last executing test programs: 6m52.937270202s ago: executing program 32 (id=116): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x23, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4]}}}}, @TCA_RATE={0x6, 0x5, {0xf, 0x8}}]}, 0x90}}, 0x0) 4m45.571303743s ago: executing program 2 (id=2083): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800460c0020000000030094040700110090780000000900"/46], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) 4m45.491546106s ago: executing program 2 (id=2084): r0 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000400)={0x4, 0x2}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x47, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0xffff, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) socket(0xa, 0x3, 0x3a) read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) 4m45.49111118s ago: executing program 2 (id=2085): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fsopen(&(0x7f00000001c0)='cramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)={0x14, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c000100000000070000000008000500", @ANYRES32=r4], 0x38}}, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@bridge_delvlan={0x54, 0x71, 0x10, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x80}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x1}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x28c4) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x204600) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) inotify_init() clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimes(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)={{r5, r6/1000+10000}, {0x77359400}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {0x1}, 0x2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'bridge_slave_0\x00', {0x400004}, 0x8000}) 4m45.431841551s ago: executing program 2 (id=2087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000000000000, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76a4928a2c56dfa10d4aee31697274696f2c6e6f657874656e642c61636381229b78decee3bde1e4e58a653d667363618668652c7665727369"]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000c0000000000005f00"], 0x0, 0x28}, 0x20) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x10, r1}, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', '', [], 0xa, "04772796e1c3559cecd2b0bf00a3bfbcd697c4c64d5cb5dc320a0be00e0226a00e100074e80799e0cbbe889f0c13205ea218086dbd4f86828fd29745fefecb"}, 0x43) 4m45.421314799s ago: executing program 2 (id=2094): r0 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000400)={0x4, 0x2}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x47, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0xffff, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) 4m44.999442957s ago: executing program 33 (id=2089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000001c0)="0fc77f090f20d86635200000000f22d8b878000f00d80f01df66b89d7e748b0f23c80f21f866350c00d0000f23f8baf80c66b8ae356b8966efbafc0ced6766c7442400e18f00006766c744240214c2960d6766c744240600000000670f011424670b81bb9d0000660f38800a6766c7442400650000006766c744240275ceea8b6766c744240600000000670f011424", 0x8f}], 0x1, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m44.952752818s ago: executing program 2 (id=2091): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0xf000) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x101) 4m44.952028103s ago: executing program 34 (id=2091): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0xf000) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x101) 4m44.682674444s ago: executing program 4 (id=2093): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\r\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8e\x82\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) (async) r1 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\r\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8e\x82\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [{0x20, '( \b\xd1\x00\x9b5\x15\xda\x02\xaa\x96\xef\xb8 '}]}, 0x1b) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r4 = open$dir(&(0x7f0000002180)='./file0\x00', 0x200, 0x2f) mknodat$null(r4, &(0x7f00000021c0)='./file0\x00', 0x20, 0x103) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400030400000000000000542d"], 0x44}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000100)={r6, &(0x7f0000000080)="b854eba8", &(0x7f0000000100), 0x2}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') (async) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000020c0)={0x38, r8, 0xd66771a5e8224ded, 0x4, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x1f}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}]}, 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000020c0)={0x38, r8, 0xd66771a5e8224ded, 0x4, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x1f}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}]}, 0x38}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r11}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r11}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002080)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/meminfo\x00', 0x0, 0x0) (async) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r13, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x10, 0x0, 0x25dfdbfe}, 0x14}}, 0x4000040) (async) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x10, 0x0, 0x25dfdbfe}, 0x14}}, 0x4000040) 4m44.610425196s ago: executing program 4 (id=2095): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 4m44.562833622s ago: executing program 4 (id=2096): symlink(&(0x7f0000001480)='./bus\x00', &(0x7f0000002480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x43480) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000024d564b"]) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) syz_io_uring_setup(0x24fa, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffff4, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "dc9d99aa7196b083a358d0e5d8b6930cd8164e60ac92d50577fd7758aef241424095a8a1566efddb1bfaed3d6b4bbd306377eebedc834393bdf8a5cf83c423cdf9d655c3ecc39688f88490342b2538fa0bacc413ecb4a73fcafecab9abb1edf0f34351a73b16c962381d8f5eb467e6f82a95fa05d0f11d12cf4a86ca52e10bcba3810532a3"}], 0x18}, 0xfc00) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x12c02, &(0x7f00000001c0)=ANY=[]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="f802ba40a74ef9501451ca327b50ad7b82e3661fba41bd52555db12ebbc252dfe3e5686d33b0962af2fa75b90ca09bb93483356952a1bb151a4470802f9f7f41"], 0x7) 4m44.430083365s ago: executing program 4 (id=2097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000000000000, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76a4928a2c56dfa10d4aee31697274696f2c6e6f657874656e642c61636381229b78decee3bde1e4e58a653d667363618668652c7665727369"]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000c0000000000005f00"], 0x0, 0x28}, 0x20) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x10, r1}, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', '', [], 0xa, "04772796e1c3559cecd2b0bf00a3bfbcd697c4c64d5cb5dc320a0be00e0226a00e100074e80799e0cbbe889f0c13205ea218086dbd4f86828fd29745fefecb"}, 0x43) 4m44.422604124s ago: executing program 4 (id=2098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) 4m43.850907667s ago: executing program 1 (id=2101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x12000}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xfffffea8, {0xf000}}, "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", "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"}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m43.781515534s ago: executing program 4 (id=2102): socket$inet6_tcp(0xa, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x9008, 0x0, 0x2}, 0x18, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r5}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x3f}) 4m43.7089774s ago: executing program 35 (id=2102): socket$inet6_tcp(0xa, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x9008, 0x0, 0x2}, 0x18, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r5}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x3f}) 4m43.65534917s ago: executing program 1 (id=2104): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x10002, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f042}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x0, @sdr={0x3136564e, 0xfffffff7}}) 4m43.655008601s ago: executing program 1 (id=2105): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="0100000000000000000004000000140005000303000a000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a000a000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r1 = userfaultfd(0x800) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 4m43.408729666s ago: executing program 1 (id=2106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000000000000, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76a4928a2c56dfa10d4aee31697274696f2c6e6f657874656e642c61636381229b78decee3bde1e4e58a653d667363618668652c7665727369"]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000c0000000000005f00"], 0x0, 0x28}, 0x20) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x10, r1}, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', '', [], 0xa, "04772796e1c3559cecd2b0bf00a3bfbcd697c4c64d5cb5dc320a0be00e0226a00e100074e80799e0cbbe889f0c13205ea218086dbd4f86828fd29745fefecb"}, 0x43) 4m43.402813744s ago: executing program 1 (id=2107): r0 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000400)={0x4, 0x2}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x47, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0xffff, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x5c) read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) 4m41.770820589s ago: executing program 1 (id=2108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) 4m41.719955413s ago: executing program 36 (id=2108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) 1m34.480693574s ago: executing program 7 (id=4900): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006600), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x181000, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000021000100000000000000000002002000000000000d000000080002"], 0x44}}, 0x20000040) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_aout(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="07010607"], 0x4b8) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x0], 0x0, 0x1, 0x0, r6}}, 0x40) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x12, "3eccd8fd0000000000000010000000040100"}) 1m33.521161411s ago: executing program 7 (id=4915): r0 = socket(0x27, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x8, 0x6, 0x7fff, 0x2, 0x1, 0x6d6f, 0x6}, 0x1c) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x101) 1m33.520384746s ago: executing program 7 (id=4917): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) socket$kcm(0x29, 0x2, 0x0) r0 = socket$inet6(0xa, 0x803, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fff}, [@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x3b}, @jmp={0x5, 0x0, 0xa, 0x6, 0xb, 0xfffffffffffffff8, 0x1}, @call={0x85, 0x0, 0x0, 0x44}, @call={0x85, 0x0, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffc}]}, &(0x7f00000001c0)='GPL\x00', 0xbfb8, 0x9b, &(0x7f00000002c0)=""/155, 0x40f00, 0x0, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0xd, 0x5, 0x200}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000400)=[{0x1, 0x3, 0xd, 0xa}, {0x1, 0x3, 0x7, 0xb}, {0x1, 0x3, 0x10, 0x4}, {0x0, 0x3, 0x10, 0x7}, {0x0, 0x5, 0x6, 0x6}, {0x1, 0x1, 0x5, 0x8}], 0x10, 0x8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x200000006, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 1m33.400979731s ago: executing program 7 (id=4918): syz_open_dev$dri(&(0x7f0000000300), 0xa8bf, 0x426400) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0xa0b02, 0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x3f, 0x1, @thr={&(0x7f0000000000)="3ed387e19545be0fd2e00736c26fcf93e38585d60abbe651a6df8edb522c0dc6c512ef8fac36960252cbeb40448d5210be6f97735837a684812fe3b8fcc4682a7581817cd8d95f903bd4b25a93eb17633d7aef0cfadff0061e4baa0f8d800462c07fee11b4a9f27ec0cd92b5d5166b171ee92c820b13932339", &(0x7f00000000c0)="4596943c23e067a876315b8f4e279afb7bdaa2e9ee004d17ac1dc65db7e954be39e1d6e2b2676596327372c14cc52b3b804b5b1e00d8670a0b2877f7a053ad7968b7a9c3486af9e1c2e9a466b194e5832147fa2845039e40b887d78986"}}, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x5, 0x7, 0x2, {0x2, @pix_mp={0x8, 0xabf, 0x50565559, 0x5, 0xc, [{0x10001, 0x4}, {0x7, 0x7ca}, {0x0, 0x1}, {0x766, 0x5}, {0x6, 0x8}, {0x5, 0x3ff}, {0x7, 0x3}, {0x6}], 0x7, 0x3e, 0x8, 0x2, 0x1}}, 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000002f00), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf250600000008000e00a000000008000100bfa90d34426338e3dd6b9bdd210882e6ffcc6929c33d3e11933691adc44d1851a62fabf7ad0e2d931c4d509ccf00eedc9b6cf26c63f2dd95f68686a9ffa0a62d93ebd43930baf36052af9800217f8f7ad97b075cd44f5bb4bb71cf1fd96d764903af056188ef77bd3a8ebc3b809486d61f78f8be98540f767e8942cf98b2a7bbc2af9ee5ad95e89f570e9c918f63c78090af8f3fdfc35cc73efbde6951602b62df612356fdf9caca499e148a8a1831b67cd3cb34aebda5e49adf93c75c3c8b14a0", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000340)="7fdf6c8151d4c22c1700db4d55454f9d9526aca1c84cc728bdf3c62d55a1c6bef9a79b267417b5c5608ea27270fb335d57ba600df7666830a92ede0acd4378e388c629550a9af4866b41d381374036c0cb88", 0x52, 0x40080, &(0x7f00000003c0)={0xa, 0x4e24, 0x7, @remote, 0x4b19}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20004000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) poll(&(0x7f0000000180)=[{r0, 0x20}], 0x1, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x30, r5, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x76]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r6, &(0x7f0000000240)='./file0\x00') write$ppp(r0, &(0x7f00000004c0)="c2cf7789", 0x4) 1m33.399460125s ago: executing program 7 (id=4920): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000280)="ca59", 0x2}], 0x2}}], 0x1, 0x4400c800) syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x200002) sendto$inet6(r2, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) write$snapshot(r1, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r3], 0x1}, 0x58) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) fchmod(r4, 0x1) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x1f2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m33.060634351s ago: executing program 7 (id=4925): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0xa, 0x14}, [@RTA_EXPIRES={0x8, 0x17, 0x7fff}]}, 0x24}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000080)) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x0) ioctl$CEC_RECEIVE(r6, 0xc0386106, &(0x7f00000010c0)={0xd52, 0x8000, 0x6, 0x0, 0x1fc, 0x7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x5c, 0x3, 0x1, 0x4, 0x9c, 0xff}) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0xfffffffffffffe1f, 0x0}, 0x1}], 0x3fffffffffffd3c, 0x40018003, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f0000000240)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1m33.019022059s ago: executing program 37 (id=4925): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0xa, 0x14}, [@RTA_EXPIRES={0x8, 0x17, 0x7fff}]}, 0x24}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000080)) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x0) ioctl$CEC_RECEIVE(r6, 0xc0386106, &(0x7f00000010c0)={0xd52, 0x8000, 0x6, 0x0, 0x1fc, 0x7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x5c, 0x3, 0x1, 0x4, 0x9c, 0xff}) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0xfffffffffffffe1f, 0x0}, 0x1}], 0x3fffffffffffd3c, 0x40018003, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f0000000240)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 52.530605662s ago: executing program 6 (id=5631): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) 51.697243799s ago: executing program 6 (id=5646): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r0], 0x1}, 0x58) open(&(0x7f0000000080)='./bus\x00', 0x101bc2, 0x1a8) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000feffffff0000000000000000850000002a00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000100, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 51.373387329s ago: executing program 6 (id=5651): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r1, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (fail_nth: 4) 51.362703121s ago: executing program 6 (id=5652): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000100)) 51.279319652s ago: executing program 6 (id=5653): mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x3, &(0x7f000037f000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 51.090450938s ago: executing program 6 (id=5656): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r1, 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000440)={'xfrm0\x00', @broadcast}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r4 = fanotify_init(0x200, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) pidfd_send_signal(r1, 0x17, &(0x7f0000000480)={0x29, 0x5, 0x80000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@migrate={0x1c8, 0x21, 0x1, 0x70bd27, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x31}, @in6=@remote, 0x4e20, 0xd, 0x4e22, 0x9ffd, 0x7, 0x180, 0x20, 0x1d}, 0x6e6bb9, 0x4b75cd6ef3e93cb3}, [@algo_crypt={0xee, 0x2, {{'xts-aes-neonbs\x00'}, 0x530, "5f9e4145a1bccf08d02fd21bc8a8d424387066f307307b64add2fef9572ce2982e6448f57bb38990547cbab0ddee47fc01853679a2a8ab1aa6e161e2cff4bc31e0a21f84cf6675b74a287b7994da01d1b588592913e1925f3075cf0eb9d2584463f708f2df3c2158402d59f55579dd6259b6faac31532cf4d2e6c9f75f769519d813daa414f36c9625e1ff1fe8b1bce2e5d1879621918961d6afce4610a3712f6c0a827d25bb"}}, @tfcpad={0x8, 0x16, 0x2}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0x4e22, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in=@loopback, 0xa, 0x11, 0xf}}, @coaddr={0x14, 0xe, @in6=@private0}, @address_filter={0x28, 0x1a, {@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0xfc, 0x9}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x18, r8}, 0x10) ioctl$PPPIOCSFLAGS(r5, 0xc020660b, 0x0) r10 = dup(r4) fanotify_mark(r4, 0x401, 0x1018, r10, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000098a0da1300000000ffffff7f85100000fbffffff852000000200000018000000ff070000000000000000000085100000fcffffff183500000200000000000000000000000856060000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x100, 0x22, &(0x7f0000000180)=""/34, 0x41000, 0x8, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x801, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000240)=[r1, r2, r2, r2, r1, r2, r10, r2], &(0x7f00000002c0)=[{0x240d97c1, 0x3, 0xd, 0x7}, {0x4, 0x1, 0xc, 0x6}, {0x4, 0x4, 0xf, 0x9}, {0x3, 0x4, 0xb, 0x63252188461046c4}, {0x3, 0x4, 0xf, 0x9}, {0x2, 0x3, 0x1, 0x7}, {0xffffffff, 0x1, 0xb, 0xc}, {0x1, 0x4, 0x7, 0xc}, {0x3, 0x5, 0x8, 0x2}]}, 0x94) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',@']) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 36.089526113s ago: executing program 38 (id=5656): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r1, 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000440)={'xfrm0\x00', @broadcast}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r4 = fanotify_init(0x200, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) pidfd_send_signal(r1, 0x17, &(0x7f0000000480)={0x29, 0x5, 0x80000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@migrate={0x1c8, 0x21, 0x1, 0x70bd27, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x31}, @in6=@remote, 0x4e20, 0xd, 0x4e22, 0x9ffd, 0x7, 0x180, 0x20, 0x1d}, 0x6e6bb9, 0x4b75cd6ef3e93cb3}, [@algo_crypt={0xee, 0x2, {{'xts-aes-neonbs\x00'}, 0x530, "5f9e4145a1bccf08d02fd21bc8a8d424387066f307307b64add2fef9572ce2982e6448f57bb38990547cbab0ddee47fc01853679a2a8ab1aa6e161e2cff4bc31e0a21f84cf6675b74a287b7994da01d1b588592913e1925f3075cf0eb9d2584463f708f2df3c2158402d59f55579dd6259b6faac31532cf4d2e6c9f75f769519d813daa414f36c9625e1ff1fe8b1bce2e5d1879621918961d6afce4610a3712f6c0a827d25bb"}}, @tfcpad={0x8, 0x16, 0x2}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0x4e22, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in=@loopback, 0xa, 0x11, 0xf}}, @coaddr={0x14, 0xe, @in6=@private0}, @address_filter={0x28, 0x1a, {@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0xfc, 0x9}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x18, r8}, 0x10) ioctl$PPPIOCSFLAGS(r5, 0xc020660b, 0x0) r10 = dup(r4) fanotify_mark(r4, 0x401, 0x1018, r10, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000098a0da1300000000ffffff7f85100000fbffffff852000000200000018000000ff070000000000000000000085100000fcffffff183500000200000000000000000000000856060000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x100, 0x22, &(0x7f0000000180)=""/34, 0x41000, 0x8, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x801, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000240)=[r1, r2, r2, r2, r1, r2, r10, r2], &(0x7f00000002c0)=[{0x240d97c1, 0x3, 0xd, 0x7}, {0x4, 0x1, 0xc, 0x6}, {0x4, 0x4, 0xf, 0x9}, {0x3, 0x4, 0xb, 0x63252188461046c4}, {0x3, 0x4, 0xf, 0x9}, {0x2, 0x3, 0x1, 0x7}, {0xffffffff, 0x1, 0xb, 0xc}, {0x1, 0x4, 0x7, 0xc}, {0x3, 0x5, 0x8, 0x2}]}, 0x94) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',@']) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 21.699504507s ago: executing program 8 (id=6150): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b06, 0x0) 21.150383058s ago: executing program 8 (id=6171): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7d", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="06ff03076844babeb89e14f04305", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 21.098566458s ago: executing program 8 (id=6172): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0x2, 0x4) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001940)=""/34, 0x22}], 0x1}, 0x1}], 0x1, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x2, 0x1000, @empty}, 0x1c) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) r3 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xc63b, 0x2, 0x0, 0x3}) io_uring_enter(r3, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4002, 0x1000, @empty}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0) 21.096964234s ago: executing program 8 (id=6173): ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000080)={{}, "592594ffd7c9b4aeffb5df6699b708da4aa16fd248847391fd64fcd91b9076c87e087ef4cd73c38e33b0b8070ed706f34de0c3530769ed1f901b449a8660ae4b67a990c335c1c5576f68ca635fe0b47b37f4c44ae8c0459183d256d0765e5ad9ff20405750925253c624507c4a301e0502eb9da9f600cca7122785a9d0e533798c253d764f5aafa980edbfcf1bef6545f9f643daffb1e1fa2e558a4558476335bb9bc8c8a3a73747acd894123dba955c59327d269293bd0fc1ff10e440428f87bac1801990ad484651891d1b272da0bdcc78fa8a0d809f462d5770e8f537719a5e598d6bd2cabe36608c0c14b174164d431dfa20db5f50742b5bed777a31ca3961846a1825b96e511891a76e7766e03db1312924e74fe71e843d3e67dffdd5d1bd5304f12dd20755bca14357461952c142a807719246adc5f993c281913e4ea465f4cd8a2632901b7aa92eb57becf1a4eb6bf43a0f484d742a81f4d35d313acf91d81b0446ba9fe6359b93e22cf441620fb136d59c4b1b3234d5e565ca18a8d1fc5215d1c3e248785a545c3c7e3e99e02b9a634d382f1a5d12705f27491317779a7e972329781b44714c66deb77d4e535df7e5bdd30695eb25950e7950f5b8bfd6a67d7fcc15a1e7bd91d7330e1be3bf86622f8722d7dc221ce5f4cd9848a47cce01a31926f92ce50ab2ac2935be866eaf57c2eb0c7db7d5792f3be79e565428d8c2cc970c55e71ceb0b8313b111a729bfe418e6ca669f11b078eaddbc78b3642c2b056e3456230ac1c759106e849499d373f5ca0acd6588f55092364029090ef8d2d09cc3f7e26a17772dc39af9976d2b9187df03b1a8a3c446f7e0698a024aca7f6bcb04c3f64d2a0ae78d8a660c847000aa6389b94b9d4b3274ae73a3bcbf6a8da504485fd94ee2ecddf43cd00cf5b2c0a51c3ab101d8939eefe29c2d890189bc5e990efe8789c6ddd3be07fd8f4f6c5fc87fe36e0a9f17c81cdd3d12574e739d4e3550265a5b0f761259aa6ffabaaa7450738099bdb30f433ba71841946fe5c3d97ee1d1805d0fdbb40fbdfe8e9d7311dba2cb07f45a3a94f8047199f341097720669344c563ad0e4279a233b2ad5b55e95e2ac965a81bfbf0c455409961eb3ffda89313acf19ace93110b5c3580dd27b613eed39d506231b04f47df1ef3f260dfc794c904c614016543ab57764d2cf2f2abfc136b0dc504efa7f56433f9f195aaac997202c0356bb56e474ac7b37cf3a3521bebe27b8b6971c78a6038c9d875f1d736910e083f8f89bbc7c564fe6771ff384af625d2e2a46d6e328b7571ea7f4bcb4ecbcc7b82c1546acf8dd2746d7ef66de15c72b10abab031f042cc202787630e3a83543f3baaab49d17e7466ffaa72eb806b588e31f4dbdc715240f70cbf451455c81117086b7fbae5b222c00a491012aefb2e93cd6e03fe23d475281c0a34041be64c65a6a173af82bfed5039ee35f36d282feaf9bc87936e5af38954d8d5b673cbb1223af32efedf39001fc41ac71f807035c8d68f9c2b5aafd903818141dc0c1ab8a7030e5ae60dcd4ecd4bb54cec454c9e7ef650e9039aff7f4e0ff889ff01e33057194918a0b99d8ef2dd0a7c74133884b3391f4971e6fbaef4df8161d7a93ef5a342e579df4b1ff90b3dcd3ffca59b1a0459d2c5cae4d1d45cd1370ec32f2c603d4a0f680868caf8a002715f4f7df66e90c279a2bef5d1d89cf4d94afa31d8aa9dbbf2473a97fcc73d21d2ebedc886209f71b0581eec8e3ddff4a5afbb4b59b93a7b0fe918ad7d47f3b7b2db80c556a1a5b6f74e1ce76fb4ac7c68e21f103585f570a12d0afcb324e187e48a17732586632ec37eb0c1d90d61ee88248519c7843e610b15310269159dfda44b554f317fc065759a474074a8e5e39d99a8f101cd45a48b9e592ae84d4d155d230ce40075f33cfb13cb80010f58456b1bdf300ab04c8d39ca8b374cacdba4f957b4c8668c4c530a0d6ee152fe7932dab31087bf2a1f82cc3154ce1c7b8c1b969450aa468f58d5f334c0be6913eb6c1c94d4c5aa622e05be1570225b1e004ec4e30ad69b3a26413ab75e6d9bc3ea36ac1ef8c17fb7a4fc77e7e908bd855490972b65e5135335062cbad29acfc69fb313a9217fd78f5f2efb6b20e4508ca550f3ddf9b2702c9cdfe97d1ba322ee3172027e2a4b91d223670a621da9bae4212a73d5c47c83e690af20d21e4cc9d34b69ebf3c59bc765c20dd90c502e363f0d0c6173a4f07156b6333de786834360225c43b8a11d6048872be53080fa6234b32ff4b047a420949bb3a789c22d9f11695849623ff330661c94afab958b6d5148467a5f890860f4a90914cc39e62ad601b379afca7f7988c63f8208eca7e172c394f9fa3380bd8700ae1ef88b04a820fd0d5d73a16b63ee93672fda428d0d375fa0b808d9216429587feec1b06fa2aa2ef9d8c3e4ed06f3546f5adb70fbfb8da0f4b22131314633f0c346e8cee4b7b165d6f16fd5a3dbb7961a7f0b05f293db046cf3104fbd99dbe831f4c650f2b8ac5edc5fb60d2612ad77ab47f1e6e59cc2f1a3d151fb21ba22949d09c957ef8157d8fa756d079c2620a183f65a6a1a1407f51d54d9bc4bbb67d77266f7f8de6c1533b2bb1cbefeaaacd2c51c559404cb3617d438c47df8bf06ff7f790118efae0fb01b1214c07c2915053de1b285755281994ee361d5647a9394df125f6d6f99cf3fd16b0078518c9e56b51e46cea2fcc7d4a5ffcefefcff3aee3cd9c9496050c756612ea1eb344e022c8b4d77227451f5355a316957a1e0562a8e7afb5a439d657ccbbc9839e4d1b1b691497af8fc1c7d4e28508c8c4a7a52465e7cc8bcc3fa74bf7aa7c3a8f15b65b6bdf49bb7eb5f44cdfc6a421a1b33348c8a4f3fca6f057f472000c8d6fa1fc8e0a64765e8ac11b9fb23c0698da96138efb162a65f81a986f99ec1ca137bd85e1f0b84f3d11575d6e77026da531bf05c26ce3dc9f539e1b3ba08c7755893da1b96d2dd87db486b11662790b5cf2f2b468bbc4338f9b7f3fca91a5263100fcae36d0ae197aad2d3cf3923f1d6904363bac4250fffff4e499eea8441a8fc9dca3ca16deb638ea3aea6dba04510f0eaa743d2939ca5ca11021e24185ea0ec5f448665d36c59c3ac9403f64a1175450bc9eab6d3140fa5c285ba4d7ebd715c8808fcebd9391086c894e6acf62a45a099d97bbacb5d836023d31e31c8d71b0c06d34092c967696f9e36bd09b875db4466785b13d4b5809f5f0b5c512a6f0cad7d09c69bbc6492cdd7a664200029dae93a247847cf68f7d58b563fb2d3e6a457949cb6a8498cd3a15a0f497aacc0f3fb59aec92266f453d788c7dbacd9e0fb7e2fd28677a5da43bb8814e51fae181732f16fc34d8b982e7994f5c9eec5de9ddbe1dda2f2d3ae291e957ae49f7b6c4e84cb325e8077d339872c29accaaf91f873b763053dbb80791a13553ebc3e5efef4b704a1ae0765e441fbb8e25896bd030f9b967a09efe831aa95471af35ddcdc98ac664305dfd4844972bb451e085ed1f26f20ce2797869a85f8431e0830e092d5d61b9cdcfe39a77f1f97d4b717f6a2962d382f30d8122b255deaa8c33097d6170b40c17d6b92b0cabf658c1e375a600f9368a5e7604cd8f4f05540b78393c7ae8ed4345516b8bed56b3c222fdc9863bfbbebda09914961f4f209a567035f73efd1e7e314251149969bcfcec4226f68e456be65861701ac3e37cd94d7171bfa17b1645f10c6e5a4b2c0085c062077ef1251b9506a95f081da8a4df0ecae2e6c463d1acc5455790dabc71b7383614580c95d2a516a056aa44efd02111df189e51363148ad37b8475b3fcc6104783b3b692ced39b738b8e412cac0c1e0ae84b8c333ae221364c28e1e89d92f03546c0edec638fd34de7777f571d42f56910dfef15562ae5f4379785e8cf962ea34ad9dc309f12bd0ac861c84a2ec67374fc27e78c3e700ac2cc7edc3d287c0ec022d084365c92a694e9c5565c5fc25cd730ada06cd87d1e78fc70f29b79aba3bf74f4f04fb68abf0d8e263e866a51e9195a2238fc9836a5a66714aa84c8103a6d3f1e6c79c21279ac7b8e80e7cc59d88739fdb3ce5db2d2393c97a10b49941fbf4623c9782178ff1b7459b37c5825285c30fb602936c9011fd28dc50d30caffc4d3538600e3f3c316e0281b67ba11961f435441da78264cb75e58412d15d8afeafded0715e6ea8b2fadbe3ffec8e1e6bf609be6a7019221260cba08d52276fbe4e886276e11ddd4f5e47646776282316ca29444b81ec10f4a2120feab81c90ca4fb0852a7785b67a074b1b1983e0e526c0149cd943441c0c470aca2c303111e093200368223b87afaabfe287284436f6c9dfe69309c9f9785696e0fc817a4e1653501a0108da6a5b6fe96f6eadf98b4d49f07cac76b5267bd4736a65e1e3f080010fcb96534c7677eb8933a076f70d46a04163577b9848fe53f2c59404c587810e29a0c4637029a3286158c92618a4ca2530dd1574d55cd16d3332e1eb97b5505f493ba1c1511d392693482b716d5320224474357e7c608e8282abeb73689d5b88eac399898ddad64b90a9679faaaafc606f804b97945fb52155270000625e806364fae376151fcb6168e9492231263aa1355cc6588de32296ff1210e92d50592b1225ea1e2702b14b4c56ffbae92e7fe2de11cb5bb022ee324ea65ad5f4e55d620b8db9c67d0b44c53b1d94ed0211b0755be34716545efc6228de6c5047579b62c8aeacdbf6fed7efde8c52c0a0c0ef1442516f63a729adc4d847fc5800d3cffad7c376ad9285d2f1e1080d42591b30427f889f8d63f8a34fc95d062847e31f63b884c92095f1979ab9688b802a92fa8bd8206e5c4557b96a378b1053d054ac197435d87e10d635b3c12ba996fa295af272d8f5252bbb73ba614b94bc85043712190c0066a61728477a8118b100f110eb6427b964a6b17eafc5a16e00e1969f6e9cf71263179616fabc8cec9252e8118019679e4016270cf44dc9bc55d23d737fd9955af584cf413518a58db1f28f449e7f2fcd7c82f288a6df6f384d45d7ce4eb35f6029f4632dca164e92d8f450eb5710660dc2e89f6c1075c87fbc5cb06048d7d2c454f393ad33d6804484735e21b4b7043098fcfba0e9ffb9446f617b10afa96cd8f51a2120f8efe1dbdd3d27a3e487b106cab9aedcddbc1d483e5449be6055e7bacb150393532240755a6f3eacff5a5b9e932a1e582e7ba5ea05de40e65aa5e92938c690b7a2c9962909ef1d9eac8610ac8da49caab92e271d9d878a2a5ace192c41aba3970cee11c28bc9cba488757087a8af946b1b0d0e95ee4891ff3a8c388b299e49e9d0088ec776b5abcbc04bb26be7cfe8f34a3dae788457b3476abbcb38ef6d5f4da04c793b19b8f25fb7e41f13d7660341c3d10418f64f4e183f5208b95b57593e1950470ee2f832382ddf0ef70479a99472e1165f052784b44051f3ec12d2b400c4f9beeaa0e287619595ae2b5238163aac45e77971e4dc8933eaa122579bbe46fd40ef742d9dd15deeb164c8892808537faf3ac7c0c28a89af62317783c60e7407fb410a4a5004bf0a439d0e0f1a0175bc318ea0bcb1faa1659df7278581f20e26bade769ad6bd5528bc154cd06264658feab5fe39edaf0876600cce4f03778e9bb12b7966a8c7dca9e36d96903a4ee36059f43a0a7ed92f5d1d4e912daa472f1473988ec071331dd75afa84d08157a4116b18e2a7db61b5400614208cbdf5acc475e73562ada2b5ca43b0f0549ae109b"}) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 21.026999464s ago: executing program 8 (id=6183): open(&(0x7f0000000080)='./bus\x00', 0x101bc2, 0x1a8) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000100, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20.410253342s ago: executing program 8 (id=6177): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a009562010203010902"], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006400000002509"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000"], 0x1c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0xa0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="81c941f1f3843704b6", 0x9}, {0x0}], 0x2}, 0x40400c1) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x3, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xe, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x100000000000019b) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746def6430303030303030307003003031beb0383e30303047ad550b573c9ab8fd04be23355acac1466ac3bc61dec73f30a43eea2f1c39c48260cf114bb166c42372c62442f1b63bbaf4560907d511c1e8291a9310839cabe50bcb9b541359550027385493fcd724b79c28a3811fb7e249590bac8bee993e216d4d38a34af64aa3ce3e934972801f70b260ebe11a8da47177bd43f8f7e6db4d206b403b46ef499a1d5d4fb2b77af4a0934306df23d0b60169c37e56fe3b0fc9525ce5519604bdde34392ae2e0f68ebbdee3261fbe08e11831297a9e8fea65f836942ffa63fa0c5702fd94cc29e24b79b4bb245b786f", @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r8, 0xc1004111, 0x0) r9 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000040)=[0x7, 0xff]) socket$nl_netfilter(0x10, 0x3, 0xc) 5.106672513s ago: executing program 39 (id=6177): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a009562010203010902"], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006400000002509"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000"], 0x1c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0xa0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="81c941f1f3843704b6", 0x9}, {0x0}], 0x2}, 0x40400c1) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x3, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xe, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x100000000000019b) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746def6430303030303030307003003031beb0383e30303047ad550b573c9ab8fd04be23355acac1466ac3bc61dec73f30a43eea2f1c39c48260cf114bb166c42372c62442f1b63bbaf4560907d511c1e8291a9310839cabe50bcb9b541359550027385493fcd724b79c28a3811fb7e249590bac8bee993e216d4d38a34af64aa3ce3e934972801f70b260ebe11a8da47177bd43f8f7e6db4d206b403b46ef499a1d5d4fb2b77af4a0934306df23d0b60169c37e56fe3b0fc9525ce5519604bdde34392ae2e0f68ebbdee3261fbe08e11831297a9e8fea65f836942ffa63fa0c5702fd94cc29e24b79b4bb245b786f", @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r8, 0xc1004111, 0x0) r9 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000040)=[0x7, 0xff]) socket$nl_netfilter(0x10, 0x3, 0xc) 1.24865731s ago: executing program 0 (id=6359): bpf$BPF_PROG_DETACH(0x25, 0x0, 0x0) unshare(0x24000580) 1.247288537s ago: executing program 0 (id=6362): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r1) (async) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) (async) syz_fuse_handle_req(r1, &(0x7f000000a3c0)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009985f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4d6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa350448ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f582300", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_clone(0x1000000, &(0x7f0000000500)="699ee1594805cac7dcfec577ee8dfab16f7d83f4e3f5df4f76ea00e1826f1093931975feac9de22a42ea91b8574829710ee07e25f2fe329f653d7e4ae9e7bf8be18baf0dd88ec35e1c01d0c2cef5eab541f8efb7de8b278a3fbfb09a7fda9d7352aba1a5c465edba48f52fd5f84eeb18a6536e517d4a63ec4da8c298f3986302b3885daf28628584adad9870101db7b3c916b8169e3ffe77db47db9d0a4c666ee3d95a5c4376516c9a85c79cacca27721484b6d7a2f8a5f038e0af8d53b54d2c24c4c1732dd8", 0xc6, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000680)="973b96548bf2e737396c31060ca23b71efc2431739b0aa4ddcd69dee394f675ba77e31e6060e9b5d97bec9d71cc8e0d7d958f0939eb8a2d48cc1eb1a7ec29e6fed54c77db54a9d27eddfb509e09c72c59199f94799c03f112f6e9c9499d4cb5d55b7d9e14f872540502fc0394028db26b7de05499f2f01c2fc20486c9d59c91cdfea6ea9fd9aa0a7fbae19bbf6") process_vm_readv(r6, &(0x7f0000000340)=[{&(0x7f0000000240)=""/12, 0xc}, {&(0x7f0000000280)=""/23, 0x17}, {&(0x7f0000000740)=""/213, 0xd5}], 0x3, &(0x7f0000000d40)=[{&(0x7f0000000840)=""/148, 0x94}, {&(0x7f0000000380)=""/3, 0x3}, {&(0x7f0000000940)=""/145, 0x91}, {&(0x7f0000000a00)=""/251, 0xfb}, {&(0x7f0000000b00)=""/158, 0x9e}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f0000000bc0)=""/235, 0xeb}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x8, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c0000000000000000000001"], 0x30}], 0x1}, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x40000000000}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x8, 0x0, 0x3, 0x20, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x0, 0x0, 0xd, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) (async) r8 = accept$netrom(r1, &(0x7f0000000000)={{0x3, @netrom}, [@rose, @remote, @null, @null, @default, @rose, @null, @bcast]}, &(0x7f00000000c0)=0x48) ioctl$BTRFS_IOC_GET_FEATURES(r8, 0x80189439, &(0x7f0000000100)) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.179543031s ago: executing program 5 (id=6364): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_macvtap\x00', &(0x7f0000000140)=@ethtool_flash={0x33, 0x2}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004811}, 0x8814) socket$kcm(0x10, 0x2, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x100800) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000200)="5c00000013006bcc9e3be35c6e17aa31066b876c1d0000007ea6e763160af36504001ac0080010000400020002000000efe95ac81133345577251e618294ff0051f60a9553adac000e4509c5bbcd72c6c953ec3ded4d8217adda1ea65577ed0eb2d98eca51100a22434696f4f5c600c0185606ca2238ce6c38d8b9837e61d43ec3b15f9bb3b195e8ff9de59e22d388464e2863c74a99d5830bed2c27b4e68426c87fa651ab012219ec5a0bfbf85dcf442042e7e1921b8c0ac99535143682948a0012441c91a46903e160b8c9b3839fec682be084ffcee631dcfb7a1d811a6392bdbe421d1cb9", 0xe6}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040845) 1.119695418s ago: executing program 5 (id=6366): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008030) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000001080)={{}, "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"}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, 0x0) bind$alg(r7, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) (fail_nth: 10) 1.009493623s ago: executing program 0 (id=6367): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) close(r0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000040)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x40000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r2, 0x100000000) bind$tipc(r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x1, 0x6, @random="5f0b2d9b2d05"}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, r5, 0x25, 0x18, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000440)=r8, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000200)={r12, 0x0, 0x5, 0xfffffffe}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', r5, 0x4, 0x5, 0x3, 0x4, 0x8, @empty, @rand_addr=' \x01\x00', 0x7, 0x700, 0x401, 0xbe1}}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {}, {0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x80000000}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x34}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) 888.322157ms ago: executing program 0 (id=6369): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4002, 0x1000, @empty}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 828.789141ms ago: executing program 0 (id=6370): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) mkdir(0x0, 0x5) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x4feff, 0x19) 739.998088ms ago: executing program 9 (id=6371): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0x2, 0x4) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001940)=""/34, 0x22}], 0x1}, 0x1}], 0x1, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x2, 0x1000, @empty}, 0x1c) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4002, 0x1000, @empty}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0) 739.753336ms ago: executing program 9 (id=6372): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x100}}) 678.923509ms ago: executing program 9 (id=6373): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/83, 0x53}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/229, 0xe5}, {&(0x7f00000013c0)=""/82, 0x52}], 0x4) 678.749222ms ago: executing program 9 (id=6374): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000100)={@lba=0xbe4c, 0x0, 0x1}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ufs\x00', 0x0, &(0x7f00000000c0)='\x00') 589.149059ms ago: executing program 9 (id=6375): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) ioctl$CDROMCLOSETRAY(0xffffffffffffffff, 0x5319) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x316064e03cd43274, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000080)=0x2) 588.922113ms ago: executing program 3 (id=6376): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x8, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095", @ANYRES32, @ANYRESHEX=0x0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f00000003c0)={0x2004c00, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x6}, &(0x7f0000000100)=""/228, 0xe4, &(0x7f0000000200), &(0x7f0000000240)=[0x0], 0x1}, 0x58) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f00000006c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1a\x1f\xaaK\xc0\xb0\x0e&\x1fd\xe8cB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2//\xd9\\\xd0+\x80-\xccE\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\x00\x00\x00\x00\x00\x00\x00\aJ\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x05\x00\x00\x00\xe3\xc4\xd5\xe9\xed\xe8\xe5\xae\xdf\x00u\xf98b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\xff\x7f\x00\x00\x00\x00\x00\x00\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa5\x065m\x03\x05Np\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\x01\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f\x96\x8e\x94\f\xb3\xad\x95\xd8\xe6\xfc\xb0Cs\xb9K\xe0\x8f\xc5;\xfe\x94HFtf\xf5|E\xb5VY\xa8\xcdW\x1d\xb2\\:/\tNO\xa7\x03\xc5#\x06\x92\xba\x93\xc2\x1f\x03J\x0fd\x1a\xc8\xb3\x8b\xe7\x00\x00\x00\x00\x00\x00\x00Vi\xbf\x99\xd9\x9d\xa5@\xfa\f\x82\xcc\xb7\"G)\xe0X\x82\xe8\x12=6\x9e?\xb7\xc1/\x06\b\xff\xab\xf5,R\x83\x9f\xe5\xd9\x18\xac\xf1S\x99\x06\xf5\xba\x14\x87\xb45\xc3\x12\x05\x16\xa8\xd6g\x15\x12\xde\xb73\xaf\xe1\x9d\xb0\x84\xd2;\x9f\x10\xc5\xf5\xacH\xcd}\x95N\x02\x94\xa4\x84\x02\x8eG\xbd=\xc4z\v`', 0x6) fcntl$addseals(r1, 0x409, 0x7) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x4, 0x3, 0x4, 0x5, 0xcc9, 0x12, 0x8, 0xa, 0x0, 0xefb, 0x1, 0x6, 0x1, 0x6, 0xff, 0x1040, 0x1a449, 0x3, 0x40000007, 0x9d, 0xcaa7, 0x4, 0x20001e58, 0x4, 0x80000001, 0x3c, 0x8, 0x105, 0x0, 0xfffffffa]}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000380)={r1, 0x40000000, 0x8000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000306050000000000000000000000fdffffff010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x40000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xa0}], 0x1, 0x40800) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x7}) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f00000001c0)='./file1\x00', 0x8840, 0x80) socket$nl_route(0x10, 0x3, 0x0) 588.822185ms ago: executing program 9 (id=6377): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x2, 0x0, 0x0, 0x0, 0x0, {0xffff}}) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x11, 0xa, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) io_uring_enter(r0, 0x3516, 0xe0ff, 0xe00, 0x0, 0x0) 539.05257ms ago: executing program 3 (id=6378): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4002, 0x1000, @empty}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r2, 0xffffffffffffffff, 0x0) 538.810905ms ago: executing program 3 (id=6379): open(&(0x7f0000000080)='./bus\x00', 0x101bc2, 0x1a8) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000feffffff0000000000000000850000002a00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000100, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 458.913142ms ago: executing program 5 (id=6380): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000000)="06ff03076844babeb89e14f043", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 458.70673ms ago: executing program 5 (id=6381): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001940)=""/34, 0x22}], 0x1}, 0x1}], 0x1, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x2, 0x1000, @empty}, 0x1c) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4002, 0x1000, @empty}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0) 409.970127ms ago: executing program 5 (id=6382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x12000}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xfffffea8, {0xf000}}, "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", "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"}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 360.279992ms ago: executing program 3 (id=6383): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/83, 0x53}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/229, 0xe5}, {&(0x7f00000013c0)=""/82, 0x52}], 0x4) 359.975635ms ago: executing program 3 (id=6384): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0xd, 0xfff3}}}, 0x24}}, 0x4008000) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040effff2820"], 0x7) 359.815276ms ago: executing program 3 (id=6385): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) fspick(r1, &(0x7f0000000240)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) open_by_handle_at(r2, &(0x7f00000000c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x9, 0x9, 0x7, 0x5a12}}, 0x1110a0) openat$cgroup_freezer_state(r1, &(0x7f0000000000), 0x2, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 196.955683ms ago: executing program 5 (id=6386): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000040)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0, 0x10, r2}) ioctl(r3, 0x8916, &(0x7f0000000000)) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r7, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a63"], 0xffdd) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) 0s ago: executing program 0 (id=6387): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) mkdir(0x0, 0x5) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) (fail_nth: 10) kernel console output (not intermixed with test programs): 409751][T15499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.409761][T15499] RSP: 002b:00007f8dca193038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.409772][T15499] RAX: ffffffffffffffda RBX: 00007f8dc95b5fa0 RCX: 00007f8dc938ebe9 [ 439.409779][T15499] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 439.409785][T15499] RBP: 00007f8dca193090 R08: 0000000000000000 R09: 0000000000000000 [ 439.409791][T15499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.409797][T15499] R13: 00007f8dc95b6038 R14: 00007f8dc95b5fa0 R15: 00007ffc688f81f8 [ 439.409810][T15499] [ 439.592826][T15522] __nla_validate_parse: 8 callbacks suppressed [ 439.592837][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6022'. [ 439.600607][T15522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15522 comm=syz.0.6022 [ 439.612357][T15524] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6029'. [ 439.640299][T15529] FAULT_INJECTION: forcing a failure. [ 439.640299][T15529] name failslab, interval 1, probability 0, space 0, times 0 [ 439.644308][T15529] CPU: 0 UID: 0 PID: 15529 Comm: syz.5.6023 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 439.644331][T15529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 439.644341][T15529] Call Trace: [ 439.644348][T15529] [ 439.644355][T15529] dump_stack_lvl+0x16c/0x1f0 [ 439.644377][T15529] should_fail_ex+0x512/0x640 [ 439.644396][T15529] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 439.644417][T15529] should_failslab+0xc2/0x120 [ 439.644441][T15529] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 439.644457][T15529] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 439.644483][T15529] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 439.644502][T15529] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 439.644530][T15529] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 439.644564][T15529] mmu_topup_memory_caches+0x25/0x170 [ 439.644585][T15529] kvm_mmu_load+0xd6/0x23c0 [ 439.644604][T15529] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 439.644625][T15529] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 439.644644][T15529] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 439.644668][T15529] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 439.644686][T15529] ? __pfx_kvm_mmu_load+0x10/0x10 [ 439.644703][T15529] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 439.644727][T15529] ? kvm_check_and_inject_events+0x71c/0x1310 [ 439.644756][T15529] vcpu_run+0x358c/0x5580 [ 439.644781][T15529] ? __lock_acquire+0xb97/0x1ce0 [ 439.644813][T15529] ? __pfx_vcpu_run+0x10/0x10 [ 439.644841][T15529] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 439.644862][T15529] ? __local_bh_enable_ip+0xa4/0x120 [ 439.644888][T15529] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 439.644911][T15529] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 439.644942][T15529] kvm_vcpu_ioctl+0x5eb/0x1690 [ 439.644969][T15529] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 439.644992][T15529] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 439.645014][T15529] ? do_vfs_ioctl+0x128/0x14f0 [ 439.645038][T15529] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 439.645064][T15529] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 439.645088][T15529] ? hook_file_ioctl_common+0x145/0x410 [ 439.645103][T15529] ? selinux_file_ioctl+0x180/0x270 [ 439.645118][T15529] ? selinux_file_ioctl+0xb4/0x270 [ 439.645134][T15529] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 439.645148][T15529] __x64_sys_ioctl+0x18b/0x210 [ 439.645165][T15529] do_syscall_64+0xcd/0x4c0 [ 439.645178][T15529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.645189][T15529] RIP: 0033:0x7f095a18ebe9 [ 439.645199][T15529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.645210][T15529] RSP: 002b:00007f095af80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.645220][T15529] RAX: ffffffffffffffda RBX: 00007f095a3b5fa0 RCX: 00007f095a18ebe9 [ 439.645227][T15529] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 439.645233][T15529] RBP: 00007f095af80090 R08: 0000000000000000 R09: 0000000000000000 [ 439.645239][T15529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.645246][T15529] R13: 00007f095a3b6038 R14: 00007f095a3b5fa0 R15: 00007ffdd14ae3c8 [ 439.645259][T15529] [ 439.657150][ T63] Bluetooth: hci2: command tx timeout [ 439.727273][ T40] audit: type=1400 audit(2000000332.343:1783): avc: denied { write } for pid=15535 comm="syz.8.6025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 439.819331][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.856718][ T53] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 439.894583][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6034'. [ 439.932290][ T40] audit: type=1326 audit(2000000332.543:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.8.6036" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00658ebe9 code=0x7ffc0000 [ 439.939701][ T40] audit: type=1326 audit(2000000332.543:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.8.6036" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff00658d550 code=0x7ffc0000 [ 439.946858][ T40] audit: type=1326 audit(2000000332.543:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.8.6036" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff00658d69f code=0x7ffc0000 [ 439.954054][ T40] audit: type=1326 audit(2000000332.543:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.8.6036" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff00658d69f code=0x7ffc0000 [ 439.954833][T15561] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 439.962965][T15561] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 439.965936][T15561] vhci_hcd vhci_hcd.0: Device attached [ 439.972418][T15565] vhci_hcd: unknown pdu 2 [ 439.974259][T16157] vhci_hcd: stop threads [ 439.975622][T16157] vhci_hcd: release socket [ 439.978915][T16157] vhci_hcd: disconnect device [ 440.016297][ T53] usb 5-1: Using ep0 maxpacket: 16 [ 440.021324][ T53] usb 5-1: config 0 has no interfaces? [ 440.027323][ T53] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 440.033067][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.037497][ T53] usb 5-1: Product: syz [ 440.039393][ T53] usb 5-1: Manufacturer: syz [ 440.041335][ T53] usb 5-1: SerialNumber: syz [ 440.047157][ T53] usb 5-1: config 0 descriptor?? [ 440.088559][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6045'. [ 440.163030][T15597] FAULT_INJECTION: forcing a failure. [ 440.163030][T15597] name failslab, interval 1, probability 0, space 0, times 0 [ 440.166982][T15597] CPU: 3 UID: 0 PID: 15597 Comm: syz.5.6049 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 440.166998][T15597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 440.167008][T15597] Call Trace: [ 440.167012][T15597] [ 440.167018][T15597] dump_stack_lvl+0x16c/0x1f0 [ 440.167033][T15597] should_fail_ex+0x512/0x640 [ 440.167045][T15597] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 440.167058][T15597] should_failslab+0xc2/0x120 [ 440.167071][T15597] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 440.167081][T15597] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 440.167098][T15597] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 440.167113][T15597] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 440.167132][T15597] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 440.167152][T15597] mmu_topup_memory_caches+0x25/0x170 [ 440.167164][T15597] kvm_mmu_load+0xd6/0x23c0 [ 440.167175][T15597] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 440.167186][T15597] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 440.167199][T15597] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 440.167238][T15597] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 440.167252][T15597] ? __pfx_kvm_mmu_load+0x10/0x10 [ 440.167262][T15597] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 440.167279][T15597] ? kvm_check_and_inject_events+0x71c/0x1310 [ 440.167297][T15597] vcpu_run+0x358c/0x5580 [ 440.167313][T15597] ? __lock_acquire+0xb97/0x1ce0 [ 440.167333][T15597] ? __pfx_vcpu_run+0x10/0x10 [ 440.167350][T15597] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 440.167364][T15597] ? __local_bh_enable_ip+0xa4/0x120 [ 440.167381][T15597] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 440.167395][T15597] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 440.167414][T15597] kvm_vcpu_ioctl+0x5eb/0x1690 [ 440.167430][T15597] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 440.167444][T15597] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 440.167463][T15597] ? do_vfs_ioctl+0x128/0x14f0 [ 440.167479][T15597] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 440.167496][T15597] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 440.167517][T15597] ? hook_file_ioctl_common+0x145/0x410 [ 440.167531][T15597] ? selinux_file_ioctl+0x180/0x270 [ 440.167546][T15597] ? selinux_file_ioctl+0xb4/0x270 [ 440.167561][T15597] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 440.167575][T15597] __x64_sys_ioctl+0x18b/0x210 [ 440.167593][T15597] do_syscall_64+0xcd/0x4c0 [ 440.167606][T15597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.167617][T15597] RIP: 0033:0x7f095a18ebe9 [ 440.167626][T15597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.167637][T15597] RSP: 002b:00007f095af80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.167647][T15597] RAX: ffffffffffffffda RBX: 00007f095a3b5fa0 RCX: 00007f095a18ebe9 [ 440.167654][T15597] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 440.167660][T15597] RBP: 00007f095af80090 R08: 0000000000000000 R09: 0000000000000000 [ 440.167667][T15597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.167673][T15597] R13: 00007f095a3b6038 R14: 00007f095a3b5fa0 R15: 00007ffdd14ae3c8 [ 440.167687][T15597] [ 440.263069][ T53] usb 5-1: USB disconnect, device number 7 [ 440.783016][T15627] new mount options do not match the existing superblock, will be ignored [ 440.990550][T15632] new mount options do not match the existing superblock, will be ignored [ 440.994884][T15632] FAULT_INJECTION: forcing a failure. [ 440.994884][T15632] name failslab, interval 1, probability 0, space 0, times 0 [ 441.000066][T15634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15634 comm=syz.8.6057 [ 441.000413][T15632] CPU: 0 UID: 0 PID: 15632 Comm: syz.0.6056 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 441.000431][T15632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 441.000438][T15632] Call Trace: [ 441.000443][T15632] [ 441.000448][T15632] dump_stack_lvl+0x16c/0x1f0 [ 441.000463][T15632] should_fail_ex+0x512/0x640 [ 441.000476][T15632] ? fs_reclaim_acquire+0xae/0x150 [ 441.000500][T15632] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 441.000518][T15632] should_failslab+0xc2/0x120 [ 441.000531][T15632] __kmalloc_noprof+0xd2/0x510 [ 441.000546][T15632] tomoyo_realpath_from_path+0xc2/0x6e0 [ 441.000564][T15632] ? tomoyo_profile+0x47/0x60 [ 441.000576][T15632] tomoyo_path_number_perm+0x245/0x580 [ 441.000590][T15632] ? tomoyo_path_number_perm+0x237/0x580 [ 441.000605][T15632] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 441.000620][T15632] ? find_held_lock+0x2b/0x80 [ 441.000646][T15632] ? find_held_lock+0x2b/0x80 [ 441.000659][T15632] ? hook_file_ioctl_common+0x145/0x410 [ 441.000674][T15632] ? __fget_files+0x20e/0x3c0 [ 441.000689][T15632] security_file_ioctl+0x9b/0x240 [ 441.000706][T15632] __x64_sys_ioctl+0xb7/0x210 [ 441.000724][T15632] do_syscall_64+0xcd/0x4c0 [ 441.000738][T15632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.000751][T15632] RIP: 0033:0x7f8dc938ebe9 [ 441.000762][T15632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.000846][T15632] RSP: 002b:00007f8dca172038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.000859][T15632] RAX: ffffffffffffffda RBX: 00007f8dc95b6090 RCX: 00007f8dc938ebe9 [ 441.000868][T15632] RDX: 0000200000000240 RSI: 000000000000890b RDI: 000000000000000a [ 441.000875][T15632] RBP: 00007f8dca172090 R08: 0000000000000000 R09: 0000000000000000 [ 441.000882][T15632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.000890][T15632] R13: 00007f8dc95b6128 R14: 00007f8dc95b6090 R15: 00007ffc688f81f8 [ 441.000906][T15632] [ 441.000912][T15632] ERROR: Out of memory at tomoyo_realpath_from_path. [ 441.118242][T15641] overlayfs: failed to clone lowerpath [ 441.554380][T15669] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 441.561708][T15669] FAULT_INJECTION: forcing a failure. [ 441.561708][T15669] name failslab, interval 1, probability 0, space 0, times 0 [ 441.565648][T15669] CPU: 1 UID: 0 PID: 15669 Comm: syz.5.6068 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 441.565665][T15669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 441.565671][T15669] Call Trace: [ 441.565676][T15669] [ 441.565680][T15669] dump_stack_lvl+0x16c/0x1f0 [ 441.565695][T15669] should_fail_ex+0x512/0x640 [ 441.565707][T15669] ? __kmalloc_node_noprof+0xc5/0x500 [ 441.565725][T15669] should_failslab+0xc2/0x120 [ 441.565738][T15669] __kmalloc_node_noprof+0xd8/0x500 [ 441.565749][T15669] ? __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 441.565768][T15669] __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 441.565783][T15669] ? local_lock_release+0x99/0x140 [ 441.565800][T15669] ? vhost_task_create+0x1d2/0x2e0 [ 441.565812][T15669] ? rcu_read_unlock+0x17/0x60 [ 441.565826][T15669] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 441.565847][T15669] ? vhost_task_create+0x1d2/0x2e0 [ 441.565857][T15669] __vmalloc_node_noprof+0xad/0xf0 [ 441.565872][T15669] ? vhost_task_create+0x1d2/0x2e0 [ 441.565883][T15669] copy_process+0x2c70/0x7690 [ 441.565904][T15669] ? __pfx_copy_process+0x10/0x10 [ 441.565921][T15669] ? lockdep_init_map_type+0x5c/0x280 [ 441.565932][T15669] ? lockdep_init_map_type+0x5c/0x280 [ 441.565942][T15669] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 441.565957][T15669] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 441.565975][T15669] vhost_task_create+0x1d2/0x2e0 [ 441.565985][T15669] ? __pfx_vhost_task_create+0x10/0x10 [ 441.566000][T15669] ? __pfx_vhost_task_fn+0x10/0x10 [ 441.566017][T15669] kvm_mmu_post_init_vm+0x1b7/0x380 [ 441.566030][T15669] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 441.566046][T15669] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 441.566062][T15669] kvm_vcpu_ioctl+0x5eb/0x1690 [ 441.566078][T15669] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 441.566092][T15669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 441.566105][T15669] ? do_vfs_ioctl+0x128/0x14f0 [ 441.566122][T15669] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 441.566149][T15669] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 441.566173][T15669] ? hook_file_ioctl_common+0x145/0x410 [ 441.566188][T15669] ? selinux_file_ioctl+0x180/0x270 [ 441.566202][T15669] ? selinux_file_ioctl+0xb4/0x270 [ 441.566217][T15669] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 441.566232][T15669] __x64_sys_ioctl+0x18b/0x210 [ 441.566249][T15669] do_syscall_64+0xcd/0x4c0 [ 441.566262][T15669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.566273][T15669] RIP: 0033:0x7f095a18ebe9 [ 441.566282][T15669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.566293][T15669] RSP: 002b:00007f095af80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.566304][T15669] RAX: ffffffffffffffda RBX: 00007f095a3b5fa0 RCX: 00007f095a18ebe9 [ 441.566310][T15669] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 441.566317][T15669] RBP: 00007f095af80090 R08: 0000000000000000 R09: 0000000000000000 [ 441.566323][T15669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.566329][T15669] R13: 00007f095a3b6038 R14: 00007f095a3b5fa0 R15: 00007ffdd14ae3c8 [ 441.566343][T15669] [ 441.676777][T15669] warn_alloc: 4 callbacks suppressed [ 441.676788][T15669] syz.5.6068: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 441.683818][T15669] CPU: 0 UID: 0 PID: 15669 Comm: syz.5.6068 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 441.683834][T15669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 441.683840][T15669] Call Trace: [ 441.683844][T15669] [ 441.683849][T15669] dump_stack_lvl+0x16c/0x1f0 [ 441.683875][T15669] warn_alloc+0x248/0x3a0 [ 441.683889][T15669] ? __pfx_warn_alloc+0x10/0x10 [ 441.683898][T15669] ? dump_stack_lvl+0x1a1/0x1f0 [ 441.683914][T15669] ? rcu_is_watching+0x12/0xc0 [ 441.683928][T15669] ? __kmalloc_node_noprof+0x23b/0x500 [ 441.683943][T15669] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 441.683960][T15669] ? local_lock_release+0x99/0x140 [ 441.683977][T15669] ? vhost_task_create+0x1d2/0x2e0 [ 441.683992][T15669] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 441.684013][T15669] ? vhost_task_create+0x1d2/0x2e0 [ 441.684023][T15669] __vmalloc_node_noprof+0xad/0xf0 [ 441.684038][T15669] ? vhost_task_create+0x1d2/0x2e0 [ 441.684050][T15669] copy_process+0x2c70/0x7690 [ 441.684071][T15669] ? __pfx_copy_process+0x10/0x10 [ 441.684088][T15669] ? lockdep_init_map_type+0x5c/0x280 [ 441.684099][T15669] ? lockdep_init_map_type+0x5c/0x280 [ 441.684109][T15669] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 441.684125][T15669] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 441.684142][T15669] vhost_task_create+0x1d2/0x2e0 [ 441.684152][T15669] ? __pfx_vhost_task_create+0x10/0x10 [ 441.684167][T15669] ? __pfx_vhost_task_fn+0x10/0x10 [ 441.684184][T15669] kvm_mmu_post_init_vm+0x1b7/0x380 [ 441.684198][T15669] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 441.684214][T15669] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 441.684230][T15669] kvm_vcpu_ioctl+0x5eb/0x1690 [ 441.684246][T15669] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 441.684276][T15669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 441.684290][T15669] ? do_vfs_ioctl+0x128/0x14f0 [ 441.684306][T15669] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 441.684322][T15669] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 441.684343][T15669] ? hook_file_ioctl_common+0x145/0x410 [ 441.684358][T15669] ? selinux_file_ioctl+0x180/0x270 [ 441.684372][T15669] ? selinux_file_ioctl+0xb4/0x270 [ 441.684387][T15669] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 441.684401][T15669] __x64_sys_ioctl+0x18b/0x210 [ 441.684418][T15669] do_syscall_64+0xcd/0x4c0 [ 441.684431][T15669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.684442][T15669] RIP: 0033:0x7f095a18ebe9 [ 441.684451][T15669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.684461][T15669] RSP: 002b:00007f095af80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.684471][T15669] RAX: ffffffffffffffda RBX: 00007f095a3b5fa0 RCX: 00007f095a18ebe9 [ 441.684477][T15669] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 441.684484][T15669] RBP: 00007f095af80090 R08: 0000000000000000 R09: 0000000000000000 [ 441.684490][T15669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.684495][T15669] R13: 00007f095a3b6038 R14: 00007f095a3b5fa0 R15: 00007ffdd14ae3c8 [ 441.684509][T15669] [ 441.684553][T15669] Mem-Info: [ 441.792195][T15669] active_anon:15970 inactive_anon:0 isolated_anon:0 [ 441.792195][T15669] active_file:5207 inactive_file:50199 isolated_file:0 [ 441.792195][T15669] unevictable:1768 dirty:502 writeback:0 [ 441.792195][T15669] slab_reclaimable:11159 slab_unreclaimable:102168 [ 441.792195][T15669] mapped:31705 shmem:2450 pagetables:1864 [ 441.792195][T15669] sec_pagetables:320 bounce:0 [ 441.792195][T15669] kernel_misc_reclaimable:0 [ 441.792195][T15669] free:385284 free_pcp:13744 free_cma:0 [ 441.806381][T15669] Node 0 active_anon:63520kB inactive_anon:0kB active_file:20828kB inactive_file:200488kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:115976kB dirty:2000kB writeback:0kB shmem:6188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18000kB pagetables:6692kB sec_pagetables:1280kB all_unreclaimable? yes Balloon:0kB [ 441.817106][T15669] Node 1 active_anon:360kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:10844kB dirty:8kB writeback:0kB shmem:3612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:304kB pagetables:888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 441.826592][T15683] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 441.828932][T15669] Node 0 DMA free:7420kB boost:2048kB min:2388kB low:2472kB high:2556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:288kB local_pcp:72kB free_cma:0kB [ 441.838560][T15669] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 441.840475][T15669] Node 0 DMA32 free:47004kB boost:10240kB min:37756kB low:44632kB high:51508kB reserved_highatomic:2048KB free_highatomic:1568KB active_anon:63520kB inactive_anon:0kB active_file:20828kB inactive_file:200488kB unevictable:3536kB writepending:2000kB present:2080628kB managed:1263516kB mlocked:0kB bounce:0kB free_pcp:28184kB local_pcp:6308kB free_cma:0kB [ 441.851354][T15669] lowmem_reserve[]: 0 0 0 0 0 [ 441.852885][T15669] Node 1 Normal free:1486336kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:360kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:26872kB local_pcp:1980kB free_cma:0kB [ 441.862748][T15669] lowmem_reserve[]: 0 0 0 0 0 [ 441.864260][T15669] Node 0 DMA: 11*4kB (UME) 4*8kB (UME) 9*16kB (UME) 9*32kB (UME) 6*64kB (ME) 7*128kB (UME) 6*256kB (UME) 4*512kB (ME) 2*1024kB (UM) 0*2048kB 0*4096kB = 7420kB [ 441.869237][T15669] Node 0 DMA32: 294*4kB (UME) 352*8kB (UME) 76*16kB (ME) 105*32kB (UMEH) 67*64kB (UME) 48*128kB (UME) 25*256kB (M) 16*512kB (MEH) 7*1024kB (MH) 3*2048kB (UM) 0*4096kB = 46904kB [ 441.874640][T15669] Node 1 Normal: 258*4kB (UME) 209*8kB (UME) 91*16kB (UME) 73*32kB (UME) 57*64kB (UME) 19*128kB (UME) 9*256kB (ME) 28*512kB (UM) 29*1024kB (UME) 7*2048kB (UM) 345*4096kB (UM) = 1486368kB [ 441.880417][T15669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 441.883340][T15669] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 441.886312][T15669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 441.889282][T15669] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 441.892279][T15669] 57852 total pagecache pages [ 441.893762][T15669] 0 pages in swap cache [ 441.895073][T15669] Free swap = 124996kB [ 441.896608][T15669] Total swap = 124996kB [ 441.897979][T15669] 1048443 pages RAM [ 441.899185][T15669] 0 pages HighMem/MovableOnly [ 441.900807][T15669] 283251 pages reserved [ 441.902137][T15669] 0 pages cma reserved [ 442.011332][T15700] 9pnet_fd: Insufficient options for proto=fd [ 442.227069][T15735] netlink: 'syz.0.6084': attribute type 1 has an invalid length. [ 442.230092][T15735] netlink: 'syz.0.6084': attribute type 4 has an invalid length. [ 442.233134][T15735] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6084'. [ 442.247444][T15735] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 442.258889][T15735] kvm: pic: level sensitive irq not supported [ 442.259881][T15735] kvm: pic: non byte read [ 442.264719][T15735] kvm: pic: level sensitive irq not supported [ 442.265002][T15735] kvm: pic: non byte read [ 442.271706][T15735] kvm: pic: level sensitive irq not supported [ 442.272887][T15735] kvm: pic: non byte read [ 442.308080][T15746] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6087'. [ 442.311257][T15746] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6087'. [ 442.348421][T15751] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6089'. [ 442.499254][T15779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6093'. [ 442.528243][T15783] overlayfs: failed to clone upperpath [ 442.578459][T15785] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.6098'. [ 442.701174][T15785] lo speed is unknown, defaulting to 1000 [ 442.736877][ T9] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 442.906543][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 442.909682][ T9] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 442.912933][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 442.915850][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.009106][T15847] netlink: 'syz.0.6106': attribute type 10 has an invalid length. [ 443.012278][T15847] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.014743][T15847] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.022360][T15847] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.025347][T15847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.028544][T15847] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.031258][T15847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.038250][T15847] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 443.241356][T15864] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 443.249167][T15864] kvm: pic: non byte read [ 443.251640][T15864] kvm: pic: level sensitive irq not supported [ 443.251986][T15864] kvm: pic: non byte read [ 443.352577][T15872] FAULT_INJECTION: forcing a failure. [ 443.352577][T15872] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 443.357459][T15872] CPU: 0 UID: 0 PID: 15872 Comm: syz.0.6112 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 443.357475][T15872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 443.357481][T15872] Call Trace: [ 443.357485][T15872] [ 443.357490][T15872] dump_stack_lvl+0x16c/0x1f0 [ 443.357504][T15872] should_fail_ex+0x512/0x640 [ 443.357519][T15872] should_fail_alloc_page+0xe7/0x130 [ 443.357533][T15872] prepare_alloc_pages+0x3c2/0x610 [ 443.357550][T15872] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 443.357564][T15872] ? look_up_lock_class+0x59/0x150 [ 443.357575][T15872] ? register_lock_class+0x41/0x4c0 [ 443.357592][T15872] ? find_held_lock+0x2b/0x80 [ 443.357606][T15872] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 443.357625][T15872] ? __lock_acquire+0x62e/0x1ce0 [ 443.357641][T15872] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 443.357656][T15872] ? policy_nodemask+0xea/0x4e0 [ 443.357675][T15872] alloc_pages_mpol+0x1fb/0x550 [ 443.357692][T15872] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 443.357708][T15872] alloc_pages_noprof+0x131/0x390 [ 443.357721][T15872] __pud_alloc+0x3b/0x750 [ 443.357736][T15872] __handle_mm_fault+0x13de/0x2a50 [ 443.357754][T15872] ? mt_find+0x3ef/0xa30 [ 443.357767][T15872] ? __pfx___handle_mm_fault+0x10/0x10 [ 443.357782][T15872] ? __pfx_mt_find+0x10/0x10 [ 443.357801][T15872] ? find_vma+0xbf/0x140 [ 443.357813][T15872] ? __pfx_find_vma+0x10/0x10 [ 443.357826][T15872] handle_mm_fault+0x589/0xd10 [ 443.357843][T15872] ? __bpf_trace_exceptions+0x1/0x40 [ 443.357862][T15872] do_user_addr_fault+0x7a6/0x1370 [ 443.357879][T15872] ? rcu_is_watching+0x12/0xc0 [ 443.357903][T15872] exc_page_fault+0x5c/0xb0 [ 443.357918][T15872] asm_exc_page_fault+0x26/0x30 [ 443.357933][T15872] RIP: 0010:__put_user_4+0xd/0x20 [ 443.357947][T15872] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 07 6d 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 443.357960][T15872] RSP: 0018:ffffc9000f077b38 EFLAGS: 00050206 [ 443.357972][T15872] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 0000200000000000 [ 443.357982][T15872] RDX: ffff8880261f8000 RSI: ffffffff855e9a9f RDI: ffffffff8c162500 [ 443.357992][T15872] RBP: dffffc0000000000 R08: 1525ca5b0a5321be R09: 0000000000000001 [ 443.358000][T15872] R10: 0000000000000000 R11: 0000000000000000 R12: 0000200000000000 [ 443.358007][T15872] R13: 0000000000000006 R14: ffffffff8f2e0948 R15: 0000000000000006 [ 443.358018][T15872] ? vt_do_diacrit+0x5ef/0xa00 [ 443.358033][T15872] vt_do_diacrit+0x5fa/0xa00 [ 443.358047][T15872] vt_ioctl+0x505/0x30a0 [ 443.358061][T15872] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.358073][T15872] ? __pfx_vt_ioctl+0x10/0x10 [ 443.358090][T15872] ? tomoyo_path_number_perm+0x18d/0x580 [ 443.358109][T15872] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 443.358122][T15872] ? tty_jobctrl_ioctl+0x152/0xe00 [ 443.358137][T15872] ? __pfx_vt_ioctl+0x10/0x10 [ 443.358151][T15872] tty_ioctl+0x65e/0x1680 [ 443.358168][T15872] ? __pfx_tty_ioctl+0x10/0x10 [ 443.358179][T15872] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 443.358199][T15872] ? hook_file_ioctl_common+0x145/0x410 [ 443.358213][T15872] ? selinux_file_ioctl+0x180/0x270 [ 443.358227][T15872] ? selinux_file_ioctl+0xb4/0x270 [ 443.358243][T15872] ? __pfx_tty_ioctl+0x10/0x10 [ 443.358254][T15872] __x64_sys_ioctl+0x18b/0x210 [ 443.358271][T15872] do_syscall_64+0xcd/0x4c0 [ 443.358283][T15872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.358293][T15872] RIP: 0033:0x7f8dc938ebe9 [ 443.358302][T15872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.358312][T15872] RSP: 002b:00007f8dca193038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.358322][T15872] RAX: ffffffffffffffda RBX: 00007f8dc95b5fa0 RCX: 00007f8dc938ebe9 [ 443.358329][T15872] RDX: 0000200000000000 RSI: 0000000000004b4a RDI: 0000000000000003 [ 443.358335][T15872] RBP: 00007f8dca193090 R08: 0000000000000000 R09: 0000000000000000 [ 443.358341][T15872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.358347][T15872] R13: 00007f8dc95b6038 R14: 00007f8dc95b5fa0 R15: 00007ffc688f81f8 [ 443.358360][T15872] [ 443.475020][T15877] can: request_module (can-proto-0) failed. [ 443.478742][T15879] can: request_module (can-proto-0) failed. [ 443.586108][T15896] binder: BC_ATTEMPT_ACQUIRE not supported [ 443.589334][T15896] binder: 15895:15896 ioctl c0306201 200000000c40 returned -22 [ 443.616767][T15883] kvm: kvm [15882]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 443.620113][T15883] kvm: kvm [15882]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 443.628692][T15898] openvswitch: netlink: Flow actions attr not present in new flow. [ 443.639968][T15883] kvm: kvm [15882]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 443.650589][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 443.650600][ T40] audit: type=1800 audit(2000000336.263:1814): pid=15899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.6117" name="nullb0" dev="tmpfs" ino=2825 res=0 errno=0 [ 443.661548][T15883] kvm: kvm [15882]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 443.665265][T15883] kvm: kvm [15882]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 443.680857][T15901] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 443.686977][T15883] kvm_intel: kvm [15882]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 443.693331][T15901] kvm: pic: non byte read [ 443.697222][T15901] kvm: pic: level sensitive irq not supported [ 443.697512][T15901] kvm: pic: non byte read [ 444.084836][T15924] FAULT_INJECTION: forcing a failure. [ 444.084836][T15924] name failslab, interval 1, probability 0, space 0, times 0 [ 444.093754][T15924] CPU: 2 UID: 0 PID: 15924 Comm: syz.9.6124 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 444.093772][T15924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 444.093779][T15924] Call Trace: [ 444.093783][T15924] [ 444.093801][T15924] dump_stack_lvl+0x16c/0x1f0 [ 444.093834][T15924] should_fail_ex+0x512/0x640 [ 444.093853][T15924] ? __kmalloc_node_noprof+0xc5/0x500 [ 444.093866][T15924] should_failslab+0xc2/0x120 [ 444.093879][T15924] __kmalloc_node_noprof+0xd8/0x500 [ 444.093890][T15924] ? __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 444.093908][T15924] __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 444.093924][T15924] ? local_lock_release+0x99/0x140 [ 444.093941][T15924] ? vhost_task_create+0x1d2/0x2e0 [ 444.093953][T15924] ? rcu_read_unlock+0x17/0x60 [ 444.093967][T15924] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 444.093988][T15924] ? vhost_task_create+0x1d2/0x2e0 [ 444.093999][T15924] __vmalloc_node_noprof+0xad/0xf0 [ 444.094014][T15924] ? vhost_task_create+0x1d2/0x2e0 [ 444.094026][T15924] copy_process+0x2c70/0x7690 [ 444.094047][T15924] ? __pfx_copy_process+0x10/0x10 [ 444.094064][T15924] ? lockdep_init_map_type+0x5c/0x280 [ 444.094075][T15924] ? lockdep_init_map_type+0x5c/0x280 [ 444.094085][T15924] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 444.094100][T15924] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 444.094118][T15924] vhost_task_create+0x1d2/0x2e0 [ 444.094128][T15924] ? __pfx_vhost_task_create+0x10/0x10 [ 444.094143][T15924] ? __pfx_vhost_task_fn+0x10/0x10 [ 444.094160][T15924] kvm_mmu_post_init_vm+0x1b7/0x380 [ 444.094174][T15924] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 444.094189][T15924] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 444.094206][T15924] kvm_vcpu_ioctl+0x5eb/0x1690 [ 444.094222][T15924] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 444.094236][T15924] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 444.094249][T15924] ? do_vfs_ioctl+0x128/0x14f0 [ 444.094265][T15924] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 444.094281][T15924] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 444.094302][T15924] ? hook_file_ioctl_common+0x145/0x410 [ 444.094317][T15924] ? selinux_file_ioctl+0x180/0x270 [ 444.094331][T15924] ? selinux_file_ioctl+0xb4/0x270 [ 444.094347][T15924] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 444.094361][T15924] __x64_sys_ioctl+0x18b/0x210 [ 444.094382][T15924] do_syscall_64+0xcd/0x4c0 [ 444.094395][T15924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.094406][T15924] RIP: 0033:0x7f00c9d8ebe9 [ 444.094415][T15924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.094425][T15924] RSP: 002b:00007f00cab60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.094441][T15924] RAX: ffffffffffffffda RBX: 00007f00c9fb6180 RCX: 00007f00c9d8ebe9 [ 444.094448][T15924] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 444.094454][T15924] RBP: 00007f00cab60090 R08: 0000000000000000 R09: 0000000000000000 [ 444.094461][T15924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.094467][T15924] R13: 00007f00c9fb6218 R14: 00007f00c9fb6180 R15: 00007ffdfb65db38 [ 444.094481][T15924] [ 444.510291][T15951] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 444.518696][T15951] kvm: pic: non byte read [ 444.521947][T15951] kvm: pic: level sensitive irq not supported [ 444.522227][T15951] kvm: pic: non byte read [ 444.550597][T15962] lo: entered promiscuous mode [ 444.552234][T15962] lo: entered allmulticast mode [ 444.561288][T15962] tipc: Cannot configure node identity twice [ 444.569266][T15965] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 444.625263][T15981] netlink: 'syz.8.6134': attribute type 1 has an invalid length. [ 444.662877][T15981] bond1: (slave geneve3): Opening slave failed [ 444.766825][ T40] audit: type=1400 audit(2000000337.383:1815): avc: denied { mounton } for pid=16021 comm="syz.9.6136" path="/proc/674/task" dev="proc" ino=168727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 444.786805][T16037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.058332][T16054] syz.8.6143 (16054) used greatest stack depth: 19528 bytes left [ 445.123347][ T40] audit: type=1400 audit(2000000337.733:1816): avc: denied { remount } for pid=16063 comm="syz.8.6146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 445.502236][ T53] usb 10-1: USB disconnect, device number 28 [ 445.602441][T16096] FAULT_INJECTION: forcing a failure. [ 445.602441][T16096] name failslab, interval 1, probability 0, space 0, times 0 [ 445.613174][T16096] CPU: 1 UID: 0 PID: 16096 Comm: syz.0.6153 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 445.613193][T16096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 445.613201][T16096] Call Trace: [ 445.613205][T16096] [ 445.613210][T16096] dump_stack_lvl+0x16c/0x1f0 [ 445.613241][T16096] should_fail_ex+0x512/0x640 [ 445.613260][T16096] ? fs_reclaim_acquire+0xae/0x150 [ 445.613277][T16096] ? tomoyo_encode2+0x100/0x3e0 [ 445.613292][T16096] should_failslab+0xc2/0x120 [ 445.613306][T16096] __kmalloc_noprof+0xd2/0x510 [ 445.613321][T16096] tomoyo_encode2+0x100/0x3e0 [ 445.613339][T16096] tomoyo_encode+0x29/0x50 [ 445.613355][T16096] tomoyo_mount_acl+0x314/0x850 [ 445.613369][T16096] ? bpf_ksym_find+0x127/0x1c0 [ 445.613386][T16096] ? is_bpf_text_address+0x94/0x1a0 [ 445.613399][T16096] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 445.613413][T16096] ? __kernel_text_address+0xd/0x40 [ 445.613426][T16096] ? unwind_get_return_address+0x59/0xa0 [ 445.613439][T16096] ? arch_stack_walk+0xa6/0x100 [ 445.613466][T16096] ? tomoyo_domain+0xbb/0x150 [ 445.613476][T16096] ? tomoyo_profile+0x47/0x60 [ 445.613488][T16096] tomoyo_mount_permission+0x16d/0x420 [ 445.613503][T16096] ? tomoyo_mount_permission+0x14f/0x420 [ 445.613519][T16096] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 445.613543][T16096] security_sb_mount+0x9b/0x260 [ 445.613560][T16096] path_mount+0x15f/0x1fd0 [ 445.613578][T16096] ? __pfx_path_mount+0x10/0x10 [ 445.613593][T16096] ? kmem_cache_free+0x2d1/0x4d0 [ 445.613603][T16096] ? putname+0x154/0x1a0 [ 445.613620][T16096] ? putname+0x154/0x1a0 [ 445.613635][T16096] ? __x64_sys_mount+0x28d/0x310 [ 445.613648][T16096] __x64_sys_mount+0x28d/0x310 [ 445.613663][T16096] ? __pfx___x64_sys_mount+0x10/0x10 [ 445.613678][T16096] ? getname_flags.part.0+0x1c5/0x550 [ 445.613703][T16096] do_syscall_64+0xcd/0x4c0 [ 445.613716][T16096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.613727][T16096] RIP: 0033:0x7f8dc938ebe9 [ 445.613738][T16096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.613749][T16096] RSP: 002b:00007f8dca193038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 445.613760][T16096] RAX: ffffffffffffffda RBX: 00007f8dc95b5fa0 RCX: 00007f8dc938ebe9 [ 445.613768][T16096] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 445.613775][T16096] RBP: 00007f8dca193090 R08: 0000200000000380 R09: 0000000000000000 [ 445.613782][T16096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 445.613788][T16096] R13: 00007f8dc95b6038 R14: 00007f8dc95b5fa0 R15: 00007ffc688f81f8 [ 445.613803][T16096] [ 445.686505][T16100] netlink: 'syz.5.6155': attribute type 1 has an invalid length. [ 445.703452][T16100] netlink: 'syz.5.6155': attribute type 2 has an invalid length. [ 445.706051][T16100] __nla_validate_parse: 5 callbacks suppressed [ 445.706060][T16100] netlink: 1172 bytes leftover after parsing attributes in process `syz.5.6155'. [ 445.706958][T16102] Invalid logical block size (2276) [ 445.769449][T16171] input: syz0 as /devices/virtual/input/input37 [ 445.774098][ T40] audit: type=1400 audit(2000000338.383:1817): avc: denied { setopt } for pid=16114 comm="syz.9.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 445.870760][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6164'. [ 445.928585][T16197] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16197 comm=syz.5.6166 [ 445.957426][ T6015] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 445.997941][T16212] netlink: 164 bytes leftover after parsing attributes in process `syz.9.6168'. [ 446.006446][T16212] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6168'. [ 446.009797][T16212] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6168'. [ 446.032241][T16214] FAULT_INJECTION: forcing a failure. [ 446.032241][T16214] name failslab, interval 1, probability 0, space 0, times 0 [ 446.036273][T16214] CPU: 0 UID: 0 PID: 16214 Comm: syz.5.6169 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 446.036289][T16214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 446.036295][T16214] Call Trace: [ 446.036300][T16214] [ 446.036305][T16214] dump_stack_lvl+0x16c/0x1f0 [ 446.036319][T16214] should_fail_ex+0x512/0x640 [ 446.036333][T16214] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 446.036351][T16214] should_failslab+0xc2/0x120 [ 446.036363][T16214] __kmalloc_cache_noprof+0x6a/0x3e0 [ 446.036380][T16214] ? rcu_is_watching+0x12/0xc0 [ 446.036393][T16214] ? vhost_task_create+0xe5/0x2e0 [ 446.036404][T16214] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 446.036420][T16214] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 446.036437][T16214] vhost_task_create+0xe5/0x2e0 [ 446.036447][T16214] ? __pfx_vhost_task_create+0x10/0x10 [ 446.036462][T16214] ? __pfx_vhost_task_fn+0x10/0x10 [ 446.036479][T16214] kvm_mmu_post_init_vm+0x1b7/0x380 [ 446.036492][T16214] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 446.036508][T16214] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 446.036525][T16214] kvm_vcpu_ioctl+0x5eb/0x1690 [ 446.036540][T16214] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 446.036554][T16214] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 446.036569][T16214] ? do_vfs_ioctl+0x128/0x14f0 [ 446.036586][T16214] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 446.036602][T16214] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 446.036627][T16214] ? hook_file_ioctl_common+0x145/0x410 [ 446.036641][T16214] ? selinux_file_ioctl+0x180/0x270 [ 446.036656][T16214] ? selinux_file_ioctl+0xb4/0x270 [ 446.036671][T16214] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 446.036685][T16214] __x64_sys_ioctl+0x18b/0x210 [ 446.036703][T16214] do_syscall_64+0xcd/0x4c0 [ 446.036716][T16214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.036726][T16214] RIP: 0033:0x7f095a18ebe9 [ 446.036736][T16214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.036746][T16214] RSP: 002b:00007f095af80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.036757][T16214] RAX: ffffffffffffffda RBX: 00007f095a3b5fa0 RCX: 00007f095a18ebe9 [ 446.036763][T16214] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 446.036770][T16214] RBP: 00007f095af80090 R08: 0000000000000000 R09: 0000000000000000 [ 446.036776][T16214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.036782][T16214] R13: 00007f095a3b6038 R14: 00007f095a3b5fa0 R15: 00007ffdd14ae3c8 [ 446.036796][T16214] [ 446.116241][ T6015] usb 5-1: Using ep0 maxpacket: 8 [ 446.138629][ T6015] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 446.142417][ T6015] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 446.145348][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.210744][T16233] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6173'. [ 446.476304][ T6015] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 446.636258][ T6015] usb 10-1: Using ep0 maxpacket: 8 [ 446.639320][ T6015] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 446.643375][ T6015] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 446.646601][ T6015] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 446.649784][ T6015] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.654289][ T6015] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 446.657246][ T6015] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.863011][ T6015] usb 10-1: GET_CAPABILITIES returned 0 [ 446.864845][ T6015] usbtmc 10-1:16.0: can't read capabilities [ 446.910920][ T40] audit: type=1400 audit(2000000339.523:1818): avc: denied { ioctl } for pid=16251 comm="syz.8.6177" path="socket:[169600]" dev="sockfs" ino=169600 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 446.915528][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6177'. [ 446.967291][T16259] fuse: Unknown parameter 'rootmïd00000000p' [ 446.979483][ T40] audit: type=1400 audit(2000000339.593:1819): avc: denied { listen } for pid=16260 comm="syz.9.6178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 447.065817][T16238] usb 10-1: usbtmc_ioctl_clear_out_halt returned -32 [ 447.069067][ T53] usb 10-1: USB disconnect, device number 29 [ 447.072668][T16261] /dev/sr0: Can't open blockdev [ 447.115840][ T40] audit: type=1400 audit(2000000339.723:1820): avc: denied { ioctl } for pid=16271 comm="syz.9.6179" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 447.596242][T16289] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6184'. [ 447.631387][T16293] netlink: 'syz.5.6185': attribute type 10 has an invalid length. [ 447.634235][T16293] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 447.660026][T16295] FAULT_INJECTION: forcing a failure. [ 447.660026][T16295] name failslab, interval 1, probability 0, space 0, times 0 [ 447.664858][T16295] CPU: 1 UID: 0 PID: 16295 Comm: syz.5.6186 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 447.664874][T16295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 447.664880][T16295] Call Trace: [ 447.664885][T16295] [ 447.664889][T16295] dump_stack_lvl+0x16c/0x1f0 [ 447.664904][T16295] should_fail_ex+0x512/0x640 [ 447.664919][T16295] should_failslab+0xc2/0x120 [ 447.664932][T16295] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 447.664944][T16295] ? __alloc_skb+0x2b2/0x380 [ 447.664964][T16295] __alloc_skb+0x2b2/0x380 [ 447.664980][T16295] ? __pfx___alloc_skb+0x10/0x10 [ 447.664998][T16295] ? find_held_lock+0x2b/0x80 [ 447.665014][T16295] arp_create+0x1ef/0xa10 [ 447.665032][T16295] ? __pfx_arp_create+0x10/0x10 [ 447.665048][T16295] ? lock_acquire+0x179/0x350 [ 447.665066][T16295] arp_send_dst+0xb1/0x200 [ 447.665084][T16295] arp_solicit+0x657/0x10a0 [ 447.665102][T16295] ? __asan_memcpy+0x3c/0x60 [ 447.665118][T16295] ? __pfx_arp_solicit+0x10/0x10 [ 447.665134][T16295] ? neigh_probe+0x72/0x110 [ 447.665145][T16295] ? __pfx_arp_solicit+0x10/0x10 [ 447.665160][T16295] neigh_probe+0xcb/0x110 [ 447.665170][T16295] __neigh_event_send+0xac5/0x13c0 [ 447.665187][T16295] neigh_resolve_output+0x56b/0x940 [ 447.665205][T16295] ip_finish_output2+0x7f5/0x21a0 [ 447.665219][T16295] ? ip_skb_dst_mtu+0x5a7/0xc70 [ 447.665232][T16295] ? __pfx_ip_finish_output2+0x10/0x10 [ 447.665243][T16295] ? ip_skb_dst_mtu+0x5b6/0xc70 [ 447.665254][T16295] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 447.665265][T16295] ? __pfx_ip_finish_output+0x10/0x10 [ 447.665279][T16295] __ip_finish_output.part.0+0x1b4/0x350 [ 447.665293][T16295] ip_output+0x35e/0xa10 [ 447.665306][T16295] __ip_queue_xmit+0x1d30/0x2620 [ 447.665321][T16295] ? __pfx_ip_queue_xmit+0x10/0x10 [ 447.665335][T16295] __tcp_transmit_skb+0x265f/0x3df0 [ 447.665359][T16295] ? __lock_acquire+0xb97/0x1ce0 [ 447.665382][T16295] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 447.665405][T16295] ? tcp_fastopen_cache_get+0x309/0x6d0 [ 447.665429][T16295] ? tcp_fastopen_no_cookie+0x158/0x1a0 [ 447.665443][T16295] tcp_connect+0x23e7/0x4e10 [ 447.665465][T16295] ? __pfx_tcp_connect+0x10/0x10 [ 447.665481][T16295] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 447.665497][T16295] ? xfrm_lookup_route+0x6a/0x200 [ 447.665513][T16295] tcp_v4_connect+0x153a/0x1bb0 [ 447.665531][T16295] ? __pfx_tcp_v4_connect+0x10/0x10 [ 447.665549][T16295] __inet_stream_connect+0x914/0xf60 [ 447.665567][T16295] ? __pfx___inet_stream_connect+0x10/0x10 [ 447.665594][T16295] tcp_sendmsg_fastopen+0x3ed/0x750 [ 447.665612][T16295] tcp_sendmsg_locked+0x23ff/0x42a0 [ 447.665627][T16295] ? avc_has_perm+0x144/0x1f0 [ 447.665640][T16295] ? __lock_acquire+0xb97/0x1ce0 [ 447.665660][T16295] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 447.665676][T16295] ? do_raw_spin_lock+0x12c/0x2b0 [ 447.665688][T16295] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 447.665702][T16295] ? __local_bh_enable_ip+0xa4/0x120 [ 447.665718][T16295] tcp_sendmsg+0x2e/0x50 [ 447.665731][T16295] ? __pfx_tcp_sendmsg+0x10/0x10 [ 447.665744][T16295] inet_sendmsg+0xb9/0x140 [ 447.665760][T16295] __sys_sendto+0x43c/0x520 [ 447.665777][T16295] ? __pfx___sys_sendto+0x10/0x10 [ 447.665804][T16295] ? ksys_write+0x1ac/0x250 [ 447.665815][T16295] ? __pfx_ksys_write+0x10/0x10 [ 447.665827][T16295] __x64_sys_sendto+0xe0/0x1c0 [ 447.665843][T16295] ? do_syscall_64+0x91/0x4c0 [ 447.665854][T16295] ? lockdep_hardirqs_on+0x7c/0x110 [ 447.665864][T16295] do_syscall_64+0xcd/0x4c0 [ 447.665876][T16295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.665887][T16295] RIP: 0033:0x7f095a18ebe9 [ 447.665896][T16295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.665907][T16295] RSP: 002b:00007f095af80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 447.665918][T16295] RAX: ffffffffffffffda RBX: 00007f095a3b5fa0 RCX: 00007f095a18ebe9 [ 447.665925][T16295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 447.665931][T16295] RBP: 00007f095af80090 R08: 0000200000e68000 R09: 0000000000000010 [ 447.665937][T16295] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000002 [ 447.665944][T16295] R13: 00007f095a3b6038 R14: 00007f095a3b5fa0 R15: 00007ffdd14ae3c8 [ 447.665957][T16295] [ 448.048087][T16307] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 448.294309][T16324] fuse: Bad value for 'rootmode' [ 448.297634][T16322] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 448.575882][T16328] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 448.589641][T16328] kvm: pic: non byte read [ 448.592436][T16328] kvm: pic: level sensitive irq not supported [ 448.592775][T16328] kvm: pic: non byte read [ 448.721767][ T6116] usb 5-1: USB disconnect, device number 8 [ 448.760764][T16344] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 449.132094][T16366] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 449.143298][T16366] kvm: pic: non byte read [ 449.145939][T16366] kvm: pic: level sensitive irq not supported [ 449.146955][T16366] kvm: pic: non byte read [ 449.184484][T16373] netlink: 'syz.5.6206': attribute type 2 has an invalid length. [ 449.526365][ T6015] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 449.686249][ T6015] usb 5-1: Using ep0 maxpacket: 8 [ 449.690107][ T6015] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 449.693305][ T6015] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 449.696266][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.069477][T16391] /dev/nullb0: Can't open blockdev [ 450.644585][T16405] FAULT_INJECTION: forcing a failure. [ 450.644585][T16405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.649082][T16405] CPU: 2 UID: 0 PID: 16405 Comm: syz.9.6217 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 450.649098][T16405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 450.649105][T16405] Call Trace: [ 450.649108][T16405] [ 450.649113][T16405] dump_stack_lvl+0x16c/0x1f0 [ 450.649128][T16405] should_fail_ex+0x512/0x640 [ 450.649143][T16405] _copy_to_user+0x32/0xd0 [ 450.649158][T16405] simple_read_from_buffer+0xcb/0x170 [ 450.649171][T16405] proc_fail_nth_read+0x197/0x240 [ 450.649184][T16405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.649197][T16405] ? rw_verify_area+0xcf/0x6c0 [ 450.649213][T16405] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.649225][T16405] vfs_read+0x1e1/0xcf0 [ 450.649237][T16405] ? __pfx___mutex_lock+0x10/0x10 [ 450.649259][T16405] ? __pfx_vfs_read+0x10/0x10 [ 450.649273][T16405] ? __fget_files+0x20e/0x3c0 [ 450.649289][T16405] ksys_read+0x12a/0x250 [ 450.649299][T16405] ? __pfx_ksys_read+0x10/0x10 [ 450.649313][T16405] do_syscall_64+0xcd/0x4c0 [ 450.649325][T16405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.649337][T16405] RIP: 0033:0x7f00c9d8d5fc [ 450.649346][T16405] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 450.649357][T16405] RSP: 002b:00007f00caba2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.649367][T16405] RAX: ffffffffffffffda RBX: 00007f00c9fb5fa0 RCX: 00007f00c9d8d5fc [ 450.649374][T16405] RDX: 000000000000000f RSI: 00007f00caba20a0 RDI: 0000000000000004 [ 450.649380][T16405] RBP: 00007f00caba2090 R08: 0000000000000000 R09: 0000000000000000 [ 450.649386][T16405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.649393][T16405] R13: 00007f00c9fb6038 R14: 00007f00c9fb5fa0 R15: 00007ffdfb65db38 [ 450.649407][T16405] [ 450.714383][ C2] vkms_vblank_simulate: vblank timer overrun [ 450.755595][T16411] FAULT_INJECTION: forcing a failure. [ 450.755595][T16411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.761689][T16411] CPU: 1 UID: 0 PID: 16411 Comm: syz.9.6219 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 450.761715][T16411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 450.761726][T16411] Call Trace: [ 450.761733][T16411] [ 450.761741][T16411] dump_stack_lvl+0x16c/0x1f0 [ 450.761764][T16411] should_fail_ex+0x512/0x640 [ 450.761787][T16411] _copy_from_iter+0x29f/0x16f0 [ 450.761812][T16411] ? _copy_from_iter+0x15d/0x16f0 [ 450.761834][T16411] ? __pfx__copy_from_iter+0x10/0x10 [ 450.761857][T16411] ? __pfx__copy_from_iter+0x10/0x10 [ 450.761878][T16411] ? _copy_from_iter+0x15d/0x16f0 [ 450.761902][T16411] copy_page_from_iter+0xde/0x180 [ 450.761927][T16411] skb_copy_datagram_from_iter+0x2a0/0x740 [ 450.761962][T16411] packet_sendmsg+0x2294/0x5850 [ 450.762003][T16411] ? sock_has_perm+0x259/0x2f0 [ 450.762026][T16411] ? __pfx_sock_has_perm+0x10/0x10 [ 450.762050][T16411] ? __pfx_packet_sendmsg+0x10/0x10 [ 450.762091][T16411] __sys_sendto+0x4a0/0x520 [ 450.762119][T16411] ? __pfx___sys_sendto+0x10/0x10 [ 450.762167][T16411] ? ksys_write+0x1ac/0x250 [ 450.762187][T16411] ? __pfx_ksys_write+0x10/0x10 [ 450.762209][T16411] __x64_sys_sendto+0xe0/0x1c0 [ 450.762234][T16411] ? do_syscall_64+0x91/0x4c0 [ 450.762252][T16411] ? lockdep_hardirqs_on+0x7c/0x110 [ 450.762269][T16411] do_syscall_64+0xcd/0x4c0 [ 450.762288][T16411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.762303][T16411] RIP: 0033:0x7f00c9d8ebe9 [ 450.762318][T16411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.762335][T16411] RSP: 002b:00007f00caba2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 450.762352][T16411] RAX: ffffffffffffffda RBX: 00007f00c9fb5fa0 RCX: 00007f00c9d8ebe9 [ 450.762370][T16411] RDX: 000000000001000a RSI: 0000200000000180 RDI: 0000000000000003 [ 450.762381][T16411] RBP: 00007f00caba2090 R08: 0000200000000140 R09: 0000000000000014 [ 450.762392][T16411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.762402][T16411] R13: 00007f00c9fb6038 R14: 00007f00c9fb5fa0 R15: 00007ffdfb65db38 [ 450.762427][T16411] [ 450.875864][T16415] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 450.987982][ T40] audit: type=1400 audit(2000000343.603:1821): avc: denied { connect } for pid=16419 comm="syz.5.6222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 451.106286][ T63] Bluetooth: hci2: command tx timeout [ 451.729731][T16423] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 451.739528][T16423] FAULT_INJECTION: forcing a failure. [ 451.739528][T16423] name failslab, interval 1, probability 0, space 0, times 0 [ 451.745034][T16423] CPU: 3 UID: 0 PID: 16423 Comm: syz.9.6223 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 451.745059][T16423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 451.745070][T16423] Call Trace: [ 451.745078][T16423] [ 451.745085][T16423] dump_stack_lvl+0x16c/0x1f0 [ 451.745108][T16423] should_fail_ex+0x512/0x640 [ 451.745128][T16423] ? fs_reclaim_acquire+0xae/0x150 [ 451.745154][T16423] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 451.745180][T16423] should_failslab+0xc2/0x120 [ 451.745199][T16423] __kmalloc_noprof+0xd2/0x510 [ 451.745224][T16423] tomoyo_realpath_from_path+0xc2/0x6e0 [ 451.745253][T16423] ? tomoyo_profile+0x47/0x60 [ 451.745272][T16423] tomoyo_path_number_perm+0x245/0x580 [ 451.745293][T16423] ? tomoyo_path_number_perm+0x237/0x580 [ 451.745317][T16423] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 451.745340][T16423] ? register_lock_class+0x41/0x4c0 [ 451.745373][T16423] ? __lock_acquire+0xb97/0x1ce0 [ 451.745415][T16423] ? __pfx___might_resched+0x10/0x10 [ 451.745442][T16423] ? down_write_killable+0x154/0x250 [ 451.745462][T16423] ? __pfx_down_write_killable+0x10/0x10 [ 451.745482][T16423] ? mnt_get_write_access+0x20c/0x300 [ 451.745510][T16423] security_path_chmod+0x121/0x2c0 [ 451.745534][T16423] chmod_common+0x179/0x480 [ 451.745558][T16423] ? rcu_is_watching+0x12/0xc0 [ 451.745581][T16423] ? __pfx_chmod_common+0x10/0x10 [ 451.745619][T16423] ? putname+0x154/0x1a0 [ 451.745646][T16423] __x64_sys_fchmodat+0x12b/0x1f0 [ 451.745670][T16423] ? __pfx___x64_sys_fchmodat+0x10/0x10 [ 451.745700][T16423] do_syscall_64+0xcd/0x4c0 [ 451.745722][T16423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.745740][T16423] RIP: 0033:0x7f00c9d8ebe9 [ 451.745755][T16423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.745772][T16423] RSP: 002b:00007f00caba2038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 451.745789][T16423] RAX: ffffffffffffffda RBX: 00007f00c9fb5fa0 RCX: 00007f00c9d8ebe9 [ 451.745800][T16423] RDX: 00000000fffffe99 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 451.745812][T16423] RBP: 00007f00caba2090 R08: 0000000000000000 R09: 0000000000000000 [ 451.745822][T16423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.745832][T16423] R13: 00007f00c9fb6038 R14: 00007f00c9fb5fa0 R15: 00007ffdfb65db38 [ 451.745860][T16423] [ 451.745867][T16423] ERROR: Out of memory at tomoyo_realpath_from_path. [ 452.136132][T16444] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 452.243128][T16448] FAULT_INJECTION: forcing a failure. [ 452.243128][T16448] name failslab, interval 1, probability 0, space 0, times 0 [ 452.248005][ T53] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 452.249593][T16448] CPU: 0 UID: 0 PID: 16448 Comm: syz.5.6230 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 452.249619][T16448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 452.249630][T16448] Call Trace: [ 452.249639][T16448] [ 452.249647][T16448] dump_stack_lvl+0x16c/0x1f0 [ 452.249671][T16448] should_fail_ex+0x512/0x640 [ 452.249690][T16448] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 452.249712][T16448] should_failslab+0xc2/0x120 [ 452.249732][T16448] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 452.249751][T16448] ? __alloc_skb+0x2b2/0x380 [ 452.249782][T16448] __alloc_skb+0x2b2/0x380 [ 452.249805][T16448] ? __pfx___alloc_skb+0x10/0x10 [ 452.249833][T16448] ? __lock_acquire+0x62e/0x1ce0 [ 452.249860][T16448] __ip_append_data+0x30c5/0x41c0 [ 452.249877][T16448] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 452.249890][T16448] ? ip_dst_mtu_maybe_forward.constprop.0+0x30a/0x6e0 [ 452.249907][T16448] ? ip_dst_mtu_maybe_forward.constprop.0+0x314/0x6e0 [ 452.249923][T16448] ? __pfx___ip_append_data+0x10/0x10 [ 452.249938][T16448] ip_append_data+0x10f/0x1a0 [ 452.249952][T16448] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 452.249965][T16448] udp_sendmsg+0x1267/0x2870 [ 452.249981][T16448] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 452.249994][T16448] ? avc_has_perm_noaudit+0x120/0x3b0 [ 452.250005][T16448] ? __pfx_udp_sendmsg+0x10/0x10 [ 452.250017][T16448] ? avc_has_perm+0x144/0x1f0 [ 452.250035][T16448] ? sock_has_perm+0x259/0x2f0 [ 452.250048][T16448] ? __pfx_sock_has_perm+0x10/0x10 [ 452.250065][T16448] ? stack_trace_save+0x8e/0xc0 [ 452.250080][T16448] ? __pfx_stack_trace_save+0x10/0x10 [ 452.250095][T16448] ? __pfx_udp_sendmsg+0x10/0x10 [ 452.250107][T16448] inet_sendmsg+0x105/0x140 [ 452.250123][T16448] sock_sendmsg+0x37f/0x470 [ 452.250137][T16448] ? __kasan_slab_free+0x60/0x70 [ 452.250148][T16448] ? __pfx_sock_sendmsg+0x10/0x10 [ 452.250161][T16448] ? splice_direct_to_actor+0x2a1/0xa30 [ 452.250182][T16448] splice_to_socket+0xaf6/0x1110 [ 452.250200][T16448] ? __pfx_splice_to_socket+0x10/0x10 [ 452.250212][T16448] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.250239][T16448] ? lockdep_init_map_type+0x5c/0x280 [ 452.250249][T16448] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 452.250261][T16448] ? __pfx_splice_to_socket+0x10/0x10 [ 452.250274][T16448] direct_splice_actor+0x192/0x6c0 [ 452.250288][T16448] splice_direct_to_actor+0x342/0xa30 [ 452.250300][T16448] ? __pfx_direct_splice_actor+0x10/0x10 [ 452.250314][T16448] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 452.250325][T16448] ? __pfx_file_has_perm+0x10/0x10 [ 452.250354][T16448] do_splice_direct+0x174/0x240 [ 452.250367][T16448] ? __pfx_do_splice_direct+0x10/0x10 [ 452.250378][T16448] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 452.250389][T16448] ? bpf_lsm_file_permission+0x9/0x10 [ 452.250403][T16448] ? security_file_permission+0x71/0x210 [ 452.250419][T16448] ? rw_verify_area+0xcf/0x6c0 [ 452.250438][T16448] do_sendfile+0xb06/0xe50 [ 452.250451][T16448] ? __pfx_do_sendfile+0x10/0x10 [ 452.250461][T16448] ? __fget_files+0x20e/0x3c0 [ 452.250476][T16448] __x64_sys_sendfile64+0x1d8/0x220 [ 452.250490][T16448] ? ksys_write+0x1ac/0x250 [ 452.250500][T16448] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 452.250518][T16448] do_syscall_64+0xcd/0x4c0 [ 452.250534][T16448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.250546][T16448] RIP: 0033:0x7f095a18ebe9 [ 452.250556][T16448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.250566][T16448] RSP: 002b:00007f095af80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 452.250577][T16448] RAX: ffffffffffffffda RBX: 00007f095a3b5fa0 RCX: 00007f095a18ebe9 [ 452.250583][T16448] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 452.250589][T16448] RBP: 00007f095af80090 R08: 0000000000000000 R09: 0000000000000000 [ 452.250596][T16448] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000002 [ 452.250602][T16448] R13: 00007f095a3b6038 R14: 00007f095a3b5fa0 R15: 00007ffdd14ae3c8 [ 452.250616][T16448] [ 452.292374][ T73] usb 5-1: USB disconnect, device number 9 [ 452.310499][ T40] audit: type=1326 audit(2000000344.923:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16456 comm="syz.0.6233" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8dc938ebe9 code=0x0 [ 452.348813][T16465] netlink: 'syz.0.6235': attribute type 2 has an invalid length. [ 452.377728][T16467] tipc: Enabled bearer , priority 0 [ 452.380490][T16465] netlink: 'syz.0.6235': attribute type 1 has an invalid length. [ 452.383605][T16467] syzkaller0: entered promiscuous mode [ 452.385551][T16465] netlink: 'syz.0.6235': attribute type 1 has an invalid length. [ 452.420636][T16467] syzkaller0: entered allmulticast mode [ 452.434904][T16466] tipc: Resetting bearer [ 452.437107][ T53] usb 14-1: Using ep0 maxpacket: 8 [ 452.440213][ T53] usb 14-1: config 0 has no interfaces? [ 452.443185][ T53] usb 14-1: config 0 has no interfaces? [ 452.445723][ T53] usb 14-1: config 0 has no interfaces? [ 452.449087][ T53] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 452.451982][ T53] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.454794][ T53] usb 14-1: Product: syz [ 452.455652][T16466] tipc: Disabling bearer [ 452.456415][ T53] usb 14-1: Manufacturer: syz [ 452.456425][ T53] usb 14-1: SerialNumber: syz [ 452.458229][ T53] usb 14-1: config 0 descriptor?? [ 452.473200][T16476] binder_alloc: 16470: binder_alloc_buf, no vma [ 452.666774][T16439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=16439 comm=syz.9.6228 [ 452.674058][ T73] usb 14-1: USB disconnect, device number 13 [ 452.689640][T16482] FAULT_INJECTION: forcing a failure. [ 452.689640][T16482] name failslab, interval 1, probability 0, space 0, times 0 [ 452.693470][T16482] CPU: 1 UID: 0 PID: 16482 Comm: syz.5.6239 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 452.693486][T16482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 452.693493][T16482] Call Trace: [ 452.693497][T16482] [ 452.693501][T16482] dump_stack_lvl+0x16c/0x1f0 [ 452.693515][T16482] should_fail_ex+0x512/0x640 [ 452.693528][T16482] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 452.693541][T16482] should_failslab+0xc2/0x120 [ 452.693553][T16482] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 452.693563][T16482] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 452.693579][T16482] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 452.693594][T16482] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 452.693613][T16482] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 452.693632][T16482] mmu_topup_memory_caches+0x25/0x170 [ 452.693645][T16482] kvm_mmu_load+0xd6/0x23c0 [ 452.693655][T16482] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 452.693667][T16482] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 452.693679][T16482] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 452.693694][T16482] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 452.693708][T16482] ? __pfx_kvm_mmu_load+0x10/0x10 [ 452.693718][T16482] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 452.693734][T16482] ? kvm_check_and_inject_events+0x71c/0x1310 [ 452.693752][T16482] vcpu_run+0x358c/0x5580 [ 452.693767][T16482] ? __lock_acquire+0xb97/0x1ce0 [ 452.693787][T16482] ? __pfx_vcpu_run+0x10/0x10 [ 452.693803][T16482] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 452.693817][T16482] ? __local_bh_enable_ip+0xa4/0x120 [ 452.693834][T16482] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 452.693848][T16482] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 452.693867][T16482] kvm_vcpu_ioctl+0x5eb/0x1690 [ 452.693882][T16482] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 452.693897][T16482] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 452.693911][T16482] ? do_vfs_ioctl+0x128/0x14f0 [ 452.693928][T16482] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 452.693945][T16482] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 452.693965][T16482] ? hook_file_ioctl_common+0x145/0x410 [ 452.693980][T16482] ? selinux_file_ioctl+0x180/0x270 [ 452.693994][T16482] ? selinux_file_ioctl+0xb4/0x270 [ 452.694010][T16482] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 452.694024][T16482] __x64_sys_ioctl+0x18b/0x210 [ 452.694041][T16482] do_syscall_64+0xcd/0x4c0 [ 452.694053][T16482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.694064][T16482] RIP: 0033:0x7f095a18ebe9 [ 452.694073][T16482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.694084][T16482] RSP: 002b:00007f095af80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.694094][T16482] RAX: ffffffffffffffda RBX: 00007f095a3b5fa0 RCX: 00007f095a18ebe9 [ 452.694101][T16482] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 452.694107][T16482] RBP: 00007f095af80090 R08: 0000000000000000 R09: 0000000000000000 [ 452.694113][T16482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.694119][T16482] R13: 00007f095a3b6038 R14: 00007f095a3b5fa0 R15: 00007ffdd14ae3c8 [ 452.694132][T16482] [ 453.166463][ T53] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 453.316372][ T53] usb 10-1: Using ep0 maxpacket: 8 [ 453.320386][ T53] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 453.323776][ T53] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.329059][ T53] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 453.332059][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.338015][ T53] usbtmc 10-1:16.0: bulk endpoints not found [ 453.536314][ T73] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 453.686252][ T73] usb 5-1: Using ep0 maxpacket: 32 [ 453.689156][ T73] usb 5-1: config 0 has no interfaces? [ 453.692379][ T73] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 453.695237][ T73] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.697861][ T73] usb 5-1: Product: syz [ 453.699459][ T73] usb 5-1: Manufacturer: syz [ 453.700899][ T73] usb 5-1: SerialNumber: syz [ 453.704090][ T73] usb 5-1: config 0 descriptor?? [ 454.111370][T16508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.114304][T16508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.118316][ T53] usb 5-1: USB disconnect, device number 10 [ 454.677073][T16530] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 454.685147][T16530] kvm: pic: non byte read [ 454.687898][T16530] kvm: pic: level sensitive irq not supported [ 454.688182][T16530] kvm: pic: non byte read [ 455.116361][ T40] audit: type=1400 audit(2000000347.723:1823): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 455.133430][T16557] FAULT_INJECTION: forcing a failure. [ 455.133430][T16557] name failslab, interval 1, probability 0, space 0, times 0 [ 455.139866][T16557] CPU: 2 UID: 0 PID: 16557 Comm: syz.9.6254 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 455.139891][T16557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 455.139902][T16557] Call Trace: [ 455.139908][T16557] [ 455.139915][T16557] dump_stack_lvl+0x16c/0x1f0 [ 455.139940][T16557] should_fail_ex+0x512/0x640 [ 455.139959][T16557] ? __kmalloc_noprof+0xbf/0x510 [ 455.139979][T16557] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 455.140002][T16557] should_failslab+0xc2/0x120 [ 455.140022][T16557] __kmalloc_noprof+0xd2/0x510 [ 455.140045][T16557] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 455.140069][T16557] ? cred_has_capability.isra.0+0x190/0x310 [ 455.140098][T16557] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 455.140121][T16557] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 455.140153][T16557] ? bpf_lsm_capable+0x9/0x10 [ 455.140178][T16557] ? security_capable+0x7e/0x260 [ 455.140204][T16557] genl_rcv_msg+0x55c/0x800 [ 455.140229][T16557] ? __pfx_genl_rcv_msg+0x10/0x10 [ 455.140252][T16557] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 455.140283][T16557] ? __lock_acquire+0x62e/0x1ce0 [ 455.140322][T16557] netlink_rcv_skb+0x158/0x420 [ 455.140341][T16557] ? __pfx_genl_rcv_msg+0x10/0x10 [ 455.140365][T16557] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 455.140396][T16557] ? netlink_deliver_tap+0x1ae/0xd30 [ 455.140412][T16557] ? selinux_netlink_send+0x578/0x830 [ 455.140433][T16557] ? is_vmalloc_addr+0x86/0xa0 [ 455.140454][T16557] genl_rcv+0x28/0x40 [ 455.140473][T16557] netlink_unicast+0x5a7/0x870 [ 455.140495][T16557] ? __pfx_netlink_unicast+0x10/0x10 [ 455.140525][T16557] netlink_sendmsg+0x8d1/0xdd0 [ 455.140549][T16557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.140578][T16557] ____sys_sendmsg+0xa98/0xc70 [ 455.140602][T16557] ? copy_msghdr_from_user+0x10a/0x160 [ 455.140620][T16557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.140655][T16557] ___sys_sendmsg+0x134/0x1d0 [ 455.140675][T16557] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.140716][T16557] ? __mutex_unlock_slowpath+0x100/0x800 [ 455.140743][T16557] __sys_sendmsg+0x16d/0x220 [ 455.140761][T16557] ? __pfx___sys_sendmsg+0x10/0x10 [ 455.140796][T16557] do_syscall_64+0xcd/0x4c0 [ 455.140817][T16557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.140835][T16557] RIP: 0033:0x7f00c9d8ebe9 [ 455.140849][T16557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.140866][T16557] RSP: 002b:00007f00caba2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.140884][T16557] RAX: ffffffffffffffda RBX: 00007f00c9fb5fa0 RCX: 00007f00c9d8ebe9 [ 455.140896][T16557] RDX: 000000002000a804 RSI: 0000200000001580 RDI: 0000000000000004 [ 455.140907][T16557] RBP: 00007f00caba2090 R08: 0000000000000000 R09: 0000000000000000 [ 455.140917][T16557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.140927][T16557] R13: 00007f00c9fb6038 R14: 00007f00c9fb5fa0 R15: 00007ffdfb65db38 [ 455.140954][T16557] [ 455.252819][ C2] vkms_vblank_simulate: vblank timer overrun [ 455.260093][T16157] bridge_slave_1: left promiscuous mode [ 455.263015][T16157] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.270582][T16157] bridge_slave_0: left promiscuous mode [ 455.274615][T16157] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.315639][T16566] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 455.327351][T16566] kvm: pic: non byte read [ 455.331595][T16566] kvm: pic: level sensitive irq not supported [ 455.331941][T16566] kvm: pic: non byte read [ 455.520331][ T40] audit: type=1400 audit(2000000348.133:1824): avc: denied { connect } for pid=16563 comm="syz.9.6255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 455.848915][T16157] à (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.851904][T16157] bond_slave_0: left promiscuous mode [ 455.854489][T16157] à (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.858280][T16157] bond_slave_1: left promiscuous mode [ 455.860246][T16157] à (unregistering): Released all slaves [ 455.938310][ T73] usb 10-1: USB disconnect, device number 30 [ 455.958790][T16157] bond1 (unregistering): Released all slaves [ 455.965286][T16157] bond2 (unregistering): Released all slaves [ 455.971547][T16157] bond3 (unregistering): Released all slaves [ 456.086879][T16157] bond4 (unregistering): Released all slaves [ 456.100529][T16580] FAULT_INJECTION: forcing a failure. [ 456.100529][T16580] name failslab, interval 1, probability 0, space 0, times 0 [ 456.105798][T16580] CPU: 2 UID: 0 PID: 16580 Comm: syz.0.6258 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 456.105823][T16580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 456.105834][T16580] Call Trace: [ 456.105841][T16580] [ 456.105849][T16580] dump_stack_lvl+0x16c/0x1f0 [ 456.105892][T16580] should_fail_ex+0x512/0x640 [ 456.105918][T16580] ? __kernel_text_address+0xd/0x40 [ 456.105941][T16580] should_failslab+0xc2/0x120 [ 456.105962][T16580] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 456.105982][T16580] ? skb_clone+0x190/0x3f0 [ 456.106003][T16580] skb_clone+0x190/0x3f0 [ 456.106022][T16580] dev_queue_xmit_nit+0x3e7/0xca0 [ 456.106049][T16580] dev_hard_start_xmit+0x5c3/0x740 [ 456.106073][T16580] ? skb_clone+0x190/0x3f0 [ 456.106093][T16580] __dev_queue_xmit+0xa46/0x4490 [ 456.106129][T16580] ? __pfx___dev_queue_xmit+0x10/0x10 [ 456.106192][T16580] ? __skb_clone+0x570/0x760 [ 456.106223][T16580] netlink_deliver_tap+0xa87/0xd30 [ 456.106248][T16580] netlink_unicast+0x71f/0x870 [ 456.106271][T16580] ? __pfx_netlink_unicast+0x10/0x10 [ 456.106289][T16580] ? __pfx_rtnl_dellink+0x10/0x10 [ 456.106317][T16580] netlink_ack+0x696/0xb80 [ 456.106344][T16580] netlink_rcv_skb+0x332/0x420 [ 456.106368][T16580] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 456.106390][T16580] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.106419][T16580] ? netlink_deliver_tap+0x1ae/0xd30 [ 456.106442][T16580] netlink_unicast+0x5a7/0x870 [ 456.106465][T16580] ? __pfx_netlink_unicast+0x10/0x10 [ 456.106485][T16580] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 456.106512][T16580] netlink_sendmsg+0x8d1/0xdd0 [ 456.106536][T16580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.106566][T16580] ____sys_sendmsg+0xa98/0xc70 [ 456.106590][T16580] ? copy_msghdr_from_user+0x10a/0x160 [ 456.106608][T16580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.106642][T16580] ___sys_sendmsg+0x134/0x1d0 [ 456.106662][T16580] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.106703][T16580] ? __mutex_unlock_slowpath+0x100/0x800 [ 456.106736][T16580] __sys_sendmsg+0x16d/0x220 [ 456.106753][T16580] ? __pfx___sys_sendmsg+0x10/0x10 [ 456.106787][T16580] do_syscall_64+0xcd/0x4c0 [ 456.106808][T16580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.106826][T16580] RIP: 0033:0x7f8dc938ebe9 [ 456.106841][T16580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.106858][T16580] RSP: 002b:00007f8dca172038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.106876][T16580] RAX: ffffffffffffffda RBX: 00007f8dc95b6090 RCX: 00007f8dc938ebe9 [ 456.106887][T16580] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 456.106898][T16580] RBP: 00007f8dca172090 R08: 0000000000000000 R09: 0000000000000000 [ 456.106909][T16580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.106920][T16580] R13: 00007f8dc95b6128 R14: 00007f8dc95b6090 R15: 00007ffc688f81f8 [ 456.106945][T16580] [ 456.204836][ C2] vkms_vblank_simulate: vblank timer overrun [ 456.268569][T16157] tipc: Left network mode [ 456.384658][T16609] openvswitch: netlink: Missing key (keys=40, expected=100) [ 456.462124][T16617] wireguard0: entered promiscuous mode [ 456.463908][T16617] wireguard0: entered allmulticast mode [ 456.538070][T16625] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 456.554882][T16625] kvm: pic: non byte read [ 456.557543][T16625] kvm: pic: level sensitive irq not supported [ 456.557865][T16625] kvm: pic: non byte read [ 456.606958][ T61] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 456.655675][T16157] hsr_slave_0: left promiscuous mode [ 456.659164][T16157] veth1_macvtap: left allmulticast mode [ 456.758935][ T61] usb 14-1: Using ep0 maxpacket: 32 [ 456.763102][ T61] usb 14-1: config 0 has no interfaces? [ 456.766678][ T61] usb 14-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 456.769513][ T61] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.772139][ T61] usb 14-1: Product: syz [ 456.773542][ T61] usb 14-1: Manufacturer: syz [ 456.775040][ T61] usb 14-1: SerialNumber: syz [ 456.784043][ T61] usb 14-1: config 0 descriptor?? [ 456.986329][ T73] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 457.146254][ T73] usb 5-1: Using ep0 maxpacket: 8 [ 457.163837][ T73] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 457.167928][ T73] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.171913][ T73] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 457.174723][ T73] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.185253][ T73] usbtmc 5-1:16.0: bulk endpoints not found [ 457.192436][T16604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.199983][T16604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.203812][ T61] usb 14-1: USB disconnect, device number 14 [ 457.333329][T16157] team0 (unregistering): Port device team_slave_1 removed [ 457.413962][T16654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=16654 comm=syz.5.6268 [ 457.451726][T16157] team0 (unregistering): Port device team_slave_0 removed [ 457.586758][T16657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16657 comm=syz.5.6268 [ 457.592356][ T40] audit: type=1400 audit(2000000350.203:1825): avc: denied { read } for pid=16653 comm="syz.5.6268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 459.731227][ T6022] usb 5-1: USB disconnect, device number 11 [ 459.760957][T16683] FAULT_INJECTION: forcing a failure. [ 459.760957][T16683] name failslab, interval 1, probability 0, space 0, times 0 [ 459.764994][T16683] CPU: 0 UID: 0 PID: 16683 Comm: syz.9.6271 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 459.765010][T16683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 459.765017][T16683] Call Trace: [ 459.765021][T16683] [ 459.765026][T16683] dump_stack_lvl+0x16c/0x1f0 [ 459.765042][T16683] should_fail_ex+0x512/0x640 [ 459.765055][T16683] ? __kvmalloc_node_noprof+0x124/0x620 [ 459.765075][T16683] should_failslab+0xc2/0x120 [ 459.765088][T16683] __kvmalloc_node_noprof+0x137/0x620 [ 459.765105][T16683] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 459.765123][T16683] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 459.765140][T16683] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 459.765156][T16683] __kvm_mmu_topup_memory_cache+0x450/0x600 [ 459.765176][T16683] mmu_topup_memory_caches+0x25/0x170 [ 459.765188][T16683] kvm_mmu_load+0xd6/0x23c0 [ 459.765199][T16683] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 459.765211][T16683] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 459.765223][T16683] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 459.765239][T16683] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 459.765252][T16683] ? __pfx_kvm_mmu_load+0x10/0x10 [ 459.765262][T16683] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 459.765283][T16683] ? kvm_check_and_inject_events+0x71c/0x1310 [ 459.765301][T16683] vcpu_run+0x358c/0x5580 [ 459.765316][T16683] ? __lock_acquire+0xb97/0x1ce0 [ 459.765337][T16683] ? __pfx_vcpu_run+0x10/0x10 [ 459.765353][T16683] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 459.765367][T16683] ? __local_bh_enable_ip+0xa4/0x120 [ 459.765383][T16683] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 459.765398][T16683] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 459.765417][T16683] kvm_vcpu_ioctl+0x5eb/0x1690 [ 459.765432][T16683] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 459.765447][T16683] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 459.765460][T16683] ? do_vfs_ioctl+0x128/0x14f0 [ 459.765477][T16683] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 459.765493][T16683] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 459.765514][T16683] ? hook_file_ioctl_common+0x145/0x410 [ 459.765529][T16683] ? selinux_file_ioctl+0x180/0x270 [ 459.765543][T16683] ? selinux_file_ioctl+0xb4/0x270 [ 459.765558][T16683] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 459.765573][T16683] __x64_sys_ioctl+0x18b/0x210 [ 459.765590][T16683] do_syscall_64+0xcd/0x4c0 [ 459.765602][T16683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.765613][T16683] RIP: 0033:0x7f00c9d8ebe9 [ 459.765622][T16683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.765633][T16683] RSP: 002b:00007f00caba2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.765643][T16683] RAX: ffffffffffffffda RBX: 00007f00c9fb5fa0 RCX: 00007f00c9d8ebe9 [ 459.765650][T16683] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 459.765657][T16683] RBP: 00007f00caba2090 R08: 0000000000000000 R09: 0000000000000000 [ 459.765664][T16683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.765670][T16683] R13: 00007f00c9fb6038 R14: 00007f00c9fb5fa0 R15: 00007ffdfb65db38 [ 459.765683][T16683] [ 460.233200][T16714] loop3: detected capacity change from 0 to 7 [ 460.235808][T16714] Dev loop3: unable to read RDB block 7 [ 460.237885][T16714] loop3: unable to read partition table [ 460.240128][T16714] loop3: partition table beyond EOD, truncated [ 460.242461][T16714] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 460.266537][ T73] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 460.436300][ T73] usb 14-1: Using ep0 maxpacket: 8 [ 460.440403][ T73] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 460.444542][ T73] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 460.449353][ T73] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 460.453550][ T73] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.459853][ T73] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 460.463743][ T73] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.672679][ T73] usb 14-1: GET_CAPABILITIES returned 0 [ 460.674468][ T73] usbtmc 14-1:16.0: can't read capabilities [ 460.750960][T16737] input: syz1 as /devices/virtual/input/input42 [ 460.819646][T16737] FAULT_INJECTION: forcing a failure. [ 460.819646][T16737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.823823][T16737] CPU: 2 UID: 0 PID: 16737 Comm: syz.0.6281 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 460.823839][T16737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 460.823846][T16737] Call Trace: [ 460.823851][T16737] [ 460.823856][T16737] dump_stack_lvl+0x16c/0x1f0 [ 460.823871][T16737] should_fail_ex+0x512/0x640 [ 460.823885][T16737] __fpu_restore_sig+0xfe/0x13a0 [ 460.823902][T16737] ? __lock_acquire+0xb97/0x1ce0 [ 460.823919][T16737] ? __pfx___fpu_restore_sig+0x10/0x10 [ 460.823941][T16737] ? __might_fault+0xe3/0x190 [ 460.823951][T16737] ? __might_fault+0x13b/0x190 [ 460.823964][T16737] fpu__restore_sig+0x151/0x190 [ 460.823981][T16737] restore_sigcontext+0x4c9/0x6a0 [ 460.823995][T16737] ? __pfx_restore_sigcontext+0x10/0x10 [ 460.824019][T16737] ? __pfx_restore_altstack+0x10/0x10 [ 460.824037][T16737] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.824053][T16737] ? lockdep_hardirqs_on+0x7c/0x110 [ 460.824066][T16737] __do_sys_rt_sigreturn+0x1bb/0x230 [ 460.824091][T16737] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 460.824109][T16737] do_syscall_64+0xcd/0x4c0 [ 460.824122][T16737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.824133][T16737] RIP: 0033:0x7f8dc938ebe7 [ 460.824142][T16737] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 460.824153][T16737] RSP: 002b:00007f8dca193038 EFLAGS: 00000246 [ 460.824162][T16737] RAX: 0000000000000013 RBX: 00007f8dc95b5fa0 RCX: 00007f8dc938ebe9 [ 460.824169][T16737] RDX: 0000000000000001 RSI: 0000200000001240 RDI: 0000000000000003 [ 460.824175][T16737] RBP: 00007f8dca193090 R08: 0000000000000000 R09: 0000000000000000 [ 460.824181][T16737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.824188][T16737] R13: 00007f8dc95b6038 R14: 00007f8dc95b5fa0 R15: 00007ffc688f81f8 [ 460.824207][T16737] [ 460.876723][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 460.877791][ C2] vkms_vblank_simulate: vblank timer overrun [ 460.880241][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 460.893758][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 460.896999][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 460.899841][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 460.902651][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 460.905725][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 460.908601][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 460.911468][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 460.914290][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 460.917126][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 460.920823][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 460.923692][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 460.926528][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 460.929522][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 460.932482][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 460.942098][ T1026] usb 14-1: USB disconnect, device number 15 [ 460.986809][ T40] audit: type=1400 audit(2000000353.593:1826): avc: denied { mount } for pid=16760 comm="syz.0.6285" name="/" dev="hugetlbfs" ino=172170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 460.989650][T16761] syz_tun: entered allmulticast mode [ 460.998191][T16761] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 461.001061][T16761] mroute: pending queue full, dropping entries [ 461.003415][T16760] syz_tun: left allmulticast mode [ 461.015084][ T40] audit: type=1400 audit(2000000353.623:1827): avc: denied { unmount } for pid=13786 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 461.412364][ T40] audit: type=1400 audit(2000000354.023:1828): avc: denied { listen } for pid=16788 comm="syz.0.6292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 461.413629][T16789] FAULT_INJECTION: forcing a failure. [ 461.413629][T16789] name failslab, interval 1, probability 0, space 0, times 0 [ 461.423541][T16789] CPU: 2 UID: 0 PID: 16789 Comm: syz.0.6292 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 461.423558][T16789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 461.423564][T16789] Call Trace: [ 461.423568][T16789] [ 461.423573][T16789] dump_stack_lvl+0x16c/0x1f0 [ 461.423588][T16789] should_fail_ex+0x512/0x640 [ 461.423603][T16789] should_failslab+0xc2/0x120 [ 461.423617][T16789] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 461.423630][T16789] ? sidtab_sid2str_get+0x17a/0x680 [ 461.423649][T16789] kmemdup_noprof+0x29/0x60 [ 461.423661][T16789] sidtab_sid2str_get+0x17a/0x680 [ 461.423679][T16789] sidtab_entry_to_string+0x33/0x110 [ 461.423695][T16789] security_sid_to_context_core+0x35c/0x640 [ 461.423712][T16789] avc_audit_post_callback+0x109/0x8f0 [ 461.423732][T16789] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 461.423749][T16789] ? skb_put+0x138/0x1b0 [ 461.423763][T16789] ? audit_log_n_string+0x253/0x540 [ 461.423777][T16789] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 461.423794][T16789] common_lsm_audit+0x24b/0x300 [ 461.423810][T16789] ? __pfx_common_lsm_audit+0x10/0x10 [ 461.423826][T16789] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 461.423844][T16789] ? avc_update_node.isra.0+0x4c0/0xb60 [ 461.423855][T16789] slow_avc_audit+0x186/0x210 [ 461.423866][T16789] ? __pfx_slow_avc_audit+0x10/0x10 [ 461.423878][T16789] ? avc_denied+0x14a/0x190 [ 461.423889][T16789] ? avc_has_perm_noaudit+0x306/0x3b0 [ 461.423901][T16789] avc_has_perm+0x1b5/0x1f0 [ 461.423913][T16789] ? __pfx_avc_has_perm+0x10/0x10 [ 461.423925][T16789] ? rcu_is_watching+0x12/0xc0 [ 461.423938][T16789] ? trace_kmem_cache_alloc+0x28/0xc0 [ 461.423954][T16789] sock_has_perm+0x252/0x2f0 [ 461.423968][T16789] ? __pfx_sock_has_perm+0x10/0x10 [ 461.423981][T16789] ? file_init_path+0x4fe/0x760 [ 461.423999][T16789] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 461.424016][T16789] selinux_socket_accept+0x46/0x240 [ 461.424031][T16789] security_socket_accept+0x1e3/0x210 [ 461.424044][T16789] do_accept+0x271/0x530 [ 461.424059][T16789] ? do_raw_spin_lock+0x12c/0x2b0 [ 461.424086][T16789] ? __pfx_do_accept+0x10/0x10 [ 461.424111][T16789] __sys_accept4+0x100/0x1c0 [ 461.424126][T16789] ? __pfx___sys_accept4+0x10/0x10 [ 461.424142][T16789] ? __pfx_ksys_write+0x10/0x10 [ 461.424156][T16789] __x64_sys_accept4+0x96/0x100 [ 461.424171][T16789] ? lockdep_hardirqs_on+0x7c/0x110 [ 461.424181][T16789] do_syscall_64+0xcd/0x4c0 [ 461.424193][T16789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.424205][T16789] RIP: 0033:0x7f8dc938ebe9 [ 461.424215][T16789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.424229][T16789] RSP: 002b:00007f8dca193038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 461.424240][T16789] RAX: ffffffffffffffda RBX: 00007f8dc95b5fa0 RCX: 00007f8dc938ebe9 [ 461.424247][T16789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 461.424253][T16789] RBP: 00007f8dca193090 R08: 0000000000000000 R09: 0000000000000000 [ 461.424259][T16789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.424265][T16789] R13: 00007f8dc95b6038 R14: 00007f8dc95b5fa0 R15: 00007ffc688f81f8 [ 461.424279][T16789] [ 461.424380][ T40] audit: type=1400 audit(2000000354.023:1829): avc: denied { accept } for pid=16788 comm="syz.0.6292" ssid=149 tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 462.240397][ T40] audit: type=1326 audit(2000000354.853:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.5.6299" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f095a18ebe9 code=0x0 [ 462.329655][T16824] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6306'. [ 462.332218][ T5978] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 462.339207][ T5978] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 462.343432][ T5978] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 462.349820][ T5978] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 462.352954][ T5978] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 462.388890][T16838] Bluetooth: hci6: Frame reassembly failed (-84) [ 462.391497][T16159] Bluetooth: hci6: Frame reassembly failed (-84) [ 462.465838][T16823] lo speed is unknown, defaulting to 1000 [ 462.552983][T16823] chnl_net:caif_netlink_parms(): no params data found [ 462.667150][T16823] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.669563][T16823] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.672035][T16823] bridge_slave_0: entered allmulticast mode [ 462.674974][T16823] bridge_slave_0: entered promiscuous mode [ 462.682185][T16823] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.684519][T16823] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.686909][T16823] bridge_slave_1: entered allmulticast mode [ 462.689540][T16823] bridge_slave_1: entered promiscuous mode [ 462.727058][T16823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.731778][T16823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.771992][T16823] team0: Port device team_slave_0 added [ 462.775463][T16823] team0: Port device team_slave_1 added [ 462.815285][T16823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.819115][T16823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.830173][T16823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.834430][T16823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.837633][T16823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.846993][T16823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.888482][T16823] hsr_slave_0: entered promiscuous mode [ 462.890840][T16823] hsr_slave_1: entered promiscuous mode [ 462.893003][T16823] debugfs: 'hsr0' already exists in 'hsr' [ 462.895244][T16823] Cannot create hsr debugfs directory [ 463.319748][T17875] tmpfs: Unknown parameter 'nØ@K©íÜÙĆyž2ThÕ2NTÿÿÿÿÿÜ' [ 463.351169][ T40] audit: type=1400 audit(2000000355.963:1831): avc: denied { accept } for pid=17874 comm="syz.0.6315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 463.485952][T17898] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 463.603138][T16823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 463.629273][T16823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 463.634452][T16823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 463.639985][T16823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 463.693577][T16823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.705839][T16823] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.712468][T16165] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.715220][T16165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.726990][T16170] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.729304][T16170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.866816][T16823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.891118][T16823] veth0_vlan: entered promiscuous mode [ 463.896186][T16823] veth1_vlan: entered promiscuous mode [ 463.914786][T16823] veth0_macvtap: entered promiscuous mode [ 463.922513][T16823] veth1_macvtap: entered promiscuous mode [ 463.935267][T16823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.942720][T16823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.952409][T16165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.956912][T16165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.960980][T16165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.964627][T16165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.012660][T16168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.015920][T16168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.033174][T16165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.037001][T16165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.141333][ T40] audit: type=1400 audit(2000000356.753:1832): avc: denied { map } for pid=18006 comm="syz.5.6322" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 464.152421][ T40] audit: type=1400 audit(2000000356.753:1833): avc: denied { execute } for pid=18006 comm="syz.5.6322" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 464.283449][T18037] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 464.386537][ T63] Bluetooth: hci5: command tx timeout [ 464.456464][ T63] Bluetooth: hci6: command 0xfc11 tx timeout [ 464.457693][ T5978] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 464.515383][ T40] audit: type=1400 audit(2000000357.123:1834): avc: denied { getopt } for pid=18078 comm="syz.0.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 464.678392][T18106] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 464.719645][T18109] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 464.881482][T18136] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6340'. [ 464.885457][T18136] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6340'. [ 464.973248][T18151] ÿÿÿÿ: renamed from lo (while UP) [ 465.011319][T18144] lo speed is unknown, defaulting to 1000 [ 465.077740][ T40] audit: type=1400 audit(2000000357.683:1835): avc: denied { map } for pid=18182 comm="syz.9.6343" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 465.118293][T18151] lo speed is unknown, defaulting to 1000 [ 465.204492][T18186] lo speed is unknown, defaulting to 1000 [ 465.213194][T18221] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6344'. [ 465.223710][T18221] FAULT_INJECTION: forcing a failure. [ 465.223710][T18221] name failslab, interval 1, probability 0, space 0, times 0 [ 465.228673][T18221] CPU: 2 UID: 0 PID: 18221 Comm: syz.9.6344 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 465.228690][T18221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 465.228697][T18221] Call Trace: [ 465.228701][T18221] [ 465.228705][T18221] dump_stack_lvl+0x16c/0x1f0 [ 465.228738][T18221] should_fail_ex+0x512/0x640 [ 465.228755][T18221] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 465.228769][T18221] should_failslab+0xc2/0x120 [ 465.228782][T18221] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 465.228793][T18221] ? __alloc_skb+0x2b2/0x380 [ 465.228813][T18221] __alloc_skb+0x2b2/0x380 [ 465.228829][T18221] ? __pfx___alloc_skb+0x10/0x10 [ 465.228846][T18221] ? __pfx_debug_object_assert_init+0x10/0x10 [ 465.228861][T18221] ? __local_bh_enable_ip+0x50/0x120 [ 465.228876][T18221] ? __igmp_group_dropped+0x26a/0xe80 [ 465.228891][T18221] inet_ifmcaddr_notify+0xc7/0x1c0 [ 465.228903][T18221] ? __pfx_inet_ifmcaddr_notify+0x10/0x10 [ 465.228919][T18221] __ip_mc_dec_group+0x442/0x5b0 [ 465.228933][T18221] inetdev_event+0x3b2/0x18a0 [ 465.228947][T18221] ? ib_netdevice_event+0xfc/0x330 [ 465.228961][T18221] ? __pfx_inetdev_event+0x10/0x10 [ 465.228974][T18221] ? wext_netdev_notifier_call+0xe/0x20 [ 465.229012][T18221] ? cfg802154_netdev_notifier_call+0x391/0xa00 [ 465.229025][T18221] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 465.229040][T18221] notifier_call_chain+0xbc/0x410 [ 465.229056][T18221] ? __pfx_inetdev_event+0x10/0x10 [ 465.229072][T18221] call_netdevice_notifiers_info+0xbe/0x140 [ 465.229087][T18221] __dev_notify_flags+0x1f7/0x2e0 [ 465.229099][T18221] ? __pfx___dev_notify_flags+0x10/0x10 [ 465.229111][T18221] ? __pfx___dev_change_flags+0x10/0x10 [ 465.229125][T18221] netif_change_flags+0x108/0x160 [ 465.229138][T18221] do_setlink.constprop.0+0xb53/0x4380 [ 465.229152][T18221] ? __schedule+0x11a3/0x5de0 [ 465.229171][T18221] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 465.229184][T18221] ? __lock_acquire+0xb97/0x1ce0 [ 465.229203][T18221] ? __pfx___schedule+0x10/0x10 [ 465.229222][T18221] ? do_raw_spin_lock+0x12c/0x2b0 [ 465.229236][T18221] ? mark_held_locks+0x49/0x80 [ 465.229251][T18221] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 465.229273][T18221] ? lockdep_hardirqs_on+0x7c/0x110 [ 465.229284][T18221] ? __mutex_lock+0x1c4/0x10b0 [ 465.229295][T18221] ? rtnl_newlink+0x600/0x2000 [ 465.229309][T18221] ? __pfx___mutex_lock+0x10/0x10 [ 465.229320][T18221] ? cap_capable+0xb3/0x250 [ 465.229341][T18221] rtnl_newlink+0x1446/0x2000 [ 465.229357][T18221] ? __pfx_rtnl_newlink+0x10/0x10 [ 465.229367][T18221] ? find_held_lock+0x2b/0x80 [ 465.229380][T18221] ? avc_has_perm_noaudit+0x117/0x3b0 [ 465.229393][T18221] ? avc_has_perm_noaudit+0x149/0x3b0 [ 465.229408][T18221] ? __lock_acquire+0x62e/0x1ce0 [ 465.229437][T18221] ? find_held_lock+0x2b/0x80 [ 465.229449][T18221] ? __pfx_rtnl_newlink+0x10/0x10 [ 465.229459][T18221] ? __pfx_rtnl_newlink+0x10/0x10 [ 465.229469][T18221] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 465.229481][T18221] ? __pfx_rtnl_newlink+0x10/0x10 [ 465.229492][T18221] rtnetlink_rcv_msg+0x95b/0xe90 [ 465.229505][T18221] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 465.229520][T18221] ? ref_tracker_free+0x37c/0x830 [ 465.229534][T18221] netlink_rcv_skb+0x158/0x420 [ 465.229546][T18221] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 465.229559][T18221] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 465.229576][T18221] ? netlink_deliver_tap+0x1ae/0xd30 [ 465.229589][T18221] netlink_unicast+0x5a7/0x870 [ 465.229603][T18221] ? __pfx_netlink_unicast+0x10/0x10 [ 465.229614][T18221] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 465.229630][T18221] netlink_sendmsg+0x8d1/0xdd0 [ 465.229644][T18221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.229661][T18221] ____sys_sendmsg+0xa98/0xc70 [ 465.229675][T18221] ? copy_msghdr_from_user+0x10a/0x160 [ 465.229686][T18221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.229706][T18221] ___sys_sendmsg+0x134/0x1d0 [ 465.229717][T18221] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.229740][T18221] ? __mutex_unlock_slowpath+0x100/0x800 [ 465.229756][T18221] __sys_sendmsg+0x16d/0x220 [ 465.229766][T18221] ? __pfx___sys_sendmsg+0x10/0x10 [ 465.229786][T18221] do_syscall_64+0xcd/0x4c0 [ 465.229798][T18221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.229810][T18221] RIP: 0033:0x7f00c9d8ebe9 [ 465.229819][T18221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.229830][T18221] RSP: 002b:00007f00cab60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.229840][T18221] RAX: ffffffffffffffda RBX: 00007f00c9fb6180 RCX: 00007f00c9d8ebe9 [ 465.229847][T18221] RDX: 0000000000042850 RSI: 0000200000000280 RDI: 0000000000000005 [ 465.229853][T18221] RBP: 00007f00cab60090 R08: 0000000000000000 R09: 0000000000000000 [ 465.229859][T18221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.229865][T18221] R13: 00007f00c9fb6218 R14: 00007f00c9fb6180 R15: 00007ffdfb65db38 [ 465.229879][T18221] [ 465.266413][ T5978] Bluetooth: hci1: command 0x0c1a tx timeout [ 465.325448][T18213] lo speed is unknown, defaulting to 1000 [ 465.676047][T18305] netlink: 'syz.3.6350': attribute type 10 has an invalid length. [ 465.685766][T18308] FAULT_INJECTION: forcing a failure. [ 465.685766][T18308] name failslab, interval 1, probability 0, space 0, times 0 [ 465.691118][T18308] CPU: 0 UID: 0 PID: 18308 Comm: syz.9.6351 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 465.691135][T18308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 465.691142][T18308] Call Trace: [ 465.691146][T18308] [ 465.691150][T18308] dump_stack_lvl+0x16c/0x1f0 [ 465.691165][T18308] should_fail_ex+0x512/0x640 [ 465.691177][T18308] ? fs_reclaim_acquire+0xae/0x150 [ 465.691193][T18308] ? tomoyo_encode2+0x100/0x3e0 [ 465.691208][T18308] should_failslab+0xc2/0x120 [ 465.691220][T18308] __kmalloc_noprof+0xd2/0x510 [ 465.691234][T18308] tomoyo_encode2+0x100/0x3e0 [ 465.691251][T18308] tomoyo_encode+0x29/0x50 [ 465.691266][T18308] tomoyo_realpath_from_path+0x18f/0x6e0 [ 465.691283][T18308] ? tomoyo_profile+0x47/0x60 [ 465.691295][T18308] tomoyo_path_number_perm+0x245/0x580 [ 465.691308][T18308] ? tomoyo_path_number_perm+0x237/0x580 [ 465.691322][T18308] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 465.691337][T18308] ? find_held_lock+0x2b/0x80 [ 465.691362][T18308] ? find_held_lock+0x2b/0x80 [ 465.691374][T18308] ? hook_file_ioctl_common+0x145/0x410 [ 465.691388][T18308] ? __fget_files+0x20e/0x3c0 [ 465.691403][T18308] security_file_ioctl+0x9b/0x240 [ 465.691419][T18308] __x64_sys_ioctl+0xb7/0x210 [ 465.691436][T18308] do_syscall_64+0xcd/0x4c0 [ 465.691448][T18308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.691459][T18308] RIP: 0033:0x7f00c9d8ebe9 [ 465.691468][T18308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.691479][T18308] RSP: 002b:00007f00caba2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.691490][T18308] RAX: ffffffffffffffda RBX: 00007f00c9fb5fa0 RCX: 00007f00c9d8ebe9 [ 465.691497][T18308] RDX: 0000200000000240 RSI: 000000000000890b RDI: 0000000000000004 [ 465.691503][T18308] RBP: 00007f00caba2090 R08: 0000000000000000 R09: 0000000000000000 [ 465.691509][T18308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.691516][T18308] R13: 00007f00c9fb6038 R14: 00007f00c9fb5fa0 R15: 00007ffdfb65db38 [ 465.691534][T18308] [ 465.691545][T18308] ERROR: Out of memory at tomoyo_realpath_from_path. [ 465.704319][T18310] netlink: 'syz.0.6352': attribute type 16 has an invalid length. [ 465.721965][ T5977] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 465.723458][T18310] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6352'. [ 465.786836][T18319] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 465.821892][T18310] FAULT_INJECTION: forcing a failure. [ 465.821892][T18310] name failslab, interval 1, probability 0, space 0, times 0 [ 465.825861][T18310] CPU: 2 UID: 0 PID: 18310 Comm: syz.0.6352 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 465.825877][T18310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 465.825884][T18310] Call Trace: [ 465.825888][T18310] [ 465.825893][T18310] dump_stack_lvl+0x16c/0x1f0 [ 465.825909][T18310] should_fail_ex+0x512/0x640 [ 465.825923][T18310] ? switchdev_deferred_enqueue+0x2b/0x2a0 [ 465.825934][T18310] should_failslab+0xc2/0x120 [ 465.825947][T18310] __kmalloc_noprof+0xd2/0x510 [ 465.825958][T18310] ? fib6_walk+0x196/0x370 [ 465.825972][T18310] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 465.825984][T18310] switchdev_deferred_enqueue+0x2b/0x2a0 [ 465.825995][T18310] switchdev_port_attr_set+0xb5/0x120 [ 465.826007][T18310] br_set_state+0x235/0x880 [ 465.826021][T18310] ? __pfx_br_set_state+0x10/0x10 [ 465.826035][T18310] ? do_raw_spin_lock+0x12c/0x2b0 [ 465.826047][T18310] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 465.826060][T18310] br_stp_disable_port+0x65/0x1d0 [ 465.826076][T18310] br_port_carrier_check+0x3ec/0x4c0 [ 465.826088][T18310] br_device_event+0x6a6/0xa00 [ 465.826101][T18310] ? __pfx_br_device_event+0x10/0x10 [ 465.826116][T18310] ? lockdep_rtnl_is_held+0x26/0x40 [ 465.826144][T18310] notifier_call_chain+0xbc/0x410 [ 465.826163][T18310] ? __pfx_br_device_event+0x10/0x10 [ 465.826178][T18310] call_netdevice_notifiers_info+0xbe/0x140 [ 465.826197][T18310] netif_state_change+0x165/0x3b0 [ 465.826211][T18310] ? __pfx_netif_state_change+0x10/0x10 [ 465.826223][T18310] ? __dev_notify_flags+0x18e/0x2e0 [ 465.826234][T18310] ? __pfx___dev_notify_flags+0x10/0x10 [ 465.826243][T18310] ? __dev_change_flags+0x3d5/0x720 [ 465.826255][T18310] netif_set_operstate+0x103/0x150 [ 465.826271][T18310] ? __pfx_netif_set_operstate+0x10/0x10 [ 465.826288][T18310] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 465.826303][T18310] do_setlink.constprop.0+0x120a/0x4380 [ 465.826329][T18310] ? __schedule+0x11a3/0x5de0 [ 465.826348][T18310] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 465.826362][T18310] ? __lock_acquire+0xb97/0x1ce0 [ 465.826380][T18310] ? __pfx___schedule+0x10/0x10 [ 465.826398][T18310] ? do_raw_spin_lock+0x12c/0x2b0 [ 465.826412][T18310] ? mark_held_locks+0x49/0x80 [ 465.826428][T18310] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 465.826444][T18310] ? lockdep_hardirqs_on+0x7c/0x110 [ 465.826455][T18310] ? __mutex_lock+0x1c4/0x10b0 [ 465.826466][T18310] ? rtnl_setlink+0x2b0/0x770 [ 465.826480][T18310] ? __pfx___mutex_lock+0x10/0x10 [ 465.826491][T18310] ? cap_capable+0xb3/0x250 [ 465.826508][T18310] ? netlink_ns_capable+0xfa/0x130 [ 465.826528][T18310] rtnl_setlink+0x3cb/0x770 [ 465.826541][T18310] ? __pfx_rtnl_setlink+0x10/0x10 [ 465.826551][T18310] ? netlink_sendmsg+0x8d1/0xdd0 [ 465.826563][T18310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.826598][T18310] ? __lock_acquire+0x62e/0x1ce0 [ 465.826621][T18310] ? find_held_lock+0x2b/0x80 [ 465.826634][T18310] ? __pfx_rtnl_setlink+0x10/0x10 [ 465.826644][T18310] ? __pfx_rtnl_setlink+0x10/0x10 [ 465.826654][T18310] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 465.826666][T18310] ? __pfx_rtnl_setlink+0x10/0x10 [ 465.826677][T18310] rtnetlink_rcv_msg+0x95b/0xe90 [ 465.826690][T18310] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 465.826705][T18310] ? ref_tracker_free+0x37c/0x830 [ 465.826719][T18310] netlink_rcv_skb+0x158/0x420 [ 465.826731][T18310] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 465.826743][T18310] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 465.826759][T18310] ? netlink_deliver_tap+0x1ae/0xd30 [ 465.826773][T18310] netlink_unicast+0x5a7/0x870 [ 465.826789][T18310] ? __pfx_netlink_unicast+0x10/0x10 [ 465.826801][T18310] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 465.826816][T18310] netlink_sendmsg+0x8d1/0xdd0 [ 465.826830][T18310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.826846][T18310] ____sys_sendmsg+0xa98/0xc70 [ 465.826863][T18310] ? copy_msghdr_from_user+0x10a/0x160 [ 465.826874][T18310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.826894][T18310] ___sys_sendmsg+0x134/0x1d0 [ 465.826905][T18310] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.826927][T18310] ? __mutex_unlock_slowpath+0x100/0x800 [ 465.826942][T18310] __sys_sendmsg+0x16d/0x220 [ 465.826953][T18310] ? __pfx___sys_sendmsg+0x10/0x10 [ 465.826972][T18310] do_syscall_64+0xcd/0x4c0 [ 465.827003][T18310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.827015][T18310] RIP: 0033:0x7f8dc938ebe9 [ 465.827024][T18310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.827034][T18310] RSP: 002b:00007f8dca193038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.827045][T18310] RAX: ffffffffffffffda RBX: 00007f8dc95b5fa0 RCX: 00007f8dc938ebe9 [ 465.827051][T18310] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 465.827057][T18310] RBP: 00007f8dca193090 R08: 0000000000000000 R09: 0000000000000000 [ 465.827063][T18310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.827069][T18310] R13: 00007f8dc95b6038 R14: 00007f8dc95b5fa0 R15: 00007ffc688f81f8 [ 465.827083][T18310] [ 465.982054][T18310] bridge0: error setting offload STP state on port 1(bridge_slave_0) [ 465.987905][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6355'. [ 466.182851][T18371] input: syz1 as /devices/virtual/input/input43 [ 466.345087][T18393] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 466.457656][ T5977] Bluetooth: hci5: command tx timeout [ 466.630771][T18420] ufs: You didn't specify the type of your ufs filesystem [ 466.630771][T18420] [ 466.630771][T18420] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 466.630771][T18420] [ 466.630771][T18420] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 466.643052][T18420] ufs: ufstype=old is supported read-only [ 466.645988][T18420] syz.9.6374: attempt to access beyond end of device [ 466.645988][T18420] nbd9: rw=0, sector=16, nr_sectors = 2 limit=0 [ 466.689745][T18422] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 466.694340][T18422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6376'. [ 466.699411][T18422] overlayfs: failed to resolve './file1': -2 [ 466.791614][T18430] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 466.798342][T18430] kvm: pic: non byte read [ 466.800778][T18430] kvm: pic: level sensitive irq not supported [ 466.801131][T18430] kvm: pic: non byte read [ 466.875419][T18444] FAULT_INJECTION: forcing a failure. [ 466.875419][T18444] name failslab, interval 1, probability 0, space 0, times 0 [ 466.879547][T18444] CPU: 2 UID: 0 PID: 18444 Comm: syz.5.6382 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 466.879563][T18444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 466.879570][T18444] Call Trace: [ 466.879574][T18444] [ 466.879578][T18444] dump_stack_lvl+0x16c/0x1f0 [ 466.879593][T18444] should_fail_ex+0x512/0x640 [ 466.879606][T18444] ? fs_reclaim_acquire+0xae/0x150 [ 466.879622][T18444] ? tomoyo_encode2+0x100/0x3e0 [ 466.879637][T18444] should_failslab+0xc2/0x120 [ 466.879650][T18444] __kmalloc_noprof+0xd2/0x510 [ 466.879664][T18444] tomoyo_encode2+0x100/0x3e0 [ 466.879681][T18444] tomoyo_encode+0x29/0x50 [ 466.879696][T18444] tomoyo_realpath_from_path+0x18f/0x6e0 [ 466.879713][T18444] ? tomoyo_profile+0x47/0x60 [ 466.879725][T18444] tomoyo_path_number_perm+0x245/0x580 [ 466.879737][T18444] ? tomoyo_path_number_perm+0x237/0x580 [ 466.879752][T18444] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 466.879766][T18444] ? find_held_lock+0x2b/0x80 [ 466.879792][T18444] ? find_held_lock+0x2b/0x80 [ 466.879804][T18444] ? hook_file_ioctl_common+0x145/0x410 [ 466.879817][T18444] ? __fget_files+0x20e/0x3c0 [ 466.879833][T18444] security_file_ioctl+0x9b/0x240 [ 466.879849][T18444] __x64_sys_ioctl+0xb7/0x210 [ 466.879882][T18444] do_syscall_64+0xcd/0x4c0 [ 466.879896][T18444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.879908][T18444] RIP: 0033:0x7f095a18ebe9 [ 466.879917][T18444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.879928][T18444] RSP: 002b:00007f095af80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.879938][T18444] RAX: ffffffffffffffda RBX: 00007f095a3b5fa0 RCX: 00007f095a18ebe9 [ 466.879945][T18444] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 466.879951][T18444] RBP: 00007f095af80090 R08: 0000000000000000 R09: 0000000000000000 [ 466.879958][T18444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.879964][T18444] R13: 00007f095a3b6038 R14: 00007f095a3b5fa0 R15: 00007ffdd14ae3c8 [ 466.879978][T18444] [ 466.880017][T18444] ERROR: Out of memory at tomoyo_realpath_from_path. [ 467.016374][ T73] usb 14-1: new high-speed USB device number 16 using dummy_hcd [ 467.166307][ T73] usb 14-1: Using ep0 maxpacket: 8 [ 467.170959][ T73] usb 14-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 467.173956][ T73] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.177166][ T73] usb 14-1: Product: syz [ 467.178543][ T73] usb 14-1: Manufacturer: syz [ 467.180038][ T73] usb 14-1: SerialNumber: syz [ 467.183518][ T73] usb 14-1: config 0 descriptor?? [ 467.354283][T18465] FAULT_INJECTION: forcing a failure. [ 467.354283][T18465] name failslab, interval 1, probability 0, space 0, times 0 [ 467.371063][T18465] CPU: 3 UID: 0 PID: 18465 Comm: syz.0.6387 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 467.371080][T18465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 467.371087][T18465] Call Trace: [ 467.371091][T18465] [ 467.371109][T18465] dump_stack_lvl+0x16c/0x1f0 [ 467.371142][T18465] should_fail_ex+0x512/0x640 [ 467.371165][T18465] should_failslab+0xc2/0x120 [ 467.371180][T18465] __kmalloc_cache_noprof+0x6a/0x3e0 [ 467.371196][T18465] ? do_raw_spin_lock+0x12c/0x2b0 [ 467.371208][T18465] ? find_held_lock+0x2b/0x80 [ 467.371219][T18465] ? async_schedule_node_domain+0x54/0x120 [ 467.371237][T18465] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 467.371248][T18465] async_schedule_node_domain+0x54/0x120 [ 467.371265][T18465] dev_cache_fw_image+0x38e/0x490 [ 467.371283][T18465] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 467.371301][T18465] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 467.371331][T18465] dpm_for_each_dev+0x5a/0xb0 [ 467.371347][T18465] fw_pm_notify+0x81/0x150 [ 467.371362][T18465] notifier_call_chain+0xbc/0x410 [ 467.371378][T18465] ? __pfx_fw_pm_notify+0x10/0x10 [ 467.371396][T18465] blocking_notifier_call_chain_robust+0xc8/0x160 [ 467.371419][T18465] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 467.371436][T18465] ? do_raw_spin_unlock+0x172/0x230 [ 467.371451][T18465] pm_notifier_call_chain_robust+0x27/0x60 [ 467.371468][T18465] snapshot_open+0x189/0x2b0 [ 467.371484][T18465] ? __pfx_snapshot_open+0x10/0x10 [ 467.371499][T18465] misc_open+0x35a/0x420 [ 467.371515][T18465] ? __pfx_misc_open+0x10/0x10 [ 467.371530][T18465] chrdev_open+0x231/0x6a0 [ 467.371544][T18465] ? __pfx_chrdev_open+0x10/0x10 [ 467.371557][T18465] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 467.371573][T18465] do_dentry_open+0x982/0x1530 [ 467.371585][T18465] ? __pfx_chrdev_open+0x10/0x10 [ 467.371601][T18465] vfs_open+0x82/0x3f0 [ 467.371617][T18465] path_openat+0x1de4/0x2cb0 [ 467.371635][T18465] ? __pfx_path_openat+0x10/0x10 [ 467.371651][T18465] do_filp_open+0x20b/0x470 [ 467.371664][T18465] ? __pfx_do_filp_open+0x10/0x10 [ 467.371687][T18465] ? alloc_fd+0x471/0x7d0 [ 467.371703][T18465] do_sys_openat2+0x11b/0x1d0 [ 467.371717][T18465] ? __pfx_do_sys_openat2+0x10/0x10 [ 467.371734][T18465] ? __fget_files+0x20e/0x3c0 [ 467.371751][T18465] __x64_sys_openat+0x174/0x210 [ 467.371766][T18465] ? __pfx___x64_sys_openat+0x10/0x10 [ 467.371780][T18465] ? ksys_write+0x1ac/0x250 [ 467.371796][T18465] do_syscall_64+0xcd/0x4c0 [ 467.371809][T18465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.371820][T18465] RIP: 0033:0x7f8dc938ebe9 [ 467.371830][T18465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.371841][T18465] RSP: 002b:00007f8dca172038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 467.371852][T18465] RAX: ffffffffffffffda RBX: 00007f8dc95b6090 RCX: 00007f8dc938ebe9 [ 467.371858][T18465] RDX: 0000000000040000 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 467.371865][T18465] RBP: 00007f8dca172090 R08: 0000000000000000 R09: 0000000000000000 [ 467.371871][T18465] R10: 0000000000000019 R11: 0000000000000246 R12: 0000000000000002 [ 467.371878][T18465] R13: 00007f8dc95b6128 R14: 00007f8dc95b6090 R15: 00007ffc688f81f8 [ 467.371905][T18465] [ 467.485238][ T73] usb read operation failed. (-71) [ 467.488517][ T73] usb write operation failed. (-71) [ 467.489315][T18465] [ 467.490859][ T73] usb write operation failed. (-71) [ 467.491102][T18465] ============================================ [ 467.493000][ T73] usb write operation failed. (-71) [ 467.494830][T18465] WARNING: possible recursive locking detected [ 467.494839][T18465] 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 Not tainted [ 467.494846][T18465] -------------------------------------------- [ 467.494850][T18465] syz.0.6387/18465 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 467.494855][T18465] ffffffff8f518988 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x4e/0x640 [ 467.497073][ T73] usb 14-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 467.498469][T18465] [ 467.498469][T18465] but task is already holding lock: [ 467.498474][T18465] ffffffff8f518988 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 467.501651][ T73] usb 14-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 467.504596][T18465] [ 467.504596][T18465] other info that might help us debug this: [ 467.504604][T18465] Possible unsafe locking scenario: [ 467.504604][T18465] [ 467.504609][T18465] CPU0 [ 467.504611][T18465] ---- [ 467.504614][T18465] lock(fw_lock); [ 467.504624][T18465] lock(fw_lock); [ 467.504631][T18465] [ 467.504631][T18465] *** DEADLOCK *** [ 467.504631][T18465] [ 467.504634][T18465] May be due to missing lock nesting notation [ 467.504634][T18465] [ 467.507493][ T73] usb 14-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 467.509160][T18465] 5 locks held by syz.0.6387/18465: [ 467.538911][T18465] #0: ffffffff8f302f08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 467.541502][T18465] #1: ffffffff8e484968 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 467.544711][T18465] #2: ffffffff8e4c4dd0 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 467.548391][T18465] #3: ffffffff8f518988 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 467.551073][T18465] #4: ffffffff8f513388 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 467.553961][T18465] [ 467.553961][T18465] stack backtrace: [ 467.555808][T18465] CPU: 3 UID: 0 PID: 18465 Comm: syz.0.6387 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 467.555823][T18465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 467.555830][T18465] Call Trace: [ 467.555835][T18465] [ 467.555841][T18465] dump_stack_lvl+0x116/0x1f0 [ 467.555854][T18465] print_deadlock_bug+0x1e9/0x240 [ 467.555869][T18465] __lock_acquire+0x1133/0x1ce0 [ 467.555887][T18465] ? kasan_save_track+0x14/0x30 [ 467.555898][T18465] lock_acquire+0x179/0x350 [ 467.555914][T18465] ? assign_fw+0x4e/0x640 [ 467.555930][T18465] ? __pfx___might_resched+0x10/0x10 [ 467.555942][T18465] ? path_openat+0x1de4/0x2cb0 [ 467.555954][T18465] ? do_filp_open+0x20b/0x470 [ 467.555964][T18465] ? do_sys_openat2+0x11b/0x1d0 [ 467.555979][T18465] ? assign_fw+0x4e/0x640 [ 467.555994][T18465] __mutex_lock+0x193/0x10b0 [ 467.556015][T18465] ? assign_fw+0x4e/0x640 [ 467.556031][T18465] ? __pfx___mutex_lock+0x10/0x10 [ 467.556044][T18465] ? kasan_quarantine_put+0x10a/0x240 [ 467.556054][T18465] ? lockdep_hardirqs_on+0x7c/0x110 [ 467.556065][T18465] ? assign_fw+0x4e/0x640 [ 467.556080][T18465] assign_fw+0x4e/0x640 [ 467.556095][T18465] ? _request_firmware+0x957/0x1470 [ 467.556112][T18465] _request_firmware+0x988/0x1470 [ 467.556130][T18465] ? __pfx__request_firmware+0x10/0x10 [ 467.556146][T18465] ? dump_stack_lvl+0x197/0x1f0 [ 467.556156][T18465] ? dump_stack_lvl+0x1a3/0x1f0 [ 467.556167][T18465] __async_dev_cache_fw_image+0xb1/0x340 [ 467.556177][T18465] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 467.556187][T18465] ? mark_held_locks+0x49/0x80 [ 467.556203][T18465] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 467.556219][T18465] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 467.556230][T18465] async_schedule_node_domain+0xd1/0x120 [ 467.556246][T18465] dev_cache_fw_image+0x38e/0x490 [ 467.556262][T18465] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 467.556278][T18465] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 467.556294][T18465] dpm_for_each_dev+0x5a/0xb0 [ 467.556308][T18465] fw_pm_notify+0x81/0x150 [ 467.556322][T18465] notifier_call_chain+0xbc/0x410 [ 467.556337][T18465] ? __pfx_fw_pm_notify+0x10/0x10 [ 467.556353][T18465] blocking_notifier_call_chain_robust+0xc8/0x160 [ 467.556370][T18465] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 467.556387][T18465] ? do_raw_spin_unlock+0x172/0x230 [ 467.556400][T18465] pm_notifier_call_chain_robust+0x27/0x60 [ 467.556417][T18465] snapshot_open+0x189/0x2b0 [ 467.556431][T18465] ? __pfx_snapshot_open+0x10/0x10 [ 467.556449][T18465] misc_open+0x35a/0x420 [ 467.556465][T18465] ? __pfx_misc_open+0x10/0x10 [ 467.556479][T18465] chrdev_open+0x231/0x6a0 [ 467.556492][T18465] ? __pfx_chrdev_open+0x10/0x10 [ 467.556504][T18465] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 467.556518][T18465] do_dentry_open+0x982/0x1530 [ 467.556528][T18465] ? __pfx_chrdev_open+0x10/0x10 [ 467.556542][T18465] vfs_open+0x82/0x3f0 [ 467.556555][T18465] path_openat+0x1de4/0x2cb0 [ 467.556568][T18465] ? __pfx_path_openat+0x10/0x10 [ 467.556581][T18465] do_filp_open+0x20b/0x470 [ 467.556592][T18465] ? __pfx_do_filp_open+0x10/0x10 [ 467.556608][T18465] ? alloc_fd+0x471/0x7d0 [ 467.556620][T18465] do_sys_openat2+0x11b/0x1d0 [ 467.556634][T18465] ? __pfx_do_sys_openat2+0x10/0x10 [ 467.556649][T18465] ? __fget_files+0x20e/0x3c0 [ 467.556660][T18465] __x64_sys_openat+0x174/0x210 [ 467.556675][T18465] ? __pfx___x64_sys_openat+0x10/0x10 [ 467.556689][T18465] ? ksys_write+0x1ac/0x250 [ 467.556701][T18465] do_syscall_64+0xcd/0x4c0 [ 467.556713][T18465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.556723][T18465] RIP: 0033:0x7f8dc938ebe9 [ 467.556732][T18465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.556743][T18465] RSP: 002b:00007f8dca172038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 467.556753][T18465] RAX: ffffffffffffffda RBX: 00007f8dc95b6090 RCX: 00007f8dc938ebe9 [ 467.556760][T18465] RDX: 0000000000040000 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 467.556766][T18465] RBP: 00007f8dca172090 R08: 0000000000000000 R09: 0000000000000000 [ 467.556773][T18465] R10: 0000000000000019 R11: 0000000000000246 R12: 0000000000000002 [ 467.556779][T18465] R13: 00007f8dc95b6128 R14: 00007f8dc95b6090 R15: 00007ffc688f81f8 [ 467.556789][T18465] [ 467.556888][ T40] audit: type=1400 audit(2000000360.113:1836): avc: denied { write } for pid=5882 comm="syz-executor" path="pipe:[5805]" dev="pipefs" ino=5805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 467.706371][ T40] audit: type=1400 audit(2000000360.123:1837): avc: denied { firmware_load } for pid=73 comm="kworker/0:2" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 468.936335][ T5978] Bluetooth: hci5: command 0x0419 tx timeout VM DIAGNOSIS: 22:22:41 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff856404d5 RDI=ffffffff9b10dfa0 RBP=ffffffff9b10df60 RSP=ffffc9000163e940 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e37312e36 R12=0000000000000000 R13=0000000000000005 R14=ffffffff9b10df60 R15=ffffffff85640470 RIP=ffffffff856404ff RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0ad80af82c CR3=000000010e1ad000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000f802fefc Opmask02=00000000f8000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc688f8580 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc688f8706 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc688f8706 00007ffc688f870c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dc9412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dc9412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dc9412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dc9412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dc9412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dc9412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff914c3772 RBX=0000000000000001 RCX=ffffffff81f728be RDX=0000000000000001 RSI=ffffffff914c3772 RDI=ffffffff90c3e59c RBP=ffffc900033df138 RSP=ffffc900033df078 R8 =ffffffff914c3778 R9 =0000000000000000 R10=ffffc900033df0f0 R11=000000000000f728 R12=ffffc900033df140 R13=ffffc900033df0f0 R14=ffffc900033df125 R15=ffffffff81f728be RIP=ffffffff816adab0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0adaee7d60 CR3=0000000033058000 CR4=00352ef0 DR0=0000000000000001 DR1=0000000000000003 DR2=0000000000000e8f DR3=0000000000000007 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=000000000000ffff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ada3876c3 00007f0ada3876c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffddd327180 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555780a3699 00005555780a3400 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555780a1bb4 00005555780a1bb0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555780ae44c 00005555780ae3a0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0020808008001a80 0401c7100008014b 8c0000140700746f 687370616e732f76 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0132040020808008 001a800401c71000 08014b8c00001407 00746f687370616e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 732f7665642f01ff ffffffffffffffe3 081a800300040004 08000fffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff0401c710000801 4be60a10000fffff ffffffff04040141 a636100006800401 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000040806060177 aa302031313a6161 3a61613a61613a61 613a616120746365 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a741e80 RCX=ffffffff81af8e41 RDX=ffff88802bf24880 RSI=ffffffff81af8e1b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900044ef1d8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000086384 R12=dffffc0000000000 R13=ffffed100d4e83d1 R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81af8e1d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8dca1936c0 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000003d030 CR3=0000000053663000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 97e009e424dc6517 a4e8a4fd3652d3ec ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e1dbbb2d0df2a64e ba33d56790fcba70 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e48da2057cef0553 00f64132d9ba39e4 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7579257c4878bf84 f10bb40965f0a8ef ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000c800 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 011c1b99011c3011 8fa0000072720000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ca51318f011c301c 011c302400000002 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 35cad9d704182f57 36796e8864590000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 21df000067d80000 011c301e83c01bc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b7d9b43327fc6f02 659ed2170cb395ba ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c4e104f8b168aad 40220c44a98c40bf ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856404d5 RDI=ffffffff9b10dfa0 RBP=ffffffff9b10df60 RSP=ffffc9000445ed08 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9b10df60 R15=ffffffff85640470 RIP=ffffffff856404ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f8dca1726c0 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2e124e CR3=0000000053663000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 302031313a61613a 61613a61613a6161 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc688f8706 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc688f8706 00007ffc688f870c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dc9412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dc9412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dc9412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dc9412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dc9412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dc9412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 006c6f72746e6f63 5f6e6170776f6c36 2f68746f6f746575 6c622f6775626564 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dca0ed100 00007f8dc9587460 00007f8dc9587478 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8dc95874b8 00007f8dc95874b0 00007f8dc95874a8 00007f8dc95874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000