last executing test programs: 1m30.153313357s ago: executing program 0 (id=223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) (async) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) (async) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000180)=0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m30.042988937s ago: executing program 0 (id=224): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000180)={0x4000, r1}, 0x0) landlock_restrict_self(r2, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x1) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000010000080003400000000714"], 0x64}}, 0x0) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @loopback, 0x5}, 0x1c) (async) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, 0x0) (async) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x2, 'lc\x00'}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x3c, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) (async) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) (async) sendfile(r0, r4, 0x0, 0x88d) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000240)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000004c0)={0x0, 0x0, 0x0}) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000002380)) (async) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000100000100002000000000000000"], 0x24, 0x3) 1m30.040835345s ago: executing program 0 (id=225): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x42a}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) syz_emit_ethernet(0x7c, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DVD_AUTH(r3, 0x5390, &(0x7f0000000100)=@lsk={0x6, 0x3, "7d94d8f59c"}) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[], 0xc9c8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r6, &(0x7f0000000040)=""/148, 0xffffff96) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000a6002500000008000300", @ANYRES32=r5, @ANYBLOB="0800090005ac0f000a0006000802110000010000110007003e633fbd9293ab0300b20546cc00000005000800010000000a000600ffffffffffff0000040034000800350004000000080026"], 0x6c}}, 0x0) 1m29.813240636s ago: executing program 0 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) r3 = syz_io_uring_setup(0x241d, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30}]}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0xffffffc3}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) map_shadow_stack(&(0x7f00006d3000/0x1000)=nil, 0x1000, 0x0) io_uring_enter(r3, 0x3, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f"], 0x54}}, 0x0) 1m29.794477382s ago: executing program 0 (id=227): socket$inet6(0xa, 0x0, 0x7a) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) msync(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x6) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) io_setup(0x1, &(0x7f0000000080)=0x0) io_getevents(r3, 0x3, 0x0, &(0x7f0000000280), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback}, {@in=@multicast1, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x22, 0x1}]}, 0x140}}, 0x0) 1m29.673487885s ago: executing program 0 (id=228): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) mount_setattr(0xffffffffffffff9c, 0x0, 0x100, &(0x7f0000000200)={0x100080, 0x0, 0x100000, {r1}}, 0x20) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) socket$qrtr(0x2a, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f00000000c0)={0x1, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats_percpu\x00') read(r4, &(0x7f0000001a00)=""/177, 0xb1) r5 = open(0x0, 0x49002, 0x0) sendfile(r4, r0, 0x0, 0xfffffffffffffff9) setpriority(0x2, 0x0, 0x3) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x329140, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1000}) r8 = syz_io_uring_setup(0x7573, &(0x7f0000001280)={0x0, 0xe53e, 0x10100, 0x3, 0x2e8, 0x0, r5}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0xa93, &(0x7f0000000400)={0x0, 0xafd2, 0x0, 0x1, 0x9b}, &(0x7f0000000040)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x72, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="7215060ee1a4239f868607b3eff1068eaa9c1dbac1c0da37726bee295b9e20e53182aab13565e1564e23811a0b86f3a6be01ae673f8b5be4a304005fc9b7305c508b43ba67fbe86dc40458582a5b53", 0x4f, 0xf87930f96fc61b2f}) io_uring_enter(r8, 0x48e9, 0x4, 0x2, 0x0, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f00000008c0)={'team0\x00', 0x4ff}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc}) 1m14.507515946s ago: executing program 32 (id=228): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) mount_setattr(0xffffffffffffff9c, 0x0, 0x100, &(0x7f0000000200)={0x100080, 0x0, 0x100000, {r1}}, 0x20) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) socket$qrtr(0x2a, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f00000000c0)={0x1, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats_percpu\x00') read(r4, &(0x7f0000001a00)=""/177, 0xb1) r5 = open(0x0, 0x49002, 0x0) sendfile(r4, r0, 0x0, 0xfffffffffffffff9) setpriority(0x2, 0x0, 0x3) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x329140, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1000}) r8 = syz_io_uring_setup(0x7573, &(0x7f0000001280)={0x0, 0xe53e, 0x10100, 0x3, 0x2e8, 0x0, r5}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0xa93, &(0x7f0000000400)={0x0, 0xafd2, 0x0, 0x1, 0x9b}, &(0x7f0000000040)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x72, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="7215060ee1a4239f868607b3eff1068eaa9c1dbac1c0da37726bee295b9e20e53182aab13565e1564e23811a0b86f3a6be01ae673f8b5be4a304005fc9b7305c508b43ba67fbe86dc40458582a5b53", 0x4f, 0xf87930f96fc61b2f}) io_uring_enter(r8, 0x48e9, 0x4, 0x2, 0x0, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f00000008c0)={'team0\x00', 0x4ff}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc}) 1m12.24303691s ago: executing program 1 (id=360): socket(0x3, 0x800, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b37, &(0x7f0000000000)={'wlan1\x00', @random="ff00"}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x78}, 0x1, 0x7}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x0, @loopback}}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xffffffffffffbf3d}, 0xc) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000100)) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x33}, 0xa, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0x100}}, 0xe8) r7 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)={'c', ' *:* ', 'w\x00'}, 0x8) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="a9482a3a2a05000000"], 0x9) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="4f7bcfc3f0b362d14e63202a3a2a20af00f07faa1087d1db346369637677ab24c2b4ee474ddb0be7d5bac207"], 0x8) r8 = socket(0x3, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000003080)={0x4, 0x0, 0x3, 0x0}) 1m12.180906809s ago: executing program 1 (id=361): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) (async) sendfile(r3, r4, 0x0, 0x7ffff000) (async) splice(r2, 0x0, r1, 0x0, 0x3, 0x3) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x9, 0x1e1101) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) r8 = geteuid() setuid(r8) (async) fchdir(r7) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000000)='.\x00', 0x0, 0x321491, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m12.082571853s ago: executing program 1 (id=363): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) close_range(r0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x8b}]}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x861044, &(0x7f0000000400)={[], [{@euid_lt}, {@dont_appraise}, {@context={'context', 0x3d, 'root'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x36, 0x30, 0x39, 0x34, 0x32, 0x66, 0x36], 0x2d, [0x62, 0x34, 0x62, 0x62], 0x2d, [0x34, 0x37, 0x62, 0x63], 0x2d, [0x33, 0x31, 0x34, 0x37], 0x2d, [0x30, 0x6a, 0x36, 0x65, 0x37, 0x37, 0x66, 0x62]}}}, {@dont_measure}, {@flag='lazytime'}, {@uid_gt={'uid>', 0xee01}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) pipe2(0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f0000000080)={0x8}) ioctl$KVM_RUN(r7, 0xae80, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00') close_range(r2, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) close(r8) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 1m11.981177683s ago: executing program 1 (id=366): syz_open_dev$evdev(&(0x7f0000001040), 0x0, 0x0) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c670500"/30, @ANYRESDEC=0x0, @ANYBLOB=',allow_other,max_read=0x0000000000000000,\x00']) getrlimit(0x0, &(0x7f0000000240)) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x101800, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x2160800, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2100) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x45) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) getdents64(r4, &(0x7f0000001080)=""/94, 0x5e) syz_emit_vhci(&(0x7f00000011c0)=ANY=[], 0xe) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001100)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) 1m11.873246444s ago: executing program 1 (id=368): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1m9.5907881s ago: executing program 1 (id=373): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000010d00)=ANY=[], 0x8418}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f0000000340)=""/204, 0xcc}], 0x2}, 0x10121) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1m9.524118345s ago: executing program 33 (id=373): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000010d00)=ANY=[], 0x8418}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f0000000340)=""/204, 0xcc}], 0x2}, 0x10121) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 34.691668481s ago: executing program 2 (id=544): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$inet6(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5a6871908ddfe3ee43aa1160a73753ce6cab32d184de576a9f314969c1d7546399a47258ea86bbd3febfc84e58f64d32bb361e0af645bad480a103ab7d7fa2404622f26e7f7e668a4d7e5aee1276dc1d52b170003659e627d012cdf5dcb438b8ae0bf19e6c992c68011b7297da8b53655071195f55e0d68ff3a297520e6cd6b2b46822b62f0fa2c9bd78d970b17a23e4096c1aeb98ba30c29a9003ba384101a9bb1ac802a76ec09284effc42886e77fe283439bc49a035bc4699ea3f5f049025dcb27f3bef88634d63ce70dd8756f4bf3100e3fd83131acc6bf88380dd4b1a277f8381d96c02860d605007f25c76d3893b32f43bca88d104b67b9d", 0xfb}, {&(0x7f0000000400)="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", 0x2d6}, {&(0x7f0000001540)="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", 0xc30}], 0x3}, 0x40001080) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "fd9192068590ef44", "4ded6853efa14266912ec2cb350be183", "15861006", "84d6d4ab8749281f"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) fchdir(r2) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000300)='1\x00', 0xffffff4a) syz_clone(0x1208000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r5, &(0x7f0000000000)='2\x00', 0x2) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000040)) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000180)='maps\x00') syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 33.899134969s ago: executing program 2 (id=547): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x59) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x178) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 33.817304182s ago: executing program 2 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 33.815839762s ago: executing program 2 (id=551): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000300)='cpuset.mems\x00', 0x2, 0x0) getdents64(r0, &(0x7f0000000300)=""/167, 0xa7) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000a00000000000000000000004cb19c7c999782007464cf15e97be1a487d3c6d3e588f5cb3c5856ca9acb4541b241885eae454941f0185c09df294a4f005496c570e7494580d6b61d243c34e747d004def3f01a1f8a2de25183c7a39b842151d07a1e82a948f8a931fe4dded27e96a0dc8e3d9105781741a3ccc9e82d935390619bb7c46d5bf4db07338c8bfe0d2cc45638a7c077acc895", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000850000009e00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) move_mount(r1, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) 32.942596994s ago: executing program 2 (id=559): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9, 0x4}, {0xa, 0x1}, {0x2}]}]}, {0x0, [0x61]}}, &(0x7f0000001340)=""/106, 0x3f, 0x6a, 0x0, 0x10000, 0x0, @void, @value}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000300), &(0x7f0000000400)='%pi6 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r5, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001440)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001500)={{0x1, 0xffffffffffffffff}, &(0x7f0000001480), &(0x7f00000014c0)='%ps \x00'}, 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x14, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x2, 0x1, 0x7, 0x6, 0x50, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000280)=""/4096, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000013c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001400)={0x2, 0xc, 0x8000, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001540)=[r3, r5, r6, r9, r10, r11], &(0x7f0000001580)=[{0x0, 0x1, 0xd, 0x5}, {0x2, 0x2, 0x10}, {0x1, 0x2, 0xa, 0xb}, {0x8005, 0x4, 0x7}], 0x10, 0xfffffff8, @void, @value}, 0x94) r12 = syz_genetlink_get_family_id$team(&(0x7f00000016c0), r9) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001700)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000017c0)={'ip6_vti0\x00', &(0x7f0000001740)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x0, 0x5, 0x43, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0xa}, 0x80, 0x10, 0x7fffffff, 0x9}}) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000001980)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001800)={0x12c, r12, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r13}, {0x110, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7f, 0x9, 0x7, 0x5}, {0x8, 0xc, 0x6b, 0x435b43e2}, {0x1000, 0x0, 0x7f, 0xf}, {0xfff7, 0x0, 0x46, 0x80000001}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x14}, 0x24000010) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 32.618957316s ago: executing program 2 (id=562): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001d00), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x30, r2, 0x1, 0x70bdad, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x38, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x181, 0x0, 0x0, {0x2}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40004000) 32.561322985s ago: executing program 34 (id=562): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001d00), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x30, r2, 0x1, 0x70bdad, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x38, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x181, 0x0, 0x0, {0x2}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40004000) 4.160515234s ago: executing program 4 (id=991): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, r0, 0x5, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x2, 0xfffffffb, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7880, 0x1, 0x0, 0x57}}) (async, rerun: 32) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0x6, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000440)=""/176, 0x27, 0xb0, 0x0, 0x9, 0x0, @void, @value}, 0x28) (rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r0, 0x20, &(0x7f0000000680)={&(0x7f0000000580)=""/88, 0x58, 0x0, &(0x7f0000000600)=""/29, 0x1d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x15, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x7, 0x1, 0x0, r1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x46, &(0x7f0000000240)=""/70, 0x40f00, 0x2e, '\x00', r2, @fallback=0x1a, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0x8, 0x1}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[r0, r0, r0, r0, r0], 0x0, 0x10, 0x6, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r5) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) (async) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) 4.091927991s ago: executing program 4 (id=993): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x402, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x41}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x110, r0, 0x65f44000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa42, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async) mmap(&(0x7f00000f5000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) (async) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x1, &(0x7f0000000380)=""/4096, &(0x7f0000000140)=0x1000) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000000), 0xfffffecc) (async) splice(r10, 0x0, r9, 0x0, 0x4, 0x0) (async) write$FUSE_WRITE(r7, &(0x7f00000000c0)={0x18}, 0xfffffdef) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000161459"], 0x10}}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4.084643178s ago: executing program 4 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0x80000000, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r2}, 0x50) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x8, 0x22681) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) (async) ioctl$TIOCGPTPEER(r3, 0x40140921, 0x20000001) 4.000240911s ago: executing program 4 (id=1000): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000000)='.\x00', 0x400, 0xa0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r1, 0x4bfb, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1700b40c6800210500000000000000000200000000000000080005007af06d7fc349d77fa1fbb84fd62f966e261df9563eebe5faa0951b7970a7c05c94a36f89ccc584c08314d530e84040d0038f22ee0821", @ANYRES32=0x0, @ANYBLOB="0800010002000000"], 0x28}}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c6761636865040bed45d36782a72d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') read(r2, &(0x7f0000000240)=""/202, 0xca) r3 = open(&(0x7f0000002000)='./bus\x00', 0x14b142, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r4, r4, 0x1a) ioctl$TCFLSH(r3, 0x540b, 0x2) sendfile(r2, r2, 0x0, 0x3d) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000140)) sendfile(r3, r2, 0x0, 0xf6c1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) 3.861486848s ago: executing program 4 (id=1005): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) (async) ioctl$TUNSETOFFLOAD(r0, 0x8008743f, 0x20000000) r1 = gettid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000024002100000000000000000000000000060003000099"], 0x1c}}, 0x0) (async) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x210200, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, 0x2, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_LABELS_MASK={0x10, 0x17, [0x80000000, 0x0, 0x4]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10001}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x69}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x120}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x7, 0x512, 0x40]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x11}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc00}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200000d4}, 0x8001) (async) prctl$PR_SET_PTRACER(0x59616d61, r1) 3.65121236s ago: executing program 4 (id=1015): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000180)=0x4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ftruncate(r1, 0x9) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000200)={0x9, {0xd8c9, 0x2, 0x226, 0x800}}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x9d, &(0x7f0000000080)={@dev, @empty, @void, {@ipv4={0x800, @udp={{0xe, 0x4, 0x0, 0x5, 0x8f, 0x67, 0x0, 0x3, 0x11, 0x0, @multicast2, @rand_addr=0x64010101, {[@noop, @cipso={0x86, 0x16, 0x2, [{0x6, 0x10, "8dc5534a97d5e4285e4a35476633"}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0x8, 0xdf, 0x0, 0xc, [0x8]}]}}, {0x4e21, 0x4e23, 0x57, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100, @val=0x80}, "cb44f1297d1ed8287d239ca9162ac93c860e3d79c19d2394c7da757f976e4f5a608429bd19426732a0ac3b67635e6ab5f8ebfc00e8168ddea14a45f0ce7d87f206a3e991e26d92"}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, '\alI\x00\x00\x00\x00\x00'}}}}}, 0x0) 3.600338168s ago: executing program 35 (id=1015): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000180)=0x4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ftruncate(r1, 0x9) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000200)={0x9, {0xd8c9, 0x2, 0x226, 0x800}}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x9d, &(0x7f0000000080)={@dev, @empty, @void, {@ipv4={0x800, @udp={{0xe, 0x4, 0x0, 0x5, 0x8f, 0x67, 0x0, 0x3, 0x11, 0x0, @multicast2, @rand_addr=0x64010101, {[@noop, @cipso={0x86, 0x16, 0x2, [{0x6, 0x10, "8dc5534a97d5e4285e4a35476633"}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0x8, 0xdf, 0x0, 0xc, [0x8]}]}}, {0x4e21, 0x4e23, 0x57, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100, @val=0x80}, "cb44f1297d1ed8287d239ca9162ac93c860e3d79c19d2394c7da757f976e4f5a608429bd19426732a0ac3b67635e6ab5f8ebfc00e8168ddea14a45f0ce7d87f206a3e991e26d92"}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, '\alI\x00\x00\x00\x00\x00'}}}}}, 0x0) 3.538809499s ago: executing program 6 (id=1017): unshare(0x62040200) r0 = creat(&(0x7f0000000600)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000840)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x104) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0xa0002008}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x40046208, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x40, 0xd, 0x2a3, 0xa, 0x9]}, &(0x7f0000000240)=0x54) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0xa, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) 3.241808067s ago: executing program 3 (id=1023): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0xb, 0x700, 0x40, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff5}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x68}}, 0xceb3912c1cb6a6b2) 3.24090648s ago: executing program 6 (id=1024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = openat$fb1(0xffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000280)={0xa, 0x1, &(0x7f0000000140)=[0x0], &(0x7f0000000180), &(0x7f00000001c0), 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f00000000c0)="c40b1b65ab4b65dbc1fa12c74705a122", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000140)="5f96565e14027386aa93a303c44b5b3b", 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0xff}}, 0x28}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=@mpls_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_DST={0x8, 0x1, {0x1}}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x3, 0x0, {0x4, 0x6, 0x0, 'wlan1\x00'}}, 0x27) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f00000013c0)={&(0x7f0000001040), 0xc, &(0x7f0000001380)={&(0x7f0000001080)={0x2d8, r7, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x45}}}}, [@NL80211_ATTR_IE={0x25, 0x2a, [@prep={0x83, 0x1f, {{}, 0xfa, 0x40, @device_a, 0x57, @void, 0x6, 0x0, @device_b, 0x91}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x24f, 0x2a, [@channel_switch={0x25, 0x3, {0x2, 0x38, 0x9}}, @rann={0x7e, 0x15, {{0x1, 0x16}, 0x0, 0xff, @device_b, 0x81, 0x1000, 0x5}}, @random_vendor={0xdd, 0x6d, "9c52e281f79a9bf5d9ad8d6cedf3562d341eae5bd4a37d28e7247f2171717a6369535df5f614f5604b23ff61ea53b89b116864d97944634db66786cf37e700f8276f490f8378293bc859f7171408d1ed71c6366e84c990bf0c0d076218bab65d63faddbd6d738aaaf24cc917d9"}, @random_vendor={0xdd, 0x96, "35f6f80d9daf5f91aea4d8c34944fd91d8b404c0552636c2cb513e5de27323fb000e8f2c74e0f26cb2f6395d5273f1d273f5c386137eabf4de232429c7d35509b907f3ebcadcf309dfef86c75f4d800a72971334cc9920af4bd365d9a1d4c4db3c5895a1ba4fd08d9bef48e80187d032f7f0e6182ec748b3470c575173e5b4ea5d9b186ab4fd9a327a61a28a842a0e010647092190e4"}, @cf={0x4, 0x6, {0xff, 0x1, 0x3f}}, @challenge={0x10, 0x1, 0x70}, @erp={0x2a, 0x1, {0x1}}, @mic={0x8c, 0x18, {0xf72, "e488d7d09db2", @long="d4d25c4ae557fab974cfca56c1e88208"}}, @cf={0x4, 0x6, {0x3, 0x6, 0x1, 0x645}}, @fast_bss_trans={0x37, 0xf6, {0x5, 0x7, "4d926c5a845113e5b576df0616b71733", "679eb7a7b7f7279d1841df8d831c103157c1d45113e31ed778e05fe0cd702b26", "34304c4bc7ba07740aca820d42ef10cad53147b086b4545ff8568b0cd3fe2f8d", [{0x1, 0x3, "bc5e67"}, {0x4, 0x25, "f6ecb6bf36a828c4f1ae343c67c2331fb77e121052ebba6a1311ad806a5c16055e5d5c8c44"}, {0x1, 0x27, "452b1b3085f68f38df56493e781c0a73c8ee15d93fe38014433ed9932a3cef40cbe285908b6969"}, {0x1, 0x1a, "5fb30105458f745014b179f748febf0a759a4c1b0a051ebcc561"}, {0x4, 0x10, "bf2f6f75eef5568e12a2124901dbf4ee"}, {0x2, 0xd, "63682768f0626b4c7d4475af7c"}, {0x4, 0x10, "6e7fb97a5f606896de170107aa15427c"}]}}]}, @NL80211_ATTR_IE={0x37, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x17}, 0x1, 0x5, @device_a, 0x1000, 0x7, 0x5255}}, @ht={0x2d, 0x1a, {0x8000, 0x3, 0x6, 0x0, {0x6, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x2}, 0x400, 0x91, 0x1}}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r7, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xe, 0x59}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5e0}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4002000}, 0x20000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000030801010000000000000000010000050c00400000000005000300010000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) 3.236637617s ago: executing program 3 (id=1025): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6(0xa, 0x3, 0x3c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x1, 0x3d, &(0x7f00000002c0), 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x4, 0x6b24e784, 0x2000006, 0x1f, 0xfe, "4a3498e1ff06000000132209d7dc0b09000a48", 0x8000, 0x10}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x109000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000002c0), 0x2200800, 0x0) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x105c42, 0x5) r5 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x4d44, 0x8, 0x1}, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_setup(0xa94, &(0x7f00000005c0), &(0x7f0000000040)=0x0, &(0x7f0000000140)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0x6) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x48e9, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xbe) mkdir(&(0x7f0000000180)='./file0\x00', 0x1d5) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x970026, &(0x7f0000000480)=ANY=[@ANYBLOB='mode=00000000000000000000000,uid=', @ANYRESHEX=0x0]) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.161964328s ago: executing program 6 (id=1026): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x40, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff5}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x68}}, 0xceb3912c1cb6a6b2) (fail_nth: 7) 3.002329043s ago: executing program 6 (id=1028): r0 = socket(0xa, 0x2, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) (async) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000005c0)) (async) preadv(r4, &(0x7f0000000700)=[{&(0x7f0000000180)=""/233, 0xe9}, {&(0x7f00000000c0)=""/1, 0x1}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/95, 0x5f}, {&(0x7f00000004c0)=""/193, 0xc1}, {&(0x7f0000000640)=""/173, 0xad}], 0x7, 0x9, 0x3) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x3, 0x6, @dev}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) 3.001865323s ago: executing program 6 (id=1030): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xffe4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) 2.952662783s ago: executing program 3 (id=1031): r0 = syz_clone(0x13002100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x82, 0xaec, 0x0, 0x0, 0x3c, 0xfe54}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x202, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x8082, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000180)) (async, rerun: 64) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="b8010000000f01d9b9800000c00f3235010000000f300f01ca8f8878c01200410f01c966ba4200b807000000ef66b837000f00d8410f97259c000000460f01cb48b800800000000000000f23c00f21f835020008000f23f8", 0x58}], 0x1, 0x51, &(0x7f0000000180)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfabf}, @cstype3={0x5, 0x1}], 0x2) (rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.946956417s ago: executing program 6 (id=1033): socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r2, &(0x7f0000000040)={{0x2, @null}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0xb2000, &(0x7f0000000800)={[{@xino_on}, {@xino_on}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) chdir(&(0x7f00000000c0)='./bus\x00') setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x3f, 0x4, 0x6, 0x1f, 0xf4, 0x7f, 0x3f, 0x6, 0x2, 0x9, 0xff, 0x9, 0x0, 0x7f}, 0xe) sendto$inet6(0xffffffffffffffff, &(0x7f0000000840)="58732c9a65577714a65c69d0fe68f7108db85e26738cb1cc5875a254aea696c9b6ff4b96480d636393395528671f6ee06f0964640c1c978653fd12aa806f48623d376763ae90261ef8d15f3c9f082fdecad17d020a981e691bf5bf540a0d3055b9d6c0f42ee3cc0e28db7db7cdac951b2e5d37bd899fa207b597951b53d6cbf22a6ea3a81a446aac49b21d67d14d664a7583da8ae01276dce000d721e6f392aae4e29d83c35c240e505f3476cb4031a944b3314fb4b6a0f03561dfca9c2bc1a9cbb7cec35b309c30f4f0d6516219cd2148737c6ddbbb716fc99c4872cf4b157f6ee1b6136f99125f4e1703af4886e1ec", 0xf0, 0x84, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x0, 0xfffb, 0x7fff, 0x8, 0x3, 0x1c, 0x6, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}, 0xba7f, 0x4, 0x0, 0x20003, 0x5b8}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000500)=[@in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x5}]}, &(0x7f00000002c0)=0xfffffffffffffefc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0x4}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x8, 0x322, 0x0, 0x10001, 0x10000000}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1ff}}, 0x6, 0x5}, &(0x7f0000000200)=0x90) r3 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={r4, 0x81, 0x1000, 0x5, 0x0, 0x1, 0x7f, 0x9, {0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x11, 0x40, 0x2, 0x8, 0x2}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={r4, 0x4, 0xf}, 0x8) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f80000000000b503e45c0000"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 2.542566044s ago: executing program 3 (id=1038): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3e51f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @multicast1}}, [0x3, 0x9d72, 0xc000000, 0x6, 0x3, 0x3, 0x9c, 0x4, 0x5, 0x8, 0xf0fa, 0x1, 0x0, 0xed, 0xfffffffffffffff9]}, &(0x7f0000000040)=0x100) pipe2(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) read(r6, &(0x7f0000000280)=""/44, 0x2c) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r8, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9ce514dff8c9eb9baf7aff97408a7f5586599d8352df820cd6fe99d04741e9292cab6a25826e910e20d4c32c6f61c6d9a9b74f99b823bd5008764b2ed4e085effb83262921965ae0cbe4a78ed0154f2820ff11c0acd35f02fc21d81129690a1162e2cc16fbdb2d781f0b4c39dd093c", @ANYRES16=r8, @ANYBLOB="520526bd7000fbdbdf254a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000044) pread64(r1, &(0x7f0000000200)=""/224, 0xe0, 0x73) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r9 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000580)={@multicast2, @rand_addr=0x64010102, 0x0, 0x5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @multicast2, @private=0x100]}, 0x24) ioctl$SNDRV_PCM_IOCTL_STATUS64(r9, 0xc06c4124, &(0x7f0000000080)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64], 0x34c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.911354422s ago: executing program 5 (id=1044): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x46c, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {0x49}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {0x49}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) signalfd(r3, &(0x7f0000000180), 0x8) (async) signalfd(r3, &(0x7f0000000180), 0x8) syz_io_uring_setup(0x38a9, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) (async) unlinkat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) (async) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x85, &(0x7f00000000c0)={r8, @in6={{0xa, 0x0, 0x0, @empty}}, 0x10000000, 0x5}, &(0x7f00000001c0)=0x9c) write$FUSE_INIT(r6, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xffffffb9}], 0x1}, 0x0) 1.841570203s ago: executing program 5 (id=1045): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x7800, 0x10, 0x766, 0x3, {{0x12, 0x4, 0x3, 0x2, 0x48, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x34, 0xffffffffffffffff, [{0x1, 0xf, "295680e5904cdd67eada04792b"}, {0x2, 0xe, "0cdd8873921333a27e7a3e4a"}, {0x0, 0x6, "9c929ab5"}, {0x2, 0x5, "eef4c1"}, {0x5, 0x4, "8ff7"}, {0x6, 0x2}]}]}}}}}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x2, 0x7fff, {0xffffffffffffffff}, {0xee00}, 0x8, 0x3}) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=@report={0x158, 0x20, 0x32c, 0x70bd2a, 0x25dfdbfc, {0xff, {@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x7, 0x4e23, 0x0, 0xa, 0x0, 0xa0, 0xbf, r2, r3}}, [@algo_auth_trunc={0x10a, 0x14, {{'ghash-ce\x00'}, 0x5f0, 0x100, "0db7c3925957f09a5e00415fa4f3bc4fe51f96e6786a83b906d540456954fad4e47a363d9a14056bbbed6f385f0c40ec9ac11649e84d5078ec25bf34f72b00ee60f739cf663d7643078d834eed05d9a634be0cb1b26bb74ee420ce581e5bd2ea8e7c9656e0e17099d92c7b16032ecb0089aa0f0835b9cc416b8c43a268692219453a06e082f91a233f340eecee4a2e85e6498ac961658a406d383675d6cdd1c577aebe933c45bcdc91e01f4f9e6f1d2fee22176b06a39b2ef877a7b159d2"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c0) (async) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000004c0)={0x5, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000780)={&(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0], 0x6, 0x4, 0x3}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x3, 0x2, 0x8}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000c40)={&(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000d00)={&(0x7f0000000cc0)=[r5, r7, r9, r12, r13], 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r14, 0xc0502100, &(0x7f0000000d40)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r14, 0x40182103, &(0x7f0000000dc0)={r15, 0x0, r1, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000e40)={r6, r8, r11, 0x0, 0x0, 0x6, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r17 = accept4$bt_l2cap(r1, &(0x7f0000000e80)={0x1f, 0x0, @none}, &(0x7f0000000ec0)=0xe, 0x80800) setsockopt$bt_BT_POWER(r17, 0x112, 0x9, &(0x7f0000000f00)=0x8, 0x1) r18 = syz_open_dev$audion(&(0x7f0000000f40), 0xfffffffffffffe79, 0x10840) writev(r18, &(0x7f0000001080)=[{&(0x7f0000000f80)="8357d34c5ec717a4505589be7fdc98ce11db12803348c8e521d2411c2c9628c980a06e092264e1b8d498db158470f4eb7d0d7c50619e71a1ff1e8a7df2bec1bee6647cea1b739473fc396d1654b37fe0982addfa8ec8f4b8be7847fcae78910e28fc6df0e5bc87227170e1e88a239195b4e1c747ae74b93744cc78d3554457177847b53e40c55658dc1b742bb18252f8c4cd73a52f7ba6160e0b31baa78cc3922db6e15ab08aaa38238ec235f90654653bde274329f242bc10a698a9a94db6498b64bcccbe5ef3824d992d7478ec", 0xce}], 0x1) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r18, 0xc01864b1, &(0x7f0000001100)={r10, 0x1, 0x4, 0x3, &(0x7f00000010c0)=[{0x1, 0x101, 0x0, 0x6}, {0x1a3, 0x3c86, 0x3}, {0x517, 0x8, 0x1, 0x2d3}]}) (async) r19 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/vmstat\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r19, 0x7b1, &(0x7f0000002180)={&(0x7f0000001180)=[0x7f, 0x9, 0x9, 0x7, 0x0, 0x8, 0x8714, 0x1ff, 0xb, 0x813, 0x4, 0xfff, 0x6, 0x2, 0xffffffff, 0x3, 0xff, 0x3, 0x2, 0x7, 0x7, 0x3, 0xd5, 0x9, 0x8, 0x80, 0x2, 0xc, 0x7, 0x5, 0x7, 0x81, 0x9, 0xfffffffa, 0x1, 0x7ff, 0xc70, 0x4, 0x8, 0x7fff, 0x1, 0x8, 0x9, 0x8, 0x47e, 0x9, 0x1, 0xfffffffd, 0x5, 0x59, 0x8, 0x5, 0x9, 0x9, 0x1594b149, 0xde7, 0x400, 0x6c4fc9, 0x101, 0x4aa9, 0x400, 0x2483, 0x32f, 0xcf, 0x2, 0x1, 0x10001, 0x8f99, 0x2, 0x1, 0x1, 0xf, 0x1ff, 0xb44, 0xfff, 0x4, 0x5fe, 0x10001, 0x2, 0x65f3255e, 0x3, 0x3ff, 0x8, 0x30cb, 0x1a35e0d1, 0x2, 0x4, 0xfffffff7, 0x1, 0x9, 0x4, 0x5, 0x5, 0x6, 0x0, 0x40, 0x9, 0x0, 0xfe, 0xdb, 0x6, 0x25, 0x6, 0x7, 0x5, 0x2, 0xb1, 0x4, 0x1, 0x5e00, 0xcf72, 0x8, 0x1, 0x6a77, 0x7fff, 0xbcc, 0x9, 0x5e5b, 0x0, 0x2, 0x3, 0xa, 0x10001, 0x5, 0x0, 0x4, 0x3, 0xffffff3e, 0x2, 0x9, 0x549a, 0x3, 0x1, 0x0, 0x7fff, 0xfffff88d, 0x7, 0x9, 0x0, 0x8, 0x7, 0x7fffffff, 0x7, 0x4, 0x8, 0x2, 0x2, 0xe, 0x4, 0x1, 0x3, 0x2, 0x80000000, 0x6, 0x68, 0x8, 0x1, 0x100, 0x80000000, 0x6, 0x1, 0x6, 0x5b4, 0x4a7, 0x4, 0x0, 0x9, 0x7fffffff, 0x9, 0x8a, 0x4, 0x9, 0x2, 0x2, 0xffff, 0x6, 0x355, 0x2, 0x0, 0x8, 0x9, 0x5, 0x71, 0x5, 0x9, 0x5, 0x7fff, 0x8, 0x7, 0xffff, 0x8, 0x5, 0xfffffffa, 0x814, 0x10001, 0x7, 0xf, 0x63e, 0x9, 0x2, 0x3, 0x9, 0x3, 0xfffff588, 0x9, 0x3, 0x6, 0x2, 0x15400, 0x9, 0x80, 0x7ff, 0x2, 0x10000, 0x7, 0x4, 0x1, 0x3ff, 0xcca1, 0x6, 0x2, 0x8000, 0x4, 0x8001, 0x85, 0xc, 0x8000, 0x9563, 0x800, 0x7fff, 0x1, 0x3, 0xe, 0x7, 0x8, 0x8591, 0x10000, 0x2, 0x6a3a, 0xfffff5ad, 0x8, 0x72, 0x80000001, 0x6, 0x5, 0x6, 0x1d6d, 0x10, 0x7, 0x8, 0x2, 0x3, 0x800, 0xfe46, 0x371, 0x1000, 0x9, 0x3, 0xffffffff, 0xffff7fff, 0x4, 0x200, 0x84d, 0x1, 0x1, 0x8, 0x20, 0x8, 0x2, 0x86a, 0x3, 0x8, 0x1, 0x4, 0xffff, 0x6, 0x257, 0x0, 0x0, 0xffff, 0x9, 0x4, 0x7fffffff, 0x6, 0x6, 0x5, 0x3, 0x4a7, 0x7ff, 0x8000000, 0xe0000000, 0x401, 0x10, 0x7, 0x8, 0xa, 0x4, 0x10001, 0x6, 0x5, 0x81, 0x1c81, 0x7fffffff, 0x0, 0x2, 0x3, 0x1ff, 0xffffff00, 0xfffffffe, 0x7, 0x400, 0x81, 0x5, 0x5, 0x3, 0x8, 0x3, 0x8, 0xffffffff, 0x8, 0x8, 0x5, 0x3, 0x401, 0x6, 0x10, 0xfffffffe, 0x7, 0xd2c, 0x5, 0x101, 0x6, 0x8, 0xc7, 0x7, 0x2f4, 0x5, 0xc14, 0x10000, 0xffffce30, 0x8, 0x9, 0x6, 0x5, 0x7, 0xfffffffe, 0x1, 0x101, 0x4, 0x7cf, 0x9, 0x9, 0x9, 0x10, 0xfff, 0xfffffff7, 0x0, 0x10000, 0x19d2, 0x6b46, 0xcd0, 0x0, 0x10, 0x8000, 0x0, 0x5, 0xb7, 0x8, 0xb, 0x10001, 0x1, 0xfffffff2, 0x10001, 0x7f, 0x101, 0x9, 0x200, 0xfffffff2, 0xffff, 0x7, 0x7, 0x6, 0x5, 0x9, 0xe0, 0x1, 0x3, 0x3, 0x2, 0x4, 0xffffff5a, 0x200, 0xffff, 0x7fffffff, 0x826, 0xffffffff, 0x6, 0x1, 0x4, 0xfffffff8, 0x35a, 0x800, 0x2, 0x7, 0x3, 0x0, 0x400000, 0x2, 0x3, 0x2, 0x9, 0x5, 0x3, 0x10000, 0xfffffffa, 0x2, 0x5, 0x5, 0x7, 0x4, 0xb0, 0x1, 0x2, 0x8, 0x4, 0xf, 0x80000001, 0x400, 0x7, 0xfe32, 0xfff, 0x3, 0x3, 0x10, 0x3, 0x9, 0x5d, 0x7, 0x8, 0x6, 0xf, 0x8, 0x6, 0x100, 0x400, 0x5, 0xfdb, 0x8, 0xe, 0x4, 0x1, 0x8, 0x0, 0x0, 0xb4, 0xe, 0x7, 0x800, 0x0, 0x10001, 0x7fff, 0x4, 0x5, 0xd, 0x10000, 0xb, 0x8, 0x3, 0x1, 0x14a, 0x8001, 0x1ff, 0x22, 0x6, 0x3, 0x7, 0x0, 0x0, 0x3, 0x0, 0x7, 0x9, 0x8, 0x8, 0x10000, 0x6, 0x418, 0x7f, 0xfffffe7c, 0x10001, 0x9, 0x6, 0x1, 0xdb, 0x5, 0x3b8, 0x80, 0x2, 0x2, 0x9, 0x0, 0x1ff, 0x6, 0x7, 0x7fff, 0x7, 0x5a6, 0x17d80, 0x2, 0xfffffff8, 0x7, 0x7, 0x0, 0x101, 0xd2c6, 0x49, 0x7f, 0x2, 0x9, 0x3, 0x1, 0x7fffffff, 0x1, 0x8, 0x2, 0x3989fca6, 0x8, 0x6, 0x1, 0xd, 0x5, 0x0, 0x7, 0x0, 0x2, 0x7f, 0x400, 0x8, 0x6, 0x7, 0x4, 0xfffffffa, 0x81, 0xa79, 0x6b8b, 0x2, 0xffffaa5d, 0x5, 0x1, 0x7, 0x5, 0x5, 0x81, 0xde, 0xfffff266, 0x8, 0x7, 0x9339, 0x10001, 0x6c46, 0x9, 0x8000, 0x6000000, 0x0, 0x841, 0xfffffff7, 0x7f, 0x8, 0x3, 0x80000000, 0x10000, 0x7, 0x5, 0x0, 0x3, 0x3, 0x4, 0xa5f, 0x8000, 0x716a, 0x7, 0x1, 0xfffffffa, 0x461012fe, 0x80000001, 0x4, 0x8, 0x0, 0x401, 0x3, 0x1, 0x5, 0x6, 0xc8, 0x3, 0x7ff, 0x7, 0x4, 0x100, 0x2, 0xa3, 0x728, 0x7, 0x4, 0x1, 0x8, 0x0, 0x2, 0x1, 0x0, 0x8, 0x7fffffff, 0xb, 0x9, 0xfffffffc, 0x6, 0x3, 0x942, 0x4, 0x9, 0x0, 0x2, 0x2, 0x0, 0x9, 0x43436eb8, 0x5, 0x2, 0xffffff80, 0x7, 0xffff, 0x2, 0x3, 0x2, 0x9, 0x10000, 0x2786, 0x7, 0x8, 0x3, 0x5cd5, 0x0, 0x0, 0x6, 0xe868, 0x0, 0x20a5, 0x8, 0x6, 0x3, 0xd, 0x3, 0x2, 0x5, 0x9, 0x1, 0x6, 0x474, 0x7, 0x8000, 0xa8a, 0x7, 0x9fbd, 0x400, 0x9, 0x8, 0x5, 0x200, 0x6, 0x3eeb4813, 0x8df0, 0x6, 0x0, 0x5, 0x4, 0x80000000, 0x4, 0x5, 0x7090, 0xaa, 0x80000001, 0xb723, 0x9, 0x5, 0x9, 0x7f, 0xfff, 0x4, 0xfffffffa, 0x44b, 0xff, 0x3, 0x5, 0xa6, 0x9, 0x2, 0x7, 0x401, 0x9, 0x0, 0x9, 0x3, 0x6, 0x0, 0x4, 0x2d, 0xb, 0x0, 0xa1f5, 0x3ff, 0x5, 0x2, 0x5, 0x5, 0xfffff7c9, 0x0, 0x2, 0x40, 0x100, 0x9, 0x0, 0x1, 0x9, 0x5e, 0xfff, 0x4, 0x80000001, 0x400, 0xfffffffd, 0x3, 0x4, 0xf, 0x2, 0x1, 0x2, 0x8001, 0x4, 0x3, 0x9, 0xe, 0x1, 0x2, 0x5, 0x3c6, 0x0, 0x9, 0x5, 0x2ef8, 0xfffffff5, 0x6, 0x6, 0x7ff, 0x401, 0x6, 0x7, 0x1, 0xfffffffa, 0xdaa, 0x6, 0x8001, 0x3, 0x401, 0x8, 0x8, 0x5, 0xf48, 0x9b63, 0x4, 0x1, 0x5c0e, 0x5, 0x6, 0x44d2, 0x0, 0x2, 0x76, 0x1c25, 0x6, 0x2, 0x10, 0x6, 0x5, 0x7f, 0xfff, 0x6, 0x3, 0x3, 0x6, 0x40, 0x7, 0x7, 0xffff, 0x5, 0x7, 0x2, 0x4, 0x4, 0x10000, 0xe0d, 0x3ff, 0x8, 0x7, 0x1b2, 0x6, 0x2, 0x6, 0x6, 0x5, 0xffffffff, 0x4, 0xfff, 0x200, 0x6, 0x8001, 0x3, 0x2, 0x3, 0x0, 0x4, 0x3, 0x1, 0x1, 0x2, 0x3c, 0x4, 0xfff, 0xddf, 0x7, 0x5, 0x76, 0x5, 0xdd9, 0x7, 0x4, 0x6, 0x6d5, 0x4d, 0x101, 0x3, 0x4, 0xd, 0x9, 0x4, 0x1, 0x7, 0xf4f, 0x4, 0x400, 0x4, 0x8001, 0x2, 0xff, 0x2, 0x3, 0x5, 0x10000, 0xd, 0x8000, 0x6, 0x80000000, 0x8, 0x3, 0x9, 0x7, 0xfffff000, 0x8, 0xb4bd, 0x2, 0x8, 0x8, 0x3, 0x400, 0x2, 0x20, 0xf9b, 0x2, 0x5, 0x6f75, 0x3ff, 0x5, 0x5, 0x2, 0xcd5, 0xffff8001, 0x31, 0x0, 0x7fffffff, 0x6, 0x6, 0xffff, 0x4, 0x80000000, 0x6, 0x2, 0x29, 0x80000000, 0x8, 0x7fff, 0x7f, 0x4, 0x9, 0x390, 0x2, 0x0, 0xf6b, 0x0, 0x2, 0x7fff, 0x4, 0x8, 0x9b32, 0xd, 0x1000, 0xa2e4, 0x63800, 0x0, 0x0, 0x10000, 0xe, 0x8, 0x4, 0x279e9ab9, 0xfff, 0xd0, 0x4, 0x24, 0x42, 0xfffffff7, 0x1, 0x3, 0x3, 0x6, 0x6, 0x7, 0x7, 0xb503, 0x3ff, 0x1, 0x2, 0x0, 0x6f7, 0xffff, 0x2, 0x8000, 0x6, 0x8, 0x5, 0x10, 0x25, 0x7fff, 0x9e, 0x7, 0x2, 0xfffeffff, 0x9, 0x9, 0x0, 0x101, 0xa, 0x3d95, 0x3, 0x8853, 0x0, 0x4, 0xf8b6, 0x400, 0x6, 0x40000000, 0x6, 0x8, 0x0, 0x8, 0x6, 0xfffffbff, 0x3, 0x9, 0x3, 0x3, 0xfff, 0x101, 0x6, 0x266, 0x6e86, 0xfffffffb, 0x80, 0x1060a301, 0x4, 0x80000000, 0x800, 0x4a1, 0xb, 0xfffff000, 0x1, 0x6, 0x5, 0x9, 0x81, 0xb, 0xffff, 0x2, 0x1, 0x4, 0x2, 0x7, 0x1cd, 0x0, 0xad, 0x5, 0x7, 0x3, 0x3a80, 0x5, 0xb8d, 0x10000, 0xf, 0x0, 0xffff, 0x8, 0x7ff, 0x0, 0x50, 0x0, 0x5, 0x9], 0x4, 0x400, 0x7}) (async) ioctl$VIDIOC_REQBUFS(r19, 0xc0145608, &(0x7f00000021c0)={0x3, 0xc, 0x1, 0x0, 0x6}) (async) r20 = getgid() (async) read$FUSE(r18, &(0x7f0000004580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r18, &(0x7f00000067c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r23 = getgid() (async) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000008980)={0x0, 0x0, 0x0}, &(0x7f00000089c0)=0xc) syz_fuse_handle_req(r19, &(0x7f0000002200)="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", 0x2000, &(0x7f0000008b00)={&(0x7f0000004200)={0x50, 0x0, 0x6, {0x7, 0x29, 0x9, 0x1004000, 0x101, 0x9, 0xc, 0x4}}, &(0x7f0000004280)={0x18, 0x0, 0x7e2981d1, {0x9}}, &(0x7f00000042c0)={0x18, 0x878a7864a30a040a, 0x2, {0x7}}, &(0x7f0000004300)={0x18, 0x24, 0x6, {0xe}}, &(0x7f0000004340)={0x18, 0x0, 0x3, {0x9}}, &(0x7f0000004380)={0x28, 0x0, 0x10, {{0xffff, 0x3ff, 0x1, r16}}}, &(0x7f00000043c0)={0x60, 0x0, 0x2, {{0x2, 0xffffffffffffffff, 0x401, 0x3, 0x6ec, 0x3000000, 0x8000, 0x2}}}, &(0x7f0000004440)={0x18, 0x0, 0x3, {0x4}}, &(0x7f0000004480)={0x1a, 0xfffffffffffffff5, 0xfffffffffffffffc, {'/dev/vmci\x00'}}, &(0x7f00000044c0)={0x20, 0x0, 0x1, {0x0, 0x5}}, &(0x7f0000004500)={0x78, 0x0, 0xffffffffff000000, {0x200, 0xc, 0x0, {0x6, 0x2, 0xffff, 0xa, 0x7a, 0x6, 0xf97, 0x1, 0x9, 0x6000, 0x7fff, r3, r20, 0x8, 0x7fba410d}}}, &(0x7f00000065c0)={0x90, 0x0, 0xfffffffffffff001, {0x2, 0x0, 0xfffffffffffffff7, 0xeb3, 0x8000, 0x759c45b9, {0x4, 0xad35, 0x0, 0x7, 0xfffffffffffffff7, 0x2800000000000000, 0xf, 0x8, 0xffffffff, 0x8000, 0x800, r3, r21, 0xe, 0x1}}}, &(0x7f0000006680)={0x130, 0x0, 0x92e5, [{0x1, 0x9, 0x8, 0x2, 'syztnl0\x00'}, {0x5, 0x400, 0xd, 0x29d4, '/proc/vmstat\x00'}, {0x6, 0x3b7, 0x1, 0x1, '\x00'}, {0x2, 0x3, 0x8, 0x0, 'syztnl0\x00'}, {0x3, 0x3, 0x9, 0x40, 'ghash-ce\x00'}, {0x6, 0x999, 0x4, 0x9, '/\\\xb0('}, {0x1, 0x6, 0x8, 0x5c4c, '.)\xcd.&#%:'}, {0x4, 0x69, 0x14, 0x8, '/dev/dri/renderD128\x00'}]}, &(0x7f0000008800)={0x150, 0x0, 0x7, [{{0x0, 0x3, 0x7fff, 0x2, 0x644, 0xfffffffd, {0x0, 0x0, 0x1a6, 0x5, 0x3, 0x1000, 0x5, 0x1000, 0x3, 0xa000, 0x4, r3, r22, 0xa, 0x7}}, {0x3, 0xffffffffffffff7f, 0x4, 0x5, '(@\']'}}, {{0x3, 0x3, 0x4, 0x100000001, 0xa8, 0x1, {0x1, 0xad, 0xfffffffffffffffb, 0x8, 0x4000000000000000, 0x81, 0x2, 0x80000000, 0x0, 0x0, 0x3, r3, r23, 0x10001, 0x1}}, {0x5, 0x1, 0x5, 0x7, '*/\x89:\xd9'}}]}, &(0x7f0000008a00)={0xa0, 0x0, 0x4, {{0x3, 0x3, 0x7, 0x5, 0xf1e, 0x7ff, {0x6, 0x0, 0xca1f, 0x1, 0x7, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0xc000, 0x7f, r3, r24, 0xaec, 0xffff}}}}, &(0x7f0000008ac0)={0x20, 0xffffffffffffffda, 0x1cd, {0x4, 0x0, 0x10, 0x78d8}}}) 1.841231223s ago: executing program 5 (id=1046): r0 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x2d141) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x31) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x3, 0x2, 0x0, 0x7fff7ffc}]}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x22, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xc83}, @ldst={0x0, 0x3, 0x1, 0xb, 0x9, 0x6, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xf}, @jmp={0x5, 0x0, 0x7, 0x1, 0x4, 0xfffffffffffffff8, 0xffffffffffffffff}, @tail_call, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @tail_call]}, &(0x7f0000000240)='GPL\x00', 0x7, 0xc2, &(0x7f0000000300)=""/194, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000440)=[{0x2, 0x2, 0x9, 0x5}, {0x2, 0x4, 0x3, 0x1}, {0x4, 0x3, 0x6, 0x9}], 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000004c0)=0xf) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) close_range(r2, r1, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000600)={0x1, 0x0, 0x0, 0xfdfdffff}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000740)={0x4, 0x0, &(0x7f0000000580)=[@exit_looper], 0xf1, 0x0, &(0x7f0000000640)="51116807eb237cd2374ab2f25a01b9815f978f7b4f3023300b6e15aed3a8226aca1de358e67bf7c8c54fabdf5b542d5d4c1a2aebe04372ac5d4ac8366f35fb31bb5aa30c3e34f57e20ac17c3c1e73765cffa45d95fe776da4b05ac74bb42f96adfabe345885a314d56f73410089671db5f726b9d0308506b510c67040832f707e4f4c7b37b91e3541751a1481fa830e66772c633fc1ae634f6b7aa7fb082e8df254bd35249ccd9103cb92ccddae4437f7d6156819caa10c6bbe6d94821d6eb2555ca24abb2ddee215d76f5926407959686cb297f3740a58d5da92e0854c9e508068df6ea6a64c7f30c2254d4f5095da681"}) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80) ioctl$NBD_DISCONNECT(r6, 0xab08) 1.772589072s ago: executing program 5 (id=1047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x40, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x21, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff5}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x68}}, 0xceb3912c1cb6a6b2) 1.602493993s ago: executing program 3 (id=1048): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'gre0\x00', @local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$9p_tcp(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x1000, &(0x7f0000000000)={'trans=tcp,', {}, 0x2c, {[{@privport}]}}) listen(r3, 0x10) r4 = fcntl$getown(r2, 0x9) syz_open_procfs$namespace(r4, &(0x7f0000000100)='ns/ipc\x00') (async) write(r3, &(0x7f0000000500)="85f7a0849656f4c679a18d54f14d328b730a8f4959feb5a4d1bdabfffe924288c03923b8aea3689d6d7e15f695ebb85a031fd85091c34f480af3cbdc099a6ce1dca5cb1b797965450a3c3095013ecd99aacdc298faaae6833bc9c547306ac302ebd7922e6d5566075d25663f7d2eb4854032772d457d8c818d29f883eb06c0b24791baa0120d9d35ff252df4f97a517cecf8403690bb987fa8cba1a863afd734be8d89078ff7afbee48c8c3a829633fd509a41f99364ac4076fa4ec6fe3fee058f21f817d2ad4e6c1556a040242cefb36584e9d4f73343ba476374e96f151e", 0xdf) syz_emit_ethernet(0x5e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000400000280600fe880000000000000000000000000001fe8000000000000000000000000000aa4e240000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0000000907800e312dc08c466b340e25aad14e42591b021572d7c8b05c93a072566230718000064b44dafe792751ea72c436c824b9c19b4129df07d4f39de985206a7868b74b68a10a3a8b74425fa60bdb881f10006000000bae5a9c9bae3e79713861d5098aae4bc1c3b9f2fcbfb281fa429f2561bc4ce1522ed186efc8c0d16cf01be2cacc661c991caadaea09e161ae2bfd5ff1cbc3400"/162], 0x0) (async) r5 = add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453", 0xc0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000300)={r6, r5, r5}, &(0x7f0000001480)=""/83, 0x53, &(0x7f0000000400)={&(0x7f00000002c0)={'sha256-ssse3\x00'}}) 1.345793ms ago: executing program 5 (id=1049): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0xb, 0x7000000, 0x40, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff5}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x68}}, 0xceb3912c1cb6a6b2) 581.466µs ago: executing program 5 (id=1050): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000000)=0x20, 0x4) (async) setsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000000)=0x20, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) syz_emit_ethernet(0x31f, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) (async) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x0) (async) listen(r4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x11, 0x800000003, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a01860b479037073d223b3c1b324debec40e57a050000007eb48821996aff1e7154e746be4d7606000000c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd352a000000988d13"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a01860b479037073d223b3c1b324debec40e57a050000007eb48821996aff1e7154e746be4d7606000000c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd352a000000988d13"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @empty}}, 0x0, 0x0, 0x2d, 0x0, "a1c1dd75a68473ba07d945c3b03e10951cd4b347113e55eb499419be4f7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f7"}, 0xd8) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000002c0)=[r9, r8], 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000600)={@val, @void, @eth={@broadcast, @random="cbdaeb0fed32", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x20, 0x2b, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"0048e5"}}}}}}}, 0x3d) 0s ago: executing program 3 (id=1051): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000080)={0x21}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) io_setup(0x1, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x6, 0x1, 0x0, r5, 0x0}]) kernel console output (not intermixed with test programs): dded mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.230291][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.232800][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.235549][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.238848][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.244082][ T7293] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.246766][ T7293] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.249053][ T7293] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.251298][ T7293] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.289225][ T6683] bridge_slave_1: left allmulticast mode [ 96.290907][ T6683] bridge_slave_1: left promiscuous mode [ 96.292568][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.296446][ T6683] bridge_slave_0: left allmulticast mode [ 96.298152][ T6683] bridge_slave_0: left promiscuous mode [ 96.299810][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.584556][ T6683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.588773][ T6683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.592785][ T6683] bond0 (unregistering): Released all slaves [ 96.837886][ T7507] fuse: Bad value for 'fd' [ 96.958308][ T6683] hsr_slave_0: left promiscuous mode [ 96.960523][ T6683] hsr_slave_1: left promiscuous mode [ 96.962591][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.965127][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.967535][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.969503][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.987206][ T6683] veth1_macvtap: left promiscuous mode [ 96.988867][ T6683] veth0_macvtap: left promiscuous mode [ 96.991658][ T6683] veth1_vlan: left promiscuous mode [ 96.993013][ T6683] veth0_vlan: left promiscuous mode [ 97.637408][ T6683] team0 (unregistering): Port device team_slave_1 removed [ 97.708148][ T6683] team0 (unregistering): Port device team_slave_0 removed [ 97.975192][ T5943] Bluetooth: hci3: command 0x0405 tx timeout [ 97.978748][ T5944] Bluetooth: hci4: command 0x0c1a tx timeout [ 97.978830][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.000964][ T7453] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.101040][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 98.101055][ T39] audit: type=1400 audit(1730941470.638:531): avc: denied { read } for pid=7527 comm="syz.3.416" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.113530][ T39] audit: type=1400 audit(1730941470.648:532): avc: denied { map } for pid=7527 comm="syz.3.416" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.122157][ T39] audit: type=1400 audit(1730941470.648:533): avc: denied { execute } for pid=7527 comm="syz.3.416" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.192408][ T39] audit: type=1400 audit(1730941470.728:534): avc: denied { ioctl } for pid=7527 comm="syz.3.416" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.434235][ T7538] FAULT_INJECTION: forcing a failure. [ 98.434235][ T7538] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.440530][ T7538] CPU: 1 UID: 0 PID: 7538 Comm: syz.2.418 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 98.443412][ T7538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.446252][ T7538] Call Trace: [ 98.447131][ T7538] [ 98.447980][ T7538] dump_stack_lvl+0x16c/0x1f0 [ 98.449284][ T7538] should_fail_ex+0x497/0x5b0 [ 98.450542][ T7538] _copy_to_user+0x32/0xd0 [ 98.451739][ T7538] simple_read_from_buffer+0xd0/0x160 [ 98.453158][ T7538] proc_fail_nth_read+0x198/0x270 [ 98.454517][ T7538] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.456714][ T7538] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.458767][ T7538] vfs_read+0x1df/0xbe0 [ 98.459591][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.459932][ T7538] ? __fget_files+0x23a/0x3f0 [ 98.462090][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.463333][ T7538] ? fdget_pos+0x24c/0x360 [ 98.466429][ T7538] ? __pfx_lock_release+0x10/0x10 [ 98.467746][ T7538] ? trace_lock_acquire+0x14a/0x1d0 [ 98.469246][ T7538] ? __pfx_vfs_read+0x10/0x10 [ 98.470503][ T7538] ? __pfx___mutex_lock+0x10/0x10 [ 98.471827][ T7538] ? __fget_files+0x244/0x3f0 [ 98.473118][ T7538] ksys_read+0x12f/0x260 [ 98.474221][ T7538] ? __pfx_ksys_read+0x10/0x10 [ 98.474570][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.475970][ T7538] do_syscall_64+0xcd/0x250 [ 98.476000][ T7538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.476027][ T7538] RIP: 0033:0x7facfad7d15c [ 98.476043][ T7538] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 98.479156][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.479308][ T7538] RSP: 002b:00007facfbb11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.491696][ T7538] RAX: ffffffffffffffda RBX: 00007facfaf35f80 RCX: 00007facfad7d15c [ 98.494049][ T7538] RDX: 000000000000000f RSI: 00007facfbb110a0 RDI: 0000000000000004 [ 98.496773][ T7538] RBP: 00007facfbb11090 R08: 0000000000000000 R09: 0000000000000000 [ 98.498919][ T7538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.501102][ T7538] R13: 0000000000000000 R14: 00007facfaf35f80 R15: 00007ffdd7c81d18 [ 98.503333][ T7538] [ 98.511051][ T39] audit: type=1400 audit(1730941471.048:535): avc: denied { sys_chroot } for pid=7545 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 98.518149][ T39] audit: type=1400 audit(1730941471.048:536): avc: denied { setgid } for pid=7545 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 98.520207][ T7549] process 'syz.4.420' launched './file0' with NULL argv: empty string added [ 98.523558][ T39] audit: type=1400 audit(1730941471.048:537): avc: denied { setrlimit } for pid=7544 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 98.532648][ T39] audit: type=1400 audit(1730941471.068:538): avc: denied { execute_no_trans } for pid=7548 comm="syz.4.420" path="/4/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.558034][ T7542] sctp: [Deprecated]: syz.3.419 (pid 7542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.558034][ T7542] Use struct sctp_sack_info instead [ 98.585725][ T7549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7549 comm=syz.4.420 [ 98.589125][ T7549] netlink: 'syz.4.420': attribute type 29 has an invalid length. [ 98.599456][ T7550] netlink: 'syz.4.420': attribute type 29 has an invalid length. [ 98.607132][ T7549] netlink: 'syz.4.420': attribute type 29 has an invalid length. [ 98.610027][ T7550] netlink: 'syz.4.420': attribute type 29 has an invalid length. [ 98.699573][ T39] audit: type=1400 audit(1730941471.238:539): avc: denied { getopt } for pid=7573 comm="syz.5.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 98.706548][ T39] audit: type=1400 audit(1730941471.248:540): avc: denied { write } for pid=7573 comm="syz.5.425" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 98.746269][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 98.749586][ T7585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.424'. [ 98.754513][ T7585] gtp0: entered promiscuous mode [ 98.757087][ T7585] gtp0: entered allmulticast mode [ 98.793326][ T7590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7590 comm=syz.5.426 [ 98.845093][ T25] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 99.006441][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.009513][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.012211][ T25] usb 7-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 99.014675][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.015702][ T7615] netfs: Couldn't get user pages (rc=-14) [ 99.022267][ T25] usb 7-1: config 0 descriptor?? [ 99.416071][ T7638] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.418004][ T7638] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 99.421654][ T7638] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.433667][ T25] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:28BD:0933.0004/input/input14 [ 99.506727][ T25] uclogic 0003:28BD:0933.0004: input,hidraw1: USB HID v5.50 Mouse [HID 28bd:0933] on usb-dummy_hcd.2-1/input0 [ 99.636755][ T7668] program syz.5.438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.638644][ T7561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.642255][ T7561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.712695][ T7675] netlink: 'syz.5.440': attribute type 21 has an invalid length. [ 99.767538][ T30] usb 7-1: USB disconnect, device number 7 [ 99.911540][ T7699] SELinux: Context system_u:object_r:apt_lock_t:s0 is not valid (left unmapped). [ 100.439517][ T7731] siw: device registration error -23 [ 100.494475][ T7745] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 100.499678][ T7745] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 100.570548][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.458'. [ 100.667780][ T7780] devtmpfs: Unknown parameter 'usrquota_inode_har`limit' [ 100.986215][ T5948] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 101.385081][ T9] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 101.495059][ T5948] Bluetooth: hci3: command 0x0405 tx timeout [ 101.495095][ T5943] Bluetooth: hci4: command 0x0c1a tx timeout [ 101.535053][ T9] usb 7-1: Invalid ep0 maxpacket: 16 [ 101.675082][ T9] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 101.683121][ T7907] binder: BINDER_SET_CONTEXT_MGR already set [ 101.684849][ T7907] binder: 7905:7907 ioctl 4018620d 20000100 returned -16 [ 101.825142][ T9] usb 7-1: Invalid ep0 maxpacket: 16 [ 101.827251][ T9] usb usb7-port1: attempt power cycle [ 102.176743][ T9] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 102.195565][ T9] usb 7-1: Invalid ep0 maxpacket: 16 [ 102.219114][ T7929] netlink: 28 bytes leftover after parsing attributes in process `syz.5.487'. [ 102.325277][ T9] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 102.358723][ T9] usb 7-1: Invalid ep0 maxpacket: 16 [ 102.360949][ T9] usb usb7-port1: unable to enumerate USB device [ 102.432822][ T5984] IPVS: starting estimator thread 0... [ 102.492326][ T7945] input: syz0 as /devices/virtual/input/input15 [ 102.531906][ T7938] IPVS: using max 34 ests per chain, 81600 per kthread [ 103.025456][ T5943] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.575174][ T5943] Bluetooth: hci3: command 0x0405 tx timeout [ 103.578420][ T5943] Bluetooth: hci4: command 0x0c1a tx timeout [ 103.792439][ T7956] IPVS: length: 24 != 55320 [ 103.796068][ T7956] vivid-007: ================= START STATUS ================= [ 103.798487][ T7956] vivid-007: Enable Output Cropping: true grabbed [ 103.800423][ T7956] vivid-007: Enable Output Composing: true grabbed [ 103.802155][ T7956] vivid-007: Enable Output Scaler: true grabbed [ 103.803798][ T7956] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 103.806357][ T7956] vivid-007: Transmit Mode: HDMI grabbed [ 103.807970][ T7956] vivid-007: Hotplug Present: 0x00000000 [ 103.809679][ T7956] vivid-007: RxSense Present: 0x00000000 [ 103.811178][ T7956] vivid-007: EDID Present: 0x00000000 [ 103.812612][ T7956] vivid-007: ================== END STATUS ================== [ 103.835955][ T39] kauditd_printk_skb: 58 callbacks suppressed [ 103.835967][ T39] audit: type=1400 audit(1730941476.378:599): avc: denied { name_bind } for pid=7960 comm="syz.4.495" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 103.858721][ T39] audit: type=1400 audit(1730941476.398:600): avc: denied { create } for pid=7965 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 103.873559][ T39] audit: type=1400 audit(1730941476.398:601): avc: denied { ioctl } for pid=7965 comm="syz.3.498" path="socket:[21656]" dev="sockfs" ino=21656 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 103.882156][ T39] audit: type=1400 audit(1730941476.398:602): avc: denied { accept } for pid=7965 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 103.905768][ T39] audit: type=1400 audit(1730941476.438:603): avc: denied { bind } for pid=7970 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 103.987443][ T39] audit: type=1400 audit(1730941476.528:604): avc: denied { ioctl } for pid=7964 comm="syz.5.497" path="socket:[19373]" dev="sockfs" ino=19373 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 103.988089][ T7977] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 103.996717][ T7976] netlink: 59 bytes leftover after parsing attributes in process `syz.4.499'. [ 103.998882][ T6683] Bluetooth: hci0: Frame reassembly failed (-84) [ 104.200244][ T39] audit: type=1400 audit(1730941476.738:605): avc: denied { associate } for pid=7998 comm="syz.2.510" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 104.213955][ T39] audit: type=1400 audit(1730941476.748:606): avc: denied { mounton } for pid=7998 comm="syz.2.510" path="/161/file0/file0" dev="9p" ino=36831999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.213959][ T7999] 9pnet_virtio: no channels available for device syz [ 104.264468][ T8013] /dev/sg0: Can't lookup blockdev [ 104.289779][ T8019] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.341156][ T8024] cgroup2: Unknown parameter 'rdma' [ 104.350381][ T8024] overlayfs: failed to get inode (-116) [ 104.352989][ T8024] overlayfs: failed to look up (file0) for ino (-116) [ 104.360144][ T8024] netlink: 44 bytes leftover after parsing attributes in process `syz.2.515'. [ 104.362478][ T8024] netlink: 60 bytes leftover after parsing attributes in process `syz.2.515'. [ 104.364772][ T8024] netlink: 44 bytes leftover after parsing attributes in process `syz.2.515'. [ 104.490361][ T8034] overlayfs: failed to resolve './file1': -2 [ 105.570310][ T39] audit: type=1400 audit(1730941478.108:607): avc: denied { create } for pid=8085 comm="syz.5.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 105.579537][ T39] audit: type=1400 audit(1730941478.118:608): avc: denied { ioctl } for pid=8087 comm="syz.4.534" path="socket:[21268]" dev="sockfs" ino=21268 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 105.665196][ T5948] Bluetooth: hci3: command 0x0405 tx timeout [ 105.825141][ T5984] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 105.955115][ T5984] usb 9-1: device descriptor read/64, error -71 [ 106.055366][ T5943] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 106.151164][ T8098] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.536'. [ 106.153962][ T8098] net_ratelimit: 10078 callbacks suppressed [ 106.153971][ T8098] openvswitch: netlink: Key type 29 is not supported [ 106.205161][ T5984] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 106.305909][ T8103] kvm: pic: non byte write [ 106.345067][ T5984] usb 9-1: device descriptor read/64, error -71 [ 106.426939][ T8107] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 106.431566][ T8107] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 106.455539][ T5984] usb usb9-port1: attempt power cycle [ 106.835023][ T5984] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 106.855515][ T5984] usb 9-1: device descriptor read/8, error -71 [ 107.095083][ T5984] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 107.131613][ T5984] usb 9-1: device descriptor read/8, error -71 [ 107.236902][ T5984] usb usb9-port1: unable to enumerate USB device [ 107.545120][ T5984] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 107.707026][ T5984] usb 8-1: config index 0 descriptor too short (expected 3840, got 619) [ 107.709307][ T5984] usb 8-1: config 208 has too many interfaces: 121, using maximum allowed: 32 [ 107.712024][ T5984] usb 8-1: config 208 has an invalid descriptor of length 0, skipping remainder of the config [ 107.715602][ T5984] usb 8-1: config 208 has 0 interfaces, different from the descriptor's value: 121 [ 107.718399][ T5984] usb 8-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca [ 107.720789][ T5984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.735165][ T5943] Bluetooth: hci3: command 0x0405 tx timeout [ 107.935691][ T5984] usb 8-1: string descriptor 0 read error: -71 [ 107.941530][ T5984] usb 8-1: USB disconnect, device number 6 [ 108.783511][ T5943] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 108.912630][ T8180] infiniband syz1: set active [ 108.918360][ T8180] bridge_slave_0: left allmulticast mode [ 108.920283][ T8180] bridge_slave_0: left promiscuous mode [ 108.921987][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.930591][ T8180] bridge_slave_1: left allmulticast mode [ 108.932090][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 108.932099][ T39] audit: type=1400 audit(1730941481.468:619): avc: denied { ioctl } for pid=8181 comm="syz.4.555" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.932226][ T8180] bridge_slave_1: left promiscuous mode [ 108.946974][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.953445][ T8180] bond0: (slave bond_slave_0): Releasing backup interface [ 108.961507][ T8180] bond0: (slave bond_slave_1): Releasing backup interface [ 108.982853][ T8180] team0: Port device team_slave_0 removed [ 108.990419][ T8180] team0: Port device team_slave_1 removed [ 108.992749][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.995823][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.999117][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.001789][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.013339][ T6276] lo speed is unknown, defaulting to 1000 [ 109.037718][ T8184] team0: Mode changed to "loadbalance" [ 109.042007][ T8180] vlan0: entered promiscuous mode [ 109.051081][ T8180] team0: Device vlan0 failed to register rx_handler [ 109.289337][ T8086] syz.5.533: vmalloc error: size 3907584, failed to allocated page array size 7632, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 109.295712][ T8086] CPU: 0 UID: 0 PID: 8086 Comm: syz.5.533 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 109.299606][ T8086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.303558][ T8086] Call Trace: [ 109.304905][ T8086] [ 109.306144][ T8086] dump_stack_lvl+0x16c/0x1f0 [ 109.307943][ T8086] warn_alloc+0x24d/0x3a0 [ 109.310077][ T8086] ? __pfx_warn_alloc+0x10/0x10 [ 109.311963][ T8086] ? __get_vm_area_node+0x190/0x2d0 [ 109.313942][ T8086] ? __get_vm_area_node+0x1bc/0x2d0 [ 109.315875][ T8086] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 109.318223][ T8086] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 109.320589][ T8086] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 109.323115][ T8086] ? __get_vm_area_node+0x190/0x2d0 [ 109.325289][ T8086] ? __get_vm_area_node+0x1bc/0x2d0 [ 109.326743][ T8086] __vmalloc_node_range_noprof+0xd85/0x15a0 [ 109.328499][ T8086] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 109.330750][ T8086] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 109.332886][ T8086] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 109.334955][ T8086] ? rcu_is_watching+0x12/0xc0 [ 109.336653][ T8086] ? rcu_is_watching+0x12/0xc0 [ 109.338328][ T8086] ? trace_kmalloc+0x2d/0xe0 [ 109.340797][ T8086] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 109.343657][ T8086] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 109.346113][ T8086] __kvmalloc_node_noprof+0x14f/0x1a0 [ 109.348214][ T8086] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 109.350918][ T8086] __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 109.353065][ T8086] vivid_update_format_cap+0x127b/0x2530 [ 109.355017][ T8086] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 109.357168][ T8086] ? v4l2_match_dv_timings+0x1df/0x1010 [ 109.359184][ T8086] vivid_vid_cap_s_dv_timings+0xc0f/0xfb0 [ 109.361266][ T8086] vidioc_s_dv_timings+0xa5/0xc0 [ 109.363049][ T8086] ? v4l_stub_s_dv_timings+0x1b/0x60 [ 109.365507][ T8086] __video_do_ioctl+0xaf0/0xf00 [ 109.367456][ T8086] ? __pfx___video_do_ioctl+0x10/0x10 [ 109.369458][ T8086] ? __might_fault+0xe3/0x190 [ 109.371160][ T8086] video_usercopy+0x4ce/0x1600 [ 109.372910][ T8086] ? __pfx___video_do_ioctl+0x10/0x10 [ 109.374830][ T8086] ? __pfx_video_usercopy+0x10/0x10 [ 109.376778][ T8086] v4l2_ioctl+0x1ba/0x250 [ 109.378451][ T8086] ? __pfx_v4l2_ioctl+0x10/0x10 [ 109.380419][ T8086] __x64_sys_ioctl+0x18f/0x220 [ 109.382393][ T8086] do_syscall_64+0xcd/0x250 [ 109.384595][ T8086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.386873][ T8086] RIP: 0033:0x7f0b9a97e719 [ 109.388663][ T8086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.395692][ T8086] RSP: 002b:00007f0b9b80d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.398539][ T8086] RAX: ffffffffffffffda RBX: 00007f0b9ab35f80 RCX: 00007f0b9a97e719 [ 109.401884][ T8086] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 000000000000000a [ 109.405020][ T8086] RBP: 00007f0b9a9f139e R08: 0000000000000000 R09: 0000000000000000 [ 109.408352][ T8086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.411332][ T8086] R13: 0000000000000000 R14: 00007f0b9ab35f80 R15: 00007ffc75ffef78 [ 109.414347][ T8086] [ 109.419546][ T8086] Mem-Info: [ 109.421051][ T8086] active_anon:9494 inactive_anon:0 isolated_anon:0 [ 109.421051][ T8086] active_file:13392 inactive_file:34873 isolated_file:0 [ 109.421051][ T8086] unevictable:1768 dirty:87 writeback:0 [ 109.421051][ T8086] slab_reclaimable:11600 slab_unreclaimable:70658 [ 109.421051][ T8086] mapped:20697 shmem:5344 pagetables:926 [ 109.421051][ T8086] sec_pagetables:302 bounce:0 [ 109.421051][ T8086] kernel_misc_reclaimable:0 [ 109.421051][ T8086] free:408516 free_pcp:14407 free_cma:0 [ 109.434776][ T8086] Node 0 active_anon:38168kB inactive_anon:0kB active_file:53572kB inactive_file:139504kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:82892kB dirty:348kB writeback:0kB shmem:18016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12688kB pagetables:3760kB sec_pagetables:1220kB all_unreclaimable? no [ 109.444703][ T8086] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? yes [ 109.455226][ T8086] Node 0 DMA free:15304kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 109.464076][ T8086] lowmem_reserve[]: 0 1214 0 0 0 [ 109.466763][ T8086] Node 0 DMA32 free:70316kB boost:0kB min:27636kB low:34544kB high:41452kB reserved_highatomic:0KB active_anon:38292kB inactive_anon:0kB active_file:53572kB inactive_file:139504kB unevictable:3536kB writepending:348kB present:2080628kB managed:1272192kB mlocked:0kB bounce:0kB free_pcp:16004kB local_pcp:712kB free_cma:0kB [ 109.475852][ T8086] lowmem_reserve[]: 0 0 0 0 0 [ 109.477372][ T8086] Node 1 Normal free:1548328kB boost:0kB min:39600kB low:49500kB high:59400kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:41540kB local_pcp:8584kB free_cma:0kB [ 109.485950][ T8086] lowmem_reserve[]: 0 0 0 0 0 [ 109.487366][ T8086] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 0*2048kB 3*4096kB (U) = 15304kB [ 109.491516][ T8086] Node 0 DMA32: 1*4kB (U) 9*8kB (UME) 10*16kB (UME) 21*32kB (UE) 14*64kB (UE) 3*128kB (U) 2*256kB (UE) 10*512kB (UME) 41*1024kB (UME) 6*2048kB (UM) 2*4096kB (M) = 70284kB [ 109.496355][ T8086] Node 1 Normal: 26*4kB (UM) 20*8kB (UE) 26*16kB (UME) 170*32kB (UME) 73*64kB (UME) 16*128kB (UE) 8*256kB (UE) 7*512kB (UME) 8*1024kB (UE) 7*2048kB (UM) 368*4096kB (UM) = 1548328kB [ 109.501671][ T8086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.504449][ T8086] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.507245][ T8086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.510162][ T8086] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.512991][ T8086] 53646 total pagecache pages [ 109.514455][ T8086] 0 pages in swap cache [ 109.515804][ T8086] Free swap = 123976kB [ 109.517065][ T8086] Total swap = 124996kB [ 109.518371][ T8086] 1048443 pages RAM [ 109.519496][ T8086] 0 pages HighMem/MovableOnly [ 109.521193][ T8086] 281074 pages reserved [ 109.522580][ T8086] 0 pages cma reserved [ 109.815090][ T5943] Bluetooth: hci3: command 0x0405 tx timeout [ 109.997823][ T6684] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.079343][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.082689][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.088490][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.092876][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.108818][ T5948] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.110914][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.145755][ T39] audit: type=1400 audit(1730941482.688:620): avc: denied { setopt } for pid=8235 comm="syz.5.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.150880][ T39] audit: type=1400 audit(1730941482.688:621): avc: denied { read } for pid=8235 comm="syz.5.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.158687][ T6684] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.181927][ T39] audit: type=1400 audit(1730941482.718:622): avc: denied { read append } for pid=8239 comm="syz.3.569" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.193611][ T39] audit: type=1400 audit(1730941482.718:623): avc: denied { open } for pid=8239 comm="syz.3.569" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.199323][ T8219] lo speed is unknown, defaulting to 1000 [ 110.361283][ T6684] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.457710][ T6684] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.466266][ T8275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8275 comm=syz.4.576 [ 110.475218][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.574'. [ 110.478655][ T8269] netlink: 'syz.3.574': attribute type 11 has an invalid length. [ 110.488179][ T8269] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.490645][ T8269] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.492893][ T8269] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.495548][ T8269] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.499131][ T8269] vxlan0: entered promiscuous mode [ 110.506500][ T8288] netlink: 'syz.4.577': attribute type 10 has an invalid length. [ 110.510087][ T8288] syz_tun: entered promiscuous mode [ 110.514712][ T8288] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 110.518747][ T8219] chnl_net:caif_netlink_parms(): no params data found [ 110.521987][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.575'. [ 110.623481][ T39] audit: type=1400 audit(1730941483.158:624): avc: denied { setopt } for pid=8306 comm="syz.4.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 110.638143][ T8219] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.640052][ T8219] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.642381][ T8219] bridge_slave_0: entered allmulticast mode [ 110.644424][ T8219] bridge_slave_0: entered promiscuous mode [ 110.666355][ T8219] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.669133][ T8219] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.671198][ T8219] bridge_slave_1: entered allmulticast mode [ 110.673248][ T8219] bridge_slave_1: entered promiscuous mode [ 110.683615][ T39] audit: type=1400 audit(1730941483.218:625): avc: denied { write } for pid=8308 comm="syz.5.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 110.715670][ T8219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.815205][ T39] audit: type=1400 audit(1730941483.348:626): avc: denied { getopt } for pid=8320 comm="syz.5.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.822058][ T39] audit: type=1400 audit(1730941483.358:627): avc: denied { compute_member } for pid=8320 comm="syz.5.584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 110.878463][ T8326] netlink: 4272 bytes leftover after parsing attributes in process `syz.5.585'. [ 110.886575][ T8326] netlink: 'syz.5.585': attribute type 3 has an invalid length. [ 110.888897][ T8326] netlink: 105 bytes leftover after parsing attributes in process `syz.5.585'. [ 110.990413][ T6684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.994534][ T6684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.998237][ T6684] bond0 (unregistering): Released all slaves [ 111.013735][ T8219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.062601][ T8219] team0: Port device team_slave_0 added [ 111.085262][ T8219] team0: Port device team_slave_1 added [ 111.139636][ T8219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.142144][ T8219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.152751][ T8219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.170798][ T8219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.173478][ T8219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.180708][ T8219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.181316][ T8334] netlink: 'syz.5.587': attribute type 3 has an invalid length. [ 111.186022][ T8334] netlink: 'syz.5.587': attribute type 11 has an invalid length. [ 111.188655][ T8334] netlink: 128512 bytes leftover after parsing attributes in process `syz.5.587'. [ 111.218037][ T39] audit: type=1400 audit(1730941483.758:628): avc: denied { read write } for pid=8333 comm="syz.5.587" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 111.247195][ T8219] hsr_slave_0: entered promiscuous mode [ 111.250442][ T8219] hsr_slave_1: entered promiscuous mode [ 111.256349][ T8219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.258326][ T8219] Cannot create hsr debugfs directory [ 111.364343][ T6684] hsr_slave_0: left promiscuous mode [ 111.367375][ T6684] hsr_slave_1: left promiscuous mode [ 111.370768][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.372805][ T6684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.375374][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.377425][ T6684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.396324][ T6684] veth1_macvtap: left promiscuous mode [ 111.398110][ T6684] veth0_macvtap: left promiscuous mode [ 111.400089][ T6684] veth1_vlan: left promiscuous mode [ 111.401577][ T6684] veth0_vlan: left promiscuous mode [ 111.580013][ T828] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 111.748205][ T828] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.751104][ T828] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.753791][ T828] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.755973][ T6276] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 111.757905][ T828] usb 10-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 111.762021][ T828] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.770895][ T828] usb 10-1: config 0 descriptor?? [ 111.895336][ T5943] Bluetooth: hci3: command 0x0405 tx timeout [ 111.928767][ T6276] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.932534][ T6276] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 111.935225][ T6276] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.937565][ T6276] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.940983][ T8384] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 111.955701][ T6276] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.139672][ T5943] Bluetooth: hci0: command tx timeout [ 112.195599][ T828] wacom 0003:056A:0043.0005: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 112.206084][ T828] wacom 0003:056A:0043.0005: hidraw1: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.5-1/input0 [ 112.219001][ T828] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:056A:0043.0005/input/input17 [ 112.262775][ T30] usb 8-1: USB disconnect, device number 7 [ 112.375722][ T6684] team0 (unregistering): Port device team_slave_1 removed [ 112.400981][ T8371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.403723][ T8371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.483985][ T6684] team0 (unregistering): Port device team_slave_0 removed [ 112.626950][ T30] usb 10-1: USB disconnect, device number 2 [ 113.194379][ T8376] infiniband syz1: set active [ 113.196179][ T8376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.224521][ T8383] infiniband syz1: set active [ 113.226155][ T8383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.247111][ T828] lo speed is unknown, defaulting to 1000 [ 113.251936][ T25] lo speed is unknown, defaulting to 1000 [ 113.343513][ T8219] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 113.356953][ T8219] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 113.367966][ T8219] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 113.371355][ T8219] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 113.387812][ T8405] [U]  [ 113.389681][ T8405] tmpfs: Unknown parameter 'usrquota' [ 113.403747][ T5943] Bluetooth: hci3: unexpected event for opcode 0x203d [ 113.414452][ T8219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.427787][ T8219] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.438109][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.440631][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.481586][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.483465][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.576801][ T8219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.581961][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 113.596024][ T8445] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 113.603971][ T6679] Bluetooth: hci1: Frame reassembly failed (-84) [ 113.606441][ T6679] Bluetooth: hci1: Frame reassembly failed (-84) [ 113.671045][ T8456] netdevsim netdevsim5: Direct firmware load for .Þ failed with error -2 [ 113.673708][ T8456] netdevsim netdevsim5: Falling back to sysfs fallback for: .Þ [ 113.713056][ T8219] veth0_vlan: entered promiscuous mode [ 113.719689][ T8219] veth1_vlan: entered promiscuous mode [ 113.738817][ T8219] veth0_macvtap: entered promiscuous mode [ 113.742109][ T8219] veth1_macvtap: entered promiscuous mode [ 113.750945][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.754097][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.757001][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.759831][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.763213][ T8219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.769761][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.772507][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.777500][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.780359][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.783711][ T8219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.788995][ T8219] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.791292][ T8219] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.793584][ T8219] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.796927][ T8219] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.825368][ T6684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.827538][ T6684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.841158][ T6679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.844539][ T6679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.889950][ T8483] netlink: 'syz.6.564': attribute type 1 has an invalid length. [ 114.020793][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 114.020805][ T39] audit: type=1400 audit(1730941486.558:637): avc: denied { write } for pid=8499 comm="syz.3.613" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.197776][ T39] audit: type=1400 audit(1730941486.738:638): avc: denied { getopt } for pid=8523 comm="syz.3.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.215993][ T5948] Bluetooth: hci0: command tx timeout [ 114.652103][ T39] audit: type=1400 audit(1730941487.188:639): avc: denied { create } for pid=8563 comm="syz.5.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 114.660929][ T39] audit: type=1400 audit(1730941487.198:640): avc: denied { ioctl } for pid=8563 comm="syz.5.623" path="socket:[22511]" dev="sockfs" ino=22511 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 114.867943][ T8578] vlan2: entered promiscuous mode [ 114.890671][ T8579] vlan2: entered promiscuous mode [ 115.052889][ T8583] kvm: kvm [8582]: vcpu0, guest rIP: 0x1b Unhandled WRMSR(0xc1) = 0xd [ 115.055690][ T8583] kvm: kvm [8582]: vcpu0, guest rIP: 0x1d Unhandled WRMSR(0xc1) = 0xd [ 115.410774][ T8599] random: crng reseeded on system resumption [ 115.605087][ T39] audit: type=1400 audit(1730941488.138:641): avc: denied { ioctl } for pid=8596 comm="syz.5.630" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 115.612515][ T8614] binder: Unknown parameter 'stÁÞXêY(Û¢ ú-ÿ' [ 115.617583][ T39] audit: type=1400 audit(1730941488.138:642): avc: denied { create } for pid=8596 comm="syz.5.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 115.623052][ T39] audit: type=1400 audit(1730941488.148:643): avc: denied { remount } for pid=8612 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 115.655083][ T5943] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 115.655563][ T5948] Bluetooth: hci1: command 0x1003 tx timeout [ 115.860064][ T39] audit: type=1400 audit(1730941488.398:644): avc: denied { watch } for pid=8626 comm="syz.4.634" path="/69" dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 115.875323][ T2287] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 115.939146][ T39] audit: type=1400 audit(1730941488.478:645): avc: denied { watch } for pid=8636 comm="syz.6.638" path="/8" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 115.949002][ T39] audit: type=1400 audit(1730941488.478:646): avc: denied { watch_sb } for pid=8636 comm="syz.6.638" path="/8" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 116.015227][ T2287] usb 8-1: device descriptor read/64, error -71 [ 116.086126][ T8641] kvm: kvm [8640]: vcpu0, guest rIP: 0x1b Unhandled WRMSR(0xc1) = 0xd [ 116.089808][ T8641] kvm: kvm [8640]: vcpu0, guest rIP: 0x1d Unhandled WRMSR(0xc1) = 0xd [ 116.265990][ T2287] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 116.295125][ T5943] Bluetooth: hci0: command tx timeout [ 116.395169][ T2287] usb 8-1: device descriptor read/64, error -71 [ 116.505393][ T2287] usb usb8-port1: attempt power cycle [ 116.855305][ T2287] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 116.875561][ T2287] usb 8-1: device descriptor read/8, error -71 [ 116.968635][ T64] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 117.125296][ T2287] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 117.126375][ T64] usb 11-1: Using ep0 maxpacket: 8 [ 117.130835][ T64] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 117.133175][ T64] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.137134][ T64] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.139758][ T64] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.142415][ T64] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.146248][ T64] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.148539][ T64] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.155900][ T2287] usb 8-1: device descriptor read/8, error -71 [ 117.275389][ T2287] usb usb8-port1: unable to enumerate USB device [ 117.353381][ T64] usb 11-1: usb_control_msg returned -32 [ 117.354899][ T64] usbtmc 11-1:16.0: can't read capabilities [ 117.399427][ T8694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.653'. [ 117.425167][ T5943] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 117.427627][ T5943] Bluetooth: hci3: Injecting HCI hardware error event [ 117.430130][ T5943] Bluetooth: hci3: hardware error 0x00 [ 117.736198][ T8710] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 117.739194][ T8710] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 117.745706][ T8710] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 117.758862][ T8710] tmpfs: Unknown parameter 'grp²)îHå²àDÞÿÞkquota_inode_hardlimit' [ 117.832965][ T8715] 9pnet_virtio: no channels available for device syz [ 117.939916][ T8718] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 118.065641][ T64] usb 11-1: USB disconnect, device number 2 [ 118.110627][ T8395] IPVS: starting estimator thread 0... [ 118.144926][ T8741] FAULT_INJECTION: forcing a failure. [ 118.144926][ T8741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.148769][ T8741] CPU: 0 UID: 0 PID: 8741 Comm: syz.6.667 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 118.151505][ T8741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.154279][ T8741] Call Trace: [ 118.155177][ T8741] [ 118.155957][ T8741] dump_stack_lvl+0x16c/0x1f0 [ 118.157193][ T8741] should_fail_ex+0x497/0x5b0 [ 118.158450][ T8741] _copy_from_user+0x2e/0xd0 [ 118.160098][ T8741] copy_msghdr_from_user+0x99/0x160 [ 118.162018][ T8741] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 118.163568][ T8741] ? __pfx___lock_acquire+0x10/0x10 [ 118.164998][ T8741] ___sys_sendmsg+0xff/0x1e0 [ 118.166245][ T8741] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.167812][ T8741] ? lock_acquire+0x2f/0xb0 [ 118.169046][ T8741] ? __fget_files+0x40/0x3f0 [ 118.170462][ T8741] ? fdget+0x176/0x210 [ 118.171660][ T8741] __sys_sendmsg+0x117/0x1f0 [ 118.172896][ T8741] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.174235][ T8741] ? __fget_files+0x244/0x3f0 [ 118.175490][ T8741] do_syscall_64+0xcd/0x250 [ 118.176933][ T8741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.178688][ T8741] RIP: 0033:0x7f233fb7e719 [ 118.179915][ T8741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.183848][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 118.185483][ T8741] RSP: 002b:00007f2340a1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.185499][ T8741] RAX: ffffffffffffffda RBX: 00007f233fd35f80 RCX: 00007f233fb7e719 [ 118.185506][ T8741] RDX: ceb3912c1cb6a6b2 RSI: 0000000020000640 RDI: 0000000000000003 [ 118.185513][ T8741] RBP: 00007f2340a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 118.185519][ T8741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.185525][ T8741] R13: 0000000000000000 R14: 00007f233fd35f80 R15: 00007ffef28f5568 [ 118.185538][ T8741] [ 118.203217][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.669'. [ 118.205458][ T8735] IPVS: using max 34 ests per chain, 81600 per kthread [ 118.341362][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.6.670'. [ 118.351094][ T8761] devtmpfs: Cannot enable quota on remount [ 118.375206][ T5948] Bluetooth: hci0: command tx timeout [ 118.699377][ T8783] FAULT_INJECTION: forcing a failure. [ 118.699377][ T8783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.704624][ T8783] CPU: 3 UID: 0 PID: 8783 Comm: syz.3.679 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 118.709055][ T8783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.713233][ T8783] Call Trace: [ 118.714472][ T8783] [ 118.715613][ T8783] dump_stack_lvl+0x16c/0x1f0 [ 118.717504][ T8783] should_fail_ex+0x497/0x5b0 [ 118.719333][ T8783] _copy_from_iter+0x2a1/0x1560 [ 118.721643][ T8783] ? __pfx__copy_from_iter+0x10/0x10 [ 118.723762][ T8783] ? __virt_addr_valid+0x1a4/0x590 [ 118.725721][ T8783] ? __virt_addr_valid+0x5e/0x590 [ 118.727320][ T8783] ? __phys_addr_symbol+0x30/0x80 [ 118.728904][ T8783] ? __check_object_size+0x488/0x710 [ 118.730369][ T8783] netlink_sendmsg+0x813/0xd70 [ 118.731662][ T8783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.733042][ T8783] ____sys_sendmsg+0xaaf/0xc90 [ 118.734505][ T8783] ? copy_msghdr_from_user+0x10b/0x160 [ 118.736634][ T8783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.738178][ T8783] ? __pfx___lock_acquire+0x10/0x10 [ 118.739698][ T8783] ___sys_sendmsg+0x135/0x1e0 [ 118.741136][ T8783] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.742564][ T8783] ? lock_acquire+0x2f/0xb0 [ 118.743918][ T8783] ? __fget_files+0x40/0x3f0 [ 118.745637][ T8783] ? fdget+0x176/0x210 [ 118.746933][ T8783] __sys_sendmsg+0x117/0x1f0 [ 118.748369][ T8783] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.750106][ T8783] ? __fget_files+0x244/0x3f0 [ 118.751615][ T8783] do_syscall_64+0xcd/0x250 [ 118.753034][ T8783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.754866][ T8783] RIP: 0033:0x7f8fa797e719 [ 118.756295][ T8783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.762628][ T8783] RSP: 002b:00007f8fa86ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.765732][ T8783] RAX: ffffffffffffffda RBX: 00007f8fa7b35f80 RCX: 00007f8fa797e719 [ 118.768906][ T8783] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 118.771416][ T8783] RBP: 00007f8fa86ee090 R08: 0000000000000000 R09: 0000000000000000 [ 118.773963][ T8783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.776228][ T8783] R13: 0000000000000000 R14: 00007f8fa7b35f80 R15: 00007fff94208238 [ 118.778530][ T8783] [ 118.994695][ T5948] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 119.001346][ T5948] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 119.067129][ T8806] binder: BINDER_SET_CONTEXT_MGR already set [ 119.072192][ T8806] binder: 8805:8806 ioctl 4018620d 20000040 returned -16 [ 119.103477][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 119.103488][ T39] audit: type=1400 audit(1730941491.638:660): avc: denied { ioctl } for pid=8797 comm="syz.3.683" path="socket:[26126]" dev="sockfs" ino=26126 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 119.111976][ T39] audit: type=1400 audit(1730941491.648:661): avc: denied { write } for pid=8797 comm="syz.3.683" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 119.119984][ T39] audit: type=1400 audit(1730941491.648:662): avc: denied { read } for pid=8797 comm="syz.3.683" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 119.216475][ T8813] netlink: 'syz.5.690': attribute type 11 has an invalid length. [ 119.245997][ T8815] FAULT_INJECTION: forcing a failure. [ 119.245997][ T8815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.249734][ T8815] CPU: 2 UID: 0 PID: 8815 Comm: syz.6.689 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 119.252467][ T8815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.255136][ T8815] Call Trace: [ 119.256005][ T8815] [ 119.256815][ T8815] dump_stack_lvl+0x16c/0x1f0 [ 119.258239][ T8815] should_fail_ex+0x497/0x5b0 [ 119.259434][ T8815] _copy_from_iter+0x2a1/0x1560 [ 119.260739][ T8815] ? __pfx__copy_from_iter+0x10/0x10 [ 119.262189][ T8815] ? __virt_addr_valid+0x1a4/0x590 [ 119.263591][ T8815] ? __virt_addr_valid+0x5e/0x590 [ 119.264934][ T8815] ? __phys_addr_symbol+0x30/0x80 [ 119.266263][ T8815] ? __check_object_size+0x488/0x710 [ 119.267624][ T8815] netlink_sendmsg+0x813/0xd70 [ 119.268899][ T8815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.270712][ T8815] ____sys_sendmsg+0xaaf/0xc90 [ 119.271974][ T8815] ? copy_msghdr_from_user+0x10b/0x160 [ 119.273439][ T8815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.274859][ T8815] ? __pfx___lock_acquire+0x10/0x10 [ 119.276213][ T8815] ___sys_sendmsg+0x135/0x1e0 [ 119.277471][ T8815] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.278815][ T8815] ? lock_acquire+0x2f/0xb0 [ 119.279999][ T8815] ? __fget_files+0x40/0x3f0 [ 119.281237][ T8815] ? fdget+0x176/0x210 [ 119.282317][ T8815] __sys_sendmsg+0x117/0x1f0 [ 119.283677][ T8815] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.285057][ T8815] ? __fget_files+0x244/0x3f0 [ 119.286325][ T8815] do_syscall_64+0xcd/0x250 [ 119.287714][ T8815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.289316][ T8815] RIP: 0033:0x7f233fb7e719 [ 119.290626][ T8815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.295779][ T8815] RSP: 002b:00007f2340a1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.298176][ T8815] RAX: ffffffffffffffda RBX: 00007f233fd35f80 RCX: 00007f233fb7e719 [ 119.300681][ T8815] RDX: ceb3912c1cb6a6b2 RSI: 0000000020000640 RDI: 0000000000000003 [ 119.303182][ T8815] RBP: 00007f2340a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 119.305257][ T8815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.307496][ T8815] R13: 0000000000000000 R14: 00007f233fd35f80 R15: 00007ffef28f5568 [ 119.309676][ T8815] [ 119.310538][ C2] vkms_vblank_simulate: vblank timer overrun [ 119.345849][ T8817] netlink: 28 bytes leftover after parsing attributes in process `syz.6.691'. [ 119.465075][ T64] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 119.488651][ T39] audit: type=1400 audit(1730941492.028:663): avc: denied { setopt } for pid=8757 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.505106][ T5943] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 119.517958][ T39] audit: type=1400 audit(1730941492.058:664): avc: denied { mounton } for pid=8822 comm="syz.6.692" path="/21/file0/file0" dev="ramfs" ino=24438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 119.523921][ T8823] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 119.528745][ T8823] overlayfs: failed to set xattr on upper [ 119.530974][ T8823] overlayfs: ...falling back to redirect_dir=nofollow. [ 119.533496][ T8823] overlayfs: ...falling back to index=off. [ 119.536603][ T8823] overlayfs: ...falling back to uuid=null. [ 119.547603][ T39] audit: type=1400 audit(1730941492.088:665): avc: denied { write } for pid=8757 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 119.615125][ T64] usb 10-1: device descriptor read/64, error -71 [ 119.662858][ T8826] binder: 8824:8826 ioctl c0306201 20000080 returned -14 [ 119.693473][ T8826] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 119.865111][ T64] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 119.995174][ T64] usb 10-1: device descriptor read/64, error -71 [ 120.107134][ T64] usb usb10-port1: attempt power cycle [ 120.445114][ T64] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 120.466681][ T64] usb 10-1: device descriptor read/8, error -71 [ 120.516548][ T8839] netlink: 16 bytes leftover after parsing attributes in process `syz.6.697'. [ 120.698507][ T8846] FAULT_INJECTION: forcing a failure. [ 120.698507][ T8846] name failslab, interval 1, probability 0, space 0, times 0 [ 120.698532][ T8846] CPU: 0 UID: 0 PID: 8846 Comm: syz.4.700 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 120.698545][ T8846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.698551][ T8846] Call Trace: [ 120.698555][ T8846] [ 120.698560][ T8846] dump_stack_lvl+0x16c/0x1f0 [ 120.698575][ T8846] should_fail_ex+0x497/0x5b0 [ 120.698590][ T8846] should_failslab+0xc2/0x120 [ 120.698603][ T8846] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 120.698616][ T8846] ? skb_clone+0x190/0x3f0 [ 120.698704][ T8846] skb_clone+0x190/0x3f0 [ 120.698732][ T8846] netlink_deliver_tap+0xab3/0xd90 [ 120.698759][ T8846] netlink_unicast+0x5e1/0x7f0 [ 120.698776][ T8846] ? __pfx_netlink_unicast+0x10/0x10 [ 120.698808][ T8846] netlink_sendmsg+0x8b8/0xd70 [ 120.698830][ T8846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.698857][ T8846] ____sys_sendmsg+0xaaf/0xc90 [ 120.698882][ T8846] ? copy_msghdr_from_user+0x10b/0x160 [ 120.698903][ T8846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.698934][ T8846] ? __pfx___lock_acquire+0x10/0x10 [ 120.698955][ T8846] ___sys_sendmsg+0x135/0x1e0 [ 120.698977][ T8846] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.699008][ T8846] ? lock_acquire+0x2f/0xb0 [ 120.699023][ T8846] ? __fget_files+0x40/0x3f0 [ 120.699058][ T8846] ? fdget+0x176/0x210 [ 120.699086][ T8846] __sys_sendmsg+0x117/0x1f0 [ 120.699107][ T8846] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.699127][ T8846] ? __fget_files+0x244/0x3f0 [ 120.699169][ T8846] do_syscall_64+0xcd/0x250 [ 120.699192][ T8846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.699226][ T8846] RIP: 0033:0x7f639997e719 [ 120.699241][ T8846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.699258][ T8846] RSP: 002b:00007f639a716038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.699276][ T8846] RAX: ffffffffffffffda RBX: 00007f6399b35f80 RCX: 00007f639997e719 [ 120.699284][ T8846] RDX: ceb3912c1cb6a6b2 RSI: 0000000020000640 RDI: 0000000000000003 [ 120.699291][ T8846] RBP: 00007f639a716090 R08: 0000000000000000 R09: 0000000000000000 [ 120.699298][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.699305][ T8846] R13: 0000000000000000 R14: 00007f6399b35f80 R15: 00007ffcaffbd6f8 [ 120.699318][ T8846] [ 120.715949][ T64] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 120.738322][ T64] usb 10-1: device descriptor read/8, error -71 [ 120.845243][ T64] usb usb10-port1: unable to enumerate USB device [ 121.017943][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 121.233299][ T39] audit: type=1400 audit(1730941493.768:666): avc: denied { read } for pid=8871 comm="syz.6.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.271204][ T39] audit: type=1400 audit(1730941493.808:667): avc: denied { bind } for pid=8874 comm="syz.6.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.071437][ T8886] binder: 8885:8886 ioctl c0306201 200001c0 returned -14 [ 122.176789][ T8896] dummy0: entered promiscuous mode [ 122.190276][ T8896] dummy0: left promiscuous mode [ 122.319502][ T8913] 9pnet: Could not find request transport: 0xffffffffffffffff [ 122.409393][ T39] audit: type=1400 audit(1730941494.948:668): avc: denied { create } for pid=8925 comm="syz.6.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 122.925315][ T2287] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 123.002196][ T8949] lo speed is unknown, defaulting to 1000 [ 123.087310][ T2287] usb 9-1: Using ep0 maxpacket: 8 [ 123.096671][ T2287] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 123.099161][ T2287] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.102050][ T2287] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.104695][ T2287] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.107576][ T2287] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.110935][ T2287] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.113273][ T2287] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.129240][ T39] audit: type=1326 audit(1730941495.668:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8967 comm="syz.3.735" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fa797e719 code=0x7ffc0000 [ 123.319151][ T2287] usb 9-1: GET_CAPABILITIES returned 0 [ 123.320724][ T2287] usbtmc 9-1:16.0: can't read capabilities [ 123.407607][ T8970] capability: warning: `syz.5.734' uses deprecated v2 capabilities in a way that may be insecure [ 123.424237][ T8973] openvswitch: netlink: Missing key (keys=40, expected=100) [ 123.437154][ T8973] openvswitch: netlink: Missing key (keys=40, expected=100) [ 123.478562][ T8978] netlink: 'syz.6.737': attribute type 12 has an invalid length. [ 123.498419][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x7 [ 123.501361][ T829] hid-generic 0000:0000:0000.0006: ignoring exceeding usage max [ 123.503876][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.506102][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.508030][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.510533][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.512851][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.515409][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.517983][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.520078][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.520944][ T5943] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 123.522007][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.525972][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.526588][ T64] usb 9-1: USB disconnect, device number 6 [ 123.528049][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.532758][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.535290][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.537840][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.539842][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.541839][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.543778][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.545931][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.547937][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.549821][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.551699][ T829] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 123.551761][ T8979] afs: Unknown parameter 'fowner' [ 123.557464][ T829] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 123.597350][ T8981] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 124.004181][ T8988] openvswitch: netlink: Unknown nsh attribute 0 [ 124.073788][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.742'. [ 124.166676][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 124.166689][ T39] audit: type=1400 audit(1730941496.708:693): avc: denied { create } for pid=9001 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 124.176918][ T39] audit: type=1400 audit(1730941496.708:694): avc: denied { write } for pid=9001 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 124.183732][ T39] audit: type=1400 audit(1730941496.708:695): avc: denied { nlmsg_read } for pid=9001 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 124.674676][ T39] audit: type=1400 audit(1730941497.208:696): avc: denied { accept } for pid=9019 comm="syz.6.748" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 124.680188][ T39] audit: type=1400 audit(1730941497.208:697): avc: denied { read } for pid=9019 comm="syz.6.748" laddr=127.0.0.1 lport=57530 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 124.802202][ T39] audit: type=1400 audit(1730941497.338:698): avc: denied { read } for pid=9026 comm="syz.6.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.904060][ T9032] FAULT_INJECTION: forcing a failure. [ 124.904060][ T9032] name failslab, interval 1, probability 0, space 0, times 0 [ 124.907680][ T9032] CPU: 3 UID: 0 PID: 9032 Comm: syz.5.751 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 124.910376][ T9032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.913168][ T9032] Call Trace: [ 124.914026][ T9032] [ 124.914795][ T9032] dump_stack_lvl+0x16c/0x1f0 [ 124.916034][ T9032] should_fail_ex+0x497/0x5b0 [ 124.917290][ T9032] ? fs_reclaim_acquire+0xae/0x150 [ 124.919075][ T9032] should_failslab+0xc2/0x120 [ 124.920284][ T9032] __kmalloc_cache_noprof+0x6b/0x300 [ 124.921912][ T9032] ? tcf_idr_create_from_flags+0x4f/0x70 [ 124.923564][ T9032] ? tcf_pedit_init+0x412/0x1ac0 [ 124.924955][ T9032] tcf_pedit_init+0x412/0x1ac0 [ 124.926182][ T9032] ? __pfx_tcf_pedit_init+0x10/0x10 [ 124.927477][ T9032] ? __asan_memcpy+0x3c/0x60 [ 124.928659][ T9032] tcf_action_init_1+0x45f/0x6c0 [ 124.929906][ T9032] ? __pfx_tcf_action_init_1+0x10/0x10 [ 124.931274][ T9032] ? __nla_parse+0x40/0x60 [ 124.932682][ T9032] tcf_action_init+0x42e/0x9c0 [ 124.934058][ T9032] ? __pfx_tcf_action_init+0x10/0x10 [ 124.935389][ T9032] ? lock_acquire.part.0+0x11b/0x380 [ 124.936734][ T9032] ? is_bpf_text_address+0x94/0x1a0 [ 124.938048][ T9032] ? hlock_class+0x4e/0x130 [ 124.939209][ T9032] ? __pfx___lock_acquire+0x10/0x10 [ 124.940511][ T9032] ? hlock_class+0x4e/0x130 [ 124.941614][ T9032] ? __lock_acquire+0xbdd/0x3ce0 [ 124.942833][ T9032] tcf_action_add+0xfd/0x5d0 [ 124.943970][ T9032] ? __pfx_tcf_action_add+0x10/0x10 [ 124.945352][ T9032] ? __pfx_lock_release+0x10/0x10 [ 124.946955][ T9032] ? __nla_parse+0x40/0x60 [ 124.948152][ T9032] tc_ctl_action+0x35d/0x470 [ 124.949346][ T9032] ? __pfx_tc_ctl_action+0x10/0x10 [ 124.950648][ T9032] ? __pfx_tc_ctl_action+0x10/0x10 [ 124.951938][ T9032] rtnetlink_rcv_msg+0x3c7/0xea0 [ 124.953399][ T9032] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 124.954871][ T9032] netlink_rcv_skb+0x16b/0x440 [ 124.956117][ T9032] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 124.957528][ T9032] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.958867][ T9032] ? netlink_deliver_tap+0x1ae/0xd90 [ 124.960212][ T9032] netlink_unicast+0x53c/0x7f0 [ 124.961439][ T9032] ? __pfx_netlink_unicast+0x10/0x10 [ 124.962785][ T9032] netlink_sendmsg+0x8b8/0xd70 [ 124.963984][ T9032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.965365][ T9032] ____sys_sendmsg+0xaaf/0xc90 [ 124.966576][ T9032] ? copy_msghdr_from_user+0x10b/0x160 [ 124.967970][ T9032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.969307][ T9032] ? __pfx___lock_acquire+0x10/0x10 [ 124.970646][ T9032] ___sys_sendmsg+0x135/0x1e0 [ 124.971863][ T9032] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.973191][ T9032] ? lock_acquire+0x2f/0xb0 [ 124.974340][ T9032] ? __fget_files+0x40/0x3f0 [ 124.975538][ T9032] ? fdget+0x176/0x210 [ 124.976589][ T9032] __sys_sendmsg+0x117/0x1f0 [ 124.977749][ T9032] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.979050][ T9032] ? __fget_files+0x244/0x3f0 [ 124.980251][ T9032] do_syscall_64+0xcd/0x250 [ 124.981411][ T9032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.982878][ T9032] RIP: 0033:0x7f0b9a97e719 [ 124.983979][ T9032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.988944][ T9032] RSP: 002b:00007f0b9b80d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.991131][ T9032] RAX: ffffffffffffffda RBX: 00007f0b9ab35f80 RCX: 00007f0b9a97e719 [ 124.993418][ T9032] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 124.995500][ T9032] RBP: 00007f0b9b80d090 R08: 0000000000000000 R09: 0000000000000000 [ 124.997561][ T9032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.999643][ T9032] R13: 0000000000000000 R14: 00007f0b9ab35f80 R15: 00007ffc75ffef78 [ 125.001738][ T9032] [ 125.039834][ T39] audit: type=1400 audit(1730941498.581:699): avc: denied { name_bind } for pid=9038 comm="syz.5.754" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 125.055098][ T39] audit: type=1400 audit(1730941498.581:700): avc: denied { name_connect } for pid=9038 comm="syz.5.754" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 125.070128][ T9045] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 125.150251][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.753'. [ 125.208638][ T9059] overlay: filesystem on ./file1 not supported as upperdir [ 125.219283][ T9059] netlink: 191416 bytes leftover after parsing attributes in process `syz.6.759'. [ 125.242595][ T39] audit: type=1400 audit(1730941498.771:701): avc: denied { create } for pid=9060 comm="syz.4.760" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 125.249746][ T9061] overlay: ./file0 is not a directory [ 125.292041][ T39] audit: type=1400 audit(1730941498.821:702): avc: denied { read } for pid=9062 comm="syz.6.761" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 125.362757][ T9065] FAULT_INJECTION: forcing a failure. [ 125.362757][ T9065] name failslab, interval 1, probability 0, space 0, times 0 [ 125.368348][ T9065] CPU: 2 UID: 0 PID: 9065 Comm: syz.4.762 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 125.371788][ T9065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.375002][ T9065] Call Trace: [ 125.376230][ T9065] [ 125.377631][ T9065] dump_stack_lvl+0x16c/0x1f0 [ 125.380004][ T9065] should_fail_ex+0x497/0x5b0 [ 125.381739][ T9065] ? fs_reclaim_acquire+0xae/0x150 [ 125.383717][ T9065] should_failslab+0xc2/0x120 [ 125.385024][ T9065] kmem_cache_alloc_node_noprof+0x71/0x310 [ 125.386998][ T9065] ? __alloc_skb+0x2b1/0x380 [ 125.388466][ T9065] __alloc_skb+0x2b1/0x380 [ 125.389892][ T9065] ? __pfx___alloc_skb+0x10/0x10 [ 125.391949][ T9065] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 125.393986][ T9065] netlink_ack+0x164/0xb90 [ 125.395810][ T9065] netlink_rcv_skb+0x348/0x440 [ 125.397587][ T9065] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 125.399947][ T9065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 125.402025][ T9065] ? netlink_deliver_tap+0x1ae/0xd90 [ 125.404001][ T9065] netlink_unicast+0x53c/0x7f0 [ 125.405884][ T9065] ? __pfx_netlink_unicast+0x10/0x10 [ 125.408125][ T9065] netlink_sendmsg+0x8b8/0xd70 [ 125.410322][ T9065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.412464][ T9065] ____sys_sendmsg+0xaaf/0xc90 [ 125.414580][ T9065] ? copy_msghdr_from_user+0x10b/0x160 [ 125.416716][ T9065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.418811][ T9065] ? __pfx___lock_acquire+0x10/0x10 [ 125.420751][ T9065] ___sys_sendmsg+0x135/0x1e0 [ 125.422222][ T9065] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.423646][ T9065] ? lock_acquire+0x2f/0xb0 [ 125.424902][ T9065] ? __fget_files+0x40/0x3f0 [ 125.426433][ T9065] ? fdget+0x176/0x210 [ 125.427619][ T9065] __sys_sendmsg+0x117/0x1f0 [ 125.429021][ T9065] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.430375][ T9065] ? __fget_files+0x244/0x3f0 [ 125.431633][ T9065] do_syscall_64+0xcd/0x250 [ 125.432853][ T9065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.434380][ T9065] RIP: 0033:0x7f639997e719 [ 125.435661][ T9065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.441763][ T9065] RSP: 002b:00007f639a716038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.443902][ T9065] RAX: ffffffffffffffda RBX: 00007f6399b35f80 RCX: 00007f639997e719 [ 125.445932][ T9065] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 125.449079][ T9065] RBP: 00007f639a716090 R08: 0000000000000000 R09: 0000000000000000 [ 125.451817][ T9065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.454880][ T9065] R13: 0000000000000000 R14: 00007f6399b35f80 R15: 00007ffcaffbd6f8 [ 125.457135][ T9065] [ 125.458118][ C2] vkms_vblank_simulate: vblank timer overrun [ 125.551147][ T9077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9077 comm=syz.6.766 [ 125.638221][ T9082] netlink: 'syz.6.768': attribute type 2 has an invalid length. [ 125.815453][ T9099] ip6t_rpfilter: unknown options [ 125.864081][ T9103] Bluetooth: MGMT ver 1.23 [ 125.913596][ T9108] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 125.917309][ T9108] VFS: Can't find a romfs filesystem on dev nullb0. [ 125.917309][ T9108] [ 125.936618][ T9113] netlink: 20 bytes leftover after parsing attributes in process `syz.5.781'. [ 125.947083][ T9113] vlan2: entered promiscuous mode [ 125.987524][ T9118] tmpfs: Bad value for 'mpol' [ 126.019924][ T9123] netlink: 132 bytes leftover after parsing attributes in process `syz.3.783'. [ 126.024581][ T9123] netlink: 'syz.3.783': attribute type 10 has an invalid length. [ 126.045599][ T9123] team0: Cannot enslave team device to itself [ 126.123081][ T9130] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 126.125081][ T9130] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 126.133513][ T9130] vhci_hcd vhci_hcd.0: Device attached [ 126.135881][ T9131] usbip_core: unknown command [ 126.137169][ T9131] vhci_hcd: unknown pdu 0 [ 126.140114][ T9131] usbip_core: unknown command [ 126.146724][ T1205] vhci_hcd: stop threads [ 126.149538][ T1205] vhci_hcd: release socket [ 126.152016][ T1205] vhci_hcd: disconnect device [ 126.219538][ T9140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9140 comm=syz.5.787 [ 126.226930][ T9140] netlink: 24 bytes leftover after parsing attributes in process `syz.5.787'. [ 126.251640][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.787'. [ 126.400198][ T9148] Cannot find del_set index 4 as target [ 126.442543][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.789'. [ 126.539904][ T9153] netlink: 'syz.3.792': attribute type 4 has an invalid length. [ 126.549760][ T9153] infiniband syz1: set down [ 126.552282][ T5321] lo speed is unknown, defaulting to 1000 [ 126.554677][ T5321] lo speed is unknown, defaulting to 1000 [ 127.062609][ T9186] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.800'. [ 127.188658][ T9198] tmpfs: Bad value for 'huge' [ 127.949193][ T9244] FAULT_INJECTION: forcing a failure. [ 127.949193][ T9244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.952887][ T9244] CPU: 2 UID: 0 PID: 9244 Comm: syz.6.810 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 127.956811][ T9244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.960798][ T9244] Call Trace: [ 127.962028][ T9244] [ 127.963113][ T9244] dump_stack_lvl+0x16c/0x1f0 [ 127.964846][ T9244] should_fail_ex+0x497/0x5b0 [ 127.966527][ T9244] _copy_to_user+0x32/0xd0 [ 127.968638][ T9244] simple_read_from_buffer+0xd0/0x160 [ 127.970978][ T9244] proc_fail_nth_read+0x198/0x270 [ 127.973067][ T9244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.975102][ T9244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.977154][ T9244] vfs_read+0x1df/0xbe0 [ 127.978564][ T9244] ? __fget_files+0x23a/0x3f0 [ 127.980157][ T9244] ? fdget_pos+0x24c/0x360 [ 127.981772][ T9244] ? __pfx_lock_release+0x10/0x10 [ 127.983583][ T9244] ? trace_lock_acquire+0x14a/0x1d0 [ 127.985480][ T9244] ? __pfx_vfs_read+0x10/0x10 [ 127.987252][ T9244] ? __pfx___mutex_lock+0x10/0x10 [ 127.989102][ T9244] ? __fget_files+0x244/0x3f0 [ 127.990834][ T9244] ksys_read+0x12f/0x260 [ 127.992285][ T9244] ? __pfx_ksys_read+0x10/0x10 [ 127.994166][ T9244] do_syscall_64+0xcd/0x250 [ 127.995837][ T9244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.997509][ T9244] RIP: 0033:0x7f233fb7d15c [ 127.998677][ T9244] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 128.005081][ T9244] RSP: 002b:00007f2340a1e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.007223][ T9244] RAX: ffffffffffffffda RBX: 00007f233fd35f80 RCX: 00007f233fb7d15c [ 128.009301][ T9244] RDX: 000000000000000f RSI: 00007f2340a1e0a0 RDI: 0000000000000004 [ 128.011338][ T9244] RBP: 00007f2340a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 128.013459][ T9244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.016179][ T9244] R13: 0000000000000000 R14: 00007f233fd35f80 R15: 00007ffef28f5568 [ 128.019035][ T9244] [ 128.020371][ C2] vkms_vblank_simulate: vblank timer overrun [ 128.075223][ T9250] random: crng reseeded on system resumption [ 128.156072][ T9258] FAULT_INJECTION: forcing a failure. [ 128.156072][ T9258] name failslab, interval 1, probability 0, space 0, times 0 [ 128.159337][ T9258] CPU: 3 UID: 0 PID: 9258 Comm: syz.3.815 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 128.162065][ T9258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.165161][ T9258] Call Trace: [ 128.166028][ T9258] [ 128.166789][ T9258] dump_stack_lvl+0x16c/0x1f0 [ 128.168234][ T9258] should_fail_ex+0x497/0x5b0 [ 128.169449][ T9258] ? fs_reclaim_acquire+0xae/0x150 [ 128.170769][ T9258] should_failslab+0xc2/0x120 [ 128.171996][ T9258] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 128.173349][ T9258] ? skb_clone+0x190/0x3f0 [ 128.174495][ T9258] skb_clone+0x190/0x3f0 [ 128.175573][ T9258] netlink_trim+0x1b3/0x250 [ 128.176766][ T9258] netlink_broadcast_filtered+0xc7/0xef0 [ 128.178190][ T9258] ? __pfx_tcf_action_dump_1+0x10/0x10 [ 128.179815][ T9258] ? __nla_put+0x27/0x40 [ 128.181058][ T9258] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 128.182655][ T9258] nlmsg_notify+0x9e/0x220 [ 128.183828][ T9258] tcf_action_add+0x364/0x5d0 [ 128.185121][ T9258] ? __pfx_tcf_action_add+0x10/0x10 [ 128.186500][ T9258] ? __pfx_lock_release+0x10/0x10 [ 128.187869][ T9258] ? __nla_parse+0x40/0x60 [ 128.189119][ T9258] tc_ctl_action+0x35d/0x470 [ 128.190673][ T9258] ? __pfx_tc_ctl_action+0x10/0x10 [ 128.192113][ T9258] ? __pfx_tc_ctl_action+0x10/0x10 [ 128.193483][ T9258] rtnetlink_rcv_msg+0x3c7/0xea0 [ 128.194786][ T9258] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 128.196240][ T9258] netlink_rcv_skb+0x16b/0x440 [ 128.197530][ T9258] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 128.198961][ T9258] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.200517][ T9258] ? netlink_deliver_tap+0x1ae/0xd90 [ 128.201937][ T9258] netlink_unicast+0x53c/0x7f0 [ 128.203208][ T9258] ? __pfx_netlink_unicast+0x10/0x10 [ 128.204987][ T9258] netlink_sendmsg+0x8b8/0xd70 [ 128.207419][ T9258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.208987][ T9258] ____sys_sendmsg+0xaaf/0xc90 [ 128.210438][ T9258] ? copy_msghdr_from_user+0x10b/0x160 [ 128.212034][ T9258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.213669][ T9258] ? __pfx___lock_acquire+0x10/0x10 [ 128.215053][ T9258] ___sys_sendmsg+0x135/0x1e0 [ 128.216312][ T9258] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.217913][ T9258] ? lock_acquire+0x2f/0xb0 [ 128.219295][ T9258] ? __fget_files+0x40/0x3f0 [ 128.220662][ T9258] ? fdget+0x176/0x210 [ 128.221781][ T9258] __sys_sendmsg+0x117/0x1f0 [ 128.223115][ T9258] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.224486][ T9258] ? __fget_files+0x244/0x3f0 [ 128.225737][ T9258] do_syscall_64+0xcd/0x250 [ 128.226946][ T9258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.228554][ T9258] RIP: 0033:0x7f8fa797e719 [ 128.229753][ T9258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.234771][ T9258] RSP: 002b:00007f8fa86ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.236954][ T9258] RAX: ffffffffffffffda RBX: 00007f8fa7b35f80 RCX: 00007f8fa797e719 [ 128.239134][ T9258] RDX: ceb3912c1cb6a6b2 RSI: 0000000020000640 RDI: 0000000000000003 [ 128.241791][ T9258] RBP: 00007f8fa86ee090 R08: 0000000000000000 R09: 0000000000000000 [ 128.244207][ T9258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.246688][ T9258] R13: 0000000000000000 R14: 00007f8fa7b35f80 R15: 00007fff94208238 [ 128.246708][ T9258] [ 128.277097][ T9259] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.318703][ T9276] No buffer was provided with the request [ 128.397125][ T9282] syz.5.823: attempt to access beyond end of device [ 128.397125][ T9282] nbd5: rw=0, sector=1, nr_sectors = 1 limit=0 [ 128.401086][ T9282] VFS: could not find a valid V7 on nbd5. [ 128.597354][ T9312] netlink: 'syz.6.834': attribute type 1 has an invalid length. [ 128.650933][ T9321] netlink: 'syz.5.835': attribute type 1 has an invalid length. [ 128.709058][ T9318] /dev/sr0: Can't open blockdev [ 128.817456][ T9322] /dev/sr0: Can't open blockdev [ 128.850165][ T9332] netlink: 'syz.5.837': attribute type 1 has an invalid length. [ 128.877357][ T9337] cgroup: fork rejected by pids controller in /syz6 [ 128.955645][ T56] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 129.062395][ T9404] vxcan1: entered allmulticast mode [ 129.072067][ T9402] netlink: 'syz.6.844': attribute type 39 has an invalid length. [ 129.074614][ T9402] vxcan1: left allmulticast mode [ 129.125188][ T56] usb 9-1: Using ep0 maxpacket: 8 [ 129.127895][ T56] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 129.130256][ T56] usb 9-1: config 179 has no interface number 0 [ 129.131906][ T56] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 129.134749][ T56] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 129.138357][ T56] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 129.141137][ T56] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 129.144020][ T56] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 129.147639][ T56] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 129.150101][ T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.153809][ T9329] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 129.218479][ T9414] overlayfs: refusing to follow metacopy origin for (/file0) [ 129.257832][ T9416] fuse: Unknown parameter 'g' [ 129.275162][ T6276] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 129.365115][ T64] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 129.379284][ T56] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input21 [ 129.428082][ T6276] usb 10-1: not running at top speed; connect to a high speed hub [ 129.432022][ T6276] usb 10-1: config 1 interface 0 has no altsetting 0 [ 129.438660][ T6276] usb 10-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.40 [ 129.441292][ T6276] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.443513][ T6276] usb 10-1: Product: syz [ 129.445028][ T6276] usb 10-1: Manufacturer: â° [ 129.446314][ T6276] usb 10-1: SerialNumber: syz [ 129.467112][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 129.467124][ T39] audit: type=1400 audit(1730941503.001:719): avc: denied { write } for pid=9426 comm="syz.3.854" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 129.475822][ T39] audit: type=1400 audit(1730941503.011:720): avc: denied { ioctl } for pid=9426 comm="syz.3.854" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 ioctlcmd=0x4b65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 129.526713][ T64] usb 11-1: config 1 interface 0 has no altsetting 0 [ 129.530394][ T64] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 129.533698][ T64] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.536581][ T64] usb 11-1: Product: syz [ 129.538167][ T64] usb 11-1: Manufacturer: syz [ 129.539821][ T64] usb 11-1: SerialNumber: syz [ 129.573766][ T8395] usb 9-1: USB disconnect, device number 7 [ 129.573841][ C3] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 129.578522][ C3] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 129.578655][ T8395] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 129.657735][ T6276] usbhid 10-1:1.0: can't add hid device: -71 [ 129.660026][ T6276] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 129.663603][ T6276] usb 10-1: USB disconnect, device number 7 [ 130.151373][ T9432] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.855'. [ 130.154323][ T9432] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 130.312878][ T39] audit: type=1400 audit(1730941503.841:721): avc: denied { ioctl } for pid=9439 comm="syz.3.858" path="socket:[30148]" dev="sockfs" ino=30148 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.454109][ T9453] random: crng reseeded on system resumption [ 130.710227][ T9455] netlink: 'syz.5.861': attribute type 4 has an invalid length. [ 130.957949][ T39] audit: type=1400 audit(1730941504.491:722): avc: denied { bind } for pid=9456 comm="syz.4.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 130.963063][ T39] audit: type=1400 audit(1730941504.491:723): avc: denied { setopt } for pid=9456 comm="syz.4.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 131.141144][ T39] audit: type=1400 audit(1730941504.671:724): avc: denied { ioctl } for pid=9478 comm="syz.3.871" path="socket:[28510]" dev="sockfs" ino=28510 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.195423][ T39] audit: type=1400 audit(1730941504.731:725): avc: denied { getopt } for pid=9484 comm="syz.3.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 131.765161][ T6276] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 131.895163][ T6276] usb 8-1: device descriptor read/64, error -71 [ 132.111019][ T64] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 132.117586][ T9453] Restarting kernel threads ... done. [ 132.120131][ T64] usb 11-1: USB disconnect, device number 3 [ 132.123434][ T64] usblp0: removed [ 132.135111][ T6276] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 132.265158][ T6276] usb 8-1: device descriptor read/64, error -71 [ 132.379002][ T6276] usb usb8-port1: attempt power cycle [ 132.456383][ T1409] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.458186][ T1409] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.535188][ T64] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 132.682297][ T39] audit: type=1400 audit(1730941506.211:726): avc: denied { write } for pid=9526 comm="syz.5.887" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 132.686992][ T64] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 132.692181][ T64] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 132.696622][ T64] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 132.700102][ T9527] pim6reg: entered allmulticast mode [ 132.700204][ T64] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 132.706501][ T64] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 132.706517][ T9527] pim6reg: left allmulticast mode [ 132.711032][ T64] usb 11-1: config 0 interface 0 has no altsetting 0 [ 132.715033][ T6276] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 132.717573][ T64] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 132.720014][ T64] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 132.722844][ T64] usb 11-1: Product: syz [ 132.724270][ T64] usb 11-1: Manufacturer: syz [ 132.726019][ T64] usb 11-1: SerialNumber: syz [ 132.728248][ T64] usb 11-1: config 0 descriptor?? [ 132.735585][ T6276] usb 8-1: device descriptor read/8, error -71 [ 132.739140][ T9515] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 132.742859][ T64] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 132.746770][ T64] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 132.762408][ T39] audit: type=1400 audit(1730941506.291:727): avc: denied { create } for pid=9526 comm="syz.5.887" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 132.808734][ T9530] afs: Unknown parameter 'f½Íck' [ 132.841178][ T9535] netlink: 'syz.5.890': attribute type 1 has an invalid length. [ 132.843486][ T9535] netlink: 'syz.5.890': attribute type 2 has an invalid length. [ 132.847686][ T9535] macvtap0: Device is already in use. [ 132.943889][ T9541] xt_hashlimit: size too large, truncated to 1048576 [ 132.985320][ T6276] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 133.010950][ T6276] usb 8-1: device descriptor read/8, error -71 [ 133.038641][ T39] audit: type=1400 audit(1730941506.571:728): avc: denied { map } for pid=9514 comm="syz.6.881" path="/dev/video4" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 133.069917][ T9552] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.893'. [ 133.073485][ T9552] openvswitch: netlink: Key type 29 is not supported [ 133.115263][ T6276] usb usb8-port1: unable to enumerate USB device [ 133.185928][ T9568] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 133.617643][ T9583] netlink: 16 bytes leftover after parsing attributes in process `syz.4.905'. [ 133.869915][ T9593] tipc: Failed to remove unknown binding: 66,1,1/0:1572023010/1572023012 [ 133.872469][ T9593] tipc: Failed to remove unknown binding: 66,1,1/0:1572023010/1572023012 [ 133.925234][ T56] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 134.075066][ T56] usb 9-1: Using ep0 maxpacket: 8 [ 134.078034][ T56] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.080695][ T56] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.083290][ T56] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.086388][ T56] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.090340][ T56] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.092098][ T9604] delete_channel: no stack [ 134.092784][ T56] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.305566][ T56] usb 9-1: GET_CAPABILITIES returned 0 [ 134.307105][ T56] usbtmc 9-1:16.0: can't read capabilities [ 134.370118][ T64] usb 9-1: USB disconnect, device number 8 [ 135.018917][ T9633] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 135.022812][ T9633] openvswitch: netlink: Actions may not be safe on all matching packets [ 135.124696][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 135.124708][ T39] audit: type=1400 audit(1730941508.651:731): avc: denied { read } for pid=9643 comm="syz.4.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.173294][ T9648] netlink: 16 bytes leftover after parsing attributes in process `syz.5.922'. [ 135.185404][ T9647] fuse: Unknown parameter 'rootmo' [ 135.207161][ T828] usb 11-1: USB disconnect, device number 4 [ 135.210530][ T828] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 135.340923][ T5943] Bluetooth: hci4: unknown advertising packet type: 0x31 [ 135.341021][ T5943] Bluetooth: hci4: Dropping invalid advertising data [ 135.349197][ T5943] Bluetooth: hci4: Malformed LE Event: 0x02 [ 135.369827][ T39] audit: type=1400 audit(1730941508.901:732): avc: denied { append } for pid=9673 comm="syz.3.930" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 135.460746][ T9685] geneve2: entered promiscuous mode [ 135.462193][ T9685] geneve2: entered allmulticast mode [ 135.507701][ T9688] FAULT_INJECTION: forcing a failure. [ 135.507701][ T9688] name failslab, interval 1, probability 0, space 0, times 0 [ 135.510893][ T9688] CPU: 3 UID: 0 PID: 9688 Comm: syz.3.934 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 135.513538][ T9688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.516288][ T9688] Call Trace: [ 135.517329][ T9688] [ 135.518218][ T9688] dump_stack_lvl+0x16c/0x1f0 [ 135.519491][ T9688] should_fail_ex+0x497/0x5b0 [ 135.520743][ T9688] ? fs_reclaim_acquire+0xae/0x150 [ 135.522048][ T9688] should_failslab+0xc2/0x120 [ 135.523286][ T9688] kmem_cache_alloc_node_noprof+0x71/0x310 [ 135.525032][ T9688] ? __alloc_skb+0x2b1/0x380 [ 135.526517][ T9688] __alloc_skb+0x2b1/0x380 [ 135.527744][ T9688] ? __pfx___alloc_skb+0x10/0x10 [ 135.529127][ T9688] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 135.530846][ T9688] netlink_alloc_large_skb+0x69/0x130 [ 135.532584][ T9688] netlink_sendmsg+0x689/0xd70 [ 135.534116][ T9688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.535802][ T9688] ____sys_sendmsg+0xaaf/0xc90 [ 135.537304][ T9688] ? copy_msghdr_from_user+0x10b/0x160 [ 135.538828][ T9688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.540217][ T9688] ? __pfx___lock_acquire+0x10/0x10 [ 135.541578][ T9688] ___sys_sendmsg+0x135/0x1e0 [ 135.542737][ T9688] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.544380][ T9688] ? lock_acquire+0x2f/0xb0 [ 135.545620][ T9688] ? __fget_files+0x40/0x3f0 [ 135.547240][ T9688] ? fdget+0x176/0x210 [ 135.548519][ T9688] __sys_sendmsg+0x117/0x1f0 [ 135.549750][ T9688] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.551127][ T9688] ? __fget_files+0x244/0x3f0 [ 135.552403][ T9688] do_syscall_64+0xcd/0x250 [ 135.553618][ T9688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.555175][ T9688] RIP: 0033:0x7f8fa797e719 [ 135.556369][ T9688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.561222][ T9688] RSP: 002b:00007f8fa86ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.563293][ T9688] RAX: ffffffffffffffda RBX: 00007f8fa7b35f80 RCX: 00007f8fa797e719 [ 135.565358][ T9688] RDX: ceb3912c1cb6a6b2 RSI: 0000000020000640 RDI: 0000000000000003 [ 135.567430][ T9688] RBP: 00007f8fa86ee090 R08: 0000000000000000 R09: 0000000000000000 [ 135.569434][ T9688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.571385][ T9688] R13: 0000000000000000 R14: 00007f8fa7b35f80 R15: 00007fff94208238 [ 135.573414][ T9688] [ 135.700988][ T9695] netlink: 'syz.6.936': attribute type 10 has an invalid length. [ 135.705124][ T9695] macvlan0: entered promiscuous mode [ 135.707133][ T9695] macvlan0: entered allmulticast mode [ 135.711043][ T9695] veth1_vlan: entered allmulticast mode [ 135.713773][ T9695] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 135.838434][ T9715] fuse: Bad value for 'user_id' [ 135.839818][ T9715] fuse: Bad value for 'user_id' [ 135.846991][ T9715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.943'. [ 135.951424][ T9720] netlink: 84 bytes leftover after parsing attributes in process `syz.6.945'. [ 136.071236][ T9723] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 136.081628][ T39] audit: type=1400 audit(1730941509.611:733): avc: denied { setattr } for pid=9722 comm="syz.5.946" name="file0" dev="overlay" ino=36831999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.089726][ T39] audit: type=1400 audit(1730941509.621:734): avc: denied { write open } for pid=9722 comm="syz.5.946" path=2F202864656C6574656429 dev="tmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.096627][ T39] audit: type=1400 audit(1730941509.621:735): avc: denied { read } for pid=9722 comm="syz.5.946" name="file0" dev="9p" ino=36831999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.103434][ T39] audit: type=1400 audit(1730941509.621:736): avc: denied { open } for pid=9722 comm="syz.5.946" path="/file0" dev="9p" ino=36831999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.251365][ T9726] netlink: 'syz.4.947': attribute type 9 has an invalid length. [ 136.255512][ T9726] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.947'. [ 136.371093][ T9730] tmpfs: Unknown parameter 'usrquota4' [ 136.411331][ T9733] No control pipe specified [ 136.473015][ T39] audit: type=1326 audit(1730941510.001:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.4.952" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f639997e719 code=0x0 [ 136.574033][ T5943] Bluetooth: hci4: unexpected event for opcode 0x100c [ 136.591758][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.953'. [ 136.696012][ T9745] 9pnet_virtio: no channels available for device syz [ 136.772478][ T9748] netlink: 36 bytes leftover after parsing attributes in process `syz.6.956'. [ 136.869989][ T9751] netlink: 'syz.6.958': attribute type 9 has an invalid length. [ 136.915885][ T9763] FAULT_INJECTION: forcing a failure. [ 136.915885][ T9763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.919640][ T9763] CPU: 2 UID: 0 PID: 9763 Comm: syz.3.961 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 136.922856][ T9763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.926062][ T9763] Call Trace: [ 136.926947][ T9763] [ 136.927742][ T9763] dump_stack_lvl+0x16c/0x1f0 [ 136.929033][ T9763] should_fail_ex+0x497/0x5b0 [ 136.930427][ T9763] _copy_from_iter+0x2a1/0x1560 [ 136.931733][ T9763] ? __pfx__copy_from_iter+0x10/0x10 [ 136.933225][ T9763] ? __virt_addr_valid+0x1a4/0x590 [ 136.934580][ T9763] ? __virt_addr_valid+0x5e/0x590 [ 136.936055][ T9763] ? __phys_addr_symbol+0x30/0x80 [ 136.937385][ T9763] ? __check_object_size+0x488/0x710 [ 136.939042][ T9763] netlink_sendmsg+0x813/0xd70 [ 136.940455][ T9763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.942038][ T9763] ____sys_sendmsg+0xaaf/0xc90 [ 136.943683][ T9763] ? copy_msghdr_from_user+0x10b/0x160 [ 136.945238][ T9763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.946608][ T9763] ? __pfx___lock_acquire+0x10/0x10 [ 136.947928][ T9763] ___sys_sendmsg+0x135/0x1e0 [ 136.949199][ T9763] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.950575][ T9763] ? lock_acquire+0x2f/0xb0 [ 136.951778][ T9763] ? __fget_files+0x40/0x3f0 [ 136.952993][ T9763] ? fdget+0x176/0x210 [ 136.954031][ T9763] __sys_sendmsg+0x117/0x1f0 [ 136.955236][ T9763] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.956480][ T9763] ? __fget_files+0x244/0x3f0 [ 136.957786][ T9763] do_syscall_64+0xcd/0x250 [ 136.958998][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.960464][ T9763] RIP: 0033:0x7f8fa797e719 [ 136.961617][ T9763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.967044][ T9763] RSP: 002b:00007f8fa86ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.969604][ T9763] RAX: ffffffffffffffda RBX: 00007f8fa7b35f80 RCX: 00007f8fa797e719 [ 136.971684][ T9763] RDX: ceb3912c1cb6a6b2 RSI: 0000000020000640 RDI: 0000000000000003 [ 136.973720][ T9763] RBP: 00007f8fa86ee090 R08: 0000000000000000 R09: 0000000000000000 [ 136.975712][ T9763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.977823][ T9763] R13: 0000000000000000 R14: 00007f8fa7b35f80 R15: 00007fff94208238 [ 136.979840][ T9763] [ 136.980742][ C2] vkms_vblank_simulate: vblank timer overrun [ 136.990962][ T39] audit: type=1400 audit(1730941510.521:738): avc: denied { map } for pid=9764 comm="syz.6.962" path="/dev/nvme-fabrics" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.016571][ T9770] fuse: Bad value for 'group_id' [ 137.018194][ T9770] fuse: Bad value for 'group_id' [ 137.023650][ T39] audit: type=1400 audit(1730941510.551:739): avc: denied { ioctl } for pid=9769 comm="syz.3.963" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 137.260593][ T39] audit: type=1400 audit(1730941510.791:740): avc: denied { accept } for pid=9781 comm="syz.5.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.416083][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.970'. [ 137.421152][ T9790] netlink: 16 bytes leftover after parsing attributes in process `syz.6.970'. [ 137.424879][ T9790] gtp0: entered promiscuous mode [ 137.426792][ T9790] gtp0: entered allmulticast mode [ 137.437928][ T9790] syzkaller1: entered promiscuous mode [ 137.439415][ T9790] syzkaller1: entered allmulticast mode [ 137.441810][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.970'. [ 137.605033][ T9805] syz.6.973: attempt to access beyond end of device [ 137.605033][ T9805] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 137.610125][ T9805] XFS (nbd6): SB validate failed with error -5. [ 137.698772][ T9819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.976'. [ 137.702603][ T9819] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 137.705075][ T9819] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 137.709008][ T9819] vhci_hcd vhci_hcd.0: Device attached [ 137.711264][ T9820] vhci_hcd: connection closed [ 137.714756][ T6679] vhci_hcd: stop threads [ 137.717633][ T6679] vhci_hcd: release socket [ 137.718867][ T6679] vhci_hcd: disconnect device [ 138.072999][ T9830] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 138.168854][ T9842] xt_hashlimit: size too large, truncated to 1048576 [ 138.519282][ T9895] IPv4: Oversized IP packet from 127.202.26.0 [ 138.621797][ T5943] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 138.815386][ T9928] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 138.818087][ T9910] bond0: (slave syz_tun): Releasing backup interface [ 138.922481][ T9941] syz.6.1013: attempt to access beyond end of device [ 138.922481][ T9941] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 138.991915][ T1132] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.018964][ T9944] FAULT_INJECTION: forcing a failure. [ 139.018964][ T9944] name failslab, interval 1, probability 0, space 0, times 0 [ 139.022562][ T9944] CPU: 1 UID: 0 PID: 9944 Comm: syz.5.1014 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 139.025791][ T9944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.028870][ T9944] Call Trace: [ 139.029822][ T9944] [ 139.030634][ T9944] dump_stack_lvl+0x16c/0x1f0 [ 139.031984][ T9944] should_fail_ex+0x497/0x5b0 [ 139.033607][ T9944] ? fs_reclaim_acquire+0xae/0x150 [ 139.035183][ T9944] should_failslab+0xc2/0x120 [ 139.036575][ T9944] __kmalloc_cache_noprof+0x6b/0x300 [ 139.038100][ T9944] ? __nla_parse+0x40/0x60 [ 139.039283][ T9944] ? tcf_action_init_1+0x27a/0x6c0 [ 139.040634][ T9944] tcf_action_init_1+0x27a/0x6c0 [ 139.041953][ T9944] ? tc_lookup_action_n+0xc9/0xf0 [ 139.043289][ T9944] ? __pfx_tcf_action_init_1+0x10/0x10 [ 139.044716][ T9944] ? __pfx_tc_action_load_ops+0x10/0x10 [ 139.046165][ T9944] ? __nla_parse+0x40/0x60 [ 139.047375][ T9944] tcf_action_init+0x42e/0x9c0 [ 139.047748][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.048694][ T9944] ? __pfx_tcf_action_init+0x10/0x10 [ 139.052135][ T9944] ? __pfx_mark_lock+0x10/0x10 [ 139.053498][ T9944] ? lock_acquire.part.0+0x11b/0x380 [ 139.053991][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.054968][ T9944] ? __pfx___lock_acquire+0x10/0x10 [ 139.054986][ T9944] ? __pfx_lock_release+0x10/0x10 [ 139.054995][ T9944] ? trace_lock_acquire+0x14a/0x1d0 [ 139.055010][ T9944] tcf_action_add+0xfd/0x5d0 [ 139.055025][ T9944] ? __pfx_tcf_action_add+0x10/0x10 [ 139.055036][ T9944] ? __pfx_lock_release+0x10/0x10 [ 139.055062][ T9944] ? __nla_parse+0x40/0x60 [ 139.055078][ T9944] tc_ctl_action+0x35d/0x470 [ 139.055091][ T9944] ? __pfx_tc_ctl_action+0x10/0x10 [ 139.055107][ T9944] ? __pfx_tc_ctl_action+0x10/0x10 [ 139.055119][ T9944] rtnetlink_rcv_msg+0x3c7/0xea0 [ 139.055133][ T9944] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.055149][ T9944] netlink_rcv_skb+0x16b/0x440 [ 139.055159][ T9944] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.055170][ T9944] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.055187][ T9944] ? netlink_deliver_tap+0x1ae/0xd90 [ 139.055205][ T9944] netlink_unicast+0x53c/0x7f0 [ 139.055215][ T9944] ? __pfx_netlink_unicast+0x10/0x10 [ 139.055234][ T9944] netlink_sendmsg+0x8b8/0xd70 [ 139.055245][ T9944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.055259][ T9944] ____sys_sendmsg+0xaaf/0xc90 [ 139.055274][ T9944] ? copy_msghdr_from_user+0x10b/0x160 [ 139.055286][ T9944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.055303][ T9944] ? __pfx___lock_acquire+0x10/0x10 [ 139.055317][ T9944] ___sys_sendmsg+0x135/0x1e0 [ 139.055329][ T9944] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.055346][ T9944] ? lock_acquire+0x2f/0xb0 [ 139.055355][ T9944] ? __fget_files+0x40/0x3f0 [ 139.055375][ T9944] ? fdget+0x176/0x210 [ 139.055390][ T9944] __sys_sendmsg+0x117/0x1f0 [ 139.055401][ T9944] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.055412][ T9944] ? __fget_files+0x244/0x3f0 [ 139.055434][ T9944] do_syscall_64+0xcd/0x250 [ 139.055446][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.055461][ T9944] RIP: 0033:0x7f0b9a97e719 [ 139.055472][ T9944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.055481][ T9944] RSP: 002b:00007f0b9b80d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.055493][ T9944] RAX: ffffffffffffffda RBX: 00007f0b9ab35f80 RCX: 00007f0b9a97e719 [ 139.055501][ T9944] RDX: ceb3912c1cb6a6b2 RSI: 0000000020000640 RDI: 0000000000000003 [ 139.055507][ T9944] RBP: 00007f0b9b80d090 R08: 0000000000000000 R09: 0000000000000000 [ 139.055514][ T9944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.055520][ T9944] R13: 0000000000000000 R14: 00007f0b9ab35f80 R15: 00007ffc75ffef78 [ 139.055533][ T9944] [ 139.060733][ T9949] lo speed is unknown, defaulting to 1000 [ 139.065085][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.150466][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.153249][ T5948] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 139.157471][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.173686][ T9950] lo speed is unknown, defaulting to 1000 [ 139.200326][ T9955] syz.6.1017: attempt to access beyond end of device [ 139.200326][ T9955] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 139.204491][ T1132] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.205234][ T9955] XFS (nbd6): SB validate failed with error -5. [ 139.309124][ T1132] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.320902][ T9979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9979 comm=syz.6.1024 [ 139.338848][ T9950] chnl_net:caif_netlink_parms(): no params data found [ 139.348870][ T9984] FAULT_INJECTION: forcing a failure. [ 139.348870][ T9984] name failslab, interval 1, probability 0, space 0, times 0 [ 139.352205][ T9984] CPU: 3 UID: 0 PID: 9984 Comm: syz.6.1026 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 139.355001][ T9984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.357804][ T9984] Call Trace: [ 139.358676][ T9984] [ 139.359400][ T9984] dump_stack_lvl+0x16c/0x1f0 [ 139.360604][ T9984] should_fail_ex+0x497/0x5b0 [ 139.361835][ T9984] ? fs_reclaim_acquire+0xae/0x150 [ 139.363294][ T9984] should_failslab+0xc2/0x120 [ 139.364548][ T9984] __kmalloc_noprof+0xcb/0x400 [ 139.365823][ T9984] tcf_idr_create+0x62/0x900 [ 139.366990][ T9984] ? __nla_parse+0x40/0x60 [ 139.368309][ T9984] tcf_skbedit_init+0x4ff/0x1160 [ 139.369769][ T9984] ? __pfx_tcf_skbedit_init+0x10/0x10 [ 139.371321][ T9984] ? tcf_action_init_1+0x2d4/0x6c0 [ 139.372712][ T9984] tcf_action_init_1+0x45f/0x6c0 [ 139.374015][ T9984] ? tc_lookup_action_n+0xc9/0xf0 [ 139.375327][ T9984] ? __pfx_tcf_action_init_1+0x10/0x10 [ 139.377061][ T9984] ? __pfx_tc_action_load_ops+0x10/0x10 [ 139.378643][ T9984] ? __nla_parse+0x40/0x60 [ 139.379979][ T9984] tcf_action_init+0x42e/0x9c0 [ 139.381310][ T9984] ? __pfx_tcf_action_init+0x10/0x10 [ 139.382773][ T9984] ? __pfx_mark_lock+0x10/0x10 [ 139.384178][ T9984] ? lock_acquire.part.0+0x11b/0x380 [ 139.385694][ T9984] ? __pfx___lock_acquire+0x10/0x10 [ 139.387323][ T9984] ? __pfx_lock_release+0x10/0x10 [ 139.389201][ T9984] ? trace_lock_acquire+0x14a/0x1d0 [ 139.390636][ T9984] tcf_action_add+0xfd/0x5d0 [ 139.391871][ T9984] ? __pfx_tcf_action_add+0x10/0x10 [ 139.393443][ T9984] ? __pfx_lock_release+0x10/0x10 [ 139.394799][ T9984] ? __nla_parse+0x40/0x60 [ 139.396153][ T9984] tc_ctl_action+0x35d/0x470 [ 139.397967][ T9984] ? __pfx_tc_ctl_action+0x10/0x10 [ 139.399670][ T9984] ? __pfx_tc_ctl_action+0x10/0x10 [ 139.401229][ T9984] rtnetlink_rcv_msg+0x3c7/0xea0 [ 139.402601][ T9984] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.404093][ T9984] netlink_rcv_skb+0x16b/0x440 [ 139.405602][ T9984] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.407029][ T9984] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.408563][ T9984] ? netlink_deliver_tap+0x1ae/0xd90 [ 139.409960][ T9984] netlink_unicast+0x53c/0x7f0 [ 139.411237][ T9984] ? __pfx_netlink_unicast+0x10/0x10 [ 139.412590][ T9984] netlink_sendmsg+0x8b8/0xd70 [ 139.413842][ T9984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.415352][ T9984] ____sys_sendmsg+0xaaf/0xc90 [ 139.417121][ T9984] ? copy_msghdr_from_user+0x10b/0x160 [ 139.418846][ T9984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.420493][ T9984] ? __pfx___lock_acquire+0x10/0x10 [ 139.421863][ T9984] ___sys_sendmsg+0x135/0x1e0 [ 139.423097][ T9984] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.424408][ T9984] ? lock_acquire+0x2f/0xb0 [ 139.425661][ T9984] ? __fget_files+0x40/0x3f0 [ 139.426921][ T9984] ? fdget+0x176/0x210 [ 139.427963][ T9984] __sys_sendmsg+0x117/0x1f0 [ 139.429338][ T9984] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.430631][ T9984] ? __fget_files+0x244/0x3f0 [ 139.431866][ T9984] do_syscall_64+0xcd/0x250 [ 139.433102][ T9984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.434851][ T9984] RIP: 0033:0x7f233fb7e719 [ 139.436734][ T9984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.442417][ T9984] RSP: 002b:00007f2340a1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.444972][ T9984] RAX: ffffffffffffffda RBX: 00007f233fd35f80 RCX: 00007f233fb7e719 [ 139.447522][ T9984] RDX: ceb3912c1cb6a6b2 RSI: 0000000020000640 RDI: 0000000000000003 [ 139.450579][ T9984] RBP: 00007f2340a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 139.452674][ T9984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.455339][ T9984] R13: 0000000000000000 R14: 00007f233fd35f80 R15: 00007ffef28f5568 [ 139.457795][ T9984] [ 139.508457][ T9981] netlink: 'syz.3.1025': attribute type 10 has an invalid length. [ 139.516334][ T9981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.519245][ T9981] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 139.551058][ T9950] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.553020][ T9950] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.555164][ T9950] bridge_slave_0: entered allmulticast mode [ 139.558697][ T9950] bridge_slave_0: entered promiscuous mode [ 139.561383][ T9950] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.563207][ T9950] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.565905][ T9950] bridge_slave_1: entered allmulticast mode [ 139.567925][ T9950] bridge_slave_1: entered promiscuous mode [ 139.585309][ T1132] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.622790][ T9950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.627195][ T9950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.662761][ T9950] team0: Port device team_slave_0 added [ 139.666290][ T9950] team0: Port device team_slave_1 added [ 139.685126][ T9950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.688244][ T9950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.696154][ T9950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.701522][ T9950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.704201][ T9950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.712857][ T9950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.747070][T10021] FAULT_INJECTION: forcing a failure. [ 139.747070][T10021] name failslab, interval 1, probability 0, space 0, times 0 [ 139.761951][T10021] CPU: 0 UID: 0 PID: 10021 Comm: syz.5.1036 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 139.765140][T10021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.768134][T10021] Call Trace: [ 139.769145][T10021] [ 139.769936][T10021] dump_stack_lvl+0x16c/0x1f0 [ 139.771206][T10021] should_fail_ex+0x497/0x5b0 [ 139.772491][T10021] ? fs_reclaim_acquire+0xae/0x150 [ 139.773861][T10021] should_failslab+0xc2/0x120 [ 139.775127][T10021] __kmalloc_cache_noprof+0x6b/0x300 [ 139.776561][T10021] ? tcf_skbedit_init+0x9cf/0x1160 [ 139.777933][T10021] tcf_skbedit_init+0x9cf/0x1160 [ 139.779314][T10021] ? __pfx_tcf_skbedit_init+0x10/0x10 [ 139.781151][T10021] ? tcf_action_init_1+0x2d4/0x6c0 [ 139.782914][T10021] tcf_action_init_1+0x45f/0x6c0 [ 139.784379][T10021] ? tc_lookup_action_n+0xc9/0xf0 [ 139.785739][T10021] ? __pfx_tcf_action_init_1+0x10/0x10 [ 139.787288][T10021] ? __pfx_tc_action_load_ops+0x10/0x10 [ 139.788905][T10021] ? __nla_parse+0x40/0x60 [ 139.790108][T10021] tcf_action_init+0x42e/0x9c0 [ 139.791765][T10021] ? __pfx_tcf_action_init+0x10/0x10 [ 139.793621][T10021] ? __pfx_mark_lock+0x10/0x10 [ 139.795289][T10021] ? lock_acquire.part.0+0x11b/0x380 [ 139.797201][T10021] ? __pfx___lock_acquire+0x10/0x10 [ 139.798996][T10021] ? __pfx_lock_release+0x10/0x10 [ 139.800880][T10021] ? trace_lock_acquire+0x14a/0x1d0 [ 139.802705][T10021] tcf_action_add+0xfd/0x5d0 [ 139.804408][T10021] ? __pfx_tcf_action_add+0x10/0x10 [ 139.806499][T10021] ? __pfx_lock_release+0x10/0x10 [ 139.807894][T10021] ? __nla_parse+0x40/0x60 [ 139.809251][T10021] tc_ctl_action+0x35d/0x470 [ 139.810575][T10021] ? __pfx_tc_ctl_action+0x10/0x10 [ 139.811910][T10021] ? __pfx_tc_ctl_action+0x10/0x10 [ 139.813357][T10021] rtnetlink_rcv_msg+0x3c7/0xea0 [ 139.814685][T10021] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.816149][T10021] netlink_rcv_skb+0x16b/0x440 [ 139.817456][T10021] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.818965][T10021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.820336][T10021] ? netlink_deliver_tap+0x1ae/0xd90 [ 139.821725][T10021] netlink_unicast+0x53c/0x7f0 [ 139.823026][T10021] ? __pfx_netlink_unicast+0x10/0x10 [ 139.824595][T10021] netlink_sendmsg+0x8b8/0xd70 [ 139.826238][T10021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.828025][T10021] ____sys_sendmsg+0xaaf/0xc90 [ 139.829386][T10021] ? copy_msghdr_from_user+0x10b/0x160 [ 139.830795][T10021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.832318][T10021] ? __pfx___lock_acquire+0x10/0x10 [ 139.833742][T10021] ___sys_sendmsg+0x135/0x1e0 [ 139.835044][T10021] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.836583][T10021] ? lock_acquire+0x2f/0xb0 [ 139.837794][T10021] ? __fget_files+0x40/0x3f0 [ 139.839080][T10021] ? fdget+0x176/0x210 [ 139.840237][T10021] __sys_sendmsg+0x117/0x1f0 [ 139.841492][T10021] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.842857][T10021] ? __fget_files+0x244/0x3f0 [ 139.844177][T10021] do_syscall_64+0xcd/0x250 [ 139.845426][T10021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.847049][T10021] RIP: 0033:0x7f0b9a97e719 [ 139.848335][T10021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.853554][T10021] RSP: 002b:00007f0b9b80d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.855799][T10021] RAX: ffffffffffffffda RBX: 00007f0b9ab35f80 RCX: 00007f0b9a97e719 [ 139.857974][T10021] RDX: ceb3912c1cb6a6b2 RSI: 0000000020000640 RDI: 0000000000000003 [ 139.860167][T10021] RBP: 00007f0b9b80d090 R08: 0000000000000000 R09: 0000000000000000 [ 139.862337][T10021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.864997][T10021] R13: 0000000000000000 R14: 00007f0b9ab35f80 R15: 00007ffc75ffef78 [ 139.868014][T10021] [ 139.889266][ T9950] hsr_slave_0: entered promiscuous mode [ 139.891426][ T9950] hsr_slave_1: entered promiscuous mode [ 139.893840][ T9950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.896567][ T9950] Cannot create hsr debugfs directory [ 139.934761][ T1132] bridge_slave_1: left allmulticast mode [ 139.935093][ T829] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 139.937489][ T1132] bridge_slave_1: left promiscuous mode [ 139.940079][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.945946][ T1132] bridge_slave_0: left allmulticast mode [ 139.947806][ T1132] bridge_slave_0: left promiscuous mode [ 139.949715][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.977859][T10026] input: syz0 as /devices/virtual/input/input23 [ 140.085129][ T829] usb 11-1: Using ep0 maxpacket: 16 [ 140.087407][T10030] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10030 comm=syz.3.1038 [ 140.088349][ T829] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.094108][ T829] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 140.098583][ T829] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 140.101562][ T829] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.109464][ T829] usb 11-1: config 0 descriptor?? [ 140.314525][ T39] kauditd_printk_skb: 36 callbacks suppressed [ 140.314537][ T39] audit: type=1400 audit(1730941513.841:777): avc: denied { connect } for pid=10007 comm="syz.6.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 140.321453][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.328841][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.333233][ T1132] bond0 (unregistering): Released all slaves [ 140.338516][ T1132] bond1 (unregistering): Released all slaves [ 140.345538][T10024] __nla_validate_parse: 5 callbacks suppressed [ 140.345549][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1037'. [ 140.352501][T10024] macsec0: entered promiscuous mode [ 140.433130][T10032] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 140.488958][T10034] overlayfs: conflicting options: metacopy=off,verity=require [ 140.500055][ T9950] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 140.505508][ T9950] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 140.508620][ T9950] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 140.512436][ T9950] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 140.557218][ T9950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.565087][ T9950] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.571753][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.573692][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.600008][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.601769][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.704486][T10061] block nbd5: NBD_DISCONNECT [ 140.721923][ T1132] hsr_slave_0: left promiscuous mode [ 140.725235][ T1132] hsr_slave_1: left promiscuous mode [ 140.727238][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.729141][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.732072][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.734208][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.788752][ T1132] veth1_macvtap: left promiscuous mode [ 140.790190][ T1132] veth0_macvtap: left promiscuous mode [ 140.791611][ T1132] veth1_vlan: left promiscuous mode [ 140.793258][ T1132] veth0_vlan: left promiscuous mode [ 141.180656][ T5948] Bluetooth: hci1: command tx timeout [ 141.659868][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 141.760301][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 142.458345][T10074] gre0: entered allmulticast mode [ 142.476065][ T9950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.558760][ T6683] ------------[ cut here ]------------ [ 142.560186][ T6683] WARNING: CPU: 2 PID: 6683 at net/mac80211/offchannel.c:404 ieee80211_start_next_roc+0x24c/0x2c0 [ 142.563489][ T6683] Modules linked in: [ 142.565243][ T6683] CPU: 2 UID: 0 PID: 6683 Comm: kworker/u32:11 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 142.569651][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.573286][ T6683] Workqueue: events_unbound cfg80211_wiphy_work [ 142.575118][ T6683] RIP: 0010:ieee80211_start_next_roc+0x24c/0x2c0 [ 142.576960][ T6683] Code: 7b 40 e8 67 bf dc ff 48 83 c4 10 5b 5d e9 8c d5 fe f6 e8 87 d5 fe f6 48 89 df e8 0f 60 ff ff e9 40 ff ff ff e8 75 d5 fe f6 90 <0f> 0b 90 e9 32 ff ff ff 48 c7 c7 18 8c 5f 90 e8 40 5f 60 f7 e9 db [ 142.582306][ T6683] RSP: 0018:ffffc9000c95fad0 EFLAGS: 00010293 [ 142.583924][ T6683] RAX: 0000000000000000 RBX: ffff88804c100e40 RCX: ffffffff8a8ea4a6 [ 142.586172][ T6683] RDX: ffff88805071c880 RSI: ffffffff8a8ea5db RDI: 0000000000000001 [ 142.588241][ T6683] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 142.590241][ T6683] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 142.592286][ T6683] R13: ffff88804c1028c0 R14: ffff88804c100e40 R15: dffffc0000000000 [ 142.594298][ T6683] FS: 0000000000000000(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 [ 142.596658][ T6683] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.598356][ T6683] CR2: 00007f8fa86edf98 CR3: 0000000037700000 CR4: 0000000000352ef0 [ 142.600400][ T6683] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 142.602371][ T6683] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 142.603880][ T829] usbhid 11-1:0.0: can't add hid device: -71 [ 142.604383][ T6683] Call Trace: [ 142.604390][ T6683] [ 142.607470][ T6683] ? __warn+0xea/0x3d0 [ 142.608675][ T6683] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 142.610126][ T6683] ? report_bug+0x3c0/0x580 [ 142.611281][ T6683] ? handle_bug+0x54/0xa0 [ 142.612388][ T6683] ? exc_invalid_op+0x17/0x50 [ 142.613586][ T6683] ? asm_exc_invalid_op+0x1a/0x20 [ 142.614900][ T6683] ? ieee80211_start_next_roc+0x116/0x2c0 [ 142.615036][ T829] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 142.616531][ T6683] ? ieee80211_start_next_roc+0x24b/0x2c0 [ 142.620523][ T6683] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 142.622011][ T6683] __ieee80211_scan_completed+0x4fe/0xe50 [ 142.623901][ T6683] ieee80211_scan_work+0x440/0x2080 [ 142.625712][ T6683] ? cfg80211_wiphy_work+0x3a3/0x550 [ 142.627219][ T6683] ? __pfx_lock_release+0x10/0x10 [ 142.628511][ T6683] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 142.629930][ T6683] ? mark_held_locks+0x9f/0xe0 [ 142.631148][ T6683] ? rcu_is_watching+0x12/0xc0 [ 142.632454][ T6683] cfg80211_wiphy_work+0x3d9/0x550 [ 142.633806][ T6683] process_one_work+0x9c5/0x1ba0 [ 142.635267][ T6683] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 142.636768][ T6683] ? __pfx_process_one_work+0x10/0x10 [ 142.638179][ T6683] ? assign_work+0x1a0/0x250 [ 142.639448][ T6683] worker_thread+0x6c8/0xf00 [ 142.639626][ T829] usb 11-1: USB disconnect, device number 5 [ 142.640761][ T6683] ? __pfx_worker_thread+0x10/0x10 [ 142.643431][ T6683] kthread+0x2c1/0x3a0 [ 142.644840][ T6683] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.646447][ T6683] ? __pfx_kthread+0x10/0x10 [ 142.647851][ T6683] ret_from_fork+0x45/0x80 [ 142.649169][ T6683] ? __pfx_kthread+0x10/0x10 [ 142.650487][ T6683] ret_from_fork_asm+0x1a/0x30 [ 142.651844][ T6683] [ 142.652678][ T6683] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 142.654554][ T6683] CPU: 2 UID: 0 PID: 6683 Comm: kworker/u32:11 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 142.657362][ T6683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.660070][ T6683] Workqueue: events_unbound cfg80211_wiphy_work [ 142.661967][ T6683] Call Trace: [ 142.662848][ T6683] [ 142.663617][ T6683] dump_stack_lvl+0x3d/0x1f0 [ 142.664866][ T6683] panic+0x71d/0x800 [ 142.665906][ T6683] ? __pfx_panic+0x10/0x10 [ 142.667101][ T6683] ? show_trace_log_lvl+0x29d/0x3d0 [ 142.668630][ T6683] ? check_panic_on_warn+0x1f/0xb0 [ 142.670091][ T6683] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 142.671587][ T6683] check_panic_on_warn+0xab/0xb0 [ 142.672930][ T6683] __warn+0xf6/0x3d0 [ 142.673960][ T6683] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 142.675457][ T6683] report_bug+0x3c0/0x580 [ 142.676621][ T6683] handle_bug+0x54/0xa0 [ 142.677712][ T6683] exc_invalid_op+0x17/0x50 [ 142.678900][ T6683] asm_exc_invalid_op+0x1a/0x20 [ 142.680172][ T6683] RIP: 0010:ieee80211_start_next_roc+0x24c/0x2c0 [ 142.681857][ T6683] Code: 7b 40 e8 67 bf dc ff 48 83 c4 10 5b 5d e9 8c d5 fe f6 e8 87 d5 fe f6 48 89 df e8 0f 60 ff ff e9 40 ff ff ff e8 75 d5 fe f6 90 <0f> 0b 90 e9 32 ff ff ff 48 c7 c7 18 8c 5f 90 e8 40 5f 60 f7 e9 db [ 142.687056][ T6683] RSP: 0018:ffffc9000c95fad0 EFLAGS: 00010293 [ 142.688928][ T6683] RAX: 0000000000000000 RBX: ffff88804c100e40 RCX: ffffffff8a8ea4a6 [ 142.691021][ T6683] RDX: ffff88805071c880 RSI: ffffffff8a8ea5db RDI: 0000000000000001 [ 142.693203][ T6683] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 142.695158][ T6683] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 142.697144][ T6683] R13: ffff88804c1028c0 R14: ffff88804c100e40 R15: dffffc0000000000 [ 142.699068][ T6683] ? ieee80211_start_next_roc+0x116/0x2c0 [ 142.700494][ T6683] ? ieee80211_start_next_roc+0x24b/0x2c0 [ 142.701941][ T6683] __ieee80211_scan_completed+0x4fe/0xe50 [ 142.703397][ T6683] ieee80211_scan_work+0x440/0x2080 [ 142.704872][ T6683] ? cfg80211_wiphy_work+0x3a3/0x550 [ 142.706231][ T6683] ? __pfx_lock_release+0x10/0x10 [ 142.707504][ T6683] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 142.709114][ T6683] ? mark_held_locks+0x9f/0xe0 [ 142.710306][ T6683] ? rcu_is_watching+0x12/0xc0 [ 142.711532][ T6683] cfg80211_wiphy_work+0x3d9/0x550 [ 142.712801][ T6683] process_one_work+0x9c5/0x1ba0 [ 142.714023][ T6683] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 142.715409][ T6683] ? __pfx_process_one_work+0x10/0x10 [ 142.716759][ T6683] ? assign_work+0x1a0/0x250 [ 142.717956][ T6683] worker_thread+0x6c8/0xf00 [ 142.719772][ T6683] ? __pfx_worker_thread+0x10/0x10 [ 142.721254][ T6683] kthread+0x2c1/0x3a0 [ 142.722345][ T6683] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.723701][ T6683] ? __pfx_kthread+0x10/0x10 [ 142.724934][ T6683] ret_from_fork+0x45/0x80 [ 142.726114][ T6683] ? __pfx_kthread+0x10/0x10 [ 142.727333][ T6683] ret_from_fork_asm+0x1a/0x30 [ 142.728759][ T6683] [ 142.730040][ T6683] Kernel Offset: disabled [ 142.731241][ T6683] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:49:10 Registers: info registers vcpu 0 CPU#0 RAX=000000576fa6f106 RBX=ffff88806a6283c0 RCX=00000000000006e0 RDX=0000000000000057 RSI=ffff88806a6283c0 RDI=0000000000009b4d RBP=0000000000009b4d RSP=ffffc90000007e38 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000000 R12=0000000000000001 R13=0000000000000019 R14=0000000000000001 R15=000000212bd72d17 RIP=ffffffff813ac865 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055735612f300 CR3=0000000055832000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef28f5900 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f233fbf223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f233fbf2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f233fbf2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f233fbf2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f233fbf22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f233fbf23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000005770b521e6 RBX=ffff88806a7283c0 RCX=00000000000006e0 RDX=0000000000000057 RSI=ffff88806a7283c0 RDI=00000000001df514 RBP=00000000001df514 RSP=ffffc900008b0ec0 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000000 R12=0000000000000000 R13=0000000000000019 R14=0000000000000000 R15=7fffffffffffffff RIP=ffffffff813ac865 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000559183feb908 CR3=000000002b178000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=eacc0bd5eacc0bd5 eacc0bd5eacc0bd5 eacc0bd5eacc0bd5 eacc0bd5eacc0bd5 eacc0bd5eacc0bd5 eacc0bd5eacc0bd5 eacc0bd5eacc0bd5 eacc0bd5eacc0bd5 ZMM22=62abcd9762abcd97 62abcd9762abcd97 62abcd9762abcd97 62abcd9762abcd97 62abcd9762abcd97 62abcd9762abcd97 62abcd9762abcd97 62abcd9762abcd97 ZMM23=acf43420acf43420 acf43420acf43420 acf43420acf43420 acf43420acf43420 acf43420acf43420 acf43420acf43420 acf43420acf43420 acf43420acf43420 ZMM24=59413be359413be3 59413be359413be3 59413be359413be3 59413be359413be3 59413be359413be3 59413be359413be3 59413be359413be3 59413be359413be3 ZMM25=e8b8c8dde8b8c8dd e8b8c8dde8b8c8dd e8b8c8dde8b8c8dd e8b8c8dde8b8c8dd e8b8c8dde8b8c8dd e8b8c8dde8b8c8dd e8b8c8dde8b8c8dd e8b8c8dde8b8c8dd ZMM26=ebbee71aebbee71a ebbee71aebbee71a ebbee71aebbee71a ebbee71aebbee71a ebbee71aebbee71a ebbee71aebbee71a ebbee71aebbee71a ebbee71aebbee71a ZMM27=c46b925dc46b925d c46b925dc46b925d c46b925dc46b925d c46b925dc46b925d c46b925dc46b925d c46b925dc46b925d c46b925dc46b925d c46b925dc46b925d ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9005000090050000 9005000090050000 9005000090050000 9005000090050000 9005000090050000 9005000090050000 9005000090050000 9005000090050000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b84c5 RDI=ffffffff9aaeac40 RBP=ffffffff9aaeac00 RSP=ffffc9000c95f468 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff850b8460 R15=0000000000000000 RIP=ffffffff850b84ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8fa86edf98 CR3=0000000037700000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000872c9164 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fa79f223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fa79f2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fa79f2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fa79f2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fa79f22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fa79f23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fa7b0c488 00007f8fa7b0c480 00007f8fa7b0c478 00007f8fa7b0c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fa866d100 00007f8fa7b0c440 00007f8fa7b0c458 00007f8fa7b0c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fa7b0c498 00007f8fa7b0c490 00007f8fa7b0c488 00007f8fa7b0c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000124 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001580fd RBX=0000000000000003 RCX=ffffffff8b235439 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1b2c0 RBP=ffffed1003b5b488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d527025 R10=ffff88806a93812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801dada440 R14=ffffffff905f5908 R15=0000000000000000 RIP=ffffffff8b23681f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f58e48a6440 CR3=0000000037700000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000872c9164 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000007ffec400 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b00000000000000 00000000000080fe ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdddb3f2210 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdddb3f2208 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdddb3f223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdddb3f2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdddb3f2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdddb3f2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdddb3f22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdddb3f23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100007f234e0002 0000000000000000 0100007f224e0002 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000000000000 00000000000000fc 00007ffed600376d 697376656474656e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000