last executing test programs: 3m37.716788266s ago: executing program 1 (id=604): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x2, '\x00', @value64=0x100}}) close(r0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = dup2(r0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r3, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}, 0x1, 0x0, 0x200000000000000, 0x11}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, 0x0, 0x40) bind$unix(r1, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x18}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}], 0x20}, 0x2142) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb8864450000300000000000019078ac1ecf4a43380001ac1414aa030490781200183f2500000000000100"/67], 0x0) 3m37.71613246s ago: executing program 1 (id=605): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f008, 0x2400}) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x8, 0x0, &(0x7f00000000c0)) chdir(&(0x7f0000000340)='./file0\x00') lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x5}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xd, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0xc, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) chdir(&(0x7f00000002c0)='./file0/file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) 3m37.588295975s ago: executing program 1 (id=608): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount$binder(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002300), 0x1, &(0x7f0000002340)=ANY=[@ANYBLOB='max=00']) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x142b23) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/disk', 0x8a883, 0x12) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x8, 0x124b50, 0xb9890}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r5, 0x0, 0x2fff, 0x1, &(0x7f0000000380)='j', 0x1}) 3m37.534782134s ago: executing program 1 (id=609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="7f080000", @ANYRES16=r2, @ANYBLOB="010828bd7000000000000b0000000800090005ac0f003c0050800800070000000000100008800400020004000200040001000800070000000000090001002d4b12229900000004000600080003000000000004000b00"], 0x5c}}, 0x4000800) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000740)='./file0/../file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x101000, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r1, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2c}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5c8, 0x3f}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'bond0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "d0913096152f5ce0b93c6517428ad50d2f6b54ed39d054bec9cf9e83b5cd52de", "4232154ae74b33fb0bdc18f4adfe4d645be0119886724721f7c1fb5a266b2e23", "bd3269486684774235e4ecc689af4579a64d81140a17da9c4ce0eaf50dcef5c5", "7c0c28c1506ca435efa044f4645ecd20db8cb50cf69e2dedac905fe88b23a859", "dc146c13a1a05d946b5890de5baf53d02d2c3bfa4316aacb7173032105601dfa", "dd82f9f2320c7eef72b33019", 0xfffffffa, 0x8001, 0x10, 0x9, 0x7f}}) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/79, 0x4f}}, 0x120) writev(r6, &(0x7f00000002c0)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f0000000040)="4010bac4", 0x4}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000008800000088000000090000000a0000000900000e020000000200000092000000ffff00000300000000000000020000000400000009000000080000000400000004000000ff27000002000000080000000010000002000000060000000100000005000000040000000000010001000000ff01000007000000040000000000000009000000ef69000000000000000f020000009c05000000000000006f00"], 0x0, 0xa9, 0x0, 0x1, 0x5}, 0x28) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) creat(&(0x7f0000000040)='./bus\x00', 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) write(r7, &(0x7f0000000000)=';\x00\x00\x00', 0x4) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f00000000c0), 0x4) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000)='jfs\x00', 0x8080, &(0x7f00000001c0)='discard') 3m37.471329822s ago: executing program 1 (id=610): mount$nfs4(&(0x7f00000001c0)='\x00', &(0x7f0000000240)='.\x00', &(0x7f00000003c0), 0x200000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x2844010, 0x0) r0 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) acct(&(0x7f0000000100)='./file0/bus\x00') setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0/bus\x00', &(0x7f0000000200), &(0x7f0000000280)='./file0/bus\x00', 0xc, 0x2) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 3m37.257445104s ago: executing program 1 (id=613): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) sendmmsg$inet_sctp(r0, &(0x7f0000001880)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0xb54, 0xffff070d}}], 0x20, 0x3000000}], 0x1, 0x10) 3m37.223850597s ago: executing program 32 (id=613): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) sendmmsg$inet_sctp(r0, &(0x7f0000001880)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0xb54, 0xffff070d}}], 0x20, 0x3000000}], 0x1, 0x10) 2m49.373439703s ago: executing program 4 (id=1291): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000005c40)=""/4100, 0x1004}, {&(0x7f0000000ac0)=""/231, 0xdb}], 0x3, 0x0, 0x300}, 0x7}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd96}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000000540)=""/163, 0xa3}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f0000000700)=""/130, 0x82}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000002080)=""/4075, 0xfeb}, {&(0x7f00000000c0)=""/154, 0x9a}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) 2m49.319336707s ago: executing program 4 (id=1292): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x5}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xa, 0x8580) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000003c0)="66b91602000066b8abb1000066ba000000000f302ec06d0000b8090c8ee0d1970e000fc71f0f0766b8fda8c11b0f23c00f21f86635000003000f23f8660fd1f0360f08baf80c66b89401238a66efbafc0c66ed", 0x53}], 0x1, 0x40, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x88042, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000002c0)="66b833000000440f20c066350f000000440f22c00f21f86635000002000f23f8440f20c00fc74c00440f22c03e0fc7310fc738baf80c66b8460de88e3e0f31bafc0c6de2e201c8e3002e0f001336dde50f1c23d0d021f866351000000c0fa929", 0x60}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000240)={0x40001, 0x0, [0x0, 0x1, 0x3, 0x9, 0x9, 0x7, 0xc000, 0xffffffffffffffff]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000680), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0)=ANY=[]) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x20410, &(0x7f0000000000)) chdir(&(0x7f0000000140)='./bus\x00') socket(0x1, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}, {@nfs_export_on}], [{@uid_eq}, {@dont_hash}]}) creat(&(0x7f0000000440)='./file0\x00', 0x0) 2m49.074075522s ago: executing program 4 (id=1293): memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) r0 = socket$alg(0x26, 0x5, 0x0) accept(r0, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000280)=0x80) (async) accept(r0, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000280)=0x80) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf25040000000800090002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf25040000000800090002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000500)="c99bfaafd0684363db0018", 0xb) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="0d4201f3951384e3", 0x8}], 0x1}}], 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="10010000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf2501bca6b1945307000000e000088050000080060005f68456aa86a93cbcacabd08d134ea129000010000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221400040002004e20ac14143400000000000000001400040048000080200004ab0f594721ffffffff20010000000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c3c0000801400040002004ecdbd77b5079c0000000000000024000110dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"], 0x110}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) (async) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="10010000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf2501bca6b1945307000000e000088050000080060005f68456aa86a93cbcacabd08d134ea129000010000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221400040002004e20ac14143400000000000000001400040048000080200004ab0f594721ffffffff20010000000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c3c0000801400040002004ecdbd77b5079c0000000000000024000110dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"], 0x110}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) accept4(r0, 0x0, 0x0, 0x0) (async) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002840)=""/4098, 0x1002}], 0x1}, 0x5}], 0x2, 0x40022001, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202001, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) (async) r9 = socket(0x28, 0x1, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xc, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', r10, 0x29, 0x7, 0x1, 0x9, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x1, 0x7800, 0x4, 0xfffffff9}}) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) 2m48.977865701s ago: executing program 4 (id=1294): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x8, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x1, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x0, 0x40, 0x9, 0x0, 0x1ff, {0xffffffe4, 0x0, 0x0, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="ad43000000f45400000017"], 0x14}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20040, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x76581527, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x401, 0x2, 0x4, 0x0, 0x8}) r7 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x240) ioctl$NBD_CLEAR_SOCK(r7, 0x125f) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_fd={0x0, 0x2, 0x4, 0x4, 0x314d, {}, {0x2, 0x1, 0xd, 0x9a, 0x6, 0x3b, "06623c5d"}, 0xffff, 0x4, {0x0}, 0x1, 0x0, 0xffffffffffffffff}) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@ipv6_getroute={0xd0, 0x1a, 0x8, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x14, 0x8, 0xfc, 0x1, 0xfe, 0x8, 0x1400}, [@RTA_UID={0x8, 0x19, r11}, @RTA_METRICS={0x95, 0x8, 0x0, 0x1, "69d3d090e5bacc0de28f96f2719c529432fa9462b564cb80d94b82b14d00874325e108645be600be69362bbb8a2363bfff74efb3636d06c464353bf69c54c8108712ca1005d68ef52b2fd2796cb925326c893e5ef62e665483b59f89884063f52b9b44e64cf89b72a9d25af43bb8bf46c19231d4ef0d2aa4072331903e1494b492ac9e8f80a55819f576364712e8db054a"}, @RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) setreuid(0xee01, 0xee01) tkill(r9, 0x12) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x20) 2m48.921418942s ago: executing program 4 (id=1297): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x40000001, 0x4, 0x40000, 0x2, "0062ba7d8207000000ecf5000000f7ffffff00"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000200)={0x8080000000000000, 0xddcde000, 0x301, 0x8, 0x1d}) r4 = syz_open_pts(r0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x33565348, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3}}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x48, 0x4, 0x3, 0x9, 0x4, "55ab14576b274d5c5b041c2b185c52e1dd7d88", 0x573, 0x400}) 2m48.646772568s ago: executing program 4 (id=1299): ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000001c0)=0x2) r1 = syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000240)={0x5, 0x3, 0x3, {0x8, 0x67d9, 0x6, 0x1}}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000300)=@fd={0x4, 0x0, 0x4, 0x0, 0x73f, {r2, r3/1000+60000}, {0x2, 0x2, 0xcd, 0x81, 0x80, 0x9, "ea5e5bc3"}, 0x6, 0x4, {}, 0x81, 0x0, r4}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_nanosleep(0x5, 0x1, &(0x7f0000000400)={r6, r7+10000000}, &(0x7f0000000440)) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000480)) close_range(r1, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0xde4}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000540)={r8, 0x4}, 0x8) r9 = fsmount(r5, 0x0, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r9, 0xc030128a, &(0x7f0000000600)={&(0x7f0000000580)=""/107, 0x6b}) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000640)={0x0, @reserved}) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x101040, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000740)={0x4, 0x200, 0x27, 0x8e, r8}, &(0x7f0000000780)=0x10) timerfd_settime(r9, 0x1, &(0x7f00000007c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000800)) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x4, 0x5, 0x9, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc0, 0x7, 0x7fff, 0x1}}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000840), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r11, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x18ad7aeb}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r13, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) r14 = syz_open_dev$swradio(&(0x7f0000000b80), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r14, 0xc0205647, &(0x7f0000000c40)={0xa10000, 0x3d81, 0xac2a, r10, 0x0, &(0x7f0000000c00)={0x990a72, 0x200, '\x00', @p_u8=&(0x7f0000000bc0)=0x3}}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000c80)=0x1, 0x4) 2m48.622658748s ago: executing program 33 (id=1299): ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000001c0)=0x2) r1 = syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000240)={0x5, 0x3, 0x3, {0x8, 0x67d9, 0x6, 0x1}}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000002c0)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000300)=@fd={0x4, 0x0, 0x4, 0x0, 0x73f, {r2, r3/1000+60000}, {0x2, 0x2, 0xcd, 0x81, 0x80, 0x9, "ea5e5bc3"}, 0x6, 0x4, {}, 0x81, 0x0, r4}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_nanosleep(0x5, 0x1, &(0x7f0000000400)={r6, r7+10000000}, &(0x7f0000000440)) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000480)) close_range(r1, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0xde4}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000540)={r8, 0x4}, 0x8) r9 = fsmount(r5, 0x0, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r9, 0xc030128a, &(0x7f0000000600)={&(0x7f0000000580)=""/107, 0x6b}) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000640)={0x0, @reserved}) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x101040, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000740)={0x4, 0x200, 0x27, 0x8e, r8}, &(0x7f0000000780)=0x10) timerfd_settime(r9, 0x1, &(0x7f00000007c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000800)) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x4, 0x5, 0x9, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc0, 0x7, 0x7fff, 0x1}}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000a00)={&(0x7f0000000840), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r11, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x18ad7aeb}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r13, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) r14 = syz_open_dev$swradio(&(0x7f0000000b80), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r14, 0xc0205647, &(0x7f0000000c40)={0xa10000, 0x3d81, 0xac2a, r10, 0x0, &(0x7f0000000c00)={0x990a72, 0x200, '\x00', @p_u8=&(0x7f0000000bc0)=0x3}}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000c80)=0x1, 0x4) 2m9.058929996s ago: executing program 0 (id=1855): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffed}, {0xe, 0xa}, {0xd, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x24008084) 2m9.05867s ago: executing program 0 (id=1856): r0 = socket(0x1e, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)=""/195, 0xc3}], 0x1}, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) execveat(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) 2m8.973568117s ago: executing program 0 (id=1857): r0 = socket$kcm(0x10, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000640)=[@uexit={0x0, 0x18, 0xa4a2}, @wrmsr={0x1e, 0x20, {0x2f1, 0xb8a}}, @cpuid={0x14, 0x18, {0x8, 0x9}}, @uexit={0x0, 0x18, 0x1}, @code={0xa, 0x4e, {"66baf80cb84e6cf08eef66bafc0cb081eeb9ad0a00000f32410f01c966460fc73346d82b0f09f30f2d8bb3a5f4ea66bad004edc4a19954670bf3450f09"}}, @wrmsr={0x1e, 0x20, {0x340, 0xfff}}, @cpuid={0x14, 0x18, {0x0, 0x1000}}, @cpuid={0x14, 0x18, {0xd36f, 0x1}}, @cpuid={0x14, 0x18, {0x5, 0x9}}, @wr_crn={0x46, 0x20, {0x4, 0xfff}}, @uexit={0x0, 0x18, 0x7f}, @code={0xa, 0x69, {"b987090000b84f000000ba000000000f30c421fc52bc97ae38c0f4420f00550db9800000c00f3235004000000f30660f38809c8bf6a500002e420fc7be05000000c4c11161910000000041db130f01ca42f688f2ffff7f00"}}, @wrmsr={0x1e, 0x20, {0x390, 0xe}}, @wr_crn={0x46, 0x20, {0x4, 0x322f}}, @cpuid={0x14, 0x18, {0x3ef, 0x3094}}, @code={0xa, 0x7c, {"440f013066baf80cb838f43280ef66bafc0cb8a27b0000ef48b8b5000000000000000f23c80f21f8350000a0000f23f8c4019711ca2e430f008500580000430f79072e4080e8a066baf80cb8a2a1ec81ef66bafc0c66b8000066ef0f23852e3e2e660f3a608700880000d7"}}, @code={0xa, 0x67, {"0f00d566bad104b8f27f0000efb9460200000f323e6567660f388188de000000c402590b4500c421e564c066b88e000f00d848b80e000000000000000f23c00f21f835000008000f23f8c462f98e29b9170a00000f32"}}, @cpuid={0x14, 0x18, {0xc28}}, @wrmsr={0x1e, 0x20, {0x0, 0x2}}, @wr_crn={0x46, 0x20, {0x2, 0x7fffffff}}, @code={0xa, 0x6b, {"3e670f01c8c744240000280000c744240200000000c7442406000000000f01142446986441316f0c26360ffcdc66400f3881a500000000b9d20b0000b802000000ba000000000f300f0199927200000f72f789670f8b00800000"}}, @cpuid={0x14, 0x18, {0x7, 0x4000}}, @rdmsr={0x32, 0x18, {0x89d}}, @rdmsr={0x32, 0x18, {0x94a}}], 0x405}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b00)={'hsr0\x00', 0x9}) (async) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b00)={'hsr0\x00', 0x9}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003100000001090000000000000e000a000f00e4ff2f8002002d1f", 0x2e}], 0x1}, 0x4000) 2m8.887673674s ago: executing program 0 (id=1861): syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xff}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4175, 0x10, 0x8001002, 0x3d7}) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000100001000000000000000000000000cecfb189842c6d0a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000000000073797a30000000000800034000000001140000001100010000000000000000000000000a"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) r2 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb8}}, 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x4, 0x3}, 0x10}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) writev(r0, &(0x7f0000000380)=[{&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000003700)="ec1493e8be6a5749f0762eb79ee33c1cf3a958c9e29c5f1d7aed4061991b5b4718ee6363c457d74df7981e8a712cbb65984be36903601a02d2d84dbcaf797c2e75144bcba68391d666e559b408c8837e8fb9fff8b45788a44bc86e0fa269b0ba704e5adb4f0dfd1b126eb8f9c51996a6a5574ef5c2ddee9e7ef7d005c7a5f68aa83aee740903cc001c7a509453ba724648a5f2609c10c3a4022ef37f8b136dc1500ef1df18c848ab52c08c5d8eff6008b290523a4ed7eeb67d730a9539aad8a9fcd74a99561c180cd341849e43581a43337eefbf430cbb41fa6e8e86527e4962a7e1fdb6f95c2beef610245b5ce5e6bd5102530f3967d9", 0xf7}, {&(0x7f0000003800)="9f1b95ade77451121126074a86bf0370b43bc246d11bb8f99c0a0e189db71cbd2d70b7d5dd5a6491920205c308c376bef464710e00a53f35553744fadd6a808d32225aca241d497d9039da3a79ec071ed40f37998a1643575a7e994078ce073de6e382cc397178850425074ecade9b60e555371ed83a1de476f0aa4e9690058667228a67b1572fb0f933f40e465f0b74e61e1fef", 0x94}, {&(0x7f0000000280)="7032ebb07a092ebb14f13434e7de7e4e6c2d964dd863e31d74abcaf39f9e714b6ca78314ae4999357897fe1c26925190cc0798ce6fe1aa2c12eaf1d9e476497f338b430da943eff32fbecd3c36193817b60be00eb8da3b6115b878f37e13a6deacb2ee311d486c89624fc1791b12", 0x6e}, {&(0x7f00000038c0)="68bc9bd8cd5dc2f28c64197ec9f9f87aad8d0ab24207ae21ea24fc9188605ff1646762590a307e9e67dd0fb4b99d22e67f998db6d69c56561fafbdd16b77dbd22628c71541916f91c85dbc8b735da7e3f2511bd424695e75aee4b07c90772ad74018e9f189694435f484c6bfe92c1bd04ee6c2666b45cbdcc27f709366f12981473a47829b8d292310d84f45cc4aa2121afd930f111938583195979b1e73abba3cd96f4151701414c9f9fdb7656e384d64e2edd67caf", 0xb6}, {&(0x7f0000003980)="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", 0x1000}, {&(0x7f0000004980)="84f2545888ce3830e7892ac17e46a5b91c636606aa460d2743254565cfcf396066f68dbe0600efe2c444bdfa682ab33c8a7f13dea11451f2b70cbb48daf26c5af417c8fc194f51dfaae06e056c71a2233874ebf6967d77839aa47cb3d990c56ca004458f3a3939818e3346814b32d67d4defea0581779d300ff395690c87dceff91c9e9dd58525c568a8dcc0dac9ff22", 0x90}, {&(0x7f0000004a40)="b162aac188fbdd675e8bf0b38156c0e40832c2d07429cbbf370432afa156c658a118aab05bc95aeaf7ca9716cdcbcaf20807ffa0d53072d673c2d11c35394356e995bf94e4152875178d05bc339388fd9977866461ff83fa90bb50539e3740fb06f1ab1de63dcb4a8419b7ff5a10a575255bba69866df1dc91b319d16cfd2d2cf9765ee3a28f115b600107839f18ca6dd4c72efccdc69895fc0e985ce6e47baf6de19da6baf1def9bbb3ae8d3418f4e1c90fc968b2270279", 0xb8}], 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={@private0, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40000, 0x40, 0x5, 0x100, 0x0, 0x80d88181}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000060000000410000010"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r6}, 0x10) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$ARCH_GET_CPUID(0x1e, r7, 0x0, 0x1011) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) 2m8.79453267s ago: executing program 0 (id=1865): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0xd21, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f35076e090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x96d) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000000)=""/42, &(0x7f00000000c0)=0x2a) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) 2m7.807713276s ago: executing program 0 (id=1880): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x4000, 0x0) tkill(r1, 0xb) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 1m51.751235089s ago: executing program 34 (id=1880): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x4000, 0x0) tkill(r1, 0xb) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 11.310811946s ago: executing program 5 (id=3186): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0) r1 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 11.310456513s ago: executing program 5 (id=3188): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffd, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x22, 0x7c, 0x0, @loopback}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000540)={{}, {0x18, 0x8}, 0x0, 0x7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x0, 0x2, 0x2, 0xdbd}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x2, 0x1, 0xdbd}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x2, 0xa}) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000040)={0x3, 0x2, 0x1, 0x5}) socket(0x14, 0x2, 0x4) 11.011158227s ago: executing program 5 (id=3189): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0x1}, {0x16, 0x4, 0x6}]}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 11.010830331s ago: executing program 5 (id=3190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000240), 0x41000004, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44f5ff00", @ANYRES16=r3, @ANYBLOB="07002bbd700000000000050000001800038004000100100003800c0001800800010000000800180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440), 0x15, 0x0, &(0x7f0000000600)="4bb16fc96dcf827965e297e4bcdc4cc27c7f5cce42"}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00', 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r6 = socket$unix(0x1, 0x5, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @local}, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x1, 0x4}}}, 0x118) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="24fe0000", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) r10 = openat$kvm(0xffffff9c, &(0x7f0000000280), 0x41, 0x0) r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=virtio,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00']) ioctl$FS_IOC_GETVERSION(r11, 0x80087601, &(0x7f0000000300)) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f0000000080)={0x8}) r13 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000840)) ioctl$KVM_CREATE_PIT2(r13, 0x8010aebc, &(0x7f0000000040)) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0x0, 0xffffffb6, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r13], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x10) 10.743868956s ago: executing program 5 (id=3195): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0702230c48"], 0xa) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 9.449628394s ago: executing program 5 (id=3213): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 9.413862225s ago: executing program 35 (id=3213): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 1.796502801s ago: executing program 3 (id=3313): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0) rmdir(&(0x7f0000000440)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x79000000, 0x0) 1.796048338s ago: executing program 3 (id=3315): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/uts\x00') (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) (async) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000180)=0x2, 0x9, 0x1) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)={0x14, r1, 0x20, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) 1.688848384s ago: executing program 3 (id=3317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac}, 0x400000000000000, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xc000000}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40814}, 0x0) 1.685118674s ago: executing program 3 (id=3320): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x400c02, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=@newae={0x9c, 0x1e, 0x100, 0x70bd25, 0x25dfdbfe, {{@in=@rand_addr=0x64010102, 0x4d3, 0xa, 0xfe}, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x3266770d, 0x3505}, [@algo_crypt={0x50, 0x2, {{'xchacha20-simd\x00'}, 0x40, "2dccd27e53f4fbb8"}}, @offload={0xc, 0x1c, {r1, 0x2}}]}, 0x9c}}, 0x80) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "a7a278571758745d"}, 0x10}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) pwrite64(r7, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000240)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x3, 0xd, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x40, 0x1, 0x4, 0x45, 0x0, 0xff, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x80, 0x4, 0xff, 0x2, 0xec, 0x70, 0x4, 0x5, 0xfffffffffffffffc}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.35135113s ago: executing program 3 (id=3325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x6) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (fail_nth: 4) 1.294219583s ago: executing program 3 (id=3326): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="dd", 0x1}], 0x1, 0x3) close(r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000002a000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x1c, &(0x7f0000000200)=[@cr4={0x1, 0x200000}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-asm\x00'}, 0x58) r9 = accept$alg(r8, 0x0, 0x0) splice(r7, 0x0, r9, 0x0, 0x200000800008f, 0x5) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}, {0x0}], 0x2}}], 0x1, 0x4008440) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x40, 0x7800, 0x3, 0x5, {{0x14, 0x4, 0x1, 0x2c, 0x50, 0x66, 0x0, 0xc3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @remote, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x35, 0x3, [{0x2, 0x10, "9bfd1f6513a33d15076cc401643e"}, {0x6, 0x2}, {0x6, 0xf, "19c0dbd033b0080804e5ad341e"}, {0x7, 0xe, "d377db0afc4a122a70376cd2"}]}]}}}}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a056300000000000001090224000100000000090400000103000000092100000001220b00090581030000000800"], 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r11 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r12, 0x0) fsetxattr$system_posix_acl(r10, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001ee01000005da80d5e50000", @ANYRES32=r12, @ANYBLOB="040000000000000010000600000000002000030000000000"], 0x2c, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="b80100001a0010002bbd7000fedbdf2520010000000000000000000000000002fc0000000000000000000000000000004e0020202b00"/64, @ANYRES32=r2, @ANYRES32, @ANYBLOB="e0000001000000000000000000000000000005986c000000fe8000000000000000000000000000bb080000000000000001000000010000000100008000000000010400000000000005000000000000000700000000000000010001000000000000000000000000000d00000000000000cf00000000000000ff7f0000000000000300000000000000010000005e000000f500000029bd7000000000000a00038110000000000000000800180008000000ac000700fc01000000000000000000000000000100000000000000000000ffffe00000014e2200404e2200010200808032000000", @ANYRESOCT, @ANYRES32=r12, @ANYBLOB="ffffffffffffffff0d000000000000000300000000000000020000000000000004000000000000000200000000000000ffffff7f000000007f000000000000000000000000000000020000000000000001010000000000000100000000000000bd000000b16b6e0002000002000000000c001c00", @ANYRES32=0x0, @ANYBLOB="06000000050019003c000000"], 0x1b8}}, 0x0) 1.219256843s ago: executing program 7 (id=3328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x6) syz_emit_ethernet(0x3f2, &(0x7f0000000800)={@random, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@mpls_mc={0x8848, {[{0x57}, {0x55, 0x0, 0x1}, {0xfff}, {0x800, 0x0, 0x1}, {0x2, 0x0, 0x1}, {}, {0xfff, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x9, 0x0, 0x1}], @ipv6=@gre_packet={0x2, 0x6, "af0827", 0x398, 0x2f, 0x1, @mcast2, @mcast2, {[@hopopts={0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0xb6}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0xa, [0xc4, 0x7f, 0x1]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x32}}, @pad1, @enc_lim={0x4, 0x1, 0x3}]}, @srh={0x16, 0x14, 0x4, 0xa, 0x3, 0x40, 0x1, [@private0={0xfc, 0x0, '\x00', 0x1}, @local, @private1, @dev={0xfe, 0x80, '\x00', 0x39}, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private1]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xf8, 0x0, [0x7, 0x1], "221defb9d94932cca0959419fd48410793f21b6cb6edb3b3c3f35ae0cb7883546a3b39b08cf981f744b47c73622473f6d03de3a5243e2786eff2df2a28d323a6cd07cd391968fc2c2370d4737b90a73e1f7ed65dc26db8d39a5411de041c2aa13b355caa84a5263c84e51783f3cd7b1085c6c932157044f71aff5f00123aa171f5e2a7192248c026c9ea0ca866c680486376e877dae15e96ec81b15fd63405dabe7e4e2af68b7e52e17981d247af72b01b570c3ec9a9ed58d8401cdf1e39ac0f72f25531c0e27375660a2c02a291f3b0c5a252e97a240a4bbad50f34edb165fed7bfe88de8fe5b6b65d790dfc3a805a47900baa06c9556c2"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6, 0x1977], "11759f4f17b084f0407c38821b2568cec0f5c3ef188e95f988ecaa71697285f92b2f80d0c5367c4caa2d48865c56e473455a4160e357e984f8eb4fd1a0ff5f800694e58a2ca8531f97e544a502ac3c13cc5b552c0cc8b910793ac0b280f54319b087c409ff05977ecc379f52e015065e94a8415a905ac23f0c5c9ce57610"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "c461f3088a4a46f5a959ab5a09a0831b1d41cb322e223b5150b0d1f2fb79650a6e1c7105c7e6de1c290cef98d484379cd8e4d3efc8ad8bbd3969773c6c2245e52b3eb646e6efd3b6e5386da47bd3a0c508e9cfe995"}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0xf7, 0x1, 0x0, 0x3, 0x6, 0xce}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x9, 0x2, 0x40, 0x2, 0x0, 0x1, 0x6, 0x2}, 0x2, {0x0, 0x3ff, 0x1, 0x8, 0x1, 0x0, 0x3}}}, {0x8, 0x6558, 0x4, "0be1f1ab96221df8ac82d2d0c8498339ed68e07f42b27ddd4e70ced3d11a2f895f7c134d4100bf6bb386ceabdc249e57d3ae75d5fb44d6e0c6a2e7f16eb20853d4437d4d02803f2f3c848db5fde2e53e1d3c469009ca67dfb6fb2d931592989866a02ff784cf992d5c052015ddd2708416bb6c727e3951eff0fe754d3b7612eb82"}}}}}}}}, 0x0) 1.219080222s ago: executing program 7 (id=3329): pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000280)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000140)=0x7ff, 0x12) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x80004519, 0x0) r5 = accept$alg(r1, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x200000800008f, 0x5) 1.100722051s ago: executing program 6 (id=3330): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3b3566799bb7eb18) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x60004ce) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='io_uring_queue_async_work\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000009d00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 1.015967664s ago: executing program 6 (id=3331): close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 394.826228ms ago: executing program 2 (id=3339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="0800060037"], 0x24}, 0x1, 0xfffff000}, 0x0) 298.22328ms ago: executing program 2 (id=3340): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x400, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f350fc73967f30f1ec681350d0066b9800000c00f326635000800000f3066b9230200000f320f1078e6bad10466b8f4ffffff66ef0ff8c90f01ca", 0x3b}], 0x1, 0x54, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001400)=ANY=[@ANYBLOB='\x00', @ANYRES32=r7, @ANYBLOB="0b000080976b6408686030001400018010002700d847b0d44ca7ba9b542be6ce"], 0x38}], 0x1}, 0x4) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000040c0), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r10, 0xc004ae02, &(0x7f00000000c0)={0x40000000000000c1}) (async, rerun: 64) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) (rerun: 64) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000100)=ANY=[]) syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x7b, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r11, 0xae80, 0x0) (rerun: 64) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, r7, &(0x7f0000000380)) (async, rerun: 32) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26000411}, 0x800) (async, rerun: 32) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x1, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x8001, 0xcaa3, 0x0, 0x20001e58, 0xb, 0xe69, 0x5, 0x8, 0x3, 0x0, 0xfffffff8]}) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/143, 0x80}], 0x1, 0x51b, 0x7f) (async, rerun: 64) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) getsockopt$inet6_mreq(r12, 0x29, 0x7, 0x0, &(0x7f00000017c0)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000200)={0x3, 0x4, 0x2, 0x2}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r12, 0x80045700, &(0x7f00000001c0)) 298.073159ms ago: executing program 2 (id=3341): socket(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000000)={0x0, 0xffff0006}, 0x8) socket$igmp6(0xa, 0x3, 0x2) socket(0x80000000000000a, 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, 0x0, 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0x20800, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f0000000000)={0x11, 0x4, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x1}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x200, 0xc3ad}, 0x0, 0x0) 245.898941ms ago: executing program 7 (id=3342): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x1000000, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000800)={@flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@binder={0x73622a85, 0x1100, 0x2}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 245.506148ms ago: executing program 2 (id=3343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x3, 0xd, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x40, 0x1, 0x4, 0x45, 0x0, 0xff, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x80, 0x4, 0xff, 0x2, 0xec, 0x70, 0x4, 0x5, 0xfffffffffffffffc}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 245.33657ms ago: executing program 7 (id=3344): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$qrtrtun(r1, &(0x7f0000000000)="7f1e6436e103685593f7f74ec5f5da4ecfcc314e88098bb08c078b0ae724cfa9227d97bab9d7e8ef1cce1435cd6f9164f40234f35afaccc552e34ed6a43a318a7a012daf79527f8146e85a904000730127ccce0f50a32041df5e7d10599f47d70b3ee4d35e42ed4c4b939aa73d2cabd62da85b1b71c1ea2976a23fa5ac07e2e09ff0aaa897", 0x85) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0x800000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x244, r3, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4988}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x60}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xed}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1994e463}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x4c800}, 0x85) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0xf8, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x4, 0x0, 0x541}, [@IFLA_AF_SPEC={0xd8, 0x1a, 0x0, 0x1, [@AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}, @AF_INET6={0x80, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}]}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x23}]}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x1c, 0x0, 0x0, 0x10}, {0x8, 0xe}]}}, @AF_MPLS={0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x5}, 0x8044) 171.687601ms ago: executing program 7 (id=3345): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x1}}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 171.037333ms ago: executing program 7 (id=3346): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="0f", 0x1}], 0x1) 85.084071ms ago: executing program 6 (id=3347): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0xb1b11932a536e6fc) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000002100)={@remote, @local, 0x0}, &(0x7f0000002280)=0xc) (rerun: 64) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000022c0)=@getpolicy={0x1078, 0x15, 0x10, 0x70bd26, 0x25dfdbfc, {{@in=@rand_addr=0x64010102, @in6=@private2, 0x4e22, 0x9, 0x4e21, 0x3d3, 0xa, 0x20, 0xc0, 0x11, r2}, 0x6e6bb8, 0x1}, [@sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0x6, 0x1000, "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"}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e20, @in=@multicast1}}]}, 0x1078}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xcd00) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 32) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) (async, rerun: 64) write$FUSE_DIRENT(r4, &(0x7f0000002140)=ANY=[@ANYBLOB="100000000000000005ee80886d46369f"], 0x10) (async, rerun: 64) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r5, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000003340)='./bus/file0\x00') (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001000000000000000000000000000d"], 0x38}}, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) (rerun: 32) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r8) r9 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r10, 0x0) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', &(0x7f0000000280), 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB='trans=virtio,directio,func=KEXEC_INITRAMFS_CHECK,defcontext=system_u,uid=', @ANYRESDEC=r8, @ANYBLOB=',euid=', @ANYRESDEC=r10, @ANYBLOB=',fowner<', @ANYRESDEC=r11, @ANYBLOB="2c736563086188e3a0169859a9304f6762656c2c646f6e1cc61b14f493734da31cc15dadfafe57d35f4d656173757665c13f"]) renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='./bus/file0\x00', 0x0) (async) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000180)=0x7) 84.259005ms ago: executing program 2 (id=3348): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000800)={@flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@binder={0x73622a85, 0x1100, 0x2}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) (fail_nth: 8) 83.98728ms ago: executing program 6 (id=3349): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x9, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x4f, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0xc0a, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0x7}, {0x0, 0xfff2}, {0x7, 0x1e}}}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r11, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804) sendto$inet6(r11, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r11, 0x1) getsockopt$bt_hci(r11, 0x84, 0x7d, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r12, 0x40) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000800)={@flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@binder={0x73622a85, 0x1100, 0x2}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 83.721035ms ago: executing program 2 (id=3350): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r1, r3, 0x2f, 0x18, 0x4, @void, @value=r1}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x8d}, 0x1, 0x0, 0x0, 0x4080}, 0x0) pipe2(&(0x7f0000000180), 0x4880) (async) pipe2(&(0x7f0000000180), 0x4880) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="b80000001900010000000000000000000f000000000000000000000000000000fc0100000000000000000000000000010000000000aa000002"], 0xb8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff80000000}, {0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff80000000}, {0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) 162.179µs ago: executing program 6 (id=3351): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000000)=""/58, &(0x7f0000000040)=0x3a) rt_tgsigqueueinfo(0x0, 0x0, 0xffffffff, &(0x7f0000000000)={0x0, 0x0, 0x2127}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0xe) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) syz_emit_ethernet(0x100e, &(0x7f0000000240)={@remote, @broadcast, @void, {@generic={0xfbfb, "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"}}}, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000124000/0x1000)=nil, &(0x7f0000839000/0x1000)=nil, 0x4009, 0x0, 0x0, 0x800, 0x0, 0xe4, 0x4c, 0x1e}) 0s ago: executing program 6 (id=3352): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x80) writev(r0, &(0x7f0000000900)=[{&(0x7f000000ce80)="90", 0x1}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') r4 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r4, r4) r5 = getpgid(r4) setpgid(0x0, r5) sendfile(r2, r2, 0x0, 0xb) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): h+0x163/0x800 [ 258.957896][T22266] ? __fget_files+0x20e/0x3c0 [ 258.957911][T22266] __x64_sys_recvmmsg+0x22a/0x280 [ 258.957928][T22266] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 258.957963][T22266] do_syscall_64+0xcd/0x4c0 [ 258.957990][T22266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.958002][T22266] RIP: 0033:0x7f532c58ebe9 [ 258.958011][T22266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.958022][T22266] RSP: 002b:00007f532d432038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 258.958032][T22266] RAX: ffffffffffffffda RBX: 00007f532c7b5fa0 RCX: 00007f532c58ebe9 [ 258.958039][T22266] RDX: 0000000000000005 RSI: 00002000000086c0 RDI: 0000000000000003 [ 258.958045][T22266] RBP: 00007f532d432090 R08: 0000000000000000 R09: 0000000000000000 [ 258.958051][T22266] R10: 0000000040008062 R11: 0000000000000246 R12: 0000000000000002 [ 258.958058][T22266] R13: 00007f532c7b6038 R14: 00007f532c7b5fa0 R15: 00007fff83b31198 [ 258.958072][T22266] [ 259.031679][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 259.160453][ T1144] bond0: (slave wlan0): failed to get link speed/duplex [ 259.269762][T22280] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2669'. [ 259.277303][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 260.030673][T22308] FAULT_INJECTION: forcing a failure. [ 260.030673][T22308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.034750][T22308] CPU: 3 UID: 0 PID: 22308 Comm: syz.5.2672 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(full) [ 260.034766][T22308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 260.034773][T22308] Call Trace: [ 260.034777][T22308] [ 260.034782][T22308] dump_stack_lvl+0x16c/0x1f0 [ 260.034802][T22308] should_fail_ex+0x512/0x640 [ 260.034815][T22308] _copy_from_user+0x2e/0xd0 [ 260.034828][T22308] kstrtouint_from_user+0xd6/0x1d0 [ 260.034843][T22308] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 260.034858][T22308] ? __lock_acquire+0xb97/0x1ce0 [ 260.034881][T22308] proc_fail_nth_write+0x83/0x220 [ 260.034896][T22308] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 260.034912][T22308] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 260.034923][T22308] vfs_write+0x2a0/0x1150 [ 260.034937][T22308] ? __pfx___mutex_lock+0x10/0x10 [ 260.034954][T22308] ? __pfx_vfs_write+0x10/0x10 [ 260.034968][T22308] ? __fget_files+0x20e/0x3c0 [ 260.034985][T22308] ksys_write+0x12a/0x250 [ 260.034995][T22308] ? __pfx_ksys_write+0x10/0x10 [ 260.035010][T22308] do_syscall_64+0xcd/0x4c0 [ 260.035028][T22308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.035039][T22308] RIP: 0033:0x7fdcb7d8d69f [ 260.035048][T22308] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 260.035059][T22308] RSP: 002b:00007fdcb8b15030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 260.035070][T22308] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdcb7d8d69f [ 260.035076][T22308] RDX: 0000000000000001 RSI: 00007fdcb8b150a0 RDI: 0000000000000004 [ 260.035083][T22308] RBP: 00007fdcb8b15090 R08: 0000000000000000 R09: 0000000000000000 [ 260.035089][T22308] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 260.035095][T22308] R13: 00007fdcb7fb6038 R14: 00007fdcb7fb5fa0 R15: 00007ffca921c208 [ 260.035109][T22308] [ 260.265101][T22318] kvm: kvm [22317]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xf6a7 [ 260.270098][T22318] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 260.272168][T22318] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 260.274977][T22318] vhci_hcd vhci_hcd.0: Device attached [ 260.279050][T22319] usbip_core: unknown command [ 260.280738][T22319] vhci_hcd: unknown pdu 0 [ 260.282441][T22319] usbip_core: unknown command [ 260.294107][ T1144] vhci_hcd: stop threads [ 260.296746][ T1144] vhci_hcd: release socket [ 260.298641][ T1144] vhci_hcd: disconnect device [ 260.421139][T15301] usb 10-1: new low-speed USB device number 16 using dummy_hcd [ 260.581410][T15301] usb 10-1: Invalid ep0 maxpacket: 64 [ 260.587555][T22327] netlink: 'syz.6.2679': attribute type 11 has an invalid length. [ 260.590927][T22327] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2679'. [ 260.731158][T15301] usb 10-1: new low-speed USB device number 17 using dummy_hcd [ 260.902126][T15301] usb 10-1: Invalid ep0 maxpacket: 64 [ 260.904123][T15301] usb usb10-port1: attempt power cycle [ 261.265711][T15301] usb 10-1: new low-speed USB device number 18 using dummy_hcd [ 261.287363][T15301] usb 10-1: Invalid ep0 maxpacket: 64 [ 261.315419][T22335] nbd: couldn't find device at index -1605786504 [ 261.318001][T22335] libceph: resolve '40' (ret=-3): failed [ 261.323297][T22335] syz.3.2682: attempt to access beyond end of device [ 261.323297][T22335] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 261.327329][T22335] EXT4-fs (nbd3): unable to read superblock [ 261.360560][T22337] loop4: detected capacity change from 0 to 2560 [ 261.367950][T17163] buffer_io_error: 63 callbacks suppressed [ 261.367965][T17163] Buffer I/O error on dev loop4, logical block 0, async page read [ 261.374757][T17163] Buffer I/O error on dev loop4, logical block 0, async page read [ 261.378488][T17163] Buffer I/O error on dev loop4, logical block 0, async page read [ 261.381881][T17163] Buffer I/O error on dev loop4, logical block 0, async page read [ 261.385373][T17163] Buffer I/O error on dev loop4, logical block 0, async page read [ 261.425991][T15301] usb 10-1: new low-speed USB device number 19 using dummy_hcd [ 261.448100][T15301] usb 10-1: Invalid ep0 maxpacket: 64 [ 261.449948][T15301] usb usb10-port1: unable to enumerate USB device [ 261.551438][T22347] tmpfs: Unknown parameter 'quotOÔ*ØU‚™eta_inode_hardlimit' [ 261.559670][T22346] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.2687' sets config #1 [ 261.597784][T22350] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 261.784457][T22358] FAULT_INJECTION: forcing a failure. [ 261.784457][T22358] name failslab, interval 1, probability 0, space 0, times 0 [ 261.788377][T22358] CPU: 3 UID: 0 PID: 22358 Comm: syz.6.2691 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(full) [ 261.788392][T22358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 261.788399][T22358] Call Trace: [ 261.788403][T22358] [ 261.788408][T22358] dump_stack_lvl+0x16c/0x1f0 [ 261.788428][T22358] should_fail_ex+0x512/0x640 [ 261.788438][T22358] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 261.788452][T22358] should_failslab+0xc2/0x120 [ 261.788464][T22358] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 261.788476][T22358] ? __alloc_skb+0x2b2/0x380 [ 261.788493][T22358] __alloc_skb+0x2b2/0x380 [ 261.788507][T22358] ? __pfx___alloc_skb+0x10/0x10 [ 261.788523][T22358] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 261.788542][T22358] netlink_alloc_large_skb+0x69/0x130 [ 261.788559][T22358] netlink_sendmsg+0x6a1/0xdd0 [ 261.788578][T22358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.788599][T22358] ____sys_sendmsg+0xa98/0xc70 [ 261.788611][T22358] ? copy_msghdr_from_user+0x10a/0x160 [ 261.788627][T22358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.788644][T22358] ___sys_sendmsg+0x134/0x1d0 [ 261.788661][T22358] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.788687][T22358] ? __mutex_unlock_slowpath+0x100/0x800 [ 261.788708][T22358] __sys_sendmsg+0x16d/0x220 [ 261.788724][T22358] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.788748][T22358] do_syscall_64+0xcd/0x4c0 [ 261.788765][T22358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.788776][T22358] RIP: 0033:0x7f532c58ebe9 [ 261.788785][T22358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.788795][T22358] RSP: 002b:00007f532d432038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.788806][T22358] RAX: ffffffffffffffda RBX: 00007f532c7b5fa0 RCX: 00007f532c58ebe9 [ 261.788812][T22358] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 261.788818][T22358] RBP: 00007f532d432090 R08: 0000000000000000 R09: 0000000000000000 [ 261.788825][T22358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.788831][T22358] R13: 00007f532c7b6038 R14: 00007f532c7b5fa0 R15: 00007fff83b31198 [ 261.788844][T22358] [ 261.882650][T22238] block nbd2: shutting down sockets [ 261.902189][T22360] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2692'. [ 262.073889][ T40] kauditd_printk_skb: 661 callbacks suppressed [ 262.073900][ T40] audit: type=1400 audit(1754504970.833:28320): avc: denied { read write } for pid=20500 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.084069][ T40] audit: type=1400 audit(1754504970.833:28321): avc: denied { open } for pid=20500 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.093910][ T40] audit: type=1400 audit(1754504970.833:28322): avc: denied { ioctl } for pid=20500 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.102143][ T40] audit: type=1400 audit(1754504970.852:28323): avc: denied { create } for pid=22363 comm="syz.6.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.108482][ T40] audit: type=1400 audit(1754504970.852:28324): avc: denied { write } for pid=22363 comm="syz.6.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.116303][ T40] audit: type=1400 audit(1754504970.852:28325): avc: denied { read } for pid=22363 comm="syz.6.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.124443][ T40] audit: type=1400 audit(1754504970.852:28326): avc: denied { ioctl } for pid=22363 comm="syz.6.2693" path="socket:[62949]" dev="sockfs" ino=62949 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.133119][ T40] audit: type=1400 audit(1754504970.852:28327): avc: denied { create } for pid=22363 comm="syz.6.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 262.139901][ T40] audit: type=1400 audit(1754504970.861:28328): avc: denied { write } for pid=22363 comm="syz.6.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 262.146816][ T40] audit: type=1400 audit(1754504970.880:28329): avc: denied { read write } for pid=20500 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.683934][T22377] sctp: [Deprecated]: syz.6.2698 (pid 22377) Use of int in maxseg socket option. [ 262.683934][T22377] Use struct sctp_assoc_value instead [ 262.734607][T22379] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 262.742204][T22379] kvm: Disabled LAPIC found during irq injection [ 262.890704][T22391] program syz.3.2705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.919047][ T5327] Bluetooth: hci0: unexpected event 0x08 length: 7 > 4 [ 263.341008][T22402] block nbd6: shutting down sockets [ 263.565210][ T46] net_ratelimit: 35 callbacks suppressed [ 263.565221][ T46] bond0: (slave wlan0): failed to get link speed/duplex [ 263.682015][ T1145] bond0: (slave wlan0): failed to get link speed/duplex [ 263.799440][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 263.809105][T22417] netlink: 'syz.6.2715': attribute type 1 has an invalid length. [ 263.810171][ T1468] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 263.916928][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 263.973065][ T1468] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 263.975899][ T1468] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 263.979115][ T1468] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 263.982687][ T1468] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.987946][ T1468] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 263.990769][ T1468] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 263.993337][ T1468] usb 10-1: Product: syz [ 263.994675][ T1468] usb 10-1: Manufacturer: syz [ 264.001577][ T1468] cdc_wdm 10-1:1.0: skipping garbage [ 264.003407][ T1468] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 264.034565][ T46] bond0: (slave wlan0): failed to get link speed/duplex [ 264.056432][T15301] usb 7-1: USB disconnect, device number 28 [ 264.152423][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 264.216344][ T34] usb 10-1: USB disconnect, device number 20 [ 264.269739][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 264.376617][ T53] usb 11-1: new low-speed USB device number 9 using dummy_hcd [ 264.387386][ T1144] bond0: (slave wlan0): failed to get link speed/duplex [ 264.505203][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 264.549401][ T53] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 264.551781][ T53] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 264.555080][ T53] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.558935][ T53] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 264.562372][ T53] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 264.566562][ T53] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 264.569013][ T53] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 264.572336][ T53] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.575925][ T53] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 264.579426][ T53] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 264.584318][ T53] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 264.586674][ T53] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 264.590014][ T53] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.593695][ T53] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 264.597123][ T53] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 264.605774][ T53] usb 11-1: string descriptor 0 read error: -22 [ 264.607784][ T53] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 264.610599][ T53] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.622468][ T46] bond0: (slave wlan0): failed to get link speed/duplex [ 264.624614][ T53] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 265.091435][T22443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2724'. [ 265.345068][ T5971] Bluetooth: hci2: unexpected event 0x08 length: 7 > 4 [ 265.567227][T22457] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2731'. [ 265.572292][T22457] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2731'. [ 265.733712][T22461] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2733'. [ 266.185196][T22470] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2737'. [ 266.381162][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.881103][T22502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.884287][T22502] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.141865][T22512] FAULT_INJECTION: forcing a failure. [ 267.141865][T22512] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 267.150250][T22512] CPU: 3 UID: 0 PID: 22512 Comm: syz.5.2750 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(full) [ 267.150266][T22512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 267.150273][T22512] Call Trace: [ 267.150277][T22512] [ 267.150282][T22512] dump_stack_lvl+0x16c/0x1f0 [ 267.150303][T22512] should_fail_ex+0x512/0x640 [ 267.150316][T22512] should_fail_alloc_page+0xe7/0x130 [ 267.150330][T22512] prepare_alloc_pages+0x3c2/0x610 [ 267.150348][T22512] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 267.150361][T22512] ? __lock_acquire+0x62e/0x1ce0 [ 267.150383][T22512] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 267.150395][T22512] ? weighted_interleave_nid+0x3e6/0x5a0 [ 267.150412][T22512] ? __pfx_weighted_interleave_nid+0x10/0x10 [ 267.150429][T22512] ? policy_nodemask+0xea/0x4e0 [ 267.150443][T22512] alloc_pages_mpol+0x1fb/0x550 [ 267.150456][T22512] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 267.150470][T22512] ? __lock_acquire+0x62e/0x1ce0 [ 267.150487][T22512] folio_alloc_mpol_noprof+0x36/0x2f0 [ 267.150502][T22512] vma_alloc_folio_noprof+0xed/0x1e0 [ 267.150516][T22512] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 267.150535][T22512] do_pte_missing+0x2230/0x3ba0 [ 267.150552][T22512] ? find_held_lock+0x2b/0x80 [ 267.150568][T22512] __handle_mm_fault+0x152a/0x2a50 [ 267.150589][T22512] ? __pfx___handle_mm_fault+0x10/0x10 [ 267.150606][T22512] ? __pte_offset_map_lock+0x174/0x310 [ 267.150619][T22512] ? find_held_lock+0x2b/0x80 [ 267.150636][T22512] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 267.150655][T22512] handle_mm_fault+0x589/0xd10 [ 267.150674][T22512] __get_user_pages+0x551/0x34a0 [ 267.150694][T22512] ? __pfx___get_user_pages+0x10/0x10 [ 267.150712][T22512] populate_vma_page_range+0x267/0x3f0 [ 267.150728][T22512] ? __pfx_populate_vma_page_range+0x10/0x10 [ 267.150742][T22512] ? __pfx_find_vma_intersection+0x10/0x10 [ 267.150756][T22512] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 267.150769][T22512] __mm_populate+0x1d8/0x380 [ 267.150785][T22512] ? __pfx___mm_populate+0x10/0x10 [ 267.150801][T22512] ? up_write+0x1b2/0x520 [ 267.150813][T22512] do_mlock+0x448/0x810 [ 267.150823][T22512] ? __fget_files+0x20e/0x3c0 [ 267.150835][T22512] ? __pfx_do_mlock+0x10/0x10 [ 267.150846][T22512] ? fput+0x9b/0xd0 [ 267.150860][T22512] ? ksys_write+0x1ac/0x250 [ 267.150871][T22512] ? __pfx_ksys_write+0x10/0x10 [ 267.150884][T22512] __x64_sys_mlock+0x59/0x80 [ 267.150895][T22512] do_syscall_64+0xcd/0x4c0 [ 267.150912][T22512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.150923][T22512] RIP: 0033:0x7fdcb7d8ebe9 [ 267.150932][T22512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.150942][T22512] RSP: 002b:00007fdcb8b15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 267.150953][T22512] RAX: ffffffffffffffda RBX: 00007fdcb7fb5fa0 RCX: 00007fdcb7d8ebe9 [ 267.150959][T22512] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 267.150966][T22512] RBP: 00007fdcb8b15090 R08: 0000000000000000 R09: 0000000000000000 [ 267.150972][T22512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.150978][T22512] R13: 00007fdcb7fb6038 R14: 00007fdcb7fb5fa0 R15: 00007ffca921c208 [ 267.150991][T22512] [ 267.290389][T22521] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2754'. [ 267.296171][T22522] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2754'. [ 267.426150][ T40] kauditd_printk_skb: 655 callbacks suppressed [ 267.426165][ T40] audit: type=1400 audit(1754504975.847:28985): avc: denied { read write } for pid=20957 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.439413][ T40] audit: type=1400 audit(1754504975.847:28986): avc: denied { open } for pid=20957 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.449108][ T40] audit: type=1400 audit(1754504975.847:28987): avc: denied { ioctl } for pid=20957 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.459520][ T40] audit: type=1400 audit(1754504975.856:28988): avc: denied { create } for pid=22525 comm="syz.5.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 267.466565][ T40] audit: type=1400 audit(1754504975.856:28989): avc: denied { create } for pid=22525 comm="syz.5.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 267.473318][ T40] audit: type=1400 audit(1754504975.856:28990): avc: denied { write } for pid=22525 comm="syz.5.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 267.481054][ T40] audit: type=1400 audit(1754504975.856:28991): avc: denied { read } for pid=22525 comm="syz.5.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 267.488480][ T40] audit: type=1400 audit(1754504975.856:28992): avc: denied { allowed } for pid=22525 comm="syz.5.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 267.494885][ T40] audit: type=1400 audit(1754504975.865:28993): avc: denied { append } for pid=22528 comm="syz.2.2757" name="userio" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.502943][ T40] audit: type=1400 audit(1754504975.865:28994): avc: denied { open } for pid=22528 comm="syz.2.2757" path="/dev/userio" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 268.127847][T22439] block nbd6: shutting down sockets [ 268.301330][T22541] vxcan1: entered allmulticast mode [ 268.807962][ T10] IPVS: starting estimator thread 0... [ 268.809786][T22563] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.2769'. [ 268.815143][T22562] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.2769'. [ 268.898857][T22565] IPVS: using max 46 ests per chain, 110400 per kthread [ 269.016555][ T80] net_ratelimit: 36 callbacks suppressed [ 269.016567][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 269.144724][ T1145] bond0: (slave wlan0): failed to get link speed/duplex [ 269.262237][ T1144] bond0: (slave wlan0): failed to get link speed/duplex [ 269.379832][ T1144] bond0: (slave wlan0): failed to get link speed/duplex [ 269.497550][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 269.615266][ T1144] bond0: (slave wlan0): failed to get link speed/duplex [ 269.743494][ T55] bond0: (slave wlan0): failed to get link speed/duplex [ 269.872135][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 269.912273][ C3] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 269.915500][ C3] sr 2:0:0:0: [sr0] tag#2 CDB: opcode=0xd6 (vendor) d6 43 70 da 33 ae [ 269.989132][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 270.106821][ T1144] bond0: (slave wlan0): failed to get link speed/duplex [ 270.299845][ T6049] usb 11-1: USB disconnect, device number 9 [ 270.462898][T22599] : renamed from veth1_vlan (while UP) [ 270.887352][ T6560] usb 11-1: new low-speed USB device number 10 using dummy_hcd [ 271.049956][ T6560] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 271.052333][ T6560] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 271.055693][ T6560] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.059788][ T6560] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 271.063210][ T6560] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 271.067777][ T6560] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 271.070524][ T6560] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 271.073882][ T6560] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.077614][ T6560] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 271.084042][ T6560] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 271.088388][ T6560] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 271.090892][ T6560] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 271.094259][ T6560] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.097845][ T6560] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 271.101840][ T6560] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 271.108228][ T6560] usb 11-1: string descriptor 0 read error: -22 [ 271.110256][ T6560] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 271.113125][ T6560] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.122801][ T6560] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 271.390985][T22603] block nbd6: shutting down sockets [ 271.398926][ T34] usb 11-1: USB disconnect, device number 10 [ 271.524431][T22642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2800'. [ 271.696885][T22655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2806'. [ 271.754059][T22655] netlink: 'syz.5.2806': attribute type 1 has an invalid length. [ 272.052480][ T10] usb 11-1: new low-speed USB device number 11 using dummy_hcd [ 272.225770][ T10] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 272.229041][ T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 272.232559][ T10] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 272.237956][ T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 272.241944][ T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 272.248024][ T10] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 272.250584][ T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 272.254337][ T10] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 272.258490][ T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 272.262422][ T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 272.267236][ T10] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 272.269749][ T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 272.273283][ T10] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 272.277028][ T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 272.280550][ T10] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 272.287929][ T10] usb 11-1: string descriptor 0 read error: -22 [ 272.290043][ T10] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 272.292966][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.301570][ T10] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 272.556154][T22663] block nbd6: shutting down sockets [ 272.571533][ T34] usb 11-1: USB disconnect, device number 11 [ 272.656305][T22683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22683 comm=syz.6.2815 [ 272.812572][ T40] kauditd_printk_skb: 806 callbacks suppressed [ 272.812588][ T40] audit: type=1400 audit(1754504980.888:29801): avc: denied { create } for pid=22684 comm="syz.6.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.823515][ T40] audit: type=1400 audit(1754504980.888:29802): avc: denied { write } for pid=22684 comm="syz.6.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.833140][ T40] audit: type=1400 audit(1754504980.888:29803): avc: denied { read } for pid=22684 comm="syz.6.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.841675][ T40] audit: type=1400 audit(1754504980.898:29804): avc: denied { recv } for pid=5879 comm="syz-executor" saddr=127.0.0.1 src=57794 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 272.853258][ T40] audit: type=1400 audit(1754504980.898:29805): avc: denied { read write } for pid=18167 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.861870][ T40] audit: type=1400 audit(1754504980.898:29806): avc: denied { open } for pid=18167 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.871007][ T40] audit: type=1400 audit(1754504980.898:29807): avc: denied { ioctl } for pid=18167 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.881189][ T40] audit: type=1400 audit(1754504980.898:29808): avc: denied { mounton } for pid=22684 comm="syz.6.2816" path="/174/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 272.894737][ T40] audit: type=1400 audit(1754504980.916:29809): avc: denied { mount } for pid=22684 comm="syz.6.2816" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 272.904280][ T40] audit: type=1400 audit(1754504980.916:29810): avc: denied { create } for pid=22688 comm="syz.5.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 272.906664][T22695] netlink: 348 bytes leftover after parsing attributes in process `syz.5.2818'. [ 273.079785][T22701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2819'. [ 273.083469][T22701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2819'. [ 273.091839][T22701] erspan0: entered promiscuous mode [ 273.094209][T22701] gretap0: entered promiscuous mode [ 273.290392][T22712] FAULT_INJECTION: forcing a failure. [ 273.290392][T22712] name failslab, interval 1, probability 0, space 0, times 0 [ 273.294448][T22712] CPU: 2 UID: 0 PID: 22712 Comm: syz.2.2824 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(full) [ 273.294463][T22712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 273.294470][T22712] Call Trace: [ 273.294474][T22712] [ 273.294490][T22712] dump_stack_lvl+0x16c/0x1f0 [ 273.294526][T22712] should_fail_ex+0x512/0x640 [ 273.294540][T22712] ? fs_reclaim_acquire+0xae/0x150 [ 273.294556][T22712] ? p9_fcall_init+0x97/0x260 [ 273.294570][T22712] should_failslab+0xc2/0x120 [ 273.294584][T22712] __kmalloc_noprof+0xd2/0x510 [ 273.294595][T22712] ? rcu_is_watching+0x12/0xc0 [ 273.294611][T22712] p9_fcall_init+0x97/0x260 [ 273.294627][T22712] p9_tag_alloc+0x202/0x640 [ 273.294644][T22712] ? __pfx_p9_tag_alloc+0x10/0x10 [ 273.294665][T22712] p9_client_prepare_req+0x19b/0x4d0 [ 273.294682][T22712] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 273.294698][T22712] ? do_syscall_64+0xcd/0x4c0 [ 273.294716][T22712] ? __lock_acquire+0xb97/0x1ce0 [ 273.294735][T22712] p9_client_rpc+0x1c4/0xc50 [ 273.294753][T22712] ? __pfx_p9_client_rpc+0x10/0x10 [ 273.294777][T22712] ? idr_alloc_u32+0x20f/0x2f0 [ 273.294800][T22712] ? find_held_lock+0x2b/0x80 [ 273.294815][T22712] ? idr_preload_end+0xc2/0x230 [ 273.294833][T22712] p9_client_attach+0x156/0x2b0 [ 273.294845][T22712] ? __pfx_p9_client_attach+0x10/0x10 [ 273.294856][T22712] ? v9fs_fid_lookup+0x4bd/0xeb0 [ 273.294873][T22712] v9fs_fid_lookup+0x97a/0xeb0 [ 273.294890][T22712] v9fs_vfs_lookup+0x1a1/0x5b0 [ 273.294902][T22712] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 273.294911][T22712] ? d_alloc+0x176/0x1e0 [ 273.294925][T22712] ? do_raw_spin_unlock+0x172/0x230 [ 273.294937][T22712] ? _raw_spin_unlock+0x28/0x50 [ 273.294958][T22712] lookup_one_qstr_excl+0x1d1/0x250 [ 273.294974][T22712] ? mnt_want_write+0x161/0x450 [ 273.294985][T22712] do_unlinkat+0x284/0x6a0 [ 273.294999][T22712] ? __pfx_do_unlinkat+0x10/0x10 [ 273.295017][T22712] ? getname_flags.part.0+0x1c5/0x550 [ 273.295034][T22712] __x64_sys_unlink+0xc5/0x110 [ 273.295047][T22712] do_syscall_64+0xcd/0x4c0 [ 273.295064][T22712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.295075][T22712] RIP: 0033:0x7f444b58ebe9 [ 273.295085][T22712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.295095][T22712] RSP: 002b:00007f444c433038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 273.295105][T22712] RAX: ffffffffffffffda RBX: 00007f444b7b5fa0 RCX: 00007f444b58ebe9 [ 273.295112][T22712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 273.295118][T22712] RBP: 00007f444c433090 R08: 0000000000000000 R09: 0000000000000000 [ 273.295124][T22712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.295130][T22712] R13: 00007f444b7b6038 R14: 00007f444b7b5fa0 R15: 00007ffcf1030b28 [ 273.295144][T22712] [ 273.303682][T22707] block nbd3: shutting down sockets [ 273.806898][T22727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2829'. [ 273.811664][T22727] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2829'. [ 274.096402][T22743] block nbd5: shutting down sockets [ 274.480362][ T80] net_ratelimit: 36 callbacks suppressed [ 274.480373][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 274.488305][T22762] cgroup: fork rejected by pids controller in /syz5 [ 274.616950][ T46] bond0: (slave wlan0): failed to get link speed/duplex [ 274.651302][T22898] fuse: Unknown parameter 'user_id00000000000000000000' [ 274.744433][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 274.777482][T22899] block nbd6: shutting down sockets [ 274.864521][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 274.993405][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 275.120989][ T46] bond0: (slave wlan0): failed to get link speed/duplex [ 275.148771][T22915] syz.6.2851(22915): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 275.248999][ T55] bond0: (slave wlan0): failed to get link speed/duplex [ 275.366712][ T55] bond0: (slave wlan0): failed to get link speed/duplex [ 275.437682][T22922] block nbd2: shutting down sockets [ 275.484403][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 275.551010][T22928] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 275.601936][ T55] bond0: (slave wlan0): failed to get link speed/duplex [ 275.761178][T22938] fuse: Unknown parameter '0x0000000000000004' [ 275.803245][T22942] netlink: 'syz.5.2861': attribute type 10 has an invalid length. [ 275.808647][T22942] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2861'. [ 275.908623][T22955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2865'. [ 276.111440][T22974] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2870'. [ 276.388090][T22990] netlink: 'syz.6.2876': attribute type 6 has an invalid length. [ 276.394033][T22990] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.397339][T22990] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.480835][ T34] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 276.638854][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 276.641923][ T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.645140][ T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.648468][ T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 276.652039][ T34] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 276.657362][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.660592][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 276.663298][ T34] usb 7-1: SerialNumber: syz [ 276.669572][ T34] hub 7-1:1.0: bad descriptor, ignoring hub [ 276.672013][ T34] hub 7-1:1.0: probe with driver hub failed with error -5 [ 276.674712][ T34] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 276.687508][T23000] [U]  [ 276.799227][ T6032] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 276.891027][T23011] __nla_validate_parse: 4 callbacks suppressed [ 276.891043][T23011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2885'. [ 276.993059][ T6032] usb 11-1: config index 0 descriptor too short (expected 23569, got 27) [ 276.996326][ T6032] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.001073][ T6032] usb 11-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 277.004949][ T6032] usb 11-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 277.008213][ T6032] usb 11-1: Manufacturer: syz [ 277.011442][ T6032] usb 11-1: config 0 descriptor?? [ 277.055765][ T6032] rc_core: IR keymap rc-hauppauge not found [ 277.058172][ T6032] Registered IR keymap rc-empty [ 277.060602][ T6032] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 277.065417][ T6032] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input33 [ 277.235822][T22999] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 277.300114][T23019] syz.5.2887 (23019): drop_caches: 2 [ 277.319421][ T34] usb 11-1: USB disconnect, device number 12 [ 277.958031][T23025] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2888'. [ 278.013829][T23028] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2889'. [ 278.176101][ T40] kauditd_printk_skb: 995 callbacks suppressed [ 278.176112][ T40] audit: type=1400 audit(1754504985.893:30806): avc: denied { read write } for pid=23033 comm="syz.6.2891" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 278.188206][T23030] block nbd5: shutting down sockets [ 278.188402][ T40] audit: type=1400 audit(1754504985.893:30807): avc: denied { open } for pid=23033 comm="syz.6.2891" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 278.200645][ T40] audit: type=1400 audit(1754504985.893:30808): avc: denied { ioctl } for pid=23033 comm="syz.6.2891" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 278.211117][ T40] audit: type=1400 audit(1754504985.902:30809): avc: denied { create } for pid=23033 comm="syz.6.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 278.218785][ T40] audit: type=1400 audit(1754504985.902:30810): avc: denied { module_request } for pid=23033 comm="syz.6.2891" kmod="net-pf-10-proto-0-type-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 278.228711][ T40] audit: type=1400 audit(1754504985.911:30811): avc: denied { ioctl } for pid=23029 comm="syz.5.2890" path="/dev/nbd5" dev="devtmpfs" ino=695 ioctlcmd=0xab03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.241014][ T40] audit: type=1400 audit(1754504985.921:30812): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57794 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 278.252313][ T40] audit: type=1400 audit(1754504985.921:30813): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=57794 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 278.260339][ T40] audit: type=1400 audit(1754504985.921:30814): avc: denied { recv } for pid=5878 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57794 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 278.270376][ T40] audit: type=1400 audit(1754504985.921:30815): avc: denied { recv } for pid=23029 comm="syz.5.2890" saddr=10.0.2.2 src=36950 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 278.302543][T23034] geneve2: entered promiscuous mode [ 278.314104][T23034] bridge3: entered promiscuous mode [ 279.201198][T23049] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2897'. [ 279.203813][T23049] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2897'. [ 279.227720][T23051] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2898'. [ 279.260434][T23053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2899'. [ 279.291198][ T5836] usb 7-1: USB disconnect, device number 29 [ 279.418624][T23058] block nbd2: shutting down sockets [ 279.429134][ T6560] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 279.514542][ T53] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 279.564830][T23067] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2904'. [ 279.611425][ T6560] usb 11-1: Using ep0 maxpacket: 16 [ 279.616301][ T6560] usb 11-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 279.619183][ T6560] usb 11-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 279.622203][ T6560] usb 11-1: Product: syz [ 279.623581][ T6560] usb 11-1: Manufacturer: syz [ 279.625086][ T6560] usb 11-1: SerialNumber: syz [ 279.628189][ T6560] usb 11-1: config 0 descriptor?? [ 279.689313][ T53] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 279.692170][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.694661][ T53] usb 10-1: Product: syz [ 279.696028][ T53] usb 10-1: Manufacturer: syz [ 279.698403][ T53] usb 10-1: SerialNumber: syz [ 279.701950][ T53] usb 10-1: config 0 descriptor?? [ 279.835463][ T13] net_ratelimit: 37 callbacks suppressed [ 279.835475][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 279.849796][T23047] cgroup: Name too long [ 279.853984][ T6032] usb 11-1: USB disconnect, device number 13 [ 279.921008][T23055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2900'. [ 279.944143][T23055] gre0: entered promiscuous mode [ 279.947619][ T6560] usb 10-1: USB disconnect, device number 21 [ 279.963597][ T1145] bond0: (slave wlan0): failed to get link speed/duplex [ 280.092003][ T55] bond0: (slave wlan0): failed to get link speed/duplex [ 280.209641][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 280.306229][ T1468] page_pool_release_retry() stalled pool shutdown: id 57, 1 inflight 60 sec [ 280.318059][T23082] block nbd3: shutting down sockets [ 280.327968][ T55] bond0: (slave wlan0): failed to get link speed/duplex [ 280.376854][ T5971] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 280.444783][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 280.566019][T23102] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2917'. [ 280.576312][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 280.690863][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 280.818949][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 280.939369][ T55] bond0: (slave wlan0): failed to get link speed/duplex [ 280.962412][T25044] block nbd2: shutting down sockets [ 280.978529][ T5971] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 281.009949][T25878] FAULT_INJECTION: forcing a failure. [ 281.009949][T25878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.017251][T25878] CPU: 3 UID: 0 PID: 25878 Comm: syz.2.2922 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(full) [ 281.017268][T25878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 281.017278][T25878] Call Trace: [ 281.017282][T25878] [ 281.017287][T25878] dump_stack_lvl+0x16c/0x1f0 [ 281.017307][T25878] should_fail_ex+0x512/0x640 [ 281.017320][T25878] _copy_from_user+0x2e/0xd0 [ 281.017332][T25878] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 281.017347][T25878] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 281.017361][T25878] ? __pfx_sock_has_perm+0x10/0x10 [ 281.017373][T25878] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 281.017389][T25878] xsk_setsockopt+0x179/0x9a0 [ 281.017402][T25878] ? __pfx_xsk_setsockopt+0x10/0x10 [ 281.017414][T25878] ? find_held_lock+0x2b/0x80 [ 281.017430][T25878] ? selinux_socket_setsockopt+0x6a/0x80 [ 281.017442][T25878] ? __pfx_xsk_setsockopt+0x10/0x10 [ 281.017456][T25878] do_sock_setsockopt+0xf0/0x1d0 [ 281.017469][T25878] __sys_setsockopt+0x1a0/0x230 [ 281.017486][T25878] __x64_sys_setsockopt+0xbd/0x160 [ 281.017499][T25878] ? do_syscall_64+0x91/0x4c0 [ 281.017515][T25878] ? lockdep_hardirqs_on+0x7c/0x110 [ 281.017531][T25878] do_syscall_64+0xcd/0x4c0 [ 281.017548][T25878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.017559][T25878] RIP: 0033:0x7f444b58ebe9 [ 281.017568][T25878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.017580][T25878] RSP: 002b:00007f444c433038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 281.017590][T25878] RAX: ffffffffffffffda RBX: 00007f444b7b5fa0 RCX: 00007f444b58ebe9 [ 281.017597][T25878] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 281.017603][T25878] RBP: 00007f444c433090 R08: 0000000000000020 R09: 0000000000000000 [ 281.017610][T25878] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 281.017616][T25878] R13: 00007f444b7b6038 R14: 00007f444b7b5fa0 R15: 00007ffcf1030b28 [ 281.017629][T25878] [ 281.178361][T25891] tmpfs: Unknown parameter 'hugeö5ц\(ˆ6¸' [ 281.412315][T25906] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 281.419408][T25906] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 281.430854][T25909] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 281.434080][T25909] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 281.437611][T25901] block nbd3: shutting down sockets [ 281.559538][T25923] netdevsim netdevsim3 ªªªªªª: renamed from netdevsim0 (while UP) [ 281.588417][T25921] SELinux: syz.2.2938 (25921) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 281.777793][T25938] futex_wake_op: syz.6.2945 tries to shift op by 32; fix this program [ 281.842831][T25938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.845519][T25938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.231338][T25945] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 284.875550][ T40] kauditd_printk_skb: 752 callbacks suppressed [ 284.875560][ T40] audit: type=1400 audit(1754504993.167:31568): avc: denied { unmount } for pid=20500 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 284.884829][ T40] audit: type=1400 audit(1754504993.167:31569): avc: denied { recv } for pid=5879 comm="syz-executor" saddr=127.0.0.1 src=57794 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 284.893023][ T40] audit: type=1400 audit(1754504993.176:31570): avc: denied { read write } for pid=21452 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.901225][ T40] audit: type=1400 audit(1754504993.176:31571): avc: denied { open } for pid=21452 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.909581][ T40] audit: type=1400 audit(1754504993.176:31572): avc: denied { ioctl } for pid=21452 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.914387][T25960] tmpfs: Cannot disable swap on remount [ 284.918947][ T40] audit: type=1400 audit(1754504993.176:31573): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=36950 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 284.928389][ T40] audit: type=1400 audit(1754504993.186:31574): avc: denied { read write } for pid=20500 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.937780][ T40] audit: type=1400 audit(1754504993.186:31575): avc: denied { open } for pid=20500 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.949415][ T40] audit: type=1400 audit(1754504993.186:31576): avc: denied { ioctl } for pid=20500 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.958504][ T40] audit: type=1400 audit(1754504993.186:31577): avc: denied { mounton } for pid=25959 comm="syz.3.2954" path="/144/file0" dev="tmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 285.053423][T25972] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 285.064736][T25972] __nla_validate_parse: 6 callbacks suppressed [ 285.064747][T25972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2958'. [ 285.276874][ T1145] net_ratelimit: 35 callbacks suppressed [ 285.276886][ T1145] bond0: (slave wlan0): failed to get link speed/duplex [ 285.405150][ T46] bond0: (slave wlan0): failed to get link speed/duplex [ 285.522721][ T5971] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 285.522768][ T5972] Bluetooth: hci3: command 0xfc11 tx timeout [ 285.523231][ T55] bond0: (slave wlan0): failed to get link speed/duplex [ 285.543171][ T1145] Bluetooth: Error in BCSP hdr checksum [ 285.650926][ T1145] bond0: (slave wlan0): failed to get link speed/duplex [ 285.768677][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 285.811524][ T80] Bluetooth: Error in BCSP hdr checksum [ 285.886193][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 286.003817][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 286.121422][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 286.249697][ T1144] bond0: (slave wlan0): failed to get link speed/duplex [ 286.367273][ T55] bond0: (slave wlan0): failed to get link speed/duplex [ 286.744160][T25990] fuse: Bad value for 'fd' [ 287.404182][ T5975] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 287.404274][ T5971] Bluetooth: hci5: command 0x1003 tx timeout [ 287.501992][T26002] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 287.509626][T26002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2968'. [ 287.957370][T26014] netlink: 'syz.5.2973': attribute type 8 has an invalid length. [ 288.103057][T26024] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 288.111862][T26024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2978'. [ 288.169626][T26031] fuse: Unknown parameter '' [ 288.178549][T26031] cgroup: Unknown subsys name 'cpuset' [ 288.198574][T26033] syz.5.2981: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 288.203976][T26033] CPU: 3 UID: 0 PID: 26033 Comm: syz.5.2981 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(full) [ 288.204002][T26033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 288.204014][T26033] Call Trace: [ 288.204022][T26033] [ 288.204031][T26033] dump_stack_lvl+0x16c/0x1f0 [ 288.204062][T26033] warn_alloc+0x248/0x3a0 [ 288.204085][T26033] ? __pfx_warn_alloc+0x10/0x10 [ 288.204101][T26033] ? lockdep_hardirqs_on+0x7c/0x110 [ 288.204145][T26033] ? kasan_save_stack+0x42/0x60 [ 288.204162][T26033] ? kasan_save_stack+0x33/0x60 [ 288.204179][T26033] ? kasan_save_track+0x14/0x30 [ 288.204196][T26033] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 288.204216][T26033] ? __vb2_queue_alloc+0x8c9/0x1280 [ 288.204233][T26033] ? vb2_core_create_bufs+0x559/0xab0 [ 288.204254][T26033] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 288.204276][T26033] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 288.204317][T26033] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 288.204345][T26033] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 288.204382][T26033] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 288.204404][T26033] vmalloc_user_noprof+0x9e/0xe0 [ 288.204430][T26033] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 288.204452][T26033] vb2_vmalloc_alloc+0x135/0x3f0 [ 288.204474][T26033] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 288.204495][T26033] __vb2_queue_alloc+0x8c9/0x1280 [ 288.204530][T26033] vb2_core_create_bufs+0x559/0xab0 [ 288.204554][T26033] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 288.204582][T26033] ? __mutex_trylock_common+0xe9/0x250 [ 288.204616][T26033] vb2_create_bufs+0x5e8/0x840 [ 288.204650][T26033] ? __pfx_vb2_create_bufs+0x10/0x10 [ 288.204702][T26033] ? v4l_sanitize_colorspace+0x213/0x400 [ 288.204738][T26033] vb2_ioctl_create_bufs+0x244/0x3e0 [ 288.204770][T26033] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 288.204797][T26033] vidioc_create_bufs+0x7d/0xf0 [ 288.204826][T26033] v4l_create_bufs+0x156/0x270 [ 288.204852][T26033] __video_do_ioctl+0xb40/0xfc0 [ 288.204881][T26033] ? __might_fault+0xe3/0x190 [ 288.204899][T26033] ? __pfx___video_do_ioctl+0x10/0x10 [ 288.204935][T26033] video_usercopy+0x4cd/0x1720 [ 288.204958][T26033] ? __pfx___video_do_ioctl+0x10/0x10 [ 288.204978][T26033] ? selinux_kernel_read_file+0x60/0x130 [ 288.205001][T26033] ? __pfx_video_usercopy+0x10/0x10 [ 288.205040][T26033] v4l2_ioctl+0x1bd/0x250 [ 288.205058][T26033] ? __pfx_v4l2_ioctl+0x10/0x10 [ 288.205073][T26033] __x64_sys_ioctl+0x18e/0x210 [ 288.205091][T26033] do_syscall_64+0xcd/0x4c0 [ 288.205110][T26033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.205121][T26033] RIP: 0033:0x7fdcb7d8ebe9 [ 288.205136][T26033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.205147][T26033] RSP: 002b:00007fdcb8b15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.205159][T26033] RAX: ffffffffffffffda RBX: 00007fdcb7fb5fa0 RCX: 00007fdcb7d8ebe9 [ 288.205166][T26033] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000004 [ 288.205174][T26033] RBP: 00007fdcb7e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 288.205181][T26033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.205188][T26033] R13: 00007fdcb7fb6038 R14: 00007fdcb7fb5fa0 R15: 00007ffca921c208 [ 288.205203][T26033] [ 288.205273][T26033] Mem-Info: [ 288.311016][T26033] active_anon:13132 inactive_anon:0 isolated_anon:0 [ 288.311016][T26033] active_file:4410 inactive_file:27463 isolated_file:0 [ 288.311016][T26033] unevictable:1768 dirty:231 writeback:0 [ 288.311016][T26033] slab_reclaimable:8321 slab_unreclaimable:87082 [ 288.311016][T26033] mapped:26670 shmem:2433 pagetables:1769 [ 288.311016][T26033] sec_pagetables:318 bounce:0 [ 288.311016][T26033] kernel_misc_reclaimable:0 [ 288.311016][T26033] free:457338 free_pcp:15592 free_cma:0 [ 288.325336][T26033] Node 0 active_anon:52528kB inactive_anon:0kB active_file:17640kB inactive_file:109652kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:106680kB dirty:924kB writeback:0kB shmem:6196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15504kB pagetables:6844kB sec_pagetables:1272kB all_unreclaimable? no Balloon:0kB [ 288.335378][T26033] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 288.343650][T26038] CIFS: Unable to determine destination address [ 288.344475][T26033] Node 0 DMA free:15132kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:164kB local_pcp:104kB free_cma:0kB [ 288.355523][T26033] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 288.357538][T26033] Node 0 DMA32 free:214720kB boost:28672kB min:56188kB low:63064kB high:69940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52404kB inactive_anon:0kB active_file:17640kB inactive_file:109652kB unevictable:3536kB writepending:924kB present:2080628kB managed:1263556kB mlocked:0kB bounce:0kB free_pcp:45876kB local_pcp:2076kB free_cma:0kB [ 288.367939][T26033] lowmem_reserve[]: 0 0 0 0 0 [ 288.369488][T26033] Node 1 Normal free:1599500kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:16136kB local_pcp:11152kB free_cma:0kB [ 288.379180][T26033] lowmem_reserve[]: 0 0 0 0 0 [ 288.380697][T26033] Node 0 DMA: 3*4kB (UM) 2*8kB (UM) 4*16kB (UM) 4*32kB (UME) 7*64kB (UME) 5*128kB (UME) 2*256kB (UE) 4*512kB (UME) 3*1024kB (UME) 0*2048kB 2*4096kB (U) = 15132kB [ 288.385770][T26033] Node 0 DMA32: 1188*4kB (UME) 1382*8kB (UME) 738*16kB (UME) 594*32kB (UME) 320*64kB (UME) 161*128kB (UME) 48*256kB (UME) 46*512kB (ME) 41*1024kB (UME) 16*2048kB (UM) 4*4096kB (UM) = 214688kB [ 288.391674][T26033] Node 1 Normal: 12*4kB (UME) 18*8kB (UME) 15*16kB (UME) 21*32kB (UME) 101*64kB (UME) 45*128kB (UME) 32*256kB (UME) 22*512kB (U) 20*1024kB (U) 7*2048kB (UME) 374*4096kB (UM) = 1599504kB [ 288.397313][T26033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.400292][T26033] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 288.403739][T26033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.407664][T26033] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 288.411613][T26033] 34302 total pagecache pages [ 288.413608][T26033] 0 pages in swap cache [ 288.415081][T26033] Free swap = 124996kB [ 288.416381][T26033] Total swap = 124996kB [ 288.417823][T26033] 1048443 pages RAM [ 288.419297][T26033] 0 pages HighMem/MovableOnly [ 288.421116][T26033] 283241 pages reserved [ 288.422769][T26033] 0 pages cma reserved [ 288.467142][T26044] SELinux: syz.5.2983 (26044) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 288.543479][T26053] kAFS: No cell specified [ 288.609349][T26058] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2983'. [ 288.612339][T26058] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2983'. [ 288.615225][T26058] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2983'. [ 288.618196][T26058] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2983'. [ 288.739468][T26062] FAULT_INJECTION: forcing a failure. [ 288.739468][T26062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.745573][T26062] CPU: 1 UID: 0 PID: 26062 Comm: syz.6.2992 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(full) [ 288.745587][T26062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 288.745594][T26062] Call Trace: [ 288.745598][T26062] [ 288.745602][T26062] dump_stack_lvl+0x16c/0x1f0 [ 288.745622][T26062] should_fail_ex+0x512/0x640 [ 288.745635][T26062] _copy_to_user+0x32/0xd0 [ 288.745648][T26062] simple_read_from_buffer+0xcb/0x170 [ 288.745661][T26062] proc_fail_nth_read+0x197/0x240 [ 288.745674][T26062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 288.745688][T26062] ? rw_verify_area+0xcf/0x6c0 [ 288.745704][T26062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 288.745716][T26062] vfs_read+0x1e1/0xc60 [ 288.745728][T26062] ? __pfx___mutex_lock+0x10/0x10 [ 288.745745][T26062] ? __pfx_vfs_read+0x10/0x10 [ 288.745759][T26062] ? __fget_files+0x20e/0x3c0 [ 288.745775][T26062] ksys_read+0x12a/0x250 [ 288.745786][T26062] ? __pfx_ksys_read+0x10/0x10 [ 288.745797][T26062] ? fput+0x9b/0xd0 [ 288.745813][T26062] do_syscall_64+0xcd/0x4c0 [ 288.745830][T26062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.745842][T26062] RIP: 0033:0x7f532c58d5fc [ 288.745851][T26062] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 288.745861][T26062] RSP: 002b:00007f532d432030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 288.745872][T26062] RAX: ffffffffffffffda RBX: 00007f532c7b5fa0 RCX: 00007f532c58d5fc [ 288.745878][T26062] RDX: 000000000000000f RSI: 00007f532d4320a0 RDI: 0000000000000005 [ 288.745885][T26062] RBP: 00007f532d432090 R08: 0000000000000000 R09: 0000000000000000 [ 288.745891][T26062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.745897][T26062] R13: 00007f532c7b6038 R14: 00007f532c7b5fa0 R15: 00007fff83b31198 [ 288.745911][T26062] [ 288.811706][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.289997][T26074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2997'. [ 289.638034][T26092] usb usb8: usbfs: process 26092 (syz.3.3003) did not claim interface 0 before use [ 289.764695][T26100] netlink: 'syz.3.3005': attribute type 1 has an invalid length. [ 289.767547][T26100] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3005'. [ 289.827017][T26107] fuse: blksize only supported for fuseblk [ 289.908225][T26111] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3008'. [ 290.025751][T26117] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 290.031458][T26119] FAULT_INJECTION: forcing a failure. [ 290.031458][T26119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.036824][T26119] CPU: 0 UID: 0 PID: 26119 Comm: syz.6.3014 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(full) [ 290.036841][T26119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 290.036848][T26119] Call Trace: [ 290.036852][T26119] [ 290.036857][T26119] dump_stack_lvl+0x16c/0x1f0 [ 290.036891][T26119] should_fail_ex+0x512/0x640 [ 290.036904][T26119] _copy_from_user+0x2e/0xd0 [ 290.036918][T26119] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 290.036932][T26119] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 290.036947][T26119] ? __pfx_sock_has_perm+0x10/0x10 [ 290.036960][T26119] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 290.036977][T26119] xsk_setsockopt+0x179/0x9a0 [ 290.036991][T26119] ? __pfx_xsk_setsockopt+0x10/0x10 [ 290.037004][T26119] ? find_held_lock+0x2b/0x80 [ 290.037021][T26119] ? selinux_socket_setsockopt+0x6a/0x80 [ 290.037034][T26119] ? __pfx_xsk_setsockopt+0x10/0x10 [ 290.037048][T26119] do_sock_setsockopt+0xf0/0x1d0 [ 290.037061][T26119] __sys_setsockopt+0x1a0/0x230 [ 290.037078][T26119] __x64_sys_setsockopt+0xbd/0x160 [ 290.037093][T26119] ? do_syscall_64+0x91/0x4c0 [ 290.037109][T26119] ? lockdep_hardirqs_on+0x7c/0x110 [ 290.037125][T26119] do_syscall_64+0xcd/0x4c0 [ 290.037143][T26119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.037154][T26119] RIP: 0033:0x7f532c58ebe9 [ 290.037163][T26119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.037179][T26119] RSP: 002b:00007f532d432038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 290.037190][T26119] RAX: ffffffffffffffda RBX: 00007f532c7b5fa0 RCX: 00007f532c58ebe9 [ 290.037197][T26119] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 290.037204][T26119] RBP: 00007f532d432090 R08: 000000000000001c R09: 0000000000000000 [ 290.037211][T26119] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 290.037218][T26119] R13: 00007f532c7b6038 R14: 00007f532c7b5fa0 R15: 00007fff83b31198 [ 290.037232][T26119] [ 290.400941][ T40] kauditd_printk_skb: 671 callbacks suppressed [ 290.400951][ T40] audit: type=1400 audit(1754504998.340:32249): avc: denied { recv } for pid=5879 comm="syz-executor" saddr=127.0.0.1 src=57794 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 290.411827][ T40] audit: type=1400 audit(1754504998.340:32250): avc: denied { unmount } for pid=20957 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 290.419298][ T40] audit: type=1400 audit(1754504998.340:32251): avc: denied { recv } for pid=5878 comm="sshd-session" saddr=10.0.2.2 src=36950 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 290.426965][ T40] audit: type=1400 audit(1754504998.349:32252): avc: denied { read write } for pid=20957 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 290.435151][ T40] audit: type=1400 audit(1754504998.349:32253): avc: denied { open } for pid=20957 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 290.442723][ T40] audit: type=1400 audit(1754504998.349:32254): avc: denied { ioctl } for pid=20957 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 290.450505][ T40] audit: type=1400 audit(1754504998.368:32255): avc: denied { create } for pid=26127 comm="syz.2.3018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.450532][T26128] bond2: entered promiscuous mode [ 290.456684][ T40] audit: type=1400 audit(1754504998.368:32256): avc: denied { setopt } for pid=26127 comm="syz.2.3018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.465064][ T40] audit: type=1400 audit(1754504998.386:32257): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57794 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 290.473164][ T40] audit: type=1400 audit(1754504998.386:32258): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=57794 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 290.707669][ T55] net_ratelimit: 36 callbacks suppressed [ 290.707682][ T55] bond0: (slave wlan0): failed to get link speed/duplex [ 290.805590][T26138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=26138 comm=syz.2.3022 [ 290.826281][ T55] bond0: (slave wlan0): failed to get link speed/duplex [ 290.942780][ T1144] bond0: (slave wlan0): failed to get link speed/duplex [ 291.060525][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 291.178050][ T46] bond0: (slave wlan0): failed to get link speed/duplex [ 291.306442][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 291.424104][ T1144] bond0: (slave wlan0): failed to get link speed/duplex [ 291.541506][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 291.659100][ T55] bond0: (slave wlan0): failed to get link speed/duplex [ 291.776680][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 293.875950][T26148] __nla_validate_parse: 1 callbacks suppressed [ 293.875967][T26148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3024'. [ 293.880093][T26146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3023'. [ 293.921315][T26156] binder: 26155:26156 ioctl c018620c 2000000000c0 returned -22 [ 293.930616][T26155] delete_channel: no stack [ 293.943286][T26159] FAULT_INJECTION: forcing a failure. [ 293.943286][T26159] name failslab, interval 1, probability 0, space 0, times 0 [ 293.948229][T26159] CPU: 0 UID: 0 PID: 26159 Comm: syz.3.3028 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(full) [ 293.948253][T26159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.948264][T26159] Call Trace: [ 293.948270][T26159] [ 293.948278][T26159] dump_stack_lvl+0x16c/0x1f0 [ 293.948310][T26159] should_fail_ex+0x512/0x640 [ 293.948326][T26159] ? fs_reclaim_acquire+0xae/0x150 [ 293.948352][T26159] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 293.948375][T26159] should_failslab+0xc2/0x120 [ 293.948395][T26159] __kmalloc_noprof+0xd2/0x510 [ 293.948413][T26159] ? tomoyo_encode2+0x329/0x3e0 [ 293.948433][T26159] ? tomoyo_realpath_from_path+0x19f/0x6e0 [ 293.948462][T26159] tomoyo_realpath_from_path+0xc2/0x6e0 [ 293.948488][T26159] ? tomoyo_fill_path_info+0x233/0x420 [ 293.948509][T26159] tomoyo_path2_perm+0x36a/0x710 [ 293.948531][T26159] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 293.948548][T26159] ? try_to_unlazy+0x24e/0x660 [ 293.948593][T26159] ? do_raw_spin_lock+0x12c/0x2b0 [ 293.948635][T26159] ? find_held_lock+0x2b/0x80 [ 293.948657][T26159] ? find_held_lock+0x2b/0x80 [ 293.948676][T26159] ? __d_lookup+0x25c/0x4a0 [ 293.948704][T26159] tomoyo_path_rename+0x168/0x1a0 [ 293.948728][T26159] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 293.948754][T26159] ? d_lookup+0xe7/0x190 [ 293.948783][T26159] security_path_rename+0x18e/0x3c0 [ 293.948808][T26159] do_renameat2+0x735/0xc50 [ 293.948836][T26159] ? __pfx_do_renameat2+0x10/0x10 [ 293.948860][T26159] ? find_held_lock+0x2b/0x80 [ 293.948880][T26159] ? __might_fault+0xe3/0x190 [ 293.948904][T26159] ? __might_fault+0x13b/0x190 [ 293.948930][T26159] ? getname_flags.part.0+0x1c5/0x550 [ 293.948950][T26159] __x64_sys_renameat2+0xe7/0x130 [ 293.948965][T26159] do_syscall_64+0xcd/0x4c0 [ 293.948983][T26159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.948994][T26159] RIP: 0033:0x7f5e22d8ebe9 [ 293.949003][T26159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.949014][T26159] RSP: 002b:00007f5e23bfd038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 293.949025][T26159] RAX: ffffffffffffffda RBX: 00007f5e22fb5fa0 RCX: 00007f5e22d8ebe9 [ 293.949031][T26159] RDX: ffffffffffffff9c RSI: 0000200000000080 RDI: ffffffffffffff9c [ 293.949038][T26159] RBP: 00007f5e23bfd090 R08: 0000000000000002 R09: 0000000000000000 [ 293.949044][T26159] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 293.949050][T26159] R13: 00007f5e22fb6038 R14: 00007f5e22fb5fa0 R15: 00007ffe5b441818 [ 293.949064][T26159] [ 293.949068][T26159] ERROR: Out of memory at tomoyo_realpath_from_path. [ 294.111921][T26160] block nbd2: shutting down sockets [ 294.169717][T26170] netlink: 'syz.2.3033': attribute type 1 has an invalid length. [ 294.184560][T26170] netlink: 'syz.2.3033': attribute type 1 has an invalid length. [ 294.268579][T26175] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3035'. [ 294.363541][T26183] netlink: 'syz.3.3039': attribute type 2 has an invalid length. [ 294.366481][T26183] netlink: 'syz.3.3039': attribute type 1 has an invalid length. [ 294.531530][T26191] block nbd3: shutting down sockets [ 294.804255][T26209] tipc: Started in network mode [ 294.805849][T26209] tipc: Node identity 080211000001, cluster identity 4711 [ 294.808491][T26209] tipc: Enabled bearer , priority 0 [ 294.811034][T26209] mac80211_hwsim hwsim20 syzkaller0: entered promiscuous mode [ 294.814272][T26209] mac80211_hwsim hwsim20 syzkaller0: entered allmulticast mode [ 294.839898][T26209] tipc: Resetting bearer [ 294.911993][T26213] block nbd2: shutting down sockets [ 294.940747][T26222] 9pnet_fd: Insufficient options for proto=fd [ 295.497054][ T6049] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 295.658891][ T6049] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 295.663813][ T6049] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.666712][ T6049] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.669396][ T6049] usb 10-1: SerialNumber: syz [ 295.800750][ T40] kauditd_printk_skb: 439 callbacks suppressed [ 295.800761][ T40] audit: type=1400 audit(1754505003.381:32698): avc: denied { unmount } for pid=20500 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 295.809440][ T40] audit: type=1400 audit(1754505003.381:32699): avc: denied { recv } for pid=5879 comm="syz-executor" saddr=127.0.0.1 src=57794 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 295.817292][ T40] audit: type=1400 audit(1754505003.381:32700): avc: denied { recv } for pid=5878 comm="sshd-session" saddr=10.0.2.2 src=36950 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 295.825258][ T40] audit: type=1400 audit(1754505003.409:32701): avc: denied { read write } for pid=20500 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 295.833048][ T40] audit: type=1400 audit(1754505003.409:32702): avc: denied { open } for pid=20500 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 295.841120][ T40] audit: type=1400 audit(1754505003.409:32703): avc: denied { ioctl } for pid=20500 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 295.849179][ T40] audit: type=1400 audit(1754505003.419:32704): avc: denied { create } for pid=26236 comm="syz.6.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 295.856085][ T40] audit: type=1400 audit(1754505003.419:32705): avc: denied { write } for pid=26236 comm="syz.6.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 295.863040][ T40] audit: type=1400 audit(1754505003.419:32706): avc: denied { read } for pid=26236 comm="syz.6.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 295.869287][ T40] audit: type=1400 audit(1754505003.419:32707): avc: denied { ioctl } for pid=26236 comm="syz.6.3060" path="socket:[69632]" dev="sockfs" ino=69632 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 295.899024][T26241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26241 comm=syz.6.3061 [ 295.904519][ T6049] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 295.905220][T15301] tipc: Node number set to 134418688 [ 295.912503][ T6049] usb 10-1: USB disconnect, device number 22 [ 295.930542][T26246] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3063'. [ 296.090185][ T5971] Bluetooth: hci0: ACL packet for unknown connection handle 712 [ 296.127775][ T1149] net_ratelimit: 35 callbacks suppressed [ 296.127787][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 296.245380][ T46] bond0: (slave wlan0): failed to get link speed/duplex [ 296.363142][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 296.480732][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 296.598168][ T46] bond0: (slave wlan0): failed to get link speed/duplex [ 296.715984][ T1145] bond0: (slave wlan0): failed to get link speed/duplex [ 296.813396][T26245] block nbd2: shutting down sockets [ 296.833362][ T1145] bond0: (slave wlan0): failed to get link speed/duplex [ 296.946491][T26282] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3074'. [ 296.961951][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 297.079205][ T1145] bond0: (slave wlan0): failed to get link speed/duplex [ 297.196888][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 298.141166][T26293] block nbd5: shutting down sockets [ 298.549838][T26331] FAULT_INJECTION: forcing a failure. [ 298.549838][T26331] name failslab, interval 1, probability 0, space 0, times 0 [ 298.554050][T26331] CPU: 0 UID: 0 PID: 26331 Comm: syz.3.3089 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(full) [ 298.554066][T26331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.554073][T26331] Call Trace: [ 298.554077][T26331] [ 298.554082][T26331] dump_stack_lvl+0x16c/0x1f0 [ 298.554115][T26331] should_fail_ex+0x512/0x640 [ 298.554130][T26331] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 298.554144][T26331] should_failslab+0xc2/0x120 [ 298.554157][T26331] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 298.554167][T26331] ? fpstate_reset+0x112/0x3b0 [ 298.554181][T26331] ? alloc_pid+0xc7/0xbc0 [ 298.554193][T26331] alloc_pid+0xc7/0xbc0 [ 298.554206][T26331] copy_process+0x466f/0x7690 [ 298.554228][T26331] ? __pfx_copy_process+0x10/0x10 [ 298.554245][T26331] ? lockdep_init_map_type+0x5c/0x280 [ 298.554257][T26331] ? lockdep_init_map_type+0x5c/0x280 [ 298.554267][T26331] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 298.554282][T26331] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 298.554300][T26331] vhost_task_create+0x1d2/0x2e0 [ 298.554312][T26331] ? __pfx_vhost_task_create+0x10/0x10 [ 298.554327][T26331] ? __pfx_vhost_task_fn+0x10/0x10 [ 298.554344][T26331] kvm_mmu_post_init_vm+0x1b7/0x380 [ 298.554370][T26331] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 298.554388][T26331] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 298.554406][T26331] kvm_vcpu_ioctl+0x5eb/0x1690 [ 298.554422][T26331] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 298.554436][T26331] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.554450][T26331] ? do_vfs_ioctl+0x128/0x14f0 [ 298.554467][T26331] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 298.554483][T26331] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 298.554503][T26331] ? hook_file_ioctl_common+0x145/0x410 [ 298.554524][T26331] ? selinux_file_ioctl+0x180/0x270 [ 298.554537][T26331] ? selinux_file_ioctl+0xb4/0x270 [ 298.554551][T26331] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 298.554565][T26331] __x64_sys_ioctl+0x18e/0x210 [ 298.554583][T26331] do_syscall_64+0xcd/0x4c0 [ 298.554601][T26331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.554612][T26331] RIP: 0033:0x7f5e22d8ebe9 [ 298.554621][T26331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.554632][T26331] RSP: 002b:00007f5e23bfd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.554647][T26331] RAX: ffffffffffffffda RBX: 00007f5e22fb5fa0 RCX: 00007f5e22d8ebe9 [ 298.554654][T26331] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 298.554660][T26331] RBP: 00007f5e23bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 298.554666][T26331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 298.554672][T26331] R13: 00007f5e22fb6038 R14: 00007f5e22fb5fa0 R15: 00007ffe5b441818 [ 298.554686][T26331] [ 298.806563][T26333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3090'. [ 298.857785][T26333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3090'. [ 298.860688][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3090'. [ 298.911949][T26335] netlink: 'syz.2.3090': attribute type 11 has an invalid length. [ 298.911950][T26334] netlink: 'syz.2.3090': attribute type 11 has an invalid length. [ 299.273235][T26344] block nbd0: server does not support multiple connections per device. [ 299.282228][T26344] block nbd0: shutting down sockets [ 299.299536][ T5971] Bluetooth: hci1: unexpected event for opcode 0x0023 [ 299.545267][T26372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3104'. [ 299.991571][T26395] fuse: Unknown parameter 'user_id ' [ 300.038682][T26342] block nbd6: shutting down sockets [ 300.097884][T26402] netlink: 'syz.6.3114': attribute type 1 has an invalid length. [ 300.111467][T26402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.119387][ T5975] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 300.125636][T26402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.128093][T26402] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 300.132031][T26402] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 300.171930][T26408] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3114'. [ 300.175154][T26408] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.186617][T26410] lo: entered allmulticast mode [ 300.192735][T26409] lo: left allmulticast mode [ 300.367702][T26430] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3124'. [ 300.401172][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3124'. [ 300.615185][T26449] block nbd3: NBD_DISCONNECT [ 300.756922][ T5967] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 300.917297][ T5967] usb 7-1: Using ep0 maxpacket: 32 [ 300.920713][ T5967] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 300.923993][ T5967] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 300.927098][ T5967] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 300.930927][ T5967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 300.934508][ T5967] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 300.937942][ T5967] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 300.942935][ T5967] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 300.946463][ T5967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.951530][ T5967] usb 7-1: config 0 descriptor?? [ 301.050993][T26465] netlink: 'syz.3.3137': attribute type 1 has an invalid length. [ 301.066245][T26465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.076117][T26465] bond1: (slave geneve2): making interface the new active one [ 301.080443][T26465] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 301.091941][T26465] bond1: entered promiscuous mode [ 301.093595][T26465] geneve2: entered promiscuous mode [ 301.129064][T26469] block nbd3: NBD_DISCONNECT [ 301.131539][T26469] FAULT_INJECTION: forcing a failure. [ 301.131539][T26469] name failslab, interval 1, probability 0, space 0, times 0 [ 301.135446][T26469] CPU: 3 UID: 0 PID: 26469 Comm: syz.3.3138 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(full) [ 301.135461][T26469] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 301.135467][T26469] Call Trace: [ 301.135471][T26469] [ 301.135476][T26469] dump_stack_lvl+0x16c/0x1f0 [ 301.135495][T26469] should_fail_ex+0x512/0x640 [ 301.135505][T26469] ? fs_reclaim_acquire+0xae/0x150 [ 301.135521][T26469] should_failslab+0xc2/0x120 [ 301.135534][T26469] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 301.135546][T26469] ? security_inode_alloc+0x3b/0x2b0 [ 301.135561][T26469] security_inode_alloc+0x3b/0x2b0 [ 301.135574][T26469] inode_init_always_gfp+0xce4/0x1030 [ 301.135589][T26469] alloc_inode+0x86/0x240 [ 301.135605][T26469] new_inode+0x22/0x1c0 [ 301.135622][T26469] proc_pid_make_inode+0x22/0x160 [ 301.135636][T26469] ? do_raw_spin_unlock+0x172/0x230 [ 301.135649][T26469] proc_fd_instantiate+0x57/0x230 [ 301.135662][T26469] ? __pfx_proc_lookupfd+0x10/0x10 [ 301.135673][T26469] proc_lookupfd+0x11f/0x200 [ 301.135684][T26469] ? __pfx_proc_lookupfd+0x10/0x10 [ 301.135699][T26469] ? __pfx_proc_lookupfd+0x10/0x10 [ 301.135710][T26469] lookup_open.isra.0+0x4da/0x1580 [ 301.135724][T26469] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 301.135748][T26469] ? mnt_get_write_access+0x20c/0x300 [ 301.135767][T26469] path_openat+0x893/0x2cb0 [ 301.135783][T26469] ? __pfx_path_openat+0x10/0x10 [ 301.135799][T26469] do_filp_open+0x20b/0x470 [ 301.135815][T26469] ? __pfx_do_filp_open+0x10/0x10 [ 301.135832][T26469] ? __pfx_kfree_link+0x10/0x10 [ 301.135853][T26469] ? alloc_fd+0x471/0x7d0 [ 301.135868][T26469] do_sys_openat2+0x11b/0x1d0 [ 301.135883][T26469] ? __pfx_do_sys_openat2+0x10/0x10 [ 301.135899][T26469] ? __fget_files+0x20e/0x3c0 [ 301.135913][T26469] __x64_sys_openat+0x174/0x210 [ 301.135928][T26469] ? __pfx___x64_sys_openat+0x10/0x10 [ 301.135943][T26469] ? ksys_write+0x1ac/0x250 [ 301.135959][T26469] do_syscall_64+0xcd/0x4c0 [ 301.135976][T26469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.135987][T26469] RIP: 0033:0x7f5e22d8d550 [ 301.135996][T26469] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 301.136006][T26469] RSP: 002b:00007f5e23bfcf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 301.136017][T26469] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5e22d8d550 [ 301.136024][T26469] RDX: 0000000000000002 RSI: 00007f5e23bfcfa0 RDI: 00000000ffffff9c [ 301.136030][T26469] RBP: 00007f5e23bfcfa0 R08: 0000000000000000 R09: 0000000000000000 [ 301.136036][T26469] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 301.136042][T26469] R13: 00007f5e22fb6038 R14: 00007f5e22fb5fa0 R15: 00007ffe5b441818 [ 301.136055][T26469] [ 301.163876][ T40] kauditd_printk_skb: 906 callbacks suppressed [ 301.163886][ T40] audit: type=1400 audit(1754505008.404:33614): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57794 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 301.240786][ T40] audit: type=1400 audit(1754505008.404:33615): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=57794 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 301.243312][ T5967] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 301.249068][ T40] audit: type=1400 audit(1754505008.404:33616): avc: denied { read write } for pid=21452 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.254391][ T5967] usb 7-1: USB disconnect, device number 30 [ 301.260755][ T40] audit: type=1400 audit(1754505008.404:33617): avc: denied { open } for pid=21452 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.268739][ T5967] usblp0: removed [ 301.268966][ T40] audit: type=1400 audit(1754505008.404:33618): avc: denied { ioctl } for pid=21452 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.278239][ T40] audit: type=1400 audit(1754505008.414:33619): avc: denied { read } for pid=26474 comm="syz.3.3140" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 301.286750][ T40] audit: type=1400 audit(1754505008.414:33620): avc: denied { open } for pid=26474 comm="syz.3.3140" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 301.294388][ T40] audit: type=1400 audit(1754505008.414:33621): avc: denied { ioctl } for pid=26474 comm="syz.3.3140" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 301.302123][ T40] audit: type=1400 audit(1754505008.433:33622): avc: denied { read } for pid=26468 comm="syz.5.3139" dev="nsfs" ino=4026533183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 301.308586][ T40] audit: type=1400 audit(1754505008.433:33623): avc: denied { open } for pid=26468 comm="syz.5.3139" path="net:[4026533183]" dev="nsfs" ino=4026533183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 301.310756][T26481] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3141'. [ 301.378105][ T5975] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 301.405840][T26495] FAULT_INJECTION: forcing a failure. [ 301.405840][T26495] name failslab, interval 1, probability 0, space 0, times 0 [ 301.409873][T26495] CPU: 0 UID: 0 PID: 26495 Comm: syz.3.3145 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(full) [ 301.409887][T26495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 301.409894][T26495] Call Trace: [ 301.409898][T26495] [ 301.409903][T26495] dump_stack_lvl+0x16c/0x1f0 [ 301.409922][T26495] should_fail_ex+0x512/0x640 [ 301.409933][T26495] ? fs_reclaim_acquire+0xae/0x150 [ 301.409948][T26495] ? tomoyo_encode2+0x100/0x3e0 [ 301.409962][T26495] should_failslab+0xc2/0x120 [ 301.409974][T26495] __kmalloc_noprof+0xd2/0x510 [ 301.409986][T26495] ? d_absolute_path+0x136/0x1a0 [ 301.410004][T26495] tomoyo_encode2+0x100/0x3e0 [ 301.410019][T26495] tomoyo_encode+0x29/0x50 [ 301.410033][T26495] tomoyo_realpath_from_path+0x18f/0x6e0 [ 301.410051][T26495] tomoyo_path_number_perm+0x245/0x580 [ 301.410063][T26495] ? tomoyo_path_number_perm+0x237/0x580 [ 301.410076][T26495] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 301.410088][T26495] ? find_held_lock+0x2b/0x80 [ 301.410114][T26495] ? find_held_lock+0x2b/0x80 [ 301.410126][T26495] ? hook_file_ioctl_common+0x145/0x410 [ 301.410146][T26495] ? __fget_files+0x20e/0x3c0 [ 301.410160][T26495] security_file_ioctl+0x9b/0x240 [ 301.410175][T26495] __x64_sys_ioctl+0xb7/0x210 [ 301.410193][T26495] do_syscall_64+0xcd/0x4c0 [ 301.410210][T26495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.410222][T26495] RIP: 0033:0x7f5e22d8ebe9 [ 301.410231][T26495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.410241][T26495] RSP: 002b:00007f5e23bfd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.410252][T26495] RAX: ffffffffffffffda RBX: 00007f5e22fb5fa0 RCX: 00007f5e22d8ebe9 [ 301.410259][T26495] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 301.410266][T26495] RBP: 00007f5e23bfd090 R08: 0000000000000000 R09: 0000000000000000 [ 301.410272][T26495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.410278][T26495] R13: 00007f5e22fb6038 R14: 00007f5e22fb5fa0 R15: 00007ffe5b441818 [ 301.410292][T26495] [ 301.410302][T26495] ERROR: Out of memory at tomoyo_realpath_from_path. [ 301.484036][ T46] net_ratelimit: 34 callbacks suppressed [ 301.484047][ T46] bond0: (slave wlan0): failed to get link speed/duplex [ 301.601851][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 301.666403][T26510] SELinux: failed to load policy [ 301.691711][T26510] 9pnet_fd: Insufficient options for proto=fd [ 301.723751][T26514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3153'. [ 301.740271][ T5967] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 301.740429][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 301.749894][ T5975] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 301.858239][ T55] bond0: (slave wlan0): failed to get link speed/duplex [ 301.911763][ T5967] usb 7-1: Using ep0 maxpacket: 32 [ 301.916062][ T5967] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 301.919442][ T5967] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 301.923882][ T5967] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 301.927721][ T5967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 301.931995][ T5967] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 301.936200][ T5967] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 301.941735][ T5967] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 301.946011][ T5967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.951887][ T5967] usb 7-1: config 0 descriptor?? [ 301.975602][ T46] bond0: (slave wlan0): failed to get link speed/duplex [ 302.093163][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 302.174396][ T5967] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 302.223317][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 302.350712][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 302.467531][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 302.588600][ T5975] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 302.596234][ T46] bond0: (slave wlan0): failed to get link speed/duplex [ 302.805895][T26555] binder: BINDER_SET_CONTEXT_MGR already set [ 302.808290][T26555] binder: 26553:26555 ioctl 4018620d 200000000080 returned -16 [ 303.653484][ T5836] usb 7-1: USB disconnect, device number 31 [ 303.657268][ T5836] usblp0: removed [ 304.138462][T26584] tipc: Started in network mode [ 304.140084][T26584] tipc: Node identity 4, cluster identity 4711 [ 304.142008][T26584] tipc: Node number set to 4 [ 305.124174][T26600] veth0: entered promiscuous mode [ 305.126408][T26600] veth0: left promiscuous mode [ 305.257480][ T5975] Bluetooth: hci2: unexpected event for opcode 0x0c23 [ 305.600241][T26621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3191'. [ 305.603234][T26621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.605544][T26621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.608281][T26621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.611579][T26621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.202517][ T5975] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 306.205636][ T5975] CPU: 0 UID: 0 PID: 5975 Comm: kworker/u33:5 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(full) [ 306.205652][ T5975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 306.205660][ T5975] Workqueue: hci1 hci_rx_work [ 306.205694][ T5975] Call Trace: [ 306.205700][ T5975] [ 306.205705][ T5975] dump_stack_lvl+0x16c/0x1f0 [ 306.205724][ T5975] sysfs_warn_dup+0x7f/0xa0 [ 306.205744][ T5975] sysfs_create_dir_ns+0x24b/0x2b0 [ 306.205759][ T5975] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 306.205773][ T5975] ? find_held_lock+0x2b/0x80 [ 306.205794][ T5975] ? do_raw_spin_unlock+0x172/0x230 [ 306.205807][ T5975] kobject_add_internal+0x2c4/0x9b0 [ 306.205821][ T5975] kobject_add+0x16e/0x240 [ 306.205831][ T5975] ? __pfx_kobject_add+0x10/0x10 [ 306.205842][ T5975] ? do_raw_spin_unlock+0x172/0x230 [ 306.205855][ T5975] ? kobject_put+0xab/0x5a0 [ 306.205868][ T5975] device_add+0x288/0x1aa0 [ 306.205881][ T5975] ? __pfx_dev_set_name+0x10/0x10 [ 306.205895][ T5975] ? __pfx_device_add+0x10/0x10 [ 306.205908][ T5975] ? mgmt_send_event_skb+0x2fb/0x460 [ 306.205925][ T5975] hci_conn_add_sysfs+0x17e/0x230 [ 306.205941][ T5975] le_conn_complete_evt+0x1075/0x1d70 [ 306.205954][ T5975] ? preempt_count_sub+0x150/0x160 [ 306.205968][ T5975] ? rcu_is_watching+0x12/0xc0 [ 306.205982][ T5975] ? find_held_lock+0x2b/0x80 [ 306.205995][ T5975] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 306.206008][ T5975] ? hci_event_packet+0x459/0x11c0 [ 306.206023][ T5975] ? __mutex_unlock_slowpath+0x163/0x800 [ 306.206046][ T5975] hci_le_conn_complete_evt+0x23c/0x370 [ 306.206062][ T5975] hci_le_meta_evt+0x354/0x5e0 [ 306.206077][ T5975] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 306.206093][ T5975] hci_event_packet+0x685/0x11c0 [ 306.206106][ T5975] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 306.206121][ T5975] ? __pfx_hci_event_packet+0x10/0x10 [ 306.206136][ T5975] ? kcov_remote_start+0x3c9/0x6d0 [ 306.206150][ T5975] ? lockdep_hardirqs_on+0x7c/0x110 [ 306.206168][ T5975] hci_rx_work+0x2c5/0x16b0 [ 306.206183][ T5975] ? rcu_is_watching+0x12/0xc0 [ 306.206198][ T5975] process_one_work+0x9cc/0x1b70 [ 306.206216][ T5975] ? __pfx_process_one_work+0x10/0x10 [ 306.206232][ T5975] ? assign_work+0x1a0/0x250 [ 306.206244][ T5975] worker_thread+0x6c8/0xf10 [ 306.206262][ T5975] ? __pfx_worker_thread+0x10/0x10 [ 306.206274][ T5975] kthread+0x3c5/0x780 [ 306.206285][ T5975] ? __pfx_kthread+0x10/0x10 [ 306.206297][ T5975] ? rcu_is_watching+0x12/0xc0 [ 306.206310][ T5975] ? __pfx_kthread+0x10/0x10 [ 306.206321][ T5975] ret_from_fork+0x5d4/0x6f0 [ 306.206332][ T5975] ? __pfx_kthread+0x10/0x10 [ 306.206343][ T5975] ret_from_fork_asm+0x1a/0x30 [ 306.206363][ T5975] [ 306.206376][ T5975] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 306.264453][T26650] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000009' [ 306.265920][ T5975] Bluetooth: hci1: failed to register connection device [ 306.338973][T26656] Process accounting resumed [ 306.408003][T26661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3205'. [ 306.410791][T26661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3205'. [ 306.414670][T26661] netlink: 'syz.3.3205': attribute type 13 has an invalid length. [ 306.574229][ T40] kauditd_printk_skb: 717 callbacks suppressed [ 306.574241][ T40] audit: type=1400 audit(1754505013.465:34341): avc: denied { read write } for pid=21452 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.584310][ T40] audit: type=1400 audit(1754505013.465:34342): avc: denied { read write open } for pid=21452 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.588204][T26663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3206'. [ 306.591981][ T40] audit: type=1400 audit(1754505013.465:34343): avc: denied { ioctl } for pid=21452 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.602727][ T40] audit: type=1400 audit(1754505013.474:34344): avc: denied { create } for pid=26662 comm="syz.3.3206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 306.608851][ T40] audit: type=1400 audit(1754505013.474:34345): avc: denied { getopt } for pid=26662 comm="syz.3.3206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 306.621229][ T40] audit: type=1400 audit(1754505013.502:34346): avc: denied { create } for pid=26664 comm="syz.3.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.627671][ T40] audit: type=1400 audit(1754505013.502:34347): avc: denied { create } for pid=26664 comm="syz.3.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.632093][T26665] bond0: entered promiscuous mode [ 306.633998][ T40] audit: type=1400 audit(1754505013.502:34348): avc: denied { create } for pid=26664 comm="syz.3.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 306.638247][T26665] bond_slave_0: entered promiscuous mode [ 306.642014][ T40] audit: type=1400 audit(1754505013.502:34349): avc: denied { connect } for pid=26664 comm="syz.3.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 306.643767][T26665] bond_slave_1: entered promiscuous mode [ 306.649753][ T40] audit: type=1400 audit(1754505013.512:34350): avc: denied { create } for pid=26664 comm="syz.3.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 306.690316][T26667] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3208'. [ 306.936219][ T1145] net_ratelimit: 36 callbacks suppressed [ 306.936233][ T1145] bond0: (slave wlan0): failed to get link speed/duplex [ 307.117673][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 307.235947][ T1144] bond0: (slave wlan0): failed to get link speed/duplex [ 307.328766][ T5975] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.333325][ T5975] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.336835][ T5975] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.340696][ T5975] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.344429][ T5975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.403059][T26693] afs: Unknown parameter '€yn' [ 307.466539][T26685] chnl_net:caif_netlink_parms(): no params data found [ 307.533586][T26685] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.536593][T26685] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.538930][T26685] bridge_slave_0: entered allmulticast mode [ 307.541644][T26685] bridge_slave_0: entered promiscuous mode [ 307.544894][T26685] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.547498][T26685] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.549779][T26685] bridge_slave_1: entered allmulticast mode [ 307.552423][T26685] bridge_slave_1: entered promiscuous mode [ 307.584186][T26685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.589461][T26685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.620984][T26685] team0: Port device team_slave_0 added [ 307.625837][T26685] team0: Port device team_slave_1 added [ 307.658261][T26685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.662572][T26685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.671204][T26685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.676741][T26685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.678921][T26685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.687189][T26685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.694913][ T6032] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 307.713113][T26700] vivid-001: disconnect [ 307.716772][T26700] vivid-001: reconnect [ 307.733924][T26685] hsr_slave_0: entered promiscuous mode [ 307.736195][T26685] hsr_slave_1: entered promiscuous mode [ 307.738358][T26685] debugfs: 'hsr0' already exists in 'hsr' [ 307.740174][T26685] Cannot create hsr debugfs directory [ 307.741995][T26700] lo: entered allmulticast mode [ 307.821708][T26699] lo: left allmulticast mode [ 307.867954][ T6032] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 307.869410][T26685] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 307.870752][ T6032] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 307.876079][ T6032] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 307.877931][T26685] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 307.879324][ T6032] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 307.884499][ T6032] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 307.886226][T26685] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 307.889426][ T6032] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 307.892998][ T6032] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 307.894713][T26685] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 307.895512][ T6032] usb 7-1: Product: syz [ 307.899079][ T6032] usb 7-1: Manufacturer: syz [ 307.905052][ T6032] cdc_wdm 7-1:1.0: skipping garbage [ 307.906710][ T6032] cdc_wdm 7-1:1.0: skipping garbage [ 307.909819][ T6032] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 307.911698][ T6032] cdc_wdm 7-1:1.0: Unknown control protocol [ 307.913568][T26685] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.913618][T26685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.918195][T26685] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.920520][T26685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.950660][T26685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.961728][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.967482][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.980362][T26685] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.988324][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.990633][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.995687][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.997957][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.058416][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 308.108942][T26685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.122299][T26693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3218'. [ 308.138269][T26693] bond4: entered promiscuous mode [ 308.140289][T26693] 8021q: adding VLAN 0 to HW filter on device bond4 [ 308.145358][T26693] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3218'. [ 308.163389][ T5836] usb 7-1: USB disconnect, device number 32 [ 308.198677][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 308.241020][T26685] veth0_vlan: entered promiscuous mode [ 308.247659][T26685] veth1_vlan: entered promiscuous mode [ 308.262811][T26685] veth0_macvtap: entered promiscuous mode [ 308.266667][T26685] veth1_macvtap: entered promiscuous mode [ 308.276438][T26685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.285806][T26685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.291156][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.294607][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.297352][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.301706][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.342308][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.345670][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.367186][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.369923][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.380181][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 308.443321][ T5975] Bluetooth: hci1: command 0x0405 tx timeout [ 308.498049][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 308.635972][ T55] bond0: (slave wlan0): failed to get link speed/duplex [ 308.753319][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 308.872216][ T1145] bond0: (slave wlan0): failed to get link speed/duplex [ 308.931720][T26765] tipc: Enabling of bearer rejected, already enabled [ 308.934541][T26768] syzkaller1: entered promiscuous mode [ 308.937022][T26768] syzkaller1: entered allmulticast mode [ 310.230658][T26786] FAULT_INJECTION: forcing a failure. [ 310.230658][T26786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.234787][T26786] CPU: 0 UID: 0 PID: 26786 Comm: syz.2.3238 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(full) [ 310.234802][T26786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 310.234808][T26786] Call Trace: [ 310.234813][T26786] [ 310.234817][T26786] dump_stack_lvl+0x16c/0x1f0 [ 310.234837][T26786] should_fail_ex+0x512/0x640 [ 310.234849][T26786] _copy_to_user+0x32/0xd0 [ 310.234862][T26786] msr_read+0x14e/0x250 [ 310.234877][T26786] ? __pfx_msr_read+0x10/0x10 [ 310.234891][T26786] ? bpf_lsm_file_permission+0x9/0x10 [ 310.234905][T26786] ? security_file_permission+0x71/0x210 [ 310.234920][T26786] ? rw_verify_area+0xcf/0x6c0 [ 310.234937][T26786] ? __pfx_msr_read+0x10/0x10 [ 310.234950][T26786] vfs_read+0x1e1/0xc60 [ 310.234963][T26786] ? __pfx_vfs_read+0x10/0x10 [ 310.234973][T26786] ? find_held_lock+0x2b/0x80 [ 310.234987][T26786] ? __fget_files+0x204/0x3c0 [ 310.235001][T26786] ? __fget_files+0x20e/0x3c0 [ 310.235016][T26786] ksys_read+0x12a/0x250 [ 310.235027][T26786] ? __pfx_ksys_read+0x10/0x10 [ 310.235041][T26786] do_syscall_64+0xcd/0x4c0 [ 310.235059][T26786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.235070][T26786] RIP: 0033:0x7f444b58ebe9 [ 310.235078][T26786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.235090][T26786] RSP: 002b:00007f444c433038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.235100][T26786] RAX: ffffffffffffffda RBX: 00007f444b7b5fa0 RCX: 00007f444b58ebe9 [ 310.235107][T26786] RDX: 0000000000018ff8 RSI: 0000200000001a40 RDI: 0000000000000003 [ 310.235113][T26786] RBP: 00007f444c433090 R08: 0000000000000000 R09: 0000000000000000 [ 310.235120][T26786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.235126][T26786] R13: 00007f444b7b6038 R14: 00007f444b7b5fa0 R15: 00007ffcf1030b28 [ 310.235139][T26786] [ 310.348142][T26790] loop2: detected capacity change from 0 to 7 [ 310.351694][T17163] Dev loop2: unable to read RDB block 7 [ 310.353937][T17163] loop2: unable to read partition table [ 310.356277][T17163] loop2: partition table beyond EOD, truncated [ 310.361318][T26790] Dev loop2: unable to read RDB block 7 [ 310.363092][T26790] loop2: unable to read partition table [ 310.364945][T26790] loop2: partition table beyond EOD, truncated [ 310.366899][T26790] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 310.380613][T26791] raw_sendmsg: syz.3.3239 forgot to set AF_INET. Fix it! [ 310.420658][T26796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3242'. [ 310.667064][ T5327] Bluetooth: hci2: command tx timeout [ 310.853277][T26828] vivid-004: disconnect [ 310.855172][T26828] vivid-004: reconnect [ 310.894596][T26830] syzkaller1: entered promiscuous mode [ 310.896332][T26830] syzkaller1: entered allmulticast mode [ 311.064956][ T6032] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 311.116218][T26842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26842 comm=syz.6.3260 [ 311.168526][T26844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=26844 comm=syz.6.3261 [ 311.235817][ T6032] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.238984][ T6032] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.242340][ T6032] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.245598][ T6032] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 311.249526][ T6032] usb 12-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 311.252325][ T6032] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.256770][ T6032] usb 12-1: config 0 descriptor?? [ 311.471668][T26857] netlink: 'syz.3.3265': attribute type 4 has an invalid length. [ 311.535083][T26859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3266'. [ 311.540157][ T34] Process accounting resumed [ 311.680676][T26865] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3269'. [ 311.692165][ T6032] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 311.700135][ T6032] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:0926:3333.0007/input/input36 [ 311.725692][T26868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3270'. [ 311.910888][T26826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.914437][T26826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.924741][ T6032] keytouch 0003:0926:3333.0007: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 311.968223][ T40] kauditd_printk_skb: 946 callbacks suppressed [ 311.968233][ T40] audit: type=1400 audit(1754505018.507:35297): avc: denied { recv } for pid=5879 comm="syz-executor" saddr=127.0.0.1 src=57794 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 311.978041][ T34] usb 12-1: USB disconnect, device number 2 [ 311.981190][ T40] audit: type=1400 audit(1754505018.507:35298): avc: denied { read write } for pid=20957 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.990024][ T40] audit: type=1400 audit(1754505018.507:35299): avc: denied { open } for pid=20957 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.001016][ T40] audit: type=1400 audit(1754505018.507:35300): avc: denied { ioctl } for pid=20957 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.009471][ T40] audit: type=1400 audit(1754505018.507:35301): avc: denied { prog_load } for pid=26873 comm="syz.2.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 312.016383][ T40] audit: type=1400 audit(1754505018.507:35302): avc: denied { bpf } for pid=26873 comm="syz.2.3272" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 312.022879][ T40] audit: type=1400 audit(1754505018.507:35303): avc: denied { perfmon } for pid=26873 comm="syz.2.3272" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 312.029941][ T40] audit: type=1400 audit(1754505018.507:35304): avc: denied { prog_run } for pid=26873 comm="syz.2.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 312.036166][ T40] audit: type=1400 audit(1754505018.525:35305): avc: denied { read write } for pid=20957 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.043701][ T40] audit: type=1400 audit(1754505018.525:35306): avc: denied { open } for pid=20957 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.229222][T26883] v: renamed from ip6_vti0 (while UP) [ 312.325432][ T80] net_ratelimit: 27 callbacks suppressed [ 312.325444][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 312.438464][T26898] @: renamed from vlan0 (while UP) [ 312.444143][T26898] netlink: 'syz.2.3281': attribute type 1 has an invalid length. [ 312.446595][T26898] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3281'. [ 312.463503][ T1143] bond0: (slave wlan0): failed to get link speed/duplex [ 312.485431][T26902] syz_tun: entered allmulticast mode [ 312.497011][T26900] syz_tun: left allmulticast mode [ 312.530255][T26908] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value [ 312.536586][T26910] netlink: 'syz.7.3286': attribute type 10 has an invalid length. [ 312.539644][T26910] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3286'. [ 312.591439][ T55] bond0: (slave wlan0): failed to get link speed/duplex [ 312.679973][T26922] sock: sock_timestamping_bind_phc: sock not bind to device [ 312.725497][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 312.795276][T26932] overlay: Unknown parameter 'fsname' [ 312.837470][ T1144] bond0: (slave wlan0): failed to get link speed/duplex [ 312.890744][ T5327] Bluetooth: hci2: command tx timeout [ 312.970561][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 313.001043][T26939] mkiss: ax0: crc mode is auto. [ 313.083494][ T1144] bond0: (slave wlan0): failed to get link speed/duplex [ 313.201089][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 313.318688][ T1143] bond0: (slave wlan0): failed to get link speed/duplex [ 313.426297][T26943] evm: overlay not supported [ 313.446726][ T1143] bond0: (slave wlan0): failed to get link speed/duplex [ 313.458456][T26947] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3298'. [ 313.531561][T26952] loop6: detected capacity change from 0 to 7 [ 313.535502][T26952] loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 313.537634][T26952] loop6: p1 size 1986356271 extends beyond EOD, truncated [ 313.541140][T26952] loop6: p2 start 2985401125 is beyond EOD, truncated [ 313.543760][T26952] loop6: p3 start 52979723 is beyond EOD, truncated [ 313.546451][T26952] loop6: p4 start 1098257249 is beyond EOD, truncated [ 313.549173][T26952] loop6: p5 start 694651561 is beyond EOD, truncated [ 313.551859][T26952] loop6: p6 start 2292029624 is beyond EOD, truncated [ 313.554223][T26952] loop6: p7 start 2616504574 is beyond EOD, truncated [ 313.593755][T17163] udevd[17163]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 313.694679][T26959] tmpfs: Cannot change global quota limit on remount [ 313.706779][T26961] usb usb8: usbfs: process 26961 (syz.3.3304) did not claim interface 0 before use [ 313.709891][T26961] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 313.973583][T26974] netlink: 'syz.7.3306': attribute type 1 has an invalid length. [ 313.976231][T26974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.978537][T26974] IPv6: NLM_F_CREATE should be set when creating new route [ 313.980826][T26974] IPv6: NLM_F_CREATE should be set when creating new route [ 314.023017][T26974] v: renamed from ip6_vti0 (while UP) [ 314.456381][T26978] netlink: 'syz.2.3308': attribute type 3 has an invalid length. [ 314.685217][T26985] FAULT_INJECTION: forcing a failure. [ 314.685217][T26985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.690033][T26985] CPU: 3 UID: 0 PID: 26985 Comm: syz.2.3311 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(full) [ 314.690049][T26985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 314.690056][T26985] Call Trace: [ 314.690060][T26985] [ 314.690064][T26985] dump_stack_lvl+0x16c/0x1f0 [ 314.690097][T26985] should_fail_ex+0x512/0x640 [ 314.690115][T26985] _copy_to_user+0x32/0xd0 [ 314.690128][T26985] simple_read_from_buffer+0xcb/0x170 [ 314.690142][T26985] proc_fail_nth_read+0x197/0x240 [ 314.690155][T26985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 314.690169][T26985] ? rw_verify_area+0xcf/0x6c0 [ 314.690185][T26985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 314.690198][T26985] vfs_read+0x1e1/0xc60 [ 314.690210][T26985] ? __pfx___mutex_lock+0x10/0x10 [ 314.690232][T26985] ? __pfx_vfs_read+0x10/0x10 [ 314.690246][T26985] ? __fget_files+0x20e/0x3c0 [ 314.690262][T26985] ksys_read+0x12a/0x250 [ 314.690272][T26985] ? __pfx_ksys_read+0x10/0x10 [ 314.690287][T26985] do_syscall_64+0xcd/0x4c0 [ 314.690304][T26985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.690315][T26985] RIP: 0033:0x7f444b58d5fc [ 314.690325][T26985] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 314.690337][T26985] RSP: 002b:00007f444c433030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 314.690347][T26985] RAX: ffffffffffffffda RBX: 00007f444b7b5fa0 RCX: 00007f444b58d5fc [ 314.690354][T26985] RDX: 000000000000000f RSI: 00007f444c4330a0 RDI: 0000000000000003 [ 314.690361][T26985] RBP: 00007f444c433090 R08: 0000000000000000 R09: 0000000000000000 [ 314.690367][T26985] R10: 00000000000001fc R11: 0000000000000246 R12: 0000000000000001 [ 314.690373][T26985] R13: 00007f444b7b6038 R14: 00007f444b7b5fa0 R15: 00007ffcf1030b28 [ 314.690387][T26985] [ 315.125125][ T5327] Bluetooth: hci2: command tx timeout [ 315.391905][T27039] blkio.reset_stats is deprecated [ 316.100004][T27059] netlink: 'syz.2.3337': attribute type 17 has an invalid length. [ 316.102932][T27059] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3337'. [ 316.106320][T27059] macvtap0: entered allmulticast mode [ 316.108967][T27059] veth0_macvtap: entered allmulticast mode [ 316.513688][T27095] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3349'. [ 316.534797][T27095] binder: 27094:27095 ioctl c018937d 200000000180 returned -22 [ 316.632617][T27103] [ 316.633705][T27103] ====================================================== [ 316.636624][T27103] WARNING: possible circular locking dependency detected [ 316.639538][T27103] 6.16.0-syzkaller-11845-ga530a36bb548 #0 Not tainted [ 316.643155][T27103] ------------------------------------------------------ [ 316.646496][T27103] syz.6.3352/27103 is trying to acquire lock: [ 316.649047][T27103] ffff888012675140 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 316.653093][T27103] [ 316.653093][T27103] but task is already holding lock: [ 316.656148][T27103] ffff88805168c488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 316.660032][T27103] [ 316.660032][T27103] which lock already depends on the new lock. [ 316.660032][T27103] [ 316.664303][T27103] [ 316.664303][T27103] the existing dependency chain (in reverse order) is: [ 316.668050][T27103] [ 316.668050][T27103] -> #3 (&of->mutex){+.+.}-{4:4}: [ 316.671087][T27103] __mutex_lock+0x193/0x10b0 [ 316.673288][T27103] kernfs_seq_start+0x4d/0x240 [ 316.675522][T27103] seq_read_iter+0x2be/0x12c0 [ 316.677726][T27103] kernfs_fop_read_iter+0x40f/0x5a0 [ 316.680107][T27103] vfs_read+0x8bc/0xc60 [ 316.682091][T27103] ksys_read+0x12a/0x250 [ 316.684084][T27103] do_syscall_64+0xcd/0x4c0 [ 316.686224][T27103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.688930][T27103] [ 316.688930][T27103] -> #2 (&p->lock){+.+.}-{4:4}: [ 316.691860][T27103] __mutex_lock+0x193/0x10b0 [ 316.694036][T27103] seq_read_iter+0xe1/0x12c0 [ 316.696180][T27103] kernfs_fop_read_iter+0x40f/0x5a0 [ 316.698595][T27103] copy_splice_read+0x618/0xba0 [ 316.700874][T27103] do_splice_read+0x282/0x370 [ 316.703065][T27103] splice_file_to_pipe+0x109/0x120 [ 316.705444][T27103] do_sendfile+0x400/0xe50 [ 316.707540][T27103] __x64_sys_sendfile64+0x1d8/0x220 [ 316.709978][T27103] do_syscall_64+0xcd/0x4c0 [ 316.712100][T27103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.714775][T27103] [ 316.714775][T27103] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 316.717870][T27103] __mutex_lock+0x193/0x10b0 [ 316.718062][ T6032] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 316.720019][T27103] anon_pipe_write+0x15d/0x1a90 [ 316.724636][T27103] __kernel_write_iter+0x720/0xa90 [ 316.726978][T27103] __kernel_write+0xf5/0x140 [ 316.729142][T27103] autofs_notify_daemon+0x4db/0xd60 [ 316.731518][T27103] autofs_wait+0x10ca/0x1a70 [ 316.733676][T27103] autofs_mount_wait+0x132/0x380 [ 316.735943][T27103] autofs_d_automount+0x390/0x7f0 [ 316.738262][T27103] __traverse_mounts+0x195/0x790 [ 316.740544][T27103] step_into+0x5aa/0x2270 [ 316.742615][T27103] path_openat+0x6db/0x2cb0 [ 316.744740][T27103] do_filp_open+0x20b/0x470 [ 316.746639][T27103] do_sys_openat2+0x11b/0x1d0 [ 316.748837][T27103] __x64_sys_openat+0x174/0x210 [ 316.751088][T27103] do_syscall_64+0xcd/0x4c0 [ 316.753231][T27103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.755897][T27103] [ 316.755897][T27103] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 316.759104][T27103] __lock_acquire+0x12a6/0x1ce0 [ 316.761359][T27103] lock_acquire+0x179/0x350 [ 316.763474][T27103] __mutex_lock+0x193/0x10b0 [ 316.765639][T27103] autofs_notify_daemon+0x4a6/0xd60 [ 316.768024][T27103] autofs_wait+0x10ca/0x1a70 [ 316.770183][T27103] autofs_mount_wait+0x132/0x380 [ 316.772469][T27103] autofs_d_automount+0x390/0x7f0 [ 316.774588][T27103] __traverse_mounts+0x195/0x790 [ 316.776319][T27103] step_into+0x5aa/0x2270 [ 316.777882][T27103] walk_component+0xfc/0x5b0 [ 316.779496][T27103] path_lookupat+0x142/0x6d0 [ 316.781114][T27103] filename_lookup+0x224/0x5f0 [ 316.782800][T27103] kern_path+0x35/0x50 [ 316.784261][T27103] lookup_bdev+0xd8/0x280 [ 316.785835][T27103] resume_store+0x1d6/0x460 [ 316.787428][T27103] kobj_attr_store+0x55/0x80 [ 316.789050][T27103] sysfs_kf_write+0xf2/0x150 [ 316.790660][T27103] kernfs_fop_write_iter+0x354/0x510 [ 316.792488][T27103] iter_file_splice_write+0x91c/0x1150 [ 316.794362][T27103] direct_splice_actor+0x192/0x6c0 [ 316.796117][T27103] splice_direct_to_actor+0x345/0xa30 [ 316.797992][T27103] do_splice_direct+0x174/0x240 [ 316.799674][T27103] do_sendfile+0xb06/0xe50 [ 316.801234][T27103] __x64_sys_sendfile64+0x1d8/0x220 [ 316.803053][T27103] do_syscall_64+0xcd/0x4c0 [ 316.804654][T27103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.806647][T27103] [ 316.806647][T27103] other info that might help us debug this: [ 316.806647][T27103] [ 316.809802][T27103] Chain exists of: [ 316.809802][T27103] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 316.809802][T27103] [ 316.813557][T27103] Possible unsafe locking scenario: [ 316.813557][T27103] [ 316.815868][T27103] CPU0 CPU1 [ 316.817574][T27103] ---- ---- [ 316.819251][T27103] lock(&of->mutex); [ 316.820651][T27103] lock(&p->lock); [ 316.822654][T27103] lock(&of->mutex); [ 316.825128][T27103] lock(&sbi->pipe_mutex); [ 316.826580][T27103] [ 316.826580][T27103] *** DEADLOCK *** [ 316.826580][T27103] [ 316.829128][T27103] 3 locks held by syz.6.3352/27103: [ 316.830782][T27103] #0: ffff88802d208428 (sb_writers#8){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 316.833952][T27103] #1: ffff88805168c488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 316.837031][T27103] #2: ffff88801c36e008 (kn->active#78){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 316.840160][T27103] [ 316.840160][T27103] stack backtrace: [ 316.842075][T27103] CPU: 1 UID: 0 PID: 27103 Comm: syz.6.3352 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(full) [ 316.842091][T27103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 316.842098][T27103] Call Trace: [ 316.842103][T27103] [ 316.842108][T27103] dump_stack_lvl+0x116/0x1f0 [ 316.842126][T27103] print_circular_bug+0x275/0x350 [ 316.842144][T27103] check_noncircular+0x14c/0x170 [ 316.842162][T27103] __lock_acquire+0x12a6/0x1ce0 [ 316.842182][T27103] lock_acquire+0x179/0x350 [ 316.842198][T27103] ? autofs_notify_daemon+0x4a6/0xd60 [ 316.842212][T27103] ? __pfx___might_resched+0x10/0x10 [ 316.842227][T27103] ? autofs_notify_daemon+0x4a6/0xd60 [ 316.842238][T27103] __mutex_lock+0x193/0x10b0 [ 316.842254][T27103] ? autofs_notify_daemon+0x4a6/0xd60 [ 316.842265][T27103] ? autofs_notify_daemon+0x45a/0xd60 [ 316.842278][T27103] ? __pfx___mutex_lock+0x10/0x10 [ 316.842294][T27103] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 316.842308][T27103] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 316.842325][T27103] ? from_kgid_munged+0xab/0x130 [ 316.842340][T27103] ? autofs_notify_daemon+0x4a6/0xd60 [ 316.842351][T27103] autofs_notify_daemon+0x4a6/0xd60 [ 316.842363][T27103] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 316.842375][T27103] ? sysfs_kf_write+0xf2/0x150 [ 316.842386][T27103] ? kernfs_fop_write_iter+0x354/0x510 [ 316.842396][T27103] ? iter_file_splice_write+0x91c/0x1150 [ 316.842413][T27103] ? lockdep_init_map_type+0x5c/0x280 [ 316.842423][T27103] ? lockdep_init_map_type+0x5c/0x280 [ 316.842433][T27103] autofs_wait+0x10ca/0x1a70 [ 316.842446][T27103] ? __pfx_autofs_wait+0x10/0x10 [ 316.842461][T27103] ? __pfx_path_check_mount+0x10/0x10 [ 316.842481][T27103] ? find_held_lock+0x2b/0x80 [ 316.842501][T27103] ? path_has_submounts+0xcb/0x120 [ 316.842525][T27103] ? do_raw_spin_unlock+0x172/0x230 [ 316.842542][T27103] ? find_held_lock+0x2b/0x80 [ 316.842561][T27103] autofs_mount_wait+0x132/0x380 [ 316.842577][T27103] autofs_d_automount+0x390/0x7f0 [ 316.842596][T27103] __traverse_mounts+0x195/0x790 [ 316.842621][T27103] step_into+0x5aa/0x2270 [ 316.842638][T27103] ? __pfx_step_into+0x10/0x10 [ 316.842661][T27103] ? __pfx___up_read+0x10/0x10 [ 316.842677][T27103] ? walk_component+0x35e/0x5b0 [ 316.842692][T27103] ? lookup_fast+0x156/0x610 [ 316.842710][T27103] walk_component+0xfc/0x5b0 [ 316.842726][T27103] path_lookupat+0x142/0x6d0 [ 316.842746][T27103] filename_lookup+0x224/0x5f0 [ 316.842763][T27103] ? __pfx_filename_lookup+0x10/0x10 [ 316.842784][T27103] ? getname_kernel+0x52/0x370 [ 316.842798][T27103] ? __asan_memcpy+0x3c/0x60 [ 316.842815][T27103] kern_path+0x35/0x50 [ 316.842826][T27103] lookup_bdev+0xd8/0x280 [ 316.842838][T27103] ? __pfx_lookup_bdev+0x10/0x10 [ 316.842849][T27103] ? resume_store+0x1b8/0x460 [ 316.842861][T27103] ? __asan_memcpy+0x3c/0x60 [ 316.842877][T27103] resume_store+0x1d6/0x460 [ 316.842889][T27103] ? __pfx_resume_store+0x10/0x10 [ 316.842903][T27103] ? find_held_lock+0x2b/0x80 [ 316.842917][T27103] ? __pfx_resume_store+0x10/0x10 [ 316.842928][T27103] kobj_attr_store+0x55/0x80 [ 316.842945][T27103] ? __pfx_kobj_attr_store+0x10/0x10 [ 316.842960][T27103] sysfs_kf_write+0xf2/0x150 [ 316.842973][T27103] kernfs_fop_write_iter+0x354/0x510 [ 316.842984][T27103] ? __pfx_sysfs_kf_write+0x10/0x10 [ 316.842996][T27103] iter_file_splice_write+0x91c/0x1150 [ 316.843012][T27103] ? __pfx_iter_file_splice_write+0x10/0x10 [ 316.843025][T27103] ? __pfx_copy_splice_read+0x10/0x10 [ 316.843038][T27103] ? __pfx_iter_file_splice_write+0x10/0x10 [ 316.843050][T27103] direct_splice_actor+0x192/0x6c0 [ 316.843062][T27103] splice_direct_to_actor+0x345/0xa30 [ 316.843074][T27103] ? __pfx_direct_splice_actor+0x10/0x10 [ 316.843088][T27103] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 316.843101][T27103] do_splice_direct+0x174/0x240 [ 316.843112][T27103] ? __pfx_do_splice_direct+0x10/0x10 [ 316.843123][T27103] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 316.843135][T27103] ? rw_verify_area+0xcf/0x6c0 [ 316.843152][T27103] do_sendfile+0xb06/0xe50 [ 316.843163][T27103] ? __pfx_do_sendfile+0x10/0x10 [ 316.843172][T27103] ? __pfx___seccomp_filter+0x10/0x10 [ 316.843189][T27103] __x64_sys_sendfile64+0x1d8/0x220 [ 316.843204][T27103] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 316.843218][T27103] ? __secure_computing+0x28e/0x3b0 [ 316.843235][T27103] do_syscall_64+0xcd/0x4c0 [ 316.843251][T27103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.843262][T27103] RIP: 0033:0x7f532c58ebe9 [ 316.843271][T27103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.843281][T27103] RSP: 002b:00007f532d432038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 316.843292][T27103] RAX: ffffffffffffffda RBX: 00007f532c7b5fa0 RCX: 00007f532c58ebe9 [ 316.843298][T27103] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 316.843305][T27103] RBP: 00007f532c611e19 R08: 0000000000000000 R09: 0000000000000000 [ 316.843311][T27103] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000000 [ 316.843317][T27103] R13: 00007f532c7b6038 R14: 00007f532c7b5fa0 R15: 00007fff83b31198 [ 316.843328][T27103] [ 316.891172][ T6032] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 316.896591][T27103] PM: Image not found (code -22) [ 316.898243][ T6032] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 316.898255][ T6032] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 317.017469][ T6032] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 317.020864][ T6032] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 317.025649][ T6032] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 317.029322][ T6032] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 317.031808][ T6032] usb 12-1: Product: syz [ 317.033143][ T6032] usb 12-1: Manufacturer: syz [ 317.037888][ T6032] cdc_wdm 12-1:1.0: skipping garbage [ 317.046341][ T6032] cdc_wdm 12-1:1.0: skipping garbage [ 317.048815][ T6032] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 317.050936][ T6032] cdc_wdm 12-1:1.0: Unknown control protocol [ 317.776303][ T1149] net_ratelimit: 36 callbacks suppressed [ 317.776316][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 317.894140][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 318.011671][ T1144] bond0: (slave wlan0): failed to get link speed/duplex [ 318.129072][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 318.246666][ T1145] bond0: (slave wlan0): failed to get link speed/duplex [ 318.364609][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 318.482133][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 318.581095][ T40] kauditd_printk_skb: 1012 callbacks suppressed [ 318.581106][ T40] audit: type=1400 audit(1754505024.699:36319): avc: denied { read write } for pid=21452 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.590673][ T40] audit: type=1400 audit(1754505024.699:36320): avc: denied { open } for pid=21452 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.598155][ T40] audit: type=1400 audit(1754505024.699:36321): avc: denied { ioctl } for pid=21452 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.606165][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 318.727713][ T1144] bond0: (slave wlan0): failed to get link speed/duplex [ 318.845287][ T13] bond0: (slave wlan0): failed to get link speed/duplex [ 319.671295][ T6560] usb 12-1: USB disconnect, device number 3 [ 319.676756][ T40] audit: type=1400 audit(1754505025.719:36322): avc: denied { read write } for pid=26685 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 319.684163][ T40] audit: type=1400 audit(1754505025.719:36323): avc: denied { open } for pid=26685 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 319.691726][ T40] audit: type=1400 audit(1754505025.719:36324): avc: denied { ioctl } for pid=26685 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.470231][ T40] audit: type=1400 audit(1754505028.338:36325): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 322.477420][ T40] audit: type=1400 audit(1754505028.338:36326): avc: denied { sendto } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 323.154575][ T40] audit: type=1400 audit(1754505028.974:36327): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 323.154772][ T1149] net_ratelimit: 35 callbacks suppressed [ 323.154790][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 323.281915][ T1149] bond0: (slave wlan0): failed to get link speed/duplex [ 323.399493][ T1144] bond0: (slave wlan0): failed to get link speed/duplex [ 323.527790][ T1145] bond0: (slave wlan0): failed to get link speed/duplex [ 323.645416][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 323.762923][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 323.880594][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 323.998260][ T1144] bond0: (slave wlan0): failed to get link speed/duplex [ 324.116079][ T80] bond0: (slave wlan0): failed to get link speed/duplex [ 324.233410][ T80] bond0: (slave wlan0): failed to get link speed/duplex VM DIAGNOSIS: 18:30:36 Registers: info registers vcpu 0 CPU#0 RAX=00000000003308b4 RBX=0000000000000000 RCX=ffffffff8b928c29 RDX=ffffed100d486656 RSI=ffffffff8c161080 RDI=ffffffff819133c1 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90aaf290 R15=0000000000000000 RIP=ffffffff8b92778f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f50ae74de9c CR3=00000000484b8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5b441ba0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5b441d26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5b441d26 00007ffe5b441d2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22e12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22e12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22e12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22e12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22e12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e22e12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85636715 RDI=ffffffff9b104160 RBP=ffffffff9b104120 RSP=ffffc90004ed6698 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e36312e36 R12=0000000000000000 R13=000000000000006e R14=ffffffff9b104120 R15=ffffffff856366b0 RIP=ffffffff8563673f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f532d4326c0 ffffffff 00c00000 GS =0000 ffff8880d67c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555577feb4a8 CR3=000000003d5f4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000004 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff83b316a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff83b316a6 00007fff83b316ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f532c612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f532c612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f532c612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f532c612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f532c612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f532c612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f532c7874a8 00007f532c7874a0 00007f532c787498 00007f532c787470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f532d2ed100 00007f532c787460 00007f532c787478 00007f532c7874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f532c7874b8 00007f532c7874b0 00007f532c7874a8 00007f532c7874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000000 RBX=0000000000000000 RCX=ffffffff8b8bb711 RDX=ffff888034682440 RSI=ffffffff8b8bb71b RDI=0000000000000007 RBP=ffff88803b3e4600 RSP=ffffc90004b8f4f0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000001 R12=0000000000000000 R13=ffff88803b3e4606 R14=0000000000000002 R15=ffff888012918800 RIP=ffffffff81bb9337 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe0d46d2000 CR3=000000003774b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f732e6d61706269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000610 000000000000f9f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffff88802ad34910 RDX=0000000000000001 RSI=ffff88802ad34900 RDI=ffff888051c15050 RBP=ffff888034389800 RSP=ffffc900006f8c68 R8 =1ffff1100687130a R9 =0000000000000000 R10=ffff8880369d0487 R11=0000000000000003 R12=dffffc0000000000 R13=ffff888051c15000 R14=0000000000000001 R15=0000000000200b20 RIP=ffffffff818e8887 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1657855e9c CR3=000000003d5f4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff83b312c0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff83b316a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff83b316a6 00007fff83b316ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f532c612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f532c612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f532c612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f532c612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f532c612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f532c612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e776f6e6b6e7500 6f6c6c3332302500 657a697320740004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b524a4b4e4b5000 4a49491617150000 405f4c560551464a 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000