last executing test programs: 1m2.249145801s ago: executing program 0 (id=351): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="c9", 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002980)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004090) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x4e, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20040082) 1m2.247300298s ago: executing program 0 (id=353): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0xf7, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x2, 0x8}, {0x6, 0x9}}, ["", "", ""]}, 0x24}}, 0x40004) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab\x16\x9c{\x8c\x97\xcc\xe7\xa5\xf5\xeb2\x9a\xed%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\xd0\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u', 0xfeffffff00000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000140)) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r7, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) recvmmsg$unix(r5, &(0x7f0000000d80)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000d00)=[{&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000bc0)=""/168, 0xa8}, {&(0x7f0000000400)=""/2, 0x2}, {&(0x7f0000000c80)=""/78, 0x4e}], 0x4, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x1, 0x10004, &(0x7f0000000dc0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000f1f669fa760bf4be11da6438ae999ca2000000000114000200fc0200"/83], 0x5c}}, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='P'], 0x50}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r9, 0xc4c85512, &(0x7f0000000480)={{0x3, 0x3, 0x24000000, 0x3ff, 'syz0\x00', 0x6}, 0x1, [0x9, 0x11, 0x9, 0x5, 0xf, 0x1, 0x2, 0xff, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0x4, 0x3ff, 0x1, 0x36, 0x482, 0xc0010, 0x9, 0x1, 0x3ff, 0x7ff, 0x5, 0x80, 0x0, 0x4, 0x6, 0xffffffff, 0x9, 0x1, 0x71, 0xa, 0x2, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x5, 0x10, 0xfffffffffffffff7, 0x16, 0x9db6, 0x400000007f, 0xfffffffffffffff6, 0x2, 0x5, 0x7, 0x0, 0x8, 0x3, 0x303, 0xa2, 0x8000, 0x3, 0x400, 0x9, 0x1fd, 0x3, 0x2, 0xc9a8, 0x8000000ffffffff, 0x3, 0x8, 0xffff, 0x0, 0x10000, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x9, 0xec, 0x7f, 0xffffffffffffffff, 0x100000000, 0x9f1a, 0xffffffffffffffff, 0xffffffff, 0x8, 0x3, 0x9, 0x3, 0x9, 0x3240, 0x4, 0x3, 0xa, 0xf, 0x8, 0x1, 0x2, 0x4, 0xbf, 0xe70, 0xfffffffffffffff7, 0xb, 0x8000000000000000, 0x6, 0x9, 0x5, 0x639, 0x8000000000000000, 0x4, 0x400, 0x9a06, 0x9, 0xffffffff00000000, 0x3, 0xb3, 0x20007ffffffe, 0x7f, 0xd30, 0x7, 0x4, 0x256, 0x6ff, 0x3, 0x7, 0x1ff, 0x6, 0x9, 0x0, 0x1b485fdd, 0x7, 0x7, 0xfffffffffffffff7, 0x9]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m2.159022901s ago: executing program 0 (id=355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0xcb}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[]) 1m2.098691702s ago: executing program 0 (id=358): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x6) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) chdir(&(0x7f0000000140)='./bus\x00') setxattr$incfs_metadata(&(0x7f00000002c0)='./file1\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x100010, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x22c000, 0x40, 0x30}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x0, {0xffffffffffffffff, 0x7, 0x1, 0x0, 0x3, 0x0, 0x0, 0x8001, 0x803ff, 0x2000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000001240)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc", 0x84}], 0x1}, 0x4008001) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) setfsgid(0xee01) setresgid(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_POISON(r4, 0xc020aa08, &(0x7f0000000040)={{&(0x7f000064d000/0x1000)=nil, 0x1000}, 0x1}) 1m2.047010704s ago: executing program 0 (id=361): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008881}, 0x20048840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000100001000cbd8000fbdbdfa500000000", @ANYRES32=r2, @ANYBLOB="002e0a001162050034001280110001006272696467655f736c617665000000001c00058005001b"], 0x54}, 0x1, 0x0, 0x0, 0x8c041}, 0x2) 1m1.919379962s ago: executing program 0 (id=364): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x44, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xd}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}]}, 0x44}}, 0x44040) 1m1.875675836s ago: executing program 32 (id=364): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x44, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xd}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}]}, 0x44}}, 0x44040) 42.76776206s ago: executing program 4 (id=798): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x400, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x480001) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0383e04, &(0x7f0000000240)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{}, {}]}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb8}}, 0x240010d4) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) close_range(r4, r1, 0x0) r5 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x191800, 0x0) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000540), 0x2480, 0x0) ioctl$CDROM_DISC_STATUS(r6, 0x5327) r7 = syz_open_dev$ndb(&(0x7f0000000580), 0x0, 0x80000) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f00000005c0), 0x4) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x50, r0, 0x10000000) syz_io_uring_submit(0x0, r8, &(0x7f0000000600)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_buf(r0, 0x0, 0x22, &(0x7f0000000780)=""/4096, &(0x7f0000001780)=0x1000) lstat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002a00)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002b00)=0xe8) r12 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002c80), 0x1, 0x0) r13 = openat$random(0xffffffffffffff9c, &(0x7f0000002cc0), 0x14000, 0x0) r14 = syz_clone(0x21014200, &(0x7f0000002d00)="b211f22ff09a6c561d2c1839937732f73c6c640661287cd597750f96da4ecef4670f27b6edbfeb42a436bcb9", 0x2c, &(0x7f0000002d40), &(0x7f0000002d80), &(0x7f0000002dc0)="90b10f591e03cfcbda") statx(r0, &(0x7f0000002e00)='./file0\x00', 0x1000, 0x8, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r9, &(0x7f0000003000)={&(0x7f00000017c0)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002c40)=[{&(0x7f00000018c0)={0x1140, 0x37, 0x100, 0x70bd2a, 0x25dfdbff, "", [@typed={0xc, 0xea, 0x0, 0x0, @u64=0x7d}, @nested={0x101, 0x124, 0x0, 0x1, [@nested={0x4, 0x28}, @typed={0x8, 0x51, 0x0, 0x0, @u32}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r10}, @generic="c41a6857169eca736b71824e2b7e8b5b18cc5014c6b89c92149c6c1f689846f2ecaa672a1bbef2c90765a4ae791cd5753749b4e1ac38e03775b8691ba17d8b89ac9d3274a8f1a9c525218eae96ac371e79ea8a81ebd386539f4f5f415b1a25841a04e0d4cb81831404597626e7606674abea9f0a0b8667cae0011844fe3298c7e7b4c49e9eba6f3aaf36c552825b725c12ada68c9e97191dba594cd2fe9e7d1d2ecf17e0f9ff091ad86efc4dc7bc4f09847cbcf63b00680295a963e4e64b7dc3b0e5a5b34570ffb52a49238def7a8ff3d9484c8f993472b1ecad44fc6661855782", @typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x15}]}, @typed={0xc, 0x27, 0x0, 0x0, @u64=0x7ff}, @generic="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", @typed={0xc, 0x0, 0x0, 0x0, @u64=0x6}]}, 0x1140}, {&(0x7f0000002b40)={0x7c, 0x3a, 0x400, 0x70bd26, 0x25dfdbfc, "", [@typed={0x14, 0xda, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x4f, 0x0, 0x0, @uid=r11}, @nested={0x4f, 0xa9, 0x0, 0x1, [@typed={0x8, 0xfe, 0x0, 0x0, @fd=r0}, @typed={0x6, 0xd5, 0x0, 0x0, @str='-\x00'}, @generic="3cfa79e30ae249e46a51791708323852ff516a1cec81dde9a0bab148c69da4600be2b6f7291135920379439f7c5390", @nested={0x4}, @typed={0x8, 0x111, 0x0, 0x0, @u32=0x3}]}]}, 0x7c}, {&(0x7f0000002bc0)={0x58, 0x2f, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x46, 0x144, 0x0, 0x1, [@generic="9786a7cf16614b9c2cf647dabc30daa1a9b923d5507e710d6ea1cc82061dd2ae08f3e70a753d913326ffda743c7ff02b61c35e9c4d7be36806f4ded2a36e6eb26ca8"]}]}, 0x58}], 0x3, &(0x7f0000002f40)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x34, 0x1, 0x1, [r9, r4, r7, r4, r1, 0xffffffffffffffff, r12, r6, r13]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xffffffffffffffff, r15}}}], 0x88, 0x4080}, 0x20000050) 42.698816578s ago: executing program 4 (id=800): io_uring_enter(0xffffffffffffffff, 0x4a5a, 0x2ae5, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x19, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001600010325bd70130000000007000000"], 0x14}}, 0x4000000) creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:0']) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x81000) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb9", 0x41}], 0x2}], 0x1, 0x40800) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x457) 41.769057013s ago: executing program 4 (id=820): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x401, 0x4, 0x32315852, 0x2, 0x6, 0x46, 0x2, 0x3, 0x1, 0x7, 0x0, 0x7}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sigaltstack(&(0x7f0000000040)={0x0, 0x80000002}, 0x0) (async) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)={0x30, r2, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xe1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 41.7681697s ago: executing program 4 (id=821): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mount$9p_unix(&(0x7f0000000140)='./file1\x00', &(0x7f0000000240)='./file1\x00', 0x0, 0x801000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r0}, './file1\x00'}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x40001, 0x0) fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)=0x0) mount$9p_unix(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)={'trans=unix,', {[{@noextend}, {@privport}, {@aname={'aname', 0x3d, '/dev/autofs\x00'}}, {@afid={'afid', 0x3d, 0x92}}, {@posixacl}, {@ignoreqv}], [{@smackfshat={'smackfshat', 0x3d, 'autofs\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/snapshot\x00'}}, {@euid_gt={'euid>', r4}}, {@permit_directio}, {@uid_eq={'uid', 0x3d, r5}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xff'}}]}}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x200, &(0x7f0000000080)={0x0}) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000000)={0xa14a, 0x800}) 41.679189655s ago: executing program 4 (id=823): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0xfffc, @empty}}, 0x0, 0x0, 0x3f8, 0x8, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406441, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4028, r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9100000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608007fcf0000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 41.536850667s ago: executing program 4 (id=829): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="91d8572e000000000000000000000001000080ffffffff0000000000"], 0x48) r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x800) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000240)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xda, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) connect$packet(r3, &(0x7f00000004c0)={0x11, 0xf7, r4, 0x1, 0x81, 0x6, @broadcast}, 0x14) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000940)={0x2020}, 0x2020) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x40, '\x00', 0x0, r5, 0x4, 0x3, 0x4}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440002100000900010073797a3000000000080003400000000814"], 0x64}}, 0x0) r7 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x88200) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@mmap={0x3, 0x8, 0x4, 0x104400, 0x1, {r1, r2/1000+10000}, {0x3, 0x0, 0x9, 0x1, 0xe, 0x0, "e8ac5c17"}, 0xfffffff7, 0x1, {}, 0x0, 0x0, r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000009500000000000000bff6a0c06a8e02c4d65812fa031773bb05d0a50b0a02e0c94b325ff92755655c92814861b03a79e047b699444035511ee0a7c865b4fa128140f7d42fe0a2af34680bb770e07037304a9f05947c3dce200a1e7bf8b94b1079e019571a7695ef6b55f8b7d75c36f60ef3157aeebd4b6deaf577ec7e36c82f0493b2e2d151f109498510434384d11e5e62b4784ecef3de1629a3d7af0cb86356e630caad70814e4be38d328b52284347a783eff09366def26295f5265d06c6b6ce"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.488841495s ago: executing program 3 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000280)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @multicast}, 0x50, {0x2, 0x4e22, @rand_addr=0x64010100}, 'ip6gre0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getroute={0x14, 0x1a, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000001) r3 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x8000) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1c99) msgrcv(0x0, 0x0, 0x8, 0x0, 0x4800) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x2, 0x12) 41.45712191s ago: executing program 33 (id=829): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="91d8572e000000000000000000000001000080ffffffff0000000000"], 0x48) r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x800) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000240)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xda, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) connect$packet(r3, &(0x7f00000004c0)={0x11, 0xf7, r4, 0x1, 0x81, 0x6, @broadcast}, 0x14) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000940)={0x2020}, 0x2020) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x40, '\x00', 0x0, r5, 0x4, 0x3, 0x4}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440002100000900010073797a3000000000080003400000000814"], 0x64}}, 0x0) r7 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x88200) ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@mmap={0x3, 0x8, 0x4, 0x104400, 0x1, {r1, r2/1000+10000}, {0x3, 0x0, 0x9, 0x1, 0xe, 0x0, "e8ac5c17"}, 0xfffffff7, 0x1, {}, 0x0, 0x0, r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000009500000000000000bff6a0c06a8e02c4d65812fa031773bb05d0a50b0a02e0c94b325ff92755655c92814861b03a79e047b699444035511ee0a7c865b4fa128140f7d42fe0a2af34680bb770e07037304a9f05947c3dce200a1e7bf8b94b1079e019571a7695ef6b55f8b7d75c36f60ef3157aeebd4b6deaf577ec7e36c82f0493b2e2d151f109498510434384d11e5e62b4784ecef3de1629a3d7af0cb86356e630caad70814e4be38d328b52284347a783eff09366def26295f5265d06c6b6ce"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.407514506s ago: executing program 3 (id=833): r0 = getpgrp(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r1, &(0x7f0000000080), 0x0}, 0x20) prlimit64(r0, 0x4, &(0x7f0000000100)={0x5, 0xffffffffffffff51}, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000018010040"]) r5 = syz_open_dev$dri(&(0x7f0000000000), 0xffff, 0x101000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000001c0)={"609d5968734e24174ae9f283f9b7a279", 0x0, 0x0, {0x3, 0xffffff9a}, {0xbe, 0x2}, 0x569, [0x40a5, 0x3, 0x9, 0x5, 0x4, 0xbcc, 0xfffffffffffffff9, 0x5, 0x4, 0x5, 0x9, 0x9fe, 0x9, 0x8, 0x46, 0x1f]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000380)={{r1}, r6, 0x2, @inherit={0x90, &(0x7f00000002c0)={0x1, 0x9, 0x8bc6, 0xfffffffffffff00d, {0x1, 0x9, 0xffffffffffffffff, 0xa, 0xfffffffffffff001}, [0x3, 0x6, 0x8, 0x9, 0x6b6, 0x4, 0x0, 0x8, 0x20000]}}, @name="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"}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[0x0], 0x1}) 41.26457525s ago: executing program 3 (id=836): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000680)=@gcm_128={{0x304}, "0000e60000010027", '\t\x00', "0000001b", "ff00"}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) write$binfmt_aout(r1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="c62ee5d6a89f2387cb40936b2f723c22fc", 0x11, 0x8000, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) socket$kcm(0xa, 0x3, 0x87) syz_emit_ethernet(0x3e, &(0x7f0000000880)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x87, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[@srh={0x2f, 0x0, 0x4, 0x0, 0x5, 0x0, 0xffff}]}}}}}, 0x0) 40.395431084s ago: executing program 3 (id=851): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000340)='befs\x00', 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#X\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="30e1998df0feaac616ea5e7f3217a7c76317b23cd103ec5b6de7d0d09ce615aa773ea2cc345ab155d53161a90b0743fdde639de2c7b6c955b62a5bd741c99ba63b072e068f31f2dad361ac51f6702645ff2bfa660047aa8eadef0d719e6de9d30f025443e64b10a6e7cfbf1ac9e0376aa4296bd9ea2ab5dbdac095d9c4c00fb1608d1e74a3e05bef65586f8e24550c7cd8da09788d788598ef5faa43fb5ab4a23dbcd97c196d358dc07f90eeaec547247674b33a92c497955c7384aa936fb7cc8a3c87d32f4509c5c1e5e6dc1577d976a0c499ba632039c8beae2e5c24e1310c182b48acac631674413015a4c4157c227c7359a74723dd90776e422e142f4ec840f3694e940d9815a9b138a2958e26398b5ccdc577ba57c05cc6ad69a5b4934de42074eaea"], 0x44}}, 0x44000) 40.394610986s ago: executing program 3 (id=853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000200)=@req={0x6, 0xf, 0x1, 0x8}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x8000000000000001, 0x8, 0x0, 0x8, 0x10001, 0x80000000000006, 0x1000000006, 0x10007ffffe]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c74c24022063800000002c24f30f556797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4d}], 0x1, 0x3e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 40.176730689s ago: executing program 3 (id=856): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x34325258, 0x0, 0xb, [{}, {0x0, 0xffffffff}, {0x4}, {0x2}, {}, {}, {0xefe}], 0x0, 0x0, 0x0, 0x0, 0x6}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) 40.136540713s ago: executing program 34 (id=856): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x34325258, 0x0, 0xb, [{}, {0x0, 0xffffffff}, {0x4}, {0x2}, {}, {}, {0xefe}], 0x0, 0x0, 0x0, 0x0, 0x6}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) 929.50709ms ago: executing program 5 (id=1535): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008881}, 0x20048840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000100001000cbd8000fbdbdfa500000000", @ANYRES32=r2, @ANYBLOB="002e0a001162050034001280110001006272696467655f736c617665000000001c00058005001b"], 0x54}, 0x1, 0x0, 0x0, 0x8c041}, 0x2) 929.31708ms ago: executing program 5 (id=1536): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40471}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x4004) 834.091875ms ago: executing program 5 (id=1537): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x8000, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}, 0x1, 0xd}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000040)={0x40, "6971638116a794f2b08c2dada5a584c8707c6d497ec2bb442d57e836cc0d9472", 0x800, 0xc23, 0x2, 0x2, 0x5}) (async) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) ioctl$BLKSECDISCARD(r5, 0x127d, 0x0) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f00000000c0)={0x5, 0xb5315241, 0x8, 0xffff, 0x3, @stepwise={{0x8, 0x5}, {0x1, 0x7}, {0x2, 0x10000}}}) 780.196821ms ago: executing program 5 (id=1539): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x20, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x3, 0x3}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000000206010200000000000000000000fdff140007800800134001a576ea08000640000000010500010006000000050005000a00000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 777.746295ms ago: executing program 6 (id=1540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0xcb}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="080000000008030084000040"]) 726.505938ms ago: executing program 2 (id=1542): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) (async, rerun: 32) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e21, @local}, {0x306, @broadcast}, 0x1c, {0x2, 0x4e25, @multicast2}, 'veth0\x00'}) (async, rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') (rerun: 32) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/38, 0x26}], 0x1, 0xffff, 0xddd073cf) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x10, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f00000003c0)="caf98025f2ae2e", 0x7) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], 0x0, 0x0, 0x2}}, 0x40) (async) r4 = socket$alg(0x26, 0x5, 0x0) (async) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000003a80), 0x101600, 0x0) (async) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) connect$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0xb9, @local, 0x6, 0x2}, 0x20) (async, rerun: 64) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x4e21, 0x10001, @local, 0x7f}, 0x1c) (async) ioctl$FBIOGET_VSCREENINFO(r5, 0x4600, &(0x7f0000003ac0)) (async) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r7 = accept$alg(r4, 0x0, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a00010000000000000000001c14000000000000000000000800011f00000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) r9 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd97>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) sendmsg$alg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="1c0f363a4545cf6743", 0x9}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r7, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x14}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/103, 0x67}], 0x1}, 0x12}], 0x2, 0x2021, 0x0) 640.402146ms ago: executing program 2 (id=1543): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000f9, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x3c0, 0x3, 0x2, 0x42474752, [0x680, 0xe4], [0x7ff, 0xfeedcafe], 0x13a}}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) writev(r1, &(0x7f0000001440)=[{&(0x7f0000000940)="03000000000200", 0x7}], 0x1) add_key(&(0x7f0000002100)='asymmetric\x00', 0x0, &(0x7f00000008c0)="3080", 0x2, 0xfffffffffffffffe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000004e221300000000000a00"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000014"], 0x188}}, 0x40810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000040)={{&(0x7f00006fe000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 566.776953ms ago: executing program 6 (id=1544): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (fail_nth: 16) 459.66404ms ago: executing program 2 (id=1545): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)={0x10, 0x11, 0x1}, 0x10}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r5 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = syz_io_uring_setup(0x2ef2, &(0x7f0000000200)={0x0, 0x25df, 0x800, 0x1, 0x286, 0x0, r6}, &(0x7f0000000140), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000440)=[r2, r5], 0x2) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r9, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r11, 0x6, 0x18, &(0x7f00000005c0)=0x2, 0x4) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000d9717f10ca5e3094d0df27dea3d62e9198b36a2f88293092d75381e6a236b08f5286a982514d84d4286f1a02b052eec002a42da3bca6760234646a87c6c21a301da96fdecaf302cc6f42542274b65e06ff8dc81f7e333a14fbb7a928df7a3be8cd256a09c8df61decd20f235f59c0a3f638bc9ff1a41f1b9498dee24a244c4803b91726120595d1e1e13671431d14d4992668bc54c1ef069fefbbcf1f1676fd9e29ca6375466fcad23524b3c04a604206ff90205f0b4b5102cae66939", @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf256800000008000300", @ANYRES32=r10, @ANYBLOB="1400c70000060807300509059ece6e5049c7b3bb"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500", @ANYRES32=r1], 0x50}, 0x1, 0xba01}, 0x20) 352.613127ms ago: executing program 2 (id=1546): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008881}, 0x20048840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000100001000cbd8000fbdbdfa500000000", @ANYRES32=r2, @ANYBLOB="002e0a001162050034001280110001006272696467655f736c617665000000001c00058005001b"], 0x54}, 0x1, 0x0, 0x0, 0x8c041}, 0x2) 348.064589ms ago: executing program 6 (id=1547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x58}}, 0x20004000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='htcp\x00', 0x5) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) (async, rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @initdev}, &(0x7f0000000100)=0xc) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b3300000000fcdbdf250500000008000300", @ANYRES32=r5], 0x28}}, 0x50) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r4, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, {0x7}, @device_b, @device_a, @initial, {0x2, 0x4}}, 0x12, @val={0x8c, 0x10, {0x667, "88057c83c3ac", @short="0b4b6285315e7872"}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x4881) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0xffff, 0xfff1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12032}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}]}}]}, 0x4c}}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r11, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 32) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x144, 0x1, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CT={0xec, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x30, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x12}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x1, 0x2}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x1]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3c2c}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xce8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (rerun: 32) signalfd(r12, &(0x7f0000000740)={[0xea1]}, 0x8) (async) setsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x401, 0x0, 0xfffffffffffffffc, 0x800000000, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x4d5, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0x44, 0x2d380}}, 0xe8) (async) socket$inet6(0x10, 0x3, 0x0) 347.774265ms ago: executing program 6 (id=1548): syz_emit_vhci(0x0, 0x16) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) sendmmsg(r1, 0x0, 0x0, 0xffe0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000047c0)=r5, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000007e00)=@newtaction={0x14, 0x32, 0x12f}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 347.582714ms ago: executing program 2 (id=1549): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@uuid_on}, {@userxattr}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg/0:0:0:0\x00', 0x280, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000240)) r1 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20020, &(0x7f0000000500)={[{@gid}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x1df) close_range(r2, r2, 0x2) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100, 0x9]}}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000080)={0x4, 0x10, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0]}) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1, 0xa04, 0xfffffffc, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x3d, 0x2, 0x0, 0x0, "893c4a07f752aca160bbc6c6d30c66138c20424fc5fe757234d02c4dc575b7f4c9e6161d900eae371d2766ec5bc5502ffea8d6f82fcf4a65fd2e1550c4f8493b"}}, 0x80}, 0x1, 0x0, 0x0, 0x841}, 0x0) 286.977408ms ago: executing program 1 (id=1550): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @mcast1, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000008b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900010073797a300000000009000200"], 0x2c}}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000040)) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000180), 0x10, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x8010}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) preadv2(r8, &(0x7f0000000900)=[{&(0x7f0000002dc0)=""/4107, 0x100b}], 0x1, 0xae, 0x0, 0x1c) sendmmsg(r2, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200040d1) 286.790099ms ago: executing program 5 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000380)="ca091cc2e088", 0xffe3) write$char_usb(r2, &(0x7f0000001240)="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", 0x1000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa4, 0x4, 0x2, 0xd211fb1, 0x0, 0x9, 0x1}}, {0x4}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa4, 0x4, 0x2, 0xd211fb1, 0x0, 0x9, 0x1}}, {0x4}}]}]}, 0x48}}, 0x0) 286.53483ms ago: executing program 6 (id=1552): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008881}, 0x20048840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000100001000cbd8000fbdbdfa500000000", @ANYRES32=r2, @ANYBLOB="002e0a001162050034001280110001006272696467655f736c617665000000001c00058005001b"], 0x54}, 0x1, 0x0, 0x0, 0x8c041}, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x100}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000000c0)) 286.307118ms ago: executing program 1 (id=1553): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0xcb}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000008d030084000040"]) 285.962388ms ago: executing program 2 (id=1554): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x80800) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000440)={0x2, @time={0xd, 0x8}, 0x81, {0xfb, 0x1}, 0x8, 0x1, 0xfc}) (async) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000800)={0x0, {0x3, 0x0, 0x8000005, 0x3, 0x5, 0x80000001}}) (async) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) (async, rerun: 64) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) (rerun: 64) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write$uinput_user_dev(r2, &(0x7f0000000900)={'syz1\x00', {0x0, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x3, 0xffffffff, 0x0, 0x10001, 0x0, 0x20, 0x6, 0x5, 0x70000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0xfffffffe, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x9, 0x800, 0xffffffd6, 0xfffffffc, 0x0, 0x1, 0x0, 0xffffffff, 0x2ec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x80, 0x0, 0x3, 0x0, 0x9, 0x800000, 0x7], [0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x80, 0x520, 0xd, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100, 0xff, 0x80000001, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x5, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x1, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffeffd, 0x3, 0x0, 0x0, 0x3, 0x4, 0xfffffffe, 0x4, 0x3, 0x0, 0x0, 0x1, 0x80000001, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b24, 0x3fffffd, 0x0, 0x5, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x3]}, 0x45c) (async) syz_usb_disconnect(r1) (async) r3 = syz_usb_connect(0x6, 0x3f, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1, @ANYRES16=r1, @ANYRESDEC=r1], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async, rerun: 64) r4 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) (rerun: 64) syz_usb_control_io(r4, 0x0, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x52, 0xa01, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) (async) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8000) ioctl$EVIOCSREP(r6, 0x40084503, &(0x7f0000000240)=[0x5, 0x47f]) (async, rerun: 64) syz_usb_control_io(r4, 0x0, &(0x7f0000000240)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0xa, 0x83, {0x83, 0xd, "70897d1305ea0a5fe7f7679f254244b746c0c07b2f92146b4397a78efc270fb84376c5757887131c03e295420c61954588207b35d81a336c04dcba6a30d405d544f95e67891a3dae8103e2713d7bedeecbba3acb7a7191be568306b49103cdec09b112ccfb9f5e2a2caa39ad3a7bded65dfc728ebaa36926c27e667ce9d0556b2f"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x40, 0x14, 0xf4, "fc73505ab356c576853d6c8b5deb24be9f9e065f00e3e4ffe8af99f60d1b7d0741beeb005c6b2db0d42145336023f4fed7cb1dc507f130254edcc1b57e17729570dbb95cf781d68627eac94feecce377f50830871d2bbc018000a710b93b24805d0069f607203974b8ccc8be40efa531b4aa9cb0ffe8126425154a63067d02a1f76707eb6e435ffde8a5fb0b575a549bc10a49e9809688c6ffdbd5e7eedd95673b3f66ad72d093663169ca9dcdb8b5f79bd4a73f21138f78d3ce794ceebd7804193b1930946c4474bc4cf556dde8ebfe3c46f5475c5cf5848cc6674d5a7fbe832a894dfdfffdc64ffb06fd72408b11d29ed0b080"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}}) syz_usb_disconnect(r1) (async) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r7, 0x0, 0x0) syz_usb_disconnect(r3) 149.669027ms ago: executing program 6 (id=1555): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f0000000000)={0x1}) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f0000000480)=[{0x0, 0xfffd}], 0x1, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000080)=0x7fff) sendto$inet(r7, 0x0, 0x0, 0x4010, 0x0, 0x0) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f00000000c0)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x810000, &(0x7f0000000300)=ANY=[@ANYBLOB="67727071756f74615f696e6f64655f686172333999201ab15ac999911b9ff1646c696d69743d38652c00"]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001000000000000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0100000087a0b60edc5f0f7e210fcd009264970000000014001280090001007866726d000000000400028014639c68263147be8761d991c2fe39a50a6ade44e6b6d8f112bc6de21ab881932200003dbaa20cffc1a9784b87b26a7c6ef52fcdb1118f84214345646643ab32b6c7701f28436180ce3e5ea826f9c8557d668d58683da54aeb0d373295d74411ef656c17cc56303325acfb4438b9ebb17cc6785fe76da766a88e2cd7ca0b1da1106f052d80e89b2ab1bd9652"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000000}, 0x2000810) recvmmsg(r9, &(0x7f0000001140), 0x700, 0x2, 0x0) syz_io_uring_setup(0xa97, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000000)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r10, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x48e9, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 93.714107ms ago: executing program 5 (id=1556): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (fail_nth: 17) 93.460216ms ago: executing program 1 (id=1557): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000000)={0x1, 0xf}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509000000010000c3aaf0fff1000000bf8720000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 93.093928ms ago: executing program 1 (id=1558): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008881}, 0x20048840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000100001000cbd8000fbdbdfa500000000", @ANYRES32=r2, @ANYBLOB="002e0a001162050034001280110001006272696467655f736c617665000000001c00058005001b"], 0x54}, 0x1, 0x0, 0x0, 0x8c041}, 0x2) 214.366µs ago: executing program 1 (id=1559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000011c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = syz_open_dev$video4linux(&(0x7f0000000180), 0x73, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @bt={0x7, 0xfffffffb, 0x8, 0x79, 0x82e, 0x5, 0x14, 0x2}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r6}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r7, 0x0, 0x33, 0x0, 0x0) listen(r5, 0x0) 0s ago: executing program 1 (id=1560): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) listen(r0, 0x5) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff3d) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000002c0)={0x0, 0xe, 0x8000003, 0x7, 0x4, "a85c45a20d0000008000"}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r3 = syz_open_pts(r1, 0x0) r4 = dup3(r3, r1, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004e0e004c00640000010644898bd414bbac1414bb44241721ac1414bb00000008ac14142700000009ffffffff00000040e0000001000080024e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2607990780005"], 0x0) kernel console output (not intermixed with test programs): 88.097597][ T8809] nfs: Bad value for 'source' [ 88.099810][ T5980] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.105229][ T5980] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.107934][ T5980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.110552][ T5980] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.113261][ T5980] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.168447][ T40] audit: type=1400 audit(1754966397.471:536): avc: denied { bind } for pid=8817 comm="syz.1.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.356633][ T8826] binder: 8825:8826 unknown command 0 [ 88.358374][ T8826] binder: 8825:8826 ioctl c0306201 200000000080 returned -22 [ 88.368791][ T40] audit: type=1400 audit(1754966397.671:537): avc: denied { kexec_image_load } for pid=8825 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 88.489168][ T13] team0 (unregistering): Port device team_slave_1 removed [ 88.551807][ T13] team0 (unregistering): Port device team_slave_0 removed [ 88.843753][ T5977] Bluetooth: hci1: command tx timeout [ 89.159120][ T8724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.171441][ T8724] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.188974][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.191263][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.197725][ T8807] chnl_net:caif_netlink_parms(): no params data found [ 89.212615][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.214864][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.304515][ T8807] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.306812][ T8807] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.310209][ T8807] bridge_slave_0: entered allmulticast mode [ 89.312828][ T8807] bridge_slave_0: entered promiscuous mode [ 89.316942][ T8807] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.319204][ T8807] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.321520][ T8807] bridge_slave_1: entered allmulticast mode [ 89.325083][ T8807] bridge_slave_1: entered promiscuous mode [ 89.349300][ T40] audit: type=1400 audit(1754966398.651:538): avc: denied { create } for pid=8865 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.363833][ T40] audit: type=1400 audit(1754966398.661:539): avc: denied { read } for pid=8865 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 89.369709][ T40] audit: type=1400 audit(1754966398.671:540): avc: denied { ioctl } for pid=8865 comm="syz.1.872" path="socket:[31116]" dev="sockfs" ino=31116 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.385324][ T8807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.397421][ T8807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.441136][ T8807] team0: Port device team_slave_0 added [ 89.444758][ T40] audit: type=1400 audit(1754966398.741:541): avc: denied { map } for pid=8869 comm="syz.1.873" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 89.448501][ T8807] team0: Port device team_slave_1 added [ 89.518962][ T8807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.521179][ T8807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.530314][ T8807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.545555][ T40] audit: type=1400 audit(1754966398.851:542): avc: denied { read } for pid=8879 comm="syz.1.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.561674][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.571580][ T8807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.574505][ T8807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.583886][ T8807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.645483][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.667618][ T8807] hsr_slave_0: entered promiscuous mode [ 89.669824][ T8807] hsr_slave_1: entered promiscuous mode [ 89.671954][ T8807] debugfs: 'hsr0' already exists in 'hsr' [ 89.674163][ T8807] Cannot create hsr debugfs directory [ 89.677819][ T8724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.719938][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.825071][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.878676][ T8807] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 89.893431][ T8807] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 89.899317][ T8807] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 89.911518][ T8807] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 89.926972][ T8724] veth0_vlan: entered promiscuous mode [ 89.947105][ T8724] veth1_vlan: entered promiscuous mode [ 89.979051][ T8918] tipc: Enabling of bearer rejected, failed to enable media [ 89.982399][ T13] bridge_slave_1: left promiscuous mode [ 89.985393][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.989912][ T13] bridge_slave_0: left allmulticast mode [ 89.991707][ T13] bridge_slave_0: left promiscuous mode [ 89.994409][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.203645][ T5977] Bluetooth: hci3: command tx timeout [ 90.450495][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.454802][ T13] bond_slave_0: left allmulticast mode [ 90.458479][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.462802][ T13] bond_slave_1: left allmulticast mode [ 90.467872][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 90.471414][ T13] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 90.479125][ T13] bond0 (unregistering): Released all slaves [ 90.485456][ T13] bond1 (unregistering): Released all slaves [ 90.514734][ T8724] veth0_macvtap: entered promiscuous mode [ 90.529790][ T8724] veth1_macvtap: entered promiscuous mode [ 90.557143][ T8724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.591597][ T8724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.608005][ T1234] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.628942][ T1234] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.644921][ T1234] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.648310][ T1234] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.720732][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.733921][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.742475][ T8807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.792393][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 90.796126][ T8934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.870'. [ 90.796513][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.801860][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.812250][ T8807] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.824702][ T8934] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 90.833078][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.835451][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.846448][ T13] hsr_slave_0: left promiscuous mode [ 90.849250][ T13] hsr_slave_1: left promiscuous mode [ 90.851311][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.855995][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.859339][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.861786][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.867038][ T8951] "syz.1.885" (8951) uses obsolete ecb(arc4) skcipher [ 90.886231][ T13] veth1_macvtap: left promiscuous mode [ 90.888103][ T13] veth0_macvtap: left promiscuous mode [ 90.890201][ T13] veth1_vlan: left promiscuous mode [ 90.925429][ T5977] Bluetooth: hci1: command tx timeout [ 91.409973][ T13] team0 (unregistering): Port device team_slave_1 removed [ 91.470444][ T13] team0 (unregistering): Port device team_slave_0 removed [ 91.983353][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.986488][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.045031][ T8807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.092687][ T8984] sp0: Synchronizing with TNC [ 92.186022][ T8807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.283785][ T5980] Bluetooth: hci3: command tx timeout [ 92.344691][ T8807] veth0_vlan: entered promiscuous mode [ 92.351691][ T8807] veth1_vlan: entered promiscuous mode [ 92.377558][ T8807] veth0_macvtap: entered promiscuous mode [ 92.381564][ T8807] veth1_macvtap: entered promiscuous mode [ 92.396850][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.406488][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.413067][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.423334][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.429209][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.439903][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.517433][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.520794][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.553138][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.557676][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.681632][ T9062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.906'. [ 92.685258][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 92.689430][ T9063] BIDI support in bsg has been removed. [ 92.721780][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 92.721791][ T40] audit: type=1400 audit(1754966402.021:551): avc: denied { ioctl } for pid=9065 comm="syz.6.908" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0xae84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 92.850805][ T9086] bad cache= option: none [ 92.850805][ T9086] [ 92.853106][ T9086] CIFS: VFS: bad cache= option: none [ 92.927612][ T9093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.915'. [ 92.931414][ T40] audit: type=1400 audit(1754966402.231:552): avc: denied { map } for pid=9088 comm="syz.1.915" path="socket:[29556]" dev="sockfs" ino=29556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.943359][ T40] audit: type=1400 audit(1754966402.231:553): avc: denied { read } for pid=9088 comm="syz.1.915" path="socket:[29556]" dev="sockfs" ino=29556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.003649][ T5980] Bluetooth: hci1: command tx timeout [ 93.071334][ T9100] netlink: 52 bytes leftover after parsing attributes in process `syz.6.916'. [ 93.102381][ T9103] netlink: 24 bytes leftover after parsing attributes in process `syz.6.917'. [ 93.105324][ T9103] vxcan1: entered promiscuous mode [ 93.117249][ T9103] overlay: filesystem on ./bus is read-only [ 93.249675][ T9117] netlink: 20 bytes leftover after parsing attributes in process `syz.6.920'. [ 93.252471][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.920'. [ 93.713653][ T10] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 93.723281][ T40] audit: type=1400 audit(1754966403.021:554): avc: denied { ioctl } for pid=9146 comm="syz.1.924" path="socket:[31840]" dev="sockfs" ino=31840 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 93.757422][ T9150] netlink: 52 bytes leftover after parsing attributes in process `syz.1.925'. [ 93.773664][ T40] audit: type=1400 audit(1754966403.081:555): avc: denied { getopt } for pid=9152 comm="syz.5.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.799926][ T9153] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.863555][ T10] usb 11-1: Using ep0 maxpacket: 32 [ 93.870189][ T9136] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.923'. [ 93.875831][ T9153] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.878576][ T10] usb 11-1: unable to get BOS descriptor or descriptor too short [ 93.882085][ T10] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 93.885013][ T10] usb 11-1: can't read configurations, error -71 [ 93.981661][ T9171] ata1.00: invalid cdb length 6 [ 93.987320][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 93.998335][ T9153] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.022655][ T9175] delete_channel: no stack [ 94.077274][ T40] audit: type=1400 audit(1754966403.381:556): avc: denied { setopt } for pid=9183 comm="syz.1.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 94.088092][ T9153] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.160007][ T1146] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.182559][ T1146] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.185769][ T1146] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.201282][ T1234] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.283627][ T5977] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 94.284186][ T5980] Bluetooth: hci4: command 0x1003 tx timeout [ 94.363587][ T5977] Bluetooth: hci3: command tx timeout [ 94.419163][ T40] audit: type=1400 audit(1754966403.721:557): avc: denied { ioctl } for pid=9211 comm="syz.6.939" path="socket:[32826]" dev="sockfs" ino=32826 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 94.529206][ T9230] netlink: 'syz.5.943': attribute type 58 has an invalid length. [ 94.537276][ T40] audit: type=1400 audit(1754966403.841:558): avc: denied { getopt } for pid=9229 comm="syz.5.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.600231][ T9239] SELinux: Context Ü is not valid (left unmapped). [ 94.655146][ T9247] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.687562][ T9256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9256 comm=syz.5.949 [ 94.687570][ T9257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9257 comm=syz.5.949 [ 94.873585][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 94.875547][ T9266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.911189][ T9266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.027657][ T9] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 95.030575][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 95.033135][ T9] usb 6-1: Product: syz [ 95.034539][ T9] usb 6-1: Manufacturer: syz [ 95.036016][ T9] usb 6-1: SerialNumber: syz [ 95.039213][ T9] usb 6-1: config 0 descriptor?? [ 95.042648][ T9] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 95.045379][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 95.050156][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 95.053566][ T9] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 95.056279][ T9] usb 6-1: media controller created [ 95.066160][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.083704][ T5977] Bluetooth: hci1: command tx timeout [ 95.242267][ T9242] dvb-usb: bulk message failed: -22 (3/0) [ 95.255948][ T9] cxusb: set interface failed [ 95.260452][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 95.276180][ T10] libceph: connect (1)[c::]:6789 error -101 [ 95.278243][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 95.281782][ T9] DVB: Unable to find symbol mt352_attach() [ 95.284167][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 95.286630][ T9] zl10353_read_register: readreg error (reg=127, ret==-121) [ 95.289021][ T9] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 95.333560][ T9] rc_core: IR keymap rc-dvico-mce not found [ 95.335815][ T9] Registered IR keymap rc-empty [ 95.338147][ T9] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 95.342208][ T9] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input13 [ 95.348603][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 95.350831][ T9] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 95.357942][ T9] usb 6-1: USB disconnect, device number 7 [ 95.407892][ T9] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 95.458070][ T40] audit: type=1400 audit(1754966404.761:559): avc: denied { view } for pid=9302 comm="syz.2.963" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 95.534312][ T10] libceph: connect (1)[c::]:6789 error -101 [ 95.536562][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 95.566591][ T40] audit: type=1400 audit(1754966404.871:560): avc: denied { accept } for pid=9316 comm="syz.2.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 95.722514][ T9324] IPv6: Can't replace route, no match found [ 96.053941][ T9] libceph: connect (1)[c::]:6789 error -101 [ 96.056123][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 96.105671][ T9286] ceph: No mds server is up or the cluster is laggy [ 96.197180][ T9338] netlink: 'syz.6.970': attribute type 10 has an invalid length. [ 96.216655][ T9338] team0: Port device netdevsim0 added [ 96.443808][ T5977] Bluetooth: hci3: command tx timeout [ 96.465954][ T9351] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.511359][ T9354] netlink: 'syz.6.975': attribute type 8 has an invalid length. [ 96.685981][ T9372] vxfs: WRONG superblock magic 00000000 at 1 [ 96.688373][ T9372] vxfs: WRONG superblock magic 00000000 at 8 [ 96.690307][ T9372] vxfs: can't find superblock. [ 96.803708][ T9387] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 97.413702][ T8978] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 97.583665][ T8978] usb 6-1: Using ep0 maxpacket: 8 [ 97.586606][ T8978] usb 6-1: config 2 interface 0 has no altsetting 0 [ 97.590214][ T8978] usb 6-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 97.593065][ T8978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.595697][ T8978] usb 6-1: Product: syz [ 97.597036][ T8978] usb 6-1: Manufacturer: syz [ 97.598498][ T8978] usb 6-1: SerialNumber: syz [ 97.829635][ T8978] usb 6-1: USB disconnect, device number 8 [ 97.857812][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 97.857824][ T40] audit: type=1400 audit(1754966407.161:563): avc: denied { setopt } for pid=9427 comm="syz.2.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 97.859268][ T9428] __nla_validate_parse: 15 callbacks suppressed [ 97.859278][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 97.932861][ T9429] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 97.935596][ T9429] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 97.938351][ T9429] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 97.940909][ T9429] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 98.269327][ T9433] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1002'. [ 98.393836][ T9438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9438 comm=syz.1.1004 [ 98.398481][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'. [ 98.407966][ T40] audit: type=1400 audit(1754966407.711:564): avc: denied { ioctl } for pid=9443 comm="syz.5.1005" path="socket:[34072]" dev="sockfs" ino=34072 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 98.416420][ T9438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1004'. [ 98.420527][ T40] audit: type=1400 audit(1754966407.721:565): avc: denied { getopt } for pid=9443 comm="syz.5.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 98.431374][ T9450] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1007'. [ 98.452621][ T9456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.452975][ T9458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.460435][ T40] audit: type=1400 audit(1754966407.761:566): avc: denied { connect } for pid=9455 comm="syz.5.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.468047][ T9457] syz.5.1008: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 98.475600][ T9457] CPU: 0 UID: 0 PID: 9457 Comm: syz.5.1008 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 98.475614][ T9457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.475621][ T9457] Call Trace: [ 98.475624][ T9457] [ 98.475628][ T9457] dump_stack_lvl+0x16c/0x1f0 [ 98.475660][ T9457] warn_alloc+0x248/0x3a0 [ 98.475676][ T9457] ? __pfx_warn_alloc+0x10/0x10 [ 98.475692][ T9457] ? xskq_create+0xfb/0x1d0 [ 98.475707][ T9457] ? __vmalloc_node_noprof+0xad/0xf0 [ 98.475724][ T9457] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 98.475743][ T9457] ? xskq_create+0xfb/0x1d0 [ 98.475761][ T9457] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.475781][ T9457] ? xskq_create+0xfb/0x1d0 [ 98.475796][ T9457] vmalloc_user_noprof+0x9e/0xe0 [ 98.475810][ T9457] ? xskq_create+0xfb/0x1d0 [ 98.475825][ T9457] xskq_create+0xfb/0x1d0 [ 98.475841][ T9457] xsk_setsockopt+0x792/0x9a0 [ 98.475856][ T9457] ? __pfx_xsk_setsockopt+0x10/0x10 [ 98.475870][ T9457] ? find_held_lock+0x2b/0x80 [ 98.475885][ T9457] ? selinux_socket_setsockopt+0x6a/0x80 [ 98.475900][ T9457] ? __pfx_xsk_setsockopt+0x10/0x10 [ 98.475914][ T9457] do_sock_setsockopt+0xf3/0x1d0 [ 98.475929][ T9457] __sys_setsockopt+0x1a0/0x230 [ 98.475948][ T9457] __x64_sys_setsockopt+0xbd/0x160 [ 98.475964][ T9457] ? do_syscall_64+0x91/0x4c0 [ 98.475974][ T9457] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.475984][ T9457] do_syscall_64+0xcd/0x4c0 [ 98.475995][ T9457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.476006][ T9457] RIP: 0033:0x7f64b158ebe9 [ 98.476015][ T9457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.476025][ T9457] RSP: 002b:00007f64b2446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.476036][ T9457] RAX: ffffffffffffffda RBX: 00007f64b17b5fa0 RCX: 00007f64b158ebe9 [ 98.476055][ T9457] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 98.476061][ T9457] RBP: 00007f64b1611e19 R08: 0000000000000004 R09: 0000000000000000 [ 98.476067][ T9457] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 98.476073][ T9457] R13: 00007f64b17b6038 R14: 00007f64b17b5fa0 R15: 00007fff91d5b5e8 [ 98.476086][ T9457] [ 98.476089][ T9457] Mem-Info: [ 98.479250][ T9463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.480064][ T9457] active_anon:14072 inactive_anon:0 isolated_anon:0 [ 98.480064][ T9457] active_file:15267 inactive_file:40607 isolated_file:0 [ 98.480064][ T9457] unevictable:1768 dirty:257 writeback:0 [ 98.480064][ T9457] slab_reclaimable:12820 slab_unreclaimable:71149 [ 98.480064][ T9457] mapped:26199 shmem:4652 pagetables:1605 [ 98.480064][ T9457] sec_pagetables:316 bounce:0 [ 98.480064][ T9457] kernel_misc_reclaimable:0 [ 98.480064][ T9457] free:446372 free_pcp:15081 free_cma:0 [ 98.487704][ T9465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1011'. [ 98.489056][ T9457] Node 0 active_anon:56288kB inactive_anon:0kB active_file:61016kB inactive_file:162228kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:104744kB dirty:1016kB writeback:0kB shmem:15072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13712kB pagetables:6204kB sec_pagetables:1264kB all_unreclaimable? no Balloon:0kB [ 98.582365][ T9457] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 98.591568][ T9457] Node 0 DMA free:15344kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 98.601053][ T9457] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 98.603302][ T9457] Node 0 DMA32 free:175044kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56132kB inactive_anon:0kB active_file:61016kB inactive_file:162228kB unevictable:3536kB writepending:1016kB present:2080628kB managed:1263512kB mlocked:0kB bounce:0kB free_pcp:39208kB local_pcp:10328kB free_cma:0kB [ 98.615827][ T9457] lowmem_reserve[]: 0 0 0 0 0 [ 98.617679][ T9457] Node 1 Normal free:1594848kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:200kB unevictable:3536kB writepending:12kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:21200kB local_pcp:5552kB free_cma:0kB [ 98.629737][ T9457] lowmem_reserve[]: 0 0 0 0 0 [ 98.631596][ T9457] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 98.637323][ T9457] Node 0 DMA32: 1202*4kB (UME) 687*8kB (UME) 270*16kB (UME) 188*32kB (UM) 73*64kB (UME) 42*128kB (UME) 20*256kB (UM) 20*512kB (UME) 26*1024kB (UM) 10*2048kB (UM) 20*4096kB (UM) = 175072kB [ 98.644545][ T9457] Node 1 Normal: 4*4kB (E) 4*8kB (E) 7*16kB (E) 44*32kB (UME) 27*64kB (UE) 8*128kB (UME) 9*256kB (UME) 2*512kB (ME) 0*1024kB 1*2048kB (M) 387*4096kB (M) = 1594848kB [ 98.650908][ T9457] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.655950][ T9457] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.659236][ T9457] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.662414][ T9457] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.665681][ T9457] 60500 total pagecache pages [ 98.667354][ T9457] 0 pages in swap cache [ 98.668971][ T9457] Free swap = 124996kB [ 98.670481][ T9457] Total swap = 124996kB [ 98.672143][ T9457] 1048443 pages RAM [ 98.672807][ T9477] program syz.1.1013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.673443][ T9457] 0 pages HighMem/MovableOnly [ 98.673449][ T9457] 283252 pages reserved [ 98.680075][ T9457] 0 pages cma reserved [ 98.709894][ T9480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9480 comm=syz.5.1014 [ 98.710435][ T9479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9479 comm=syz.5.1014 [ 98.756313][ T40] audit: type=1326 audit(1754966408.061:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9486 comm="syz.5.1016" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64b158ebe9 code=0x0 [ 98.877371][ T9503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1020'. [ 98.919329][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 99.005865][ T9511] netlink: 'syz.6.1022': attribute type 1 has an invalid length. [ 99.006977][ T9510] netlink: 'syz.2.1023': attribute type 1 has an invalid length. [ 99.018319][ T9511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.036562][ T9511] bond1: (slave veth3): Enslaving as an active interface with a down link [ 99.040750][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 99.044370][ T9511] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 99.046741][ T9511] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 99.228131][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1026'. [ 99.273323][ T9531] binder: 9530:9531 ioctl 4018620d 0 returned -22 [ 99.435187][ T9470] ceph: No mds server is up or the cluster is laggy [ 99.435438][ T9473] ceph: No mds server is up or the cluster is laggy [ 99.511657][ T40] audit: type=1400 audit(1754966408.811:568): avc: denied { name_bind 0x1000000 } for pid=9536 comm="syz.1.1029" path="socket:[34142]" dev="sockfs" ino=34142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 99.568119][ T9542] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 99.927561][ T40] audit: type=1400 audit(1754966409.214:569): avc: denied { listen } for pid=9583 comm="syz.5.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.934467][ T40] audit: type=1400 audit(1754966409.214:570): avc: denied { accept } for pid=9583 comm="syz.5.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.145498][ T9589] netlink: 'syz.6.1045': attribute type 10 has an invalid length. [ 100.152544][ T9589] batman_adv: batadv0: Adding interface: team0 [ 100.154534][ T9589] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.162334][ T9589] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 100.166943][ T9589] netlink: 'syz.6.1045': attribute type 10 has an invalid length. [ 100.169641][ T9589] team0: entered promiscuous mode [ 100.171266][ T9589] team_slave_0: entered promiscuous mode [ 100.173214][ T9589] team_slave_1: entered promiscuous mode [ 100.175127][ T9589] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 100.178805][ T9589] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.182645][ T9589] batman_adv: batadv0: Interface activated: team0 [ 100.184826][ T9589] batman_adv: batadv0: Interface deactivated: team0 [ 100.186924][ T9589] batman_adv: batadv0: Removing interface: team0 [ 100.189769][ T9589] bridge0: port 3(team0) entered blocking state [ 100.191867][ T9589] bridge0: port 3(team0) entered disabled state [ 100.193941][ T9589] team0: entered allmulticast mode [ 100.195676][ T9589] team_slave_0: entered allmulticast mode [ 100.197493][ T9589] team_slave_1: entered allmulticast mode [ 100.199344][ T9589] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 100.203854][ T9589] bridge0: port 3(team0) entered blocking state [ 100.205935][ T9589] bridge0: port 3(team0) entered forwarding state [ 100.250526][ T84] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.253339][ T84] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.256066][ T84] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.258759][ T84] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.489291][ T40] audit: type=1400 audit(1754966409.747:571): avc: denied { accept } for pid=9603 comm="syz.1.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.643845][ T40] audit: type=1400 audit(1754966409.887:572): avc: denied { relabelfrom } for pid=9629 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 100.644007][ T9630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9630 comm=syz.1.1059 [ 100.806586][ T9650] sctp: [Deprecated]: syz.2.1066 (pid 9650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.806586][ T9650] Use struct sctp_sack_info instead [ 100.838813][ T9657] tracefs: Unknown parameter 'acl' [ 100.877281][ T9665] 9pnet_virtio: no channels available for device syz [ 100.960333][ T9679] IPVS: set_ctl: invalid protocol: 29487 47.112.111.119:25970 [ 101.108735][ T9691] 9pnet_virtio: no channels available for device syz [ 101.340991][ T9724] netlink: 'syz.2.1086': attribute type 25 has an invalid length. [ 101.427607][ T9727] kvm: pic: non byte read [ 101.429756][ T9727] kvm: pic: non byte read [ 101.431918][ T9727] kvm: pic: non byte read [ 101.688281][ T9759] Invalid source name [ 101.689657][ T9759] UBIFS error (pid: 9759): cannot open "./file0", error -22 [ 101.945408][ T5977] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 102.022275][ T9790] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 102.811221][ T9820] netlink: 'syz.6.1119': attribute type 5 has an invalid length. [ 102.935576][ T9826] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 104.404683][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 104.404694][ T40] audit: type=1400 audit(1754966413.404:586): avc: denied { getopt } for pid=9836 comm="syz.6.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 105.074345][ T40] audit: type=1400 audit(1754966414.021:587): avc: denied { getopt } for pid=9844 comm="syz.5.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 105.075535][ T9845] 9p: Unknown uid 00000000004294967295 [ 105.142955][ T9848] __nla_validate_parse: 24 callbacks suppressed [ 105.142967][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1125'. [ 105.236135][ T9856] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1126'. [ 105.331971][ T40] audit: type=1400 audit(1754966414.274:588): avc: denied { getopt } for pid=9862 comm="syz.6.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.360733][ T9866] netlink: 'syz.6.1128': attribute type 5 has an invalid length. [ 105.363309][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1128'. [ 106.136079][ T9927] program syz.5.1136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.164994][ T9231] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 106.189275][ T9940] netlink: 'syz.5.1138': attribute type 5 has an invalid length. [ 106.191792][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1138'. [ 106.287304][ T9945] netlink: 'syz.2.1140': attribute type 5 has an invalid length. [ 106.340213][ T9231] usb 11-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 106.343144][ T9231] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.345617][ T9231] usb 11-1: Product: syz [ 106.348399][ T9231] usb 11-1: Manufacturer: syz [ 106.349868][ T9231] usb 11-1: SerialNumber: syz [ 106.354777][ T9231] usb 11-1: config 0 descriptor?? [ 106.358043][ T9952] IPVS: length: 251 != 24 [ 106.390904][ T9956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.396230][ T40] audit: type=1400 audit(1754966415.266:589): avc: denied { create } for pid=9955 comm="syz.2.1144" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 106.473062][ T9968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11776 sclass=netlink_route_socket pid=9968 comm=syz.5.1147 [ 106.502993][ T9970] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1148'. [ 106.527491][ T40] audit: type=1400 audit(1754966415.387:590): avc: denied { write } for pid=9955 comm="syz.2.1144" name="file0" dev="tmpfs" ino=1727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 106.534412][ T40] audit: type=1400 audit(1754966415.387:591): avc: denied { open } for pid=9955 comm="syz.2.1144" path="/320/file0" dev="tmpfs" ino=1727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 106.541890][ T40] audit: type=1400 audit(1754966415.396:592): avc: denied { ioctl } for pid=9955 comm="syz.2.1144" path="/320/file0" dev="tmpfs" ino=1727 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 106.575975][ T9231] usb 11-1: USB disconnect, device number 4 [ 106.648626][ T9977] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1150'. [ 106.671247][ T9977] netlink: 1192 bytes leftover after parsing attributes in process `syz.5.1150'. [ 106.678162][ T9977] geneve2: entered promiscuous mode [ 106.679978][ T9977] geneve2: entered allmulticast mode [ 106.707227][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1151'. [ 106.735464][ T9985] netlink: 'syz.5.1152': attribute type 4 has an invalid length. [ 106.738192][ T9985] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1152'. [ 106.744525][ T9985] Ã: renamed from bond0 (while UP) [ 107.295611][ T40] audit: type=1400 audit(1754966416.107:593): avc: denied { unlink } for pid=5975 comm="syz-executor" name="file0" dev="tmpfs" ino=1727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.371773][T10021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11776 sclass=netlink_route_socket pid=10021 comm=syz.1.1156 [ 107.390858][T10015] netlink: 'syz.2.1155': attribute type 1 has an invalid length. [ 107.394044][T10015] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1155'. [ 107.449989][T10015] exFAT-fs (nullb0): invalid boot record signature [ 107.452266][T10015] exFAT-fs (nullb0): failed to read boot sector [ 107.454219][T10015] exFAT-fs (nullb0): failed to recognize exfat type [ 107.547592][T10029] bridge_slave_0 (unregistering): left allmulticast mode [ 107.549941][T10029] bridge_slave_0 (unregistering): left promiscuous mode [ 107.552253][T10029] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.703244][ T40] audit: type=1400 audit(1754966416.482:594): avc: denied { getopt } for pid=10058 comm="syz.6.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.720585][T10062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11776 sclass=netlink_route_socket pid=10062 comm=syz.2.1168 [ 107.808799][ T40] audit: type=1400 audit(1754966416.584:595): avc: denied { getopt } for pid=10071 comm="syz.5.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 107.851094][ T6036] IPVS: starting estimator thread 0... [ 107.855419][T10076] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 107.857395][ T91] Bluetooth: hci4: Frame reassembly failed (-84) [ 107.858115][T10076] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 107.862116][T10076] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 107.864067][T10076] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 107.875920][T10082] netlink: 'syz.2.1175': attribute type 1 has an invalid length. [ 107.878339][T10082] netlink: 'syz.2.1175': attribute type 2 has an invalid length. [ 107.950417][T10080] IPVS: using max 47 ests per chain, 112800 per kthread [ 108.045063][T10090] geneve2: entered promiscuous mode [ 108.072040][T10094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11776 sclass=netlink_route_socket pid=10094 comm=syz.6.1179 [ 108.110196][T10098] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 108.117084][T10098] bond0: (slave lo): Enslaving as an active interface with an up link [ 108.320477][T10119] input: syz1 as /devices/virtual/input/input15 [ 108.369920][T10122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11776 sclass=netlink_route_socket pid=10122 comm=syz.1.1188 [ 108.511862][T10137] comedi comedi3: comedi_config --init_data is deprecated [ 108.534343][T10138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=10138 comm=syz.6.1190 [ 108.601644][T10142] 9pnet_fd: Insufficient options for proto=fd [ 108.699984][T10156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11776 sclass=netlink_route_socket pid=10156 comm=syz.1.1199 [ 108.972692][T10184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.072914][ T7533] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 109.158637][T10186] syz.2.1207 (10186): drop_caches: 2 [ 109.247698][ T7533] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.252193][ T7533] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.256106][ T7533] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.260125][ T7533] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.262835][ T7533] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.267846][ T7533] usb 6-1: config 0 descriptor?? [ 109.716339][ T7533] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 109.724064][ T7533] usb 6-1: USB disconnect, device number 9 [ 109.765927][T10211] fido_id[10211]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory [ 109.782591][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 109.782601][ T40] audit: type=1400 audit(1754966418.437:600): avc: denied { read write } for pid=5967 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.792287][ T40] audit: type=1400 audit(1754966418.446:601): avc: denied { open } for pid=5967 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.800161][ T40] audit: type=1400 audit(1754966418.446:602): avc: denied { ioctl } for pid=5967 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.887165][T10228] Bluetooth: MGMT ver 1.23 [ 109.969308][T10233] vivid-002: ================= START STATUS ================= [ 109.972341][T10233] vivid-002: Radio HW Seek Mode: Bounded [ 109.974386][T10233] vivid-002: Radio Programmable HW Seek: false [ 109.976366][T10233] vivid-002: RDS Rx I/O Mode: Block I/O [ 109.978134][T10233] vivid-002: Generate RBDS Instead of RDS: false [ 109.980135][T10233] vivid-002: RDS Reception: true [ 109.982618][T10233] vivid-002: RDS Program Type: 0 inactive [ 109.984574][T10233] vivid-002: RDS PS Name: inactive [ 109.986318][T10233] vivid-002: RDS Radio Text: inactive [ 109.988146][T10233] vivid-002: RDS Traffic Announcement: false inactive [ 109.990460][T10233] vivid-002: RDS Traffic Program: false inactive [ 109.992995][T10233] vivid-002: RDS Music: false inactive [ 109.994762][T10233] vivid-002: ================== END STATUS ================== [ 110.053085][T10233] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10233 comm=syz.1.1218 [ 110.077781][ T5977] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 110.132667][T10244] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 110.135354][T10244] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 110.505247][T10273] CIFS: iocharset name too long [ 110.626829][T10287] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.630706][T10287] __nla_validate_parse: 18 callbacks suppressed [ 110.630717][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'. [ 110.831469][ T40] audit: type=1400 audit(1754966419.409:603): avc: denied { map } for pid=10292 comm="syz.2.1235" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.841062][ T40] audit: type=1400 audit(1754966419.409:604): avc: denied { execute } for pid=10292 comm="syz.2.1235" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.955314][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1236'. [ 111.128031][T10303] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1239'. [ 111.229531][ T40] audit: type=1400 audit(1754966419.784:605): avc: denied { getopt } for pid=10306 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.270918][T10317] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.1244'. [ 111.364177][T10324] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1247'. [ 111.436630][T10328] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1249'. [ 111.562987][T10332] IPVS: set_ctl: invalid protocol: 58 172.20.20.2:20002 [ 111.660024][ T7533] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 111.822751][ T7533] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.825510][ T7533] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.828660][ T7533] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.832026][ T7533] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.836621][ T7533] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.839462][ T7533] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 111.844080][ T7533] usb 10-1: Product: syz [ 111.845456][ T7533] usb 10-1: Manufacturer: syz [ 111.850462][ T7533] cdc_wdm 10-1:1.0: skipping garbage [ 111.852302][ T7533] cdc_wdm 10-1:1.0: skipping garbage [ 111.855005][ T7533] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 111.856945][ T7533] cdc_wdm 10-1:1.0: Unknown control protocol [ 111.872120][T10356] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1259'. [ 111.997566][T10368] netlink: 'syz.1.1263': attribute type 9 has an invalid length. [ 112.006260][ T40] audit: type=1400 audit(1754966420.513:606): avc: denied { listen } for pid=10366 comm="syz.1.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 112.029161][T10372] tipc: Started in network mode [ 112.030747][T10372] tipc: Node identity , cluster identity 4711 [ 112.032294][ T40] audit: type=1400 audit(1754966420.532:607): avc: denied { ioctl } for pid=10365 comm="syz.2.1262" path="socket:[43432]" dev="sockfs" ino=43432 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.032670][T10372] tipc: Failed to obtain node identity [ 112.043626][T10372] tipc: Enabling of bearer rejected, failed to enable media [ 112.050438][T10373] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 112.069034][ T61] usb 10-1: USB disconnect, device number 2 [ 112.103337][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1268'. [ 112.106299][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1268'. [ 112.110887][T10375] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 112.122397][T10375] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 112.125504][T10375] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 112.128075][T10375] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 112.132466][T10375] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 112.135235][T10375] kvm: requested 103085 ns i8254 timer period limited to 200000 ns [ 112.137750][T10375] kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 112.140411][T10375] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 112.144214][T10375] kvm: requested 124876 ns i8254 timer period limited to 200000 ns [ 112.146785][T10375] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 112.192240][T10391] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1270'. [ 112.361030][T10398] program syz.6.1273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.371734][T10403] policy can only be matched on NF_INET_PRE_ROUTING [ 112.371745][T10403] unable to load match [ 112.485702][ T40] audit: type=1400 audit(1754966420.962:608): avc: denied { setattr } for pid=10407 comm="syz.1.1276" name="/" dev="9p" ino=35913857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.488414][T10408] netlink: 'syz.1.1276': attribute type 3 has an invalid length. [ 112.548012][ T61] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 112.709315][ T61] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 112.712184][ T61] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.715508][ T61] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.718591][ T61] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.723342][ T61] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.726315][ T61] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.729094][ T61] usb 10-1: Product: syz [ 112.730465][ T61] usb 10-1: Manufacturer: syz [ 112.736150][ T61] cdc_wdm 10-1:1.0: skipping garbage [ 112.737924][ T61] cdc_wdm 10-1:1.0: skipping garbage [ 112.740457][ T61] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 112.742339][ T61] cdc_wdm 10-1:1.0: Unknown control protocol [ 113.080585][T10417] geneve0: entered promiscuous mode [ 113.084122][T10417] geneve0: entered allmulticast mode [ 113.086919][ T91] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.091373][ T91] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.097352][ T91] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.100813][ T91] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.397867][T10436] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 113.423971][ T40] audit: type=1400 audit(1754966421.832:609): avc: denied { mounton } for pid=10430 comm="syz.1.1285" path="mnt:[4026532868]" dev="nsfs" ino=4026532868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 113.544412][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 113.547469][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 113.552328][ T61] usb 10-1: USB disconnect, device number 3 [ 114.728271][ T9231] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 114.900654][ T9231] usb 7-1: config 0 has no interfaces? [ 114.902427][ T9231] usb 7-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 114.905286][ T9231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.909476][ T9231] usb 7-1: config 0 descriptor?? [ 115.128679][ T9231] usb 7-1: USB disconnect, device number 4 [ 115.142177][T10458] SELinux: failed to load policy [ 116.589755][T10462] sctp: [Deprecated]: syz.1.1297 (pid 10462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.589755][T10462] Use struct sctp_sack_info instead [ 116.595393][T10464] __nla_validate_parse: 4 callbacks suppressed [ 116.595403][T10464] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1298'. [ 116.606357][T10462] netlink: 'syz.1.1297': attribute type 7 has an invalid length. [ 116.608951][T10462] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1297'. [ 116.662510][T10473] syz_tun: entered allmulticast mode [ 116.691621][T10473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=10473 comm=syz.2.1303 [ 116.695996][T10472] syz_tun: left allmulticast mode [ 116.801839][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 116.801851][ T40] audit: type=1400 audit(1754966424.994:611): avc: denied { append } for pid=10490 comm="syz.1.1306" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.811194][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'. [ 116.842099][T10498] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1308'. [ 116.850452][T10479] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1304'. [ 116.871956][T10500] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1309'. [ 116.911305][ T40] audit: type=1400 audit(1754966425.106:612): avc: denied { bind } for pid=10507 comm="syz.6.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 117.119755][T10530] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1318'. [ 117.124290][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'. [ 117.127317][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'. [ 117.163399][T10532] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 117.188781][T10534] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1320'. [ 117.223882][T10538] bridge2: entered allmulticast mode [ 117.356334][T10564] FAULT_INJECTION: forcing a failure. [ 117.356334][T10564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.361885][T10564] CPU: 0 UID: 0 PID: 10564 Comm: syz.6.1332 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 117.361900][T10564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.361906][T10564] Call Trace: [ 117.361910][T10564] [ 117.361914][T10564] dump_stack_lvl+0x16c/0x1f0 [ 117.361929][T10564] should_fail_ex+0x512/0x640 [ 117.361943][T10564] _copy_from_user+0x2e/0xd0 [ 117.361957][T10564] copy_msghdr_from_user+0x98/0x160 [ 117.361969][T10564] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 117.361985][T10564] ___sys_sendmsg+0xfe/0x1d0 [ 117.361996][T10564] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.362018][T10564] ? __mutex_unlock_slowpath+0x100/0x800 [ 117.362044][T10564] __sys_sendmsg+0x16d/0x220 [ 117.362055][T10564] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.362073][T10564] do_syscall_64+0xcd/0x4c0 [ 117.362086][T10564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.362096][T10564] RIP: 0033:0x7f8b7218ebe9 [ 117.362105][T10564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.362116][T10564] RSP: 002b:00007f8b72fa3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.362126][T10564] RAX: ffffffffffffffda RBX: 00007f8b723b5fa0 RCX: 00007f8b7218ebe9 [ 117.362133][T10564] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003 [ 117.362139][T10564] RBP: 00007f8b72fa3090 R08: 0000000000000000 R09: 0000000000000000 [ 117.362145][T10564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.362151][T10564] R13: 00007f8b723b6038 R14: 00007f8b723b5fa0 R15: 00007ffc60dec098 [ 117.362164][T10564] [ 117.395655][T10570] openvswitch: netlink: IPv4 tunnel dst address is zero [ 117.426419][ T40] audit: type=1400 audit(1754966425.583:613): avc: denied { read } for pid=10572 comm="syz.2.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.435238][ T40] audit: type=1400 audit(1754966425.592:614): avc: denied { map } for pid=10561 comm="syz.5.1331" path="socket:[40612]" dev="sockfs" ino=40612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 117.442692][ T40] audit: type=1400 audit(1754966425.592:615): avc: denied { getopt } for pid=10572 comm="syz.2.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.449361][T10579] tmpfs: Bad value for 'mpol' [ 117.449489][T10579] tmpfs: Bad value for 'mpol' [ 117.453032][T10579] tmpfs: Bad value for 'mpol' [ 117.455861][T10579] tmpfs: Bad value for 'mpol' [ 117.457554][T10579] tmpfs: Bad value for 'mpol' [ 117.459173][T10579] tmpfs: Bad value for 'mpol' [ 117.460789][T10579] tmpfs: Bad value for 'mpol' [ 117.462414][T10579] tmpfs: Bad value for 'mpol' [ 117.464056][T10579] tmpfs: Bad value for 'mpol' [ 117.466651][T10579] tmpfs: Bad value for 'mpol' [ 117.468915][T10579] tmpfs: Bad value for 'mpol' [ 117.470588][T10579] tmpfs: Bad value for 'mpol' [ 117.472199][T10579] tmpfs: Bad value for 'mpol' [ 117.473803][T10579] tmpfs: Bad value for 'mpol' [ 117.475448][T10579] tmpfs: Bad value for 'mpol' [ 117.477641][T10579] tmpfs: Bad value for 'mpol' [ 117.479364][T10579] tmpfs: Bad value for 'mpol' [ 117.480981][T10579] tmpfs: Bad value for 'mpol' [ 117.482984][T10579] tmpfs: Bad value for 'mpol' [ 117.484628][T10579] tmpfs: Bad value for 'mpol' [ 117.486512][T10579] tmpfs: Bad value for 'mpol' [ 117.488345][T10579] tmpfs: Bad value for 'mpol' [ 117.490141][T10579] tmpfs: Bad value for 'mpol' [ 117.491789][T10579] tmpfs: Bad value for 'mpol' [ 117.493404][T10579] tmpfs: Bad value for 'mpol' [ 117.495035][T10579] tmpfs: Bad value for 'mpol' [ 117.496696][T10579] tmpfs: Bad value for 'mpol' [ 117.498744][T10579] tmpfs: Bad value for 'mpol' [ 117.500475][T10579] tmpfs: Bad value for 'mpol' [ 117.502144][T10579] tmpfs: Bad value for 'mpol' [ 117.503805][T10579] tmpfs: Bad value for 'mpol' [ 117.505453][T10579] tmpfs: Bad value for 'mpol' [ 117.507135][T10579] tmpfs: Bad value for 'mpol' [ 117.508715][T10586] ptrace attach of "/syz-executor exec"[8724] was attempted by ""[10586] [ 117.528294][ T40] audit: type=1400 audit(1754966425.677:616): avc: denied { read } for pid=10574 comm="syz.1.1336" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 117.539078][ T40] audit: type=1400 audit(1754966425.677:617): avc: denied { open } for pid=10574 comm="syz.1.1336" path="/332/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 117.541663][T10587] block device autoloading is deprecated and will be removed. [ 117.671890][ T40] audit: type=1400 audit(1754966425.817:618): avc: denied { map } for pid=10595 comm="syz.5.1344" path="/proc/247/net/vlan/vlan0" dev="proc" ino=4026533874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 117.700255][T10599] FAULT_INJECTION: forcing a failure. [ 117.700255][T10599] name failslab, interval 1, probability 0, space 0, times 0 [ 117.704816][T10599] CPU: 2 UID: 0 PID: 10599 Comm: syz.5.1345 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 117.704841][T10599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.704853][T10599] Call Trace: [ 117.704860][T10599] [ 117.704867][T10599] dump_stack_lvl+0x16c/0x1f0 [ 117.704891][T10599] should_fail_ex+0x512/0x640 [ 117.704910][T10599] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 117.704933][T10599] should_failslab+0xc2/0x120 [ 117.704953][T10599] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 117.704972][T10599] ? __alloc_skb+0x2b2/0x380 [ 117.705005][T10599] __alloc_skb+0x2b2/0x380 [ 117.705032][T10599] ? __pfx___alloc_skb+0x10/0x10 [ 117.705063][T10599] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 117.705089][T10599] netlink_alloc_large_skb+0x69/0x130 [ 117.705109][T10599] netlink_sendmsg+0x6a1/0xdd0 [ 117.705133][T10599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.705163][T10599] ____sys_sendmsg+0xa98/0xc70 [ 117.705187][T10599] ? copy_msghdr_from_user+0x10a/0x160 [ 117.705205][T10599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.705241][T10599] ___sys_sendmsg+0x134/0x1d0 [ 117.705260][T10599] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.705299][T10599] ? __mutex_unlock_slowpath+0x100/0x800 [ 117.705325][T10599] __sys_sendmsg+0x16d/0x220 [ 117.705343][T10599] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.705376][T10599] ? fput+0x9b/0xd0 [ 117.705404][T10599] do_syscall_64+0xcd/0x4c0 [ 117.705425][T10599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.705444][T10599] RIP: 0033:0x7f64b158ebe9 [ 117.705459][T10599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.705477][T10599] RSP: 002b:00007f64b2446038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.705494][T10599] RAX: ffffffffffffffda RBX: 00007f64b17b5fa0 RCX: 00007f64b158ebe9 [ 117.705506][T10599] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003 [ 117.705516][T10599] RBP: 00007f64b2446090 R08: 0000000000000000 R09: 0000000000000000 [ 117.705527][T10599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.705537][T10599] R13: 00007f64b17b6038 R14: 00007f64b17b5fa0 R15: 00007fff91d5b5e8 [ 117.705563][T10599] [ 117.789435][ T7828] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 117.856770][ T40] audit: type=1400 audit(1754966425.985:619): avc: denied { ioctl } for pid=10613 comm="syz.1.1351" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 117.870544][ T40] audit: type=1400 audit(1754966425.995:620): avc: denied { ioctl } for pid=10613 comm="syz.1.1351" path="socket:[43751]" dev="sockfs" ino=43751 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.896105][T10615] kvm: MONITOR instruction emulated as NOP! [ 117.956827][ T7828] usb 7-1: Using ep0 maxpacket: 8 [ 117.960343][ T7828] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.963373][ T7828] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.966443][ T7828] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 117.969679][ T7828] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 117.972702][ T7828] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.976785][ T7828] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.980549][ T7828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.986753][ T7828] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 118.167263][T10630] FAULT_INJECTION: forcing a failure. [ 118.167263][T10630] name failslab, interval 1, probability 0, space 0, times 0 [ 118.171404][T10630] CPU: 0 UID: 0 PID: 10630 Comm: syz.5.1355 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 118.171419][T10630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.171426][T10630] Call Trace: [ 118.171430][T10630] [ 118.171434][T10630] dump_stack_lvl+0x16c/0x1f0 [ 118.171450][T10630] should_fail_ex+0x512/0x640 [ 118.171461][T10630] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 118.171474][T10630] should_failslab+0xc2/0x120 [ 118.171486][T10630] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 118.171497][T10630] ? vm_area_dup+0x27/0x8d0 [ 118.171515][T10630] vm_area_dup+0x27/0x8d0 [ 118.171532][T10630] __split_vma+0x18e/0x1070 [ 118.171551][T10630] ? __pfx___split_vma+0x10/0x10 [ 118.171572][T10630] ? up_write+0x1b2/0x520 [ 118.171584][T10630] vms_gather_munmap_vmas+0x1d2/0x1340 [ 118.171597][T10630] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 118.171610][T10630] ? __lock_acquire+0x62e/0x1ce0 [ 118.171630][T10630] do_vmi_align_munmap+0x27c/0x7d0 [ 118.171642][T10630] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 118.171651][T10630] ? find_held_lock+0x2b/0x80 [ 118.171681][T10630] do_vmi_munmap+0x204/0x3e0 [ 118.171693][T10630] do_munmap+0xbd/0x100 [ 118.171707][T10630] ? __pfx_do_munmap+0x10/0x10 [ 118.171725][T10630] ? __pfx_down_write_killable+0x10/0x10 [ 118.171740][T10630] mremap_to+0x236/0x450 [ 118.171751][T10630] do_mremap+0xfad/0x1f80 [ 118.171760][T10630] ? get_pid_task+0xfc/0x250 [ 118.171772][T10630] ? get_pid_task+0x106/0x250 [ 118.171781][T10630] ? proc_fail_nth_write+0x9f/0x220 [ 118.171793][T10630] ? find_held_lock+0x2b/0x80 [ 118.171805][T10630] ? __pfx_do_mremap+0x10/0x10 [ 118.171816][T10630] ? find_held_lock+0x2b/0x80 [ 118.171829][T10630] ? ksys_write+0x190/0x250 [ 118.171843][T10630] __do_sys_mremap+0x119/0x170 [ 118.171853][T10630] ? __pfx___do_sys_mremap+0x10/0x10 [ 118.171862][T10630] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 118.171887][T10630] do_syscall_64+0xcd/0x4c0 [ 118.171899][T10630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.171910][T10630] RIP: 0033:0x7f64b158ebe9 [ 118.171918][T10630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.171928][T10630] RSP: 002b:00007f64b2446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 118.171939][T10630] RAX: ffffffffffffffda RBX: 00007f64b17b5fa0 RCX: 00007f64b158ebe9 [ 118.171945][T10630] RDX: 0000000000400000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 118.171951][T10630] RBP: 00007f64b2446090 R08: 0000200000c00000 R09: 0000000000000000 [ 118.171957][T10630] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 118.171963][T10630] R13: 00007f64b17b6038 R14: 00007f64b17b5fa0 R15: 00007fff91d5b5e8 [ 118.171977][T10630] [ 118.417174][T10646] netlink: 'syz.1.1357': attribute type 2 has an invalid length. [ 119.318583][T10666] FAULT_INJECTION: forcing a failure. [ 119.318583][T10666] name failslab, interval 1, probability 0, space 0, times 0 [ 119.322909][T10666] CPU: 3 UID: 0 PID: 10666 Comm: syz.6.1367 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 119.322925][T10666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.322931][T10666] Call Trace: [ 119.322935][T10666] [ 119.322940][T10666] dump_stack_lvl+0x16c/0x1f0 [ 119.322955][T10666] should_fail_ex+0x512/0x640 [ 119.322967][T10666] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 119.322979][T10666] should_failslab+0xc2/0x120 [ 119.322992][T10666] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 119.323003][T10666] ? mas_alloc_nodes+0x18b/0x8b0 [ 119.323035][T10666] mas_alloc_nodes+0x18b/0x8b0 [ 119.323054][T10666] mas_node_count_gfp+0x105/0x130 [ 119.323071][T10666] mas_preallocate+0x7e0/0xde0 [ 119.323089][T10666] ? __pfx_mas_preallocate+0x10/0x10 [ 119.323106][T10666] ? anon_vma_name+0x81/0x2f0 [ 119.323121][T10666] __split_vma+0x34a/0x1070 [ 119.323140][T10666] ? __pfx___split_vma+0x10/0x10 [ 119.323161][T10666] ? up_write+0x1b2/0x520 [ 119.323173][T10666] vms_gather_munmap_vmas+0x1d2/0x1340 [ 119.323186][T10666] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 119.323199][T10666] ? __lock_acquire+0x62e/0x1ce0 [ 119.323219][T10666] do_vmi_align_munmap+0x27c/0x7d0 [ 119.323231][T10666] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 119.323240][T10666] ? find_held_lock+0x2b/0x80 [ 119.323271][T10666] do_vmi_munmap+0x204/0x3e0 [ 119.323283][T10666] do_munmap+0xbd/0x100 [ 119.323296][T10666] ? __pfx_do_munmap+0x10/0x10 [ 119.323315][T10666] ? __pfx_down_write_killable+0x10/0x10 [ 119.323331][T10666] mremap_to+0x236/0x450 [ 119.323342][T10666] do_mremap+0xfad/0x1f80 [ 119.323351][T10666] ? get_pid_task+0xfc/0x250 [ 119.323363][T10666] ? get_pid_task+0x106/0x250 [ 119.323372][T10666] ? proc_fail_nth_write+0x9f/0x220 [ 119.323384][T10666] ? find_held_lock+0x2b/0x80 [ 119.323396][T10666] ? __pfx_do_mremap+0x10/0x10 [ 119.323407][T10666] ? find_held_lock+0x2b/0x80 [ 119.323420][T10666] ? ksys_write+0x190/0x250 [ 119.323434][T10666] __do_sys_mremap+0x119/0x170 [ 119.323444][T10666] ? __pfx___do_sys_mremap+0x10/0x10 [ 119.323453][T10666] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 119.323477][T10666] do_syscall_64+0xcd/0x4c0 [ 119.323489][T10666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.323500][T10666] RIP: 0033:0x7f8b7218ebe9 [ 119.323509][T10666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.323518][T10666] RSP: 002b:00007f8b72fa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 119.323529][T10666] RAX: ffffffffffffffda RBX: 00007f8b723b5fa0 RCX: 00007f8b7218ebe9 [ 119.323535][T10666] RDX: 0000000000400000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 119.323541][T10666] RBP: 00007f8b72fa3090 R08: 0000200000c00000 R09: 0000000000000000 [ 119.323547][T10666] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 119.323556][T10666] R13: 00007f8b723b6038 R14: 00007f8b723b5fa0 R15: 00007ffc60dec098 [ 119.323577][T10666] [ 119.426953][T10675] FAULT_INJECTION: forcing a failure. [ 119.426953][T10675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.431601][T10675] CPU: 2 UID: 0 PID: 10675 Comm: syz.6.1370 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 119.431615][T10675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.431622][T10675] Call Trace: [ 119.431626][T10675] [ 119.431630][T10675] dump_stack_lvl+0x16c/0x1f0 [ 119.431645][T10675] should_fail_ex+0x512/0x640 [ 119.431659][T10675] _copy_from_iter+0x29f/0x16f0 [ 119.431674][T10675] ? __alloc_skb+0x200/0x380 [ 119.431692][T10675] ? __pfx__copy_from_iter+0x10/0x10 [ 119.431706][T10675] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 119.431721][T10675] netlink_sendmsg+0x829/0xdd0 [ 119.431734][T10675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.431750][T10675] ____sys_sendmsg+0xa98/0xc70 [ 119.431764][T10675] ? copy_msghdr_from_user+0x10a/0x160 [ 119.431775][T10675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.431794][T10675] ___sys_sendmsg+0x134/0x1d0 [ 119.431804][T10675] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.431826][T10675] ? __mutex_unlock_slowpath+0x100/0x800 [ 119.431841][T10675] __sys_sendmsg+0x16d/0x220 [ 119.431851][T10675] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.431869][T10675] do_syscall_64+0xcd/0x4c0 [ 119.431881][T10675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.431893][T10675] RIP: 0033:0x7f8b7218ebe9 [ 119.431901][T10675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.431912][T10675] RSP: 002b:00007f8b72fa3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.431922][T10675] RAX: ffffffffffffffda RBX: 00007f8b723b5fa0 RCX: 00007f8b7218ebe9 [ 119.431928][T10675] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003 [ 119.431934][T10675] RBP: 00007f8b72fa3090 R08: 0000000000000000 R09: 0000000000000000 [ 119.431940][T10675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.431946][T10675] R13: 00007f8b723b6038 R14: 00007f8b723b5fa0 R15: 00007ffc60dec098 [ 119.431970][T10675] [ 119.577885][T10688] tmpfs: Invalid uid '0x00000000ffffffff' [ 119.678002][T10693] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 119.942109][T10706] FAULT_INJECTION: forcing a failure. [ 119.942109][T10706] name failslab, interval 1, probability 0, space 0, times 0 [ 119.946506][T10706] CPU: 2 UID: 0 PID: 10706 Comm: syz.5.1382 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 119.946520][T10706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.946527][T10706] Call Trace: [ 119.946531][T10706] [ 119.946535][T10706] dump_stack_lvl+0x16c/0x1f0 [ 119.946551][T10706] should_fail_ex+0x512/0x640 [ 119.946565][T10706] should_failslab+0xc2/0x120 [ 119.946577][T10706] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 119.946589][T10706] ? skb_clone+0x190/0x3f0 [ 119.946602][T10706] skb_clone+0x190/0x3f0 [ 119.946612][T10706] netlink_deliver_tap+0xabd/0xd30 [ 119.946626][T10706] netlink_unicast+0x64c/0x870 [ 119.946639][T10706] ? __pfx_netlink_unicast+0x10/0x10 [ 119.946650][T10706] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 119.946665][T10706] netlink_sendmsg+0x8d1/0xdd0 [ 119.946679][T10706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.946695][T10706] ____sys_sendmsg+0xa98/0xc70 [ 119.946709][T10706] ? copy_msghdr_from_user+0x10a/0x160 [ 119.946719][T10706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.946738][T10706] ___sys_sendmsg+0x134/0x1d0 [ 119.946749][T10706] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.946770][T10706] ? __mutex_unlock_slowpath+0x100/0x800 [ 119.946786][T10706] __sys_sendmsg+0x16d/0x220 [ 119.946814][T10706] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.946831][T10706] ? fput+0x9b/0xd0 [ 119.946847][T10706] do_syscall_64+0xcd/0x4c0 [ 119.946859][T10706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.946870][T10706] RIP: 0033:0x7f64b158ebe9 [ 119.946879][T10706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.946889][T10706] RSP: 002b:00007f64b2446038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.946899][T10706] RAX: ffffffffffffffda RBX: 00007f64b17b5fa0 RCX: 00007f64b158ebe9 [ 119.946906][T10706] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003 [ 119.946912][T10706] RBP: 00007f64b2446090 R08: 0000000000000000 R09: 0000000000000000 [ 119.946918][T10706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.946923][T10706] R13: 00007f64b17b6038 R14: 00007f64b17b5fa0 R15: 00007fff91d5b5e8 [ 119.946936][T10706] [ 120.633621][T10732] FAULT_INJECTION: forcing a failure. [ 120.633621][T10732] name failslab, interval 1, probability 0, space 0, times 0 [ 120.637556][T10732] CPU: 0 UID: 0 PID: 10732 Comm: syz.6.1391 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 120.637570][T10732] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.637577][T10732] Call Trace: [ 120.637581][T10732] [ 120.637585][T10732] dump_stack_lvl+0x16c/0x1f0 [ 120.637599][T10732] should_fail_ex+0x512/0x640 [ 120.637611][T10732] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 120.637628][T10732] should_failslab+0xc2/0x120 [ 120.637640][T10732] __kmalloc_cache_noprof+0x6a/0x3e0 [ 120.637657][T10732] ? rtnl_newlink+0x11b/0x2000 [ 120.637670][T10732] ? __pfx_rtnl_newlink+0x10/0x10 [ 120.637680][T10732] rtnl_newlink+0x11b/0x2000 [ 120.637694][T10732] ? __pfx_rtnl_newlink+0x10/0x10 [ 120.637704][T10732] ? find_held_lock+0x2b/0x80 [ 120.637717][T10732] ? avc_has_perm_noaudit+0x117/0x3b0 [ 120.637730][T10732] ? avc_has_perm_noaudit+0x149/0x3b0 [ 120.637744][T10732] ? __lock_acquire+0x62e/0x1ce0 [ 120.637767][T10732] ? find_held_lock+0x2b/0x80 [ 120.637778][T10732] ? __pfx_rtnl_newlink+0x10/0x10 [ 120.637788][T10732] ? __pfx_rtnl_newlink+0x10/0x10 [ 120.637798][T10732] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 120.637809][T10732] ? __pfx_rtnl_newlink+0x10/0x10 [ 120.637820][T10732] rtnetlink_rcv_msg+0x95b/0xe90 [ 120.637832][T10732] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.637846][T10732] ? ref_tracker_free+0x37c/0x830 [ 120.637860][T10732] netlink_rcv_skb+0x158/0x420 [ 120.637872][T10732] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.637884][T10732] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.637899][T10732] ? netlink_deliver_tap+0x1ae/0xd30 [ 120.637912][T10732] netlink_unicast+0x5a7/0x870 [ 120.637925][T10732] ? __pfx_netlink_unicast+0x10/0x10 [ 120.637936][T10732] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 120.637951][T10732] netlink_sendmsg+0x8d1/0xdd0 [ 120.637964][T10732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.637979][T10732] ____sys_sendmsg+0xa98/0xc70 [ 120.637993][T10732] ? copy_msghdr_from_user+0x10a/0x160 [ 120.638004][T10732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.638022][T10732] ___sys_sendmsg+0x134/0x1d0 [ 120.638033][T10732] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.638054][T10732] ? __mutex_unlock_slowpath+0x100/0x800 [ 120.638069][T10732] __sys_sendmsg+0x16d/0x220 [ 120.638079][T10732] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.638097][T10732] do_syscall_64+0xcd/0x4c0 [ 120.638110][T10732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.638120][T10732] RIP: 0033:0x7f8b7218ebe9 [ 120.638129][T10732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.638139][T10732] RSP: 002b:00007f8b72fa3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.638149][T10732] RAX: ffffffffffffffda RBX: 00007f8b723b5fa0 RCX: 00007f8b7218ebe9 [ 120.638156][T10732] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003 [ 120.638161][T10732] RBP: 00007f8b72fa3090 R08: 0000000000000000 R09: 0000000000000000 [ 120.638167][T10732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.638173][T10732] R13: 00007f8b723b6038 R14: 00007f8b723b5fa0 R15: 00007ffc60dec098 [ 120.638186][T10732] [ 120.749105][ T61] usb 7-1: USB disconnect, device number 5 [ 120.757061][T10735] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.760137][T10735] IPv6: NLM_F_CREATE should be set when creating new route [ 120.767872][T10735] lo: entered allmulticast mode [ 120.772644][T10735] tunl0: entered allmulticast mode [ 120.776337][T10735] gre0: entered allmulticast mode [ 120.785921][T10735] gretap0: entered allmulticast mode [ 120.794914][T10735] erspan0: entered allmulticast mode [ 120.799847][T10735] ip_vti0: entered allmulticast mode [ 120.804900][T10735] ip6_vti0: entered allmulticast mode [ 120.810637][T10735] sit0: entered allmulticast mode [ 120.815050][T10735] ip6tnl0: entered allmulticast mode [ 120.818130][T10735] ip6gre0: entered allmulticast mode [ 120.821430][T10735] syz_tun: entered allmulticast mode [ 120.825367][T10735] ip6gretap0: entered allmulticast mode [ 120.828978][T10735] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.832668][T10735] bridge0: entered allmulticast mode [ 120.835892][T10735] vcan0: entered allmulticast mode [ 120.837819][T10735] Ã: entered allmulticast mode [ 120.839389][T10735] bond_slave_0: entered allmulticast mode [ 120.841164][T10735] bond_slave_1: entered allmulticast mode [ 120.845098][T10735] team0: entered allmulticast mode [ 120.846714][T10735] team_slave_0: entered allmulticast mode [ 120.848503][T10735] team_slave_1: entered allmulticast mode [ 120.852107][T10735] dummy0: entered allmulticast mode [ 120.857848][T10735] nlmon0: entered allmulticast mode [ 120.860286][T10735] caif0: entered allmulticast mode [ 120.862146][T10735] batadv0: entered allmulticast mode [ 120.865705][T10735] vxcan0: entered allmulticast mode [ 120.867822][T10735] vxcan1: entered allmulticast mode [ 120.870518][T10735] veth0: entered allmulticast mode [ 120.874223][T10735] veth1: entered allmulticast mode [ 120.877917][T10735] wg0: entered allmulticast mode [ 120.880718][T10735] wg1: entered allmulticast mode [ 120.884159][T10735] wg2: entered allmulticast mode [ 120.890732][T10735] veth0_to_bridge: entered allmulticast mode [ 120.896228][T10735] veth1_to_bridge: entered allmulticast mode [ 120.900519][T10735] veth0_to_bond: entered allmulticast mode [ 120.906805][T10735] veth1_to_bond: entered allmulticast mode [ 120.913878][T10735] veth0_to_team: entered allmulticast mode [ 120.919093][T10735] veth1_to_team: entered allmulticast mode [ 120.927700][T10735] veth0_to_batadv: entered allmulticast mode [ 120.932756][T10735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.935920][T10735] batadv_slave_0: entered allmulticast mode [ 120.939925][T10735] xfrm0: entered allmulticast mode [ 120.944273][T10735] veth0_to_hsr: entered allmulticast mode [ 120.949208][T10735] hsr_slave_0: entered allmulticast mode [ 120.955878][T10735] veth1_to_hsr: entered allmulticast mode [ 120.960954][T10735] hsr_slave_1: entered allmulticast mode [ 120.964525][T10735] hsr0: entered allmulticast mode [ 120.969749][T10735] veth1_virt_wifi: entered allmulticast mode [ 120.974912][T10735] veth0_virt_wifi: entered allmulticast mode [ 120.978043][T10735] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 120.981243][T10735] veth1_vlan: entered allmulticast mode [ 120.986220][T10735] veth0_vlan: entered allmulticast mode [ 120.992720][T10735] vlan0: entered allmulticast mode [ 120.994560][T10735] vlan1: entered allmulticast mode [ 120.996620][T10735] macvlan0: entered allmulticast mode [ 120.999980][T10735] macvlan1: entered allmulticast mode [ 121.006596][T10735] ipvlan0: entered allmulticast mode [ 121.009111][T10735] ipvlan1: entered allmulticast mode [ 121.013311][T10735] veth1_macvtap: entered allmulticast mode [ 121.019772][T10735] veth0_macvtap: entered allmulticast mode [ 121.027127][T10735] macvtap0: entered allmulticast mode [ 121.032108][T10735] macsec0: entered allmulticast mode [ 121.037307][T10735] geneve0: entered allmulticast mode [ 121.042705][T10735] geneve1: entered allmulticast mode [ 121.053709][T10735] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 121.064659][T10735] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 121.069472][T10735] netdevsim netdevsim5 eth0: entered allmulticast mode [ 121.072688][T10735] netdevsim netdevsim5 eth1: entered allmulticast mode [ 121.075731][T10735] netdevsim netdevsim5 eth2: entered allmulticast mode [ 121.078516][ T7828] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 121.078986][T10735] netdevsim netdevsim5 eth3: entered allmulticast mode [ 121.084604][T10735] vxlan0: entered allmulticast mode [ 121.086955][T10735] syztnl1: entered allmulticast mode [ 121.090467][T10735] geneve2: left promiscuous mode [ 121.102732][ T13] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.105392][ T13] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.108013][ T13] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.111112][ T13] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.251934][T10765] FAULT_INJECTION: forcing a failure. [ 121.251934][T10765] name failslab, interval 1, probability 0, space 0, times 0 [ 121.256096][T10765] CPU: 1 UID: 0 PID: 10765 Comm: syz.5.1402 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 121.256111][T10765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.256117][T10765] Call Trace: [ 121.256121][T10765] [ 121.256125][T10765] dump_stack_lvl+0x16c/0x1f0 [ 121.256140][T10765] should_fail_ex+0x512/0x640 [ 121.256152][T10765] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 121.256166][T10765] should_failslab+0xc2/0x120 [ 121.256178][T10765] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 121.256190][T10765] ? __request_module+0x2cb/0x690 [ 121.256204][T10765] kstrdup+0x53/0x100 [ 121.256216][T10765] __request_module+0x2cb/0x690 [ 121.256227][T10765] ? __pfx___request_module+0x10/0x10 [ 121.256242][T10765] ? find_held_lock+0x2b/0x80 [ 121.256255][T10765] ? rtnl_link_ops_get+0x17b/0x2c0 [ 121.256270][T10765] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.256280][T10765] rtnl_newlink+0x1466/0x2000 [ 121.256295][T10765] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.256304][T10765] ? find_held_lock+0x2b/0x80 [ 121.256317][T10765] ? avc_has_perm_noaudit+0x117/0x3b0 [ 121.256330][T10765] ? avc_has_perm_noaudit+0x149/0x3b0 [ 121.256352][T10765] ? find_held_lock+0x2b/0x80 [ 121.256363][T10765] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.256373][T10765] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.256383][T10765] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 121.256394][T10765] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.256405][T10765] rtnetlink_rcv_msg+0x95b/0xe90 [ 121.256417][T10765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.256431][T10765] ? __lock_acquire+0x62e/0x1ce0 [ 121.256450][T10765] netlink_rcv_skb+0x158/0x420 [ 121.256461][T10765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.256473][T10765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 121.256489][T10765] ? netlink_deliver_tap+0x1ae/0xd30 [ 121.256498][T10765] ? selinux_netlink_send+0x578/0x830 [ 121.256512][T10765] ? is_vmalloc_addr+0x86/0xa0 [ 121.256524][T10765] netlink_unicast+0x5a7/0x870 [ 121.256537][T10765] ? __pfx_netlink_unicast+0x10/0x10 [ 121.256547][T10765] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 121.256562][T10765] netlink_sendmsg+0x8d1/0xdd0 [ 121.256575][T10765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.256591][T10765] ____sys_sendmsg+0xa98/0xc70 [ 121.256605][T10765] ? copy_msghdr_from_user+0x10a/0x160 [ 121.256615][T10765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.256634][T10765] ___sys_sendmsg+0x134/0x1d0 [ 121.256644][T10765] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.256665][T10765] ? __mutex_unlock_slowpath+0x100/0x800 [ 121.256681][T10765] __sys_sendmsg+0x16d/0x220 [ 121.256691][T10765] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.256710][T10765] do_syscall_64+0xcd/0x4c0 [ 121.256722][T10765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.256733][T10765] RIP: 0033:0x7f64b158ebe9 [ 121.256741][T10765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.256751][T10765] RSP: 002b:00007f64b2446038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.256762][T10765] RAX: ffffffffffffffda RBX: 00007f64b17b5fa0 RCX: 00007f64b158ebe9 [ 121.256768][T10765] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003 [ 121.256774][T10765] RBP: 00007f64b2446090 R08: 0000000000000000 R09: 0000000000000000 [ 121.256780][T10765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.256786][T10765] R13: 00007f64b17b6038 R14: 00007f64b17b5fa0 R15: 00007fff91d5b5e8 [ 121.256798][T10765] [ 121.348175][T10777] netlink: 'syz.6.1407': attribute type 9 has an invalid length. [ 121.529708][T10804] program syz.6.1417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.565522][T10807] FAULT_INJECTION: forcing a failure. [ 121.565522][T10807] name failslab, interval 1, probability 0, space 0, times 0 [ 121.569496][T10807] CPU: 2 UID: 0 PID: 10807 Comm: syz.1.1418 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 121.569511][T10807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.569517][T10807] Call Trace: [ 121.569522][T10807] [ 121.569526][T10807] dump_stack_lvl+0x16c/0x1f0 [ 121.569540][T10807] should_fail_ex+0x512/0x640 [ 121.569552][T10807] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 121.569570][T10807] should_failslab+0xc2/0x120 [ 121.569582][T10807] __kmalloc_cache_noprof+0x6a/0x3e0 [ 121.569597][T10807] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 121.569614][T10807] ? lockdep_hardirqs_on+0x7c/0x110 [ 121.569624][T10807] ? __request_module+0x2ad/0x690 [ 121.569637][T10807] __request_module+0x2ad/0x690 [ 121.569648][T10807] ? __pfx___request_module+0x10/0x10 [ 121.569664][T10807] ? find_held_lock+0x2b/0x80 [ 121.569677][T10807] ? rtnl_link_ops_get+0x17b/0x2c0 [ 121.569693][T10807] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.569703][T10807] rtnl_newlink+0x1466/0x2000 [ 121.569717][T10807] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.569727][T10807] ? find_held_lock+0x2b/0x80 [ 121.569740][T10807] ? avc_has_perm_noaudit+0x117/0x3b0 [ 121.569753][T10807] ? avc_has_perm_noaudit+0x149/0x3b0 [ 121.569774][T10807] ? find_held_lock+0x2b/0x80 [ 121.569786][T10807] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.569796][T10807] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.569805][T10807] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 121.569816][T10807] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.569828][T10807] rtnetlink_rcv_msg+0x95b/0xe90 [ 121.569840][T10807] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.569855][T10807] ? ref_tracker_free+0x37c/0x830 [ 121.569869][T10807] netlink_rcv_skb+0x158/0x420 [ 121.569880][T10807] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.569892][T10807] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 121.569908][T10807] ? netlink_deliver_tap+0x1ae/0xd30 [ 121.569920][T10807] netlink_unicast+0x5a7/0x870 [ 121.569933][T10807] ? __pfx_netlink_unicast+0x10/0x10 [ 121.569945][T10807] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 121.569960][T10807] netlink_sendmsg+0x8d1/0xdd0 [ 121.569973][T10807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.569989][T10807] ____sys_sendmsg+0xa98/0xc70 [ 121.570002][T10807] ? copy_msghdr_from_user+0x10a/0x160 [ 121.570017][T10807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.570036][T10807] ___sys_sendmsg+0x134/0x1d0 [ 121.570047][T10807] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.570079][T10807] ? __mutex_unlock_slowpath+0x100/0x800 [ 121.570097][T10807] __sys_sendmsg+0x16d/0x220 [ 121.570107][T10807] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.570126][T10807] do_syscall_64+0xcd/0x4c0 [ 121.570138][T10807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.570149][T10807] RIP: 0033:0x7f31a2f8ebe9 [ 121.570158][T10807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.570169][T10807] RSP: 002b:00007f31a3d32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.570179][T10807] RAX: ffffffffffffffda RBX: 00007f31a31b5fa0 RCX: 00007f31a2f8ebe9 [ 121.570185][T10807] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003 [ 121.570191][T10807] RBP: 00007f31a3d32090 R08: 0000000000000000 R09: 0000000000000000 [ 121.570197][T10807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.570203][T10807] R13: 00007f31a31b6038 R14: 00007f31a31b5fa0 R15: 00007ffce1e9af08 [ 121.570216][T10807] [ 121.682702][T10812] SELinux: Context system_u:object_r:udev_rules_t:s0 is not valid (left unmapped). [ 121.684526][ T5977] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 121.690251][ T5977] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 121.785863][T10819] netlink: 'syz.1.1422': attribute type 1 has an invalid length. [ 121.785934][T10821] netlink: 'syz.6.1423': attribute type 20 has an invalid length. [ 121.789673][T10819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50886 sclass=netlink_route_socket pid=10819 comm=syz.1.1422 [ 121.941697][T10831] bond4: entered allmulticast mode [ 121.943616][T10831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.082757][T10843] FAULT_INJECTION: forcing a failure. [ 122.082757][T10843] name failslab, interval 1, probability 0, space 0, times 0 [ 122.086812][T10843] CPU: 3 UID: 0 PID: 10843 Comm: syz.6.1429 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 122.086826][T10843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 122.086833][T10843] Call Trace: [ 122.086836][T10843] [ 122.086840][T10843] dump_stack_lvl+0x16c/0x1f0 [ 122.086854][T10843] should_fail_ex+0x512/0x640 [ 122.086866][T10843] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 122.086884][T10843] should_failslab+0xc2/0x120 [ 122.086896][T10843] __kmalloc_cache_noprof+0x6a/0x3e0 [ 122.086911][T10843] ? rcu_is_watching+0x12/0xc0 [ 122.086925][T10843] ? call_usermodehelper_setup+0xaf/0x360 [ 122.086938][T10843] ? __pfx_free_modprobe_argv+0x10/0x10 [ 122.086950][T10843] call_usermodehelper_setup+0xaf/0x360 [ 122.086965][T10843] __request_module+0x3bd/0x690 [ 122.086976][T10843] ? __pfx___request_module+0x10/0x10 [ 122.086991][T10843] ? find_held_lock+0x2b/0x80 [ 122.087005][T10843] ? rtnl_link_ops_get+0x17b/0x2c0 [ 122.087019][T10843] ? __pfx_rtnl_newlink+0x10/0x10 [ 122.087029][T10843] rtnl_newlink+0x1466/0x2000 [ 122.087044][T10843] ? __pfx_rtnl_newlink+0x10/0x10 [ 122.087053][T10843] ? find_held_lock+0x2b/0x80 [ 122.087066][T10843] ? avc_has_perm_noaudit+0x117/0x3b0 [ 122.087079][T10843] ? avc_has_perm_noaudit+0x149/0x3b0 [ 122.087100][T10843] ? find_held_lock+0x2b/0x80 [ 122.087112][T10843] ? __pfx_rtnl_newlink+0x10/0x10 [ 122.087122][T10843] ? __pfx_rtnl_newlink+0x10/0x10 [ 122.087131][T10843] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 122.087143][T10843] ? __pfx_rtnl_newlink+0x10/0x10 [ 122.087154][T10843] rtnetlink_rcv_msg+0x95b/0xe90 [ 122.087166][T10843] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.087180][T10843] ? ref_tracker_free+0x37c/0x830 [ 122.087194][T10843] netlink_rcv_skb+0x158/0x420 [ 122.087209][T10843] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.087221][T10843] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 122.087237][T10843] ? netlink_deliver_tap+0x1ae/0xd30 [ 122.087250][T10843] netlink_unicast+0x5a7/0x870 [ 122.087262][T10843] ? __pfx_netlink_unicast+0x10/0x10 [ 122.087273][T10843] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 122.087288][T10843] netlink_sendmsg+0x8d1/0xdd0 [ 122.087301][T10843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.087317][T10843] ____sys_sendmsg+0xa98/0xc70 [ 122.087331][T10843] ? copy_msghdr_from_user+0x10a/0x160 [ 122.087341][T10843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.087360][T10843] ___sys_sendmsg+0x134/0x1d0 [ 122.087370][T10843] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.087392][T10843] ? __mutex_unlock_slowpath+0x100/0x800 [ 122.087407][T10843] __sys_sendmsg+0x16d/0x220 [ 122.087417][T10843] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.087436][T10843] do_syscall_64+0xcd/0x4c0 [ 122.087447][T10843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.087458][T10843] RIP: 0033:0x7f8b7218ebe9 [ 122.087467][T10843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.087477][T10843] RSP: 002b:00007f8b72fa3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.087487][T10843] RAX: ffffffffffffffda RBX: 00007f8b723b5fa0 RCX: 00007f8b7218ebe9 [ 122.087494][T10843] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000003 [ 122.087500][T10843] RBP: 00007f8b72fa3090 R08: 0000000000000000 R09: 0000000000000000 [ 122.087506][T10843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.087512][T10843] R13: 00007f8b723b6038 R14: 00007f8b723b5fa0 R15: 00007ffc60dec098 [ 122.087524][T10843] [ 122.087553][T10843] __nla_validate_parse: 25 callbacks suppressed [ 122.087559][T10843] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1429'. [ 122.121566][T10845] vivid-002: disconnect [ 122.203525][T10845] vivid-002: reconnect [ 122.359997][T10850] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1432'. [ 122.385349][T10853] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1433'. [ 122.406299][T10853] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1433'. [ 122.460854][T10858] overlay: ./file0 is not a directory [ 123.105452][T10874] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1441'. [ 123.108424][T10874] FAULT_INJECTION: forcing a failure. [ 123.108424][T10874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.114736][T10874] CPU: 3 UID: 0 PID: 10874 Comm: syz.6.1441 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 123.114750][T10874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.114757][T10874] Call Trace: [ 123.114761][T10874] [ 123.114784][T10874] dump_stack_lvl+0x16c/0x1f0 [ 123.114807][T10874] should_fail_ex+0x512/0x640 [ 123.114827][T10874] _copy_to_user+0x32/0xd0 [ 123.114846][T10874] simple_read_from_buffer+0xcb/0x170 [ 123.114858][T10874] proc_fail_nth_read+0x197/0x240 [ 123.114871][T10874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.114883][T10874] ? rw_verify_area+0xcf/0x6c0 [ 123.114899][T10874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.114911][T10874] vfs_read+0x1e1/0xcf0 [ 123.114923][T10874] ? __pfx___mutex_lock+0x10/0x10 [ 123.114934][T10874] ? __pfx_vfs_read+0x10/0x10 [ 123.114948][T10874] ? __fget_files+0x20e/0x3c0 [ 123.114963][T10874] ksys_read+0x12a/0x250 [ 123.114973][T10874] ? __pfx_ksys_read+0x10/0x10 [ 123.114987][T10874] do_syscall_64+0xcd/0x4c0 [ 123.114999][T10874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.115011][T10874] RIP: 0033:0x7f8b7218d5fc [ 123.115019][T10874] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 123.115031][T10874] RSP: 002b:00007f8b72fa3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.115042][T10874] RAX: ffffffffffffffda RBX: 00007f8b723b5fa0 RCX: 00007f8b7218d5fc [ 123.115048][T10874] RDX: 000000000000000f RSI: 00007f8b72fa30a0 RDI: 0000000000000006 [ 123.115054][T10874] RBP: 00007f8b72fa3090 R08: 0000000000000000 R09: 0000000000000000 [ 123.115061][T10874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.115066][T10874] R13: 00007f8b723b6038 R14: 00007f8b723b5fa0 R15: 00007ffc60dec098 [ 123.115079][T10874] [ 123.130077][ T5977] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 123.133477][T10876] overlayfs: overlapping lowerdir path [ 123.163051][T10878] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1442'. [ 123.188040][T10881] overlayfs: overlapping lowerdir path [ 123.222370][T10885] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1443'. [ 123.233281][T10884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1444'. [ 123.329258][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1447'. [ 123.332083][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1447'. [ 123.448634][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 123.448645][ T40] audit: type=1400 audit(1754966431.214:627): avc: denied { append } for pid=10894 comm="syz.1.1448" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.759245][T10919] qnx4: no qnx4 filesystem (no root dir). [ 124.020085][ T40] audit: type=1326 audit(1754966431.757:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.1.1464" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31a2f8ebe9 code=0x0 [ 124.181619][T10964] IPVS: length: 184 != 24 [ 124.359828][ T40] audit: type=1400 audit(1754966432.065:629): avc: denied { mount } for pid=10991 comm="syz.1.1477" name="/" dev="configfs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 124.370271][ T40] audit: type=1400 audit(1754966432.075:630): avc: denied { search } for pid=10991 comm="syz.1.1477" name="/" dev="configfs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.377524][ T40] audit: type=1400 audit(1754966432.075:631): avc: denied { setattr } for pid=10991 comm="syz.1.1477" name="/" dev="configfs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.399247][T10971] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 124.401079][T10971] PKCS7: Only support pkcs7_signedData type [ 124.408660][T10992] tipc: Started in network mode [ 124.410257][T10992] tipc: Node identity 4, cluster identity 4711 [ 124.412188][T10992] tipc: Node number set to 4 [ 124.506593][T11013] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.604282][ T40] audit: type=1400 audit(1754966432.290:632): avc: denied { ioctl } for pid=11030 comm="syz.1.1487" path="socket:[47439]" dev="sockfs" ino=47439 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 124.862614][T11069] kAFS: unparsable volume name [ 124.962889][ T40] audit: type=1400 audit(1754966432.636:633): avc: denied { write } for pid=11071 comm="syz.5.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.056341][T11076] all: renamed from lo [ 125.337531][T11094] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 125.341215][ T40] audit: type=1400 audit(1754966432.982:634): avc: denied { relabelto } for pid=11093 comm="syz.5.1505" name="133" dev="tmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 125.349791][ T40] audit: type=1400 audit(1754966432.982:635): avc: denied { associate } for pid=11093 comm="syz.5.1505" name="133" dev="tmpfs" ino=703 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 125.358404][ T40] audit: type=1400 audit(1754966432.991:636): avc: denied { remove_name } for pid=8724 comm="syz-executor" name="binderfs" dev="tmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 125.370203][T11096] lo: entered promiscuous mode [ 125.371764][T11096] lo: left allmulticast mode [ 125.374243][T11096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.664127][T11106] FAULT_INJECTION: forcing a failure. [ 125.664127][T11106] name failslab, interval 1, probability 0, space 0, times 0 [ 125.668100][T11106] CPU: 3 UID: 0 PID: 11106 Comm: syz.5.1510 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 125.668114][T11106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.668121][T11106] Call Trace: [ 125.668125][T11106] [ 125.668129][T11106] dump_stack_lvl+0x16c/0x1f0 [ 125.668144][T11106] should_fail_ex+0x512/0x640 [ 125.668156][T11106] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 125.668169][T11106] should_failslab+0xc2/0x120 [ 125.668181][T11106] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 125.668192][T11106] ? vm_area_dup+0x27/0x8d0 [ 125.668210][T11106] vm_area_dup+0x27/0x8d0 [ 125.668227][T11106] copy_vma+0x4fa/0xaa0 [ 125.668240][T11106] ? __pfx_copy_vma+0x10/0x10 [ 125.668254][T11106] ? vms_complete_munmap_vmas+0x667/0x970 [ 125.668271][T11106] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 125.668282][T11106] copy_vma_and_data+0x1cf/0x790 [ 125.668294][T11106] ? __pfx_copy_vma_and_data+0x10/0x10 [ 125.668307][T11106] ? __vma_enter_locked+0x163/0x3f0 [ 125.668324][T11106] ? find_held_lock+0x2b/0x80 [ 125.668338][T11106] ? move_vma+0x536/0x1780 [ 125.668350][T11106] move_vma+0x548/0x1780 [ 125.668360][T11106] ? do_vmi_munmap+0x20c/0x3e0 [ 125.668370][T11106] ? __pfx_move_vma+0x10/0x10 [ 125.668379][T11106] ? mm_get_unmapped_area+0x95/0xe0 [ 125.668393][T11106] ? shmem_get_unmapped_area+0x170/0xa00 [ 125.668410][T11106] ? selinux_mmap_addr+0x2b/0x110 [ 125.668423][T11106] ? bpf_lsm_mmap_addr+0x9/0x10 [ 125.668436][T11106] ? security_mmap_addr+0x6c/0x1e0 [ 125.668452][T11106] ? __get_unmapped_area+0x267/0x440 [ 125.668466][T11106] ? vrm_set_new_addr+0x208/0x290 [ 125.668477][T11106] mremap_to+0x1b7/0x450 [ 125.668487][T11106] do_mremap+0xfad/0x1f80 [ 125.668496][T11106] ? get_pid_task+0xfc/0x250 [ 125.668508][T11106] ? get_pid_task+0x106/0x250 [ 125.668517][T11106] ? proc_fail_nth_write+0x9f/0x220 [ 125.668529][T11106] ? find_held_lock+0x2b/0x80 [ 125.668541][T11106] ? __pfx_do_mremap+0x10/0x10 [ 125.668553][T11106] ? find_held_lock+0x2b/0x80 [ 125.668565][T11106] ? ksys_write+0x190/0x250 [ 125.668579][T11106] __do_sys_mremap+0x119/0x170 [ 125.668589][T11106] ? __pfx___do_sys_mremap+0x10/0x10 [ 125.668598][T11106] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 125.668622][T11106] do_syscall_64+0xcd/0x4c0 [ 125.668634][T11106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.668646][T11106] RIP: 0033:0x7f64b158ebe9 [ 125.668654][T11106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.668664][T11106] RSP: 002b:00007f64b2446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 125.668674][T11106] RAX: ffffffffffffffda RBX: 00007f64b17b5fa0 RCX: 00007f64b158ebe9 [ 125.668681][T11106] RDX: 0000000000400000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 125.668687][T11106] RBP: 00007f64b2446090 R08: 0000200000c00000 R09: 0000000000000000 [ 125.668693][T11106] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 125.668699][T11106] R13: 00007f64b17b6038 R14: 00007f64b17b5fa0 R15: 00007fff91d5b5e8 [ 125.668712][T11106] [ 125.855125][T11120] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 125.855526][T11119] netlink: 'syz.5.1515': attribute type 1 has an invalid length. [ 125.857582][T11120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.892668][T11125] 9p: Unknown Cache mode or invalid value fs [ 126.135063][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 126.289766][T11146] program syz.1.1521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.292818][T11146] ata1.00: invalid service action 31 [ 126.306172][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 126.306711][T11148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.309130][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.313220][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.317342][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 126.321691][T11148] bond0: (slave batadv1): Opening slave failed [ 126.322329][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.326810][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 126.328202][T11144] FAULT_INJECTION: forcing a failure. [ 126.328202][T11144] name failslab, interval 1, probability 0, space 0, times 0 [ 126.330660][ T9] usb 7-1: SerialNumber: syz [ 126.333857][T11144] CPU: 1 UID: 0 PID: 11144 Comm: syz.6.1522 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 126.333871][T11144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.333878][T11144] Call Trace: [ 126.333882][T11144] [ 126.333886][T11144] dump_stack_lvl+0x16c/0x1f0 [ 126.333900][T11144] should_fail_ex+0x512/0x640 [ 126.333912][T11144] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 126.333925][T11144] should_failslab+0xc2/0x120 [ 126.333937][T11144] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 126.333948][T11144] ? mas_alloc_nodes+0x18b/0x8b0 [ 126.333966][T11144] mas_alloc_nodes+0x18b/0x8b0 [ 126.333984][T11144] mas_node_count_gfp+0x105/0x130 [ 126.334001][T11144] mas_preallocate+0x7e0/0xde0 [ 126.334015][T11144] ? __pfx_mas_preallocate+0x10/0x10 [ 126.334031][T11144] ? rcu_read_unlock+0x17/0x60 [ 126.334046][T11144] vma_link+0x135/0x6a0 [ 126.334058][T11144] ? __pfx_vma_link+0x10/0x10 [ 126.334068][T11144] ? rcu_is_watching+0x12/0xc0 [ 126.334084][T11144] ? anon_vma_clone+0x405/0x5c0 [ 126.334101][T11144] ? anon_vma_name+0x81/0x2f0 [ 126.334116][T11144] copy_vma+0x6c2/0xaa0 [ 126.334128][T11144] ? __pfx_copy_vma+0x10/0x10 [ 126.334142][T11144] ? vms_complete_munmap_vmas+0x667/0x970 [ 126.334159][T11144] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 126.334170][T11144] copy_vma_and_data+0x1cf/0x790 [ 126.334182][T11144] ? __pfx_copy_vma_and_data+0x10/0x10 [ 126.334195][T11144] ? __vma_enter_locked+0x163/0x3f0 [ 126.334212][T11144] ? find_held_lock+0x2b/0x80 [ 126.334225][T11144] ? move_vma+0x536/0x1780 [ 126.334238][T11144] move_vma+0x548/0x1780 [ 126.334247][T11144] ? do_vmi_munmap+0x20c/0x3e0 [ 126.334258][T11144] ? __pfx_move_vma+0x10/0x10 [ 126.334267][T11144] ? mm_get_unmapped_area+0x95/0xe0 [ 126.334285][T11144] ? shmem_get_unmapped_area+0x170/0xa00 [ 126.334301][T11144] ? selinux_mmap_addr+0x2b/0x110 [ 126.334315][T11144] ? bpf_lsm_mmap_addr+0x9/0x10 [ 126.334328][T11144] ? security_mmap_addr+0x6c/0x1e0 [ 126.334343][T11144] ? __get_unmapped_area+0x267/0x440 [ 126.334358][T11144] ? vrm_set_new_addr+0x208/0x290 [ 126.334368][T11144] mremap_to+0x1b7/0x450 [ 126.334379][T11144] do_mremap+0xfad/0x1f80 [ 126.334388][T11144] ? get_pid_task+0xfc/0x250 [ 126.334399][T11144] ? get_pid_task+0x106/0x250 [ 126.334408][T11144] ? proc_fail_nth_write+0x9f/0x220 [ 126.334420][T11144] ? find_held_lock+0x2b/0x80 [ 126.334432][T11144] ? __pfx_do_mremap+0x10/0x10 [ 126.334443][T11144] ? find_held_lock+0x2b/0x80 [ 126.334455][T11144] ? ksys_write+0x190/0x250 [ 126.334470][T11144] __do_sys_mremap+0x119/0x170 [ 126.334479][T11144] ? __pfx___do_sys_mremap+0x10/0x10 [ 126.334489][T11144] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 126.334513][T11144] do_syscall_64+0xcd/0x4c0 [ 126.334525][T11144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.334536][T11144] RIP: 0033:0x7f8b7218ebe9 [ 126.334545][T11144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.334555][T11144] RSP: 002b:00007f8b72fa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 126.334566][T11144] RAX: ffffffffffffffda RBX: 00007f8b723b5fa0 RCX: 00007f8b7218ebe9 [ 126.334572][T11144] RDX: 0000000000400000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 126.334578][T11144] RBP: 00007f8b72fa3090 R08: 0000200000c00000 R09: 0000000000000000 [ 126.334584][T11144] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 126.334590][T11144] R13: 00007f8b723b6038 R14: 00007f8b723b5fa0 R15: 00007ffc60dec098 [ 126.334603][T11144] [ 126.464272][ T9] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 126.613493][T11163] binder: 11162:11163 unknown command 0 [ 126.615293][T11163] binder: 11162:11163 ioctl c0306201 200000000080 returned -22 [ 126.679108][T11111] netlink: 'syz.2.1512': attribute type 9 has an invalid length. [ 126.686837][T11111] syz.2.1512: attempt to access beyond end of device [ 126.686837][T11111] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 126.693189][T11111] vxfs: unable to read disk superblock at 1 [ 126.695686][T11111] syz.2.1512: attempt to access beyond end of device [ 126.695686][T11111] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 126.700762][T11111] vxfs: unable to read disk superblock at 8 [ 126.703309][T11111] vxfs: can't find superblock. [ 126.708857][T11112] syz.2.1512: attempt to access beyond end of device [ 126.708857][T11112] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 126.714583][T11112] vxfs: unable to read disk superblock at 1 [ 126.717375][T11112] syz.2.1512: attempt to access beyond end of device [ 126.717375][T11112] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 126.722787][T11112] vxfs: unable to read disk superblock at 8 [ 126.725763][T11112] vxfs: can't find superblock. [ 126.730445][ T6058] usb 7-1: USB disconnect, device number 6 [ 126.958096][T11184] FAULT_INJECTION: forcing a failure. [ 126.958096][T11184] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 126.962719][T11184] CPU: 2 UID: 0 PID: 11184 Comm: syz.5.1534 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 126.962752][T11184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.962760][T11184] Call Trace: [ 126.962764][T11184] [ 126.962768][T11184] dump_stack_lvl+0x16c/0x1f0 [ 126.962783][T11184] should_fail_ex+0x512/0x640 [ 126.962798][T11184] should_fail_alloc_page+0xe7/0x130 [ 126.962813][T11184] prepare_alloc_pages+0x3c2/0x610 [ 126.962829][T11184] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 126.962845][T11184] ? mas_next_slot+0x12d3/0x21b0 [ 126.962857][T11184] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 126.962873][T11184] ? mas_find+0x156/0x6d0 [ 126.962884][T11184] ? validate_mm+0x40a/0x570 [ 126.962902][T11184] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 126.962916][T11184] ? policy_nodemask+0xea/0x4e0 [ 126.962930][T11184] alloc_pages_mpol+0x1fb/0x550 [ 126.962942][T11184] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 126.962958][T11184] alloc_pages_noprof+0x131/0x390 [ 126.962970][T11184] pte_alloc_one+0x1c/0x3a0 [ 126.962984][T11184] __pte_alloc+0x6d/0x3c0 [ 126.962996][T11184] ? __pfx___pte_alloc+0x10/0x10 [ 126.963013][T11184] ? up_write+0x1b2/0x520 [ 126.963026][T11184] move_page_tables+0x2af2/0x44a0 [ 126.963037][T11184] ? copy_vma+0x496/0xaa0 [ 126.963053][T11184] ? __pfx_move_page_tables+0x10/0x10 [ 126.963063][T11184] ? vms_complete_munmap_vmas+0x667/0x970 [ 126.963079][T11184] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 126.963091][T11184] copy_vma_and_data+0x24e/0x790 [ 126.963102][T11184] ? __pfx_copy_vma_and_data+0x10/0x10 [ 126.963115][T11184] ? __vma_enter_locked+0x163/0x3f0 [ 126.963132][T11184] ? find_held_lock+0x2b/0x80 [ 126.963145][T11184] ? move_vma+0x536/0x1780 [ 126.963157][T11184] move_vma+0x548/0x1780 [ 126.963167][T11184] ? do_vmi_munmap+0x20c/0x3e0 [ 126.963177][T11184] ? __pfx_move_vma+0x10/0x10 [ 126.963186][T11184] ? mm_get_unmapped_area+0x95/0xe0 [ 126.963200][T11184] ? shmem_get_unmapped_area+0x170/0xa00 [ 126.963216][T11184] ? selinux_mmap_addr+0x2b/0x110 [ 126.963229][T11184] ? bpf_lsm_mmap_addr+0x9/0x10 [ 126.963254][T11184] ? security_mmap_addr+0x6c/0x1e0 [ 126.963271][T11184] ? __get_unmapped_area+0x267/0x440 [ 126.963286][T11184] ? vrm_set_new_addr+0x208/0x290 [ 126.963296][T11184] mremap_to+0x1b7/0x450 [ 126.963307][T11184] do_mremap+0xfad/0x1f80 [ 126.963316][T11184] ? get_pid_task+0xfc/0x250 [ 126.963327][T11184] ? get_pid_task+0x106/0x250 [ 126.963336][T11184] ? proc_fail_nth_write+0x9f/0x220 [ 126.963349][T11184] ? find_held_lock+0x2b/0x80 [ 126.963361][T11184] ? __pfx_do_mremap+0x10/0x10 [ 126.963372][T11184] ? find_held_lock+0x2b/0x80 [ 126.963384][T11184] ? ksys_write+0x190/0x250 [ 126.963398][T11184] __do_sys_mremap+0x119/0x170 [ 126.963408][T11184] ? __pfx___do_sys_mremap+0x10/0x10 [ 126.963417][T11184] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 126.963443][T11184] do_syscall_64+0xcd/0x4c0 [ 126.963454][T11184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.963465][T11184] RIP: 0033:0x7f64b158ebe9 [ 126.963475][T11184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.963485][T11184] RSP: 002b:00007f64b2446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 126.963495][T11184] RAX: ffffffffffffffda RBX: 00007f64b17b5fa0 RCX: 00007f64b158ebe9 [ 126.963502][T11184] RDX: 0000000000400000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 126.963508][T11184] RBP: 00007f64b2446090 R08: 0000200000c00000 R09: 0000000000000000 [ 126.963514][T11184] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 126.963520][T11184] R13: 00007f64b17b6038 R14: 00007f64b17b5fa0 R15: 00007fff91d5b5e8 [ 126.963533][T11184] [ 127.291088][T11199] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.298447][T11201] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.571737][T11221] FAULT_INJECTION: forcing a failure. [ 127.571737][T11221] name failslab, interval 1, probability 0, space 0, times 0 [ 127.575650][T11221] CPU: 3 UID: 0 PID: 11221 Comm: syz.6.1544 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 127.575665][T11221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.575671][T11221] Call Trace: [ 127.575675][T11221] [ 127.575679][T11221] dump_stack_lvl+0x16c/0x1f0 [ 127.575693][T11221] should_fail_ex+0x512/0x640 [ 127.575705][T11221] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 127.575718][T11221] should_failslab+0xc2/0x120 [ 127.575730][T11221] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 127.575741][T11221] ? ptlock_alloc+0x1f/0x70 [ 127.575758][T11221] ptlock_alloc+0x1f/0x70 [ 127.575786][T11221] pte_alloc_one+0x82/0x3a0 [ 127.575799][T11221] __pte_alloc+0x6d/0x3c0 [ 127.575812][T11221] ? __pfx___pte_alloc+0x10/0x10 [ 127.575824][T11221] ? up_write+0x1b2/0x520 [ 127.575837][T11221] move_page_tables+0x2af2/0x44a0 [ 127.575848][T11221] ? copy_vma+0x496/0xaa0 [ 127.575864][T11221] ? __pfx_move_page_tables+0x10/0x10 [ 127.575874][T11221] ? vms_complete_munmap_vmas+0x667/0x970 [ 127.575890][T11221] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 127.575902][T11221] copy_vma_and_data+0x24e/0x790 [ 127.575913][T11221] ? __pfx_copy_vma_and_data+0x10/0x10 [ 127.575926][T11221] ? __vma_enter_locked+0x163/0x3f0 [ 127.575943][T11221] ? find_held_lock+0x2b/0x80 [ 127.575956][T11221] ? move_vma+0x536/0x1780 [ 127.575968][T11221] move_vma+0x548/0x1780 [ 127.575978][T11221] ? do_vmi_munmap+0x20c/0x3e0 [ 127.575988][T11221] ? __pfx_move_vma+0x10/0x10 [ 127.575997][T11221] ? mm_get_unmapped_area+0x95/0xe0 [ 127.576011][T11221] ? shmem_get_unmapped_area+0x170/0xa00 [ 127.576027][T11221] ? selinux_mmap_addr+0x2b/0x110 [ 127.576040][T11221] ? bpf_lsm_mmap_addr+0x9/0x10 [ 127.576053][T11221] ? security_mmap_addr+0x6c/0x1e0 [ 127.576068][T11221] ? __get_unmapped_area+0x267/0x440 [ 127.576083][T11221] ? vrm_set_new_addr+0x208/0x290 [ 127.576093][T11221] mremap_to+0x1b7/0x450 [ 127.576103][T11221] do_mremap+0xfad/0x1f80 [ 127.576112][T11221] ? get_pid_task+0xfc/0x250 [ 127.576124][T11221] ? get_pid_task+0x106/0x250 [ 127.576133][T11221] ? proc_fail_nth_write+0x9f/0x220 [ 127.576145][T11221] ? find_held_lock+0x2b/0x80 [ 127.576157][T11221] ? __pfx_do_mremap+0x10/0x10 [ 127.576168][T11221] ? find_held_lock+0x2b/0x80 [ 127.576181][T11221] ? ksys_write+0x190/0x250 [ 127.576195][T11221] __do_sys_mremap+0x119/0x170 [ 127.576218][T11221] ? __pfx___do_sys_mremap+0x10/0x10 [ 127.576228][T11221] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 127.576252][T11221] do_syscall_64+0xcd/0x4c0 [ 127.576264][T11221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.576278][T11221] RIP: 0033:0x7f8b7218ebe9 [ 127.576287][T11221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.576297][T11221] RSP: 002b:00007f8b72fa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 127.576308][T11221] RAX: ffffffffffffffda RBX: 00007f8b723b5fa0 RCX: 00007f8b7218ebe9 [ 127.576314][T11221] RDX: 0000000000400000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 127.576320][T11221] RBP: 00007f8b72fa3090 R08: 0000200000c00000 R09: 0000000000000000 [ 127.576327][T11221] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 127.576332][T11221] R13: 00007f8b723b6038 R14: 00007f8b723b5fa0 R15: 00007ffc60dec098 [ 127.576345][T11221] [ 127.661308][T11226] (syz.2.1545,11226,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 127.731350][T11229] __nla_validate_parse: 19 callbacks suppressed [ 127.731363][T11229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1546'. [ 127.735536][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1548'. [ 127.760598][T11236] SELinux: ebitmap: truncated map [ 127.766142][T11236] SELinux: failed to load policy [ 127.811351][T11243] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1552'. [ 127.821219][T11243] macsec3: entered promiscuous mode [ 127.822882][T11243] macsec3: entered allmulticast mode [ 128.026344][T11252] xt_limit: Overflow, try lower: 271964/0 [ 128.032602][T11262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1558'. [ 128.058324][T11257] FAULT_INJECTION: forcing a failure. [ 128.058324][T11257] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 128.063904][T11257] CPU: 1 UID: 0 PID: 11257 Comm: syz.5.1556 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 128.063920][T11257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.063926][T11257] Call Trace: [ 128.063930][T11257] [ 128.063934][T11257] dump_stack_lvl+0x16c/0x1f0 [ 128.063949][T11257] should_fail_ex+0x512/0x640 [ 128.063963][T11257] should_fail_alloc_page+0xe7/0x130 [ 128.063977][T11257] prepare_alloc_pages+0x3c2/0x610 [ 128.063994][T11257] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 128.064007][T11257] ? mark_held_locks+0x49/0x80 [ 128.064029][T11257] ? smp_call_function_many_cond+0x1239/0x1600 [ 128.064043][T11257] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.064053][T11257] ? __pfx_flush_tlb_func+0x10/0x10 [ 128.064068][T11257] ? smp_call_function_many_cond+0x457/0x1600 [ 128.064084][T11257] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 128.064113][T11257] ? __lock_acquire+0x62e/0x1ce0 [ 128.064133][T11257] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 128.064146][T11257] ? policy_nodemask+0xea/0x4e0 [ 128.064159][T11257] alloc_pages_mpol+0x1fb/0x550 [ 128.064173][T11257] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 128.064189][T11257] alloc_pages_noprof+0x131/0x390 [ 128.064201][T11257] pte_alloc_one+0x1c/0x3a0 [ 128.064213][T11257] __pte_alloc+0x6d/0x3c0 [ 128.064226][T11257] ? __pfx___pte_alloc+0x10/0x10 [ 128.064239][T11257] ? up_write+0x1b2/0x520 [ 128.064251][T11257] move_page_tables+0x2af2/0x44a0 [ 128.064270][T11257] ? __pfx_move_page_tables+0x10/0x10 [ 128.064288][T11257] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 128.064300][T11257] copy_vma_and_data+0x24e/0x790 [ 128.064312][T11257] ? __pfx_copy_vma_and_data+0x10/0x10 [ 128.064325][T11257] ? __vma_enter_locked+0x163/0x3f0 [ 128.064341][T11257] ? find_held_lock+0x2b/0x80 [ 128.064354][T11257] ? move_vma+0x536/0x1780 [ 128.064367][T11257] move_vma+0x548/0x1780 [ 128.064377][T11257] ? do_vmi_munmap+0x20c/0x3e0 [ 128.064387][T11257] ? __pfx_move_vma+0x10/0x10 [ 128.064396][T11257] ? mm_get_unmapped_area+0x95/0xe0 [ 128.064410][T11257] ? shmem_get_unmapped_area+0x170/0xa00 [ 128.064427][T11257] ? selinux_mmap_addr+0x2b/0x110 [ 128.064441][T11257] ? bpf_lsm_mmap_addr+0x9/0x10 [ 128.064454][T11257] ? security_mmap_addr+0x6c/0x1e0 [ 128.064469][T11257] ? __get_unmapped_area+0x267/0x440 [ 128.064484][T11257] ? vrm_set_new_addr+0x208/0x290 [ 128.064495][T11257] mremap_to+0x1b7/0x450 [ 128.064505][T11257] do_mremap+0xfad/0x1f80 [ 128.064514][T11257] ? get_pid_task+0xfc/0x250 [ 128.064526][T11257] ? get_pid_task+0x106/0x250 [ 128.064535][T11257] ? proc_fail_nth_write+0x9f/0x220 [ 128.064548][T11257] ? find_held_lock+0x2b/0x80 [ 128.064560][T11257] ? __pfx_do_mremap+0x10/0x10 [ 128.064571][T11257] ? find_held_lock+0x2b/0x80 [ 128.064584][T11257] ? ksys_write+0x190/0x250 [ 128.064598][T11257] __do_sys_mremap+0x119/0x170 [ 128.064608][T11257] ? __pfx___do_sys_mremap+0x10/0x10 [ 128.064618][T11257] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.064643][T11257] do_syscall_64+0xcd/0x4c0 [ 128.064654][T11257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.064665][T11257] RIP: 0033:0x7f64b158ebe9 [ 128.064674][T11257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.064684][T11257] RSP: 002b:00007f64b2446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 128.064694][T11257] RAX: ffffffffffffffda RBX: 00007f64b17b5fa0 RCX: 00007f64b158ebe9 [ 128.064700][T11257] RDX: 0000000000400000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 128.064707][T11257] RBP: 00007f64b2446090 R08: 0000200000c00000 R09: 0000000000000000 [ 128.064713][T11257] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 128.064719][T11257] R13: 00007f64b17b6038 R14: 00007f64b17b5fa0 R15: 00007fff91d5b5e8 [ 128.064732][T11257] [ 128.064863][T11257] ------------[ cut here ]------------ [ 128.088016][T11252] tmpfs: Unknown parameter 'grpquota_inode_har39™ ±ZÉ™‘Ÿñdlimit' [ 128.088995][T11257] WARNING: CPU: 1 PID: 11257 at mm/mremap.c:357 move_page_tables+0x3832/0x44a0 [ 128.091463][ T8978] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 128.093127][T11257] Modules linked in: [ 128.222092][T11257] CPU: 1 UID: 0 PID: 11257 Comm: syz.5.1556 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 128.225295][T11257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.228671][T11257] RIP: 0010:move_page_tables+0x3832/0x44a0 [ 128.230610][T11257] Code: 02 00 0f 85 b6 03 00 00 48 8b 2b 4c 89 f6 48 89 ef e8 e2 1b af ff 49 39 ee 0f 82 d5 cb ff ff e9 0c cc ff ff e8 1f 21 af ff 90 <0f> 0b 90 48 8b 44 24 40 48 8d 78 40 48 b8 00 00 00 00 00 fc ff df [ 128.236594][T11257] RSP: 0018:ffffc90004d176d8 EFLAGS: 00010293 [ 128.238508][T11257] RAX: 0000000000000000 RBX: 000000004d32a007 RCX: ffffffff820c6645 [ 128.241030][T11257] RDX: ffff88804adc8000 RSI: ffffffff820c7201 RDI: 0000000000000007 [ 128.243558][T11257] RBP: ffff888037833c00 R08: 0000000000000007 R09: 0000000000000000 [ 128.246045][T11257] R10: 000000004d32a007 R11: 0000000000000000 R12: 0000000000000000 [ 128.248551][T11257] R13: ffffc90004d179a8 R14: 0000000000000001 R15: dffffc0000000000 [ 128.251084][T11257] FS: 00007f64b24466c0(0000) GS:ffff8880d67bd000(0000) knlGS:0000000000000000 [ 128.253955][T11257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.256107][T11257] CR2: 0000000000000000 CR3: 000000004d2d0000 CR4: 0000000000352ef0 [ 128.258602][T11257] Call Trace: [ 128.259687][T11257] [ 128.260655][T11257] ? __pfx_move_page_tables+0x10/0x10 [ 128.262410][T11257] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 128.264274][ T8978] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.264573][T11257] copy_vma_and_data+0x468/0x790 [ 128.267288][ T8978] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.268845][T11257] ? __pfx_copy_vma_and_data+0x10/0x10 [ 128.272205][ T8978] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.273874][T11257] ? __vma_enter_locked+0x163/0x3f0 [ 128.276936][ T8978] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.278570][T11257] ? move_vma+0x536/0x1780 [ 128.283183][ T8978] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.283395][T11257] move_vma+0x548/0x1780 [ 128.286291][ T8978] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.287633][T11257] ? do_vmi_munmap+0x20c/0x3e0 [ 128.290160][ T8978] usb 7-1: Product: syz [ 128.291678][T11257] ? __pfx_move_vma+0x10/0x10 [ 128.293024][ T8978] usb 7-1: Manufacturer: syz [ 128.294620][T11257] ? mm_get_unmapped_area+0x95/0xe0 [ 128.297743][T11257] ? shmem_get_unmapped_area+0x170/0xa00 [ 128.299536][T11257] ? selinux_mmap_addr+0x2b/0x110 [ 128.300551][ T8978] cdc_wdm 7-1:1.0: skipping garbage [ 128.301141][T11257] ? bpf_lsm_mmap_addr+0x9/0x10 [ 128.301158][T11257] ? security_mmap_addr+0x6c/0x1e0 [ 128.301175][T11257] ? __get_unmapped_area+0x267/0x440 [ 128.302825][ T8978] cdc_wdm 7-1:1.0: skipping garbage [ 128.304352][T11257] ? vrm_set_new_addr+0x208/0x290 [ 128.308051][ T8978] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 128.309337][T11257] mremap_to+0x1b7/0x450 [ 128.310953][ T8978] cdc_wdm 7-1:1.0: Unknown control protocol [ 128.312799][T11257] do_mremap+0xfad/0x1f80 [ 128.317414][T11257] ? get_pid_task+0xfc/0x250 [ 128.318886][T11257] ? get_pid_task+0x106/0x250 [ 128.320389][T11257] ? proc_fail_nth_write+0x9f/0x220 [ 128.322037][T11257] ? find_held_lock+0x2b/0x80 [ 128.323542][T11257] ? __pfx_do_mremap+0x10/0x10 [ 128.325104][T11257] ? find_held_lock+0x2b/0x80 [ 128.326662][T11257] ? ksys_write+0x190/0x250 [ 128.328124][T11257] __do_sys_mremap+0x119/0x170 [ 128.329648][T11257] ? __pfx___do_sys_mremap+0x10/0x10 [ 128.331335][T11257] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.333223][T11257] do_syscall_64+0xcd/0x4c0 [ 128.334666][T11257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.336559][T11257] RIP: 0033:0x7f64b158ebe9 [ 128.338069][T11257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.344033][T11257] RSP: 002b:00007f64b2446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 128.346623][T11257] RAX: ffffffffffffffda RBX: 00007f64b17b5fa0 RCX: 00007f64b158ebe9 [ 128.349174][T11257] RDX: 0000000000400000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 128.351656][T11257] RBP: 00007f64b2446090 R08: 0000200000c00000 R09: 0000000000000000 [ 128.354136][T11257] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 128.356646][T11257] R13: 00007f64b17b6038 R14: 00007f64b17b5fa0 R15: 00007fff91d5b5e8 [ 128.359200][T11257] [ 128.360211][T11257] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.362477][T11257] CPU: 1 UID: 0 PID: 11257 Comm: syz.5.1556 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 128.365669][T11257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.369019][T11257] Call Trace: [ 128.370089][T11257] [ 128.371050][T11257] dump_stack_lvl+0x3d/0x1f0 [ 128.372520][T11257] vpanic+0x6e8/0x7a0 [ 128.373819][T11257] ? __pfx_vpanic+0x10/0x10 [ 128.375280][T11257] ? move_page_tables+0x3832/0x44a0 [ 128.376924][T11257] panic+0xca/0xd0 [ 128.378128][T11257] ? __pfx_panic+0x10/0x10 [ 128.379594][T11257] ? check_panic_on_warn+0x1f/0xb0 [ 128.381220][T11257] check_panic_on_warn+0xab/0xb0 [ 128.382806][T11257] __warn+0xf6/0x3c0 [ 128.384059][T11257] ? move_page_tables+0x3832/0x44a0 [ 128.385716][T11257] report_bug+0x3c3/0x580 [ 128.387136][T11257] ? move_page_tables+0x3832/0x44a0 [ 128.388783][T11257] handle_bug+0x184/0x210 [ 128.390168][T11257] exc_invalid_op+0x17/0x50 [ 128.391639][T11257] asm_exc_invalid_op+0x1a/0x20 [ 128.393176][T11257] RIP: 0010:move_page_tables+0x3832/0x44a0 [ 128.395020][T11257] Code: 02 00 0f 85 b6 03 00 00 48 8b 2b 4c 89 f6 48 89 ef e8 e2 1b af ff 49 39 ee 0f 82 d5 cb ff ff e9 0c cc ff ff e8 1f 21 af ff 90 <0f> 0b 90 48 8b 44 24 40 48 8d 78 40 48 b8 00 00 00 00 00 fc ff df [ 128.400955][T11257] RSP: 0018:ffffc90004d176d8 EFLAGS: 00010293 [ 128.402852][T11257] RAX: 0000000000000000 RBX: 000000004d32a007 RCX: ffffffff820c6645 [ 128.405329][T11257] RDX: ffff88804adc8000 RSI: ffffffff820c7201 RDI: 0000000000000007 [ 128.407790][T11257] RBP: ffff888037833c00 R08: 0000000000000007 R09: 0000000000000000 [ 128.410262][T11257] R10: 000000004d32a007 R11: 0000000000000000 R12: 0000000000000000 [ 128.412737][T11257] R13: ffffc90004d179a8 R14: 0000000000000001 R15: dffffc0000000000 [ 128.415218][T11257] ? move_page_tables+0x2c75/0x44a0 [ 128.417094][T11257] ? move_page_tables+0x3831/0x44a0 [ 128.418787][T11257] ? move_page_tables+0x3831/0x44a0 [ 128.420435][T11257] ? __pfx_move_page_tables+0x10/0x10 [ 128.422140][T11257] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 128.423958][T11257] copy_vma_and_data+0x468/0x790 [ 128.425525][T11257] ? __pfx_copy_vma_and_data+0x10/0x10 [ 128.427259][T11257] ? __vma_enter_locked+0x163/0x3f0 [ 128.428920][T11257] ? move_vma+0x536/0x1780 [ 128.430343][T11257] move_vma+0x548/0x1780 [ 128.431707][T11257] ? do_vmi_munmap+0x20c/0x3e0 [ 128.433233][T11257] ? __pfx_move_vma+0x10/0x10 [ 128.434735][T11257] ? mm_get_unmapped_area+0x95/0xe0 [ 128.436397][T11257] ? shmem_get_unmapped_area+0x170/0xa00 [ 128.438168][T11257] ? selinux_mmap_addr+0x2b/0x110 [ 128.439759][T11257] ? bpf_lsm_mmap_addr+0x9/0x10 [ 128.441296][T11257] ? security_mmap_addr+0x6c/0x1e0 [ 128.442954][T11257] ? __get_unmapped_area+0x267/0x440 [ 128.444615][T11257] ? vrm_set_new_addr+0x208/0x290 [ 128.446208][T11257] mremap_to+0x1b7/0x450 [ 128.447568][T11257] do_mremap+0xfad/0x1f80 [ 128.448937][T11257] ? get_pid_task+0xfc/0x250 [ 128.450402][T11257] ? get_pid_task+0x106/0x250 [ 128.451899][T11257] ? proc_fail_nth_write+0x9f/0x220 [ 128.453542][T11257] ? find_held_lock+0x2b/0x80 [ 128.455062][T11257] ? __pfx_do_mremap+0x10/0x10 [ 128.456612][T11257] ? find_held_lock+0x2b/0x80 [ 128.458103][T11257] ? ksys_write+0x190/0x250 [ 128.459554][T11257] __do_sys_mremap+0x119/0x170 [ 128.461074][T11257] ? __pfx___do_sys_mremap+0x10/0x10 [ 128.462762][T11257] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.464680][T11257] do_syscall_64+0xcd/0x4c0 [ 128.466131][T11257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.468015][T11257] RIP: 0033:0x7f64b158ebe9 [ 128.469428][T11257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.475446][T11257] RSP: 002b:00007f64b2446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 128.478053][T11257] RAX: ffffffffffffffda RBX: 00007f64b17b5fa0 RCX: 00007f64b158ebe9 [ 128.480543][T11257] RDX: 0000000000400000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 128.483034][T11257] RBP: 00007f64b2446090 R08: 0000200000c00000 R09: 0000000000000000 [ 128.485501][T11257] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 128.487993][T11257] R13: 00007f64b17b6038 R14: 00007f64b17b5fa0 R15: 00007fff91d5b5e8 [ 128.490458][T11257] [ 128.492065][T11257] Kernel Offset: disabled [ 128.493559][T11257] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:40:37 Registers: info registers vcpu 0 CPU#0 RAX=000000000016990d RBX=0000000000000000 RCX=ffffffff8b934c29 RDX=0000000000000000 RSI=ffffffff8de4f0ed RDI=ffffffff8c162400 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab3590 R15=0000000000000000 RIP=ffffffff8b93378f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000050138000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000e002fefc Opmask02=00000000f8000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000300000016 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000fffffe54 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b72212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b72212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b72212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b72212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b72212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b72212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b723874a8 00007f8b723874a0 00007f8b72387498 00007f8b72387470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b72eed100 00007f8b72387460 00007f8b72387478 00007f8b723874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b723874b8 00007f8b723874b0 00007f8b723874a8 00007f8b723874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856401d5 RDI=ffffffff9b10cfa0 RBP=ffffffff9b10cf60 RSP=ffffc90004d17030 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b10cf60 R15=ffffffff85640170 RIP=ffffffff856401ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f64b24466c0 ffffffff 00c00000 GS =0000 ffff8880d67bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004d2d0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffff0000 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce1e9b416 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce1e9b416 00007ffce1e9b41c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 357665646275732d 6c34762f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 165546474156500e 4f17550c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000012700b RBX=0000000000000002 RCX=ffffffff8b934c29 RDX=0000000000000000 RSI=ffffffff8de4f0ed RDI=ffffffff8c162400 RBP=ffffed1003bd2910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801de94880 R14=ffffffff90ab3590 R15=0000000000000000 RIP=ffffffff8b93378f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000010000 CR3=000000004da6e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce1e9b290 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce1e9b416 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce1e9b416 00007ffce1e9b41c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000500 RCX=ffffffff855a7e73 RDX=ffff8880221ca440 RSI=ffffffff855a7e7d RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90000acfa60 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffff888057094000 R14=ffffc900036b9000 R15=dffffc0000000000 RIP=ffffffff81bb9328 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000000a000 CR3=0000000032fc3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce1e9b290 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce1e9b416 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce1e9b416 00007ffce1e9b41c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31a3012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000