 0x0, 0xa, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r4, r7], 0x2}) 1m19.933370285s ago: executing program 0 (id=1160): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2f) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043b10eb99ee3bb3dcc0c77f006a07457681af39edffdd2f7395ca9e90a6af38aa3f"], 0xa) 1m19.834403738s ago: executing program 0 (id=1161): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x7ff, 0x1) getdents64(r0, 0x0, 0x10) (fail_nth: 1) 1m19.829577599s ago: executing program 0 (id=1162): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r2, 0x2000, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40001000) 1m18.779686493s ago: executing program 0 (id=1174): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000600), &(0x7f0000001380)=@udp=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800}}], 0x1, 0x4044844) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000100)) fcntl$setstatus(r3, 0x4, 0x9b05ea2ed5c0bda1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r4 = inotify_init1(0x80800) fallocate(r4, 0x8, 0x2, 0x8) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000500)={0x0, 0x0, 0x7, 0x0, '\x00', [{0xfffffff7, 0x2, 0x0, 0x91, 0xb, 0x2}, {0x3, 0x1, 0x3, 0x2, 0x81, 0x4}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = socket(0x1, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000600), &(0x7f0000001380)=@udp=r5}, 0x20) recvmsg(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/101, 0x65}], 0x1}, 0x40000162) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r7, 0x7ff, 0x1) r8 = syz_clone(0x2000000, &(0x7f0000000140)="256c32cd4cd01c261045090b33c50c4680f6fd3f91afe13beb3bf97a8fa05e0e67dc5c458f32b20fbc8bec27a73ee849d3ec4a0eb0ba8636944a7961594844eb2b98d034392bf8b935ea8269bd8e6a8812b6e3fa15d4851161855959101540d1789a445cfe31ee7068c3e3686691b47276cb3bc32dc9c276a093861084dbd764863181d9f0ca", 0x86, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000011c0)="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") syz_open_procfs(r8, &(0x7f0000000200)='net/ip6_tables_targets\x00') syz_emit_ethernet(0x2a, &(0x7f00000008c0)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @empty, @loopback, @multicast, @dev={0xac, 0x14, 0x14, 0x3b}}}}}, 0x0) 1m18.542646401s ago: executing program 0 (id=1176): r0 = socket$inet6(0xa, 0x80002, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb}) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0xfffffffffffffe5d, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 1m18.364555831s ago: executing program 0 (id=1179): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01082cbd7000000000000b00000008000300", @ANYRESOCT=r2, @ANYBLOB="2800508011000a004abee339084eeef16f162471f400000005000200000000000800030005ac0f000a00"], 0x50}, 0x1, 0x0, 0x0, 0x40905}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000200)={0x1d, r6}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r3, 0x80047456, &(0x7f00000010c0)) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0xe}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0xfffffffffffffcbd) syz_fuse_handle_req(r7, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x0, {0x4, 0x0, 0x200000000e, 0xffff, 0x369, 0x7, 0x4, 0x0, 0x0, 0x6000, 0x0, r9, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r10 = socket(0x1d, 0x2, 0x6) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r11, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r11, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}}], 0x1, 0x4048841) close_range(r10, 0xffffffffffffffff, 0x0) 1m18.241965509s ago: executing program 34 (id=1179): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01082cbd7000000000000b00000008000300", @ANYRESOCT=r2, @ANYBLOB="2800508011000a004abee339084eeef16f162471f400000005000200000000000800030005ac0f000a00"], 0x50}, 0x1, 0x0, 0x0, 0x40905}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000200)={0x1d, r6}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r3, 0x80047456, &(0x7f00000010c0)) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0xe}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0xfffffffffffffcbd) syz_fuse_handle_req(r7, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x0, {0x4, 0x0, 0x200000000e, 0xffff, 0x369, 0x7, 0x4, 0x0, 0x0, 0x6000, 0x0, r9, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getgid() openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r10 = socket(0x1d, 0x2, 0x6) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r11, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r11, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}}], 0x1, 0x4048841) close_range(r10, 0xffffffffffffffff, 0x0) 1m15.988499318s ago: executing program 35 (id=1021): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) fcntl$setlease(r0, 0x400, 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80000}) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffc, 0x220000) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000200)={r4, 0x0, r5, 0x0, 0x0, 0xa, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r4, r7], 0x2}) 32.484696109s ago: executing program 2 (id=1714): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r3}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) signalfd4(r4, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) 32.260726364s ago: executing program 2 (id=1717): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000180)="566a5a8ec253e57889ba328c65a1a0013e", 0x11}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x400d1}, 0xc845) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000026c0)=""/4103, 0x1007}], 0x1}}], 0x1, 0x41, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7f, 0x2) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c9006191df8597a492b4585bcee82e6a57c3e26722c35beec97a2090f9a8fd7e21cf9e7da008514b608b2752ddfdad20791e73742bfa08bb9ac499ff51e5cecbc47fecef5cee1004787b64b62b27622be5f1a9558899fdadb56f3f753667d2ef456297b149682d47dfe9a3dad6aa7cf906f6e02b464105b1e50e73fcf5dd50c26bb3946e21d3aa0ae293a26a325195d7c305e259c788e7ca796a3806a103a9066fdc0817023b8506b18e5f64b6"], 0x65) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x16, 0x1, 0x0, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b39bb049e33958b16c"}) 32.117698783s ago: executing program 2 (id=1724): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x0) 32.029186902s ago: executing program 2 (id=1725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a0008a16000008009f000d000000080026000816"], 0x40}}, 0x200040b4) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f00000003c0)={0x7ff, [[0x9, 0x1, 0x5, 0x28, 0x5, 0x101, 0x80, 0xc000], [0x80, 0x10001, 0x5, 0x8, 0x7638, 0xfffffffb, 0x3, 0x3fd], [0xa, 0x3, 0x62, 0x536, 0xb, 0x5, 0x664, 0xfff]], '\x00', [{0x8, 0xff, 0x1, 0x0, 0x1, 0x1}, {0xf48, 0x5}, {0x9, 0x2, 0x1}, {0x4, 0x10001000, 0x0, 0x1}, {0x4, 0x2, 0x1, 0x1}, {0x3, 0x1}, {0x6, 0x7fffffff, 0x1}, {0xa, 0x101, 0x0, 0x1, 0x1, 0x1}, {0x7, 0xb7, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x4, 0x1}, {0x7ff, 0x8000, 0x0, 0x1, 0x1, 0x1}, {0x4eee, 0x1}], '\x00', 0x1b}) umount2(&(0x7f0000000080)='./file0\x00', 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)={0x27, r4, 0x0, 0x5, 0xde, 0x10, "0f488b6b99ddfd7c6353390e20d8a6dd09c277d9327cb3f762a5ee9302fbe57f52e589b1e61db8d6cfab5b92b9b7cb783e51d982eda0ecf116571f8b8aa2cd", 0x3b}, 0x60, &(0x7f0000000300)=[{&(0x7f0000000140)="84e06c71a1ae834a", 0x8}, {&(0x7f0000000180)="0e302c1d8d7dfd7259fabbbd3956ff9e092fb7ab318f23b783d5e57f8aad351dc9329953844737096443337747a51a20a7af", 0x32}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000200)="2e002cbbc0d6242066a0eabe56361b249689f7f372f621a062322516e0abf6cdc38daa779dc83ea1f1e9a8e1c32250401753d84dd1195cf2a93f7abd89f7b079d82ba4a1485eda35301f4a1de63a01125126f8d79d0a4d59398a5c9d1d73a857d1d2c1f0ae0a2a180cee545d3190160ad197070f11b8dec2b9eaf80b7b8abea5a7dcf562dce63bf642acb509e5e9257c17c4b21b7e446d0fd7e7f3aafd42337f42f3b27a467617492e90361fae572bcf52dcf7d66d67d9326727aad936ed07aaa58daca4144b", 0xc6}], 0x4, &(0x7f00000003c0)={0x88, 0xff, 0x1, "f3321c82881b40827de6ee46268af05f5efcc9e59fc39162b7ec9382e2a65e8616700f684356545c5c2cbf22ad95e5009f076e53efcbcd39424f5115e1c100e9a339d14c3c1350826aa4a700682c307a0766bb070eb3b3ecb8ac8f91635a1cbff023ca7c3db12e1b5c50a8fbd5b66a29b5c1cadb1e"}, 0x88, 0x20008011}], 0x1, 0x24040004) 31.947169071s ago: executing program 2 (id=1727): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000400)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r1}}]}}) 31.81712752s ago: executing program 2 (id=1731): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0xa4800, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x100000001) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x80803, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000000c0)={0x7fffffff, 0x0, 'client1\x00', 0x0, "f8ee6e5e2b38b5cc", "b8c5126deca3c384693ba0e2b53b908612ca856de6ac921b579ddca05c6d32b9"}) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/198, 0xc6}], 0x1, 0x14a, 0x0) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x31f, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x7}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x10001, 0x100}) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000000c0)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0xa4800, 0x0) (async) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x100000001) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6(0xa, 0x80803, 0x88) (async) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000000c0)={0x7fffffff, 0x0, 'client1\x00', 0x0, "f8ee6e5e2b38b5cc", "b8c5126deca3c384693ba0e2b53b908612ca856de6ac921b579ddca05c6d32b9"}) (async) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/198, 0xc6}], 0x1, 0x14a, 0x0) (async) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x31f, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x7}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x10001, 0x100}) (async) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000000c0)) (async) 31.698770107s ago: executing program 36 (id=1731): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0xa4800, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x100000001) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x80803, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000000c0)={0x7fffffff, 0x0, 'client1\x00', 0x0, "f8ee6e5e2b38b5cc", "b8c5126deca3c384693ba0e2b53b908612ca856de6ac921b579ddca05c6d32b9"}) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/198, 0xc6}], 0x1, 0x14a, 0x0) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x31f, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x7}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x10001, 0x100}) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000000c0)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0xa4800, 0x0) (async) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) (async) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x100000001) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6(0xa, 0x80803, 0x88) (async) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000000c0)={0x7fffffff, 0x0, 'client1\x00', 0x0, "f8ee6e5e2b38b5cc", "b8c5126deca3c384693ba0e2b53b908612ca856de6ac921b579ddca05c6d32b9"}) (async) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/198, 0xc6}], 0x1, 0x14a, 0x0) (async) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x31f, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x7}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x10001, 0x100}) (async) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000000c0)) (async) 30.629650253s ago: executing program 6 (id=1509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = io_uring_setup(0x428, &(0x7f0000000180)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000001780)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x38, 0x0, &(0x7f0000000140)) 29.846510862s ago: executing program 6 (id=1509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = io_uring_setup(0x428, &(0x7f0000000180)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000001780)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x38, 0x0, &(0x7f0000000140)) 27.513542884s ago: executing program 6 (id=1509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = io_uring_setup(0x428, &(0x7f0000000180)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000001780)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x38, 0x0, &(0x7f0000000140)) 23.543974643s ago: executing program 8 (id=1732): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e23, @loopback}, @ib={0x1b, 0x0, 0x1ff, {"7d0300"}, 0x0, 0x4, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0xdddd0000, 0xffff1000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x1, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x1, 0x8, 0x4}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfd, 0xfb, 0x0, 0x2, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x7, 0xf9, 0x0, 0xfe, 0x3a, 0x2, 0xff}, {0x3000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x8080000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x100, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2, 0xd]}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000002c0)={0x1000, 0x4, 0x2, 0x5, 0x50}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r5, 0x80044df9, &(0x7f0000000080)) close(r0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000040)=0xd0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000280)=0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r8 = dup(r6) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000380)='overlay\x00', 0x10000, &(0x7f0000000400)='workdir') setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) 22.933286475s ago: executing program 8 (id=1732): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e23, @loopback}, @ib={0x1b, 0x0, 0x1ff, {"7d0300"}, 0x0, 0x4, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0xdddd0000, 0xffff1000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x1, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x1, 0x8, 0x4}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfd, 0xfb, 0x0, 0x2, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x7, 0xf9, 0x0, 0xfe, 0x3a, 0x2, 0xff}, {0x3000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x8080000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x100, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2, 0xd]}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000002c0)={0x1000, 0x4, 0x2, 0x5, 0x50}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r5, 0x80044df9, &(0x7f0000000080)) close(r0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000040)=0xd0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000280)=0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r8 = dup(r6) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000380)='overlay\x00', 0x10000, &(0x7f0000000400)='workdir') setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) 17.778662567s ago: executing program 6 (id=1509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = io_uring_setup(0x428, &(0x7f0000000180)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000001780)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x38, 0x0, &(0x7f0000000140)) 15.875840993s ago: executing program 8 (id=1732): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e23, @loopback}, @ib={0x1b, 0x0, 0x1ff, {"7d0300"}, 0x0, 0x4, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0xdddd0000, 0xffff1000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x1, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x1, 0x8, 0x4}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfd, 0xfb, 0x0, 0x2, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x7, 0xf9, 0x0, 0xfe, 0x3a, 0x2, 0xff}, {0x3000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x8080000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x100, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2, 0xd]}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000002c0)={0x1000, 0x4, 0x2, 0x5, 0x50}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r5, 0x80044df9, &(0x7f0000000080)) close(r0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000040)=0xd0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000280)=0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r8 = dup(r6) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000380)='overlay\x00', 0x10000, &(0x7f0000000400)='workdir') setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) 15.316911241s ago: executing program 8 (id=1732): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e23, @loopback}, @ib={0x1b, 0x0, 0x1ff, {"7d0300"}, 0x0, 0x4, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0xdddd0000, 0xffff1000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x1, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x1, 0x8, 0x4}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfd, 0xfb, 0x0, 0x2, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x7, 0xf9, 0x0, 0xfe, 0x3a, 0x2, 0xff}, {0x3000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x8080000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x100, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2, 0xd]}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000002c0)={0x1000, 0x4, 0x2, 0x5, 0x50}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r5, 0x80044df9, &(0x7f0000000080)) close(r0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000040)=0xd0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000280)=0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r8 = dup(r6) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000380)='overlay\x00', 0x10000, &(0x7f0000000400)='workdir') setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) 9.806002489s ago: executing program 6 (id=1509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = io_uring_setup(0x428, &(0x7f0000000180)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000001780)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x38, 0x0, &(0x7f0000000140)) 7.761836886s ago: executing program 8 (id=1732): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e23, @loopback}, @ib={0x1b, 0x0, 0x1ff, {"7d0300"}, 0x0, 0x4, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0xdddd0000, 0xffff1000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x1, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x1, 0x8, 0x4}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfd, 0xfb, 0x0, 0x2, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x7, 0xf9, 0x0, 0xfe, 0x3a, 0x2, 0xff}, {0x3000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x8080000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x100, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2, 0xd]}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000002c0)={0x1000, 0x4, 0x2, 0x5, 0x50}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r5, 0x80044df9, &(0x7f0000000080)) close(r0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000040)=0xd0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000280)=0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r8 = dup(r6) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000380)='overlay\x00', 0x10000, &(0x7f0000000400)='workdir') setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) 2.34305681s ago: executing program 4 (id=1966): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) ioctl$LOOP_CHANGE_FD(r0, 0x40101286, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) poll(&(0x7f0000000080)=[{r1, 0x4144}, {r3, 0x4086}], 0x2, 0x9) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x8, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') write$qrtrtun(r4, &(0x7f0000000180)="2bdbca4b", 0x4) write$binfmt_aout(r4, &(0x7f0000000400)={{0x107, 0x4, 0x1, 0xb6, 0x31e, 0x7fffffff, 0xb, 0x800}, "9dc9198bce46c96edd7bf61190e27f8f9748c16a04f6fbfc8e6a94b016141eb22d2d488be35a52bff6b1642686da2c2fcec571c794f9fd2c8fbf1d47c6f0294aa4b03637acdf24e0fe161db86974a100f6dad6e356abeac67678ffc202a8c5cfe23ad103f6758163aeaf24d2a156ae5136b2e39e60ab37188e4187e7eea82d2b46ffbb8df2d73142c56322c373c455e3a0989e1ab69216d2b56a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6ba) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r5, &(0x7f00000002c0)=""/211, 0xd3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400030400000000000000542d"], 0x44}}, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.28328659s ago: executing program 4 (id=1967): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x202, 0x0) dup3(0xffffffffffffffff, r1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x256, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x220, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xfc}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0xfffffffd, 0x0, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000001991319c00"}, {0x5, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}]}}}}}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0xfe33, &(0x7f00000017c0)={&(0x7f0000000000)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/65, 0x41}], 0x1}, 0x2002) 2.276832354s ago: executing program 4 (id=1968): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="30078000c389fdc8dc4850e28ba07cbb122ffa94c6da1e0088c240f4240b7f11faf06c8a0fc95020c40e7989f639e83408f02b35c974e1f0", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf25280000000a0001007770616e3000000005002e00c400000005002b0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 'id0\x00'}) (async) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x58}}, 0x8001) 2.161376513s ago: executing program 4 (id=1969): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000180)="566a5a8ec253e57889ba328c65a1a0", 0xf}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x400d1}, 0xc845) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000026c0)=""/4103, 0x1007}], 0x1}}], 0x1, 0x41, 0x0) 2.160693999s ago: executing program 4 (id=1970): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x2, {0xa, 0x4e20, 0x7f, @empty, 0xfffffff9}}}, 0x80, 0x0}}], 0x1, 0x20044000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}, r2}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) 1.455538492s ago: executing program 7 (id=1972): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc15edf9e60b10db54c637f2a2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000570000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r0, 0x0, 0x3a) r3 = syz_socket_connect_nvme_tcp() ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000001c0)) 1.381269866s ago: executing program 7 (id=1973): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540100001000010000000000000000027f00000100000000000000000000000000000000000000009cabffff0a01010100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000feffffff25bd70000000000002000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c"], 0x154}}, 0x8080) 1.380749411s ago: executing program 7 (id=1974): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x1}}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r1, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) 1.25049352s ago: executing program 7 (id=1975): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') read$FUSE(r3, &(0x7f0000000540)={0x2020}, 0x2020) write$selinux_attr(r3, &(0x7f0000000080)='system_u:object_r:hald_var_run_t:s0\x00', 0x24) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fcdbdf254f00000008000300", @ANYRES32=r5, @ANYBLOB="48007a80140002001e5ef9e599ccb29db86c563664c0c59e0c5c4e155a7003e0707d1f94f5c45371f90003004b3e47b340ffe3572498467c93acc6e9b336d9b6d9e32de3da9c7016bb8f65ebb2ab30594bf1000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) 1.14579957s ago: executing program 7 (id=1976): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x48882, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe00000100000000050013"], 0xd0}}, 0x2400c800) sendfile(r0, r0, 0x0, 0x400000000003f) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25df9bfb, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xe3, 0x6}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x80, 0x9, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'pim6reg\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'dvmrp1\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x48) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)={0x54, r7, 0xfe12482fe0801d67, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1f40}, {0xc, 0x90, 0xfffffffffffffff8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x44004) (async) r8 = dup(r0) fallocate(r8, 0x10, 0x0, 0x200) 1.09055049s ago: executing program 6 (id=1509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = io_uring_setup(0x428, &(0x7f0000000180)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000001780)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x38, 0x0, &(0x7f0000000140)) 77.036718ms ago: executing program 7 (id=1977): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f0000000780)=""/64, 0x40) r3 = socket$inet_smc(0x2b, 0x1, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000240)=""/83, 0x53}], 0x1) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000003c0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe, 0x40000000000087e]}}) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f00000005c0)={&(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000280)="96bc1480bb35485b38bf5bff13be3ad75ee71e", 0x13}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x32018}}, 0x20}}, 0x20000841) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000000380), 0x5000005, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x10, 0x1, 0x0, "27110000000000000010002200"}) syz_emit_ethernet(0xe, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863}}}, 0x0) r7 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r7, 0x0, 0x0, 0x4008840, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback, 0xfee}, 0x1c) sendto$inet6(r7, &(0x7f0000000400), 0x0, 0x40000, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6, 0x19, 0xd, "89753015418ab0df6afb245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b13ecab66c7d257a037d0f08e8ad896ba67a07696defa", "8b609009aaa722687f3f2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fce40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1b97448abe996b48e2b870128218a0d22915216fddb100", [0x7, 0x7]}) 76.654662ms ago: executing program 4 (id=1978): mlockall(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xd8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='ocfs2\x00', 0x21000d, 0x0) 0s ago: executing program 8 (id=1732): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e23, @loopback}, @ib={0x1b, 0x0, 0x1ff, {"7d0300"}, 0x0, 0x4, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x7}}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0xdddd0000, 0xffff1000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x1, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x1, 0x8, 0x4}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfd, 0xfb, 0x0, 0x2, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x7, 0xf9, 0x0, 0xfe, 0x3a, 0x2, 0xff}, {0x3000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x8080000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x100, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2, 0xd]}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000002c0)={0x1000, 0x4, 0x2, 0x5, 0x50}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r5, 0x80044df9, &(0x7f0000000080)) close(r0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000040)=0xd0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000280)=0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r8 = dup(r6) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000380)='overlay\x00', 0x10000, &(0x7f0000000400)='workdir') setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) kernel console output (not intermixed with test programs): ode [ 148.929565][ T9952] veth1_vlan: entered promiscuous mode [ 148.971401][T10119] overlayfs: failed to resolve './file1/file0': -2 [ 148.982391][T10119] netlink: 'syz.2.1221': attribute type 4 has an invalid length. [ 149.013676][ T9952] veth0_macvtap: entered promiscuous mode [ 149.030185][T10119] netlink: 'syz.2.1221': attribute type 4 has an invalid length. [ 149.032636][ T9952] veth1_macvtap: entered promiscuous mode [ 149.051460][ T9952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.061435][ T9952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.077957][ T9952] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.081159][ T9952] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.084647][ T9952] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.088067][ T9952] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.098781][ T61] hsr_slave_0: left promiscuous mode [ 149.101891][ T61] hsr_slave_1: left promiscuous mode [ 149.104569][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.109407][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.113448][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.116739][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.153568][T10130] program syz.2.1223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.159065][ T61] veth1_macvtap: left promiscuous mode [ 149.161803][ T61] veth0_macvtap: left promiscuous mode [ 149.164194][ T61] veth1_vlan: left promiscuous mode [ 149.166384][ T61] veth0_vlan: left promiscuous mode [ 149.238643][T10134] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1225'. [ 149.705296][ T5946] Bluetooth: hci1: command tx timeout [ 149.866184][ T5946] Bluetooth: hci2: command 0x041b tx timeout [ 150.125557][ T61] team0 (unregistering): Port device team_slave_1 removed [ 150.236656][ T61] team0 (unregistering): Port device team_slave_0 removed [ 150.993274][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 150.993587][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 151.135653][T10148] nfs4: Bad value for 'source' [ 151.141029][ T9975] veth0_vlan: entered promiscuous mode [ 151.184969][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.188592][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.205511][ T9975] veth1_vlan: entered promiscuous mode [ 151.218157][T10152] FAULT_INJECTION: forcing a failure. [ 151.218157][T10152] name failslab, interval 1, probability 0, space 0, times 0 [ 151.223354][T10152] CPU: 2 UID: 0 PID: 10152 Comm: syz.4.1231 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 151.223379][T10152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.223390][T10152] Call Trace: [ 151.223396][T10152] [ 151.223403][T10152] dump_stack_lvl+0x16c/0x1f0 [ 151.223462][T10152] should_fail_ex+0x512/0x640 [ 151.223494][T10152] ? fs_reclaim_acquire+0xae/0x150 [ 151.223514][T10152] ? tomoyo_encode2+0x100/0x3e0 [ 151.223537][T10152] should_failslab+0xc2/0x120 [ 151.223562][T10152] __kmalloc_noprof+0xd2/0x510 [ 151.223584][T10152] ? d_absolute_path+0x136/0x1a0 [ 151.223606][T10152] tomoyo_encode2+0x100/0x3e0 [ 151.223635][T10152] tomoyo_encode+0x29/0x50 [ 151.223657][T10152] tomoyo_realpath_from_path+0x18f/0x6e0 [ 151.223692][T10152] tomoyo_check_open_permission+0x2ab/0x3c0 [ 151.223713][T10152] ? init_file+0x93/0x4c0 [ 151.223739][T10152] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 151.223759][T10152] ? ovl_dir_read_merged+0x349/0x5c0 [ 151.223783][T10152] ? iterate_dir+0x293/0xb40 [ 151.223802][T10152] ? __x64_sys_getdents64+0x13c/0x2c0 [ 151.223852][T10152] ? do_raw_spin_lock+0x12c/0x2b0 [ 151.223882][T10152] tomoyo_file_open+0x6b/0x90 [ 151.223899][T10152] security_file_open+0x84/0x1e0 [ 151.223925][T10152] do_dentry_open+0x596/0x1c10 [ 151.223948][T10152] ? lockdep_init_map_type+0x5c/0x280 [ 151.223980][T10152] vfs_open+0x82/0x3f0 [ 151.223999][T10152] dentry_open+0x71/0xd0 [ 151.224014][T10152] ovl_path_open+0x198/0x1f0 [ 151.224041][T10152] ovl_dir_read_merged+0x349/0x5c0 [ 151.224063][T10152] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 151.224091][T10152] ? __pfx_ovl_fill_merge+0x10/0x10 [ 151.224125][T10152] ovl_iterate+0x86c/0xe40 [ 151.224150][T10152] ? __pfx_down_read_killable+0x10/0x10 [ 151.224172][T10152] ? __pfx_ovl_iterate+0x10/0x10 [ 151.224192][T10152] wrap_directory_iterator+0xa2/0xe0 [ 151.224244][T10152] iterate_dir+0x293/0xb40 [ 151.224272][T10152] __x64_sys_getdents64+0x13c/0x2c0 [ 151.224295][T10152] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 151.224313][T10152] ? fput+0x70/0xf0 [ 151.224327][T10152] ? __pfx_filldir64+0x10/0x10 [ 151.224360][T10152] do_syscall_64+0xcd/0x4c0 [ 151.224389][T10152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.224407][T10152] RIP: 0033:0x7f650cb8e929 [ 151.224423][T10152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.224439][T10152] RSP: 002b:00007f650d9ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 151.224462][T10152] RAX: ffffffffffffffda RBX: 00007f650cdb5fa0 RCX: 00007f650cb8e929 [ 151.224473][T10152] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000003 [ 151.224483][T10152] RBP: 00007f650d9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 151.224494][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.224503][T10152] R13: 0000000000000000 R14: 00007f650cdb5fa0 R15: 00007ffeccf44a48 [ 151.224529][T10152] [ 151.224552][T10152] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.241478][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.356856][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.377098][ T9975] veth0_macvtap: entered promiscuous mode [ 151.389461][ T9975] veth1_macvtap: entered promiscuous mode [ 151.412094][ T9975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.430243][ T9975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.436810][ T9975] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.440863][ T9975] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.444373][ T9975] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.448996][ T9975] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.478567][ T40] audit: type=1400 audit(2000000056.133:658): avc: denied { connect } for pid=10158 comm="syz.6.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.089290][ T5952] Bluetooth: hci2: command 0x041b tx timeout [ 152.097088][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.101022][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.141518][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.156388][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.157936][T10170] MINIX-fs: blocksize too small for device [ 152.276473][T10178] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 152.386202][T10185] FAULT_INJECTION: forcing a failure. [ 152.386202][T10185] name failslab, interval 1, probability 0, space 0, times 0 [ 152.393326][T10185] CPU: 3 UID: 0 PID: 10185 Comm: syz.6.1241 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 152.393352][T10185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.393363][T10185] Call Trace: [ 152.393369][T10185] [ 152.393377][T10185] dump_stack_lvl+0x16c/0x1f0 [ 152.393407][T10185] should_fail_ex+0x512/0x640 [ 152.393429][T10185] ? __kmalloc_noprof+0xbf/0x510 [ 152.393454][T10185] ? ovl_cache_entry_new+0x60/0x750 [ 152.393475][T10185] should_failslab+0xc2/0x120 [ 152.393499][T10185] __kmalloc_noprof+0xd2/0x510 [ 152.393522][T10185] ? offset_dir_lookup+0x1d1/0x360 [ 152.393547][T10185] ovl_cache_entry_new+0x60/0x750 [ 152.393575][T10185] ovl_fill_merge+0x2c1/0xa90 [ 152.393601][T10185] ? __pfx_ovl_fill_merge+0x10/0x10 [ 152.393623][T10185] offset_readdir+0x458/0x6d0 [ 152.393651][T10185] iterate_dir+0x293/0xb40 [ 152.393676][T10185] ovl_dir_read_merged+0x3e1/0x5c0 [ 152.393700][T10185] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 152.393735][T10185] ? __pfx_ovl_fill_merge+0x10/0x10 [ 152.393772][T10185] ovl_iterate+0x86c/0xe40 [ 152.393797][T10185] ? __pfx_down_read_killable+0x10/0x10 [ 152.393818][T10185] ? __pfx_ovl_iterate+0x10/0x10 [ 152.393840][T10185] wrap_directory_iterator+0xa2/0xe0 [ 152.393861][T10185] iterate_dir+0x293/0xb40 [ 152.393881][T10185] __x64_sys_getdents64+0x13c/0x2c0 [ 152.393902][T10185] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 152.393920][T10185] ? fput+0x70/0xf0 [ 152.393932][T10185] ? __pfx_filldir64+0x10/0x10 [ 152.393950][T10185] ? ovl_dir_llseek+0x2c2/0x4d0 [ 152.393977][T10185] do_syscall_64+0xcd/0x4c0 [ 152.394002][T10185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.394017][T10185] RIP: 0033:0x7f409b78e929 [ 152.394032][T10185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.394047][T10185] RSP: 002b:00007f409c5be038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 152.394063][T10185] RAX: ffffffffffffffda RBX: 00007f409b9b5fa0 RCX: 00007f409b78e929 [ 152.394073][T10185] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000003 [ 152.394083][T10185] RBP: 00007f409c5be090 R08: 0000000000000000 R09: 0000000000000000 [ 152.394092][T10185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.394101][T10185] R13: 0000000000000000 R14: 00007f409b9b5fa0 R15: 00007ffdda989088 [ 152.394123][T10185] [ 154.312911][ T5952] Bluetooth: hci2: command 0x041b tx timeout [ 154.694561][T10188] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1242'. [ 154.739657][T10195] tmpfs: Unknown parameter 'dont_hash' [ 154.745381][T10195] usb usb9: check_ctrlrecip: process 10195 (syz.4.1250) requesting ep 01 but needs 81 [ 154.749839][T10195] usb usb9: usbfs: process 10195 (syz.4.1250) did not claim interface 0 before use [ 154.830772][ T40] audit: type=1400 audit(2000000059.267:659): avc: denied { execute } for pid=10197 comm="syz.7.1244" path="/sys/power/resume" dev="sysfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 154.832732][T10200] sp0: Synchronizing with TNC [ 154.932585][T10204] ieee802154 phy1 wpan1: encryption failed: -22 [ 154.976025][ T40] audit: type=1400 audit(2000000059.407:660): avc: denied { append } for pid=10208 comm="syz.6.1247" name="video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 155.045551][T10213] FAULT_INJECTION: forcing a failure. [ 155.045551][T10213] name failslab, interval 1, probability 0, space 0, times 0 [ 155.051008][T10213] CPU: 1 UID: 0 PID: 10213 Comm: syz.6.1249 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 155.051037][T10213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.051049][T10213] Call Trace: [ 155.051057][T10213] [ 155.051065][T10213] dump_stack_lvl+0x16c/0x1f0 [ 155.051097][T10213] should_fail_ex+0x512/0x640 [ 155.051121][T10213] ? __kmalloc_noprof+0xbf/0x510 [ 155.051147][T10213] ? ovl_cache_entry_new+0x60/0x750 [ 155.051170][T10213] should_failslab+0xc2/0x120 [ 155.051195][T10213] __kmalloc_noprof+0xd2/0x510 [ 155.051225][T10213] ovl_cache_entry_new+0x60/0x750 [ 155.051256][T10213] ovl_fill_merge+0x2c1/0xa90 [ 155.051284][T10213] ? __pfx_ovl_fill_merge+0x10/0x10 [ 155.051308][T10213] offset_readdir+0x458/0x6d0 [ 155.051339][T10213] iterate_dir+0x293/0xb40 [ 155.051366][T10213] ovl_dir_read_merged+0x3e1/0x5c0 [ 155.051392][T10213] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 155.051422][T10213] ? __pfx_ovl_fill_merge+0x10/0x10 [ 155.051461][T10213] ovl_iterate+0x86c/0xe40 [ 155.051487][T10213] ? __pfx_down_read_killable+0x10/0x10 [ 155.051509][T10213] ? __pfx_ovl_iterate+0x10/0x10 [ 155.051533][T10213] wrap_directory_iterator+0xa2/0xe0 [ 155.051556][T10213] iterate_dir+0x293/0xb40 [ 155.051582][T10213] __x64_sys_getdents64+0x13c/0x2c0 [ 155.051604][T10213] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 155.051623][T10213] ? fput+0x70/0xf0 [ 155.051638][T10213] ? __pfx_filldir64+0x10/0x10 [ 155.051668][T10213] do_syscall_64+0xcd/0x4c0 [ 155.051697][T10213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.051715][T10213] RIP: 0033:0x7f409b78e929 [ 155.051736][T10213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.051753][T10213] RSP: 002b:00007f409c5be038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 155.051770][T10213] RAX: ffffffffffffffda RBX: 00007f409b9b5fa0 RCX: 00007f409b78e929 [ 155.051782][T10213] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000003 [ 155.051793][T10213] RBP: 00007f409c5be090 R08: 0000000000000000 R09: 0000000000000000 [ 155.051803][T10213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.051814][T10213] R13: 0000000000000000 R14: 00007f409b9b5fa0 R15: 00007ffdda989088 [ 155.051841][T10213] [ 155.094633][ T9] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 155.210601][T10216] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 155.210695][T10217] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 155.214901][T10216] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 155.217108][T10217] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 155.328542][ T9] usb 12-1: Using ep0 maxpacket: 8 [ 155.333256][ T9] usb 12-1: config index 0 descriptor too short (expected 5138, got 18) [ 155.334596][T10219] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1252'. [ 155.336210][ T9] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.343135][ T9] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 155.348712][ T9] usb 12-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 155.352747][ T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.355489][ T9] usb 12-1: Product: syz [ 155.357464][ T9] usb 12-1: Manufacturer: syz [ 155.358933][ T9] usb 12-1: SerialNumber: syz [ 155.361703][ T9] usb 12-1: config 0 descriptor?? [ 155.380887][T10221] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1253'. [ 155.580906][ T40] audit: type=1400 audit(2000000059.969:661): avc: denied { ioctl } for pid=10197 comm="syz.7.1244" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 155.783080][ T40] audit: type=1400 audit(2000000060.156:662): avc: denied { read } for pid=10225 comm="syz.2.1255" path="socket:[34834]" dev="sockfs" ino=34834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 156.043639][T10236] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 156.053016][T10236] ubi31: attaching mtd0 [ 156.058494][T10236] ubi31: scanning is finished [ 156.060556][T10236] ubi31: empty MTD device detected [ 156.157996][T10236] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 156.161680][T10236] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 156.165383][T10236] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 156.168630][T10236] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 156.171808][T10236] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 156.174691][T10236] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 156.178046][T10236] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3335133844 [ 156.182723][T10236] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 156.188916][T10239] ubi31: background thread "ubi_bgt31d" started, PID 10239 [ 156.402795][T10246] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1261'. [ 156.454303][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 156.541655][T10253] netlink: 'syz.6.1264': attribute type 1 has an invalid length. [ 156.547578][ T40] audit: type=1400 audit(2000000060.876:663): avc: denied { write } for pid=10252 comm="syz.6.1264" path="socket:[36945]" dev="sockfs" ino=36945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 156.804023][ T40] audit: type=1400 audit(2000000061.119:664): avc: denied { ioctl } for pid=10275 comm="syz.4.1272" path="/dev/ptyqd" dev="devtmpfs" ino=140 ioctlcmd=0x5403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 156.869184][ T40] audit: type=1400 audit(2000000061.166:665): avc: granted { setsecparam } for pid=10275 comm="syz.4.1272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 157.134569][T10285] netlink: 'syz.6.1275': attribute type 1 has an invalid length. [ 157.140395][T10285] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1275'. [ 157.271159][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1276'. [ 157.318360][T10293] netlink: 14212 bytes leftover after parsing attributes in process `syz.4.1278'. [ 157.643641][T10304] netlink: 'syz.6.1283': attribute type 5 has an invalid length. [ 157.649177][T10304] netlink: 'syz.6.1283': attribute type 5 has an invalid length. [ 157.653123][T10304] netlink: 'syz.6.1283': attribute type 5 has an invalid length. [ 157.657113][T10304] netlink: 'syz.6.1283': attribute type 5 has an invalid length. [ 157.670246][T10304] netlink: 'syz.6.1283': attribute type 5 has an invalid length. [ 157.673673][T10304] netlink: 'syz.6.1283': attribute type 5 has an invalid length. [ 157.677001][T10304] netlink: 'syz.6.1283': attribute type 5 has an invalid length. [ 157.680182][T10304] netlink: 'syz.6.1283': attribute type 5 has an invalid length. [ 157.872933][T10321] FAULT_INJECTION: forcing a failure. [ 157.872933][T10321] name failslab, interval 1, probability 0, space 0, times 0 [ 157.878164][T10321] CPU: 0 UID: 0 PID: 10321 Comm: syz.6.1288 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 157.878188][T10321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.878199][T10321] Call Trace: [ 157.878204][T10321] [ 157.878212][T10321] dump_stack_lvl+0x16c/0x1f0 [ 157.878240][T10321] should_fail_ex+0x512/0x640 [ 157.878262][T10321] ? __kmalloc_noprof+0xbf/0x510 [ 157.878284][T10321] ? ovl_cache_entry_new+0x60/0x750 [ 157.878304][T10321] should_failslab+0xc2/0x120 [ 157.878327][T10321] __kmalloc_noprof+0xd2/0x510 [ 157.878351][T10321] ovl_cache_entry_new+0x60/0x750 [ 157.878376][T10321] ovl_fill_merge+0x2c1/0xa90 [ 157.878402][T10321] ? __pfx_ovl_fill_merge+0x10/0x10 [ 157.878422][T10321] offset_readdir+0x458/0x6d0 [ 157.878447][T10321] iterate_dir+0x293/0xb40 [ 157.878470][T10321] ovl_dir_read_merged+0x3e1/0x5c0 [ 157.878492][T10321] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 157.878518][T10321] ? __pfx_ovl_fill_merge+0x10/0x10 [ 157.878552][T10321] ovl_iterate+0x86c/0xe40 [ 157.878574][T10321] ? __pfx_down_read_killable+0x10/0x10 [ 157.878593][T10321] ? __pfx_ovl_iterate+0x10/0x10 [ 157.878619][T10321] wrap_directory_iterator+0xa2/0xe0 [ 157.878639][T10321] iterate_dir+0x293/0xb40 [ 157.878661][T10321] __x64_sys_getdents64+0x13c/0x2c0 [ 157.878680][T10321] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 157.878697][T10321] ? fput+0x70/0xf0 [ 157.878711][T10321] ? __pfx_filldir64+0x10/0x10 [ 157.878735][T10321] do_syscall_64+0xcd/0x4c0 [ 157.878761][T10321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.878776][T10321] RIP: 0033:0x7f409b78e929 [ 157.878789][T10321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.878804][T10321] RSP: 002b:00007f409c5be038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 157.878818][T10321] RAX: ffffffffffffffda RBX: 00007f409b9b5fa0 RCX: 00007f409b78e929 [ 157.878827][T10321] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000003 [ 157.878836][T10321] RBP: 00007f409c5be090 R08: 0000000000000000 R09: 0000000000000000 [ 157.878845][T10321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.878855][T10321] R13: 0000000000000000 R14: 00007f409b9b5fa0 R15: 00007ffdda989088 [ 157.878877][T10321] [ 157.972926][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.995958][T10323] use of bytesused == 0 is deprecated and will be removed in the future, [ 157.997227][ T840] usb 12-1: USB disconnect, device number 2 [ 158.000086][T10323] use the actual size instead. [ 158.006878][T10323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1289'. [ 158.012108][T10323] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1289'. [ 158.241077][T10340] syz.7.1296: attempt to access beyond end of device [ 158.241077][T10340] nbd7: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 158.246608][T10340] XFS (nbd7): SB validate failed with error -5. [ 158.448581][T10357] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 158.452804][T10358] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 158.751453][T10380] geneve2: entered allmulticast mode [ 158.885312][ T40] audit: type=1400 audit(2000000063.055:666): avc: denied { connect } for pid=10390 comm="syz.2.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.896406][ T40] audit: type=1400 audit(2000000063.065:667): avc: denied { bind } for pid=10390 comm="syz.2.1313" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.906908][ T40] audit: type=1400 audit(2000000063.065:668): avc: denied { name_bind } for pid=10390 comm="syz.2.1313" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 159.041305][T10397] usb usb8: usbfs: process 10397 (syz.2.1315) did not claim interface 0 before use [ 159.045102][T10397] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.954100][T10424] macvlan0: entered promiscuous mode [ 159.956557][T10424] macvlan0: entered allmulticast mode [ 159.960222][T10424] veth1_vlan: entered allmulticast mode [ 160.017591][ T29] hid (null): global environment stack underflow [ 160.022016][ T29] hid (null): global environment stack underflow [ 160.024748][ T29] hid (null): unknown global tag 0xe [ 160.027128][ T29] hid (null): unknown global tag 0xd [ 160.036512][ T29] hid-generic FFFA:FFFFFC01:0040.0005: global environment stack underflow [ 160.039692][ T29] hid-generic FFFA:FFFFFC01:0040.0005: item 0 2 1 11 parsing failed [ 160.045963][ T29] hid-generic FFFA:FFFFFC01:0040.0005: probe with driver hid-generic failed with error -22 [ 160.072990][T10436] __nla_validate_parse: 4 callbacks suppressed [ 160.073006][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'. [ 160.316039][T10452] FAULT_INJECTION: forcing a failure. [ 160.316039][T10452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.324173][T10452] CPU: 0 UID: 0 PID: 10452 Comm: syz.2.1334 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 160.324192][T10452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.324199][T10452] Call Trace: [ 160.324204][T10452] [ 160.324209][T10452] dump_stack_lvl+0x16c/0x1f0 [ 160.324248][T10452] should_fail_ex+0x512/0x640 [ 160.324272][T10452] _copy_to_user+0x32/0xd0 [ 160.324290][T10452] simple_read_from_buffer+0xcb/0x170 [ 160.324306][T10452] proc_fail_nth_read+0x197/0x270 [ 160.324320][T10452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.324335][T10452] ? rw_verify_area+0xcf/0x680 [ 160.324352][T10452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.324371][T10452] vfs_read+0x1e1/0xc60 [ 160.324391][T10452] ? __pfx___mutex_lock+0x10/0x10 [ 160.324409][T10452] ? __pfx_vfs_read+0x10/0x10 [ 160.324426][T10452] ? __fget_files+0x20e/0x3c0 [ 160.324445][T10452] ksys_read+0x12a/0x250 [ 160.324458][T10452] ? __pfx_ksys_read+0x10/0x10 [ 160.324475][T10452] do_syscall_64+0xcd/0x4c0 [ 160.324493][T10452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.324505][T10452] RIP: 0033:0x7fc50b78d33c [ 160.324515][T10452] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 160.324526][T10452] RSP: 002b:00007fc50c669030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.324537][T10452] RAX: ffffffffffffffda RBX: 00007fc50b9b5fa0 RCX: 00007fc50b78d33c [ 160.324543][T10452] RDX: 000000000000000f RSI: 00007fc50c6690a0 RDI: 0000000000000004 [ 160.324550][T10452] RBP: 00007fc50c669090 R08: 0000000000000000 R09: 0000000000000000 [ 160.324556][T10452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.324562][T10452] R13: 0000000000000000 R14: 00007fc50b9b5fa0 R15: 00007ffc665dc5f8 [ 160.324576][T10452] [ 160.403957][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.417899][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1335'. [ 160.421518][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1335'. [ 160.640023][T10473] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.698320][T10476] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1343'. [ 160.886914][T10491] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 160.891726][T10491] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 161.111726][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 161.111741][ T40] audit: type=1400 audit(2000000065.141:672): avc: denied { setopt } for pid=10497 comm="syz.7.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 161.122547][ T40] audit: type=1400 audit(2000000065.151:673): avc: denied { read } for pid=10497 comm="syz.7.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.497754][T10507] futex_wake_op: syz.4.1354 tries to shift op by 32; fix this program [ 161.501916][T10506] futex_wake_op: syz.4.1354 tries to shift op by 32; fix this program [ 161.593882][T10509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1356'. [ 161.606756][T10509] loop2: detected capacity change from 0 to 7 [ 161.622653][T10509] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 161.625314][T10509] loop2: partition table partially beyond EOD, truncated [ 161.628474][T10509] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 161.720432][T10517] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1358'. [ 161.730745][T10517] geneve2: entered promiscuous mode [ 161.741040][T10517] usb usb9: usbfs: process 10517 (syz.6.1358) did not claim interface 0 before use [ 161.780620][T10519] openvswitch: netlink: Duplicate key (type 0). [ 161.877994][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 161.931280][T10534] tipc: Started in network mode [ 161.933389][T10534] tipc: Node identity ac1414aa, cluster identity 4711 [ 161.937929][T10534] tipc: Enabling of bearer rejected, failed to enable media [ 162.034387][ T40] audit: type=1400 audit(2000000066.011:674): avc: denied { setopt } for pid=10545 comm="syz.2.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.985847][T10597] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1385'. [ 164.072783][ T40] audit: type=1400 audit(2000000067.910:675): avc: denied { write } for pid=10605 comm="syz.2.1389" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 164.162827][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'. [ 164.198799][T10630] validate_nla: 4 callbacks suppressed [ 164.198815][T10630] netlink: 'syz.2.1396': attribute type 21 has an invalid length. [ 164.208384][T10630] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1396'. [ 165.102313][T10667] PKCS8: Unsupported PKCS#8 version [ 165.156569][T10670] exFAT-fs (nullb0): invalid boot record signature [ 165.160444][T10670] exFAT-fs (nullb0): failed to read boot sector [ 165.163112][T10670] exFAT-fs (nullb0): failed to recognize exfat type [ 165.331207][ T40] audit: type=1400 audit(2000000069.089:676): avc: denied { getopt } for pid=10687 comm="syz.2.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 165.331820][T10688] netlink: 'syz.2.1412': attribute type 3 has an invalid length. [ 165.347268][ T40] audit: type=1400 audit(2000000069.107:677): avc: denied { map } for pid=10687 comm="syz.2.1412" path="socket:[35589]" dev="sockfs" ino=35589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 165.553510][ T40] audit: type=1400 audit(2000000069.294:678): avc: denied { execute } for pid=10690 comm="syz.2.1413" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 165.683845][T10709] __nla_validate_parse: 5 callbacks suppressed [ 165.683864][T10709] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1419'. [ 165.761278][T10720] sp0: Synchronizing with TNC [ 165.768706][ T40] audit: type=1400 audit(2000000069.500:679): avc: denied { getopt } for pid=10717 comm="syz.2.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 165.882927][T10727] netlink: 'syz.7.1424': attribute type 11 has an invalid length. [ 165.886663][T10727] netlink: 'syz.7.1424': attribute type 11 has an invalid length. [ 165.890516][T10727] netlink: 'syz.7.1424': attribute type 11 has an invalid length. [ 165.894988][T10727] netlink: 'syz.7.1424': attribute type 11 has an invalid length. [ 165.897167][T10725] binfmt_misc: register: failed to install interpreter file ./file0 [ 165.898729][T10727] netlink: 'syz.7.1424': attribute type 11 has an invalid length. [ 165.908640][T10727] netlink: 'syz.7.1424': attribute type 11 has an invalid length. [ 165.911553][T10727] netlink: 'syz.7.1424': attribute type 11 has an invalid length. [ 165.915428][T10727] netlink: 'syz.7.1424': attribute type 11 has an invalid length. [ 166.113486][T10733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1426'. [ 166.141024][T10733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.150921][T10733] tipc: Started in network mode [ 166.153020][T10733] tipc: Node identity 4, cluster identity 4711 [ 166.155534][T10733] tipc: Node number set to 4 [ 166.160829][T10733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=10733 comm=syz.6.1426 [ 166.388721][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1444'. [ 166.393413][ T6003] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 166.564561][ T6003] usb 7-1: Using ep0 maxpacket: 32 [ 166.568677][ T6003] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.585074][ T6003] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.591319][ T6003] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 166.596552][ T6003] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 166.599209][ T6003] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.603781][ T6003] usb 7-1: config 0 descriptor?? [ 166.773733][T10799] ip6erspan0: entered promiscuous mode [ 167.066762][ T6003] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0006/input/input22 [ 167.081622][ T6003] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0006/input/input23 [ 167.087192][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1451'. [ 167.098118][ T6003] kye 0003:0458:5011.0006: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 167.267281][T10750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.271365][T10750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.279933][ T840] usb 7-1: USB disconnect, device number 9 [ 167.951024][T10836] openvswitch: netlink: IP tunnel TTL not specified. [ 168.014121][ T40] audit: type=1400 audit(2000000071.596:680): avc: denied { map } for pid=10842 comm="syz.4.1460" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 168.031631][T10845] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1461'. [ 168.059597][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 168.069141][ T40] audit: type=1400 audit(2000000071.652:681): avc: denied { nlmsg_read } for pid=10847 comm="syz.4.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.074738][T10849] /dev/nullb0: Can't open blockdev [ 168.077683][T10848] vlan3: entered allmulticast mode [ 168.086476][T10848] bond0: entered allmulticast mode [ 168.157253][ T40] audit: type=1400 audit(2000000071.726:682): avc: denied { listen } for pid=10857 comm="syz.7.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.184441][ T40] audit: type=1400 audit(2000000071.764:683): avc: denied { remount } for pid=10852 comm="syz.6.1464" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 168.184751][T10860] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1464'. [ 168.236479][T10867] can0: slcan on ttyS3. [ 168.252603][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1470'. [ 168.259877][T10869] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1470'. [ 168.277254][T10856] tmpfs: Unknown parameter 'grpquota' [ 168.307969][T10867] can0 (unregistered): slcan off ttyS3. [ 168.431549][ T5952] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 168.491880][T10890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.507012][ T40] audit: type=1400 audit(2000000072.054:684): avc: denied { ioctl } for pid=10885 comm="syz.4.1476" path="socket:[38247]" dev="sockfs" ino=38247 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 168.628268][ T40] audit: type=1400 audit(2000000072.175:685): avc: denied { write } for pid=10889 comm="syz.7.1477" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 168.737014][ T40] audit: type=1400 audit(2000000072.278:686): avc: denied { remount } for pid=10905 comm="syz.7.1480" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 168.745024][T10906] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1480'. [ 168.779796][T10912] netem: invalid attributes len -17 [ 168.782213][T10912] netem: change failed [ 168.921773][T10922] overlayfs: failed to resolve 'verity=require': -2 [ 169.203354][ T40] audit: type=1400 audit(2000000072.709:687): avc: denied { connect } for pid=10955 comm="syz.2.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 169.322539][T10971] usb usb8: usbfs: process 10971 (syz.7.1499) did not claim interface 0 before use [ 169.622848][ T6022] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 169.794769][ T6022] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 169.798325][ T6022] usb 7-1: config 0 has no interface number 0 [ 169.801331][ T6022] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.806413][ T6022] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 169.810699][ T6022] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 169.814976][ T6022] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 169.819287][ T6022] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 169.823367][ T6022] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.828568][ T6022] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 169.832138][ T6022] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.837446][ T6022] usb 7-1: config 0 descriptor?? [ 169.841150][T10975] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.843882][T10975] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.851122][ T6022] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 169.906428][T10988] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 169.919613][T10990] binder: 10989:10990 ioctl c018620c 200000000300 returned -22 [ 170.064834][ T40] audit: type=1400 audit(2000000073.522:688): avc: denied { create } for pid=10997 comm="syz.7.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 170.069368][ T5983] usb 7-1: USB disconnect, device number 10 [ 170.083578][ T5983] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 170.181133][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.300080][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.328592][T11010] sp0: Synchronizing with TNC [ 170.389844][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.431295][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.439971][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.444520][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.450731][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.459122][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.472934][T11014] Failed to initialize the IGMP autojoin socket (err -2) [ 170.498219][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.535660][ T5952] Bluetooth: hci2: hardware error 0x71 [ 170.637876][ T13] bridge_slave_1: left allmulticast mode [ 170.640010][ T13] bridge_slave_1: left promiscuous mode [ 170.648372][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.654101][ T13] bridge_slave_0: left allmulticast mode [ 170.656499][ T13] bridge_slave_0: left promiscuous mode [ 170.659289][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.950786][T11032] input: syz1 as /devices/virtual/input/input24 [ 170.951371][T11031] 9p: Unknown uid 00000000004294967295 [ 171.129443][ T40] audit: type=1400 audit(2000000074.505:689): avc: denied { link } for pid=11034 comm="syz.2.1521" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=35913874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 171.159837][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.260220][T11044] __nla_validate_parse: 4 callbacks suppressed [ 171.260238][T11044] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1524'. [ 171.330738][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.341449][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.351353][ T13] bond0 (unregistering): Released all slaves [ 171.475537][ T13] bond1 (unregistering): Released all slaves [ 171.618541][ T13] tipc: Left network mode [ 171.665404][T11014] chnl_net:caif_netlink_parms(): no params data found [ 171.828579][T11085] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1533'. [ 171.848629][T11014] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.854606][T11014] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.857154][T11014] bridge_slave_0: entered allmulticast mode [ 171.860156][T11014] bridge_slave_0: entered promiscuous mode [ 171.868442][T11014] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.871495][T11014] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.874500][T11014] bridge_slave_1: entered allmulticast mode [ 171.878721][T11014] bridge_slave_1: entered promiscuous mode [ 171.879581][T11090] cgroup: Need name or subsystem set [ 171.936538][ T13] hsr_slave_0: left promiscuous mode [ 171.939203][ T13] hsr_slave_1: left promiscuous mode [ 171.941661][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.944422][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.947829][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.950913][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.990624][ T13] veth1_macvtap: left promiscuous mode [ 171.992857][ T13] veth0_macvtap: left promiscuous mode [ 171.996155][ T13] veth1_vlan: left promiscuous mode [ 171.998482][ T13] veth0_vlan: left promiscuous mode [ 172.240331][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1538'. [ 172.549275][T11115] ufs: You didn't specify the type of your ufs filesystem [ 172.549275][T11115] [ 172.549275][T11115] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 172.549275][T11115] [ 172.549275][T11115] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 172.569490][T11115] ufs: ufstype=old is supported read-only [ 172.573000][T11115] syz.7.1540: attempt to access beyond end of device [ 172.573000][T11115] nbd7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 172.628385][ T5946] Bluetooth: hci1: command tx timeout [ 172.716769][ T5952] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 173.093533][ T13] team0 (unregistering): Port device team_slave_1 removed [ 173.191456][ T13] team0 (unregistering): Port device team_slave_0 removed [ 174.009512][T11014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.142721][T11014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.177899][T11119] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1541'. [ 174.181961][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1541'. [ 174.188853][T11119] tipc: MTU too low for tipc bearer [ 174.197637][T11119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=11119 comm=syz.4.1541 [ 174.204211][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1541'. [ 174.208628][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1541'. [ 174.254749][T11014] team0: Port device team_slave_0 added [ 174.290882][T11014] team0: Port device team_slave_1 added [ 174.336881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 174.388294][T11133] futex_wake_op: syz.4.1545 tries to shift op by -33; fix this program [ 174.394498][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 174.394513][ T40] audit: type=1400 audit(2000000077.554:692): avc: denied { accept } for pid=11131 comm="syz.4.1545" path="socket:[40353]" dev="sockfs" ino=40353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 174.467266][T11136] kAFS: No cell specified [ 174.503100][T11014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.505839][T11014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.516707][T11014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.534825][T11014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.537809][T11014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.548646][T11014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.727132][T11014] hsr_slave_0: entered promiscuous mode [ 174.730256][T11014] hsr_slave_1: entered promiscuous mode [ 174.849545][ T5952] Bluetooth: hci1: command tx timeout [ 174.854625][T11157] /dev/nullb0: Can't open blockdev [ 174.986055][ T40] audit: type=1400 audit(2000000078.115:693): avc: denied { append } for pid=11160 comm="syz.7.1549" path="/87/file0/pids.current" dev="9p" ino=35913975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.989847][T11161] netfs: Couldn't get user pages (rc=-14) [ 175.070753][T11170] netlink: 'syz.2.1552': attribute type 11 has an invalid length. [ 175.325747][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1554'. [ 175.372164][ T40] audit: type=1326 audit(2000000078.480:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.7.1555" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe98d8e929 code=0x0 [ 175.516693][T11014] netdevsim netdevsim6 netdevsim0: renamed from eth18 [ 175.536530][T11014] netdevsim netdevsim6 netdevsim1: renamed from eth19 [ 175.550740][T11014] netdevsim netdevsim6 netdevsim2: renamed from eth20 [ 175.565414][T11014] netdevsim netdevsim6 netdevsim3: renamed from eth21 [ 175.745464][T11014] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.781134][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.784089][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.788994][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.792148][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.958352][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1557'. [ 175.968557][T11193] veth0_to_team: entered promiscuous mode [ 175.971477][T11193] batadv_slave_1: entered promiscuous mode [ 176.038689][T11014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.061485][T11200] tmpfs: Unknown parameter 'uqypsrquota' [ 176.107514][T11204] batadv_slave_1: entered promiscuous mode [ 176.115384][T11204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1560'. [ 176.165919][T11207] openvswitch: netlink: IP tunnel TTL not specified. [ 176.205059][T11209] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 176.216193][ T40] audit: type=1400 audit(2000000079.266:695): avc: denied { listen } for pid=11208 comm="syz.4.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.332083][T11203] batadv_slave_1: left promiscuous mode [ 176.347055][T11216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.415138][T11220] Failed to initialize the IGMP autojoin socket (err -2) [ 176.431245][T11229] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 176.438113][T11014] veth0_vlan: entered promiscuous mode [ 176.447424][T11014] veth1_vlan: entered promiscuous mode [ 176.516643][T11234] KVM: debugfs: duplicate directory 11234-5 [ 176.519367][T11014] veth0_macvtap: entered promiscuous mode [ 176.534990][T11014] veth1_macvtap: entered promiscuous mode [ 176.597729][T11014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.625735][T11014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.633843][T11014] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 176.649642][T11014] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 176.660073][T11014] wireguard: wg0: Could not create IPv4 socket [ 176.666114][T11014] wireguard: wg1: Could not create IPv4 socket [ 176.671897][T11014] wireguard: wg2: Could not create IPv4 socket [ 176.952415][T11263] Bluetooth: (null): Invalid header checksum [ 176.959713][T11263] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 176.983186][T11268] usb usb8: usbfs: process 11268 (syz.7.1574) did not claim interface 0 before use [ 177.080901][ T40] audit: type=1400 audit(2000000080.080:696): avc: denied { module_load } for pid=11270 comm="syz.2.1575" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=3099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 177.145117][T11275] SELinux: truncated policydb string identifier [ 177.147613][T11275] SELinux: failed to load policy [ 177.304091][T11282] __nla_validate_parse: 1 callbacks suppressed [ 177.304107][T11282] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1578'. [ 177.306507][ T40] audit: type=1400 audit(2000000080.285:697): avc: denied { ioctl } for pid=11283 comm="syz.2.1579" path="socket:[39832]" dev="sockfs" ino=39832 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 177.354427][T11291] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1580'. [ 177.420938][ T6022] libceph: mon0 (1)[c::]:6789 connect error [ 177.606222][T11308] validate_nla: 58 callbacks suppressed [ 177.606238][T11308] netlink: 'syz.2.1586': attribute type 21 has an invalid length. [ 177.612051][T11308] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1586'. [ 177.708266][ T6022] libceph: mon0 (1)[c::]:6789 connect error [ 177.715425][T11319] netlink: 'syz.7.1588': attribute type 9 has an invalid length. [ 177.719376][T11319] netlink: 212012 bytes leftover after parsing attributes in process `syz.7.1588'. [ 177.774825][ T40] audit: type=1400 audit(2000000080.725:698): avc: denied { write } for pid=11322 comm="syz.7.1590" name="/" dev="configfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.841772][ T40] audit: type=1400 audit(2000000080.781:699): avc: denied { unmount } for pid=9975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 177.893165][T11329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.893809][T11327] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1592'. [ 177.900607][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'. [ 177.955447][T11333] bridge2: entered promiscuous mode [ 178.081037][ T40] audit: type=1400 audit(2000000081.015:700): avc: denied { listen } for pid=11336 comm="syz.2.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 178.251601][ T6022] libceph: mon0 (1)[c::]:6789 connect error [ 178.293555][T11297] ceph: No mds server is up or the cluster is laggy [ 178.312209][T11342] netlink: 292 bytes leftover after parsing attributes in process `syz.7.1598'. [ 178.380503][T11347] FAULT_INJECTION: forcing a failure. [ 178.380503][T11347] name failslab, interval 1, probability 0, space 0, times 0 [ 178.385475][T11347] CPU: 0 UID: 0 PID: 11347 Comm: syz.4.1601 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 178.385501][T11347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.385512][T11347] Call Trace: [ 178.385520][T11347] [ 178.385527][T11347] dump_stack_lvl+0x16c/0x1f0 [ 178.385585][T11347] should_fail_ex+0x512/0x640 [ 178.385618][T11347] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 178.385648][T11347] should_failslab+0xc2/0x120 [ 178.385679][T11347] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 178.385703][T11347] ? xfrm_add_sa+0x27b7/0x5c00 [ 178.385731][T11347] kmemdup_noprof+0x29/0x60 [ 178.385755][T11347] xfrm_add_sa+0x27b7/0x5c00 [ 178.385785][T11347] ? cap_capable+0xb3/0x250 [ 178.385804][T11347] ? __pfx_xfrm_add_sa+0x10/0x10 [ 178.385831][T11347] ? __nla_parse+0x40/0x60 [ 178.385847][T11347] ? __pfx_xfrm_add_sa+0x10/0x10 [ 178.385871][T11347] xfrm_user_rcv_msg+0x58b/0xc00 [ 178.385898][T11347] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 178.385918][T11347] ? kfree_skbmem+0x1a4/0x1f0 [ 178.385940][T11347] ? consume_skb+0xcc/0x100 [ 178.385958][T11347] ? find_held_lock+0x2b/0x80 [ 178.385980][T11347] ? __dev_queue_xmit+0x896/0x43e0 [ 178.386031][T11347] ? __pfx___might_resched+0x10/0x10 [ 178.386056][T11347] ? rcu_is_watching+0x12/0xc0 [ 178.386082][T11347] netlink_rcv_skb+0x155/0x420 [ 178.386102][T11347] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 178.386126][T11347] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.386161][T11347] ? netlink_deliver_tap+0x1ae/0xd30 [ 178.386182][T11347] xfrm_netlink_rcv+0x71/0x90 [ 178.386202][T11347] netlink_unicast+0x53d/0x7f0 [ 178.386225][T11347] ? __pfx_netlink_unicast+0x10/0x10 [ 178.386252][T11347] netlink_sendmsg+0x8d1/0xdd0 [ 178.386277][T11347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.386306][T11347] ____sys_sendmsg+0xa98/0xc70 [ 178.386327][T11347] ? copy_msghdr_from_user+0x10a/0x160 [ 178.386353][T11347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.386386][T11347] ___sys_sendmsg+0x134/0x1d0 [ 178.386414][T11347] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.386443][T11347] ? __lock_acquire+0x622/0x1c90 [ 178.386504][T11347] __sys_sendmsg+0x16d/0x220 [ 178.386531][T11347] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.386574][T11347] do_syscall_64+0xcd/0x4c0 [ 178.386603][T11347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.386621][T11347] RIP: 0033:0x7f650cb8e929 [ 178.386637][T11347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.386656][T11347] RSP: 002b:00007f650d9ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.386673][T11347] RAX: ffffffffffffffda RBX: 00007f650cdb5fa0 RCX: 00007f650cb8e929 [ 178.386685][T11347] RDX: 0000000000008080 RSI: 0000200000000040 RDI: 0000000000000003 [ 178.386697][T11347] RBP: 00007f650d9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 178.386707][T11347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.386716][T11347] R13: 0000000000000000 R14: 00007f650cdb5fa0 R15: 00007ffeccf44a48 [ 178.386741][T11347] [ 178.558640][T11354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1604'. [ 178.558655][T11355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1604'. [ 178.626877][T11361] No source specified [ 178.681264][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1605'. [ 178.826634][T11141] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 178.873743][T11367] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 179.003691][T11141] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 179.007473][T11141] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.011077][T11141] usb 9-1: Product: syz [ 179.012882][T11141] usb 9-1: Manufacturer: syz [ 179.014799][T11141] usb 9-1: SerialNumber: syz [ 179.022113][T11141] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 179.032374][ T40] audit: type=1400 audit(2000000081.913:701): avc: denied { setattr } for pid=11366 comm="syz.7.1607" name="file0" dev="fuse" ino=18446739675663040510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 179.039816][T11141] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 179.273297][T11356] input: syz1 as /devices/virtual/input/input25 [ 179.285366][T11356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.289466][T11356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.308916][ T52] usb 9-1: USB disconnect, device number 5 [ 179.546879][T11371] netlink: 'syz.2.1608': attribute type 12 has an invalid length. [ 179.820758][ T40] audit: type=1400 audit(2000000082.643:702): avc: denied { append } for pid=11380 comm="syz.2.1611" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 180.002721][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.012353][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.020278][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.024903][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.028872][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.053813][T11399] Failed to initialize the IGMP autojoin socket (err -2) [ 180.152143][T11141] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 180.155238][T11141] ath9k_htc: Failed to initialize the device [ 180.159551][ T52] usb 9-1: ath9k_htc: USB layer deinitialized [ 180.199032][T11407] loop2: detected capacity change from 0 to 7 [ 180.202445][T11407] Dev loop2: unable to read RDB block 7 [ 180.205643][T11407] loop2: unable to read partition table [ 180.207926][T11407] loop2: partition table beyond EOD, truncated [ 180.210209][T11407] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 180.485519][T11419] binder: 11418:11419 ioctl c0306201 2000000003c0 returned -14 [ 180.489426][T11419] binder_alloc: 11418: binder_alloc_buf, no vma [ 180.582097][T11421] SELinux: failed to load policy [ 180.691781][ T40] audit: type=1400 audit(2000000083.456:703): avc: denied { mounton } for pid=11423 comm="syz.7.1625" path="/116/file0/bus" dev="ramfs" ino=43200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 180.696748][T11425] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 180.708069][T11425] overlayfs: failed to set xattr on upper [ 180.710357][T11425] overlayfs: ...falling back to redirect_dir=nofollow. [ 180.713136][T11425] overlayfs: ...falling back to index=off. [ 180.715500][T11425] overlayfs: ...falling back to uuid=null. [ 180.723376][ T40] audit: type=1400 audit(2000000083.484:704): avc: denied { read } for pid=11423 comm="syz.7.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 180.778020][ T40] audit: type=1326 audit(2000000083.541:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11387 comm="syz.4.1614" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650cb8e929 code=0x7fc00000 [ 180.793531][ T40] audit: type=1326 audit(2000000083.541:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11387 comm="syz.4.1614" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f650cb8e929 code=0x7fc00000 [ 180.803223][ T40] audit: type=1326 audit(2000000083.541:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11387 comm="syz.4.1614" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650cb8e929 code=0x7fc00000 [ 180.817935][ T40] audit: type=1326 audit(2000000083.541:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11387 comm="syz.4.1614" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650cb8e929 code=0x7fc00000 [ 180.832964][ T40] audit: type=1326 audit(2000000083.541:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11387 comm="syz.4.1614" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650cb8e929 code=0x7fc00000 [ 180.844492][ T40] audit: type=1326 audit(2000000083.541:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11387 comm="syz.4.1614" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650cb8e929 code=0x7fc00000 [ 180.856940][ T40] audit: type=1326 audit(2000000083.541:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11387 comm="syz.4.1614" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f650cb8e929 code=0x7fc00000 [ 180.924785][T11434] cdrom: dropping to single frame dma [ 180.971571][T11439] loop6: detected capacity change from 0 to 63 [ 181.520876][T11425] delete_channel: no stack [ 181.675002][T11455] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 181.714265][T11462] FAULT_INJECTION: forcing a failure. [ 181.714265][T11462] name failslab, interval 1, probability 0, space 0, times 0 [ 181.734679][T11462] CPU: 2 UID: 0 PID: 11462 Comm: syz.7.1636 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 181.734707][T11462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.734717][T11462] Call Trace: [ 181.734723][T11462] [ 181.734730][T11462] dump_stack_lvl+0x16c/0x1f0 [ 181.734761][T11462] should_fail_ex+0x512/0x640 [ 181.734783][T11462] ? __kmalloc_node_noprof+0xc5/0x500 [ 181.734806][T11462] should_failslab+0xc2/0x120 [ 181.734829][T11462] __kmalloc_node_noprof+0xd8/0x500 [ 181.734849][T11462] ? __up_read+0x1f8/0x750 [ 181.734865][T11462] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 181.734885][T11462] ? __pfx_crypto_skcipher_extsize+0x10/0x10 [ 181.734904][T11462] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 181.734922][T11462] crypto_create_tfm_node+0x85/0x350 [ 181.734941][T11462] crypto_spawn_tfm2+0x62/0xb0 [ 181.734963][T11462] ? __pfx_crypto_authenc_init_tfm+0x10/0x10 [ 181.734983][T11462] crypto_authenc_init_tfm+0x71/0x230 [ 181.735047][T11462] ? __pfx_crypto_authenc_init_tfm+0x10/0x10 [ 181.735069][T11462] crypto_aead_init_tfm+0x149/0x1b0 [ 181.735095][T11462] crypto_create_tfm_node+0x124/0x350 [ 181.735115][T11462] crypto_alloc_tfm_node+0x102/0x260 [ 181.735140][T11462] esp_init_authenc.constprop.0+0x1dd/0xb90 [ 181.735171][T11462] ? __pfx_esp_init_authenc.constprop.0+0x10/0x10 [ 181.735210][T11462] ? find_held_lock+0x2b/0x80 [ 181.735232][T11462] esp_init_state+0x2f8/0x530 [ 181.735257][T11462] __xfrm_init_state+0x6fb/0x1c10 [ 181.735281][T11462] ? try_to_merge_one_page+0x14c2/0x21e0 [ 181.735305][T11462] xfrm_add_sa+0x2ec8/0x5c00 [ 181.735334][T11462] ? cap_capable+0xb3/0x250 [ 181.735352][T11462] ? __pfx_xfrm_add_sa+0x10/0x10 [ 181.735376][T11462] ? __nla_parse+0x40/0x60 [ 181.735392][T11462] ? __pfx_xfrm_add_sa+0x10/0x10 [ 181.735413][T11462] xfrm_user_rcv_msg+0x58b/0xc00 [ 181.735439][T11462] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 181.735456][T11462] ? kfree_skbmem+0x1a4/0x1f0 [ 181.735476][T11462] ? consume_skb+0xcc/0x100 [ 181.735493][T11462] ? find_held_lock+0x2b/0x80 [ 181.735511][T11462] ? __dev_queue_xmit+0x896/0x43e0 [ 181.735564][T11462] ? __pfx___might_resched+0x10/0x10 [ 181.735586][T11462] ? rcu_is_watching+0x12/0xc0 [ 181.735610][T11462] netlink_rcv_skb+0x155/0x420 [ 181.735628][T11462] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 181.735650][T11462] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 181.735679][T11462] ? netlink_deliver_tap+0x1ae/0xd30 [ 181.735699][T11462] xfrm_netlink_rcv+0x71/0x90 [ 181.735716][T11462] netlink_unicast+0x53d/0x7f0 [ 181.735737][T11462] ? __pfx_netlink_unicast+0x10/0x10 [ 181.735762][T11462] netlink_sendmsg+0x8d1/0xdd0 [ 181.735784][T11462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.735811][T11462] ____sys_sendmsg+0xa98/0xc70 [ 181.735830][T11462] ? copy_msghdr_from_user+0x10a/0x160 [ 181.735853][T11462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.735883][T11462] ___sys_sendmsg+0x134/0x1d0 [ 181.735908][T11462] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.735929][T11462] ? __lock_acquire+0x622/0x1c90 [ 181.736003][T11462] __sys_sendmsg+0x16d/0x220 [ 181.736027][T11462] ? __pfx___sys_sendmsg+0x10/0x10 [ 181.736067][T11462] do_syscall_64+0xcd/0x4c0 [ 181.736093][T11462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.736109][T11462] RIP: 0033:0x7efe98d8e929 [ 181.736122][T11462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.736142][T11462] RSP: 002b:00007efe99c44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.736158][T11462] RAX: ffffffffffffffda RBX: 00007efe98fb5fa0 RCX: 00007efe98d8e929 [ 181.736169][T11462] RDX: 0000000000008080 RSI: 0000200000000040 RDI: 0000000000000003 [ 181.736179][T11462] RBP: 00007efe99c44090 R08: 0000000000000000 R09: 0000000000000000 [ 181.736188][T11462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.736198][T11462] R13: 0000000000000000 R14: 00007efe98fb5fa0 R15: 00007ffceca77998 [ 181.736221][T11462] [ 182.205249][ T5952] Bluetooth: hci1: command tx timeout [ 182.315294][T11399] netdevsim netdevsim6 netdevsim0: renamed from eth18 [ 182.339343][T11399] netdevsim netdevsim6 netdevsim1: renamed from eth19 [ 182.356018][T11399] netdevsim netdevsim6 netdevsim2: renamed from eth20 [ 182.379812][T11399] netdevsim netdevsim6 netdevsim3: renamed from eth21 [ 182.508986][T11494] vivid-000: disconnect [ 182.511528][T11494] vivid-000: reconnect [ 182.699958][T11511] overlay: filesystem on ./bus not supported as upperdir [ 182.770426][T11516] syz_tun: entered promiscuous mode [ 182.777850][T11516] syz_tun: refused to change device tx_queue_len [ 182.780875][T11519] macvlan0: left allmulticast mode [ 182.783434][T11519] veth1_vlan: left allmulticast mode [ 182.791245][T11519] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input26 [ 182.874373][T11399] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 182.890101][T11399] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 182.903034][T11530] Failed to initialize the IGMP autojoin socket (err -2) [ 182.903643][T11399] wireguard: wg0: Could not create IPv4 socket [ 182.914646][T11399] wireguard: wg1: Could not create IPv4 socket [ 182.919763][T11399] wireguard: wg2: Could not create IPv4 socket [ 183.304695][T11546] netlink: 'syz.2.1662': attribute type 1 has an invalid length. [ 183.324866][T11546] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.356461][T11546] veth3: entered promiscuous mode [ 183.585152][T11562] __nla_validate_parse: 6 callbacks suppressed [ 183.585170][T11562] netlink: 320 bytes leftover after parsing attributes in process `syz.4.1668'. [ 183.661311][T11572] program syz.7.1672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.856974][T11582] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 183.883223][ T6021] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 183.967108][T11588] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8208 sclass=netlink_xfrm_socket pid=11588 comm=syz.7.1679 [ 184.058054][ T6021] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 184.062069][ T6021] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.065276][ T6021] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.068347][ T6021] usb 9-1: config 0 interface 0 has no altsetting 0 [ 184.071335][ T6021] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.074043][ T6021] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.077692][ T6021] usb 9-1: config 0 interface 0 has no altsetting 0 [ 184.081562][ T6021] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.085226][ T6021] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.090024][ T6021] usb 9-1: config 0 interface 0 has no altsetting 0 [ 184.094207][ T6021] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.097669][ T6021] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.101792][ T6021] usb 9-1: config 0 interface 0 has no altsetting 0 [ 184.105320][ T6021] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.109004][ T6021] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.113434][ T6021] usb 9-1: config 0 interface 0 has no altsetting 0 [ 184.115198][T11597] vlan0: entered promiscuous mode [ 184.118864][ T6021] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.118909][ T6021] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.118934][ T6021] usb 9-1: config 0 interface 0 has no altsetting 0 [ 184.119886][ T6021] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.124425][T11597] bridge0: entered promiscuous mode [ 184.127449][ T6021] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.140758][ T6021] usb 9-1: config 0 interface 0 has no altsetting 0 [ 184.144837][ T6021] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 184.148216][ T6021] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 184.151657][ T6021] usb 9-1: config 0 interface 0 has no altsetting 0 [ 184.156274][ T6021] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 184.158883][ T6021] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 184.162735][ T6021] usb 9-1: Product: syz [ 184.164527][ T6021] usb 9-1: Manufacturer: syz [ 184.166538][ T6021] usb 9-1: SerialNumber: syz [ 184.171366][ T6021] usb 9-1: config 0 descriptor?? [ 184.182540][ T6021] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 184.238525][T11607] FAULT_INJECTION: forcing a failure. [ 184.238525][T11607] name failslab, interval 1, probability 0, space 0, times 0 [ 184.243852][T11607] CPU: 3 UID: 0 PID: 11607 Comm: syz.2.1686 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 184.243879][T11607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.243890][T11607] Call Trace: [ 184.243895][T11607] [ 184.243903][T11607] dump_stack_lvl+0x16c/0x1f0 [ 184.243974][T11607] should_fail_ex+0x512/0x640 [ 184.243996][T11607] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 184.244025][T11607] should_failslab+0xc2/0x120 [ 184.244049][T11607] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 184.244070][T11607] ? __alloc_skb+0x2b2/0x380 [ 184.244098][T11607] __alloc_skb+0x2b2/0x380 [ 184.244122][T11607] ? __pfx___alloc_skb+0x10/0x10 [ 184.244155][T11607] netlink_ack+0x15d/0xb80 [ 184.244174][T11607] ? __pfx___might_resched+0x10/0x10 [ 184.244203][T11607] netlink_rcv_skb+0x332/0x420 [ 184.244222][T11607] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 184.244247][T11607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.244279][T11607] ? netlink_deliver_tap+0x1ae/0xd30 [ 184.244302][T11607] xfrm_netlink_rcv+0x71/0x90 [ 184.244322][T11607] netlink_unicast+0x53d/0x7f0 [ 184.244344][T11607] ? __pfx_netlink_unicast+0x10/0x10 [ 184.244372][T11607] netlink_sendmsg+0x8d1/0xdd0 [ 184.244396][T11607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.244431][T11607] ____sys_sendmsg+0xa98/0xc70 [ 184.244452][T11607] ? copy_msghdr_from_user+0x10a/0x160 [ 184.244478][T11607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.244511][T11607] ___sys_sendmsg+0x134/0x1d0 [ 184.244538][T11607] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.244562][T11607] ? __lock_acquire+0x622/0x1c90 [ 184.244625][T11607] __sys_sendmsg+0x16d/0x220 [ 184.244651][T11607] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.244695][T11607] do_syscall_64+0xcd/0x4c0 [ 184.244725][T11607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.244742][T11607] RIP: 0033:0x7fc50b78e929 [ 184.244757][T11607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.244774][T11607] RSP: 002b:00007fc50c669038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.244791][T11607] RAX: ffffffffffffffda RBX: 00007fc50b9b5fa0 RCX: 00007fc50b78e929 [ 184.244803][T11607] RDX: 0000000000008080 RSI: 0000200000000040 RDI: 0000000000000003 [ 184.244815][T11607] RBP: 00007fc50c669090 R08: 0000000000000000 R09: 0000000000000000 [ 184.244825][T11607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.244836][T11607] R13: 0000000000000000 R14: 00007fc50b9b5fa0 R15: 00007ffc665dc5f8 [ 184.244862][T11607] [ 184.355757][ C3] vkms_vblank_simulate: vblank timer overrun [ 184.419238][ T6021] usb 9-1: USB disconnect, device number 6 [ 184.424335][ T6021] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 184.462803][T11617] input input27: cannot allocate more than FF_MAX_EFFECTS effects [ 184.468233][T11619] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1691'. [ 184.472504][T11619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1691'. [ 184.742002][T11632] /dev/sg0: Can't lookup blockdev [ 184.747367][T11632] veth0_to_bond: entered allmulticast mode [ 184.866760][ T59] usb 12-1: new low-speed USB device number 4 using dummy_hcd [ 185.028671][ T59] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.032918][ T59] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 185.037211][ T59] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 185.044118][T11636] FAULT_INJECTION: forcing a failure. [ 185.044118][T11636] name failslab, interval 1, probability 0, space 0, times 0 [ 185.044584][ T59] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.048906][T11636] CPU: 2 UID: 0 PID: 11636 Comm: syz.4.1696 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 185.048931][T11636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.048942][T11636] Call Trace: [ 185.048949][T11636] [ 185.048956][T11636] dump_stack_lvl+0x16c/0x1f0 [ 185.048986][T11636] should_fail_ex+0x512/0x640 [ 185.049009][T11636] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 185.049034][T11636] should_failslab+0xc2/0x120 [ 185.049058][T11636] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 185.049079][T11636] ? __alloc_skb+0x2b2/0x380 [ 185.049105][T11636] __alloc_skb+0x2b2/0x380 [ 185.049127][T11636] ? __pfx___alloc_skb+0x10/0x10 [ 185.049158][T11636] netlink_ack+0x15d/0xb80 [ 185.049177][T11636] ? __pfx___might_resched+0x10/0x10 [ 185.049206][T11636] netlink_rcv_skb+0x332/0x420 [ 185.049224][T11636] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 185.049247][T11636] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.049276][T11636] ? netlink_deliver_tap+0x1ae/0xd30 [ 185.049296][T11636] xfrm_netlink_rcv+0x71/0x90 [ 185.049314][T11636] netlink_unicast+0x53d/0x7f0 [ 185.049334][T11636] ? __pfx_netlink_unicast+0x10/0x10 [ 185.049366][T11636] netlink_sendmsg+0x8d1/0xdd0 [ 185.049386][T11636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.049413][T11636] ____sys_sendmsg+0xa98/0xc70 [ 185.049432][T11636] ? copy_msghdr_from_user+0x10a/0x160 [ 185.049457][T11636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.049487][T11636] ___sys_sendmsg+0x134/0x1d0 [ 185.049513][T11636] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.049535][T11636] ? __lock_acquire+0x622/0x1c90 [ 185.049591][T11636] __sys_sendmsg+0x16d/0x220 [ 185.049617][T11636] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.049659][T11636] do_syscall_64+0xcd/0x4c0 [ 185.049688][T11636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.049707][T11636] RIP: 0033:0x7f650cb8e929 [ 185.049722][T11636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.049737][T11636] RSP: 002b:00007f650d9ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.049754][T11636] RAX: ffffffffffffffda RBX: 00007f650cdb5fa0 RCX: 00007f650cb8e929 [ 185.049765][T11636] RDX: 0000000000008080 RSI: 0000200000000040 RDI: 0000000000000003 [ 185.049776][T11636] RBP: 00007f650d9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 185.049786][T11636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.049795][T11636] R13: 0000000000000000 R14: 00007f650cdb5fa0 R15: 00007ffeccf44a48 [ 185.049819][T11636] [ 185.156332][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1697'. [ 185.158938][ T59] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 185.168690][ T59] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.174725][ T59] hub 12-1:1.0: bad descriptor, ignoring hub [ 185.177760][ T59] hub 12-1:1.0: probe with driver hub failed with error -5 [ 185.181237][ T59] cdc_wdm 12-1:1.0: skipping garbage [ 185.183402][ T59] cdc_wdm 12-1:1.0: skipping garbage [ 185.187027][ T59] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 185.189642][ T59] cdc_wdm 12-1:1.0: Unknown control protocol [ 185.336717][T11643] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1698'. [ 185.399292][T11629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.403856][T11629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.519268][ T9] usb 12-1: USB disconnect, device number 4 [ 185.558640][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 185.558657][ T40] audit: type=1400 audit(2000000088.012:752): avc: denied { read } for pid=11653 comm="syz.2.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 186.239617][T11642] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 186.267094][ T40] audit: type=1326 audit(2000000088.667:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.2.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50b78e929 code=0x7ffc0000 [ 186.276018][ T40] audit: type=1326 audit(2000000088.667:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.2.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50b78e929 code=0x7ffc0000 [ 186.290572][ T40] audit: type=1326 audit(2000000088.676:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.2.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc50b78e929 code=0x7ffc0000 [ 186.301889][ T40] audit: type=1326 audit(2000000088.676:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.2.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50b78e929 code=0x7ffc0000 [ 186.322162][ T40] audit: type=1326 audit(2000000088.676:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.2.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc50b78e929 code=0x7ffc0000 [ 186.336289][ T40] audit: type=1326 audit(2000000088.676:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.2.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50b78e929 code=0x7ffc0000 [ 186.346848][ T40] audit: type=1326 audit(2000000088.676:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.2.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc50b78e929 code=0x7ffc0000 [ 186.353656][T11704] overlayfs: failed to resolve './file0': -2 [ 186.356767][ T40] audit: type=1326 audit(2000000088.676:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.2.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50b78e929 code=0x7ffc0000 [ 186.368633][ T40] audit: type=1326 audit(2000000088.676:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.2.1710" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc50b78e929 code=0x7ffc0000 [ 186.550235][T11723] tmpfs: Bad value for 'mpol' [ 186.617711][T11727] syz_tun: left promiscuous mode [ 186.628523][T11727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.765756][T11741] netlink: 'syz.7.1726': attribute type 10 has an invalid length. [ 186.783138][T11741] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.786857][T11741] bridge_slave_1: left allmulticast mode [ 186.789138][T11741] bridge_slave_1: left promiscuous mode [ 186.791788][T11741] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.798333][T11741] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 186.843403][T10751] bridge0: port 1(syz_tun) entered disabled state [ 186.863735][T10751] syz_tun (unregistering): left allmulticast mode [ 186.866916][T10751] syz_tun (unregistering): left promiscuous mode [ 186.869506][T10751] bridge0: port 1(syz_tun) entered disabled state [ 186.905628][T11748] JFS: discard option not supported on device [ 186.910053][T11748] syz.7.1729: attempt to access beyond end of device [ 186.910053][T11748] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 186.916552][T11748] syz.7.1729: attempt to access beyond end of device [ 186.916552][T11748] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0 [ 186.922210][T11748] Mount JFS Failure: -5 [ 187.001538][T11748] sp0: Synchronizing with TNC [ 187.336162][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.340389][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.344303][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.350683][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.356384][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.413163][T11768] Failed to initialize the IGMP autojoin socket (err -2) [ 187.507817][T11141] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 187.678307][T11141] usb 12-1: Using ep0 maxpacket: 8 [ 187.681347][T11141] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.685466][T11141] usb 12-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 187.693675][T11141] usb 12-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40 [ 187.697548][T11141] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.707435][T11141] usb 12-1: Product: syz [ 187.709360][T11141] usb 12-1: Manufacturer: syz [ 187.712040][T11141] usb 12-1: SerialNumber: syz [ 187.891400][T11795] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1745'. [ 187.972313][T11141] usb 12-1: USB disconnect, device number 5 [ 188.527714][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.542511][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.548969][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.553777][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.562018][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 188.567236][ T46] bond0 (unregistering): Released all slaves [ 188.587490][ T46] bond1 (unregistering): Released all slaves [ 188.596892][ T46] bond2 (unregistering): Released all slaves [ 188.734993][ T46] bond3 (unregistering): Released all slaves [ 188.777578][T11798] Failed to initialize the IGMP autojoin socket (err -2) [ 189.012795][T11821] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1750'. [ 189.088909][T11821] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11821 comm=syz.7.1750 [ 189.250489][ T46] hsr_slave_0: left promiscuous mode [ 189.253729][ T46] hsr_slave_1: left promiscuous mode [ 189.551996][ T5946] Bluetooth: hci0: command tx timeout [ 189.839121][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.860537][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.890263][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.916240][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.928922][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.128848][T11835] Failed to initialize the IGMP autojoin socket (err -2) [ 191.185039][T11838] batadv_slave_1: entered promiscuous mode [ 191.200273][T11838] syz.7.1752: attempt to access beyond end of device [ 191.200273][T11838] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 191.206258][T11838] syz.7.1752: attempt to access beyond end of device [ 191.206258][T11838] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0 [ 191.213832][T11838] Mount JFS Failure: -5 [ 191.216198][T11838] jfs_mount failed w/return code = -5 [ 191.270576][T11838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.281627][T11837] batadv_slave_1: left promiscuous mode [ 191.418819][ T46] IPVS: stop unused estimator thread 0... [ 191.648829][T11768] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 191.658673][T11768] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 191.668444][T11768] wireguard: wg0: Could not create IPv4 socket [ 191.673380][T11768] wireguard: wg1: Could not create IPv4 socket [ 191.678432][T11768] wireguard: wg2: Could not create IPv4 socket [ 192.227195][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.234179][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.243553][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.260337][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.268749][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.294494][T11864] Failed to initialize the IGMP autojoin socket (err -2) [ 192.924338][ T5990] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 193.080187][T11901] virtiofs: Bad value for 'dax' [ 193.109301][ T5990] usb 12-1: Using ep0 maxpacket: 16 [ 193.113550][ T5990] usb 12-1: config 0 has too many interfaces: 111, using maximum allowed: 32 [ 193.117237][ T5990] usb 12-1: config 0 has an invalid interface number: 157 but max is 110 [ 193.120843][ T5990] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.124938][ T5990] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 111 [ 193.128775][ T5990] usb 12-1: config 0 has no interface number 0 [ 193.134029][ T5990] usb 12-1: New USB device found, idVendor=058f, idProduct=9720, bcdDevice=fb.74 [ 193.137634][ T5990] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.141250][ T5990] usb 12-1: Product: syz [ 193.142995][ T5990] usb 12-1: Manufacturer: syz [ 193.144945][ T5990] usb 12-1: SerialNumber: syz [ 193.148901][ T5990] usb 12-1: config 0 descriptor?? [ 193.153489][ T5990] pl2303 12-1:0.157: required endpoints missing [ 193.253837][T11904] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 193.262489][ T74] Bluetooth: (null): Invalid header checksum [ 193.542382][T11912] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1775'. [ 193.765361][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1778'. [ 193.810800][T11920] FAULT_INJECTION: forcing a failure. [ 193.810800][T11920] name failslab, interval 1, probability 0, space 0, times 0 [ 193.816438][T11920] CPU: 1 UID: 0 PID: 11920 Comm: syz.4.1779 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 193.816463][T11920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 193.816474][T11920] Call Trace: [ 193.816481][T11920] [ 193.816487][T11920] dump_stack_lvl+0x16c/0x1f0 [ 193.816518][T11920] should_fail_ex+0x512/0x640 [ 193.816541][T11920] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 193.816567][T11920] should_failslab+0xc2/0x120 [ 193.816590][T11920] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 193.816612][T11920] ? __alloc_skb+0x2b2/0x380 [ 193.816640][T11920] __alloc_skb+0x2b2/0x380 [ 193.816663][T11920] ? __pfx___alloc_skb+0x10/0x10 [ 193.816684][T11920] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 193.816707][T11920] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 193.816736][T11920] netlink_alloc_large_skb+0x69/0x130 [ 193.816756][T11920] netlink_sendmsg+0x6a1/0xdd0 [ 193.816778][T11920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.816806][T11920] ____sys_sendmsg+0xa98/0xc70 [ 193.816825][T11920] ? copy_msghdr_from_user+0x10a/0x160 [ 193.816849][T11920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.816877][T11920] ___sys_sendmsg+0x134/0x1d0 [ 193.816903][T11920] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.816926][T11920] ? __lock_acquire+0x622/0x1c90 [ 193.816983][T11920] __sys_sendmsg+0x16d/0x220 [ 193.817019][T11920] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.817051][T11920] ? fput+0x70/0xf0 [ 193.817069][T11920] do_syscall_64+0xcd/0x4c0 [ 193.817095][T11920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.817112][T11920] RIP: 0033:0x7f650cb8e929 [ 193.817125][T11920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.817140][T11920] RSP: 002b:00007f650d9ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.817158][T11920] RAX: ffffffffffffffda RBX: 00007f650cdb5fa0 RCX: 00007f650cb8e929 [ 193.817169][T11920] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 193.817179][T11920] RBP: 00007f650d9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 193.817189][T11920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.817198][T11920] R13: 0000000000000000 R14: 00007f650cdb5fa0 R15: 00007ffeccf44a48 [ 193.817221][T11920] [ 193.944802][T11923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=127 sclass=netlink_route_socket pid=11923 comm=syz.4.1780 [ 194.181442][T11929] syz.4.1782: attempt to access beyond end of device [ 194.181442][T11929] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 194.186945][T11929] syz.4.1782: attempt to access beyond end of device [ 194.186945][T11929] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 194.201678][T11929] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 194.210416][T11929] syz.4.1782: attempt to access beyond end of device [ 194.210416][T11929] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 194.217743][T11929] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 194.229006][T11929] syz.4.1782: attempt to access beyond end of device [ 194.229006][T11929] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 194.234686][T11929] syz.4.1782: attempt to access beyond end of device [ 194.234686][T11929] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 194.239920][T11929] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 194.241580][T11930] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 194.245357][T11929] syz.4.1782: attempt to access beyond end of device [ 194.245357][T11929] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 194.253876][T11929] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 194.256104][T11930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11930 comm=syz.4.1782 [ 194.258670][T11929] syz.4.1782: attempt to access beyond end of device [ 194.258670][T11929] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 194.269179][T11929] syz.4.1782: attempt to access beyond end of device [ 194.269179][T11929] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 194.275605][T11929] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 194.281133][T11929] syz.4.1782: attempt to access beyond end of device [ 194.281133][T11929] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 194.287338][T11929] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 194.291620][T11929] syz.4.1782: attempt to access beyond end of device [ 194.291620][T11929] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 194.297177][T11929] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 194.301141][T11929] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 194.304910][T11929] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 194.491646][T11941] netlink: 'syz.4.1786': attribute type 3 has an invalid length. [ 194.534929][T11941] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 194.728262][T11946] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1788'. [ 194.766288][T11886] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 194.770964][ T60] usb 12-1: USB disconnect, device number 6 [ 195.016660][T11955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1792'. [ 195.173613][T11966] tmpfs: Bad value for 'mpol' [ 195.351673][T11969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.352172][T11971] loop6: detected capacity change from 0 to 524287999 [ 195.359780][T11969] batadv_slave_0: entered promiscuous mode [ 195.456776][T11977] syz.4.1798: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 195.466756][T11977] CPU: 3 UID: 0 PID: 11977 Comm: syz.4.1798 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 195.466782][T11977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.466793][T11977] Call Trace: [ 195.466799][T11977] [ 195.466805][T11977] dump_stack_lvl+0x16c/0x1f0 [ 195.466836][T11977] warn_alloc+0x248/0x3a0 [ 195.466860][T11977] ? __pfx_warn_alloc+0x10/0x10 [ 195.466892][T11977] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 195.466910][T11977] ? __vmalloc_node_noprof+0xad/0xf0 [ 195.466934][T11977] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 195.466952][T11977] ? legacy_get_tree+0x10c/0x220 [ 195.466976][T11977] ? vfs_get_tree+0x8b/0x340 [ 195.466995][T11977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.467017][T11977] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 195.467041][T11977] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 195.467069][T11977] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 195.467087][T11977] vmalloc_user_noprof+0x9e/0xe0 [ 195.467106][T11977] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 195.467126][T11977] vb2_vmalloc_alloc+0x135/0x3f0 [ 195.467144][T11977] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 195.467162][T11977] __vb2_queue_alloc+0x8c9/0x1280 [ 195.467192][T11977] vb2_core_reqbufs+0xa90/0xfe0 [ 195.467215][T11977] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 195.467246][T11977] __vb2_init_fileio+0x3f1/0x1100 [ 195.467268][T11977] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 195.467295][T11977] ? p9_pollwait+0x19f/0x220 [ 195.467318][T11977] vb2_core_poll+0x5ec/0x700 [ 195.467336][T11977] vb2_poll+0x33/0x150 [ 195.467362][T11977] vb2_fop_poll+0x10f/0x2c0 [ 195.467388][T11977] ? __pfx_vb2_fop_poll+0x10/0x10 [ 195.467410][T11977] v4l2_poll+0x163/0x320 [ 195.467429][T11977] ? __pfx_v4l2_poll+0x10/0x10 [ 195.467450][T11977] p9_fd_poll+0x111/0x2c0 [ 195.467469][T11977] p9_conn_create+0x3cd/0x550 [ 195.467489][T11977] p9_fd_create+0x322/0x490 [ 195.467508][T11977] ? __pfx_p9_fd_create+0x10/0x10 [ 195.467528][T11977] ? p9_client_create+0x7a9/0x11c0 [ 195.467557][T11977] p9_client_create+0x80f/0x11c0 [ 195.467608][T11977] ? __pfx_p9_client_create+0x10/0x10 [ 195.467641][T11977] ? rcu_is_watching+0x12/0xc0 [ 195.467665][T11977] ? lockdep_init_map_type+0x5c/0x280 [ 195.467692][T11977] ? __raw_spin_lock_init+0x3a/0x110 [ 195.467714][T11977] v9fs_session_init+0x1f7/0x1a80 [ 195.467753][T11977] ? __pfx_v9fs_session_init+0x10/0x10 [ 195.467795][T11977] v9fs_mount+0xc5/0xa30 [ 195.467836][T11977] ? __pfx_v9fs_mount+0x10/0x10 [ 195.467857][T11977] ? cap_capable+0xb3/0x250 [ 195.467877][T11977] ? __pfx_v9fs_mount+0x10/0x10 [ 195.467894][T11977] legacy_get_tree+0x10c/0x220 [ 195.467919][T11977] vfs_get_tree+0x8b/0x340 [ 195.467937][T11977] path_mount+0x1414/0x2020 [ 195.467964][T11977] ? kmem_cache_free+0x2d1/0x4d0 [ 195.467985][T11977] ? __pfx_path_mount+0x10/0x10 [ 195.468013][T11977] ? putname+0x154/0x1a0 [ 195.468042][T11977] __x64_sys_mount+0x28d/0x310 [ 195.468068][T11977] ? __pfx___x64_sys_mount+0x10/0x10 [ 195.468101][T11977] do_syscall_64+0xcd/0x4c0 [ 195.468129][T11977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.468144][T11977] RIP: 0033:0x7f650cb8e929 [ 195.468158][T11977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.468174][T11977] RSP: 002b:00007f650d9ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 195.468190][T11977] RAX: ffffffffffffffda RBX: 00007f650cdb5fa0 RCX: 00007f650cb8e929 [ 195.468201][T11977] RDX: 0000200000000040 RSI: 0000200000000580 RDI: 0000000000000000 [ 195.468211][T11977] RBP: 00007f650cc10b39 R08: 0000200000000280 R09: 0000000000000000 [ 195.468221][T11977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.468230][T11977] R13: 0000000000000000 R14: 00007f650cdb5fa0 R15: 00007ffeccf44a48 [ 195.468253][T11977] [ 195.468336][T11977] Mem-Info: [ 195.497932][T11864] netdevsim netdevsim6 netdevsim0: renamed from eth26 [ 195.502144][T11977] active_anon:5379 inactive_anon:0 isolated_anon:0 [ 195.502144][T11977] active_file:6550 inactive_file:55099 isolated_file:0 [ 195.502144][T11977] unevictable:1768 dirty:3689 writeback:70 [ 195.502144][T11977] slab_reclaimable:7690 slab_unreclaimable:71656 [ 195.502144][T11977] mapped:24199 shmem:2403 pagetables:1138 [ 195.502144][T11977] sec_pagetables:312 bounce:0 [ 195.502144][T11977] kernel_misc_reclaimable:0 [ 195.502144][T11977] free:449748 free_pcp:15524 free_cma:0 [ 195.506742][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.515783][T11977] Node 0 active_anon:21516kB inactive_anon:0kB active_file:26200kB inactive_file:219972kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:96576kB dirty:13832kB writeback:440kB shmem:6076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12464kB pagetables:4364kB sec_pagetables:1248kB all_unreclaimable? no Balloon:0kB [ 195.529315][T11864] netdevsim netdevsim6 netdevsim1: renamed from eth27 [ 195.529678][T11977] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:424kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:220kB dirty:28kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 195.546709][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.547079][T11977] Node 0 [ 195.572079][T11864] netdevsim netdevsim6 netdevsim2: renamed from eth28 [ 195.576895][T11977] DMA free:15316kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:44kB local_pcp:0kB free_cma:0kB [ 195.581692][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.582834][T11977] lowmem_reserve[]: [ 195.598446][T11864] netdevsim netdevsim6 netdevsim3: renamed from eth29 [ 195.600384][T11977] 0 1235 1235 1235 1235 [ 195.600417][T11977] Node 0 DMA32 free:178584kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21520kB inactive_anon:0kB active_file:26200kB inactive_file:220088kB unevictable:3536kB writepending:9664kB present:2080628kB managed:1264744kB mlocked:0kB bounce:0kB free_pcp:43868kB local_pcp:18188kB free_cma:0kB [ 195.600464][T11977] lowmem_reserve[]: 0 0 0 0 0 [ 195.600492][T11977] Node 1 Normal free:1604752kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:424kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781948kB mlocked:0kB bounce:0kB free_pcp:18264kB local_pcp:4156kB free_cma:0kB [ 195.600537][T11977] lowmem_reserve[]: 0 0 0 0 0 [ 195.600568][T11977] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) [ 195.624121][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.639279][T11977] 2*4096kB [ 195.641962][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.650606][T11977] (UM) = 15316kB [ 195.732987][T11977] Node 0 DMA32: 276*4kB (ME) 313*8kB (UM) 205*16kB (UME) 135*32kB (ME) 89*64kB (UME) 81*128kB (ME) 62*256kB (UME) 36*512kB (ME) 67*1024kB (UM) 17*2048kB (UM) 3*4096kB (UM) = 177288kB [ 195.740716][T11977] Node 1 Normal: 5*4kB (UE) 15*8kB (UME) 24*16kB (UME) 132*32kB (UME) 40*64kB (UE) 8*128kB (UME) 7*256kB (UME) 3*512kB (ME) 0*1024kB 4*2048kB (UME) 387*4096kB (UM) = 1605004kB [ 195.744141][T11981] Failed to initialize the IGMP autojoin socket (err -2) [ 195.748267][T11977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.755388][T11977] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 195.759111][T11977] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.764529][T11977] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 195.768260][T11977] 64078 total pagecache pages [ 195.770189][T11977] 0 pages in swap cache [ 195.771960][T11977] Free swap = 124996kB [ 195.773591][T11977] Total swap = 124996kB [ 195.775263][T11977] 1048443 pages RAM [ 195.776780][T11977] 0 pages HighMem/MovableOnly [ 195.778685][T11977] 282930 pages reserved [ 195.780432][T11977] 0 pages cma reserved [ 195.981992][ T6229] kernel read not supported for file /video7 (pid: 6229 comm: kworker/1:4) [ 196.194083][T11864] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 196.210607][T11864] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 196.219782][T11864] wireguard: wg0: Could not create IPv4 socket [ 196.226571][T11864] wireguard: wg1: Could not create IPv4 socket [ 196.231656][T11864] wireguard: wg2: Could not create IPv4 socket [ 196.260729][T12004] netlink: 'syz.4.1801': attribute type 4 has an invalid length. [ 196.276054][T12002] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1802'. [ 196.278732][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 196.306561][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 196.311597][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 196.330137][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 196.336438][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 196.367668][T12009] Failed to initialize the IGMP autojoin socket (err -2) [ 196.722589][T11577] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 196.887067][T12019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.890878][T12019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.918878][T11577] usb 9-1: unable to get BOS descriptor or descriptor too short [ 196.927581][T11577] usb 9-1: too many configurations: 21, using maximum allowed: 8 [ 196.932946][T11577] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 196.936087][T11577] usb 9-1: can't read configurations, error -71 [ 197.276708][T12026] netlink: 'syz.7.1805': attribute type 3 has an invalid length. [ 197.280118][T12026] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1805'. [ 197.383369][T12033] hpfs: hpfs_map_sector(): read error [ 197.562515][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 197.562533][ T40] audit: type=1804 audit(2000000099.237:782): pid=12044 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.1810" name="/newroot/176/file0" dev="tmpfs" ino=964 res=1 errno=0 [ 197.576663][T12044] ref_ctr increment failed for inode: 0x3c4 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880397ca040 [ 197.585472][T12009] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 197.589479][T12043] uprobe: syz.7.1810:12043 failed to unregister, leaking uprobe [ 197.598154][T12009] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 197.614460][T12009] wireguard: wg0: Could not create IPv4 socket [ 197.618718][T12009] wireguard: wg1: Could not create IPv4 socket [ 197.626761][T12009] wireguard: wg2: Could not create IPv4 socket [ 197.752064][T12050] kvm: apic: phys broadcast and lowest prio [ 197.755131][T12050] kvm: Disabled LAPIC found during irq injection [ 197.762780][T12050] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1812'. [ 198.103808][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1816'. [ 198.107043][T12066] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 198.109958][T12066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.114016][T12066] netlink: 'syz.7.1816': attribute type 1 has an invalid length. [ 198.117039][T12066] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1816'. [ 198.597443][T12091] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.742426][T12091] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.763171][T12095] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 198.829899][T12091] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.875510][T12103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1827'. [ 198.893078][T12100] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 198.936496][T12091] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.031876][T12091] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.046511][T12091] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.060223][T12091] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.074873][T12091] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.232561][T12122] netlink: 'syz.7.1834': attribute type 1 has an invalid length. [ 200.235682][T12122] netlink: 780 bytes leftover after parsing attributes in process `syz.7.1834'. [ 200.906271][ T40] audit: type=1400 audit(2000000102.370:783): avc: denied { ioctl } for pid=12151 comm="syz.7.1844" path="socket:[48013]" dev="sockfs" ino=48013 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 201.096229][ T5952] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 201.096532][ T5946] Bluetooth: hci0: command 0x1003 tx timeout [ 201.843148][T12164] Failed to initialize the IGMP autojoin socket (err -2) [ 202.031410][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.039380][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.043067][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.050085][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.062385][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.086555][T12166] Failed to initialize the IGMP autojoin socket (err -2) [ 202.470590][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.919769][T12171] binder: BINDER_SET_CONTEXT_MGR already set [ 202.923035][T12171] binder: 12170:12171 ioctl 4018620d 2000000000c0 returned -16 [ 203.187063][T12182] netlink: 'syz.7.1850': attribute type 1 has an invalid length. [ 203.272881][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.278675][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.284813][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.293119][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.303037][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.329843][T12189] Failed to initialize the IGMP autojoin socket (err -2) [ 203.389500][T12199] ALSA: mixer_oss: invalid OSS volume '' [ 203.392213][T12199] virtiofs: Unknown parameter 'r' [ 203.442012][T12166] netdevsim netdevsim6 netdevsim0: renamed from eth26 [ 203.463140][T12166] netdevsim netdevsim6 netdevsim1: renamed from eth27 [ 203.481593][T12166] netdevsim netdevsim6 netdevsim2: renamed from eth28 [ 203.497934][T12166] netdevsim netdevsim6 netdevsim3: renamed from eth29 [ 203.507981][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1858'. [ 203.949930][T12166] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 203.958354][T12166] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 203.967595][T12166] wireguard: wg0: Could not create IPv4 socket [ 203.973016][T12166] wireguard: wg1: Could not create IPv4 socket [ 203.977163][T12166] wireguard: wg2: Could not create IPv4 socket [ 204.091103][T12217] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 204.232041][T12231] netlink: 'syz.4.1864': attribute type 1 has an invalid length. [ 204.264634][T12231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.268266][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.278477][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.285484][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.290978][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.295040][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.315248][T12235] Failed to initialize the IGMP autojoin socket (err -2) [ 204.333358][T12227] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.396307][T12239] Bluetooth: MGMT ver 1.23 [ 204.451578][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1868'. [ 204.484349][T12252] Failed to initialize the IGMP autojoin socket (err -2) [ 204.625062][T12259] openvswitch: netlink: IP tunnel dst address not specified [ 204.635290][T12259] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1871'. [ 204.640784][T12259] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1871'. [ 204.645131][T12259] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1871'. [ 205.034839][T12276] netlink: 'syz.4.1876': attribute type 4 has an invalid length. [ 205.049372][T12276] netlink: 'syz.4.1876': attribute type 4 has an invalid length. [ 205.366002][T12296] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1880'. [ 205.373547][T12235] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 205.383924][T12235] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 205.392103][T12235] wireguard: wg0: Could not create IPv4 socket [ 205.416424][T12235] wireguard: wg1: Could not create IPv4 socket [ 205.420690][T12235] wireguard: wg2: Could not create IPv4 socket [ 205.614129][T12313] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 205.616643][T12314] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1885'. [ 205.930666][T12334] Failed to initialize the IGMP autojoin socket (err -2) [ 205.973544][T12339] netlink: 'syz.7.1891': attribute type 1 has an invalid length. [ 205.975414][T12338] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 205.976761][T12339] netlink: 244 bytes leftover after parsing attributes in process `syz.7.1891'. [ 205.986302][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1893'. [ 206.708491][T12345] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 206.783644][T12347] random: crng reseeded on system resumption [ 207.041221][T12349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29209 sclass=netlink_route_socket pid=12349 comm=syz.4.1898 [ 207.071118][ T5948] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 207.172732][T12351] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1899'. [ 207.234682][ T5948] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 207.238365][ T5948] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 207.245178][ T5948] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.248893][ T5948] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.252290][ T5948] usb 12-1: Product: 睍얢푎婷臕㰈써ᑖ缉뼼උ솏敶䤉풇 [ 207.256841][ T5948] usb 12-1: Manufacturer: 汗㷘ዜ㥨ꋝா⇧扲줬뚏囨嵜杌㌎⮱ᦩᜋ庬ᨎ御캠흀㍣周᷐閐壀沰킛㙈鍑ɹ䵜폂眢ᰩ잉䆻헇㤇葛蕝ᑋ拎糓ᇂ [ 207.264898][ T5948] usb 12-1: SerialNumber: ࿅竍贓鷆ｂ顺Ꞁ꤄堿굅崝ﯵ౪깤촐짋嫚넰ﳀ⫟࿰汔儙鐸㓚짉Ἂ∇ꮏᚲ冿Ṭ㔨玱ɗᴸ⤨쨨὘↋ꮽ [ 207.489593][T12347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.492766][T12347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.118124][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.126092][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.131106][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.139891][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.150218][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.169653][T12374] Failed to initialize the IGMP autojoin socket (err -2) [ 210.917832][T12380] netlink: 'syz.4.1908': attribute type 10 has an invalid length. [ 210.922248][T12380] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.925805][T12380] bridge0: port 1() entered disabled state [ 210.939426][T12380] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.942657][T12380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.947291][T12380] bridge0: port 1() entered blocking state [ 210.950182][T12380] bridge0: port 1() entered forwarding state [ 210.955947][T12380] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 211.011635][T12380] bond0: (slave bridge0): Releasing backup interface [ 211.015212][T12380] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.018426][T12380] bridge0: port 1() entered disabled state [ 211.027011][T12380] : left allmulticast mode [ 211.028896][T12380] : left promiscuous mode [ 211.030891][T12380] bridge0: port 1() entered disabled state [ 211.035842][T12380] bridge_slave_1: left allmulticast mode [ 211.040013][T12380] bridge_slave_1: left promiscuous mode [ 211.042693][T12380] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.054182][T12380] bond0: (slave bond_slave_0): Releasing backup interface [ 211.063356][T12380] bond0: (slave bond_slave_1): Releasing backup interface [ 211.084380][T12380] team0: Port device team_slave_0 removed [ 211.105311][T12380] team0: Port device team_slave_1 removed [ 211.109332][T12380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.115065][T12380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.118299][T12380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.130916][T12380] bond0: (slave netdevsim0): Releasing backup interface [ 211.457482][T12374] netdevsim netdevsim6 netdevsim0: renamed from eth26 [ 211.473218][T12374] netdevsim netdevsim6 netdevsim1: renamed from eth27 [ 211.486889][T12374] netdevsim netdevsim6 netdevsim2: renamed from eth28 [ 211.501304][T12374] netdevsim netdevsim6 netdevsim3: renamed from eth29 [ 211.919106][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.929406][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.933203][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.942844][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.948644][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.963688][T12374] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 211.977986][T12374] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 211.989407][T12374] wireguard: wg0: Could not create IPv4 socket [ 211.993139][T12399] Failed to initialize the IGMP autojoin socket (err -2) [ 211.995093][T12374] wireguard: wg1: Could not create IPv4 socket [ 212.003564][T12374] wireguard: wg2: Could not create IPv4 socket [ 212.072117][ T40] audit: type=1400 audit(2000000112.809:784): avc: denied { getopt } for pid=12404 comm="syz.4.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 212.208795][T12410] netlink: 'syz.4.1914': attribute type 1 has an invalid length. [ 212.349971][T12412] netlink: 'syz.4.1915': attribute type 10 has an invalid length. [ 212.357353][T12412] team0: Device ipvlan1 failed to register rx_handler [ 212.613740][T12418] 9p: Unknown access argument 18446744073709551615: -34 [ 212.657820][ T5948] cdc_ncm 12-1:1.0: bind() failure [ 212.664871][ T5948] cdc_ncm 12-1:1.1: CDC Union missing and no IAD found [ 212.667418][ T5948] cdc_ncm 12-1:1.1: bind() failure [ 212.689653][ T52] usb 12-1: USB disconnect, device number 7 [ 212.768229][T12427] bond0: entered promiscuous mode [ 212.788315][T12429] openvswitch: netlink: IP tunnel dst address not specified [ 213.041160][T12445] netlink: 'syz.7.1925': attribute type 10 has an invalid length. [ 213.052048][T12445] team0: Device ipvlan1 failed to register rx_handler [ 213.056153][ T839] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 213.117085][ T40] audit: type=1400 audit(2000000113.791:785): avc: denied { read } for pid=12448 comm="syz.7.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 213.171813][T12453] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 213.179548][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1927'. [ 213.218139][ T839] usb 9-1: Using ep0 maxpacket: 8 [ 213.222630][ T839] usb 9-1: config 1 interface 0 has no altsetting 0 [ 213.234799][ T839] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.40 [ 213.235784][T12399] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 213.239097][ T839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.248113][ T839] usb 9-1: Product: П [ 213.249932][ T839] usb 9-1: Manufacturer: Ȑ [ 213.249985][T12399] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 213.252004][ T839] usb 9-1: SerialNumber: П [ 213.263220][T12399] wireguard: wg0: Could not create IPv4 socket [ 213.267832][T12399] wireguard: wg1: Could not create IPv4 socket [ 213.274946][T12399] wireguard: wg2: Could not create IPv4 socket [ 213.483353][ T839] usbhid 9-1:1.0: can't add hid device: -71 [ 213.485749][ T839] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 213.490773][ T839] usb 9-1: USB disconnect, device number 9 [ 214.191368][T12463] netlink: 'syz.7.1931': attribute type 9 has an invalid length. [ 214.260040][ T40] audit: type=1400 audit(2000000114.858:786): avc: denied { wake_alarm } for pid=12462 comm="syz.7.1931" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 214.290534][T12468] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.333996][T12474] tmpfs: Bad value for 'mpol' [ 214.594510][T12495] netlink: 'syz.4.1943': attribute type 27 has an invalid length. [ 214.637552][T12495] bond0: left promiscuous mode [ 214.714521][T12495] batadv_slave_0: left promiscuous mode [ 214.751788][T12501] kvm: user requested TSC rate below hardware speed [ 214.778095][T12495] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.783058][T12495] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.786066][T12495] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.789239][T12495] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.828483][T12495] ip6erspan0: left promiscuous mode [ 214.873465][T12496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.877330][T12496] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.882910][T12496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.010904][T12511] binder: 12510:12511 ioctl c0045002 200000000000 returned -22 [ 215.103663][T12520] bio_check_eod: 3 callbacks suppressed [ 215.103682][T12520] syz.4.1953: attempt to access beyond end of device [ 215.103682][T12520] sr0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 215.112593][T12520] hpfs: hpfs_map_sector(): read error [ 215.176025][T12523] program syz.4.1954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.176112][T12522] program syz.4.1954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.310173][T12533] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 215.395281][ T40] audit: type=1400 audit(2000000115.915:787): avc: denied { watch_with_perm } for pid=12543 comm="syz.7.1960" path="/249/bus" dev="tmpfs" ino=1358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 215.481217][T12546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12546 comm=syz.7.1961 [ 215.880204][ T52] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 216.041940][ T52] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.045238][ T52] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.048219][ T52] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.053804][ T52] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.057685][ T52] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.063105][ T52] usb 12-1: config 0 descriptor?? [ 216.317442][T12555] binder: 12554:12555 ioctl 3b81 2000000002c0 returned -22 [ 216.320648][T12555] binder: 12554:12555 ioctl 3ba0 200000000240 returned -22 [ 216.358865][T12560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.375690][T12560] gfs2: not a GFS2 filesystem [ 216.506186][ T52] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 216.511273][ T52] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 216.518967][ T52] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 216.654423][ T40] audit: type=1400 audit(2000000117.103:788): avc: denied { write } for pid=12570 comm="syz.4.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 216.907045][ T10] usb 12-1: USB disconnect, device number 8 [ 217.482171][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1974'. [ 217.625348][T12590] netlink: 172 bytes leftover after parsing attributes in process `syz.7.1976'. [ 217.690629][T12591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=12591 comm=syz.7.1976 [ 218.742892][T12598] loop6: detected capacity change from 0 to 524287999 [ 218.833056][T12598] [ 218.833851][T12598] ====================================================== [ 218.835993][T12598] WARNING: possible circular locking dependency detected [ 218.838597][T12598] 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 Not tainted [ 218.842749][T12598] ------------------------------------------------------ [ 218.846518][T12598] syz.7.1977/12598 is trying to acquire lock: [ 218.848982][T12598] ffffffff908b2be8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xb36/0x1870 [ 218.852794][T12598] [ 218.852794][T12598] but task is already holding lock: [ 218.855400][T12598] ffff888105d1d8b0 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 218.859552][T12598] [ 218.859552][T12598] which lock already depends on the new lock. [ 218.859552][T12598] [ 218.863533][T12598] [ 218.863533][T12598] the existing dependency chain (in reverse order) is: [ 218.867078][T12598] [ 218.867078][T12598] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 218.870506][T12598] blk_alloc_queue+0x619/0x760 [ 218.872568][T12598] blk_mq_alloc_queue+0x175/0x290 [ 218.874685][T12598] __blk_mq_alloc_disk+0x29/0x120 [ 218.876889][T12598] loop_add+0x49e/0xb70 [ 218.878751][T12598] loop_init+0x164/0x270 [ 218.880660][T12598] do_one_initcall+0x120/0x6e0 [ 218.882736][T12598] kernel_init_freeable+0x5c2/0x900 [ 218.884997][T12598] kernel_init+0x1c/0x2b0 [ 218.886983][T12598] ret_from_fork+0x5d4/0x6f0 [ 218.889639][T12598] ret_from_fork_asm+0x1a/0x30 [ 218.891708][T12598] [ 218.891708][T12598] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 218.894584][T12598] fs_reclaim_acquire+0x102/0x150 [ 218.896806][T12598] kmem_cache_alloc_node_noprof+0x57/0x3b0 [ 218.899212][T12598] __alloc_skb+0x2b2/0x380 [ 218.901114][T12598] alloc_uevent_skb+0x7d/0x210 [ 218.903046][T12598] kobject_uevent_env+0xca4/0x1870 [ 218.905119][T12598] kobject_synth_uevent+0x7d4/0x8a0 [ 218.906973][T12598] bus_uevent_store+0x3d/0x90 [ 218.909863][T12598] bus_attr_store+0x71/0xb0 [ 218.912048][T12598] sysfs_kf_write+0xf2/0x150 [ 218.914680][T12598] kernfs_fop_write_iter+0x351/0x510 [ 218.916989][T12598] vfs_write+0x6c7/0x1150 [ 218.918853][T12598] ksys_write+0x12a/0x250 [ 218.920719][T12598] do_syscall_64+0xcd/0x4c0 [ 218.922620][T12598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.925160][T12598] [ 218.925160][T12598] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 218.928086][T12598] __lock_acquire+0x126f/0x1c90 [ 218.929824][T12598] lock_acquire+0x179/0x350 [ 218.931815][T12598] __mutex_lock+0x199/0xb90 [ 218.933837][T12598] kobject_uevent_env+0xb36/0x1870 [ 218.935972][T12598] loop_set_status+0x9c9/0xb90 [ 218.937621][T12598] lo_ioctl+0xbd3/0x2760 [ 218.938980][T12598] blkdev_ioctl+0x277/0x6d0 [ 218.940684][T12598] __x64_sys_ioctl+0x18e/0x210 [ 218.942667][T12598] do_syscall_64+0xcd/0x4c0 [ 218.944788][T12598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.947212][T12598] [ 218.947212][T12598] other info that might help us debug this: [ 218.947212][T12598] [ 218.951108][T12598] Chain exists of: [ 218.951108][T12598] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 218.951108][T12598] [ 218.956252][T12598] Possible unsafe locking scenario: [ 218.956252][T12598] [ 218.959278][T12598] CPU0 CPU1 [ 218.961614][T12598] ---- ---- [ 218.964046][T12598] lock(&q->q_usage_counter(io)#23); [ 218.966435][T12598] lock(fs_reclaim); [ 218.969068][T12598] lock(&q->q_usage_counter(io)#23); [ 218.972220][T12598] lock(uevent_sock_mutex); [ 218.974100][T12598] [ 218.974100][T12598] *** DEADLOCK *** [ 218.974100][T12598] [ 218.977268][T12598] 3 locks held by syz.7.1977/12598: [ 218.979431][T12598] #0: ffff88802727e400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2c/0xb90 [ 218.983235][T12598] #1: ffff888105d1d8b0 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 218.987909][T12598] #2: ffff888105d1d8e8 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 218.992628][T12598] [ 218.992628][T12598] stack backtrace: [ 218.995068][T12598] CPU: 2 UID: 0 PID: 12598 Comm: syz.7.1977 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 218.995095][T12598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 218.995108][T12598] Call Trace: [ 218.995115][T12598] [ 218.995129][T12598] dump_stack_lvl+0x116/0x1f0 [ 218.995162][T12598] print_circular_bug+0x275/0x350 [ 218.995192][T12598] check_noncircular+0x14c/0x170 [ 218.995222][T12598] __lock_acquire+0x126f/0x1c90 [ 218.995255][T12598] lock_acquire+0x179/0x350 [ 218.995284][T12598] ? kobject_uevent_env+0xb36/0x1870 [ 218.995304][T12598] ? __pfx___might_resched+0x10/0x10 [ 218.995329][T12598] __mutex_lock+0x199/0xb90 [ 218.995356][T12598] ? kobject_uevent_env+0xb36/0x1870 [ 218.995374][T12598] ? block_devnode+0x9e/0xd0 [ 218.995394][T12598] ? kobject_uevent_env+0xb36/0x1870 [ 218.995414][T12598] ? __pfx___mutex_lock+0x10/0x10 [ 218.995444][T12598] ? __asan_memcpy+0x3c/0x60 [ 218.995465][T12598] ? kobject_get_path+0x8e/0x2a0 [ 218.995495][T12598] ? kobject_uevent_env+0xb36/0x1870 [ 218.995514][T12598] kobject_uevent_env+0xb36/0x1870 [ 218.995536][T12598] ? __asan_memcpy+0x3c/0x60 [ 218.995557][T12598] loop_set_status+0x9c9/0xb90 [ 218.995581][T12598] lo_ioctl+0xbd3/0x2760 [ 218.995622][T12598] ? __lock_acquire+0xb8a/0x1c90 [ 218.995653][T12598] ? __lock_acquire+0x622/0x1c90 [ 218.995685][T12598] ? __pfx_lo_ioctl+0x10/0x10 [ 218.995705][T12598] ? find_held_lock+0x2b/0x80 [ 218.995728][T12598] ? avc_has_extended_perms+0x33a/0x1090 [ 218.995748][T12598] ? avc_has_extended_perms+0x47c/0x1090 [ 218.995776][T12598] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.995798][T12598] ? blkdev_common_ioctl+0x1dd/0x2480 [ 218.995817][T12598] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.995837][T12598] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 218.995857][T12598] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 218.995877][T12598] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 218.995901][T12598] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 218.995926][T12598] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 218.995956][T12598] ? __pfx_lo_ioctl+0x10/0x10 [ 218.995974][T12598] blkdev_ioctl+0x277/0x6d0 [ 218.995992][T12598] ? __pfx_blkdev_ioctl+0x10/0x10 [ 218.996009][T12598] ? selinux_file_ioctl+0x180/0x270 [ 218.996031][T12598] ? selinux_file_ioctl+0xb4/0x270 [ 218.996054][T12598] ? __pfx_blkdev_ioctl+0x10/0x10 [ 218.996073][T12598] __x64_sys_ioctl+0x18e/0x210 [ 218.996093][T12598] do_syscall_64+0xcd/0x4c0 [ 218.996120][T12598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.996144][T12598] RIP: 0033:0x7efe98d8e929 [ 218.996159][T12598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.996177][T12598] RSP: 002b:00007efe99c44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.996196][T12598] RAX: ffffffffffffffda RBX: 00007efe98fb5fa0 RCX: 00007efe98d8e929 [ 218.996209][T12598] RDX: 00002000000000c0 RSI: 0000000000004c04 RDI: 0000000000000006 [ 218.996221][T12598] RBP: 00007efe98e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 218.996232][T12598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.996243][T12598] R13: 0000000000000000 R14: 00007efe98fb5fa0 R15: 00007ffceca77998 [ 218.996260][T12598] [ 218.996397][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.073220][T12599] syz.4.1978: attempt to access beyond end of device [ 219.073220][T12599] sr0: rw=0, sector=0, nr_sectors = 4 limit=0 [ 219.074582][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.076788][T12599] (syz.4.1978,12599,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 219.079072][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.080611][T12599] (syz.4.1978,12599,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 219.084946][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.087064][T12599] (syz.4.1978,12599,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 219.090011][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.091618][T12599] (syz.4.1978,12599,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 219.110351][T12600] Failed to initialize the IGMP autojoin socket (err -2) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 220.421984][ T1150] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.489873][ T1150] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.586502][ T1150] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.683654][ T1150] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.022471][ T1150] bridge_slave_0: left allmulticast mode [ 221.024952][ T1150] bridge_slave_0: left promiscuous mode [ 221.027440][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.129846][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.172974][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.226241][ T1150] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 223.278969][ T1150] bond0 (unregistering): Released all slaves [ 224.062365][ T1150] hsr_slave_0: left promiscuous mode [ 224.065145][ T1150] hsr_slave_1: left promiscuous mode [ 224.067721][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.070648][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.074503][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.077930][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.087136][ T1150] veth1_macvtap: left promiscuous mode [ 224.089144][ T1150] veth0_macvtap: left promiscuous mode [ 224.091657][ T1150] veth1_vlan: left promiscuous mode [ 224.093897][ T1150] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 19:17:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a6417e0 RCX=ffffffff81b0011d RDX=ffff888022860000 RSI=ffffffff81b000f9 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc9000164f8a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4c82fd R15=ffff88806a43cf40 RIP=ffffffff81b000fb RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6754000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000001a0 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=3a810b1eb6134bdc DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff914c191a RDX=1ffff9200070deb9 RSI=1ffff9200070debb RDI=ffffc9000386f890 RBP=ffffc9000386f5d8 RSP=ffffc9000386f520 R8 =ffffffff914c191e R9 =0000000000000000 R10=ffffc9000386f590 R11=0000000000012cf4 R12=ffffc9000386f5e0 R13=ffffc9000386f590 R14=ffffc9000386f898 R15=ffffc9000386f5c4 RIP=ffffffff816ad3be RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555567760500 ffffffff 00c00000 GS =0000 ffff8880d6854000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f937cfb6038 CR3=000000004fd09000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=00000000000000c8 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000007c1 0000001400000000 0000000000000000 0000000000000017 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f4066c86ef941c4 60080e80030e8004 0180033c00000e19 0000001100000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 920fffffffffffff 0420100000100000 0000000806080157 ae0c100004100000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000060057d20004 1010000fffffffff ffff040180040208 000a01568e0a1000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01b0030fffffffff ffff0401a0031bc0 80808c1000019003 103cb9c4f54026f0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7b63c45200000004 156f0f41661ec00f f0001010005304c7 46fb6da141c4dee2 ZMM24=53c4f87b53c4f87b 53c4f87b53c4f87b 53c4f87b53c4f87b 53c4f87b53c4f87b 53c4f87b53c4f87b 53c4f87b53c4f87b 53c4f87b53c4f87b 53c4f87b53c4f87b ZMM25=f9dbf843f9dbf843 f9dbf843f9dbf843 f9dbf843f9dbf843 f9dbf843f9dbf843 f9dbf843f9dbf843 f9dbf843f9dbf843 f9dbf843f9dbf843 f9dbf843f9dbf843 ZMM26=010efdd8010efdd8 010efdd8010efdd8 010efdd8010efdd8 010efdd8010efdd8 010efdd8010efdd8 010efdd8010efdd8 010efdd8010efdd8 010efdd8010efdd8 ZMM27=e0f36131e0f36131 e0f36131e0f36131 e0f36131e0f36131 e0f36131e0f36131 e0f36131e0f36131 e0f36131e0f36131 e0f36131e0f36131 e0f36131e0f36131 ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0b0900000b090000 0b0900000b090000 0b0900000b090000 0b0900000b090000 0b0900000b090000 0b0900000b090000 0b0900000b090000 0b0900000b090000 info registers vcpu 2 CPU#2 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b5315 RDI=ffffffff9b0883a0 RBP=ffffffff9b088360 RSP=ffffc9000352efd8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b088360 R15=ffffffff855b52b0 RIP=ffffffff855b533f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007efe99c446c0 ffffffff 00c00000 GS =0000 ffff8880d6954000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f35450e8710 CR3=0000000026b89000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000e0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeccf44dd0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f650cc11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f650cc11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f650cc11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f650cc11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f650cc11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f650cc11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000bf2c3850 RBX=ffffffff93d310c0 RCX=0000000000000003 RDX=0000000000000085 RSI=ffffffff822cf4a0 RDI=ffffffff93d310c0 RBP=0000000000140dca RSP=ffffc9000387f430 R8 =0000000000001000 R9 =0000000000000000 R10=ffffed100779cc00 R11=dffffc0000000000 R12=0000000000000004 R13=ffffea0000ef39c0 R14=dffffc0000000000 R15=ffff8880292cc880 RIP=ffffffff8b7fa83a RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f650d9ff6c0 ffffffff 00c00000 GS =0000 ffff8880d6a54000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001300 CR3=0000000062ac8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000002fefcfa Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffceca77d20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe98e11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe98e11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe98e11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe98e11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe98e11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efe98e11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000