last executing test programs: 3m30.739227641s ago: executing program 3 (id=541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601036c00000000000000000000000500e7d6bc10f6b2c5041cc66f58ce89da8905000a000000050001000600000005000400000000000900020073300000000015000300686173683a69702c706f72742c6e65740000"], 0x5c}}, 0x0) 3m30.65665556s ago: executing program 3 (id=542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x8000, 0xf820, 0x2, 0x5, {{0x2d, 0x4, 0x0, 0x20, 0xb4, 0x66, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @broadcast, {[@ra={0x94, 0x4}, @cipso={0x86, 0x50, 0x2, [{0x5, 0xb, "154287bd52993707b6"}, {0x1, 0x9, "0d661ce2b4e258"}, {0x6, 0x4, "ac04"}, {0x7, 0x7, "bedc42a0ae"}, {0x2, 0x12, "0da60e681c47a058ee8b719e1882ea02"}, {0x6, 0xc, "29720f23a55a38a6e3ce"}, {0x0, 0x6, "229be378"}, {0x1, 0x7, "253e94250f"}]}, @rr={0x7, 0x23, 0x76, [@rand_addr=0x64010101, @loopback, @empty, @multicast1, @local, @rand_addr=0x64010102, @loopback, @multicast2]}, @ssrr={0x89, 0x27, 0x45, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x1f}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'gretap0\x00', &(0x7f00000005c0)={'tunl0\x00', r3, 0x8000, 0x28, 0x7, 0x6, {{0x6, 0x4, 0x3, 0x8, 0x18, 0x68, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @remote, {[@noop]}}}}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@end]}}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) r11 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = gettid() kcmp(r12, r11, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv6_getrule={0x1c, 0x22, 0x100, 0x70bd2d, 0x25dfdbfc, {0xa, 0x80, 0xa0, 0xe, 0x3, 0x0, 0x0, 0x5, 0x1}, ["", "", "", ""]}, 0x1c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x47b) 3m30.581250451s ago: executing program 3 (id=543): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x15}], 0x16) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002a00)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@nested={0x0, 0x13a, 0x0, 0x1, [@typed={0x0, 0x9}, @nested={0x0, 0x4a, 0x0, 0x1, [@generic="d1f8ccfef0561f746b378df720faac570950818f1ad980fe60a179974376a6db8f3fa67b590fae9b6aa107dd88ce7108f2ff7dda5b4b38dd3ecd3bb1b506ed3bc803d6c6fc7e270dbb7c24b3baefefacb63e2a31afd14f5c632d0b47fb8f36abdfe6120a48bc15d835a199ad27a9f000472f069978f67f33f665ff8f3e836e77a713", @nested={0x0, 0xbd}, @typed={0x0, 0x60, 0x0, 0x0, @ipv6=@mcast1}, @generic="3a36bbfc33b5834622689ffc83f54457b38a361c015392c9ba7daee43e306ed5cf47949951de5d9943cbe6570edbec874dc882c8b29f584926454ff17eac01316f4c195e20e9757fa3ef4c077820d4fdb5a3366d5d403ae75e9b6ad25342951cd4385b10fcf8", @generic="9c838cc04c1ae982089e987faa2c2a7b2da8ffe5b47d3823f0847f86b1e1bbb342a0188292aa25cf6a2d4ef78e54f62f42c396e4cb904d4922ab8daa7e1bc455f84eb0a4260b5316bde2cddc9acfb42400bcdeb58b5265dbf347f945a8f8fd68cdd0722dc4aea0e400dcc116a6312b1f6a4e3a7cc751b55e25c30ea30ae79a7c91b78c0428f2c1e5f2b3fec6fcc73767adff6d7569c9d41f2f340bdc"]}, @nested={0x0, 0x130, 0x0, 0x1, [@nested={0x0, 0x9a}]}, @typed={0x0, 0x7d, 0x0, 0x0, @str='\x00'}, @nested={0x0, 0xc5, 0x0, 0x1, [@nested={0x0, 0x14}, @nested={0x0, 0xe5}, @generic="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", @nested={0x0, 0x97}, @typed={0x0, 0xf5, 0x0, 0x0, @pid=r3}, @generic, @generic="cad5911b5006cdc94814bb46d7ca3f09e79b5c1a9f873766baa58b36a844a226a641d9", @typed={0x0, 0xe5, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x0, 0x79}, @nested={0x0, 0x1e}]}, @generic="b40b385f4e19e2b95269db2f0cb821370ba7883510b1d955a134d69c521de37d34f8129a3a13e7a36179ac2dc8ec045641407aa7abbb770349505cf3b8a9e3644cb0d4e83e9f6ad8559cf4007c4e247bf6b0f3240769c00b97da707eefe84e5a2bfa725054", @typed={0x0, 0xc3, 0x0, 0x0, @u32=0x5}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) 3m30.580545134s ago: executing program 3 (id=544): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000540)=@chain={'key_or_keyring:', r0}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x7ab9, 0x100, 0x22, 0x352}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x2fe) r5 = socket(0x22, 0x2, 0x2) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x41c0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000000c0)={0xc, 0x7, {0x55, 0x0, 0x5, {0x8, 0x3}, {0x3, 0x1}, @cond=[{0x80, 0xf, 0x688, 0x101, 0x1, 0xb}, {0x55b, 0x3, 0x7, 0x2, 0x3, 0x8000}]}, {0x57, 0x7, 0x8, {0xa10e}, {0x8, 0x3}, @ramp={0x400, 0x40, {0x8001, 0x2, 0xffff, 0x5}}}}) 3m30.461412185s ago: executing program 3 (id=545): bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0xa, 0x5}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x20040000) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0xa, 0x5}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x20040000) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x80800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x6}) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001180)="2c385aa3d4", 0x5) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) recvmsg$can_raw(r3, &(0x7f0000001240)={&(0x7f0000000100)=@pppol2tpv3, 0x80, &(0x7f0000001280)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f00000011c0)=""/124, 0x7c}, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66]}, &(0x7f0000000080)={0x0, "7513d8d142f71a1a27cc314cc34550df469f6940256d42176fdb5e07236d4d68c5e76a78cd4ba68f8713c383ba230298e700b0030594d8fe6fe3abd5e70c12fc"}, 0x48, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) keyctl$read(0xf, r4, 0x0, 0x0) 3m30.21891919s ago: executing program 3 (id=550): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00', 0x10}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000040)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="130326bd70002f79070c4c926500d8c15f1f00b20b00000400"], 0x14}, 0x1, 0x0, 0x0, 0x200c000d}, 0x800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdffffff, 0x4031, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000bee000/0x3000)=nil, 0x3000}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a60000000050a050000000000000000000300000508000b4000000004440004800802024064d7c32c08000140000000041400030065727370616e30000000000000000000140003006e696376663000000000000000000000080001400000000044010000020a010400000000000000000a0000010c00044000000000000000020c000440000000000000000208000240000000050c0004400000000000000001d1000600fd8f5a839f6c5a3174063fff715d787316e7fd5f94a1b655b6ad7fdb7a913832424d5bfd0f37ca0720c4477722c3c4a18068c96cb729035d1b216fa7740eb1cbcf1423a891ad2249d59a94399c377a8be1bc53a33d993d59c559bf2ac6c5e52f14338564562d367c066b8509ac67b84177ec96a62d883d6ab82de1b89985e0d01d3b3f41ebf9cdf3ed5445788af4267f1b2927c00eec8de991c08479d98c4957274f7b05b4c613864bd19f5678a38f00d04fbff78b72b02bbffb13ee4866a4a0d7e2696f6c3890a92e1c966e690000000900010033797a3000000000240006006d5c780e224d9b56e6a475c18d9675c38c525004fa00f06b55ba78b0c82e4a0d20000000140a05000000000000000000020000050900010073797a31000000005c000000180a05000000000000000000020000080c00054000000000000000050900020073797a31000000000900010073797a30000000000900020073797a30000000000900020073797a31000000000c000540000000000000000408010000060a0d0f000000000000000001000004e5000740f2da00b44713571a9dad7a145f228d7dc35006d70fa9a9d4eebed072a3c3ec685b1f10f693ce217c5a5f5ccb476a21be502b6f70196917a64b3f40e8ee6ae9eb7bae2c2f2cfc3da75512c2ae4c8338c936fbd091acbd134d06c4bfc9267312be1b10f2e3a455f322c0a5c88abb4cb27feb50831fc9a53b2cac1ae1e10054b54e31b72507e840afc563adfe2f3d5f6636dec4949b1398af85f49696856588cd72756b46b3c5b0dea24caa6d30f43b3b5fa3ee0f7dbfac93c791f271d4228483ebcb798a4b7869d683e134e6480000000900020073797a3200000000140000001100010000000000000000000700000a0000000000000000000000000000f3ff00"/856], 0x350}, 0x1, 0x0, 0x0, 0x40054}, 0x14000) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000014c40)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x2}, {}, {0xfff5, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x3f}}]}, 0x30}}, 0x4000084) 3m30.093661949s ago: executing program 32 (id=550): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00', 0x10}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000040)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="130326bd70002f79070c4c926500d8c15f1f00b20b00000400"], 0x14}, 0x1, 0x0, 0x0, 0x200c000d}, 0x800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdffffff, 0x4031, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000bee000/0x3000)=nil, 0x3000}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a60000000050a050000000000000000000300000508000b4000000004440004800802024064d7c32c08000140000000041400030065727370616e30000000000000000000140003006e696376663000000000000000000000080001400000000044010000020a010400000000000000000a0000010c00044000000000000000020c000440000000000000000208000240000000050c0004400000000000000001d1000600fd8f5a839f6c5a3174063fff715d787316e7fd5f94a1b655b6ad7fdb7a913832424d5bfd0f37ca0720c4477722c3c4a18068c96cb729035d1b216fa7740eb1cbcf1423a891ad2249d59a94399c377a8be1bc53a33d993d59c559bf2ac6c5e52f14338564562d367c066b8509ac67b84177ec96a62d883d6ab82de1b89985e0d01d3b3f41ebf9cdf3ed5445788af4267f1b2927c00eec8de991c08479d98c4957274f7b05b4c613864bd19f5678a38f00d04fbff78b72b02bbffb13ee4866a4a0d7e2696f6c3890a92e1c966e690000000900010033797a3000000000240006006d5c780e224d9b56e6a475c18d9675c38c525004fa00f06b55ba78b0c82e4a0d20000000140a05000000000000000000020000050900010073797a31000000005c000000180a05000000000000000000020000080c00054000000000000000050900020073797a31000000000900010073797a30000000000900020073797a30000000000900020073797a31000000000c000540000000000000000408010000060a0d0f000000000000000001000004e5000740f2da00b44713571a9dad7a145f228d7dc35006d70fa9a9d4eebed072a3c3ec685b1f10f693ce217c5a5f5ccb476a21be502b6f70196917a64b3f40e8ee6ae9eb7bae2c2f2cfc3da75512c2ae4c8338c936fbd091acbd134d06c4bfc9267312be1b10f2e3a455f322c0a5c88abb4cb27feb50831fc9a53b2cac1ae1e10054b54e31b72507e840afc563adfe2f3d5f6636dec4949b1398af85f49696856588cd72756b46b3c5b0dea24caa6d30f43b3b5fa3ee0f7dbfac93c791f271d4228483ebcb798a4b7869d683e134e6480000000900020073797a3200000000140000001100010000000000000000000700000a0000000000000000000000000000f3ff00"/856], 0x350}, 0x1, 0x0, 0x0, 0x40054}, 0x14000) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000014c40)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x2}, {}, {0xfff5, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x3f}}]}, 0x30}}, 0x4000084) 2m53.542737514s ago: executing program 4 (id=1145): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x103100, 0x0) lsm_get_self_attr(0x65, &(0x7f0000000040)={0x0, 0x0, 0x9a, 0x7a, ""/108}, &(0x7f0000000100)=0xfffffffffffffff2, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5392, &(0x7f0000000fc0)=@copyright={0x1, 0x1, 0x81, 0x5}) 2m53.432739481s ago: executing program 4 (id=1146): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f0000001a80)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x6, 0xa}, {0x101, 0xc, 0x9b, 0x101, 0x1}}}}, 0x17) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000001dc0), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0xf0000001, 0x4, 0x7fd, 0xfffffffc}}) 2m53.292742057s ago: executing program 4 (id=1150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x28, 0x3, 0x0, "9cf76cfeea0be6b8a80069d063e6179d130019e30000000500", 0x41564e57}) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000100)=0xffffffff, &(0x7f0000000300)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000f0384b7afbe02ccc9da3e68b02f91965f909821039090ce19911b6f7a46b8a07def8bd186d6318bdbb15a66561a24456513bda82a7943e490f18506a9d01862af2a3bf63766c41eb15e0f84e5ffe04a5247583fc716d0ddba6bb1a0b4b335c9a06353dfce4c310d082c4bf90ee86feea28dc12de6c7cc101083f514d62348ab90c1490a3554bc48b4dfea635858b65bd2307b0cf8143629d", @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf2510000000180001801400020067656e6576653100000000000000000008000f0008000000"], 0x34}}, 0x4044) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000091000040"]) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff7fffffff0800450000380000000000019078ac1e00019280ffff0b009078030000004500000000000000002f0000ac14140ae000000104f65bc1c76ebd56f071a352215e140022ebffffffff"], 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r9, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58c"]) 2m52.821247106s ago: executing program 4 (id=1161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x1, 0x3, 0x6e, 0x0, [{0xf, 0x0, 0x0, '\x00', 0xe}, {0x5, 0x0, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x7, '\x00', 0x3}, {0xfa, 0x8, 0x5, '\x00', 0xa0}, {0x1, 0x9, 0x0, '\x00', 0x74}, {0xa, 0x3, 0x5}, {0xb8, 0xda, 0xd, '\x00', 0x59}, {0xb, 0x1, 0xc, '\x00', 0x3}, {0x6, 0x7, 0x81, '\x00', 0x9}, {0x4, 0x6, 0x4, '\x00', 0x9}, {0xfe, 0x5, 0xd, '\x00', 0xa}, {0x2, 0x4b, 0x45, '\x00', 0xc2}, {0xd2, 0xab, 0x8, '\x00', 0x3}, {0x1, 0x3, 0xfe, '\x00', 0x81}, {0x5, 0xfb, 0x1, '\x00', 0x2}, {0xfe, 0x0, 0x92, '\x00', 0x9}, {0x1b, 0x9, 0x7, '\x00', 0x8}, {0x4, 0x7, 0x4, '\x00', 0x9}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x8, 0x10, 0x80}, {0x3, 0x3, 0xf9, '\x00', 0x86}, {0x9, 0x3, 0xa, '\x00', 0x8}, {0x86, 0x8e, 0x5, '\x00', 0x9}, {0x56, 0x3, 0x4, '\x00', 0x7f}]}}) 2m52.651362861s ago: executing program 4 (id=1166): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9071, 0xffffffffffffffff, 0x0) (async) getitimer(0x0, &(0x7f00000000c0)) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xa, 0xf}, {0x0, 0xc}, {0x6, 0x1}}}, 0x24}}, 0x0) (async) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) 2m52.435742302s ago: executing program 4 (id=1170): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000640)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x3b, 0x25, 0x4, 0x12, 0x9, 0x4, 0x4, 0xad}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf250b0000000c00058008000100"], 0x20}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x58}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="090500"/13], 0x18) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x1d, &(0x7f0000001100)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x4, 0x1, 0xe, 0xb, 0x0, 0x6, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x1a, &(0x7f0000000300)=""/26, 0x40f00, 0x18, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x1, 0x6, 0x0, 0xc3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001240)=[r6, r6, r6, r6], &(0x7f0000001280)=[{0x0, 0x3, 0xf, 0x4}, {0x5, 0x5, 0xe, 0xa}, {0x0, 0x4, 0xa, 0x5}], 0x10, 0x8, @void, @value}, 0x94) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r8, &(0x7f0000001480)=[{&(0x7f0000000100)="0c37f8246f3e4c0f268894edcd5b1a9964c8dae6b413288a16aa77bca416bb6c2ed80e4c948037035c05a3f6d188b7f720f619c3aed8885056565487fbfcf347f9759031056a5c6f6510bba78a970af194a3bfff9ee162bfd08f9d87b199bad71d4b704bbe05f9458f7edb6ea6df3da93d4439b26d0a2fd23b7969b4ccf926f6c02246b837960e2e6ffd0b", 0x8b}, {&(0x7f0000000440)='0', 0x1}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000001380)=ANY=[@ANYRESOCT=r5, @ANYRES32=r6, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x6, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f00800", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x8, 0xb6, 0x0, 0x9, 0x2]}, &(0x7f00000001c0)=0x78) 2m52.292214693s ago: executing program 33 (id=1170): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000640)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x3b, 0x25, 0x4, 0x12, 0x9, 0x4, 0x4, 0xad}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf250b0000000c00058008000100"], 0x20}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x58}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="090500"/13], 0x18) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x1d, &(0x7f0000001100)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x4, 0x1, 0xe, 0xb, 0x0, 0x6, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x1a, &(0x7f0000000300)=""/26, 0x40f00, 0x18, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x1, 0x6, 0x0, 0xc3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001240)=[r6, r6, r6, r6], &(0x7f0000001280)=[{0x0, 0x3, 0xf, 0x4}, {0x5, 0x5, 0xe, 0xa}, {0x0, 0x4, 0xa, 0x5}], 0x10, 0x8, @void, @value}, 0x94) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r8, &(0x7f0000001480)=[{&(0x7f0000000100)="0c37f8246f3e4c0f268894edcd5b1a9964c8dae6b413288a16aa77bca416bb6c2ed80e4c948037035c05a3f6d188b7f720f619c3aed8885056565487fbfcf347f9759031056a5c6f6510bba78a970af194a3bfff9ee162bfd08f9d87b199bad71d4b704bbe05f9458f7edb6ea6df3da93d4439b26d0a2fd23b7969b4ccf926f6c02246b837960e2e6ffd0b", 0x8b}, {&(0x7f0000000440)='0', 0x1}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000001380)=ANY=[@ANYRESOCT=r5, @ANYRES32=r6, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x6, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f00800", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x8, 0xb6, 0x0, 0x9, 0x2]}, &(0x7f00000001c0)=0x78) 26.279529374s ago: executing program 5 (id=2898): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 25.379164581s ago: executing program 5 (id=2912): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='9p_protocol_dump\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5) sendmsg$nl_generic(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001f00100029bd7079765f682c1d0fa3b2bb9e7936e9b086a5f1b3b9f727af5ac335b8992752ba4e7e5283806136e9bbf26c6ce2d51b00"/72], 0x48}, 0x1, 0x0, 0x0, 0x42}, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='9p_protocol_dump\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x3000, &(0x7f00000004c0)=ANY=[@ANYBLOB="01f9269d70b6a84fae74086343056806e72ba69f24aa33f25d2512912247f0015def75a57ebb0cdb809383a7da4d47297f1bb5a47c827edd30d6ecb84a101904c8b9f95f4cf757172aa5db31c8c5619fb631c88ed2579782f06d6cee8e6ab0076afc1642c1ddfdba457dfde3528ea23d3ca8bd0e05c15689ebdc04cc19fdfb23a66c97f1f119e2f17befc5dba19848d830261f748dffc2aae72f7cac1ee420b4597cb3dee9280c505f9f2cef3cc62ca2f752b39eccd11c8406c5c435dda911d62b83f637e966b7cc5d4c2a7d35e02b12957f6c827c31b2f1e15f5f501f0ccaa9e10a61b15be763bba3c9e5d6", @ANYRES8=r6, @ANYRES8=r5, @ANYBLOB="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", @ANYRESDEC=r2, @ANYBLOB="ba65a0682ede9ab09396bb1af22958795fcfa8930befe39dfcbee8058d51512976bf95ddf43b06455162da41ac69910425803096891829e64a67479c9561ef6e11a520e6d2db2b38f7eef1473c59679ac17f08d94e95890f5dcfe8b55d490e117ae6c9d3964fda35b12b2fa05570"]) 24.800080093s ago: executing program 5 (id=2915): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x3, 0x4, 0x0, 0x6}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a090400000000000000000200000024000480200001800a00010071756f7461000000100002800c00014000000000000000040900010073797a3000000000090002"], 0x78}}, 0x0) r3 = dup(r0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x80000a, 0x11, r3, 0xffffd000) r4 = socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r6, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r7 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r7, &(0x7f0000000040)="0600", 0x2) sendfile(r7, r7, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) sendto$packet(r6, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb100c117080086dd4803", 0x1a, 0xffffffffffffc117, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 23.947584255s ago: executing program 5 (id=2922): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) unlinkat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 23.947131938s ago: executing program 5 (id=2924): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) io_uring_setup(0x385b, &(0x7f0000000140)={0x0, 0xff35, 0x2, 0x1, 0x39c, 0x0, r2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r4, 0x18, 0x0, 0x5) pipe2$watch_queue(&(0x7f0000000100), 0x80) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0x11, 0x148, 0x340, 0x0, 0x428, 0x2a8, 0x2a8, 0x428, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x26, 0x0, [{0x3, 0xff, 0x1, 0xfff}, {0x6, 0x8c, 0x3, 0x8}, {0x9, 0x2, 0xe, 0x3}, {0xfaf, 0x2, 0x1, 0xec}, {0x9, 0x9, 0xe, 0x7f}, {0xf523, 0x7, 0xf, 0x2}, {0x7ed, 0x1, 0x6, 0x58}, {0xbbd5, 0x82, 0x9, 0x81}, {0x9, 0x1, 0x0, 0xff9}, {0x5, 0x5, 0x1, 0x5}, {0x8, 0x3, 0x4, 0x8}, {0x7, 0x8, 0x5}, {0xc, 0xe7, 0xa, 0x66}, {0x5, 0x1, 0x5}, {0x623a, 0x0, 0x8, 0x8}, {0x2, 0x7, 0xa5, 0x7}, {0x7, 0x7, 0x6, 0x8}, {0x81, 0x4, 0x1, 0xa}, {0x5, 0xdc, 0x7}, {0x0, 0xff, 0xe7, 0x3}, {0x7, 0x5, 0x8f, 0xce}, {0x1, 0x1, 0x9, 0x3}, {0xfff8, 0x5, 0x80, 0x1}, {0x4d42, 0x7a, 0x9, 0x5}, {0x4, 0x5, 0x9, 0x80}, {0x9f, 0x2, 0xde, 0x8}, {0x0, 0x2, 0x51, 0x4}, {0x6, 0x5, 0x5, 0x20a}, {0x800, 0x40, 0x80, 0x953}, {0x4, 0x2e, 0xb, 0x10}, {0x0, 0x3, 0x6b}, {0x8, 0x4, 0x5, 0x6}, {0x2, 0xc3, 0x7, 0x1a17}, {0x3bc4, 0x8, 0xf, 0x2}, {0x7ff, 0xcb, 0xc, 0x1ff}, {0x7, 0x79, 0x4, 0x1}, {0x6, 0x9, 0x97, 0x10000}, {0x3ff, 0xc, 0xff, 0x2}, {0x3, 0xf, 0x0, 0x3}, {0x2, 0xc0, 0x4}, {0x6, 0x0, 0x6, 0x8001}, {0x6, 0x6, 0xff, 0x8}, {0x92, 0xf7, 0x3, 0x3ff}, {0x2, 0xfd, 0xd, 0xfffffff8}, {0xfde1, 0x6, 0x0, 0x8}, {0x5, 0x1, 0x6, 0x9}, {0xc0, 0x5, 0x3, 0x1000}, {0x0, 0x6, 0x2, 0x1}, {0x0, 0x8, 0x0, 0x6}, {0x1, 0x7, 0x9, 0x3}, {0xc000, 0x0, 0x8, 0x1}, {0x9, 0x7, 0xff, 0x401}, {0xb1aa, 0x3, 0xd4}, {0x3, 0x87, 0xbf}, {0xa, 0x7, 0xf, 0xfffffffd}, {0xf, 0x4, 0x1}, {0x9, 0x10, 0x2, 0xfffffff7}, {0x3, 0x43, 0x7, 0x8}, {0x9, 0xe0, 0xad}, {0x8, 0x10, 0x40, 0xffff}, {0x6, 0x2, 0x9, 0x4}, {0x6, 0x7, 0xe, 0xfffffffb}, {0x40, 0x7, 0xe2, 0x8}, {0x200, 0x7f, 0x9, 0xedd}], {0xfffffffffffffffb}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x33}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ttl={{0x28}, {0x2, 0xa0}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x4, 0x2}, {0x3, 0x3, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="4500000006000000000000000000000000000000007e74f4b29f00000000000000000000001c000000000000002f7300002f6b65706e656c2f64656275672f73796e632f69"], 0x45) 23.84026242s ago: executing program 5 (id=2928): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x20000094, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ff80000}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x70483, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "b4b3ca39f1e34108acedf05c999388af", 0x5}}}, 0x1a) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f0, 0x0, 0x98, 0x200, 0x298, 0x130, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, &(0x7f0000000100), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xff, 'wlan1\x00', 'pim6reg0\x00', {}, {}, 0x1, 0x1, 0x3a}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x7}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffff00, 0x0, 'pim6reg1\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x88, 0x1, 0x4}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0xbf}}}, {{@ip={@empty, @private=0xa010101, 0xff000000, 0x0, 'macvlan0\x00', 'bridge0\x00', {0xff}, {}, 0xc, 0x2, 0x22}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x0, 0x1, 0x0, 0x2, 0x1], 0x4, 0x7}, {0x3, [0x7, 0x0, 0x3, 0x4, 0x4, 0x6], 0x2, 0x3}}}}, {{@ip={@multicast2, @remote, 0x0, 0xffffffff, 'bridge_slave_1\x00', 'macvtap0\x00', {0xff}, {}, 0x16, 0x1, 0x48}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x2}}}, {{@ip={@remote, @multicast2, 0xffffff00, 0x0, 'netpci0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x1d}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000006c0001002bbd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="01080000081008000a00240089e70a053b3b0000080025000300000008001b000600000008002e0002000000"], 0x44}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x9c, 0x1, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FN={0x0, 0xb, 'callforwarding\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4001}, 0x20004003) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) 8.838412266s ago: executing program 34 (id=2928): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x20000094, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ff80000}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x70483, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "b4b3ca39f1e34108acedf05c999388af", 0x5}}}, 0x1a) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f0, 0x0, 0x98, 0x200, 0x298, 0x130, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, &(0x7f0000000100), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xff, 'wlan1\x00', 'pim6reg0\x00', {}, {}, 0x1, 0x1, 0x3a}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x7}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffff00, 0x0, 'pim6reg1\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x88, 0x1, 0x4}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0xbf}}}, {{@ip={@empty, @private=0xa010101, 0xff000000, 0x0, 'macvlan0\x00', 'bridge0\x00', {0xff}, {}, 0xc, 0x2, 0x22}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x0, 0x1, 0x0, 0x2, 0x1], 0x4, 0x7}, {0x3, [0x7, 0x0, 0x3, 0x4, 0x4, 0x6], 0x2, 0x3}}}}, {{@ip={@multicast2, @remote, 0x0, 0xffffffff, 'bridge_slave_1\x00', 'macvtap0\x00', {0xff}, {}, 0x16, 0x1, 0x48}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x2}}}, {{@ip={@remote, @multicast2, 0xffffff00, 0x0, 'netpci0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x1d}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000006c0001002bbd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="01080000081008000a00240089e70a053b3b0000080025000300000008001b000600000008002e0002000000"], 0x44}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x9c, 0x1, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FN={0x0, 0xb, 'callforwarding\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4001}, 0x20004003) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) 2.019892462s ago: executing program 0 (id=3242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a181", 0x32}, {&(0x7f0000000100)="051a00000e80006558f2878f", 0xc}], 0x2) (fail_nth: 2) 1.874661727s ago: executing program 0 (id=3243): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003940)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESHEX, @ANYRES32=r1, @ANYRES8=r1, @ANYRESHEX=r1, @ANYRES64=r1, @ANYRES64], 0xc4}, 0x1, 0x0, 0x0, 0x49000}, 0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) read(r4, &(0x7f00000001c0)=""/36, 0x24) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x633fb000) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e1400020008000700", @ANYRESHEX=r2], 0x44}, 0x1, 0x0, 0x0, 0x200040c1}, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000002600)={'fscrypt:', @desc2}, &(0x7f0000002640)={0x0, "8f972b7259c1d119d4377f958504686ff880a4a68f70c201ae94e5c54366664e2f2282862d4d8ba2d0a9d41582ac875d5286c5823f4dba58ffcfe4d1fec2025e", 0x19}, 0x48, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000026c0), &(0x7f0000002700)={'syz', 0x2}, &(0x7f0000002740)="8367405dc124cffb0fbd3aadb086cda024a480ae7fb9b6afb4c18b8290f30da266a7ec", 0x23, 0xfffffffffffffff9) r7 = add_key$user(&(0x7f0000002780), &(0x7f00000027c0)={'syz', 0x2}, &(0x7f0000002800)="655eb6f4adaa571afef8e13df1ded6b6bde3e6f052d14770a881d9b26ab2b6b14304a55c2ac3d2c0e0d502049c06957c405abf0e32687c8d2223b51c008784868b08d716b8b37bef3e6d0473c87981a5b0787f4bf63daa8f8d4e70cd61dbd4d7aa91bc2137265973a8ec407411f90100997f0a32b7aa85ef8d1b1cbee77e271e43f57504f09bbc3d16cfeb407bd9556eb6ca8c594964b572c382c6e558f3ea06", 0xa0, 0x0) keyctl$dh_compute(0x17, &(0x7f00000028c0)={r5, r6, r7}, &(0x7f0000002900)=""/4096, 0x1000, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r9 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000080) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r8, &(0x7f00000000c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r8, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000006ac0), 0x0, 0x0) fstatfs(r12, &(0x7f0000007580)=""/19) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000b76b6e000000000000000000"], 0xb8}}, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x846, 0x5a, 0x7ff}}) r13 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r13, &(0x7f00000005c0)={0x2020}, 0x2020) ioctl$PIO_FONT(r12, 0x4b61, &(0x7f0000003900)="9a") 1.87440482s ago: executing program 0 (id=3245): r0 = socket$isdn(0x22, 0x2, 0x25) socket$isdn_base(0x22, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$isdn(0x22, 0x2, 0x22) r3 = dup3(r0, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x80044942, 0x0) 1.801655843s ago: executing program 0 (id=3248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) 1.730054526s ago: executing program 0 (id=3250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, 0x0) 1.63667108s ago: executing program 2 (id=3251): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000080)={0x2000, 0x2, 0x0, 0x0, 0x3}) 1.636439297s ago: executing program 2 (id=3252): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000480)=""/247, 0xf7}], 0x1, 0xeffdffff, 0x0) 1.585159277s ago: executing program 2 (id=3253): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080), 0xf, 0x10180) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x9, @raw_data="8ff1418bc959a937387ca5d16ed0adafe8a9513a164056db534f8bcb568ad5a35b260b1db29d654acadb3455fb663fbbfc7263c1eb2ba445ebb087ffba37a02841427bc9e919941f2b8521bbae541da8e154303a0111e433c6de4b5c795340940baab0f63819c73f0dd71a8e307a98cc91692dd08c6b72b89c29e5651d69937e788207a17a1192d58353de293dbc831b2e6a2e90cddc38929c41ba04581f445e7b449d346e83ab266811ea5a9208ca5c55f43800bb52d20be08ec35b9648160fe09410a0ff02527c"}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x88, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) connect$netrom(r0, &(0x7f0000000700)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) listen(r0, 0x3) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) syz_open_dev$video(&(0x7f0000000080), 0xf, 0x10180) (async) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x9, @raw_data="8ff1418bc959a937387ca5d16ed0adafe8a9513a164056db534f8bcb568ad5a35b260b1db29d654acadb3455fb663fbbfc7263c1eb2ba445ebb087ffba37a02841427bc9e919941f2b8521bbae541da8e154303a0111e433c6de4b5c795340940baab0f63819c73f0dd71a8e307a98cc91692dd08c6b72b89c29e5651d69937e788207a17a1192d58353de293dbc831b2e6a2e90cddc38929c41ba04581f445e7b449d346e83ab266811ea5a9208ca5c55f43800bb52d20be08ec35b9648160fe09410a0ff02527c"}) (async) socket$inet(0x2, 0x3, 0x2) (async) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x88, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) (async) connect$netrom(r0, &(0x7f0000000700)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) (async) listen(r0, 0x3) (async) 1.584680816s ago: executing program 0 (id=3254): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000007c0)={0x2}) 1.503063628s ago: executing program 2 (id=3255): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$netlink(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/237, 0xed}], 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1002, 0x8243}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x3}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r3, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002900), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r7, &(0x7f0000002940)={0x18}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xffffffff}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x9, 0xc8a1, 0xffff5ef5, 0x0, 0x419, 0x3, 0x60}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c00c) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xc4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x7c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xd}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xb}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffffb}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20008800}, 0x4004) fremovexattr(r1, &(0x7f0000000400)=@random={'osx.', '/i(\\\x00'}) 1.418204817s ago: executing program 2 (id=3256): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x3, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x4, &(0x7f0000000800)=0xffffffc0, 0x4) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x80800) 1.417951799s ago: executing program 6 (id=3257): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) mprotect(&(0x7f00002f7000/0x1000)=nil, 0x1000, 0x0) 470.514803ms ago: executing program 1 (id=3258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket$inet(0x2, 0x802, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r3, 0x0) write(r2, &(0x7f0000000440)="08008edf773c8000", 0x8) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a18152343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558f2878f02", 0xd}], 0x2) 470.058984ms ago: executing program 2 (id=3259): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r2 = syz_open_dev$video(&(0x7f0000000080), 0x6, 0x10200) ioctl$IOMMU_VFIO_IOAS$CLEAR(r1, 0x3b88, &(0x7f00000000c0)={0xc}) socket$netlink(0x10, 0x3, 0xf) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x8}, {0x2}, @broadcast, @broadcast, @from_mac=@broadcast, {0x2, 0x8}, "", @value={0x5, 0x1, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0xf, "064091b7f22858aa673ec5ff04349f"}]}, 0x3a) close(r0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000300), 0x4) writev(r2, &(0x7f0000000980)=[{0x0}, {0x0}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000a80)={{}, "e961034626e712769516aa437c8cf8487d0a272ac2e4803fb78171e6dde52623582c11f6f249af115b8d77bb76c0143b8fc5a10943e4436c3287441fe8723c2de5ed3143f0bee6cf09b01dde90ad680505c408dec8ff8564bbae69e8d4b269e602fee9e54f506a2ca494b9b46ce137499aca0ba4c8ce4b99002ea761cf1c59df3e4968cc2a2a02ced0d8176f9efea372efa8cb8e93f0a7b3c26594bd11eda565f0d55e44f55d235fcf1b4920bbb57d1237278317d451ca5f2782ee0031eb95e3b80b8b4976ed0c4ed6828a38b617ab3a24bf4c1bb08cba223d0c61034cdb54428a80dee72c361db1a22a3c4e1f24af3f8b8b7d7ad766435c32030a486866fa811bb0b2cbc833575c0a6ba9eec123ceacadc15dcbbb9e8b67ad0defb8e0ea2518d223164b1e90d276d9925940337fa8341865f3796d471767e7d96c60b24ff4da6e032d9a703e999acd3cf5a49de96106f33da9bd2fc22807f28ffb8205fc95027086df84ea7aef7e5dea14c2af36bc3a1966d3a7b690f601a15b427ce203dce0ca02f6462671befff499b61939cb2606143e1b942eb46f647a207dcb876310caa0c5d8b21adeb4a66ec31117cea0b4f4d5419bed9a9a37afee6d9949190b99f98699097a42796a221828a7938a4be01312c56239421e3b3ace2e498cae89a5c7411e353ff93e0e52af21b505233ed33722a90da5df77e80d26fb326f3ba1b7740bb7ca857c0074aea24718f7feda0f0178acd4fdcf7906b99421eb467a132d348db8ac6a752ae27671ee3dbcbf410aefb9b0b0e5e8141db11203122f44a7d02e0f37873e06fa6e9dbb783ba2cf4dcd33d86b95f7aca521887534d1a44adaa54b67f683d0a44139be1e9cd3770ffd44120c98b0a2696ab9a7ffcfd1f1a7d65a15672b5dc5f165a2518e1817b93cf63f6ca56b0c3a2a6adef18739b99e8b76f90bf345810b531584791597fe0d78ef68168ea8a4a0b1a0436f54d8abe5ca3786b6f2bf26eb3e05c6dc44a822052a515434c4923ed1498d136b51c08977b0e32b1e5d7b928c6345ed0c13e69ee78b52fc946f0cadc930a0f1d1b843dec7f3c8a3c40c81ed030303d6b828701cee25b8b4ee9b8fce9ed747609c3190484ae393bec70c03f54beadbc8dd3c1e5aa25e254e52f3dad45df62f4d2083d3f18a971384946f9897dd1b05c5bfdb4f523153f4e75bba8cb25ea54956a0a0c5c1a309c9cfe9e38a365e2b04022bf41e2293c71986520dc5c13f6e30a9e6cb0e55b3613415173623e3ce333be1923a59100471500b727b5aa4cb0c08cd892bfb78ca0831d1ad6fd3067c79c404ab2d7cdd5688ed7cec489d02b1ce7c1d7609101a03090ef2d99c6e2d8e1aa11ea05a699b5b1c8771a01cc566dd7b340767388724040907311e36bbd96443078d070408d9c342d7ea3f5c7810c141d3a9672c90b1254b9c1d9d5a47bfc7a8e5476094c95aac67a7bc7905a86f889d3ab2c526c2b935f9beb23b87a4091117426979c4d824d295c3a7d08c6f3d376a2615960b85ab082b03ed8f70291ace9c0582fc4139d915c96b4ba63e7d3d77540412ebbb0ebf8dd30a68f31384122f5f19f7f9e8b8bdbf7e18cb4795b88805d832be964cdf659ca7f54d140bba30376a51a61bd409cb15f56b23cfc7e709cbe350edf4964c8854ab417f1aaa0299aac57aa68902669d4717d664a91905cab2229a4c79e0fe2028312d38e4e3cc6ea7f2073a3c12dc8729014e21ff714c1196f9d4481e702b5b4231779cd8cb798b57431e8696804f4061fb4873d78a42f504ce21f81441bea665393be3de84de8463d7c54dbefe2b9e2a15b4b2ac46ffe77168ec549c3840af25e3ee5eaf382c94ad8e6417f76d48c8e4864df277cdc576539e2aadbb394d4fd5b6c0e2044c1ffca17d5732297ca96d365b27985c9b1df34b6e8dd73a3f2000cddd6c2f58272b80407a2bbc3b5bd7fce44687f80382e222ea76c0b628893003a0523cdfd84b8b0473e1a00ffab4a681c3c2f54741eee0172767b7712aeec6946228790092675ec424d0a810c944e97ddb48929d39a75c613ef41c1b464ec30aa711e6bf47345063f6b624c541970292e841b78046aaa40cddd79ced064a688fe95d17655722551b45d2db678377802fcc933dea18336f44976010a7b191f9194992ccf6e3aa90bf6ec8d2cd25901e142f52b6282c7c879053dff43b56cf192fa838078d4e1b738d0212878cae05d39cccac558e7a759e0910e195cc4f7f914cd1ecb86c2932a72ab95a2c32b2c3131192aca0003f7d5ce13e7526be5fb92dcfb8d378c5f3a45be59b30b6ed6b049acc67749ae6350096b41d7b2df0e2fd150df6a3f9c37fa88cf33a2de0397a01ae029864fa0d6c4788c36e99f7371a7f60afadc6af84b76a09aeb32ce9b4b363c8db5dce74203e10a4d51928e394cbd7037750e5b186b1bdba8cc058eb1503ff0b8388bfdc2e5500bc553b2874ba1220fd9f39dd8fcc8b00dadc762f7eb7c210157d855481e62c3e2b21ff95bfcffdcfffd4db0e1257951acc1a0a120699aa172f40301ff7750fe87543e108154cad24b147455c8b9a0bf8eb2e825a1a304e33564230f65a06fe9b2c0a87d65ba5fdd96016cd44492e59f401f54c2e682b4c9fbff34719608ff66b27abf8db534073706a784acd8f7f841e01c0b803c2e5bd8a5758e46c85240bf28ccc4d87855226acb3c0b056d24a1e619543428192245e2ac5fa9343967090451edf9264da9b73c85083b95946fe5a8c442940c6cc20b3c4ed960bd55f0c20d55d541d410424f4d36495b9cafdcc476a90e55045e51ff0a3d4e7bdd8ddb50893e0a402810e149f3402acd6c59fb479e1043037dc376f6fb9a2c0612f25d0bb6b1801432ea0a8a588a478a6fe55144d8b0350f1a7a68814e74dda1d6eab4bfef27b0a0e262e4de86e22d65217de3fa95f4c6bf905ce57e4b0b79989fdddd244b005c8051f48217bb6c23fa0475cb12953b671dd623dde1c7d092daa0b2e6161c93998555dd61abd45b80985140f4339872b9674cba878d1928499cb00f5bbfb0bae549fac3f19b4d6b9ff91ecf9d3407e808eded4143458fa48806d06e44dc0bc6ba525d84de2a4ef7796e64bb0bfa2376fd839be978d5f87d9e2305959857bb66d829e67842cdae193a569849a52b07bbaf985d32e70288f9fcc0a54b033cdde1ead607d36c81c06b0ca8ab69b5d5d94871ad2e2bb88154e379b10d0d30cfc02a472ca2f1352efcf694f8711b3dc3bc41acc2e2de3530c6d6402461a1e9324f1611c79d53c7260175e9dc0cef45c09b87e3c63fa3b324cf4f1aa962f45343f66b588946ec0e178e14ff07718c969d21e8c7cf784d60a3190334894222d89f05475b5079c323bad1c52e43bbc62c37c2ee343ab5bf78032ec86e9287c891f2cafca0c9f8a17559d82d9caf6579b01b4e63a30afbadd8e4c0b19eaf6ebf2f86e6c8907653a79110eb91016c4b7343e42c1b2b8d38e04998163e2bfb046dba62bcae368b38cff0afdcaff23b0bfd9dea37d762585614d42b7313a7712efa9a5443c4808810a26551cdc4f5022dd9fce956222612ff3a294f2e200440e20262ca37c74197fad7e2f5166d1f0f457ce2d98402be539964fc716dc667425e61dd4b29919370d3252d72670031dcd44e666feb4d6b1625ef42d1535fe1c769e84fcf0ea5d80be710fdb664fa0c77035e3be154496ed64ccdd2f9a1aa2b11f9ce984d5ea20d0aa982c7c92d609d946e9367a15f3a4665dae254622faf76f52e70861b6f839f26ad9a8dfef54c3d80107bb337e791bc4126de1fb05541c62c8d329e0b1b9af3f50f7db58450f4bba31529c1b4c25de6669a218968f17e6bb21f31996077b5a0716a9a9c1df3a6d68d3bf8a152d566057335c05d09c8263cb24a67ad4ea51d216d2c57a01197131cb630bc2e924c4cb27dc953e7e4f645cbc56072a5f8b010748397dd546846a79e68fbedfc9641355add8163addb62a49014a4edd4ae405c2ca4cbec32aa8a981d0f8bf38ce506c929e0a3ca27b66c63c0d727d77b4451d62372f98261133c5ff89d211fbe19177042f6279fa24299debb1984341e0c0bab7601c771ecdff046a29c2d3792549efb64efe8eeb39eaf6d94ff4657d5b6c76101e3c9a20865d8098b73e4644111934359ceda50bf5d4e0ff5907463bfb993401af33d24f59dc5545937b923cfbff3d35a6c426010de97857dfdc5fdc8d70c1dbe6039cddc6b2e1fb217784b795c4ebbe05630d2adbae652495e55ddeb7c4f862ffe14bb1a353754d5a23c0a72ebb248281d1af53c70d335b27b656043155aecc306156a74c37607b21738b456c213db9dbd73e1757aa672a292d6b650b93477c083ad72037a7b64efac1232d80c75a2b482c99007a5be22193bfa1647d0b987414a83091be57b6175fea114c0c16687e922ad12c19f333090eaaf93d9f5e059184dde0a84b8bfb8de0086671da20ec9ff0f76c3e34a965788f10e0a72bbe6226c480506612a9ed14a693dbcc7b104327727c31c735bb5c9c0e55c24334fb77b4f30efc81724574a86f8feb05513f2f21657b1101e9747e066530651711e61f0ee03ef1a294e4f2529ec813d9f1801528399429e200c1a9514e0980e56d8efede28df0ced1930713d259ca1905d30dfbc746dc346b7f86fd8152d4da158e86a64d279ad0898d658ed8d7a53725057341436d37aed36641e1b9c148c214de87b45d08580fff69217cffee9b8809361f49faf6440a8bdb90b8173a03bf817d29971fd0ea79b1aec8dad859f828a8942d6bf51a9e7afe023b4726e661571d80d1eb1b8100018b1846d1a99cc8ac3a2b2b3b3699a17be5e75d5fdd82ee6b055e0e3b7ecaeba96e7de2b35714f49aef7975101310023cbcdd9e6fa86240b8f1198737a560aa342fafabbe66f2051a4d5ac00a7176c0821aa0f302640b2d1cbc60cf68f3ddd9ade00eddea8c939a98b60019c6e0c6e2a2a8d8bbd424703466e4667913364d3b4b040805a618f954d92ffa1c39acbceea02c2f92fca456cd89c2991318fef47bc1c230d3d0354a76a48a0961d1128f97abaf1112e37caec56e0e211321a18d2b140a01860409320cb22e638a681a8deaf5cae5bb6adb55bc86f448bc3f380fb16e3fb320665a533486ab33b551b42ad626ea94d47b464dca3b3e0370e0720a85133e7419ed5e6f9ab829216c7fa88f62757c218ae964804319556e92ebcee40bb4e6514c4cfbefb5b6778b00b2ce386ae35f2ca00bef512b4c6ba900c65a96192e12283f146e5977117a67a1705a52837bd362e04c990695ef003db3d8484f81554aca59d102fa723abecb3ace686aa1cce8766666eb8a9e1d44ac32761ee5cd43dd47a9f63d622cfc17e898f03b0959bea6b9d1d69b652d8828e7656b6a9c84f5c4737a29e5930712adc58b3970b0048a690a213a333b9be7c2fc0a4fd50199c0f9ee464cc00ddc64861f73a6baf42b5b1024969ae49130538b0e417cf60b5ccc88c1f99dc4a56eb25a0244838604341cedb6b0b1c93f2d4a1521ea02894efb5fb45013bd52fb74ef40b154c44da9a958897055c3be9731af86a0e5b977f09f61deadae8ac7f0084c5f64a88de212ee978087196376ffaf373391121083a8b22c9217f78865e779d3d09904f5e0f91117205d7f65facfa094925c52bcf15a540e941a3489d961b2c00a3b68fa61f9bb674ca81a2753f1557798bd06b9895414003adb29cd7bd0258d96c9bc458611128a117bb752587e1b1e15af104e60e53d895e427"}) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000001a80)={0x7d, "e3502afc3836d3e8f175a5de49946e4adddcdc441f7dcc2eb16c7b44299a5b27", 0xd393c2d048da75f1, 0x8, 0xd, 0x10000, 0x0, 0x2}) r4 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000002c0)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xbc, 0x2f, 0x0, @private=0x1fe1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0xa000, 0x86dd, 0x8}}}}}}, 0x2e) sendmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2], 0xa4}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x20008001) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001b40), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) 469.772163ms ago: executing program 6 (id=3260): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000001240)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='\x00') pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x13, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) 380.588353ms ago: executing program 1 (id=3261): r0 = mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000880)={0x0, 0xdff9, 0x800, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4e3b947d338dce40, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x44, 0x6, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000) dup(r4) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xffffffffffffff8c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}]}]}, 0x58}}, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xec}}, 0x0) 380.095006ms ago: executing program 6 (id=3262): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x3, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x80800) (fail_nth: 4) 379.860864ms ago: executing program 1 (id=3263): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000108fdffffff000000080000000094bb9118dfaa4adf170bd4d217e06f345449910e9ee04d4debbbb0957b3534a8a3fdeaf57411d0"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 288.061559ms ago: executing program 1 (id=3264): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000108fdffffff000000080000000094bb9118dfaa4a"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 287.643341ms ago: executing program 1 (id=3265): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x200, 0x1}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}, @IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x3}]}}}]}, 0x54}}, 0x8010) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000001440)={@local, @empty, 0x0, "513cd4cc40ac7f23c0709a177674ed0af53959b350f13ba74439c35a52e4b81c", 0x4, 0x3, 0x100, 0x5}, 0x3c) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @broadcast}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r6, &(0x7f0000000100)=""/253, 0xfd, 0xadc) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) getsockopt$inet_int(r0, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) 215.736559ms ago: executing program 1 (id=3266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = epoll_create1(0x0) lseek(r0, 0x7, 0xc357d961057391c0) (async) lseek(r0, 0x7, 0xc357d961057391c0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x20000001}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x20000001}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='environ\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b7000000000000004e00000000000000870a000000000000950000000000000026e1cd0bef5dc2eec87f979f205a355188cc0dc897cbb266b0cdc6429a84d7f00c11821f92cb581543330650512f0cd0183ef42629a2f5dcf115c230f8d5637385ab7cafcf94abdd29f1a1c82f41ea62464d442c83400ff6fadf22d1d25b9f63f3b5945c6258b59319d9282e0ab499d7914801fcd4a00e00"/163], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 82.213813ms ago: executing program 6 (id=3267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="00820101050000008520000004000000185a0000100000000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r0, @ANYBLOB="0000000000004570fe14ac4df76479e7393e421aabffff00000000183800000400000000000000ac221a00004ebf8438f4d1a2f67b62a153f9f82bb5676b41ccad2e5367cd1629c2a0136b48d643be41d143ad5ae8820d5774fa385da950e85aaec074d0466e2e2db0e8a5c96a0ac4f93220587908c7ac20dca67b76b07f596d61bf03ee53ef35483524b954a797e2674447874b0979b3cb"], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe, @void, @value}, 0xc3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa72301, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0xc048aec8, &(0x7f0000000080)={0x6}) 81.901376ms ago: executing program 6 (id=3268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) (fail_nth: 4) 0s ago: executing program 6 (id=3269): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000140)='./file0/file0\x00', r4, r2) (async) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba52344000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063395601000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x65, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x400002, 0x2, 0xbb449db56ef8e26c}, 0x18) (async) timer_settime(0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.167288][T15401] CPU: 2 UID: 0 PID: 15401 Comm: syz.1.3030 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 287.167305][T15401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.167312][T15401] Call Trace: [ 287.167317][T15401] [ 287.167321][T15401] dump_stack_lvl+0x16c/0x1f0 [ 287.167341][T15401] should_fail_ex+0x512/0x640 [ 287.167359][T15401] _copy_to_user+0x32/0xd0 [ 287.167377][T15401] do_ip_vs_get_ctl+0x548/0x1330 [ 287.167394][T15401] ? __pfx_do_ip_vs_get_ctl+0x10/0x10 [ 287.167409][T15401] ? find_held_lock+0x2b/0x80 [ 287.167424][T15401] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 287.167452][T15401] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 287.167470][T15401] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 287.167495][T15401] ? nf_getsockopt+0x7c/0xe0 [ 287.167507][T15401] nf_getsockopt+0x7c/0xe0 [ 287.167520][T15401] ip_getsockopt+0x18c/0x1e0 [ 287.167537][T15401] ? __pfx_ip_getsockopt+0x10/0x10 [ 287.167553][T15401] ? __might_fault+0x13b/0x190 [ 287.167568][T15401] raw_getsockopt+0x4d/0x1f0 [ 287.167583][T15401] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 287.167599][T15401] do_sock_getsockopt+0x3ff/0x800 [ 287.167620][T15401] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 287.167634][T15401] ? __fget_files+0x204/0x3c0 [ 287.167651][T15401] __sys_getsockopt+0x12f/0x260 [ 287.167665][T15401] __x64_sys_getsockopt+0xbd/0x160 [ 287.167676][T15401] ? do_syscall_64+0x91/0x260 [ 287.167691][T15401] ? lockdep_hardirqs_on+0x7c/0x110 [ 287.167706][T15401] do_syscall_64+0xcd/0x260 [ 287.167723][T15401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.167735][T15401] RIP: 0033:0x7f2301f8e969 [ 287.167744][T15401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.167755][T15401] RSP: 002b:00007f2302d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 287.167765][T15401] RAX: ffffffffffffffda RBX: 00007f23021b5fa0 RCX: 00007f2301f8e969 [ 287.167772][T15401] RDX: 0000000000000483 RSI: 0000000000000000 RDI: 0000000000000003 [ 287.167779][T15401] RBP: 00007f2302d27090 R08: 0000200000000180 R09: 0000000000000000 [ 287.167786][T15401] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.167792][T15401] R13: 0000000000000000 R14: 00007f23021b5fa0 R15: 00007fff4e306878 [ 287.167805][T15401] [ 287.226616][T15406] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 287.258123][T15406] FAULT_INJECTION: forcing a failure. [ 287.258123][T15406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.263729][T15402] IPVS: using max 26 ests per chain, 62400 per kthread [ 287.263737][T15406] CPU: 2 UID: 0 PID: 15406 Comm: syz.1.3032 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 287.263752][T15406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 287.263759][T15406] Call Trace: [ 287.263764][T15406] [ 287.263768][T15406] dump_stack_lvl+0x16c/0x1f0 [ 287.263788][T15406] should_fail_ex+0x512/0x640 [ 287.263805][T15406] strncpy_from_user+0x3b/0x2e0 [ 287.263821][T15406] getname_flags.part.0+0x8f/0x550 [ 287.263838][T15406] getname_flags+0x93/0xf0 [ 287.263855][T15406] __x64_sys_renameat2+0xc7/0x130 [ 287.263869][T15406] do_syscall_64+0xcd/0x260 [ 287.263887][T15406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.263898][T15406] RIP: 0033:0x7f2301f8e969 [ 287.263907][T15406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.263918][T15406] RSP: 002b:00007f2302d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 287.263929][T15406] RAX: ffffffffffffffda RBX: 00007f23021b5fa0 RCX: 00007f2301f8e969 [ 287.263935][T15406] RDX: ffffffffffffff9c RSI: 0000200000000a00 RDI: ffffffffffffff9c [ 287.263942][T15406] RBP: 00007f2302d27090 R08: 0000000000000002 R09: 0000000000000000 [ 287.263949][T15406] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 287.263955][T15406] R13: 0000000000000000 R14: 00007f23021b5fa0 R15: 00007fff4e306878 [ 287.263968][T15406] [ 287.342664][ T40] audit: type=1400 audit(2000000204.143:2153): avc: denied { write } for pid=15409 comm="syz.1.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 287.460037][T15414] program syz.2.3036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.496655][T15417] fuse: Unknown parameter '0x0000000000000004' [ 287.497905][T15418] fuse: Bad value for 'fd' [ 287.526146][T15422] delete_channel: no stack [ 287.552481][ T5941] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 287.593221][ T40] audit: type=1400 audit(2000000204.393:2154): avc: denied { set_context_mgr } for pid=15420 comm="syz.2.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 287.702639][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.705813][ T5941] usb 5-1: config 0 has no interfaces? [ 287.707578][ T5941] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 287.710426][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.714604][ T5941] usb 5-1: config 0 descriptor?? [ 287.804416][T15420] delete_channel: no stack [ 287.918839][T15408] overlayfs: failed to resolve './file0': -2 [ 287.923192][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 287.923201][ T40] audit: type=1400 audit(2000000204.723:2156): avc: denied { ioctl } for pid=15407 comm="syz.0.3033" path="socket:[68300]" dev="sockfs" ino=68300 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 287.934300][ T9] usb 5-1: USB disconnect, device number 20 [ 288.423014][T15438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3045'. [ 288.563149][T15443] overlayfs: failed to resolve './file1/file0': -2 [ 288.567639][ T40] audit: type=1400 audit(2000000205.363:2157): avc: denied { append } for pid=15446 comm="syz.0.3048" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 288.707793][ T40] audit: type=1400 audit(2000000205.503:2158): avc: denied { watch } for pid=15442 comm="syz.1.3046" path="/newroot/155/bus" dev="tmpfs" ino=909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 288.809447][T15453] fuse: Bad value for 'fd' [ 288.852536][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3054'. [ 288.856236][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3054'. [ 288.859784][T15459] FAULT_INJECTION: forcing a failure. [ 288.859784][T15459] name failslab, interval 1, probability 0, space 0, times 0 [ 288.865573][T15459] CPU: 1 UID: 0 PID: 15459 Comm: syz.1.3054 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 288.865589][T15459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 288.865595][T15459] Call Trace: [ 288.865599][T15459] [ 288.865603][T15459] dump_stack_lvl+0x16c/0x1f0 [ 288.865623][T15459] should_fail_ex+0x512/0x640 [ 288.865638][T15459] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 288.865655][T15459] should_failslab+0xc2/0x120 [ 288.865668][T15459] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 288.865679][T15459] ? __alloc_skb+0x2b2/0x380 [ 288.865693][T15459] __alloc_skb+0x2b2/0x380 [ 288.865703][T15459] ? __pfx___alloc_skb+0x10/0x10 [ 288.865719][T15459] netlink_ack+0x15d/0xb80 [ 288.865737][T15459] netlink_rcv_skb+0x347/0x440 [ 288.865751][T15459] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 288.865768][T15459] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.865788][T15459] ? bpf_lsm_capable+0x9/0x10 [ 288.865798][T15459] ? security_capable+0x7e/0x260 [ 288.865811][T15459] ? ns_capable+0xd7/0x110 [ 288.865826][T15459] nfnetlink_rcv+0x1b3/0x430 [ 288.865841][T15459] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 288.865856][T15459] ? netlink_deliver_tap+0x1ae/0xd30 [ 288.865871][T15459] netlink_unicast+0x53d/0x7f0 [ 288.865886][T15459] ? __pfx_netlink_unicast+0x10/0x10 [ 288.865904][T15459] netlink_sendmsg+0x8d1/0xdd0 [ 288.865920][T15459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.865939][T15459] ____sys_sendmsg+0xa98/0xc70 [ 288.865954][T15459] ? copy_msghdr_from_user+0x10a/0x160 [ 288.865967][T15459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.865988][T15459] ___sys_sendmsg+0x134/0x1d0 [ 288.866000][T15459] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.866039][T15459] __sys_sendmsg+0x16d/0x220 [ 288.866057][T15459] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.866091][T15459] do_syscall_64+0xcd/0x260 [ 288.866117][T15459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.866134][T15459] RIP: 0033:0x7f2301f8e969 [ 288.866148][T15459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.866163][T15459] RSP: 002b:00007f2302d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.866179][T15459] RAX: ffffffffffffffda RBX: 00007f23021b5fa0 RCX: 00007f2301f8e969 [ 288.866189][T15459] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 288.866199][T15459] RBP: 00007f2302d27090 R08: 0000000000000000 R09: 0000000000000000 [ 288.866209][T15459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.866218][T15459] R13: 0000000000000000 R14: 00007f23021b5fa0 R15: 00007fff4e306878 [ 288.866241][T15459] [ 288.875376][T15461] FAULT_INJECTION: forcing a failure. [ 288.875376][T15461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.910076][T15463] FAULT_INJECTION: forcing a failure. [ 288.910076][T15463] name failslab, interval 1, probability 0, space 0, times 0 [ 288.910775][T15461] CPU: 2 UID: 0 PID: 15461 Comm: syz.0.3055 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 288.910791][T15461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 288.910798][T15461] Call Trace: [ 288.910803][T15461] [ 288.910807][T15461] dump_stack_lvl+0x16c/0x1f0 [ 288.910827][T15461] should_fail_ex+0x512/0x640 [ 288.910845][T15461] _copy_to_user+0x32/0xd0 [ 288.910863][T15461] simple_read_from_buffer+0xcb/0x170 [ 288.910882][T15461] proc_fail_nth_read+0x197/0x270 [ 288.910906][T15461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 288.910923][T15461] ? rw_verify_area+0xcf/0x680 [ 288.910939][T15461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 288.910956][T15461] vfs_read+0x1e1/0xc70 [ 288.910974][T15461] ? __pfx___mutex_lock+0x10/0x10 [ 288.910990][T15461] ? __pfx_vfs_read+0x10/0x10 [ 288.911010][T15461] ? __fget_files+0x20e/0x3c0 [ 288.911039][T15461] ksys_read+0x12a/0x240 [ 288.911065][T15461] ? __pfx_ksys_read+0x10/0x10 [ 288.911098][T15461] do_syscall_64+0xcd/0x260 [ 288.911124][T15461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.911142][T15461] RIP: 0033:0x7ff31c58d37c [ 288.911157][T15461] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 288.911174][T15461] RSP: 002b:00007ff31d3ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 288.911191][T15461] RAX: ffffffffffffffda RBX: 00007ff31c7b5fa0 RCX: 00007ff31c58d37c [ 288.911202][T15461] RDX: 000000000000000f RSI: 00007ff31d3ef0a0 RDI: 0000000000000005 [ 288.911208][T15461] RBP: 00007ff31d3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 288.911215][T15461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.911221][T15461] R13: 0000000000000000 R14: 00007ff31c7b5fa0 R15: 00007ffe91cd0338 [ 288.911236][T15461] [ 289.040058][T15463] CPU: 0 UID: 0 PID: 15463 Comm: syz.1.3056 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 289.040075][T15463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 289.040082][T15463] Call Trace: [ 289.040087][T15463] [ 289.040092][T15463] dump_stack_lvl+0x16c/0x1f0 [ 289.040112][T15463] should_fail_ex+0x512/0x640 [ 289.040128][T15463] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 289.040142][T15463] should_failslab+0xc2/0x120 [ 289.040154][T15463] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 289.040165][T15463] ? ptlock_alloc+0x1f/0x70 [ 289.040189][T15463] ptlock_alloc+0x1f/0x70 [ 289.040206][T15463] pte_alloc_one+0x6d/0x380 [ 289.040221][T15463] __pte_alloc+0x6d/0x3c0 [ 289.040234][T15463] ? __pfx___pte_alloc+0x10/0x10 [ 289.040248][T15463] ? do_raw_spin_lock+0x12c/0x2b0 [ 289.040260][T15463] ? find_held_lock+0x2b/0x80 [ 289.040274][T15463] do_pte_missing+0x2925/0x3fb0 [ 289.040292][T15463] ? _raw_spin_unlock+0x28/0x50 [ 289.040306][T15463] ? __pmd_alloc+0x3c2/0x870 [ 289.040321][T15463] __handle_mm_fault+0x103d/0x2a40 [ 289.040343][T15463] ? __pfx___handle_mm_fault+0x10/0x10 [ 289.040368][T15463] ? find_vma+0xbf/0x140 [ 289.040381][T15463] ? __pfx_find_vma+0x10/0x10 [ 289.040396][T15463] handle_mm_fault+0x3fe/0xad0 [ 289.040415][T15463] do_user_addr_fault+0x7a6/0x1370 [ 289.040430][T15463] ? rcu_is_watching+0x12/0xc0 [ 289.040444][T15463] exc_page_fault+0x5c/0xc0 [ 289.040460][T15463] asm_exc_page_fault+0x26/0x30 [ 289.040471][T15463] RIP: 0010:_copy_from_user+0x93/0xd0 [ 289.040488][T15463] Code: 36 ea fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 f9 ba 4f fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 45 31 [ 289.040498][T15463] RSP: 0018:ffffc9000701fd90 EFLAGS: 00050246 [ 289.040507][T15463] RAX: 0000000000000001 RBX: 0000200000000080 RCX: 0000000000000010 [ 289.040514][T15463] RDX: fffff52000e03fc4 RSI: 0000200000000080 RDI: ffffc9000701fe10 [ 289.040521][T15463] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff52000e03fc3 [ 289.040528][T15463] R10: ffffc9000701fe1f R11: 0000000000000000 R12: 0000000000000000 [ 289.040534][T15463] R13: ffffc9000701fe10 R14: ffff888031403180 R15: ffff888035e1ce00 [ 289.040549][T15463] move_addr_to_kernel+0x65/0x170 [ 289.040574][T15463] __sys_bind+0x11b/0x260 [ 289.040591][T15463] ? __pfx___sys_bind+0x10/0x10 [ 289.040606][T15463] ? __fget_files+0x20e/0x3c0 [ 289.040621][T15463] ? __pfx_ksys_write+0x10/0x10 [ 289.040641][T15463] __x64_sys_bind+0x72/0xb0 [ 289.040657][T15463] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.040672][T15463] do_syscall_64+0xcd/0x260 [ 289.040689][T15463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.040700][T15463] RIP: 0033:0x7f2301f8e969 [ 289.040709][T15463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.040720][T15463] RSP: 002b:00007f2302d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 289.040729][T15463] RAX: ffffffffffffffda RBX: 00007f23021b5fa0 RCX: 00007f2301f8e969 [ 289.040736][T15463] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 289.040742][T15463] RBP: 00007f2302d27090 R08: 0000000000000000 R09: 0000000000000000 [ 289.040749][T15463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.040755][T15463] R13: 0000000000000000 R14: 00007f23021b5fa0 R15: 00007fff4e306878 [ 289.040769][T15463] [ 289.207965][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'. [ 289.211744][T15467] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3058'. [ 289.242961][T15469] netlink: 'syz.0.3059': attribute type 7 has an invalid length. [ 289.278826][T15471] lo speed is unknown, defaulting to 1000 [ 289.347539][T15473] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 289.375887][T15478] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.3060'. [ 289.379127][T15478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3060'. [ 289.390939][T15473] team0: No ports can be present during mode change [ 289.394918][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3061'. [ 289.492091][T15473] team0 (unregistering): Port device team_slave_0 removed [ 289.498114][T15473] team0 (unregistering): Port device team_slave_1 removed [ 289.598172][T15481] overlay: Bad value for 'workdir' [ 289.601487][T15482] overlay: Bad value for 'workdir' [ 289.654449][T15488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=15488 comm=syz.1.3064 [ 289.800349][ T40] audit: type=1400 audit(2000000206.593:2159): avc: denied { bind } for pid=15489 comm="syz.1.3065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 289.806720][ T40] audit: type=1400 audit(2000000206.593:2160): avc: denied { getopt } for pid=15489 comm="syz.1.3065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 290.129454][T15496] FAULT_INJECTION: forcing a failure. [ 290.129454][T15496] name failslab, interval 1, probability 0, space 0, times 0 [ 290.134488][T15496] CPU: 2 UID: 0 PID: 15496 Comm: syz.0.3066 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 290.134505][T15496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.134512][T15496] Call Trace: [ 290.134516][T15496] [ 290.134520][T15496] dump_stack_lvl+0x16c/0x1f0 [ 290.134541][T15496] should_fail_ex+0x512/0x640 [ 290.134557][T15496] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 290.134570][T15496] should_failslab+0xc2/0x120 [ 290.134583][T15496] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 290.134594][T15496] ? __alloc_skb+0x2b2/0x380 [ 290.134608][T15496] __alloc_skb+0x2b2/0x380 [ 290.134623][T15496] ? __pfx___alloc_skb+0x10/0x10 [ 290.134635][T15496] ? find_held_lock+0x2b/0x80 [ 290.134649][T15496] ? hci_dev_get+0xf0/0x1e0 [ 290.134663][T15496] mgmt_cmd_status+0x42/0x510 [ 290.134682][T15496] hci_sock_sendmsg+0x21e1/0x25e0 [ 290.134703][T15496] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 290.134725][T15496] sock_write_iter+0x4fc/0x5b0 [ 290.134741][T15496] ? __pfx_sock_write_iter+0x10/0x10 [ 290.134761][T15496] ? bpf_lsm_file_permission+0x9/0x10 [ 290.134777][T15496] ? security_file_permission+0x71/0x210 [ 290.134795][T15496] ? rw_verify_area+0xcf/0x680 [ 290.134811][T15496] vfs_write+0x5ba/0x1180 [ 290.134828][T15496] ? __pfx_sock_write_iter+0x10/0x10 [ 290.134845][T15496] ? __pfx_vfs_write+0x10/0x10 [ 290.134861][T15496] ? find_held_lock+0x2b/0x80 [ 290.134884][T15496] ksys_write+0x205/0x240 [ 290.134901][T15496] ? __pfx_ksys_write+0x10/0x10 [ 290.134916][T15496] ? rcu_is_watching+0x12/0xc0 [ 290.134934][T15496] do_syscall_64+0xcd/0x260 [ 290.134951][T15496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.134963][T15496] RIP: 0033:0x7ff31c58e969 [ 290.134972][T15496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.134983][T15496] RSP: 002b:00007ff31d3ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 290.134994][T15496] RAX: ffffffffffffffda RBX: 00007ff31c7b5fa0 RCX: 00007ff31c58e969 [ 290.135001][T15496] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000004 [ 290.135007][T15496] RBP: 00007ff31d3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 290.135014][T15496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.135020][T15496] R13: 0000000000000000 R14: 00007ff31c7b5fa0 R15: 00007ffe91cd0338 [ 290.135034][T15496] [ 290.671828][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3071'. [ 290.674737][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3071'. [ 290.677499][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3071'. [ 290.680282][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3071'. [ 290.919209][T15526] FAULT_INJECTION: forcing a failure. [ 290.919209][T15526] name failslab, interval 1, probability 0, space 0, times 0 [ 290.924483][T15526] CPU: 1 UID: 0 PID: 15526 Comm: syz.1.3074 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 290.924507][T15526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.924518][T15526] Call Trace: [ 290.924524][T15526] [ 290.924531][T15526] dump_stack_lvl+0x16c/0x1f0 [ 290.924561][T15526] should_fail_ex+0x512/0x640 [ 290.924583][T15526] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 290.924611][T15526] should_failslab+0xc2/0x120 [ 290.924629][T15526] __kmalloc_cache_noprof+0x6a/0x3e0 [ 290.924654][T15526] ? kvm_hv_vcpu_init+0xa4/0x7a0 [ 290.924682][T15526] kvm_hv_vcpu_init+0xa4/0x7a0 [ 290.924709][T15526] kvm_hv_set_msr_common+0x109/0x37a0 [ 290.924736][T15526] ? kasan_save_stack+0x42/0x60 [ 290.924750][T15526] ? kasan_save_stack+0x33/0x60 [ 290.924765][T15526] ? __pfx_kvm_hv_set_msr_common+0x10/0x10 [ 290.924789][T15526] ? memdup_user+0x2a/0xe0 [ 290.924816][T15526] ? kvm_arch_vcpu_ioctl+0x281a/0x4f00 [ 290.924837][T15526] ? kvm_vcpu_ioctl+0x1232/0x1680 [ 290.924860][T15526] ? __x64_sys_ioctl+0x193/0x200 [ 290.924882][T15526] ? do_syscall_64+0xcd/0x260 [ 290.924905][T15526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.924933][T15526] kvm_set_msr_common+0x1aca/0x3b50 [ 290.924955][T15526] ? __pfx_kvm_set_msr_common+0x10/0x10 [ 290.924977][T15526] ? __lock_acquire+0xaa4/0x1ba0 [ 290.925007][T15526] vmx_set_msr+0xc2d/0x3960 [ 290.925028][T15526] ? __pfx_vmx_set_msr+0x10/0x10 [ 290.925052][T15526] kvm_set_msr_ignored_check+0x147/0x820 [ 290.925078][T15526] ? __pfx_kvm_set_msr_ignored_check+0x10/0x10 [ 290.925102][T15526] ? _copy_from_user+0x59/0xd0 [ 290.925130][T15526] kvm_arch_vcpu_ioctl+0x29ac/0x4f00 [ 290.925159][T15526] ? stack_depot_save_flags+0x28/0xa50 [ 290.925183][T15526] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 290.925203][T15526] ? __lock_acquire+0xaa4/0x1ba0 [ 290.925232][T15526] ? kasan_save_stack+0x42/0x60 [ 290.925246][T15526] ? kasan_save_stack+0x33/0x60 [ 290.925260][T15526] ? kasan_save_track+0x14/0x30 [ 290.925275][T15526] ? kasan_save_free_info+0x3b/0x60 [ 290.925295][T15526] ? __kasan_slab_free+0x51/0x70 [ 290.925309][T15526] ? kfree+0x2b6/0x4d0 [ 290.925328][T15526] ? tomoyo_path_number_perm+0x470/0x580 [ 290.925349][T15526] ? security_file_ioctl+0x9b/0x240 [ 290.925372][T15526] ? __x64_sys_ioctl+0xb7/0x200 [ 290.925398][T15526] ? __lock_acquire+0xaa4/0x1ba0 [ 290.925432][T15526] ? __mutex_trylock_common+0xe9/0x250 [ 290.925459][T15526] ? __pfx___mutex_trylock_common+0x10/0x10 [ 290.925487][T15526] ? __pfx___might_resched+0x10/0x10 [ 290.925531][T15526] ? rcu_is_watching+0x12/0xc0 [ 290.925552][T15526] ? trace_contention_end+0xdd/0x130 [ 290.925568][T15526] ? __mutex_lock+0x1ca/0xb90 [ 290.925596][T15526] ? kvm_vcpu_ioctl+0x27e/0x1680 [ 290.925622][T15526] ? __pfx___mutex_lock+0x10/0x10 [ 290.925656][T15526] ? tomoyo_path_number_perm+0x18d/0x580 [ 290.925680][T15526] ? kvm_vcpu_ioctl+0x1232/0x1680 [ 290.925700][T15526] kvm_vcpu_ioctl+0x1232/0x1680 [ 290.925728][T15526] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 290.925759][T15526] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 290.925788][T15526] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 290.925829][T15526] ? hook_file_ioctl_common+0x145/0x410 [ 290.925853][T15526] ? selinux_file_ioctl+0x180/0x270 [ 290.925878][T15526] ? selinux_file_ioctl+0xb4/0x270 [ 290.925906][T15526] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 290.925932][T15526] __x64_sys_ioctl+0x193/0x200 [ 290.925957][T15526] do_syscall_64+0xcd/0x260 [ 290.925984][T15526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.926001][T15526] RIP: 0033:0x7f2301f8e969 [ 290.926017][T15526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.926033][T15526] RSP: 002b:00007f2302d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.926050][T15526] RAX: ffffffffffffffda RBX: 00007f23021b5fa0 RCX: 00007f2301f8e969 [ 290.926059][T15526] RDX: 0000200000000200 RSI: 000000004008ae89 RDI: 0000000000000005 [ 290.926069][T15526] RBP: 00007f2302d27090 R08: 0000000000000000 R09: 0000000000000000 [ 290.926077][T15526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.926086][T15526] R13: 0000000000000000 R14: 00007f23021b5fa0 R15: 00007fff4e306878 [ 290.926109][T15526] [ 291.173359][T15528] FAULT_INJECTION: forcing a failure. [ 291.173359][T15528] name failslab, interval 1, probability 0, space 0, times 0 [ 291.178609][T15528] CPU: 3 UID: 0 PID: 15528 Comm: syz.1.3075 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 291.178625][T15528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.178632][T15528] Call Trace: [ 291.178636][T15528] [ 291.178641][T15528] dump_stack_lvl+0x16c/0x1f0 [ 291.178661][T15528] should_fail_ex+0x512/0x640 [ 291.178679][T15528] should_failslab+0xc2/0x120 [ 291.178692][T15528] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 291.178704][T15528] ? skb_clone+0x190/0x3f0 [ 291.178719][T15528] skb_clone+0x190/0x3f0 [ 291.178732][T15528] maybe_deliver+0xd4/0x180 [ 291.178751][T15528] br_flood+0x17c/0x650 [ 291.178773][T15528] br_dev_xmit+0x14d1/0x1880 [ 291.178788][T15528] ? __pfx_br_dev_xmit+0x10/0x10 [ 291.178802][T15528] ? find_held_lock+0x2b/0x80 [ 291.178819][T15528] ? dev_queue_xmit_nit+0x929/0xca0 [ 291.178833][T15528] ? rcu_lockdep_current_cpu_online+0x35/0x150 [ 291.178850][T15528] dev_hard_start_xmit+0x96/0x740 [ 291.178871][T15528] __dev_queue_xmit+0x7eb/0x43e0 [ 291.178890][T15528] ? find_held_lock+0x2b/0x80 [ 291.178906][T15528] ? __might_fault+0xe3/0x190 [ 291.178922][T15528] ? __might_fault+0xe3/0x190 [ 291.178936][T15528] ? __might_fault+0x13b/0x190 [ 291.178953][T15528] ? __pfx___dev_queue_xmit+0x10/0x10 [ 291.178983][T15528] ? _copy_from_iter+0x161/0x15b0 [ 291.179015][T15528] ? skb_partial_csum_set+0x202/0x3a0 [ 291.179040][T15528] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 291.179062][T15528] ? virtio_net_hdr_to_skb.constprop.0+0x817/0x1420 [ 291.179094][T15528] ? __pfx_virtio_net_hdr_to_skb.constprop.0+0x10/0x10 [ 291.179119][T15528] ? dev_get_by_index+0x17c/0x380 [ 291.179140][T15528] packet_xmit+0x23e/0x360 [ 291.179164][T15528] packet_sendmsg+0x37c8/0x56f0 [ 291.179201][T15528] ? sock_has_perm+0x259/0x2f0 [ 291.179220][T15528] ? __pfx_sock_has_perm+0x10/0x10 [ 291.179243][T15528] ? __pfx_packet_sendmsg+0x10/0x10 [ 291.179283][T15528] __sys_sendto+0x495/0x510 [ 291.179303][T15528] ? __pfx___sys_sendto+0x10/0x10 [ 291.179343][T15528] ? ksys_write+0x1b9/0x240 [ 291.179369][T15528] ? __pfx_ksys_write+0x10/0x10 [ 291.179395][T15528] __x64_sys_sendto+0xe0/0x1c0 [ 291.179411][T15528] ? do_syscall_64+0x91/0x260 [ 291.179435][T15528] ? lockdep_hardirqs_on+0x7c/0x110 [ 291.179459][T15528] do_syscall_64+0xcd/0x260 [ 291.179486][T15528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.179504][T15528] RIP: 0033:0x7f2301f8e969 [ 291.179527][T15528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.179546][T15528] RSP: 002b:00007f2302d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 291.179564][T15528] RAX: ffffffffffffffda RBX: 00007f23021b5fa0 RCX: 00007f2301f8e969 [ 291.179574][T15528] RDX: 0000000000000026 RSI: 0000200000000100 RDI: 0000000000000003 [ 291.179584][T15528] RBP: 00007f2302d27090 R08: 0000200000000540 R09: 0000000000000014 [ 291.179595][T15528] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 291.179604][T15528] R13: 0000000000000000 R14: 00007f23021b5fa0 R15: 00007fff4e306878 [ 291.179623][T15528] [ 291.196233][ T40] audit: type=1400 audit(2000000207.993:2161): avc: denied { mounton } for pid=15529 comm="syz.0.3076" path="/173/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 291.196304][T15530] 9pnet_fd: Insufficient options for proto=fd [ 291.210403][T15532] FAULT_INJECTION: forcing a failure. [ 291.210403][T15532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.300092][T15532] CPU: 3 UID: 0 PID: 15532 Comm: syz.1.3077 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 291.300108][T15532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.300115][T15532] Call Trace: [ 291.300119][T15532] [ 291.300123][T15532] dump_stack_lvl+0x16c/0x1f0 [ 291.300144][T15532] should_fail_ex+0x512/0x640 [ 291.300161][T15532] _copy_to_user+0x32/0xd0 [ 291.300178][T15532] ? __pfx_autofs_dev_ioctl_askumount+0x10/0x10 [ 291.300192][T15532] _autofs_dev_ioctl+0x3ff/0xb40 [ 291.300205][T15532] ? __pfx__autofs_dev_ioctl+0x10/0x10 [ 291.300220][T15532] ? selinux_file_ioctl+0x180/0x270 [ 291.300237][T15532] ? selinux_file_ioctl+0xb4/0x270 [ 291.300256][T15532] autofs_dev_ioctl+0x1a/0x30 [ 291.300267][T15532] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 291.300279][T15532] __x64_sys_ioctl+0x193/0x200 [ 291.300296][T15532] do_syscall_64+0xcd/0x260 [ 291.300314][T15532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.300325][T15532] RIP: 0033:0x7f2301f8e969 [ 291.300334][T15532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.300345][T15532] RSP: 002b:00007f2302d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.300356][T15532] RAX: ffffffffffffffda RBX: 00007f23021b5fa0 RCX: 00007f2301f8e969 [ 291.300363][T15532] RDX: 0000200000000680 RSI: 00000000c018937d RDI: 0000000000000003 [ 291.300369][T15532] RBP: 00007f2302d27090 R08: 0000000000000000 R09: 0000000000000000 [ 291.300376][T15532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.300382][T15532] R13: 0000000000000000 R14: 00007f23021b5fa0 R15: 00007fff4e306878 [ 291.300395][T15532] [ 291.426372][T15534] sd 0:0:0:0: PR command failed: 1026 [ 291.428794][T15534] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 291.431071][T15534] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 291.433702][T15537] bridge_slave_0: left allmulticast mode [ 291.435554][T15537] bridge_slave_0: left promiscuous mode [ 291.437370][T15537] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.441793][T15537] bridge_slave_1: left allmulticast mode [ 291.443839][T15537] bridge_slave_1: left promiscuous mode [ 291.445706][T15537] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.453645][T15537] bond0: (slave bond_slave_0): Releasing backup interface [ 291.457856][T15537] bond0: (slave bond_slave_1): Releasing backup interface [ 291.473974][T15537] team0: Port device team_slave_0 removed [ 291.481824][T15537] team0: Port device team_slave_1 removed [ 291.484054][T15537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.486391][T15537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.490015][T15537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.493368][T15537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.504795][T15540] syz.0.3078: attempt to access beyond end of device [ 291.504795][T15540] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 291.520186][T15540] EXT4-fs (nbd0): unable to read superblock [ 291.545210][ T40] audit: type=1400 audit(2000000208.343:2162): avc: denied { connect } for pid=15544 comm="syz.2.3081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 291.553667][ T40] audit: type=1400 audit(2000000208.343:2163): avc: denied { write } for pid=15544 comm="syz.2.3081" path="socket:[69051]" dev="sockfs" ino=69051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 291.566260][T15539] FAULT_INJECTION: forcing a failure. [ 291.566260][T15539] name failslab, interval 1, probability 0, space 0, times 0 [ 291.571215][T15539] CPU: 1 UID: 0 PID: 15539 Comm: syz.1.3080 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 291.571231][T15539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.571238][T15539] Call Trace: [ 291.571242][T15539] [ 291.571246][T15539] dump_stack_lvl+0x16c/0x1f0 [ 291.571266][T15539] should_fail_ex+0x512/0x640 [ 291.571282][T15539] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 291.571300][T15539] should_failslab+0xc2/0x120 [ 291.571313][T15539] __kmalloc_cache_noprof+0x6a/0x3e0 [ 291.571330][T15539] ? tcf_chain_create+0x98/0x370 [ 291.571343][T15539] tcf_chain_create+0x98/0x370 [ 291.571355][T15539] __tcf_chain_get+0x153/0x1b0 [ 291.571370][T15539] tc_new_tfilter+0x6ed/0x2340 [ 291.571390][T15539] ? avc_has_perm_noaudit+0x117/0x3b0 [ 291.571403][T15539] ? __pfx_tc_new_tfilter+0x10/0x10 [ 291.571422][T15539] ? __lock_acquire+0x5ca/0x1ba0 [ 291.571447][T15539] ? find_held_lock+0x2b/0x80 [ 291.571461][T15539] ? __pfx_tc_new_tfilter+0x10/0x10 [ 291.571474][T15539] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 291.571488][T15539] ? __pfx_tc_new_tfilter+0x10/0x10 [ 291.571503][T15539] rtnetlink_rcv_msg+0x95b/0xe90 [ 291.571517][T15539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 291.571536][T15539] netlink_rcv_skb+0x16a/0x440 [ 291.571552][T15539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 291.571566][T15539] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.571588][T15539] ? netlink_deliver_tap+0x1ae/0xd30 [ 291.571604][T15539] netlink_unicast+0x53d/0x7f0 [ 291.571620][T15539] ? __pfx_netlink_unicast+0x10/0x10 [ 291.571639][T15539] netlink_sendmsg+0x8d1/0xdd0 [ 291.571655][T15539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.571675][T15539] ____sys_sendmsg+0xa98/0xc70 [ 291.571691][T15539] ? copy_msghdr_from_user+0x10a/0x160 [ 291.571703][T15539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.571725][T15539] ___sys_sendmsg+0x134/0x1d0 [ 291.571738][T15539] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.571768][T15539] __sys_sendmsg+0x16d/0x220 [ 291.571780][T15539] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.571796][T15539] ? rcu_is_watching+0x12/0xc0 [ 291.571814][T15539] do_syscall_64+0xcd/0x260 [ 291.571838][T15539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.571849][T15539] RIP: 0033:0x7f2301f8e969 [ 291.571859][T15539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.571870][T15539] RSP: 002b:00007f2302d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.571881][T15539] RAX: ffffffffffffffda RBX: 00007f23021b5fa0 RCX: 00007f2301f8e969 [ 291.571888][T15539] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000006 [ 291.571895][T15539] RBP: 00007f2302d27090 R08: 0000000000000000 R09: 0000000000000000 [ 291.571901][T15539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.571908][T15539] R13: 0000000000000000 R14: 00007f23021b5fa0 R15: 00007fff4e306878 [ 291.571922][T15539] [ 291.798273][T15565] fuse: Bad value for 'rootmode' [ 291.801995][T15558] FAULT_INJECTION: forcing a failure. [ 291.801995][T15558] name failslab, interval 1, probability 0, space 0, times 0 [ 291.805979][T15558] CPU: 0 UID: 0 PID: 15558 Comm: syz.1.3087 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 291.805995][T15558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.806002][T15558] Call Trace: [ 291.806006][T15558] [ 291.806011][T15558] dump_stack_lvl+0x16c/0x1f0 [ 291.806031][T15558] should_fail_ex+0x512/0x640 [ 291.806047][T15558] ? fs_reclaim_acquire+0xae/0x150 [ 291.806063][T15558] ? bio_kmalloc+0x41/0x70 [ 291.806079][T15558] should_failslab+0xc2/0x120 [ 291.806092][T15558] __kmalloc_noprof+0xd2/0x510 [ 291.806102][T15558] ? __pfx___debug_object_init+0x10/0x10 [ 291.806113][T15558] ? __pfx_blk_mq_alloc_request+0x10/0x10 [ 291.806127][T15558] bio_kmalloc+0x41/0x70 [ 291.806144][T15558] blk_rq_map_kern+0x39a/0x710 [ 291.806159][T15558] scsi_execute_cmd+0xc14/0xf40 [ 291.806178][T15558] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 291.806195][T15558] sd_pr_out_command.isra.0+0x26e/0x3d0 [ 291.806213][T15558] ? __pfx_sd_pr_out_command.isra.0+0x10/0x10 [ 291.806228][T15558] ? __lock_acquire+0xaa4/0x1ba0 [ 291.806246][T15558] ? cred_has_capability.isra.0+0x193/0x2f0 [ 291.806268][T15558] ? find_held_lock+0x2b/0x80 [ 291.806280][T15558] ? __might_fault+0xe3/0x190 [ 291.806292][T15558] ? __might_fault+0x13b/0x190 [ 291.806305][T15558] ? block_pr_type_to_scsi+0x62/0x80 [ 291.806319][T15558] blkdev_common_ioctl+0xaee/0x2480 [ 291.806348][T15558] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 291.806362][T15558] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 291.806376][T15558] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 291.806394][T15558] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 291.806413][T15558] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 291.806432][T15558] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 291.806457][T15558] blkdev_ioctl+0x1cb/0x6d0 [ 291.806469][T15558] ? __pfx_blkdev_ioctl+0x10/0x10 [ 291.806481][T15558] ? selinux_file_ioctl+0x180/0x270 [ 291.806498][T15558] ? selinux_file_ioctl+0xb4/0x270 [ 291.806516][T15558] ? __pfx_blkdev_ioctl+0x10/0x10 [ 291.806528][T15558] __x64_sys_ioctl+0x193/0x200 [ 291.806544][T15558] do_syscall_64+0xcd/0x260 [ 291.806561][T15558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.806573][T15558] RIP: 0033:0x7f2301f8e969 [ 291.806583][T15558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.806595][T15558] RSP: 002b:00007f2302d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.806606][T15558] RAX: ffffffffffffffda RBX: 00007f23021b5fa0 RCX: 00007f2301f8e969 [ 291.806613][T15558] RDX: 0000200000000000 RSI: 00000000401070ca RDI: 0000000000000004 [ 291.806624][T15558] RBP: 00007f2302d27090 R08: 0000000000000000 R09: 0000000000000000 [ 291.806630][T15558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.806637][T15558] R13: 0000000000000000 R14: 00007f23021b5fa0 R15: 00007fff4e306878 [ 291.806651][T15558] [ 291.817682][T15555] use of bytesused == 0 is deprecated and will be removed in the future, [ 291.823366][T15567] FAULT_INJECTION: forcing a failure. [ 291.823366][T15567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.824562][T15555] use the actual size instead. [ 291.825921][T15567] CPU: 3 UID: 0 PID: 15567 Comm: syz.0.3091 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 291.825937][T15567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 291.825944][T15567] Call Trace: [ 291.825960][T15567] [ 291.825965][T15567] dump_stack_lvl+0x16c/0x1f0 [ 291.825986][T15567] should_fail_ex+0x512/0x640 [ 291.826004][T15567] _copy_to_user+0x32/0xd0 [ 291.826022][T15567] simple_read_from_buffer+0xcb/0x170 [ 291.826041][T15567] proc_fail_nth_read+0x197/0x270 [ 291.826059][T15567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.826077][T15567] ? rw_verify_area+0xcf/0x680 [ 291.826092][T15567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 291.826109][T15567] vfs_read+0x1e1/0xc70 [ 291.826128][T15567] ? __pfx___mutex_lock+0x10/0x10 [ 291.826144][T15567] ? __pfx_vfs_read+0x10/0x10 [ 291.826165][T15567] ? __fget_files+0x20e/0x3c0 [ 291.826179][T15567] ksys_read+0x12a/0x240 [ 291.826196][T15567] ? __pfx_ksys_read+0x10/0x10 [ 291.826217][T15567] do_syscall_64+0xcd/0x260 [ 291.826235][T15567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.826247][T15567] RIP: 0033:0x7ff31c58d37c [ 291.826255][T15567] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 291.826267][T15567] RSP: 002b:00007ff31d3ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.826278][T15567] RAX: ffffffffffffffda RBX: 00007ff31c7b5fa0 RCX: 00007ff31c58d37c [ 291.826285][T15567] RDX: 000000000000000f RSI: 00007ff31d3ef0a0 RDI: 0000000000000004 [ 291.826292][T15567] RBP: 00007ff31d3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 291.826298][T15567] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.826305][T15567] R13: 0000000000000000 R14: 00007ff31c7b5fa0 R15: 00007ffe91cd0338 [ 291.826319][T15567] [ 292.047326][T15579] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 292.058459][T15579] FAULT_INJECTION: forcing a failure. [ 292.058459][T15579] name failslab, interval 1, probability 0, space 0, times 0 [ 292.062320][T15579] CPU: 1 UID: 0 PID: 15579 Comm: syz.2.3096 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 292.062354][T15579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 292.062362][T15579] Call Trace: [ 292.062367][T15579] [ 292.062372][T15579] dump_stack_lvl+0x16c/0x1f0 [ 292.062392][T15579] should_fail_ex+0x512/0x640 [ 292.062407][T15579] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 292.062421][T15579] should_failslab+0xc2/0x120 [ 292.062433][T15579] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 292.062445][T15579] ? getname_flags.part.0+0x4c/0x550 [ 292.062462][T15579] getname_flags.part.0+0x4c/0x550 [ 292.062478][T15579] getname_flags+0x93/0xf0 [ 292.062496][T15579] __x64_sys_renameat2+0xd4/0x130 [ 292.062511][T15579] do_syscall_64+0xcd/0x260 [ 292.062528][T15579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.062539][T15579] RIP: 0033:0x7fc14478e969 [ 292.062549][T15579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.062560][T15579] RSP: 002b:00007fc145546038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 292.062571][T15579] RAX: ffffffffffffffda RBX: 00007fc1449b5fa0 RCX: 00007fc14478e969 [ 292.062578][T15579] RDX: ffffffffffffff9c RSI: 0000200000000a00 RDI: ffffffffffffff9c [ 292.062585][T15579] RBP: 00007fc145546090 R08: 0000000000000002 R09: 0000000000000000 [ 292.062591][T15579] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 292.062598][T15579] R13: 0000000000000000 R14: 00007fc1449b5fa0 R15: 00007ffc8ab99ec8 [ 292.062612][T15579] [ 292.132573][T15582] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 292.349047][ T5286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 292.354962][T15592] fuse: Bad value for 'rootmode' [ 292.357461][ T5286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 292.364951][ T5286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 292.370220][ T5286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 292.380333][ T5286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.422425][T15589] lo speed is unknown, defaulting to 1000 [ 292.575773][ T40] audit: type=1400 audit(2000000209.373:2164): avc: denied { setopt } for pid=15600 comm="syz.1.3103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 292.600373][T15589] chnl_net:caif_netlink_parms(): no params data found [ 292.703113][T15589] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.705586][T15589] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.708026][T15589] bridge_slave_0: entered allmulticast mode [ 292.710972][T15589] bridge_slave_0: entered promiscuous mode [ 292.715358][T15589] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.717815][T15589] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.720183][T15589] bridge_slave_1: entered allmulticast mode [ 292.724352][T15589] bridge_slave_1: entered promiscuous mode [ 292.774415][T15589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.779306][T15589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.823396][T15589] team0: Port device team_slave_0 added [ 292.828520][T15589] team0: Port device team_slave_1 added [ 292.864831][T15589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.867113][T15589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.876203][T15589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.891151][T15589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.893508][T15589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.901505][T15589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.951852][T15589] hsr_slave_0: entered promiscuous mode [ 292.955055][T15589] hsr_slave_1: entered promiscuous mode [ 292.957426][T15589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.959880][T15589] Cannot create hsr debugfs directory [ 293.034014][T15617] FAULT_INJECTION: forcing a failure. [ 293.034014][T15617] name failslab, interval 1, probability 0, space 0, times 0 [ 293.039090][T15617] CPU: 1 UID: 0 PID: 15617 Comm: syz.0.3106 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 293.039137][T15617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.039148][T15617] Call Trace: [ 293.039153][T15617] [ 293.039159][T15617] dump_stack_lvl+0x16c/0x1f0 [ 293.039204][T15617] should_fail_ex+0x512/0x640 [ 293.039231][T15617] ? __kmalloc_noprof+0xbf/0x510 [ 293.039246][T15617] ? lsm_blob_alloc+0x68/0x90 [ 293.039262][T15617] should_failslab+0xc2/0x120 [ 293.039281][T15617] __kmalloc_noprof+0xd2/0x510 [ 293.039296][T15617] ? __pfx_perf_event_init_task+0x10/0x10 [ 293.039319][T15617] ? audit_alloc+0xa2/0x7b0 [ 293.039337][T15617] lsm_blob_alloc+0x68/0x90 [ 293.039355][T15617] security_task_alloc+0x2d/0x260 [ 293.039381][T15617] copy_process+0x24ba/0x91a0 [ 293.039403][T15617] ? kasan_save_track+0x14/0x30 [ 293.039417][T15617] ? __kasan_kmalloc+0xaa/0xb0 [ 293.039437][T15617] ? vhost_task_create+0xe5/0x2e0 [ 293.039453][T15617] ? kvm_mmu_post_init_vm+0x1b7/0x370 [ 293.039476][T15617] ? kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 293.039499][T15617] ? kvm_vcpu_ioctl+0x5e9/0x1680 [ 293.039518][T15617] ? __x64_sys_ioctl+0x193/0x200 [ 293.039539][T15617] ? do_syscall_64+0xcd/0x260 [ 293.039561][T15617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.039595][T15617] ? __pfx_copy_process+0x10/0x10 [ 293.039627][T15617] ? lockdep_init_map_type+0x5c/0x280 [ 293.039646][T15617] ? lockdep_init_map_type+0x5c/0x280 [ 293.039662][T15617] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 293.039680][T15617] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 293.039699][T15617] vhost_task_create+0x1d2/0x2e0 [ 293.039716][T15617] ? __pfx_vhost_task_create+0x10/0x10 [ 293.039733][T15617] ? register_lock_class+0x41/0x4c0 [ 293.039765][T15617] ? __pfx_vhost_task_fn+0x10/0x10 [ 293.039779][T15617] ? kvm_vcpu_ioctl+0x27e/0x1680 [ 293.039810][T15617] kvm_mmu_post_init_vm+0x1b7/0x370 [ 293.039837][T15617] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 293.039861][T15617] ? kvm_vcpu_ioctl+0x14c2/0x1680 [ 293.039885][T15617] kvm_vcpu_ioctl+0x5e9/0x1680 [ 293.039912][T15617] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 293.039943][T15617] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 293.039968][T15617] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 293.040002][T15617] ? hook_file_ioctl_common+0x145/0x410 [ 293.040026][T15617] ? selinux_file_ioctl+0x180/0x270 [ 293.040046][T15617] ? selinux_file_ioctl+0xb4/0x270 [ 293.040072][T15617] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 293.040110][T15617] __x64_sys_ioctl+0x193/0x200 [ 293.040132][T15617] do_syscall_64+0xcd/0x260 [ 293.040157][T15617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.040173][T15617] RIP: 0033:0x7ff31c58e969 [ 293.040186][T15617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.040202][T15617] RSP: 002b:00007ff31d3cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.040215][T15617] RAX: ffffffffffffffda RBX: 00007ff31c7b6080 RCX: 00007ff31c58e969 [ 293.040224][T15617] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 293.040235][T15617] RBP: 00007ff31d3cd090 R08: 0000000000000000 R09: 0000000000000000 [ 293.040245][T15617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.040255][T15617] R13: 0000000000000000 R14: 00007ff31c7b6080 R15: 00007ffe91cd0338 [ 293.040278][T15617] [ 293.080136][T15589] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 293.165436][T15589] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 293.170914][T15589] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 293.174864][T15589] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 293.196510][T15589] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.198722][T15589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.201060][T15589] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.203236][T15589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.208398][T15621] delete_channel: no stack [ 293.221652][T15620] delete_channel: no stack [ 293.234723][T15589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.245089][T15589] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.254049][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.264057][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.272423][T15623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3109'. [ 293.305999][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.308711][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.324139][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.326460][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.463178][T15589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.633813][T15589] veth0_vlan: entered promiscuous mode [ 293.638771][T15589] veth1_vlan: entered promiscuous mode [ 293.656127][T15589] veth0_macvtap: entered promiscuous mode [ 293.659938][T15589] veth1_macvtap: entered promiscuous mode [ 293.669002][T15589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.672580][T15589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.675570][T15589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.678746][T15589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.682684][T15589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.685870][T15589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.689753][T15589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.691615][T15654] FAULT_INJECTION: forcing a failure. [ 293.691615][T15654] name failslab, interval 1, probability 0, space 0, times 0 [ 293.696074][T15654] CPU: 0 UID: 0 PID: 15654 Comm: syz.0.3116 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 293.696090][T15654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.696097][T15654] Call Trace: [ 293.696101][T15654] [ 293.696106][T15654] dump_stack_lvl+0x16c/0x1f0 [ 293.696126][T15654] should_fail_ex+0x512/0x640 [ 293.696142][T15654] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 293.696161][T15654] should_failslab+0xc2/0x120 [ 293.696173][T15654] __kmalloc_cache_noprof+0x6a/0x3e0 [ 293.696191][T15654] ? kvm_hv_vcpu_init+0xa4/0x7a0 [ 293.696209][T15654] kvm_hv_vcpu_init+0xa4/0x7a0 [ 293.696227][T15654] kvm_hv_set_msr_common+0x109/0x37a0 [ 293.696245][T15654] ? kasan_save_stack+0x42/0x60 [ 293.696255][T15654] ? kasan_save_stack+0x33/0x60 [ 293.696265][T15654] ? __pfx_kvm_hv_set_msr_common+0x10/0x10 [ 293.696281][T15654] ? memdup_user+0x2a/0xe0 [ 293.696292][T15654] ? kvm_arch_vcpu_ioctl+0x281a/0x4f00 [ 293.696306][T15654] ? kvm_vcpu_ioctl+0x1232/0x1680 [ 293.696322][T15654] ? __x64_sys_ioctl+0x193/0x200 [ 293.696336][T15654] ? do_syscall_64+0xcd/0x260 [ 293.696352][T15654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.696368][T15654] kvm_set_msr_common+0x1aca/0x3b50 [ 293.696384][T15654] ? __pfx_kvm_set_msr_common+0x10/0x10 [ 293.696398][T15654] ? __lock_acquire+0xaa4/0x1ba0 [ 293.696419][T15654] vmx_set_msr+0xc2d/0x3960 [ 293.696431][T15654] ? __pfx_vmx_set_msr+0x10/0x10 [ 293.696447][T15654] kvm_set_msr_ignored_check+0x147/0x820 [ 293.696464][T15654] ? __pfx_kvm_set_msr_ignored_check+0x10/0x10 [ 293.696481][T15654] ? _copy_from_user+0x59/0xd0 [ 293.696499][T15654] kvm_arch_vcpu_ioctl+0x29ac/0x4f00 [ 293.696517][T15654] ? stack_depot_save_flags+0x28/0xa50 [ 293.696533][T15654] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 293.696539][T15589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.696546][T15654] ? __lock_acquire+0xaa4/0x1ba0 [ 293.696569][T15654] ? kasan_save_stack+0x42/0x60 [ 293.696578][T15654] ? kasan_save_stack+0x33/0x60 [ 293.696587][T15654] ? kasan_save_track+0x14/0x30 [ 293.696596][T15654] ? kasan_save_free_info+0x3b/0x60 [ 293.696610][T15654] ? __kasan_slab_free+0x51/0x70 [ 293.696621][T15654] ? kfree+0x2b6/0x4d0 [ 293.696635][T15654] ? tomoyo_path_number_perm+0x470/0x580 [ 293.696649][T15654] ? security_file_ioctl+0x9b/0x240 [ 293.696665][T15654] ? __x64_sys_ioctl+0xb7/0x200 [ 293.696681][T15654] ? __lock_acquire+0xaa4/0x1ba0 [ 293.696703][T15654] ? __mutex_trylock_common+0xe9/0x250 [ 293.696721][T15654] ? __pfx___mutex_trylock_common+0x10/0x10 [ 293.696740][T15654] ? __pfx___might_resched+0x10/0x10 [ 293.696757][T15654] ? rcu_is_watching+0x12/0xc0 [ 293.696771][T15654] ? trace_contention_end+0xdd/0x130 [ 293.696782][T15654] ? __mutex_lock+0x1ca/0xb90 [ 293.696799][T15654] ? kvm_vcpu_ioctl+0x27e/0x1680 [ 293.696817][T15654] ? __pfx___mutex_lock+0x10/0x10 [ 293.696838][T15654] ? tomoyo_path_number_perm+0x18d/0x580 [ 293.696854][T15654] ? kvm_vcpu_ioctl+0x1232/0x1680 [ 293.696869][T15654] kvm_vcpu_ioctl+0x1232/0x1680 [ 293.696888][T15654] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 293.696908][T15654] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 293.696928][T15654] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 293.696951][T15654] ? hook_file_ioctl_common+0x145/0x410 [ 293.696966][T15654] ? selinux_file_ioctl+0x180/0x270 [ 293.696983][T15654] ? selinux_file_ioctl+0xb4/0x270 [ 293.697001][T15654] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 293.697018][T15654] __x64_sys_ioctl+0x193/0x200 [ 293.697034][T15654] do_syscall_64+0xcd/0x260 [ 293.697052][T15654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.697063][T15654] RIP: 0033:0x7ff31c58e969 [ 293.697072][T15654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.697083][T15654] RSP: 002b:00007ff31d3ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.697094][T15654] RAX: ffffffffffffffda RBX: 00007ff31c7b5fa0 RCX: 00007ff31c58e969 [ 293.697101][T15654] RDX: 00002000000004c0 RSI: 000000004008ae89 RDI: 0000000000000005 [ 293.697108][T15654] RBP: 00007ff31d3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 293.697114][T15654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.697121][T15654] R13: 0000000000000000 R14: 00007ff31c7b5fa0 R15: 00007ffe91cd0338 [ 293.697135][T15654] [ 293.830925][T15589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.834832][T15589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.838880][T15589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.844114][T15589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.855444][T15589] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.858870][T15589] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.862456][T15589] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.865772][T15589] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.905303][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.907813][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.923350][ T9858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.925858][ T9858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.973776][T15660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.053800][ T40] audit: type=1800 audit(2000000210.853:2165): pid=15669 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3121" name="/" dev="9p" ino=2 res=0 errno=0 [ 294.157675][T15671] FAULT_INJECTION: forcing a failure. [ 294.157675][T15671] name failslab, interval 1, probability 0, space 0, times 0 [ 294.161967][T15671] CPU: 3 UID: 0 PID: 15671 Comm: syz.6.3122 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 294.161983][T15671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 294.161990][T15671] Call Trace: [ 294.161994][T15671] [ 294.161999][T15671] dump_stack_lvl+0x16c/0x1f0 [ 294.162019][T15671] should_fail_ex+0x512/0x640 [ 294.162035][T15671] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 294.162048][T15671] should_failslab+0xc2/0x120 [ 294.162061][T15671] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 294.162072][T15671] ? getname_flags.part.0+0x4c/0x550 [ 294.162088][T15671] getname_flags.part.0+0x4c/0x550 [ 294.162104][T15671] getname_flags+0x93/0xf0 [ 294.162121][T15671] do_sys_openat2+0xb8/0x1d0 [ 294.162135][T15671] ? __pfx_do_sys_openat2+0x10/0x10 [ 294.162154][T15671] ? __fget_files+0x20e/0x3c0 [ 294.162173][T15671] __x64_sys_openat+0x174/0x210 [ 294.162189][T15671] ? __pfx___x64_sys_openat+0x10/0x10 [ 294.162202][T15671] ? ksys_write+0x1b9/0x240 [ 294.162219][T15671] ? rcu_is_watching+0x12/0xc0 [ 294.162237][T15671] do_syscall_64+0xcd/0x260 [ 294.162254][T15671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.162266][T15671] RIP: 0033:0x7f23a818e969 [ 294.162275][T15671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.162286][T15671] RSP: 002b:00007f23a9013038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 294.162298][T15671] RAX: ffffffffffffffda RBX: 00007f23a83b5fa0 RCX: 00007f23a818e969 [ 294.162305][T15671] RDX: 00000000000a2f00 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 294.162338][T15671] RBP: 00007f23a9013090 R08: 0000000000000000 R09: 0000000000000000 [ 294.162348][T15671] R10: 00000000000000a3 R11: 0000000000000246 R12: 0000000000000001 [ 294.162355][T15671] R13: 0000000000000000 R14: 00007f23a83b5fa0 R15: 00007fffc1c03418 [ 294.162369][T15671] [ 294.359073][T15680] netlink: 'syz.2.3125': attribute type 1 has an invalid length. [ 294.377402][ T40] audit: type=1400 audit(2000000211.173:2166): avc: denied { setopt } for pid=15682 comm="syz.6.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 294.379469][T15680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.409998][T15685] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3127'. [ 294.413403][T15680] bond1: (slave veth3): Enslaving as an active interface with a down link [ 294.422152][T15680] vlan2: entered allmulticast mode [ 294.423839][T15680] bond1: entered allmulticast mode [ 294.426175][T15680] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 294.431923][ T67] Bluetooth: hci1: command tx timeout [ 294.473872][T15686] netlink: 'syz.2.3125': attribute type 33 has an invalid length. [ 294.477114][T15686] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3125'. [ 294.507979][ T40] audit: type=1800 audit(2000000211.303:2167): pid=15686 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3125" name="/" dev="9p" ino=2 res=0 errno=0 [ 294.639247][T15690] lo speed is unknown, defaulting to 1000 [ 294.661159][T15696] FAULT_INJECTION: forcing a failure. [ 294.661159][T15696] name failslab, interval 1, probability 0, space 0, times 0 [ 294.666061][T15696] CPU: 2 UID: 0 PID: 15696 Comm: syz.0.3129 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 294.666085][T15696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 294.666096][T15696] Call Trace: [ 294.666100][T15696] [ 294.666105][T15696] dump_stack_lvl+0x16c/0x1f0 [ 294.666125][T15696] should_fail_ex+0x512/0x640 [ 294.666141][T15696] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 294.666155][T15696] should_failslab+0xc2/0x120 [ 294.666167][T15696] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 294.666179][T15696] ? __d_alloc+0x31/0xaa0 [ 294.666193][T15696] __d_alloc+0x31/0xaa0 [ 294.666204][T15696] ? lockdep_init_map_type+0x5c/0x280 [ 294.666217][T15696] d_alloc_pseudo+0x1c/0xc0 [ 294.666233][T15696] alloc_file_pseudo+0xcf/0x230 [ 294.666248][T15696] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 294.666266][T15696] sock_alloc_file+0x50/0x210 [ 294.666280][T15696] do_accept+0x240/0x530 [ 294.666298][T15696] ? do_raw_spin_lock+0x12c/0x2b0 [ 294.666333][T15696] ? __pfx_do_accept+0x10/0x10 [ 294.666358][T15696] __sys_accept4+0x100/0x1b0 [ 294.666375][T15696] ? __pfx___sys_accept4+0x10/0x10 [ 294.666393][T15696] ? __pfx_ksys_write+0x10/0x10 [ 294.666409][T15696] ? rcu_is_watching+0x12/0xc0 [ 294.666424][T15696] __x64_sys_accept4+0x96/0x100 [ 294.666441][T15696] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.666456][T15696] do_syscall_64+0xcd/0x260 [ 294.666472][T15696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.666484][T15696] RIP: 0033:0x7ff31c58e969 [ 294.666494][T15696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.666504][T15696] RSP: 002b:00007ff31d3ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 294.666515][T15696] RAX: ffffffffffffffda RBX: 00007ff31c7b6080 RCX: 00007ff31c58e969 [ 294.666522][T15696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 294.666529][T15696] RBP: 00007ff31d3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 294.666536][T15696] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 294.666542][T15696] R13: 0000000000000000 R14: 00007ff31c7b6080 R15: 00007ffe91cd0338 [ 294.666556][T15696] [ 294.755677][ C2] vkms_vblank_simulate: vblank timer overrun [ 294.839283][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3133'. [ 294.842396][T15704] FAULT_INJECTION: forcing a failure. [ 294.842396][T15704] name failslab, interval 1, probability 0, space 0, times 0 [ 294.846254][T15704] CPU: 0 UID: 0 PID: 15704 Comm: syz.0.3133 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 294.846269][T15704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 294.846276][T15704] Call Trace: [ 294.846281][T15704] [ 294.846285][T15704] dump_stack_lvl+0x16c/0x1f0 [ 294.846321][T15704] should_fail_ex+0x512/0x640 [ 294.846338][T15704] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 294.846352][T15704] should_failslab+0xc2/0x120 [ 294.846364][T15704] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 294.846376][T15704] ? __alloc_skb+0x2b2/0x380 [ 294.846390][T15704] __alloc_skb+0x2b2/0x380 [ 294.846401][T15704] ? __pfx___alloc_skb+0x10/0x10 [ 294.846413][T15704] ? genl_rcv_msg+0x4a0/0x800 [ 294.846428][T15704] ? genl_rcv_msg+0x4bb/0x800 [ 294.846448][T15704] netlink_ack+0x15d/0xb80 [ 294.846462][T15704] ? __lock_acquire+0xaa4/0x1ba0 [ 294.846483][T15704] netlink_rcv_skb+0x347/0x440 [ 294.846497][T15704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 294.846514][T15704] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 294.846536][T15704] ? __pfx_down_read+0x10/0x10 [ 294.846555][T15704] ? netlink_deliver_tap+0x1ae/0xd30 [ 294.846570][T15704] genl_rcv+0x28/0x40 [ 294.846584][T15704] netlink_unicast+0x53d/0x7f0 [ 294.846600][T15704] ? __pfx_netlink_unicast+0x10/0x10 [ 294.846619][T15704] netlink_sendmsg+0x8d1/0xdd0 [ 294.846635][T15704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.846655][T15704] ____sys_sendmsg+0xa98/0xc70 [ 294.846671][T15704] ? copy_msghdr_from_user+0x10a/0x160 [ 294.846684][T15704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.846706][T15704] ___sys_sendmsg+0x134/0x1d0 [ 294.846719][T15704] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.846752][T15704] __sys_sendmsg+0x16d/0x220 [ 294.846765][T15704] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.846781][T15704] ? rcu_is_watching+0x12/0xc0 [ 294.846799][T15704] do_syscall_64+0xcd/0x260 [ 294.846816][T15704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.846828][T15704] RIP: 0033:0x7ff31c58e969 [ 294.846837][T15704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.846848][T15704] RSP: 002b:00007ff31d3ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.846859][T15704] RAX: ffffffffffffffda RBX: 00007ff31c7b5fa0 RCX: 00007ff31c58e969 [ 294.846866][T15704] RDX: 0000000004000000 RSI: 0000200000000780 RDI: 0000000000000003 [ 294.846873][T15704] RBP: 00007ff31d3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 294.846880][T15704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.846886][T15704] R13: 0000000000000000 R14: 00007ff31c7b5fa0 R15: 00007ffe91cd0338 [ 294.846901][T15704] [ 295.103016][T15722] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20003 [ 295.130139][T15729] team0: Mode changed to "loadbalance" [ 295.133651][T15732] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3144'. [ 295.134184][T15729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3143'. [ 295.137977][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3144'. [ 295.144103][T15729] FAULT_INJECTION: forcing a failure. [ 295.144103][T15729] name failslab, interval 1, probability 0, space 0, times 0 [ 295.148275][T15729] CPU: 1 UID: 0 PID: 15729 Comm: syz.0.3143 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 295.148291][T15729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.148297][T15729] Call Trace: [ 295.148302][T15729] [ 295.148307][T15729] dump_stack_lvl+0x16c/0x1f0 [ 295.148327][T15729] should_fail_ex+0x512/0x640 [ 295.148343][T15729] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 295.148357][T15729] should_failslab+0xc2/0x120 [ 295.148370][T15729] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 295.148382][T15729] ? __alloc_skb+0x2b2/0x380 [ 295.148395][T15729] __alloc_skb+0x2b2/0x380 [ 295.148407][T15729] ? __pfx___alloc_skb+0x10/0x10 [ 295.148420][T15729] ? if_nlmsg_size+0x475/0xaf0 [ 295.148435][T15729] rtmsg_ifinfo_build_skb+0x81/0x280 [ 295.148453][T15729] rtmsg_ifinfo+0x9f/0x1a0 [ 295.148469][T15729] dev_close_many+0x2fc/0x630 [ 295.148487][T15729] ? __pfx_dev_close_many+0x10/0x10 [ 295.148503][T15729] ? __mutex_trylock_common+0xe9/0x250 [ 295.148522][T15729] ? __pfx___mutex_trylock_common+0x10/0x10 [ 295.148542][T15729] unregister_netdevice_many_notify+0x578/0x26f0 [ 295.148562][T15729] ? rcu_is_watching+0x12/0xc0 [ 295.148577][T15729] ? __mutex_lock+0x1ca/0xb90 [ 295.148595][T15729] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 295.148610][T15729] ? __pfx___mutex_lock+0x10/0x10 [ 295.148628][T15729] ? unregister_netdevice_queue+0x22e/0x3f0 [ 295.148643][T15729] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 295.148658][T15729] ? __nla_parse+0x40/0x60 [ 295.148670][T15729] rtnl_dellink+0x3cb/0xa80 [ 295.148682][T15729] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 295.148695][T15729] ? kasan_save_stack+0x33/0x60 [ 295.148705][T15729] ? kasan_save_track+0x14/0x30 [ 295.148714][T15729] ? kasan_save_free_info+0x3b/0x60 [ 295.148728][T15729] ? __kasan_slab_free+0x51/0x70 [ 295.148739][T15729] ? __pfx_rtnl_dellink+0x10/0x10 [ 295.148750][T15729] ? nlmon_xmit+0xa5/0xe0 [ 295.148765][T15729] ? netlink_deliver_tap+0xa87/0xd30 [ 295.148778][T15729] ? netlink_unicast+0x5df/0x7f0 [ 295.148813][T15729] ? __lock_acquire+0x5ca/0x1ba0 [ 295.148838][T15729] ? find_held_lock+0x2b/0x80 [ 295.148851][T15729] ? __pfx_rtnl_dellink+0x10/0x10 [ 295.148862][T15729] ? __pfx_rtnl_dellink+0x10/0x10 [ 295.148873][T15729] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 295.148887][T15729] ? __pfx_rtnl_dellink+0x10/0x10 [ 295.148899][T15729] rtnetlink_rcv_msg+0x95b/0xe90 [ 295.148914][T15729] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.148933][T15729] netlink_rcv_skb+0x16a/0x440 [ 295.148948][T15729] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.148962][T15729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.148983][T15729] ? netlink_deliver_tap+0x1ae/0xd30 [ 295.148999][T15729] netlink_unicast+0x53d/0x7f0 [ 295.149015][T15729] ? __pfx_netlink_unicast+0x10/0x10 [ 295.149033][T15729] netlink_sendmsg+0x8d1/0xdd0 [ 295.149049][T15729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.149068][T15729] ____sys_sendmsg+0xa98/0xc70 [ 295.149085][T15729] ? copy_msghdr_from_user+0x10a/0x160 [ 295.149098][T15729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.149120][T15729] ___sys_sendmsg+0x134/0x1d0 [ 295.149133][T15729] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.149162][T15729] __sys_sendmsg+0x16d/0x220 [ 295.149174][T15729] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.149190][T15729] ? rcu_is_watching+0x12/0xc0 [ 295.149207][T15729] do_syscall_64+0xcd/0x260 [ 295.149225][T15729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.149237][T15729] RIP: 0033:0x7ff31c58e969 [ 295.149247][T15729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.149258][T15729] RSP: 002b:00007ff31d3ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.149269][T15729] RAX: ffffffffffffffda RBX: 00007ff31c7b5fa0 RCX: 00007ff31c58e969 [ 295.149276][T15729] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 295.149283][T15729] RBP: 00007ff31d3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 295.149290][T15729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.149296][T15729] R13: 0000000000000000 R14: 00007ff31c7b5fa0 R15: 00007ffe91cd0338 [ 295.149310][T15729] [ 295.486484][T15750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3150'. [ 295.490118][T15750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3150'. [ 295.512617][T15752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3151'. [ 295.525464][T15754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15754 comm=syz.0.3152 [ 295.547559][T15758] FAULT_INJECTION: forcing a failure. [ 295.547559][T15758] name failslab, interval 1, probability 0, space 0, times 0 [ 295.553146][T15758] CPU: 3 UID: 0 PID: 15758 Comm: syz.2.3153 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 295.553186][T15758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.553197][T15758] Call Trace: [ 295.553203][T15758] [ 295.553211][T15758] dump_stack_lvl+0x16c/0x1f0 [ 295.553241][T15758] should_fail_ex+0x512/0x640 [ 295.553266][T15758] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 295.553288][T15758] should_failslab+0xc2/0x120 [ 295.553308][T15758] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 295.553327][T15758] ? __alloc_skb+0x2b2/0x380 [ 295.553346][T15758] ? bpf_lsm_capable+0x9/0x10 [ 295.553366][T15758] __alloc_skb+0x2b2/0x380 [ 295.553384][T15758] ? __pfx___alloc_skb+0x10/0x10 [ 295.553403][T15758] ? genl_rcv_msg+0x4a0/0x800 [ 295.553428][T15758] ? genl_rcv_msg+0x4bb/0x800 [ 295.553459][T15758] netlink_ack+0x15d/0xb80 [ 295.553482][T15758] ? __lock_acquire+0xaa4/0x1ba0 [ 295.553531][T15758] netlink_rcv_skb+0x347/0x440 [ 295.553554][T15758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 295.553585][T15758] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.553625][T15758] ? __pfx_down_read+0x10/0x10 [ 295.553654][T15758] ? netlink_deliver_tap+0x1ae/0xd30 [ 295.553680][T15758] genl_rcv+0x28/0x40 [ 295.553703][T15758] netlink_unicast+0x53d/0x7f0 [ 295.553729][T15758] ? __pfx_netlink_unicast+0x10/0x10 [ 295.553761][T15758] netlink_sendmsg+0x8d1/0xdd0 [ 295.553790][T15758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.553824][T15758] ____sys_sendmsg+0xa98/0xc70 [ 295.553850][T15758] ? copy_msghdr_from_user+0x10a/0x160 [ 295.553870][T15758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.553907][T15758] ___sys_sendmsg+0x134/0x1d0 [ 295.553929][T15758] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.553983][T15758] __sys_sendmsg+0x16d/0x220 [ 295.554003][T15758] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.554042][T15758] do_syscall_64+0xcd/0x260 [ 295.554069][T15758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.554087][T15758] RIP: 0033:0x7fc14478e969 [ 295.554103][T15758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.554120][T15758] RSP: 002b:00007fc145546038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.554138][T15758] RAX: ffffffffffffffda RBX: 00007fc1449b5fa0 RCX: 00007fc14478e969 [ 295.554150][T15758] RDX: 0000000000040000 RSI: 0000200000000840 RDI: 0000000000000003 [ 295.554161][T15758] RBP: 00007fc145546090 R08: 0000000000000000 R09: 0000000000000000 [ 295.554172][T15758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.554183][T15758] R13: 0000000000000000 R14: 00007fc1449b5fa0 R15: 00007ffc8ab99ec8 [ 295.554209][T15758] [ 295.674331][T15761] FAULT_INJECTION: forcing a failure. [ 295.674331][T15761] name failslab, interval 1, probability 0, space 0, times 0 [ 295.680173][T15761] CPU: 2 UID: 0 PID: 15761 Comm: syz.6.3154 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 295.680199][T15761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.680210][T15761] Call Trace: [ 295.680217][T15761] [ 295.680223][T15761] dump_stack_lvl+0x16c/0x1f0 [ 295.680256][T15761] should_fail_ex+0x512/0x640 [ 295.680286][T15761] should_failslab+0xc2/0x120 [ 295.680308][T15761] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 295.680327][T15761] ? do_raw_spin_lock+0x12c/0x2b0 [ 295.680347][T15761] ? inet_bind_bucket_create+0x2d/0x280 [ 295.680380][T15761] inet_bind_bucket_create+0x2d/0x280 [ 295.680411][T15761] inet_csk_get_port+0x1142/0x27c0 [ 295.680450][T15761] __inet_bind+0x57f/0xd90 [ 295.680483][T15761] inet_bind_sk+0x179/0x230 [ 295.680511][T15761] ? __pfx_inet_bind_sk+0x10/0x10 [ 295.680548][T15761] kernel_bind+0xfc/0x180 [ 295.680571][T15761] ? __pfx_kernel_bind+0x10/0x10 [ 295.680606][T15761] ? __local_bh_enable_ip+0xa4/0x120 [ 295.680635][T15761] smc_bind+0x2f8/0x3b0 [ 295.680670][T15761] __sys_bind+0x214/0x260 [ 295.680699][T15761] ? __pfx___sys_bind+0x10/0x10 [ 295.680723][T15761] ? __fget_files+0x20e/0x3c0 [ 295.680752][T15761] ? __pfx_ksys_write+0x10/0x10 [ 295.680777][T15761] ? rcu_is_watching+0x12/0xc0 [ 295.680805][T15761] __x64_sys_bind+0x72/0xb0 [ 295.680835][T15761] ? lockdep_hardirqs_on+0x7c/0x110 [ 295.680861][T15761] do_syscall_64+0xcd/0x260 [ 295.680889][T15761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.680908][T15761] RIP: 0033:0x7f23a818e969 [ 295.680924][T15761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.680941][T15761] RSP: 002b:00007f23a9013038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 295.680959][T15761] RAX: ffffffffffffffda RBX: 00007f23a83b5fa0 RCX: 00007f23a818e969 [ 295.680971][T15761] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 295.680984][T15761] RBP: 00007f23a9013090 R08: 0000000000000000 R09: 0000000000000000 [ 295.680996][T15761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.681007][T15761] R13: 0000000000000000 R14: 00007f23a83b5fa0 R15: 00007fffc1c03418 [ 295.681032][T15761] [ 295.713723][T15764] lo speed is unknown, defaulting to 1000 [ 295.714591][ C2] vkms_vblank_simulate: vblank timer overrun [ 295.770643][ C2] vkms_vblank_simulate: vblank timer overrun [ 295.772534][ C2] hrtimer: interrupt took 91476512 ns [ 295.858502][ T40] audit: type=1400 audit(2000000212.643:2168): avc: denied { create } for pid=15766 comm="syz.2.3157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 295.864089][ C2] vkms_vblank_simulate: vblank timer overrun [ 295.902211][T15772] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 295.905774][T15772] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3159'. [ 295.912231][T15769] fuse: Unknown parameter 'u' [ 295.922820][T15774] FAULT_INJECTION: forcing a failure. [ 295.922820][T15774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.926902][T15774] CPU: 2 UID: 0 PID: 15774 Comm: syz.0.3160 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 295.926918][T15774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.926925][T15774] Call Trace: [ 295.926929][T15774] [ 295.926934][T15774] dump_stack_lvl+0x16c/0x1f0 [ 295.926955][T15774] should_fail_ex+0x512/0x640 [ 295.926973][T15774] _copy_to_user+0x32/0xd0 [ 295.926991][T15774] simple_read_from_buffer+0xcb/0x170 [ 295.927010][T15774] proc_fail_nth_read+0x197/0x270 [ 295.927029][T15774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.927046][T15774] ? rw_verify_area+0xcf/0x680 [ 295.927062][T15774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.927079][T15774] vfs_read+0x1e1/0xc70 [ 295.927098][T15774] ? __pfx___mutex_lock+0x10/0x10 [ 295.927115][T15774] ? __pfx_vfs_read+0x10/0x10 [ 295.927135][T15774] ? __fget_files+0x20e/0x3c0 [ 295.927150][T15774] ksys_read+0x12a/0x240 [ 295.927167][T15774] ? __pfx_ksys_read+0x10/0x10 [ 295.927183][T15774] ? rcu_is_watching+0x12/0xc0 [ 295.927201][T15774] do_syscall_64+0xcd/0x260 [ 295.927219][T15774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.927231][T15774] RIP: 0033:0x7ff31c58d37c [ 295.927240][T15774] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 295.927251][T15774] RSP: 002b:00007ff31d3ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.927262][T15774] RAX: ffffffffffffffda RBX: 00007ff31c7b5fa0 RCX: 00007ff31c58d37c [ 295.927269][T15774] RDX: 000000000000000f RSI: 00007ff31d3ef0a0 RDI: 0000000000000005 [ 295.927276][T15774] RBP: 00007ff31d3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 295.927282][T15774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.927289][T15774] R13: 0000000000000000 R14: 00007ff31c7b5fa0 R15: 00007ffe91cd0338 [ 295.927302][T15774] [ 295.991667][ C2] vkms_vblank_simulate: vblank timer overrun [ 296.083386][ T40] audit: type=1400 audit(2000000212.873:2169): avc: denied { mounton } for pid=15784 comm="syz.2.3164" path="/proc/372/task" dev="proc" ino=69408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 296.107769][T15785] sp0: Synchronizing with TNC [ 296.109991][T15785] [U] è [ 296.130187][ T40] audit: type=1400 audit(2000000212.913:2170): avc: denied { write } for pid=15796 comm="syz.0.3167" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 296.138233][T15797] binder: BINDER_SET_CONTEXT_MGR already set [ 296.140173][T15797] binder: 15796:15797 ioctl 4018620d 200000000040 returned -16 [ 296.145777][T15797] ip6t_rpfilter: unknown options [ 296.147718][T15798] QAT: Invalid ioctl -1072131208 [ 296.149362][T15797] QAT: Invalid ioctl -1072131208 [ 296.152408][T15798] QAT: Invalid ioctl -2144835806 [ 296.396401][T15825] FAULT_INJECTION: forcing a failure. [ 296.396401][T15825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.400821][T15825] CPU: 2 UID: 0 PID: 15825 Comm: syz.1.3176 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 296.400842][T15825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 296.400859][T15825] Call Trace: [ 296.400865][T15825] [ 296.400870][T15825] dump_stack_lvl+0x16c/0x1f0 [ 296.400905][T15825] should_fail_ex+0x512/0x640 [ 296.400928][T15825] _copy_from_iter+0x2a4/0x15b0 [ 296.400946][T15825] ? __lock_acquire+0xaa4/0x1ba0 [ 296.400963][T15825] ? tcp_leave_memory_pressure+0x1f/0x100 [ 296.400980][T15825] ? sk_leave_memory_pressure+0x7c/0x130 [ 296.400996][T15825] ? __pfx__copy_from_iter+0x10/0x10 [ 296.401011][T15825] ? __sk_mem_raise_allocated+0x895/0x1700 [ 296.401026][T15825] ? skb_page_frag_refill+0x11d/0x5a0 [ 296.401046][T15825] sk_msg_memcopy_from_iter+0x3f6/0x5c0 [ 296.401069][T15825] tcp_bpf_sendmsg+0x79b/0x1b80 [ 296.401092][T15825] ? __pfx_tcp_bpf_sendmsg+0x10/0x10 [ 296.401139][T15825] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 296.401161][T15825] ? __import_iovec+0x1c8/0x660 [ 296.401178][T15825] ? __might_fault+0xe3/0x190 [ 296.401189][T15825] ? __might_fault+0x13b/0x190 [ 296.401200][T15825] ? __pfx_tcp_bpf_sendmsg+0x10/0x10 [ 296.401214][T15825] inet6_sendmsg+0x119/0x140 [ 296.401228][T15825] ____sys_sendmsg+0x705/0xc70 [ 296.401244][T15825] ? copy_msghdr_from_user+0x10a/0x160 [ 296.401256][T15825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.401274][T15825] ? __pfx__kstrtoull+0x10/0x10 [ 296.401290][T15825] ___sys_sendmsg+0x134/0x1d0 [ 296.401303][T15825] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.401323][T15825] ? find_held_lock+0x2b/0x80 [ 296.401346][T15825] __sys_sendmmsg+0x200/0x420 [ 296.401360][T15825] ? __pfx___sys_sendmmsg+0x10/0x10 [ 296.401378][T15825] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 296.401401][T15825] ? fput+0x70/0xf0 [ 296.401414][T15825] ? ksys_write+0x1b9/0x240 [ 296.401431][T15825] ? __pfx_ksys_write+0x10/0x10 [ 296.401448][T15825] ? rcu_is_watching+0x12/0xc0 [ 296.401464][T15825] __x64_sys_sendmmsg+0x9c/0x100 [ 296.401476][T15825] ? lockdep_hardirqs_on+0x7c/0x110 [ 296.401492][T15825] do_syscall_64+0xcd/0x260 [ 296.401509][T15825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.401520][T15825] RIP: 0033:0x7f2301f8e969 [ 296.401530][T15825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.401541][T15825] RSP: 002b:00007f2302d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 296.401552][T15825] RAX: ffffffffffffffda RBX: 00007f23021b5fa0 RCX: 00007f2301f8e969 [ 296.401559][T15825] RDX: 0000000000000001 RSI: 0000200000002440 RDI: 0000000000000003 [ 296.401566][T15825] RBP: 00007f2302d27090 R08: 0000000000000000 R09: 0000000000000000 [ 296.401572][T15825] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 296.401579][T15825] R13: 0000000000000000 R14: 00007f23021b5fa0 R15: 00007fff4e306878 [ 296.401593][T15825] [ 296.503492][ C2] vkms_vblank_simulate: vblank timer overrun [ 296.511274][ T67] Bluetooth: hci1: command tx timeout [ 296.514004][T15827] FAULT_INJECTION: forcing a failure. [ 296.514004][T15827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.519051][T15827] CPU: 3 UID: 0 PID: 15827 Comm: syz.0.3177 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 296.519067][T15827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 296.519074][T15827] Call Trace: [ 296.519078][T15827] [ 296.519083][T15827] dump_stack_lvl+0x16c/0x1f0 [ 296.519103][T15827] should_fail_ex+0x512/0x640 [ 296.519122][T15827] _copy_to_user+0x32/0xd0 [ 296.519140][T15827] simple_read_from_buffer+0xcb/0x170 [ 296.519159][T15827] proc_fail_nth_read+0x197/0x270 [ 296.519177][T15827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.519195][T15827] ? rw_verify_area+0xcf/0x680 [ 296.519210][T15827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.519229][T15827] vfs_read+0x1e1/0xc70 [ 296.519248][T15827] ? __pfx___mutex_lock+0x10/0x10 [ 296.519265][T15827] ? __pfx_vfs_read+0x10/0x10 [ 296.519285][T15827] ? __fget_files+0x20e/0x3c0 [ 296.519300][T15827] ksys_read+0x12a/0x240 [ 296.519317][T15827] ? __pfx_ksys_read+0x10/0x10 [ 296.519333][T15827] ? v4l2_ioctl+0x1c5/0x250 [ 296.519350][T15827] do_syscall_64+0xcd/0x260 [ 296.519368][T15827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.519380][T15827] RIP: 0033:0x7ff31c58d37c [ 296.519389][T15827] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 296.519401][T15827] RSP: 002b:00007ff31d3ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 296.519411][T15827] RAX: ffffffffffffffda RBX: 00007ff31c7b5fa0 RCX: 00007ff31c58d37c [ 296.519419][T15827] RDX: 000000000000000f RSI: 00007ff31d3ef0a0 RDI: 0000000000000008 [ 296.519426][T15827] RBP: 00007ff31d3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 296.519433][T15827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.519439][T15827] R13: 0000000000000000 R14: 00007ff31c7b5fa0 R15: 00007ffe91cd0338 [ 296.519454][T15827] [ 296.746060][T15849] FAULT_INJECTION: forcing a failure. [ 296.746060][T15849] name failslab, interval 1, probability 0, space 0, times 0 [ 296.752174][T15849] CPU: 3 UID: 0 PID: 15849 Comm: syz.1.3183 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 296.752191][T15849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 296.752198][T15849] Call Trace: [ 296.752202][T15849] [ 296.752207][T15849] dump_stack_lvl+0x16c/0x1f0 [ 296.752227][T15849] should_fail_ex+0x512/0x640 [ 296.752243][T15849] ? __kmalloc_noprof+0xbf/0x510 [ 296.752256][T15849] ? lsm_blob_alloc+0x68/0x90 [ 296.752267][T15849] should_failslab+0xc2/0x120 [ 296.752280][T15849] __kmalloc_noprof+0xd2/0x510 [ 296.752290][T15849] ? __pfx_perf_event_init_task+0x10/0x10 [ 296.752307][T15849] ? audit_alloc+0xa2/0x7b0 [ 296.752322][T15849] lsm_blob_alloc+0x68/0x90 [ 296.752334][T15849] security_task_alloc+0x2d/0x260 [ 296.752354][T15849] copy_process+0x24ba/0x91a0 [ 296.752369][T15849] ? kasan_save_track+0x14/0x30 [ 296.752378][T15849] ? __kasan_kmalloc+0xaa/0xb0 [ 296.752395][T15849] ? vhost_task_create+0xe5/0x2e0 [ 296.752406][T15849] ? kvm_mmu_post_init_vm+0x1b7/0x370 [ 296.752423][T15849] ? kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 296.752440][T15849] ? kvm_vcpu_ioctl+0x5e9/0x1680 [ 296.752456][T15849] ? __x64_sys_ioctl+0x193/0x200 [ 296.752470][T15849] ? do_syscall_64+0xcd/0x260 [ 296.752485][T15849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.752504][T15849] ? __pfx_copy_process+0x10/0x10 [ 296.752527][T15849] ? lockdep_init_map_type+0x5c/0x280 [ 296.752539][T15849] ? lockdep_init_map_type+0x5c/0x280 [ 296.752550][T15849] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 296.752563][T15849] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 296.752578][T15849] vhost_task_create+0x1d2/0x2e0 [ 296.752590][T15849] ? __pfx_vhost_task_create+0x10/0x10 [ 296.752602][T15849] ? register_lock_class+0x41/0x4c0 [ 296.752623][T15849] ? __pfx_vhost_task_fn+0x10/0x10 [ 296.752636][T15849] ? kvm_vcpu_ioctl+0x27e/0x1680 [ 296.752656][T15849] kvm_mmu_post_init_vm+0x1b7/0x370 [ 296.752675][T15849] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 296.752692][T15849] ? kvm_vcpu_ioctl+0x14c2/0x1680 [ 296.752712][T15849] kvm_vcpu_ioctl+0x5e9/0x1680 [ 296.752730][T15849] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 296.752751][T15849] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 296.752771][T15849] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 296.752794][T15849] ? hook_file_ioctl_common+0x145/0x410 [ 296.752816][T15849] ? selinux_file_ioctl+0x180/0x270 [ 296.752833][T15849] ? selinux_file_ioctl+0xb4/0x270 [ 296.752851][T15849] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 296.752868][T15849] __x64_sys_ioctl+0x193/0x200 [ 296.752885][T15849] do_syscall_64+0xcd/0x260 [ 296.752902][T15849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.752913][T15849] RIP: 0033:0x7f2301f8e969 [ 296.752922][T15849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.752933][T15849] RSP: 002b:00007f2302d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.752944][T15849] RAX: ffffffffffffffda RBX: 00007f23021b5fa0 RCX: 00007f2301f8e969 [ 296.752951][T15849] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 296.752967][T15849] RBP: 00007f2302d27090 R08: 0000000000000000 R09: 0000000000000000 [ 296.752974][T15849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.752980][T15849] R13: 0000000000000000 R14: 00007f23021b5fa0 R15: 00007fff4e306878 [ 296.752995][T15849] [ 296.794954][T15853] fuse: Unknown parameter 'use00000000000000000000' [ 296.896999][T15836] team0 (unregistering): Port device team_slave_0 removed [ 296.929791][T15836] team0 (unregistering): Port device team_slave_1 removed [ 296.946806][ T5975] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 296.973028][T15860] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 297.064151][T15862] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 297.074025][T15862] FAULT_INJECTION: forcing a failure. [ 297.074025][T15862] name failslab, interval 1, probability 0, space 0, times 0 [ 297.078100][T15862] CPU: 0 UID: 0 PID: 15862 Comm: syz.1.3189 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 297.078117][T15862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 297.078124][T15862] Call Trace: [ 297.078129][T15862] [ 297.078134][T15862] dump_stack_lvl+0x16c/0x1f0 [ 297.078154][T15862] should_fail_ex+0x512/0x640 [ 297.078170][T15862] ? fs_reclaim_acquire+0xae/0x150 [ 297.078187][T15862] ? tomoyo_encode2+0x100/0x3e0 [ 297.078203][T15862] should_failslab+0xc2/0x120 [ 297.078216][T15862] __kmalloc_noprof+0xd2/0x510 [ 297.078228][T15862] ? d_absolute_path+0x136/0x1a0 [ 297.078244][T15862] tomoyo_encode2+0x100/0x3e0 [ 297.078263][T15862] tomoyo_encode+0x29/0x50 [ 297.078278][T15862] tomoyo_realpath_from_path+0x18f/0x6e0 [ 297.078322][T15862] tomoyo_path_perm+0x274/0x460 [ 297.078336][T15862] ? tomoyo_path_perm+0x260/0x460 [ 297.078351][T15862] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 297.078367][T15862] ? filename_lookup+0x421/0x5f0 [ 297.078397][T15862] ? __might_fault+0xe3/0x190 [ 297.078408][T15862] ? __might_fault+0xe3/0x190 [ 297.078418][T15862] ? __might_fault+0x13b/0x190 [ 297.078432][T15862] security_inode_getattr+0x116/0x290 [ 297.078448][T15862] vfs_statx+0x11d/0x3e0 [ 297.078462][T15862] ? __pfx_vfs_statx+0x10/0x10 [ 297.078474][T15862] ? getname_flags.part.0+0x1c5/0x550 [ 297.078491][T15862] __do_sys_newlstat+0xb2/0x140 [ 297.078505][T15862] ? __pfx___do_sys_newlstat+0x10/0x10 [ 297.078526][T15862] ? __pfx_ksys_write+0x10/0x10 [ 297.078542][T15862] ? rcu_is_watching+0x12/0xc0 [ 297.078559][T15862] ? rcu_is_watching+0x12/0xc0 [ 297.078573][T15862] do_syscall_64+0xcd/0x260 [ 297.078590][T15862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.078602][T15862] RIP: 0033:0x7f2301f8e969 [ 297.078612][T15862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.078623][T15862] RSP: 002b:00007f2302d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 297.078634][T15862] RAX: ffffffffffffffda RBX: 00007f23021b5fa0 RCX: 00007f2301f8e969 [ 297.078641][T15862] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000200000000680 [ 297.078648][T15862] RBP: 00007f2302d27090 R08: 0000000000000000 R09: 0000000000000000 [ 297.078654][T15862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.078661][T15862] R13: 0000000000000000 R14: 00007f23021b5fa0 R15: 00007fff4e306878 [ 297.078675][T15862] [ 297.078687][T15862] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.101218][ T5975] usb 7-1: Using ep0 maxpacket: 8 [ 297.171038][ T5975] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 297.173922][ T5975] usb 7-1: config 0 has no interface number 0 [ 297.175894][ T5975] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 297.179242][ T5975] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 297.184021][ T5975] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 297.187513][ T5975] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 297.191725][ T5975] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 297.194571][ T5975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.199206][ T5975] usb 7-1: config 0 descriptor?? [ 297.206528][ T5975] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 297.218147][T15868] input: syz0 as /devices/virtual/input/input28 [ 297.263920][T15875] fuse: Unknown parameter 'use00000000000000000000' [ 297.405721][T15847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.414456][T15847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.456632][T15901] fuse: Unknown parameter 'user_i00000000000000000000' [ 297.489958][ T5975] usb 7-1: USB disconnect, device number 19 [ 297.496946][ T5975] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 297.528123][ T40] audit: type=1400 audit(2000000214.313:2171): avc: denied { ioctl } for pid=15907 comm="syz.1.3207" path="/202/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 297.543827][ T40] audit: type=1800 audit(2000000214.313:2172): pid=15908 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3207" name="/" dev="9p" ino=2 res=0 errno=0 [ 297.628244][T15923] FAULT_INJECTION: forcing a failure. [ 297.628244][T15923] name failslab, interval 1, probability 0, space 0, times 0 [ 297.628287][T15923] CPU: 3 UID: 0 PID: 15923 Comm: syz.1.3210 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 297.628302][T15923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 297.628309][T15923] Call Trace: [ 297.628312][T15923] [ 297.628317][T15923] dump_stack_lvl+0x16c/0x1f0 [ 297.628336][T15923] should_fail_ex+0x512/0x640 [ 297.628353][T15923] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 297.628372][T15923] should_failslab+0xc2/0x120 [ 297.628385][T15923] __kmalloc_cache_noprof+0x6a/0x3e0 [ 297.628402][T15923] ? do_raw_spin_unlock+0x172/0x230 [ 297.628414][T15923] ? p9_fid_create+0x41/0x260 [ 297.628433][T15923] p9_fid_create+0x41/0x260 [ 297.628449][T15923] p9_client_walk+0xc5/0x530 [ 297.628460][T15923] ? __pfx_p9_client_walk+0x10/0x10 [ 297.628473][T15923] ? v9fs_fid_lookup+0xe9/0xeb0 [ 297.628489][T15923] v9fs_file_open+0x599/0xab0 [ 297.628502][T15923] ? __pfx_v9fs_file_open+0x10/0x10 [ 297.628515][T15923] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 297.628536][T15923] do_dentry_open+0x741/0x1c10 [ 297.628554][T15923] ? __pfx_v9fs_file_open+0x10/0x10 [ 297.628576][T15923] vfs_open+0x82/0x3f0 [ 297.628591][T15923] path_openat+0x1e5e/0x2d40 [ 297.628608][T15923] ? __pfx_path_openat+0x10/0x10 [ 297.628622][T15923] do_filp_open+0x20b/0x470 [ 297.628633][T15923] ? __pfx_do_filp_open+0x10/0x10 [ 297.628653][T15923] ? alloc_fd+0x471/0x7d0 [ 297.628667][T15923] do_sys_openat2+0x11b/0x1d0 [ 297.628681][T15923] ? __pfx_do_sys_openat2+0x10/0x10 [ 297.628696][T15923] ? __fget_files+0x20e/0x3c0 [ 297.628709][T15923] __x64_sys_openat+0x174/0x210 [ 297.628723][T15923] ? __pfx___x64_sys_openat+0x10/0x10 [ 297.628736][T15923] ? ksys_write+0x1b9/0x240 [ 297.628753][T15923] ? rcu_is_watching+0x12/0xc0 [ 297.628771][T15923] do_syscall_64+0xcd/0x260 [ 297.628788][T15923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.628814][T15923] RIP: 0033:0x7f2301f8e969 [ 297.628824][T15923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.628835][T15923] RSP: 002b:00007f2302d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 297.628846][T15923] RAX: ffffffffffffffda RBX: 00007f23021b5fa0 RCX: 00007f2301f8e969 [ 297.628853][T15923] RDX: 00000000000a2f00 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 297.628860][T15923] RBP: 00007f2302d27090 R08: 0000000000000000 R09: 0000000000000000 [ 297.628867][T15923] R10: 00000000000000a3 R11: 0000000000000246 R12: 0000000000000001 [ 297.628874][T15923] R13: 0000000000000000 R14: 00007f23021b5fa0 R15: 00007fff4e306878 [ 297.628888][T15923] [ 297.682599][ T40] audit: type=1400 audit(2000000214.483:2173): avc: denied { write } for pid=15918 comm="syz.2.3211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 297.703761][T15928] FAULT_INJECTION: forcing a failure. [ 297.703761][T15928] name failslab, interval 1, probability 0, space 0, times 0 [ 297.743429][T15928] CPU: 2 UID: 0 PID: 15928 Comm: syz.0.3214 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 297.743446][T15928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 297.743453][T15928] Call Trace: [ 297.743457][T15928] [ 297.743462][T15928] dump_stack_lvl+0x16c/0x1f0 [ 297.743482][T15928] should_fail_ex+0x512/0x640 [ 297.743498][T15928] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 297.743511][T15928] should_failslab+0xc2/0x120 [ 297.743524][T15928] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 297.743535][T15928] ? __alloc_skb+0x2b2/0x380 [ 297.743553][T15928] ? bpf_lsm_capable+0x9/0x10 [ 297.743565][T15928] __alloc_skb+0x2b2/0x380 [ 297.743576][T15928] ? __pfx___alloc_skb+0x10/0x10 [ 297.743588][T15928] ? genl_rcv_msg+0x4a0/0x800 [ 297.743603][T15928] ? genl_rcv_msg+0x4bb/0x800 [ 297.743623][T15928] netlink_ack+0x15d/0xb80 [ 297.743637][T15928] ? __lock_acquire+0xaa4/0x1ba0 [ 297.743658][T15928] netlink_rcv_skb+0x347/0x440 [ 297.743672][T15928] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.743689][T15928] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.743710][T15928] ? __pfx_down_read+0x10/0x10 [ 297.743729][T15928] ? netlink_deliver_tap+0x1ae/0xd30 [ 297.743744][T15928] genl_rcv+0x28/0x40 [ 297.743758][T15928] netlink_unicast+0x53d/0x7f0 [ 297.743774][T15928] ? __pfx_netlink_unicast+0x10/0x10 [ 297.743792][T15928] netlink_sendmsg+0x8d1/0xdd0 [ 297.743809][T15928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.743828][T15928] ____sys_sendmsg+0xa98/0xc70 [ 297.743845][T15928] ? copy_msghdr_from_user+0x10a/0x160 [ 297.743857][T15928] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.743879][T15928] ___sys_sendmsg+0x134/0x1d0 [ 297.743892][T15928] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.743921][T15928] __sys_sendmsg+0x16d/0x220 [ 297.743933][T15928] ? __pfx___sys_sendmsg+0x10/0x10 [ 297.743950][T15928] ? rcu_is_watching+0x12/0xc0 [ 297.743968][T15928] do_syscall_64+0xcd/0x260 [ 297.743985][T15928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.743997][T15928] RIP: 0033:0x7ff31c58e969 [ 297.744007][T15928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.744018][T15928] RSP: 002b:00007ff31d3ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.744029][T15928] RAX: ffffffffffffffda RBX: 00007ff31c7b5fa0 RCX: 00007ff31c58e969 [ 297.744037][T15928] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 297.744043][T15928] RBP: 00007ff31d3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 297.744050][T15928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.744056][T15928] R13: 0000000000000000 R14: 00007ff31c7b5fa0 R15: 00007ffe91cd0338 [ 297.744070][T15928] [ 297.794941][T15934] FAULT_INJECTION: forcing a failure. [ 297.794941][T15934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.870408][T15934] CPU: 1 UID: 0 PID: 15934 Comm: syz.0.3215 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 297.870427][T15934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 297.870434][T15934] Call Trace: [ 297.870438][T15934] [ 297.870443][T15934] dump_stack_lvl+0x16c/0x1f0 [ 297.870464][T15934] should_fail_ex+0x512/0x640 [ 297.870482][T15934] _copy_to_user+0x32/0xd0 [ 297.870500][T15934] simple_read_from_buffer+0xcb/0x170 [ 297.870519][T15934] proc_fail_nth_read+0x197/0x270 [ 297.870552][T15934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.870570][T15934] ? rw_verify_area+0xcf/0x680 [ 297.870585][T15934] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.870602][T15934] vfs_read+0x1e1/0xc70 [ 297.870621][T15934] ? __pfx___mutex_lock+0x10/0x10 [ 297.870637][T15934] ? __pfx_vfs_read+0x10/0x10 [ 297.870657][T15934] ? __fget_files+0x20e/0x3c0 [ 297.870672][T15934] ksys_read+0x12a/0x240 [ 297.870689][T15934] ? __pfx_ksys_read+0x10/0x10 [ 297.870709][T15934] do_syscall_64+0xcd/0x260 [ 297.870728][T15934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.870740][T15934] RIP: 0033:0x7ff31c58d37c [ 297.870750][T15934] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 297.870761][T15934] RSP: 002b:00007ff31d3ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 297.870772][T15934] RAX: ffffffffffffffda RBX: 00007ff31c7b5fa0 RCX: 00007ff31c58d37c [ 297.870779][T15934] RDX: 000000000000000f RSI: 00007ff31d3ef0a0 RDI: 0000000000000006 [ 297.870789][T15934] RBP: 00007ff31d3ef090 R08: 0000000000000000 R09: 0000000000000000 [ 297.870796][T15934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.870802][T15934] R13: 0000000000000000 R14: 00007ff31c7b5fa0 R15: 00007ffe91cd0338 [ 297.870817][T15934] [ 297.918027][T15940] FAULT_INJECTION: forcing a failure. [ 297.918027][T15940] name failslab, interval 1, probability 0, space 0, times 0 [ 297.970517][T15940] CPU: 0 UID: 0 PID: 15940 Comm: syz.1.3217 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 297.970544][T15940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 297.970551][T15940] Call Trace: [ 297.970556][T15940] [ 297.970561][T15940] dump_stack_lvl+0x16c/0x1f0 [ 297.970583][T15940] should_fail_ex+0x512/0x640 [ 297.970601][T15940] should_failslab+0xc2/0x120 [ 297.970614][T15940] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 297.970627][T15940] ? skb_clone+0x190/0x3f0 [ 297.970642][T15940] skb_clone+0x190/0x3f0 [ 297.970655][T15940] dev_queue_xmit_nit+0x3e7/0xca0 [ 297.970673][T15940] dev_hard_start_xmit+0x5b6/0x740 [ 297.970694][T15940] __dev_queue_xmit+0x7eb/0x43e0 [ 297.970713][T15940] ? ebt_do_table+0x1bcf/0x21a0 [ 297.970729][T15940] ? __local_bh_enable_ip+0xa4/0x120 [ 297.970743][T15940] ? lockdep_hardirqs_on+0x7c/0x110 [ 297.970759][T15940] ? ebt_do_table+0x1bcf/0x21a0 [ 297.970772][T15940] ? __local_bh_enable_ip+0xa4/0x120 [ 297.970787][T15940] ? __pfx___dev_queue_xmit+0x10/0x10 [ 297.970807][T15940] ? __lock_acquire+0x5ca/0x1ba0 [ 297.970830][T15940] ? br_nf_post_routing+0x59b/0x1190 [ 297.970842][T15940] ? find_held_lock+0x2b/0x80 [ 297.970856][T15940] ? nf_hook+0x48d/0x780 [ 297.970875][T15940] ? nf_hook_slow+0x132/0x200 [ 297.970890][T15940] br_dev_queue_push_xmit+0x272/0x8a0 [ 297.970910][T15940] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 297.970927][T15940] ? __pfx_br_forward_finish+0x10/0x10 [ 297.970947][T15940] br_forward_finish+0xf5/0x130 [ 297.970965][T15940] __br_forward+0x1e5/0x5b0 [ 297.970983][T15940] maybe_deliver+0xf1/0x180 [ 297.971001][T15940] br_flood+0x17c/0x650 [ 297.971022][T15940] br_dev_xmit+0x14d1/0x1880 [ 297.971037][T15940] ? __pfx_br_dev_xmit+0x10/0x10 [ 297.971051][T15940] ? find_held_lock+0x2b/0x80 [ 297.971068][T15940] ? dev_queue_xmit_nit+0x929/0xca0 [ 297.971082][T15940] ? rcu_lockdep_current_cpu_online+0x35/0x150 [ 297.971099][T15940] dev_hard_start_xmit+0x96/0x740 [ 297.971118][T15940] __dev_queue_xmit+0x7eb/0x43e0 [ 297.971139][T15940] ? find_held_lock+0x2b/0x80 [ 297.971152][T15940] ? __might_fault+0xe3/0x190 [ 297.971163][T15940] ? __might_fault+0xe3/0x190 [ 297.971173][T15940] ? __might_fault+0x13b/0x190 [ 297.971183][T15940] ? __pfx___dev_queue_xmit+0x10/0x10 [ 297.971203][T15940] ? _copy_from_iter+0x161/0x15b0 [ 297.971224][T15940] ? skb_partial_csum_set+0x202/0x3a0 [ 297.971240][T15940] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.971253][T15940] ? virtio_net_hdr_to_skb.constprop.0+0x817/0x1420 [ 297.971273][T15940] ? __pfx_virtio_net_hdr_to_skb.constprop.0+0x10/0x10 [ 297.971290][T15940] ? dev_get_by_index+0x17c/0x380 [ 297.971303][T15940] packet_xmit+0x23e/0x360 [ 297.971319][T15940] packet_sendmsg+0x37c8/0x56f0 [ 297.971344][T15940] ? sock_has_perm+0x259/0x2f0 [ 297.971358][T15940] ? __pfx_sock_has_perm+0x10/0x10 [ 297.971373][T15940] ? __pfx_packet_sendmsg+0x10/0x10 [ 297.971396][T15940] __sys_sendto+0x495/0x510 [ 297.971408][T15940] ? __pfx___sys_sendto+0x10/0x10 [ 297.971430][T15940] ? ksys_write+0x1b9/0x240 [ 297.971447][T15940] ? __pfx_ksys_write+0x10/0x10 [ 297.971463][T15940] ? rcu_is_watching+0x12/0xc0 [ 297.971477][T15940] __x64_sys_sendto+0xe0/0x1c0 [ 297.971488][T15940] ? do_syscall_64+0x91/0x260 [ 297.971507][T15940] ? lockdep_hardirqs_on+0x7c/0x110 [ 297.971521][T15940] do_syscall_64+0xcd/0x260 [ 297.971538][T15940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.971550][T15940] RIP: 0033:0x7f2301f8e969 [ 297.971560][T15940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.971571][T15940] RSP: 002b:00007f2302d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 297.971582][T15940] RAX: ffffffffffffffda RBX: 00007f23021b5fa0 RCX: 00007f2301f8e969 [ 297.971590][T15940] RDX: 0000000000000026 RSI: 0000200000000100 RDI: 0000000000000003 [ 297.971596][T15940] RBP: 00007f2302d27090 R08: 0000200000000540 R09: 0000000000000014 [ 297.971603][T15940] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 297.971610][T15940] R13: 0000000000000000 R14: 00007f23021b5fa0 R15: 00007fff4e306878 [ 297.971624][T15940] [ 298.133854][T15948] sd 0:0:0:0: PR command failed: 1026 [ 298.135613][T15948] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 298.137755][T15948] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 298.161965][T15957] fuse: Unknown parameter 'user_i00000000000000000000' [ 298.218487][T15967] FAULT_INJECTION: forcing a failure. [ 298.218487][T15967] name failslab, interval 1, probability 0, space 0, times 0 [ 298.222700][T15967] CPU: 1 UID: 0 PID: 15967 Comm: syz.1.3229 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 298.222716][T15967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.222724][T15967] Call Trace: [ 298.222728][T15967] [ 298.222732][T15967] dump_stack_lvl+0x16c/0x1f0 [ 298.222753][T15967] should_fail_ex+0x512/0x640 [ 298.222769][T15967] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 298.222793][T15967] should_failslab+0xc2/0x120 [ 298.222806][T15967] __kmalloc_cache_noprof+0x6a/0x3e0 [ 298.222823][T15967] ? tc_new_tfilter+0xf0c/0x2340 [ 298.222843][T15967] tc_new_tfilter+0xf0c/0x2340 [ 298.222863][T15967] ? avc_has_perm_noaudit+0x117/0x3b0 [ 298.222876][T15967] ? __pfx_tc_new_tfilter+0x10/0x10 [ 298.222897][T15967] ? __lock_acquire+0x5ca/0x1ba0 [ 298.222921][T15967] ? find_held_lock+0x2b/0x80 [ 298.222935][T15967] ? __pfx_tc_new_tfilter+0x10/0x10 [ 298.222961][T15967] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 298.222977][T15967] ? __pfx_tc_new_tfilter+0x10/0x10 [ 298.222992][T15967] rtnetlink_rcv_msg+0x95b/0xe90 [ 298.223007][T15967] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.223027][T15967] netlink_rcv_skb+0x16a/0x440 [ 298.223042][T15967] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.223057][T15967] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.223079][T15967] ? netlink_deliver_tap+0x1ae/0xd30 [ 298.223095][T15967] netlink_unicast+0x53d/0x7f0 [ 298.223110][T15967] ? __pfx_netlink_unicast+0x10/0x10 [ 298.223129][T15967] netlink_sendmsg+0x8d1/0xdd0 [ 298.223145][T15967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.223164][T15967] ____sys_sendmsg+0xa98/0xc70 [ 298.223180][T15967] ? copy_msghdr_from_user+0x10a/0x160 [ 298.223193][T15967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.223215][T15967] ___sys_sendmsg+0x134/0x1d0 [ 298.223228][T15967] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.223257][T15967] __sys_sendmsg+0x16d/0x220 [ 298.223270][T15967] ? __pfx___sys_sendmsg+0x10/0x10 [ 298.223291][T15967] do_syscall_64+0xcd/0x260 [ 298.223308][T15967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.223320][T15967] RIP: 0033:0x7f2301f8e969 [ 298.223330][T15967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.223341][T15967] RSP: 002b:00007f2302d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.223352][T15967] RAX: ffffffffffffffda RBX: 00007f23021b5fa0 RCX: 00007f2301f8e969 [ 298.223359][T15967] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000006 [ 298.223366][T15967] RBP: 00007f2302d27090 R08: 0000000000000000 R09: 0000000000000000 [ 298.223373][T15967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.223380][T15967] R13: 0000000000000000 R14: 00007f23021b5fa0 R15: 00007fff4e306878 [ 298.223394][T15967] [ 298.259870][T15971] FAULT_INJECTION: forcing a failure. [ 298.259870][T15971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.322126][T15962] netlink: 'syz.0.3227': attribute type 1 has an invalid length. [ 298.323631][T15971] CPU: 0 UID: 0 PID: 15971 Comm: syz.6.3231 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 298.323648][T15971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.323655][T15971] Call Trace: [ 298.323659][T15971] [ 298.323664][T15971] dump_stack_lvl+0x16c/0x1f0 [ 298.323685][T15971] should_fail_ex+0x512/0x640 [ 298.323703][T15971] _copy_to_user+0x32/0xd0 [ 298.323721][T15971] simple_read_from_buffer+0xcb/0x170 [ 298.323739][T15971] proc_fail_nth_read+0x197/0x270 [ 298.323757][T15971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.323775][T15971] ? rw_verify_area+0xcf/0x680 [ 298.323790][T15971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.323819][T15971] vfs_read+0x1e1/0xc70 [ 298.323839][T15971] ? __pfx___mutex_lock+0x10/0x10 [ 298.323855][T15971] ? __pfx_vfs_read+0x10/0x10 [ 298.323876][T15971] ? __fget_files+0x20e/0x3c0 [ 298.323891][T15971] ksys_read+0x12a/0x240 [ 298.323907][T15971] ? __pfx_ksys_read+0x10/0x10 [ 298.323923][T15971] ? rcu_is_watching+0x12/0xc0 [ 298.323941][T15971] do_syscall_64+0xcd/0x260 [ 298.323958][T15971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.323970][T15971] RIP: 0033:0x7f23a818d37c [ 298.323980][T15971] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 298.323991][T15971] RSP: 002b:00007f23a9013030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.324002][T15971] RAX: ffffffffffffffda RBX: 00007f23a83b5fa0 RCX: 00007f23a818d37c [ 298.324010][T15971] RDX: 000000000000000f RSI: 00007f23a90130a0 RDI: 0000000000000004 [ 298.324016][T15971] RBP: 00007f23a9013090 R08: 0000000000000000 R09: 0000000000000000 [ 298.324023][T15971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.324030][T15971] R13: 0000000000000000 R14: 00007f23a83b5fa0 R15: 00007fffc1c03418 [ 298.324044][T15971] [ 298.387293][T15962] netlink: 'syz.0.3227': attribute type 2 has an invalid length. [ 298.417768][T15977] FAULT_INJECTION: forcing a failure. [ 298.417768][T15977] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.423172][T15977] CPU: 2 UID: 0 PID: 15977 Comm: syz.6.3232 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 298.423199][T15977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.423210][T15977] Call Trace: [ 298.423217][T15977] [ 298.423224][T15977] dump_stack_lvl+0x16c/0x1f0 [ 298.423253][T15977] should_fail_ex+0x512/0x640 [ 298.423282][T15977] should_fail_alloc_page+0xe7/0x130 [ 298.423304][T15977] prepare_alloc_pages+0x3c2/0x610 [ 298.423333][T15977] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 298.423352][T15977] ? bio_kmalloc+0x41/0x70 [ 298.423377][T15977] ? kasan_save_stack+0x33/0x60 [ 298.423392][T15977] ? kasan_save_track+0x14/0x30 [ 298.423407][T15977] ? __kasan_kmalloc+0xaa/0xb0 [ 298.423432][T15977] ? __kmalloc_noprof+0x223/0x510 [ 298.423447][T15977] ? bio_kmalloc+0x41/0x70 [ 298.423469][T15977] ? blk_rq_map_kern+0x39a/0x710 [ 298.423488][T15977] ? scsi_execute_cmd+0xc14/0xf40 [ 298.423508][T15977] ? sd_pr_out_command.isra.0+0x26e/0x3d0 [ 298.423531][T15977] ? blkdev_common_ioctl+0xaee/0x2480 [ 298.423549][T15977] ? blkdev_ioctl+0x1cb/0x6d0 [ 298.423565][T15977] ? __x64_sys_ioctl+0x193/0x200 [ 298.423594][T15977] ? do_syscall_64+0xcd/0x260 [ 298.423618][T15977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.423640][T15977] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 298.423674][T15977] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.423695][T15977] ? policy_nodemask+0xea/0x4e0 [ 298.423717][T15977] alloc_pages_mpol+0x1fb/0x550 [ 298.423738][T15977] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 298.423756][T15977] ? trace_kmalloc+0x2b/0xd0 [ 298.423776][T15977] ? __kmalloc_noprof+0x242/0x510 [ 298.423791][T15977] ? __pfx___debug_object_init+0x10/0x10 [ 298.423809][T15977] ? __blk_mq_alloc_requests+0x15c1/0x1620 [ 298.423831][T15977] alloc_pages_noprof+0x131/0x390 [ 298.423850][T15977] blk_rq_map_kern+0x3f5/0x710 [ 298.423874][T15977] scsi_execute_cmd+0xc14/0xf40 [ 298.423903][T15977] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 298.423931][T15977] sd_pr_out_command.isra.0+0x26e/0x3d0 [ 298.423958][T15977] ? __pfx_sd_pr_out_command.isra.0+0x10/0x10 [ 298.423980][T15977] ? __lock_acquire+0xaa4/0x1ba0 [ 298.424011][T15977] ? cred_has_capability.isra.0+0x193/0x2f0 [ 298.424044][T15977] ? find_held_lock+0x2b/0x80 [ 298.424064][T15977] ? __might_fault+0xe3/0x190 [ 298.424082][T15977] ? __might_fault+0x13b/0x190 [ 298.424105][T15977] ? block_pr_type_to_scsi+0x62/0x80 [ 298.424126][T15977] blkdev_common_ioctl+0xaee/0x2480 [ 298.424146][T15977] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.424165][T15977] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 298.424187][T15977] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 298.424215][T15977] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 298.424243][T15977] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 298.424272][T15977] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 298.424312][T15977] blkdev_ioctl+0x1cb/0x6d0 [ 298.424332][T15977] ? __pfx_blkdev_ioctl+0x10/0x10 [ 298.424349][T15977] ? selinux_file_ioctl+0x180/0x270 [ 298.424375][T15977] ? selinux_file_ioctl+0xb4/0x270 [ 298.424402][T15977] ? __pfx_blkdev_ioctl+0x10/0x10 [ 298.424423][T15977] __x64_sys_ioctl+0x193/0x200 [ 298.424448][T15977] do_syscall_64+0xcd/0x260 [ 298.424475][T15977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.424492][T15977] RIP: 0033:0x7f23a818e969 [ 298.424507][T15977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.424524][T15977] RSP: 002b:00007f23a9013038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.424542][T15977] RAX: ffffffffffffffda RBX: 00007f23a83b5fa0 RCX: 00007f23a818e969 [ 298.424554][T15977] RDX: 0000200000000000 RSI: 00000000401070ca RDI: 0000000000000004 [ 298.424565][T15977] RBP: 00007f23a9013090 R08: 0000000000000000 R09: 0000000000000000 [ 298.424580][T15977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.424590][T15977] R13: 0000000000000000 R14: 00007f23a83b5fa0 R15: 00007fffc1c03418 [ 298.424613][T15977] [ 298.566396][ C2] vkms_vblank_simulate: vblank timer overrun [ 298.603104][ T67] Bluetooth: hci1: command tx timeout [ 298.657850][T15999] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 298.663066][T15999] FAULT_INJECTION: forcing a failure. [ 298.663066][T15999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.667879][T15999] CPU: 3 UID: 0 PID: 15999 Comm: syz.0.3238 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 298.667896][T15999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.667903][T15999] Call Trace: [ 298.667907][T15999] [ 298.667911][T15999] dump_stack_lvl+0x16c/0x1f0 [ 298.667931][T15999] should_fail_ex+0x512/0x640 [ 298.667949][T15999] strncpy_from_user+0x3b/0x2e0 [ 298.667965][T15999] getname_flags.part.0+0x8f/0x550 [ 298.667982][T15999] getname_flags+0x93/0xf0 [ 298.667999][T15999] __x64_sys_renameat2+0xd4/0x130 [ 298.668014][T15999] do_syscall_64+0xcd/0x260 [ 298.668031][T15999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.668043][T15999] RIP: 0033:0x7ff31c58e969 [ 298.668052][T15999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.668064][T15999] RSP: 002b:00007ff31d3ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 298.668075][T15999] RAX: ffffffffffffffda RBX: 00007ff31c7b5fa0 RCX: 00007ff31c58e969 [ 298.668082][T15999] RDX: ffffffffffffff9c RSI: 0000200000000a00 RDI: ffffffffffffff9c [ 298.668089][T15999] RBP: 00007ff31d3ef090 R08: 0000000000000002 R09: 0000000000000000 [ 298.668096][T15999] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 298.668103][T15999] R13: 0000000000000000 R14: 00007ff31c7b5fa0 R15: 00007ffe91cd0338 [ 298.668116][T15999] [ 298.674442][ T40] audit: type=1400 audit(2000524503.444:2174): avc: denied { map } for pid=15991 comm="syz.6.3236" path="/28/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 298.727092][T16000] sd 0:0:0:0: PR command failed: 1026 [ 298.730195][T16000] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 298.732739][T16000] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 299.068994][T16013] fuse: Unknown parameter 'user_id00000000000000000000' [ 299.076573][T16017] delete_channel: no stack [ 299.094766][T16017] delete_channel: no stack [ 299.103241][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 299.103251][ T40] audit: type=1400 audit(2000524503.871:2176): avc: denied { listen } for pid=16018 comm="syz.2.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 299.109707][T16019] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 299.112640][ T40] audit: type=1400 audit(2000524503.880:2177): avc: denied { ioctl } for pid=16018 comm="syz.2.3247" path="socket:[72623]" dev="sockfs" ino=72623 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 299.115775][T16019] bond0: (slave lo): Error: Device can not be enslaved while up [ 299.129909][ T40] audit: type=1400 audit(2000524503.900:2178): avc: denied { accept } for pid=16018 comm="syz.2.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 299.206517][ T40] audit: type=1400 audit(2000524503.967:2179): avc: denied { ioctl } for pid=16015 comm="syz.1.3246" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 299.365880][ T40] audit: type=1400 audit(2000524504.123:2180): avc: denied { listen } for pid=16034 comm="syz.2.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 300.440617][T16061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.449469][T16061] netlink: 'syz.2.3259': attribute type 4 has an invalid length. [ 300.451889][T16061] __nla_validate_parse: 11 callbacks suppressed [ 300.451896][T16061] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3259'. [ 300.502010][ T40] audit: type=1800 audit(2000524505.230:2181): pid=16059 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3260" name="/" dev="9p" ino=2 res=0 errno=0 [ 300.516555][ T40] audit: type=1400 audit(2000524505.239:2182): avc: denied { unmount } for pid=15589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 300.528753][T16066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3261'. [ 300.647140][T16075] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.674950][T16077] FAULT_INJECTION: forcing a failure. [ 300.674950][T16077] name failslab, interval 1, probability 0, space 0, times 0 [ 300.678873][T16077] CPU: 3 UID: 0 PID: 16077 Comm: syz.6.3262 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 300.678891][T16077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 300.678901][T16077] Call Trace: [ 300.678907][T16077] [ 300.678914][T16077] dump_stack_lvl+0x16c/0x1f0 [ 300.679852][T16077] should_fail_ex+0x512/0x640 [ 300.679885][T16077] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 300.679898][T16077] should_failslab+0xc2/0x120 [ 300.679912][T16077] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 300.679923][T16077] ? d_instantiate+0x77/0x90 [ 300.679935][T16077] ? alloc_empty_file+0x55/0x1e0 [ 300.679950][T16077] alloc_empty_file+0x55/0x1e0 [ 300.679964][T16077] alloc_file_pseudo+0x13a/0x230 [ 300.679984][T16077] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 300.680009][T16077] sock_alloc_file+0x50/0x210 [ 300.680032][T16077] do_accept+0x240/0x530 [ 300.680049][T16077] ? do_raw_spin_lock+0x12c/0x2b0 [ 300.680063][T16077] ? __pfx_do_accept+0x10/0x10 [ 300.680088][T16077] __sys_accept4+0x100/0x1b0 [ 300.680105][T16077] ? __pfx___sys_accept4+0x10/0x10 [ 300.680123][T16077] ? __pfx_ksys_write+0x10/0x10 [ 300.680139][T16077] ? rcu_is_watching+0x12/0xc0 [ 300.680158][T16077] __x64_sys_accept4+0x96/0x100 [ 300.680177][T16077] ? lockdep_hardirqs_on+0x7c/0x110 [ 300.680193][T16077] do_syscall_64+0xcd/0x260 [ 300.680210][T16077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.680221][T16077] RIP: 0033:0x7f23a818e969 [ 300.680231][T16077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.680242][T16077] RSP: 002b:00007f23a8ff2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 300.680253][T16077] RAX: ffffffffffffffda RBX: 00007f23a83b6080 RCX: 00007f23a818e969 [ 300.680260][T16077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 300.680267][T16077] RBP: 00007f23a8ff2090 R08: 0000000000000000 R09: 0000000000000000 [ 300.680274][T16077] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 300.680280][T16077] R13: 0000000000000000 R14: 00007f23a83b6080 R15: 00007fffc1c03418 [ 300.680294][T16077] [ 300.749855][ T40] audit: type=1400 audit(2000524505.453:2183): avc: denied { block_suspend } for pid=16079 comm="syz.1.3266" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 300.750487][ T67] Bluetooth: hci1: command tx timeout [ 300.952131][ C1] ------------[ cut here ]------------ [ 300.954162][ C1] WARNING: CPU: 1 PID: 0 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x684/0x830 [ 300.957441][ C1] Modules linked in: [ 300.959006][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 300.963866][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 300.967031][ C1] RIP: 0010:inet_sock_destruct+0x684/0x830 [ 300.968782][ C1] Code: 0f 0b 90 e9 12 fe ff ff e8 69 94 ce f7 90 0f 0b 90 e9 5e fe ff ff e8 5b 94 ce f7 90 0f 0b 90 e9 94 fe ff ff e8 4d 94 ce f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 2f 11 34 f8 e9 d7 fc ff ff 4c 89 ff e8 [ 300.974583][ C1] RSP: 0018:ffffc900006a0d90 EFLAGS: 00010246 [ 300.976457][ C1] RAX: 0000000000000000 RBX: ffff88803a93c380 RCX: ffffffff89ecb0c7 [ 300.978884][ C1] RDX: ffff88801d682440 RSI: ffffffff89ecb1f3 RDI: 0000000000000005 [ 300.981279][ C1] RBP: 0000000000000fff R08: 0000000000000005 R09: 0000000000000000 [ 300.983834][ C1] R10: 0000000000000fff R11: 0000000000000000 R12: ffff88803a93c380 [ 300.986467][ C1] R13: ffff88803a93c410 R14: ffffc900006a0e90 R15: 0000000000000009 [ 300.989232][ C1] FS: 0000000000000000(0000) GS:ffff8880d6adf000(0000) knlGS:0000000000000000 [ 300.992282][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.994406][ C1] CR2: 00007f23a8fd1d58 CR3: 00000000375bf000 CR4: 0000000000352ef0 [ 300.996862][ C1] Call Trace: [ 300.997920][ C1] [ 300.998854][ C1] ? inet6_cleanup_sock+0x117/0x210 [ 301.000496][ C1] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 301.002274][ C1] __sk_destruct+0x84/0x980 [ 301.003765][ C1] ? rcu_core+0x797/0x14e0 [ 301.005144][ C1] rcu_core+0x79c/0x14e0 [ 301.006469][ C1] ? __pfx_rcu_core+0x10/0x10 [ 301.007965][ C1] handle_softirqs+0x216/0x8e0 [ 301.009468][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 301.011086][ C1] __irq_exit_rcu+0x109/0x170 [ 301.012485][ C1] irq_exit_rcu+0x9/0x30 [ 301.013856][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 301.015571][ C1] [ 301.016498][ C1] [ 301.017420][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.019260][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 301.020989][ C1] Code: 05 62 02 e9 53 fc 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 ef 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 301.026963][ C1] RSP: 0018:ffffc90000177df8 EFLAGS: 00000286 [ 301.028893][ C1] RAX: 00000000008c3c1d RBX: 0000000000000001 RCX: ffffffff8b6d0419 [ 301.031409][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe285d RDI: ffffffff8bf48920 [ 301.033951][ C1] RBP: ffffed1003ad0488 R08: 0000000000000001 R09: ffffed100d4a65bd [ 301.036399][ C1] R10: ffff88806a532deb R11: 0000000000000000 R12: 0000000000000001 [ 301.038848][ C1] R13: ffff88801d682440 R14: ffffffff9084ff10 R15: 0000000000000000 [ 301.041297][ C1] ? ct_kernel_exit+0x139/0x190 [ 301.042857][ C1] default_idle+0x13/0x20 [ 301.044331][ C1] default_idle_call+0x6d/0xb0 [ 301.045832][ C1] do_idle+0x391/0x510 [ 301.047128][ C1] ? __pfx_do_idle+0x10/0x10 [ 301.048603][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 301.050299][ C1] cpu_startup_entry+0x4f/0x60 [ 301.051833][ C1] start_secondary+0x21d/0x2b0 [ 301.053343][ C1] ? __pfx_start_secondary+0x10/0x10 [ 301.055110][ C1] common_startup_64+0x13e/0x148 [ 301.056680][ C1] [ 301.057686][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 301.059978][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 301.063610][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 301.066950][ C1] Call Trace: [ 301.068020][ C1] [ 301.068943][ C1] dump_stack_lvl+0x3d/0x1f0 [ 301.070453][ C1] panic+0x71c/0x800 [ 301.071712][ C1] ? __pfx_panic+0x10/0x10 [ 301.073144][ C1] ? show_trace_log_lvl+0x29b/0x3e0 [ 301.074791][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 301.076403][ C1] ? inet_sock_destruct+0x684/0x830 [ 301.078037][ C1] check_panic_on_warn+0xab/0xb0 [ 301.079629][ C1] __warn+0xf6/0x3c0 [ 301.080895][ C1] ? inet_sock_destruct+0x684/0x830 [ 301.082564][ C1] report_bug+0x3c3/0x580 [ 301.083989][ C1] ? inet_sock_destruct+0x684/0x830 [ 301.085654][ C1] handle_bug+0x184/0x210 [ 301.087044][ C1] exc_invalid_op+0x17/0x50 [ 301.088509][ C1] asm_exc_invalid_op+0x1a/0x20 [ 301.090077][ C1] RIP: 0010:inet_sock_destruct+0x684/0x830 [ 301.091959][ C1] Code: 0f 0b 90 e9 12 fe ff ff e8 69 94 ce f7 90 0f 0b 90 e9 5e fe ff ff e8 5b 94 ce f7 90 0f 0b 90 e9 94 fe ff ff e8 4d 94 ce f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 2f 11 34 f8 e9 d7 fc ff ff 4c 89 ff e8 [ 301.097933][ C1] RSP: 0018:ffffc900006a0d90 EFLAGS: 00010246 [ 301.099850][ C1] RAX: 0000000000000000 RBX: ffff88803a93c380 RCX: ffffffff89ecb0c7 [ 301.102300][ C1] RDX: ffff88801d682440 RSI: ffffffff89ecb1f3 RDI: 0000000000000005 [ 301.104751][ C1] RBP: 0000000000000fff R08: 0000000000000005 R09: 0000000000000000 [ 301.107170][ C1] R10: 0000000000000fff R11: 0000000000000000 R12: ffff88803a93c380 [ 301.109639][ C1] R13: ffff88803a93c410 R14: ffffc900006a0e90 R15: 0000000000000009 [ 301.112156][ C1] ? inet_sock_destruct+0x557/0x830 [ 301.113807][ C1] ? inet_sock_destruct+0x683/0x830 [ 301.115445][ C1] ? inet6_cleanup_sock+0x117/0x210 [ 301.117071][ C1] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 301.118829][ C1] __sk_destruct+0x84/0x980 [ 301.120266][ C1] ? rcu_core+0x797/0x14e0 [ 301.121681][ C1] rcu_core+0x79c/0x14e0 [ 301.123069][ C1] ? __pfx_rcu_core+0x10/0x10 [ 301.124533][ C1] handle_softirqs+0x216/0x8e0 [ 301.126052][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 301.127729][ C1] __irq_exit_rcu+0x109/0x170 [ 301.129224][ C1] irq_exit_rcu+0x9/0x30 [ 301.130591][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 301.132353][ C1] [ 301.133308][ C1] [ 301.134265][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.136133][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 301.137888][ C1] Code: 05 62 02 e9 53 fc 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 ef 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 301.143834][ C1] RSP: 0018:ffffc90000177df8 EFLAGS: 00000286 [ 301.145723][ C1] RAX: 00000000008c3c1d RBX: 0000000000000001 RCX: ffffffff8b6d0419 [ 301.148186][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe285d RDI: ffffffff8bf48920 [ 301.150665][ C1] RBP: ffffed1003ad0488 R08: 0000000000000001 R09: ffffed100d4a65bd [ 301.153130][ C1] R10: ffff88806a532deb R11: 0000000000000000 R12: 0000000000000001 [ 301.155575][ C1] R13: ffff88801d682440 R14: ffffffff9084ff10 R15: 0000000000000000 [ 301.158038][ C1] ? ct_kernel_exit+0x139/0x190 [ 301.159598][ C1] default_idle+0x13/0x20 [ 301.160973][ C1] default_idle_call+0x6d/0xb0 [ 301.162505][ C1] do_idle+0x391/0x510 [ 301.163803][ C1] ? __pfx_do_idle+0x10/0x10 [ 301.165255][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 301.166893][ C1] cpu_startup_entry+0x4f/0x60 [ 301.168408][ C1] start_secondary+0x21d/0x2b0 [ 301.169908][ C1] ? __pfx_start_secondary+0x10/0x10 [ 301.171606][ C1] common_startup_64+0x13e/0x148 [ 301.173171][ C1] [ 301.174858][ C1] Kernel Offset: disabled [ 301.176223][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:37:47 Registers: info registers vcpu 0 CPU#0 RAX=00000000006e719b RBX=0000000000000000 RCX=ffffffff8b6d0419 RDX=0000000000000000 RSI=ffffffff8dbe285d RDI=ffffffff8bf48920 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff9084ff10 R15=0000000000000000 RIP=ffffffff8b6cecaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69df000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f23a8fd0f98 CR3=00000000455e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000001000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2302011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2302011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2302011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2302011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2302011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2302011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f0d7849a42c6cdb0 66b2cb97c80dcc88 51355a209f977fc8 eec25def0bcde126 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7363d5f830c215f1 dcf5a22926f43e18 d00c2f5150063343 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 639f5bd2d122dffa f60f40832c444d46 62ea412fc8a1f129 ddab94cfaf7cab85 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000ea0d4fc 014891d799b40a2e 28d91993b558625c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 94b5f3639f5bd2d1 22dffaf60f40832c 444d4662ea412fc8 a1f129ddab94cfaf ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7cab857363d5f830 c215f1dcf5a22926 f43e18d00c2f5150 0633431558cb921f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 82110cf0d7849a42 c6cdb066b2cb97c8 0dcc8851355a209f 977fc8eec25def0b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5a20d422dba1ee04 f26fdb488fc0d6d2 0ab250bd21a5c452 6a5d4e1e4b4fa55e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f7a75 RDI=ffffffff9adf9560 RBP=ffffffff9adf9520 RSP=ffffc900006a0700 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9adf9520 R15=ffffffff854f7a10 RIP=ffffffff854f7a9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6adf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f23a8fd1d58 CR3=00000000375bf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe91cd06c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff31c611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff31c611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff31c611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff31c611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff31c611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff31c611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000630aef RBX=0000000000000002 RCX=ffffffff8b6d0419 RDX=0000000000000000 RSI=ffffffff8dbe285d RDI=ffffffff8bf48920 RBP=ffffed1003ad0910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d684880 R14=ffffffff9084ff10 R15=0000000000000000 RIP=ffffffff8b6cecaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055559232e808 CR3=0000000023897000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc1c037a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a8211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a8211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a8211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a8211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a8211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a8211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000062940d RBX=0000000000000003 RCX=ffffffff8b6d0419 RDX=0000000000000000 RSI=ffffffff8dbe285d RDI=ffffffff8bf48920 RBP=ffffed1003c52000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801e290000 R14=ffffffff9084ff10 R15=0000000000000000 RIP=ffffffff8b6cecaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000003000 CR3=0000000042477000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a8211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a8211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a8211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a8211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a8211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a8211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a8383488 00007f23a8383480 00007f23a8383478 00007f23a8383450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a8eed100 00007f23a8383440 00007f23a8383458 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23a8383498 00007f23a8383490 00007f23a8383488 00007f23a8383480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000