last executing test programs: 2m2.35018758s ago: executing program 32 (id=27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="f3f0f6938200ba4300b80a00ef3ef2f30f2311653e0f01c40f0d29baf80c66b84820a08466efbafc0c66ed0f01d03ed348000f011d26660f38de2f", 0x3b}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m1.994462395s ago: executing program 1 (id=28): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x135, 0x0, 0x0, @fd}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044891}, 0x4008094) 2m1.941430658s ago: executing program 1 (id=29): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000007c0)={0x0, 0x2, 0x3, 0x1}) mkdir(&(0x7f00000028c0)='./sys/class/block/zram0/disksize\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r1, 0x7, &(0x7f0000002880)={0x2, 0x1, 0x10000, 0x1600, r3}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {0x10, 0x5}, {0x20, 0x4}}, 0x24, 0x0) getxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=@known='system.posix_acl_access\x00', 0x0, 0xffffffffffffff71) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000340)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f00000006c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) write(r7, &(0x7f0000000740)='33', 0x2) syz_emit_ethernet(0x7e, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x70, 0x0, 0x0, 0x8, 0x1, 0x0, @private=0xa010105, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast1, @local, {[@cipso={0x86, 0x28, 0x2, [{0x0, 0xd, "5e00020000020000005af3"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x10, "9606053d0006ff003a0000b61af9"}]}, @rr={0x7, 0xf, 0x63, [@remote, @broadcast, @local]}, @cipso={0x86, 0x6, 0xfffffffffffffffd}]}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 2m1.767839476s ago: executing program 1 (id=31): open$dir(0x0, 0x121000, 0x14) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000140)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) 2m1.681566702s ago: executing program 1 (id=32): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000300), &(0x7f0000000480)='./file0\x00', &(0x7f0000000540), 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x10a) write$P9_RREADLINK(r0, &(0x7f00000002c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) chdir(&(0x7f00000005c0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x6}}, './proc\x00'}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r1, &(0x7f0000000400)='w', 0x1, 0x6}]) 2m1.537168752s ago: executing program 1 (id=38): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (fail_nth: 12) unshare(0x64000600) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_open_procfs$pagemap(0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 2m1.030894828s ago: executing program 1 (id=47): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000300), &(0x7f0000000480)='./file0\x00', &(0x7f0000000540), 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x10a) write$P9_RREADLINK(r0, &(0x7f00000002c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) chdir(&(0x7f00000005c0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x6}}, './proc\x00'}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r1, &(0x7f0000000400)='w', 0x1, 0x6}]) 2m0.969826131s ago: executing program 33 (id=47): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000300), &(0x7f0000000480)='./file0\x00', &(0x7f0000000540), 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x10a) write$P9_RREADLINK(r0, &(0x7f00000002c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) chdir(&(0x7f00000005c0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x6}}, './proc\x00'}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r1, &(0x7f0000000400)='w', 0x1, 0x6}]) 1m51.370655164s ago: executing program 2 (id=248): r0 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x7a616971b0e8f6f6) r1 = syz_open_dev$dri(&(0x7f00000005c0), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001900010029bd7000000000001d0109004d000f8008002100", @ANYRES32=r2, @ANYBLOB="428184a4773423c85c24d8c531680464a01e80000000d4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db001900"/68], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x804) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x45) renameat2(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)={[{@index_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000240)={0xc}) r4 = dup3(r1, r0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0xee01, 0xee00) keyctl$chown(0x4, r5, 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) 1m51.271403963s ago: executing program 2 (id=252): bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0xf2, 0xff, 0x2e, 0xa3, 0x40000023a, 0x2, 0x3e, 0xcd, 0x1d8, 0xffffffffffffff53, 0x10000000000002ea, 0x10000, 0x5, 0x38, 0x1, 0x7, 0x6b1, 0x401}, [{0x3, 0x281, 0xffffffffffffff83, 0x1000000000000ff5, 0x1, 0x5, 0x7}]}, 0x78) execveat(r1, &(0x7f0000000240)='\x00', 0x0, 0x0, 0x1000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)={0x6c, 0x2, 0x6, 0x201, 0x6000000, 0x0, {0x5}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x400c4d09, &(0x7f00000003c0)) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000440)={[0x1]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x3c, &(0x7f0000000340)=""/60, 0x40f00, 0x26, '\x00', 0x0, @fallback=0x19, r3, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x6, 0x0, &(0x7f0000000480)=[{0x5, 0x4, 0x7, 0xc}, {0x5, 0x1, 0x10, 0x9}, {0x4, 0x2, 0x7, 0x4}, {0x2, 0x4, 0xb, 0x2}, {0x0, 0x2, 0x4, 0x4}, {0x5, 0x5, 0x1, 0x4}], 0x10, 0x5494}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000740), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000780)={{0x3}}) close_range(r5, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r7, &(0x7f00000005c0)="44c9", 0x2) 1m51.270721452s ago: executing program 2 (id=255): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0xfffc, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0xfffffffd}, 0x9c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000004c0)="4ed7e92559fc95f8df0565a7c31e9f8bcd3978bb08c74349ac5d922b90f8cd7dd8ff9667592924a637cca233e0e6995d83bd30c07e5480f3f9e8935ca337a9a5ca617d01", 0x44}, {&(0x7f0000000540)="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", 0xfa}, {&(0x7f0000000640)="6b15da1d8a18e4a3246575a7c28451d18b2273a1f1b0cc123aad8882438c0b565d7af768f6b8c4916aaf8a6543d1600d5cbc9edf2ec3bf0b2d9f61d1ca4c928213abe440b4ad782d0cc114a9190b4acf18f23f42a2a6a02db0a5f826110fe32406aeb64e6518b6f64beb273b7ffcae5141509082d72d063ca4310814ac34e75eec463f4cac2baefd13eba7111ebd9ab6a7f83ca71e2ba76ff581cd657ae31ba885808fbb656dfbe571b984f4d911cde29c5dd642ca1668193cf2e2aa", 0xbc}, {&(0x7f0000000700)="73f720c184763e62ed8c6a8b12ebc538c3990a93f827bd6481a0fc15c1a2fdee0f9ef9f400f63c9141bb351090", 0x2d}, {&(0x7f0000000740)="b9039d1f7e405b88ce3ecef03fd5576cfb727f01442371a9927528c423bb68aeca72352d4d89eb2e6d9e45a9c47eacaaaace201b52a757588f31d93855bcbb47141da0c3a3c589e45489372c6364d938ba378163d6acd0f7a0f2c7fce48efa0c10d7949edd28470a1b65b566de0b960d926f127931e5d603bd2c85410227c4363157af98141fb7093defd9292a3024988fd89de005a979821fe35d1646e7572569f5b7ee7ea2e7985e8df1aeb612657be6329b9aa0795df56fff4836278200974335964357c30476e0d3ac50ca2fb210b13e2727390e4eace38f963f87", 0xdd}], 0x5) sendto$inet6(r0, &(0x7f0000000240)='X', 0x34000, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) 1m51.193236929s ago: executing program 2 (id=260): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x42, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x20}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0xa0) mount$bind(&(0x7f0000001840)='.\x00', &(0x7f0000001880)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000018c0)='./file0/../file0\x00') mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000001940)='./file0\x00', 0x0, 0xd5848, 0x0) pivot_root(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)='./file0/../file0\x00') sendfile(r0, r0, 0x0, 0xa) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000000000/0x400000)=nil) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000240)={0x0, 0x15961, 0x10000, 0x0, 0x4e}, &(0x7f0000001680)=0x0, &(0x7f00000016c0)=0x0, &(0x7f0000001700)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000001740)=@IORING_OP_EPOLL_WAIT={0x3b, 0xa, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[{0xd8000004}], 0x1, 0x0, 0x1, {0x0, r7}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0xfffe, 0x0, @mcast2}}}}}}, 0x0) recvmsg$kcm(r0, &(0x7f0000001640)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/8, 0x8}, {&(0x7f0000000100)}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/177, 0xb1}, {&(0x7f0000001400)=""/77, 0x4d}, {&(0x7f0000001480)=""/60, 0x3c}], 0x6, &(0x7f0000001540)=""/204, 0xcc}, 0x42) 1m51.170609913s ago: executing program 2 (id=263): r0 = socket$netlink(0x10, 0x3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000140), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x21, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000007c0)=@newtfilter={0x8b4, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x2}, {0x5, 0xa, 0x1}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xfd}}, @filter_kind_options=@f_u32={{0x8}, {0x824, 0x2, [@TCA_U32_POLICE={0x820, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xc, 0x4, 0x40, 0xdaa, 0x0, 0x5, 0x9, 0x80000001, 0xfffffffc, 0x4, 0xb, 0xa000000, 0x2, 0xa15a, 0x1, 0x1000, 0x7d5, 0x2, 0x1, 0x2, 0x5, 0x7, 0x1, 0x9, 0x5, 0xda, 0x0, 0xfffffffe, 0x0, 0xfffffff6, 0x3ff, 0x10001, 0x1, 0xfffffff9, 0xc1a, 0x81, 0x3, 0x50c, 0x3, 0x4, 0x8, 0x2222674d, 0x542d, 0x3, 0x7a3646c9, 0x1ff, 0xa, 0x1, 0x0, 0x4, 0x5, 0x9, 0x6, 0xf71b, 0x7a8, 0x7fff, 0x3, 0x3, 0x7, 0x100, 0x1, 0xfffffffe, 0x8, 0x4, 0x200, 0x0, 0x55f8, 0x8000, 0x3, 0x2, 0x7, 0xfffffffc, 0x401, 0xffffffff, 0x7fff, 0x1, 0x5, 0x6, 0xb, 0x1, 0x2, 0x4, 0x5, 0x6, 0x6, 0x5, 0x4, 0x7f, 0x3f52, 0xe1, 0xffffff7f, 0x4, 0x7f, 0x5, 0x8, 0x1ff, 0x3, 0xfffffff9, 0x3, 0x0, 0x4, 0x6, 0x8, 0x1220, 0x9, 0x401, 0x86, 0xfffffffe, 0x401, 0x2, 0x71, 0x3, 0x8, 0xfffffffe, 0x4, 0x1, 0x0, 0xa7, 0x8, 0x3, 0x4, 0x9, 0x7fffffff, 0x0, 0x9, 0x6dc, 0x4, 0x5, 0x262a, 0x2, 0x7, 0x4, 0xfffff1fb, 0x5, 0x101, 0x8, 0x4, 0x4, 0x7, 0x200, 0x0, 0x8, 0x9, 0x1, 0x0, 0x2, 0x80000000, 0x6, 0x5, 0x7, 0x100, 0x460080, 0x81, 0x7f, 0x0, 0x3, 0xffffff97, 0x1, 0x400, 0xe, 0x4, 0x6, 0x0, 0x9, 0x8001, 0x8001, 0x6, 0x4, 0x1, 0xffffff01, 0x3, 0x1, 0x80000001, 0x10, 0x5, 0xb, 0x7, 0x9c0, 0xfa, 0x6b0, 0x101, 0x0, 0x9, 0x5, 0xd1, 0x5, 0x1, 0x3, 0xffffff2a, 0x4, 0x100, 0x1, 0x1, 0x7, 0x8, 0x2, 0x9, 0xb9, 0x80, 0x400, 0xffff, 0x1c, 0x5, 0x9, 0x7, 0x40, 0x3ff, 0x1, 0x47, 0x3, 0x0, 0x8, 0xfdec, 0x51f, 0x8000, 0x7, 0x7f, 0x0, 0x8, 0x7, 0x7fffffff, 0x637, 0x1, 0x124, 0xd86, 0x0, 0x2, 0x5, 0x2, 0x3, 0x800, 0x8, 0x7, 0x0, 0x0, 0x3, 0x6, 0xe6a, 0x0, 0x6, 0x5, 0x6, 0x18df, 0x6, 0x5, 0x5, 0x9, 0x4, 0x3896, 0x5, 0x7, 0x8, 0xb46, 0x80000001, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x1, 0x4, 0x9, 0x7fffffff, 0x7fff, 0x8, 0x7f, 0x80000001, 0x3101, 0x9, 0x6d3, 0xdd, 0x2, 0x1, 0x4, 0x1f, 0x1ff, 0xfe, 0x7fffffff, 0x2d, 0x0, 0x81, 0xa, 0xd849, 0x9, 0x3, 0x716, 0xfffffff8, 0x6, 0x713c, 0x200, 0x4, 0x10000, 0xe7d, 0x370c, 0x526, 0x613b, 0xf6e, 0xf, 0x80000001, 0x5, 0x1, 0x2, 0xb, 0x89, 0x10000000, 0x80, 0x200, 0x1, 0x6, 0x2, 0x6, 0x2, 0x1, 0x81, 0x2, 0xe, 0xb, 0x9, 0x9, 0xb6a5, 0xa0, 0x200, 0x0, 0x8a8, 0x8, 0x9b30, 0xdd, 0xc7a, 0x1000, 0x1, 0x6, 0x9, 0x200, 0x3, 0x4, 0x7, 0x1ff, 0x5, 0x8, 0x8, 0xfffffffd, 0x2, 0x80000001, 0x54c, 0x2, 0x200, 0x90b, 0x6, 0x80000001, 0x3, 0x4, 0x6, 0x9, 0x0, 0x2, 0x7, 0x0, 0xdbe9, 0x8, 0x1, 0xe, 0x7, 0xf008, 0x5, 0x10001, 0xfffffe00, 0x0, 0x50000000, 0xa, 0x739, 0x5, 0x7, 0x6, 0x0, 0x6, 0x0, 0x1, 0x6, 0x3ff, 0x8, 0xa7a, 0x9, 0x7, 0xffff, 0x1477c02c, 0x9, 0xff, 0x90, 0x7, 0x8000, 0x401, 0x6, 0x7f, 0x9, 0x4, 0xfda, 0x3, 0x1, 0x9, 0x3, 0xf4d3, 0x3, 0x5eb, 0x9, 0x6, 0xd648, 0xe, 0x8, 0x8, 0x1, 0x6f5, 0x5, 0x5, 0x3, 0x7, 0xc, 0x3, 0x5, 0x2, 0xfffffffb, 0xffffff15, 0x8001, 0x7, 0x7f, 0x200, 0xea, 0x0, 0x7fff, 0x101, 0x0, 0x4, 0xf, 0xffff, 0x1, 0x5, 0x18, 0xb, 0x4, 0x4, 0x8001, 0x2, 0x4, 0x8, 0x6, 0x258, 0x6, 0x8, 0x8, 0x5, 0x4, 0x0, 0x7, 0x7e88, 0x10001, 0x2, 0x2, 0x5, 0x9, 0xb051, 0xe23, 0x8, 0x5, 0x0, 0xb, 0x8, 0x2, 0x40000000, 0x7f, 0x0, 0x8, 0x28c, 0x3, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0xfffeffff, 0x9, 0x8, 0x8, 0xa, 0x5, 0x5, 0x5, 0x8, 0x8, 0x8, 0x21, 0x0, 0x5, 0x1000000, 0x6, 0x1, 0x33, 0x4, 0x0, 0x0, 0x0, 0x800, 0x1, 0x400, 0x7f21, 0x4, 0x6, 0x2, 0x0, 0x7, 0x80000000, 0x7, 0x0, 0x40, 0x512bff22]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r7, 0x501, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000100)=0x1000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x631df, 0x100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000140), 0x0) (async) close(r1) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00') (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x21, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000007c0)=@newtfilter={0x8b4, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x2}, {0x5, 0xa, 0x1}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xfd}}, @filter_kind_options=@f_u32={{0x8}, {0x824, 0x2, [@TCA_U32_POLICE={0x820, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xc, 0x4, 0x40, 0xdaa, 0x0, 0x5, 0x9, 0x80000001, 0xfffffffc, 0x4, 0xb, 0xa000000, 0x2, 0xa15a, 0x1, 0x1000, 0x7d5, 0x2, 0x1, 0x2, 0x5, 0x7, 0x1, 0x9, 0x5, 0xda, 0x0, 0xfffffffe, 0x0, 0xfffffff6, 0x3ff, 0x10001, 0x1, 0xfffffff9, 0xc1a, 0x81, 0x3, 0x50c, 0x3, 0x4, 0x8, 0x2222674d, 0x542d, 0x3, 0x7a3646c9, 0x1ff, 0xa, 0x1, 0x0, 0x4, 0x5, 0x9, 0x6, 0xf71b, 0x7a8, 0x7fff, 0x3, 0x3, 0x7, 0x100, 0x1, 0xfffffffe, 0x8, 0x4, 0x200, 0x0, 0x55f8, 0x8000, 0x3, 0x2, 0x7, 0xfffffffc, 0x401, 0xffffffff, 0x7fff, 0x1, 0x5, 0x6, 0xb, 0x1, 0x2, 0x4, 0x5, 0x6, 0x6, 0x5, 0x4, 0x7f, 0x3f52, 0xe1, 0xffffff7f, 0x4, 0x7f, 0x5, 0x8, 0x1ff, 0x3, 0xfffffff9, 0x3, 0x0, 0x4, 0x6, 0x8, 0x1220, 0x9, 0x401, 0x86, 0xfffffffe, 0x401, 0x2, 0x71, 0x3, 0x8, 0xfffffffe, 0x4, 0x1, 0x0, 0xa7, 0x8, 0x3, 0x4, 0x9, 0x7fffffff, 0x0, 0x9, 0x6dc, 0x4, 0x5, 0x262a, 0x2, 0x7, 0x4, 0xfffff1fb, 0x5, 0x101, 0x8, 0x4, 0x4, 0x7, 0x200, 0x0, 0x8, 0x9, 0x1, 0x0, 0x2, 0x80000000, 0x6, 0x5, 0x7, 0x100, 0x460080, 0x81, 0x7f, 0x0, 0x3, 0xffffff97, 0x1, 0x400, 0xe, 0x4, 0x6, 0x0, 0x9, 0x8001, 0x8001, 0x6, 0x4, 0x1, 0xffffff01, 0x3, 0x1, 0x80000001, 0x10, 0x5, 0xb, 0x7, 0x9c0, 0xfa, 0x6b0, 0x101, 0x0, 0x9, 0x5, 0xd1, 0x5, 0x1, 0x3, 0xffffff2a, 0x4, 0x100, 0x1, 0x1, 0x7, 0x8, 0x2, 0x9, 0xb9, 0x80, 0x400, 0xffff, 0x1c, 0x5, 0x9, 0x7, 0x40, 0x3ff, 0x1, 0x47, 0x3, 0x0, 0x8, 0xfdec, 0x51f, 0x8000, 0x7, 0x7f, 0x0, 0x8, 0x7, 0x7fffffff, 0x637, 0x1, 0x124, 0xd86, 0x0, 0x2, 0x5, 0x2, 0x3, 0x800, 0x8, 0x7, 0x0, 0x0, 0x3, 0x6, 0xe6a, 0x0, 0x6, 0x5, 0x6, 0x18df, 0x6, 0x5, 0x5, 0x9, 0x4, 0x3896, 0x5, 0x7, 0x8, 0xb46, 0x80000001, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x1, 0x4, 0x9, 0x7fffffff, 0x7fff, 0x8, 0x7f, 0x80000001, 0x3101, 0x9, 0x6d3, 0xdd, 0x2, 0x1, 0x4, 0x1f, 0x1ff, 0xfe, 0x7fffffff, 0x2d, 0x0, 0x81, 0xa, 0xd849, 0x9, 0x3, 0x716, 0xfffffff8, 0x6, 0x713c, 0x200, 0x4, 0x10000, 0xe7d, 0x370c, 0x526, 0x613b, 0xf6e, 0xf, 0x80000001, 0x5, 0x1, 0x2, 0xb, 0x89, 0x10000000, 0x80, 0x200, 0x1, 0x6, 0x2, 0x6, 0x2, 0x1, 0x81, 0x2, 0xe, 0xb, 0x9, 0x9, 0xb6a5, 0xa0, 0x200, 0x0, 0x8a8, 0x8, 0x9b30, 0xdd, 0xc7a, 0x1000, 0x1, 0x6, 0x9, 0x200, 0x3, 0x4, 0x7, 0x1ff, 0x5, 0x8, 0x8, 0xfffffffd, 0x2, 0x80000001, 0x54c, 0x2, 0x200, 0x90b, 0x6, 0x80000001, 0x3, 0x4, 0x6, 0x9, 0x0, 0x2, 0x7, 0x0, 0xdbe9, 0x8, 0x1, 0xe, 0x7, 0xf008, 0x5, 0x10001, 0xfffffe00, 0x0, 0x50000000, 0xa, 0x739, 0x5, 0x7, 0x6, 0x0, 0x6, 0x0, 0x1, 0x6, 0x3ff, 0x8, 0xa7a, 0x9, 0x7, 0xffff, 0x1477c02c, 0x9, 0xff, 0x90, 0x7, 0x8000, 0x401, 0x6, 0x7f, 0x9, 0x4, 0xfda, 0x3, 0x1, 0x9, 0x3, 0xf4d3, 0x3, 0x5eb, 0x9, 0x6, 0xd648, 0xe, 0x8, 0x8, 0x1, 0x6f5, 0x5, 0x5, 0x3, 0x7, 0xc, 0x3, 0x5, 0x2, 0xfffffffb, 0xffffff15, 0x8001, 0x7, 0x7f, 0x200, 0xea, 0x0, 0x7fff, 0x101, 0x0, 0x4, 0xf, 0xffff, 0x1, 0x5, 0x18, 0xb, 0x4, 0x4, 0x8001, 0x2, 0x4, 0x8, 0x6, 0x258, 0x6, 0x8, 0x8, 0x5, 0x4, 0x0, 0x7, 0x7e88, 0x10001, 0x2, 0x2, 0x5, 0x9, 0xb051, 0xe23, 0x8, 0x5, 0x0, 0xb, 0x8, 0x2, 0x40000000, 0x7f, 0x0, 0x8, 0x28c, 0x3, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0xfffeffff, 0x9, 0x8, 0x8, 0xa, 0x5, 0x5, 0x5, 0x8, 0x8, 0x8, 0x21, 0x0, 0x5, 0x1000000, 0x6, 0x1, 0x33, 0x4, 0x0, 0x0, 0x0, 0x800, 0x1, 0x400, 0x7f21, 0x4, 0x6, 0x2, 0x0, 0x7, 0x80000000, 0x7, 0x0, 0x40, 0x512bff22]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r7, 0x501, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000100)=0x1000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x631df, 0x100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) (async) 1m50.950374336s ago: executing program 2 (id=264): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2d, 0x10, {0x2, 0x4e21, @private=0xa010101}}, 0x24) 1m50.866893685s ago: executing program 34 (id=264): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2d, 0x10, {0x2, 0x4e21, @private=0xa010101}}, 0x24) 1m50.821240381s ago: executing program 4 (id=266): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044891}, 0x4008094) 1m50.820335486s ago: executing program 4 (id=267): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000003) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000900)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000940)={&(0x7f0000000980)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000a00)="d684", 0x2}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/28, 0x1c}], 0x1, &(0x7f0000000b00)=""/90, 0x5a}, 0x7}], 0x1, 0x40000000, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000fab8b430e945dc61114800000000004600feff0000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x3e0, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000580), 0x0, 0x10, &(0x7f00000005c0), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) r4 = fsopen(&(0x7f00000002c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000600)='source\x00', &(0x7f0000000640)='[::],:/\x00', 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r5, 0x0, &(0x7f00001b0000/0x1000)=nil, 0x1000, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x5c, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x26040090) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file1\x00', 0x52aa8b2b46e3891c, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="240000002000010026bd7000fbdbdf25020004090000060700010008000200ac14142a00"], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4024800) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000140)={{&(0x7f000033c000/0x1000)=nil, 0x1000}}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) timer_delete(r0) close_range(r8, 0xffffffffffffffff, 0x0) 1m50.590783047s ago: executing program 4 (id=268): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)='X', 0x34000, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 8) 1m50.590492005s ago: executing program 4 (id=269): r0 = syz_open_dev$swradio(&(0x7f00000007c0), 0x1, 0x2) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344}, 0x2, 0x7fff) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344}, 0x6, 0x2) syz_emit_ethernet(0x4d7, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x5, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0xff000}, {0x27d3}], @ipv6=@esp={0x9, 0x6, "135d3a", 0x491, 0x32, 0x1, @empty, @dev={0xfe, 0x80, '\x00', 0x18}, {[@fragment={0x32, 0x0, 0xf, 0x0, 0x0, 0x3, 0x68}, @routing={0x4, 0x2, 0x0, 0xe, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}]}, @dstopts={0x2c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0x634}]}, @routing={0x3b, 0xe, 0x2, 0x2, 0x0, [@remote, @remote, @loopback, @private1, @private2, @mcast1, @mcast1]}, @hopopts={0x67, 0x5, '\x00', [@hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0x41c45cc0}, @enc_lim={0x4, 0x1, 0x6}]}, @dstopts={0x6c, 0x29, '\x00', [@ra={0x5, 0x2, 0xa74}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x1, 0x2, [0x7]}}, @padn={0x1, 0x1, [0x0]}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0x3e, "f91a548b8d2e336494cdd66dd77cbfc2446922d1a94fa5a44194d28a5d584d4f21ae14e9fa00b32b7f402ef11a9afd50e187029f4e7c0a2e00c1b59775af"}, @generic={0x5, 0xbc, "7a69a9b7f2629602ae2a3086e50e357afffd9de7cfbd01defd638da81903f30f140ac139ed178f38e8525e68f908a220ba20b933c4e6f129f3130b3fdba80c5275ee5909d341d6d3e56f1456bede5105070e1537df7ae043215303ecd2389cc0e60df578bf04fa657823b38fe4a3a6c6a477f8b14cf5a677c7af667c0997adfe91dbb4e3b1480b06462c44bc91df784116f8cb3e55a52e133ed5f4341fac9eb982a73d6aa4f848127cb4de06a6a7365d2cebac68886f7c21cc2d9418"}, @calipso={0x7, 0x10, {0x1, 0x2, 0x10, 0x5, [0x4]}}]}, @dstopts={0x3c, 0xc, '\x00', [@hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x48, {0x3, 0x10, 0x1, 0x23, [0x2, 0x9, 0x2, 0x8000000000000000, 0xca0, 0x5, 0x8, 0x1]}}, @enc_lim={0x4, 0x1, 0x45}, @pad1]}, @fragment={0xc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x66}, @dstopts={0x5e, 0x8, '\x00', [@generic={0x81, 0x39, "0337aa7efb1ec1806e3b0363eeeb457dbe72d758503acb8a72ac7801a6839de18258948847be0194d7bc1f8d3a74efc52e052bdc8075f686fa"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xff}, @ra={0x5, 0x2, 0xff7b}]}], {0x4d4, 0x6, @basic={0x0, 0x0, 0xc3e, [@ipv6=@tcp={0x5, 0x6, "c7d71f", 0x14e, 0x6, 0xff, @loopback, @loopback, {[@srh={0x33, 0xc, 0x4, 0x6, 0x3, 0x80, 0x9, [@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @remote]}], {{0x4e20, 0x4e24, r3, r4, 0x1, 0x0, 0xf, 0x20, 0x8, 0x0, 0x4, {[@md5sig={0x13, 0x12, "64ccde1e48ede9832c8214939fc767cd"}, @mss={0x2, 0x4, 0x1643}, @fastopen={0x22, 0xe, "986c8949fc20bf7cbc10be27"}, @eol]}}, {"88d53a201baa76adf68d1ace765e4e397c291b878743160f7f4ebf5fa16666207a0db52d5af75963588dd5d20139ce37624cba895d8edc74f37c9f9e4c41e8498c4bd66e1a10eeb44e4b15d34f62d2a640fad24c2995dc08bba10b3ccf18e8ce6d4704568005855ad0ca36ff30ef26ca63dc71b8c2975d3ef146d5b56cea13c57cc05f5fc79da7bf518878cb424d20b980f1be5bdad8e02190e97f46f044fbef3dd059682c93ddb1c8be"}}}}]}, "05f0401567", 0x5}}}}}}}, &(0x7f0000000800)={0x0, 0x3, [0x3dc, 0xb67, 0x126, 0x565]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000040)={0x1, 0x5, 0x3ff, 0x2, 0x0, 0x5, 0x100000003, 0x5, 0x1ff, 0x7fffffffffffffff, 0x5, 0x2}) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x101}, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000880)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880d030000006afd981d8ab4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a340e00000000000000bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b80000000000000006c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d94633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d4368780082aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f918700000dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd77992f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed5146c03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070da245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71ce787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe727e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mount(0x0, &(0x7f0000001880)='./dev\x00', &(0x7f00000018c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r5, 0xc138fd05, &(0x7f0000001940)="0400000032000000000000007e0100003801") ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000840)={0xf0f042, 0xfffffffc}) 1m50.521724148s ago: executing program 4 (id=270): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x387f3605) ptrace$pokeuser(0x6, r0, 0x358, 0xffff8880a130f000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), 0x1000008c, 0x0, 0xfffffffffffffcde}, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/usb/usbmon/0s\x00', 0x0, 0x80) pread64$ublk_ch(r2, 0x0, 0x0, 0x4) clock_gettime(0x0, &(0x7f0000000080)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000500)={{0x80, 0xbd}, 'port1\x00', 0x12, 0x80001, 0x1, 0x8000008, 0x3, 0x32cbe4ce, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000005c0)={0x800100, 0x101, 0x6, 0xe1d9, 0x4}) read(r3, &(0x7f0000000640)=""/145, 0x91) clock_gettime(0x0, &(0x7f00000000c0)) splice(r1, &(0x7f0000000040)=0x8, r1, &(0x7f0000000180)=0x2, 0x8, 0x8) set_mempolicy(0x3, &(0x7f0000000700)=0xffffffffffffffff, 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x40002, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x0) mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(r4, &(0x7f0000000100)='./file1\x00', 0x101501, 0xa4) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb29e0000, 0x0, 0x31, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) 1m50.45996067s ago: executing program 4 (id=271): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000003c0), 0x2000400, &(0x7f0000000400)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000440)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000480)=@nullb, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/devices.allow\x00', 0x2, 0x48) mount$bind(0x0, &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 1m42.842606803s ago: executing program 6 (id=395): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdir(&(0x7f00000002c0)='mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mysys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='mysys/module/xhci_hcd/parameters/quirks\x00', 0x0, 0xa) read(r1, &(0x7f00000003c0), 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r0, 0x7fffd, 0x4) 1m42.711173257s ago: executing program 6 (id=402): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x18, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044891}, 0x4008094) (fail_nth: 1) 1m42.668215795s ago: executing program 6 (id=404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_batadv\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x400, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008800}, 0x10000040) r2 = add_key(&(0x7f0000000280)='syzkaller\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="13183a3cbf2234cc6ecc18eea3b93ca14d95739cbb8baf37f3a1f7ea", 0x1c, 0xfffffffffffffffa) keyctl$instantiate(0xc, 0x0, &(0x7f0000000340)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', '\xf7(', 0x20, 0x52de}, 0x2c, r2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000380)={r2, 0x46, 0xe}, &(0x7f00000003c0)={'enc=', 'pkcs1', ' hash=', {'streebog512\x00'}}, &(0x7f0000000440)="9336289c21c12e01b16b0e588f909324cc43e72ec80a8f650837406e742f8dd2188b6d54b46c49260b12beedc729aa66a86a3c06facbe26f743ad5a20a7e6cb3fc3e7a5dc862", &(0x7f00000004c0)="686a06b015acb83c91eb6a222c78") r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xe}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, r4, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x10000, @link='broadcast-link\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000007c0), 0x8100, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x140, r6, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_HIDDEN_SSID={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x140}, 0x1, 0x0, 0x0, 0x4040}, 0x20010010) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r6, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "6aa914af1e29bfe6680b2a724d1c927b"}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x80) r8 = fcntl$getown(r5, 0x9) ioctl$RTC_PIE_OFF(r5, 0x7006) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r4, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x69b4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000f40)={'syztnl0\x00', &(0x7f0000000ec0)={'syztnl2\x00', 0x0, 0x2f, 0xc8, 0xe0, 0x9, 0x50, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x7800, 0x7ff}}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@float={0x10, 0x0, 0x0, 0x10, 0x4}, @ptr={0x1, 0x0, 0x0, 0x2, 0x3}, @const={0xc, 0x0, 0x0, 0xa, 0x1}, @float={0x9, 0x0, 0x0, 0x10, 0xc}, @typedef={0x5, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000001000)=""/150, 0x58, 0x96, 0x1, 0x8, 0x10000, @value=r5}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x7, 0x1e, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='GPL\x00', 0x2bc, 0x6e, &(0x7f0000000e40)=""/110, 0x40f00, 0x20, '\x00', r10, @fallback=0x24, r11, 0x8, &(0x7f0000001100)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0x6, 0x6, 0xffff}, 0x10, 0xffffffffffffffff, r5, 0x0, &(0x7f0000001180)=[r5], 0x0, 0x10, 0xc}, 0x94) capset(&(0x7f0000001280)={0x20071026, r8}, &(0x7f00000012c0)={0xfffffff9, 0x1, 0x800, 0x0, 0x4, 0x5958}) read$FUSE(r5, &(0x7f0000001300)={0x2020}, 0x2020) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003400)={&(0x7f0000003380)={0x5c, 0x5, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4080) socket$inet_tcp(0x2, 0x1, 0x0) keyctl$revoke(0x3, r2) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000003480)={0x2, 0x6}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f00000034c0)={0x5, {0x20, 0x80000000, 0x9, 0x5, 0x9}}) 1m42.591180614s ago: executing program 6 (id=406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffff7fb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x1000, r0, 0x0, 0x11000000}, 0x38) (fail_nth: 2) 1m42.47149154s ago: executing program 6 (id=408): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001540)=ANY=[], 0x158}}, 0x20004001) creat(&(0x7f0000001600)='./file0\x00', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002a40)=@base={0x9, 0x1, 0x56d, 0x4, 0x20}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffff7fb, r1}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000005000000000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f58000000040000000090000009000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000001000000000000fe00"], 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/mtrr\x00', 0x2, 0x2) ioctl(r2, 0xffff, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x80000000000008, &(0x7f0000001640)="8c", 0x1) setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000001680)="c1", 0x1) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000001700)=""/17, &(0x7f0000001740)=0xa4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000016c0)='nilfs2\x00', 0x2000004, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/fs/netfs/cookies\x00', 0x0, 0x0) read(r4, &(0x7f0000000540)=""/4096, 0x1000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r7, 0x6, 0x1e, 0x0, &(0x7f00000004c0)) ptrace$pokeuser(0x6, r6, 0x350, 0x10000) ptrace$pokeuser(0x6, r6, 0x388, 0x20000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x1000, r1, 0x0, 0x11000000}, 0x38) 1m42.471135304s ago: executing program 6 (id=409): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xb, &(0x7f0000004680)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000004700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000004740)=""/4060, &(0x7f0000005740)=0xfdc) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='3', 0x4e) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000480), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1fe) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="0001"], 0x38}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./mnt\x00', &(0x7f0000000240)='securityfs\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20004085}, 0x8000890) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) close(r6) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r7, &(0x7f0000000680)=""/16384, 0x4000) sendmsg$kcm(r1, &(0x7f0000005c40)={&(0x7f0000005780)=@rxrpc=@in4={0x21, 0x9, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005800)="32048b913c77506922e7625e219c75dbb5653d5431170dfdb257fe0cf1eaf704934c533b4e2b15e077731df3a17393388b288f", 0x33}, {&(0x7f0000005840)="b9e1563fe46662e67ba812dbcb10188242cb7cd8fda41199da42f6cbe95069e69dda", 0x22}, {&(0x7f0000005880)="4432d35b7d24798593f4f4b1782a7174dddd09121ab04c6e9e12c462484b2902d5df4889685350ea", 0x28}, {&(0x7f00000058c0)="3d9579cd5a99b2eec3781311cd7e0f69b671520b", 0x14}], 0x4, &(0x7f0000005940)=ANY=[@ANYBLOB="a00000000000000000000000020000006b0f47853aa2219b1a09d2bcaff44903cb4814fc3846b8e96428a5740bf9a730f4dd4ae18258413a99e64db48bef21d2c5bc6a866dd86fddb69d2fa96f80bb5bd61ff1193311593747a532a26ef750f06e08eefd980ff537ee7a9624f70c643590c5904c919c279eab266ea3298cc17e3c48a81ef2dcbc37af2a7d846d3779da58002ab1c1721d6b5c95045700000000980000000000000084000000feffffff8238e1064f2e4f4f871368913582d21d7646fe285de6a97998e852ed1847f4ed1cc1a879d239f50f14e7a1ba7153df67e6c09243200612acb4b8bd614f06c943f78ef8e2c7a2e49e2f84c09d3bbbe3a1d15b190bad43eea030b61fa4c0d5b6dd1926b6eae0d70fb53298e169f3f8600e8d9eb4efac1ab8126d9b74a731aa0d840e2100000000000008010000000000001701000085fd0000fc028905f1ed7aca7ebc172fb8ac8b2a9e62decaaec3795d5836aa833c191f59d120af0c4f6bd03ea392b5603fae8b85b871a44bfa2c10c66e93417ac8719b30e0c3d19338c834349e34c6e28f569ec3b5f0e0b994b2cf240469ecc3916ea73863610732420dcb792cc4d4eb5d4912a651b0f2758ebd28316dc9a2d593d93d9ddb722f86a4a24ba205896dd7da95c4bca0fc79312ce977e5f0e95275d47ba6168a929d5dde108e262621e45312705fd052dec52690744160d7ca9835d46df96ab68ac7840b5715e8c0e96516dd202245884c042ce77854062373819c7cbe79c777f369adb6c927789cd07307961c3c93e2e91bd900000000b8000000000000000f0100000800000088ea8d213c246159389a73390f042b6450de3d866bdc56dc7585dfbc5190fc12453d1862dbf1db7b4189c70fa8fc8fbc0c7d722013a002719f5caab2d93b9ae2d027a0c24361faef751392b6a83eb20f2a84950969469e317065287c7ea865e897d85d9c3e954484d4a1eac0d4723069de85ef0090b0a1c3c826504bb5ed1f6fa24aeef7e395e3860e18a075b79f6ea2ce748c5609537db0068032ca1ab96877bc6268c76a1d0000"], 0x2f8}, 0x0) 1m38.749104856s ago: executing program 5 (id=433): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r4, 0x3}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x74, r6, {0x0, 0xa}, {0xfff1, 0x9}, {0x9, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x46}, 0x20004844) (fail_nth: 2) 1m38.021650999s ago: executing program 5 (id=436): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f00000003c0)={0x1b, "62993a48ef82ebdb24b3547ef66371c679a4be6f1b9a57cb21a8f0e698f52ce3c1e4e3ef595ff76c1d8e4ff7db1708b9cf957817af804de33f95a2dbbad62392afb763f864bc42c24ecffc0b8fd8502b8502e315a32d823a13fd166000fbc3317ebd668b896af50974dc39752d201fe330abb79bd477f8e75a4e42711990dd31"}) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000000)={0x76}) 1m38.021148661s ago: executing program 5 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount$nfs(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x880f, &(0x7f00000000c0)=ANY=[@ANYBLOB='softerr,context,\x00']) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20842, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000019b00), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000019b80)=0x15) ioctl$TCSETS(r2, 0x80204705, &(0x7f0000019bc0)={0x8, 0x8, 0x609152b0, 0x2, 0xe, "3eccd2000500"}) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='syscall\x00') pread64(r3, &(0x7f0000000b00)=""/102356, 0x18fd4, 0x200) socket$packet(0x11, 0x3, 0x300) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000019c00), 0x200000, 0x0) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000019c80)={0x2, &(0x7f0000019c40)=[{}, {}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000019cc0)={0x0, 0x0, &(0x7f0000019d00)={&(0x7f0000019dc0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000580)={r5, &(0x7f0000019b00), &(0x7f0000019b40)=""/10, 0x2}, 0x20) writev(r1, &(0x7f0000000180)=[{&(0x7f0000019d40)="e1", 0x1}], 0x1) r7 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000019f40)={0x0, 0x0, &(0x7f0000019f80)={&(0x7f0000019fc0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000001a000)={0x0, 0x0, &(0x7f000001a040)={&(0x7f000001a080)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff3}, {0x0, 0xfff3}, {0x9, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'wg2\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) getsockname$packet(r4, &(0x7f000001a100)={0x11, 0x0, 0x0}, &(0x7f000001a140)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f000001a200)={r1, 0x58, &(0x7f000001a180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f000001a2c0)={'syztnl2\x00', &(0x7f000001a240)={'gretap0\x00', 0x0, 0x700, 0x0, 0xd73, 0x10000, {{0xe, 0x4, 0x1, 0x0, 0x38, 0x68, 0x0, 0x0, 0x4, 0x0, @empty, @remote, {[@generic={0x83, 0xe, "bef217f0cba21d05b020dd4e"}, @noop, @timestamp_prespec={0x44, 0x14, 0x2b, 0x3, 0x3, [{@broadcast, 0x9}, {@rand_addr=0x64010101, 0x4}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f000001a500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f000001a4c0)={&(0x7f000001a300)={0x190, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) tee(r7, r8, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 1m37.901692925s ago: executing program 5 (id=438): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xe}, {0x0, 0xfff3}, {0xe, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}]}}]}, 0x38}, 0x1, 0xf3ff, 0x0, 0x20041090}, 0x4000) 1m37.901185545s ago: executing program 5 (id=439): mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./tracing\x00', 0x1ff) mkdir(&(0x7f0000000140)='my_debugfs\x00', 0x144) mount(0x0, &(0x7f0000000280)='my_debugfs\x00', &(0x7f00000003c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='my_debugfs/asoc/dais\x00', 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./tracing\x00', &(0x7f0000001540)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./tracing/trace_clock\x00', 0x1, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000080), 0x0) close(r1) syz_clone(0x80881000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f00000003c0)}, 0x31) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 1m37.749662122s ago: executing program 5 (id=440): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x88040, 0x0) fcntl$getflags(r1, 0x401) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="68000000420001000000000000000000030100000f0000004800010000112233445566778899aabb08002c00001c0000000001061500010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e8f67a6eae8c74bb6d88367cdb0c804000280040003"], 0x68}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/current\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./tracing\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) semctl$GETZCNT(0x0, 0x3, 0xf, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) pselect6(0x40, &(0x7f00000005c0)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x8, 0x8000001000000000, 0x7}, 0x0, &(0x7f0000000600)={0x1f, 0x400000000000, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x102}, &(0x7f0000000640)={0x0, 0x989680}, 0x0) read$eventfd(r5, 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m35.088518265s ago: executing program 35 (id=271): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000003c0), 0x2000400, &(0x7f0000000400)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000440)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000480)=@nullb, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/devices.allow\x00', 0x2, 0x48) mount$bind(0x0, &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 1m26.862706879s ago: executing program 36 (id=409): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xb, &(0x7f0000004680)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000004700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000200)=r2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000004740)=""/4060, &(0x7f0000005740)=0xfdc) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='3', 0x4e) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000480), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1fe) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="0001"], 0x38}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./mnt\x00', &(0x7f0000000240)='securityfs\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20004085}, 0x8000890) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0x78) close(r6) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r7, &(0x7f0000000680)=""/16384, 0x4000) sendmsg$kcm(r1, &(0x7f0000005c40)={&(0x7f0000005780)=@rxrpc=@in4={0x21, 0x9, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005800)="32048b913c77506922e7625e219c75dbb5653d5431170dfdb257fe0cf1eaf704934c533b4e2b15e077731df3a17393388b288f", 0x33}, {&(0x7f0000005840)="b9e1563fe46662e67ba812dbcb10188242cb7cd8fda41199da42f6cbe95069e69dda", 0x22}, {&(0x7f0000005880)="4432d35b7d24798593f4f4b1782a7174dddd09121ab04c6e9e12c462484b2902d5df4889685350ea", 0x28}, {&(0x7f00000058c0)="3d9579cd5a99b2eec3781311cd7e0f69b671520b", 0x14}], 0x4, &(0x7f0000005940)=ANY=[@ANYBLOB="a00000000000000000000000020000006b0f47853aa2219b1a09d2bcaff44903cb4814fc3846b8e96428a5740bf9a730f4dd4ae18258413a99e64db48bef21d2c5bc6a866dd86fddb69d2fa96f80bb5bd61ff1193311593747a532a26ef750f06e08eefd980ff537ee7a9624f70c643590c5904c919c279eab266ea3298cc17e3c48a81ef2dcbc37af2a7d846d3779da58002ab1c1721d6b5c95045700000000980000000000000084000000feffffff8238e1064f2e4f4f871368913582d21d7646fe285de6a97998e852ed1847f4ed1cc1a879d239f50f14e7a1ba7153df67e6c09243200612acb4b8bd614f06c943f78ef8e2c7a2e49e2f84c09d3bbbe3a1d15b190bad43eea030b61fa4c0d5b6dd1926b6eae0d70fb53298e169f3f8600e8d9eb4efac1ab8126d9b74a731aa0d840e2100000000000008010000000000001701000085fd0000fc028905f1ed7aca7ebc172fb8ac8b2a9e62decaaec3795d5836aa833c191f59d120af0c4f6bd03ea392b5603fae8b85b871a44bfa2c10c66e93417ac8719b30e0c3d19338c834349e34c6e28f569ec3b5f0e0b994b2cf240469ecc3916ea73863610732420dcb792cc4d4eb5d4912a651b0f2758ebd28316dc9a2d593d93d9ddb722f86a4a24ba205896dd7da95c4bca0fc79312ce977e5f0e95275d47ba6168a929d5dde108e262621e45312705fd052dec52690744160d7ca9835d46df96ab68ac7840b5715e8c0e96516dd202245884c042ce77854062373819c7cbe79c777f369adb6c927789cd07307961c3c93e2e91bd900000000b8000000000000000f0100000800000088ea8d213c246159389a73390f042b6450de3d866bdc56dc7585dfbc5190fc12453d1862dbf1db7b4189c70fa8fc8fbc0c7d722013a002719f5caab2d93b9ae2d027a0c24361faef751392b6a83eb20f2a84950969469e317065287c7ea865e897d85d9c3e954484d4a1eac0d4723069de85ef0090b0a1c3c826504bb5ed1f6fa24aeef7e395e3860e18a075b79f6ea2ce748c5609537db0068032ca1ab96877bc6268c76a1d0000"], 0x2f8}, 0x0) 1m22.716682099s ago: executing program 37 (id=440): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x88040, 0x0) fcntl$getflags(r1, 0x401) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="68000000420001000000000000000000030100000f0000004800010000112233445566778899aabb08002c00001c0000000001061500010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e8f67a6eae8c74bb6d88367cdb0c804000280040003"], 0x68}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/current\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./tracing\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) semctl$GETZCNT(0x0, 0x3, 0xf, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) pselect6(0x40, &(0x7f00000005c0)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x8, 0x8000001000000000, 0x7}, 0x0, &(0x7f0000000600)={0x1f, 0x400000000000, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x102}, &(0x7f0000000640)={0x0, 0x989680}, 0x0) read$eventfd(r5, 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 47.38119287s ago: executing program 9 (id=937): ioctl$CDROM_SELECT_DISC(0xffffffffffffffff, 0x80081272, 0x1000000000000002) 47.330473463s ago: executing program 9 (id=939): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) setitimer(0x0, &(0x7f00000001c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x7fffffffffffffff]}, 0x8) mkdir(&(0x7f0000000240)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000280)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000001480)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000001500)='./control\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./debug/kvm/exits\x00', 0x1, 0x1c4) write(r3, &(0x7f0000000140)='0', 0x1) ioctl$OCFS2_IOC_GROUP_EXTEND(r3, 0x40046f01, &(0x7f0000000400)=0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22401, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_emit_ethernet(0xfffffffffffffd10, &(0x7f0000000440)={@random="03f820eb2a19", @local, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x5, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0xaa, 0xfe, "e7", "afd3cb", 0x8848, "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"}}}}}, &(0x7f00000002c0)={0x1, 0x0, [0x2a, 0x9a7, 0x8ba, 0x6db]}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) chdir(&(0x7f00000003c0)='./debug\x00') r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000380)=@x86={0x49, 0x3, 0x7, 0x0, 0xf84, 0x9a, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0xfc, 0x0, 0x0, '\x00', 0xd, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) 46.407197776s ago: executing program 9 (id=946): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00') syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0x11, 0x0, 0x0, 0x40}}}, &(0x7f00000004c0)=0x0) syz_ublk_setup_queues(r0, r1, &(0x7f0000000500)={0x0, 0xc1, 0x10, 0xfffffff5, 0x230}, 0x0, 0x1, 0x0, 0x0) 46.327582242s ago: executing program 9 (id=947): ioctl$CDROM_SELECT_DISC(0xffffffffffffffff, 0x80081272, 0x1000000000000002) 46.326956579s ago: executing program 9 (id=950): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x387f3605) ptrace$pokeuser(0x6, r0, 0x358, 0xffff8880a130f000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), 0x1000008c, 0x0, 0xfffffffffffffcde}, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/usb/usbmon/0s\x00', 0x0, 0x80) pread64$ublk_ch(r2, 0x0, 0x0, 0x4) clock_gettime(0x0, &(0x7f0000000080)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000500)={{0x80, 0xbd}, 'port1\x00', 0x12, 0x80001, 0x1, 0x8000008, 0x3, 0x32cbe4ce, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000005c0)={0x800100, 0x101, 0x6, 0xe1d9, 0x4}) read(r3, &(0x7f0000000640)=""/145, 0x91) clock_gettime(0x0, &(0x7f00000000c0)) splice(r1, &(0x7f0000000040)=0x8, r1, &(0x7f0000000180)=0x2, 0x8, 0x8) set_mempolicy(0x3, &(0x7f0000000700)=0xffffffffffffffff, 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x40002, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x0) mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(r4, &(0x7f0000000100)='./file1\x00', 0x101501, 0xa4) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb29e0000, 0x0, 0x31, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) 46.098841732s ago: executing program 9 (id=958): mq_open(&(0x7f0000000480)=',):\x00', 0x40, 0xf0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023f30000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="4005010008eb38a981001a4f30e7971853c40400815a4200758147365d8729e950b74af71bad96b4e3e9a744f88550fbf2d55666"], 0x4) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x208880, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 30.509461423s ago: executing program 38 (id=958): mq_open(&(0x7f0000000480)=',):\x00', 0x40, 0xf0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023f30000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="4005010008eb38a981001a4f30e7971853c40400815a4200758147365d8729e950b74af71bad96b4e3e9a744f88550fbf2d55666"], 0x4) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x208880, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 3.066783138s ago: executing program 8 (id=1678): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="1af25708cea824f082388cca0352df562a68e4b8906f5bf393f92299924960323b4f141dd2f990d6587b5ab7fa93499f54375b5e3383d96b3b964281d4", 0x3d}, {&(0x7f0000000340)="12b9f0c713567400da59cc4d149db617d1a61f1c52fe4dc1ae5e4d67e285eb8e3762f7778453d078157cec40592c77569f9b897a03b78c23ef6985307a08cdecfb73392836c1e8cdc7e2647d31ad022844cc66592a68c9aa7687a126049c2ec8e89348cec0f28aa984bd9bf21878b238339716fce56a8f570bded2839b68e27a123a4133cc905e41b725133a08cb16827066834ec27dc94e9dd42991b0", 0x9d}], 0x2, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x50}, 0x24000000) 3.06646357s ago: executing program 8 (id=1679): timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) (async) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r3, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x204031, 0xffffffffffffffff, 0xffffd000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) r6 = memfd_create(&(0x7f00000006c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) fcntl$addseals(r6, 0x409, 0x3f) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,aes)\x00'}, 0x58) close_range(r8, 0xffffffffffffffff, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x40, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1.670991655s ago: executing program 8 (id=1698): socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100)=0x7, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/packet\x00') lseek(r0, 0x20000000000002, 0x1) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000005c0)={0xa, 0x5e22, 0x0, @empty, 0xfffffffd}, 0x1c) listen(r3, 0x0) bind$inet6(r2, &(0x7f0000000640)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.487057881s ago: executing program 3 (id=1701): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r1 = fsopen(&(0x7f0000000080)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='crush_location\x00', &(0x7f0000000100)='rack:foo\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) accept$unix(r2, 0x0, &(0x7f0000000940)) 1.368458551s ago: executing program 3 (id=1704): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@loopback, @in=@multicast2, 0x1, 0x714, 0xe23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x100004d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237b}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x42, 0xfffffffc, 0xfff}, 0x70bd25, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x6, 0x20000000}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) 1.189724418s ago: executing program 3 (id=1708): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000180)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x1, 0x1}, 0x4) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f00000001c0)=@manufact={0x4, 0x1, 0x800, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./tracing\x00', &(0x7f0000001540)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./tracing/trace_clock\x00', 0x1, 0x0) write$P9_RLERROR(r4, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 1.071754853s ago: executing program 3 (id=1712): timer_create(0x0, &(0x7f0000001540)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000001580)) timer_settime(0x0, 0x0, &(0x7f00000015c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) symlinkat(&(0x7f0000001640)='.\x00', 0xffffffffffffff9c, &(0x7f0000001680)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000016c0)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001700)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780), &(0x7f00000017c0)=@v2={0x2000000, [{0xd5a, 0x5}, {0x3, 0x1}]}, 0x14, 0x1) mount$overlay(0x0, &(0x7f0000001800)='./bus\x00', &(0x7f0000001840), 0xa14000, &(0x7f0000001880)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000018c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001900)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000001940)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001980)='./file7/file0\x00', 0x0) syz_open_dev$dvb_frontend(&(0x7f0000001600), 0x0, 0x2) r0 = syz_clone(0x806491, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x12) ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000001280)={&(0x7f0000000280)=""/4096, 0x1000}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20d00, 0x100) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x11) r2 = syz_open_dev$dvb_demux(&(0x7f00000012c0), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001480)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r3 = syz_open_dev$dvb_demux(&(0x7f00000014c0), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001500)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0), 0x200002, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000500000001000000000000010400000020"], 0x0, 0x2d}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x20, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001400)={r6, &(0x7f0000001440)="03", &(0x7f0000001480), 0x20000}, 0x20) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000040)=""/139, &(0x7f0000000100)=0x8) 671.190597ms ago: executing program 0 (id=1719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r2, @ANYBLOB="050003"], 0x28}}, 0x80) 670.48992ms ago: executing program 0 (id=1721): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) setitimer(0x0, &(0x7f00000001c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x7fffffffffffffff]}, 0x8) mkdir(&(0x7f0000000240)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_emit_ethernet(0xfffffffffffffd10, &(0x7f0000000440)={@random="03f820eb2a19", @local, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x5, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0xaa, 0xfe, "e7", "afd3cb", 0x8848, "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"}}}}}, &(0x7f00000002c0)={0x1, 0x0, [0x2a, 0x9a7, 0x8ba, 0x6db]}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000380)=@x86={0x49, 0x3, 0x7, 0x0, 0xf84, 0x9a, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0xfc, 0x0, 0x0, '\x00', 0xd, 0x200}) 571.175109ms ago: executing program 7 (id=1723): sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x20004040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x301, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000280)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 570.792786ms ago: executing program 0 (id=1724): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) 480.807035ms ago: executing program 0 (id=1725): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a4202, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000240)) r2 = syz_open_pts(r1, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xf) ioctl$TCSBRK(r2, 0x400455c8, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0xc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000340)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0x2f) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0xcf) syz_open_dev$sndctrl(&(0x7f00000004c0), 0x84, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f00000001c0)='7', 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 440.457329ms ago: executing program 3 (id=1726): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000540)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000006c0)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000800)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 438.282958ms ago: executing program 8 (id=1727): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000340)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0x3, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xc, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0x80000000, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x240) ppoll(&(0x7f0000000100)=[{r0, 0x4006}, {r0, 0x1000}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={[0x1]}, 0x8) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000600)={0x0, &(0x7f0000000640)="a1270082924441", 0x7}) 389.339173ms ago: executing program 0 (id=1728): socket$kcm(0x10, 0x2, 0x0) 388.325763ms ago: executing program 7 (id=1729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r2, @ANYBLOB="050003"], 0x28}}, 0x80) 388.025853ms ago: executing program 0 (id=1730): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x80010, 0xffffffffffffffff, 0x91b3e000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000280)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) fallocate(r0, 0x1, 0x24, 0x7) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @local}, &(0x7f00000003c0)=0x10) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @broadcast}, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800, 0x5, 0xb41}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000300)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000340)) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000080)='bfs\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000004c0)={0x100000}) r7 = syz_io_uring_setup(0x7890, &(0x7f0000000500)={0x0, 0xd528, 0x10000, 0x5, 0x18b}, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000640)=@IORING_OP_FUTEX_WAIT={0x33, 0x5, 0x0, 0x2, 0x101, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x8}}) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) fallocate(r6, 0x1, 0x0, 0x100000) getgroups(0x2, &(0x7f0000000040)=[0xee01, 0xffffffffffffffff]) getgroups(0x2, &(0x7f0000000140)=[r11, r11]) setresgid(r11, r11, r12) r13 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/events/sched/sched_switch/trigger\x00', 0x0, 0x0) lseek(r13, 0x4, 0x0) sendfile(r13, r13, &(0x7f0000000180)=0xffffffffffffffff, 0x5) 330.970729ms ago: executing program 3 (id=1731): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r4, 0x3}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x14, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x74, r6, {0x0, 0xa}, {0xfff1, 0x9}, {0x9, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x46}, 0x20004844) 330.628375ms ago: executing program 7 (id=1732): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000088c15bda1993d0458daff59689", @ANYRES32=0x0, @ANYBLOB="0000001f00000000010000020a8385fc9f6aeec2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000fa000000b766cdfbc925207a6ac354ee6b0000000000"], 0x48) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0xc8202) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8402, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x48d, 0x0, 0x1fe}]}) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r1, &(0x7f0000001600), &(0x7f0000001700)=@udp=r0}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000002000)=ANY=[@ANYBLOB="18573483", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000b70300000000000085000000330000009500000000000000"], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r6, 0x0, 0xe, 0x0, &(0x7f0000005000)="00112233445566778899aabbccdd", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0}, 0x50) 191.008338ms ago: executing program 8 (id=1733): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) setitimer(0x0, &(0x7f00000001c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x7fffffffffffffff]}, 0x8) mkdir(&(0x7f0000000240)='./control\x00', 0x111) close(r0) inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = gettid() fcntl$setown(r0, 0x8, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_emit_ethernet(0xfffffffffffffd10, &(0x7f0000000440)={@random="03f820eb2a19", @local, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x5, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0xaa, 0xfe, "e7", "afd3cb", 0x8848, "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"}}}}}, &(0x7f00000002c0)={0x1, 0x0, [0x2a, 0x9a7, 0x8ba, 0x6db]}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000380)=@x86={0x49, 0x3, 0x7, 0x0, 0xf84, 0x9a, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0xfc, 0x0, 0x0, '\x00', 0xd, 0x200}) 110.999759ms ago: executing program 7 (id=1734): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) 110.701254ms ago: executing program 7 (id=1735): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0100001000130700000060ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 60.297182ms ago: executing program 7 (id=1743): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r4, 0x3}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x74, r6, {0x0, 0xa}, {0xfff1, 0x9}, {0x9, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x46}, 0x20004844) (fail_nth: 5) 0s ago: executing program 8 (id=1737): timer_create(0x0, &(0x7f0000001540)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000001580)) timer_settime(0x0, 0x0, &(0x7f00000015c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) symlinkat(&(0x7f0000001640)='.\x00', 0xffffffffffffff9c, &(0x7f0000001680)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000016c0)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001700)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780), &(0x7f00000017c0)=@v2={0x2000000, [{0xd5a, 0x5}, {0x3, 0x1}]}, 0x14, 0x1) mount$overlay(0x0, &(0x7f0000001800)='./bus\x00', &(0x7f0000001840), 0xa14000, &(0x7f0000001880)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000018c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001900)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000001940)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001980)='./file7/file0\x00', 0x0) syz_open_dev$dvb_frontend(&(0x7f0000001600), 0x0, 0x2) r0 = syz_clone(0x806491, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x12) ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000001280)={&(0x7f0000000280)=""/4096, 0x1000}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20d00, 0x100) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x11) r2 = syz_open_dev$dvb_demux(&(0x7f00000012c0), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001480)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r3 = syz_open_dev$dvb_demux(&(0x7f00000014c0), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001500)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0), 0x200002, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000500000001000000000000010400000020"], 0x0, 0x2d}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x20, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001400)={r6, &(0x7f0000001440)="03", &(0x7f0000001480), 0x20000}, 0x20) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000040)=""/139, &(0x7f0000000100)=0x8) kernel console output (not intermixed with test programs): ? __pfx____sys_sendmsg+0x10/0x10 [ 102.280554][ T9164] ? get_pid_task+0x106/0x250 [ 102.280575][ T9164] ? find_held_lock+0x2b/0x80 [ 102.280600][ T9164] __sys_sendmsg+0x160/0x210 [ 102.280612][ T9164] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.280632][ T9164] do_syscall_64+0x123/0x790 [ 102.280650][ T9164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.280661][ T9164] RIP: 0033:0x7f30e1d9e559 [ 102.280670][ T9164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.280682][ T9164] RSP: 002b:00007f30e2c0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.280706][ T9164] RAX: ffffffffffffffda RBX: 00007f30e2025fa0 RCX: 00007f30e1d9e559 [ 102.280712][ T9164] RDX: 0000000004008094 RSI: 00002000000001c0 RDI: 0000000000000003 [ 102.280719][ T9164] RBP: 00007f30e2c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 102.280725][ T9164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.280732][ T9164] R13: 00007f30e2026038 R14: 00007f30e2025fa0 R15: 00007ffd5a70ea28 [ 102.280746][ T9164] [ 102.323854][ T9167] openvswitch: netlink: Flow actions attr not present in new flow. [ 102.330284][ T9167] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 102.441975][ T8094] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -71 [ 102.447840][ T8094] usb 12-1: USB disconnect, device number 7 [ 102.612634][ T9186] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 102.662443][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.9.847'. [ 104.314107][ T1174] Bluetooth: hci1: Frame reassembly failed (-84) [ 104.910719][ T9139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.953901][ T5732] Bluetooth: hci3: unexpected event 0x2f length: 509 > 255 [ 104.964522][ T9238] FAULT_INJECTION: forcing a failure. [ 104.964522][ T9238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.964543][ T9238] CPU: 3 UID: 0 PID: 9238 Comm: syz.0.855 Not tainted syzkaller #0 PREEMPT(full) [ 104.964556][ T9238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.964563][ T9238] Call Trace: [ 104.964567][ T9238] [ 104.964572][ T9238] dump_stack_lvl+0x100/0x190 [ 104.964592][ T9238] should_fail_ex.cold+0x5/0xa [ 104.964608][ T9238] _copy_to_user+0x32/0xd0 [ 104.964625][ T9238] simple_read_from_buffer+0xcb/0x170 [ 104.964643][ T9238] proc_fail_nth_read+0x1af/0x230 [ 104.964660][ T9238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.964678][ T9238] ? rw_verify_area+0xce/0x6d0 [ 104.964690][ T9238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.964706][ T9238] vfs_read+0x1e4/0xb40 [ 104.964720][ T9238] ? lock_acquire+0x1d1/0x380 [ 104.964733][ T9238] ? __fget_files+0x34/0x3d0 [ 104.964749][ T9238] ? __pfx_vfs_read+0x10/0x10 [ 104.964760][ T9238] ? find_held_lock+0x2b/0x80 [ 104.964801][ T9238] ? __fget_files+0x215/0x3d0 [ 104.964819][ T9238] ? __fget_files+0x21f/0x3d0 [ 104.964839][ T9238] ksys_read+0x12a/0x250 [ 104.964852][ T9238] ? __pfx_ksys_read+0x10/0x10 [ 104.964865][ T9238] ? v4l2_ioctl+0x1c5/0x250 [ 104.964883][ T9238] do_syscall_64+0x123/0x790 [ 104.964901][ T9238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.964913][ T9238] RIP: 0033:0x7f30e1d5ed8e [ 104.964922][ T9238] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.964933][ T9238] RSP: 002b:00007f30e2c0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.964944][ T9238] RAX: ffffffffffffffda RBX: 00007f30e2c0e6c0 RCX: 00007f30e1d5ed8e [ 104.964951][ T9238] RDX: 000000000000000f RSI: 00007f30e2c0e0a0 RDI: 0000000000000004 [ 104.964958][ T9238] RBP: 00007f30e2c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 104.964964][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.964971][ T9238] R13: 00007f30e2026038 R14: 00007f30e2025fa0 R15: 00007ffd5a70ea28 [ 104.964986][ T9238] [ 105.076133][ T9243] FAULT_INJECTION: forcing a failure. [ 105.076133][ T9243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.076154][ T9243] CPU: 3 UID: 0 PID: 9243 Comm: syz.0.859 Not tainted syzkaller #0 PREEMPT(full) [ 105.076166][ T9243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.076173][ T9243] Call Trace: [ 105.076177][ T9243] [ 105.076181][ T9243] dump_stack_lvl+0x100/0x190 [ 105.076202][ T9243] should_fail_ex.cold+0x5/0xa [ 105.076219][ T9243] _copy_to_user+0x32/0xd0 [ 105.076236][ T9243] simple_read_from_buffer+0xcb/0x170 [ 105.076254][ T9243] proc_fail_nth_read+0x1af/0x230 [ 105.076271][ T9243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.076288][ T9243] ? rw_verify_area+0xce/0x6d0 [ 105.076300][ T9243] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.076317][ T9243] vfs_read+0x1e4/0xb40 [ 105.076330][ T9243] ? lock_acquire+0x1d1/0x380 [ 105.076344][ T9243] ? __fget_files+0x34/0x3d0 [ 105.076359][ T9243] ? __pfx_vfs_read+0x10/0x10 [ 105.076371][ T9243] ? find_held_lock+0x2b/0x80 [ 105.076387][ T9243] ? __fget_files+0x215/0x3d0 [ 105.076405][ T9243] ? __fget_files+0x21f/0x3d0 [ 105.076425][ T9243] ksys_read+0x12a/0x250 [ 105.076438][ T9243] ? __pfx_ksys_read+0x10/0x10 [ 105.076455][ T9243] do_syscall_64+0x123/0x790 [ 105.076473][ T9243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.076485][ T9243] RIP: 0033:0x7f30e1d5ed8e [ 105.076494][ T9243] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.076505][ T9243] RSP: 002b:00007f30e2becfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.076516][ T9243] RAX: ffffffffffffffda RBX: 00007f30e2bed6c0 RCX: 00007f30e1d5ed8e [ 105.076523][ T9243] RDX: 000000000000000f RSI: 00007f30e2bed0a0 RDI: 0000000000000004 [ 105.076529][ T9243] RBP: 00007f30e2bed090 R08: 0000000000000000 R09: 0000000000000000 [ 105.076536][ T9243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.076542][ T9243] R13: 00007f30e2026128 R14: 00007f30e2026090 R15: 00007ffd5a70ea28 [ 105.076557][ T9243] [ 105.217456][ T9255] netlink: 40 bytes leftover after parsing attributes in process `syz.8.862'. [ 105.299462][ T9264] openvswitch: netlink: Flow key attribute not present in set flow. [ 105.576426][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 105.576440][ T42] audit: type=1400 audit(1792401370.619:776): avc: denied { getopt } for pid=9275 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.319441][ T5732] Bluetooth: hci1: command 0x1003 tx timeout [ 106.319698][ T5740] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 106.364583][ T9287] nvme_fabrics: unknown parameter or missing value 'tr%vcid=4369' in ctrl creation request [ 107.790930][ T9294] bond0: (slave team0): Releasing backup interface [ 107.797990][ T9294] bridge_slave_0: left allmulticast mode [ 107.798013][ T9294] bridge_slave_0: left promiscuous mode [ 107.798325][ T9294] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.806413][ T9294] bridge_slave_1: left allmulticast mode [ 107.806429][ T9294] bridge_slave_1: left promiscuous mode [ 107.806594][ T9294] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.822804][ T9294] bond0: (slave bond_slave_0): Releasing backup interface [ 107.825745][ T9294] bond0: (slave bond_slave_1): Releasing backup interface [ 107.833681][ T9294] team0: Port device team_slave_0 removed [ 107.839592][ T9294] team0: Port device team_slave_1 removed [ 107.840208][ T9294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.840220][ T9294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.843491][ T9294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.843510][ T9294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.847713][ T9294] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 107.848805][ T8094] lo speed is unknown, defaulting to 1000 [ 107.892975][ T9294] vlan0: entered promiscuous mode [ 107.896352][ T9294] team0: Port device vlan0 added [ 108.497676][ T9268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.575245][ T9308] netlink: 'syz.0.879': attribute type 11 has an invalid length. [ 108.613391][ T9314] ipt_ah: unknown flags FF [ 108.616122][ T9315] ipt_ah: unknown flags FF [ 108.662742][ T9327] xt_esp: unknown flags DD [ 108.693148][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.8.886'. [ 108.836104][ T9343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.889'. [ 108.836121][ T9343] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 109.218268][ T5809] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 109.368997][ T5809] usb 13-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 109.370022][ T5809] usb 13-1: config index 0 descriptor too short (expected 65374, got 45) [ 109.371888][ T5809] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.371908][ T5809] usb 13-1: Product: syz [ 109.371920][ T5809] usb 13-1: Manufacturer: syz [ 109.371932][ T5809] usb 13-1: SerialNumber: syz [ 109.579570][ T9339] netlink: 24 bytes leftover after parsing attributes in process `syz.8.890'. [ 109.625081][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.8.890'. [ 109.651364][ T5809] rtl8150 13-1:1.0: couldn't reset the device [ 109.651502][ T5809] rtl8150 13-1:1.0: probe with driver rtl8150 failed with error -5 [ 109.653801][ T5809] usb 13-1: USB disconnect, device number 3 [ 110.163952][ T9348] FAULT_INJECTION: forcing a failure. [ 110.163952][ T9348] name failslab, interval 1, probability 0, space 0, times 0 [ 110.163985][ T9348] CPU: 2 UID: 0 PID: 9348 Comm: syz.8.892 Not tainted syzkaller #0 PREEMPT(full) [ 110.164013][ T9348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.164025][ T9348] Call Trace: [ 110.164032][ T9348] [ 110.164041][ T9348] dump_stack_lvl+0x100/0x190 [ 110.164075][ T9348] should_fail_ex.cold+0x5/0xa [ 110.164103][ T9348] should_failslab+0xc2/0x120 [ 110.164133][ T9348] kmem_cache_alloc_noprof+0x92/0x6a0 [ 110.164160][ T9348] ? alloc_empty_file+0x5b/0x1c0 [ 110.164184][ T9348] alloc_empty_file+0x5b/0x1c0 [ 110.164203][ T9348] path_openat+0xdb/0x2450 [ 110.164236][ T9348] ? __pfx_path_openat+0x10/0x10 [ 110.164281][ T9348] do_file_open+0x20e/0x430 [ 110.164312][ T9348] ? __pfx_do_file_open+0x10/0x10 [ 110.164359][ T9348] ? _raw_spin_unlock+0x28/0x50 [ 110.164385][ T9348] ? alloc_fd+0x471/0x7a0 [ 110.164422][ T9348] do_sys_openat2+0x10f/0x1e0 [ 110.164441][ T9348] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.164462][ T9348] ? irqentry_exit+0x2c9/0xa90 [ 110.164496][ T9348] __x64_sys_openat+0x12d/0x210 [ 110.164516][ T9348] ? __pfx___x64_sys_openat+0x10/0x10 [ 110.164537][ T9348] ? __might_fault+0x111/0x140 [ 110.164565][ T9348] do_syscall_64+0x123/0x790 [ 110.164596][ T9348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.164616][ T9348] RIP: 0033:0x7f64e5f9e559 [ 110.164633][ T9348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.164652][ T9348] RSP: 002b:00007f64e6eb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.164671][ T9348] RAX: ffffffffffffffda RBX: 00007f64e6225fa0 RCX: 00007f64e5f9e559 [ 110.164684][ T9348] RDX: 0000000000020080 RSI: 0000200000000a00 RDI: ffffffffffffff9c [ 110.164697][ T9348] RBP: 00007f64e6035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 110.164710][ T9348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.164721][ T9348] R13: 00007f64e6226038 R14: 00007f64e6225fa0 R15: 00007ffc1b703cb8 [ 110.164775][ T9348] [ 110.179688][ T42] audit: type=1400 audit(1792401375.229:777): avc: denied { mounton } for pid=9347 comm="syz.8.892" path="/95/proc/231/task/232/fail-nth" dev="proc" ino=29783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 110.191715][ T1162] Bluetooth: hci1: Frame reassembly failed (-84) [ 111.638727][ T9319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.693435][ T9354] device-mapper: ioctl: device name cannot contain '/' [ 111.725636][ T42] audit: type=1400 audit(1792401376.769:778): avc: denied { create } for pid=9355 comm="syz.0.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 111.725951][ T42] audit: type=1400 audit(1792401376.769:779): avc: denied { write } for pid=9355 comm="syz.0.896" path="socket:[27408]" dev="sockfs" ino=27408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 111.769031][ T42] audit: type=1400 audit(1792401376.819:780): avc: denied { read write } for pid=9357 comm="syz.9.897" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.769264][ T42] audit: type=1400 audit(1792401376.819:781): avc: denied { open } for pid=9357 comm="syz.9.897" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.769959][ T42] audit: type=1400 audit(1792401376.819:782): avc: denied { ioctl } for pid=9357 comm="syz.9.897" path="/dev/sg0" dev="devtmpfs" ino=720 ioctlcmd=0x2202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.770132][ T9358] team_slave_0: entered promiscuous mode [ 111.772071][ T9363] netlink: 148 bytes leftover after parsing attributes in process `syz.7.899'. [ 111.772869][ T9357] team_slave_0: left promiscuous mode [ 111.879709][ T9371] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 111.975303][ T9380] FAULT_INJECTION: forcing a failure. [ 111.975303][ T9380] name failslab, interval 1, probability 0, space 0, times 0 [ 111.975325][ T9380] CPU: 0 UID: 0 PID: 9380 Comm: syz.7.905 Not tainted syzkaller #0 PREEMPT(full) [ 111.975351][ T9380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.975358][ T9380] Call Trace: [ 111.975362][ T9380] [ 111.975367][ T9380] dump_stack_lvl+0x100/0x190 [ 111.975387][ T9380] should_fail_ex.cold+0x5/0xa [ 111.975403][ T9380] should_failslab+0xc2/0x120 [ 111.975419][ T9380] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 111.975434][ T9380] ? __alloc_skb+0x5b7/0x710 [ 111.975445][ T9380] ? __alloc_skb+0x140/0x710 [ 111.975457][ T9380] __alloc_skb+0x140/0x710 [ 111.975467][ T9380] ? __alloc_skb+0x5b7/0x710 [ 111.975477][ T9380] ? __pfx___alloc_skb+0x10/0x10 [ 111.975491][ T9380] netlink_alloc_large_skb+0x69/0x150 [ 111.975510][ T9380] netlink_sendmsg+0x680/0xda0 [ 111.975523][ T9380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.975535][ T9380] ? selinux_socket_sendmsg+0x198/0x2f0 [ 111.975553][ T9380] ____sys_sendmsg+0xa4d/0xbe0 [ 111.975566][ T9380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.975578][ T9380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.975595][ T9380] ? lock_acquire+0x1d1/0x380 [ 111.975608][ T9380] ? get_pid_task+0x2a/0x250 [ 111.975625][ T9380] ___sys_sendmsg+0x190/0x1e0 [ 111.975641][ T9380] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.975656][ T9380] ? get_pid_task+0x106/0x250 [ 111.975676][ T9380] ? find_held_lock+0x2b/0x80 [ 111.975702][ T9380] __sys_sendmsg+0x160/0x210 [ 111.975714][ T9380] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.975733][ T9380] do_syscall_64+0x123/0x790 [ 111.975752][ T9380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.975763][ T9380] RIP: 0033:0x7f6de3d9e559 [ 111.975773][ T9380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.975783][ T9380] RSP: 002b:00007f6de4c73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.975795][ T9380] RAX: ffffffffffffffda RBX: 00007f6de4025fa0 RCX: 00007f6de3d9e559 [ 111.975802][ T9380] RDX: 0000000004008094 RSI: 00002000000001c0 RDI: 0000000000000003 [ 111.975809][ T9380] RBP: 00007f6de4c73090 R08: 0000000000000000 R09: 0000000000000000 [ 111.975815][ T9380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.975822][ T9380] R13: 00007f6de4026038 R14: 00007f6de4025fa0 R15: 00007ffcdac86728 [ 111.975836][ T9380] [ 112.129789][ T42] audit: type=1400 audit(1792401377.179:783): avc: denied { ioctl } for pid=9385 comm="syz.7.908" path="socket:[29143]" dev="sockfs" ino=29143 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.130590][ T42] audit: type=1400 audit(1792401377.179:784): avc: denied { ioctl } for pid=9385 comm="syz.7.908" path="socket:[27444]" dev="sockfs" ino=27444 ioctlcmd=0x891e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 112.130987][ T42] audit: type=1400 audit(1792401377.179:785): avc: denied { write } for pid=9385 comm="syz.7.908" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 112.238316][ T5732] Bluetooth: hci1: command 0x1003 tx timeout [ 112.238332][ T5740] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 112.281694][ T9391] sd 0:0:0:0: PR command failed: 1026 [ 112.281720][ T9391] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 112.281740][ T9391] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 112.335460][ T42] audit: type=1400 audit(1792401377.379:786): avc: denied { read } for pid=9390 comm="syz.8.909" path="socket:[29949]" dev="sockfs" ino=29949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.387765][ T42] audit: type=1400 audit(1792401377.429:787): avc: denied { shutdown } for pid=9390 comm="syz.8.909" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.452146][ T9398] netlink: 'syz.9.911': attribute type 10 has an invalid length. [ 112.452623][ T9398] macvlan1: entered promiscuous mode [ 112.452819][ T9398] macvlan1: entered allmulticast mode [ 112.456690][ T9398] veth1_vlan: entered allmulticast mode [ 112.461326][ T9398] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 114.916313][ T9374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.033688][ T9415] bond1: entered allmulticast mode [ 115.033921][ T9415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.036506][ T9408] netlink: 68 bytes leftover after parsing attributes in process `syz.0.915'. [ 115.140432][ T9408] bond2: entered promiscuous mode [ 115.140711][ T9408] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.151271][ T9408] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 115.403570][ T9444] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 115.870446][ T9460] overlayfs: missing 'lowerdir' [ 116.036706][ T9464] netlink: 24 bytes leftover after parsing attributes in process `syz.9.927'. [ 116.904915][ T9468] overlay: ./file0 is not a directory [ 117.156378][ T9475] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 117.457039][ T9487] overlayfs: missing 'lowerdir' [ 117.486876][ T42] kauditd_printk_skb: 177 callbacks suppressed [ 117.486901][ T42] audit: type=1400 audit(1792401382.529:965): avc: denied { write } for pid=9486 comm="syz.8.941" name="usb_gadget" dev="configfs" ino=6028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 117.539745][ T9490] netlink: 24 bytes leftover after parsing attributes in process `syz.8.941'. [ 118.383347][ T9438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.447394][ T9512] overlay: ./file0 is not a directory [ 118.456277][ T9514] bond0: option mode: unable to set because the bond device is up [ 118.468079][ T9514] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 118.539954][ T9521] overlayfs: missing 'lowerdir' [ 118.626208][ T42] audit: type=1400 audit(1792401383.669:966): avc: denied { write } for pid=9520 comm="syz.0.952" name="usb_gadget" dev="configfs" ino=6028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.809742][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'. [ 118.813837][ T9536] nvme nvme0: failed to connect socket: -101 [ 118.994155][ T42] audit: type=1400 audit(1792401384.039:967): avc: denied { sqpoll } for pid=9543 comm="syz.0.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 119.100278][ T9549] 8021q: VLANs not supported on ip6_vti0 [ 119.162391][ T42] audit: type=1400 audit(1792401384.209:968): avc: denied { execute } for pid=9548 comm="syz.0.963" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 ** 1416 printk messages dropped ** [ 120.852494][ T9568] bond0: option mode: unable to set because the bond device is up [ 120.863309][ T9568] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 121.025070][ T9574] kvm_do_msr_access: 472 callbacks suppressed [ 121.446678][ T9579] kvm_intel: kvm [9573]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xc5c5 [ 121.458067][ T9579] kvm [9573]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x32f2 [ 121.459069][ T9579] kvm [9573]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x7e96 [ 121.735900][ T9602] netlink: 36 bytes leftover after parsing attributes in process `syz.7.984'. [ 122.078265][ C3] net_ratelimit: 91 callbacks suppressed [ 122.210760][ T8530] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 122.294583][ T9633] netlink: 36 bytes leftover after parsing attributes in process `syz.0.997'. [ 122.392119][ T8530] usb 13-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 122.396498][ T8530] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.396515][ T8530] usb 13-1: Product: syz [ 122.396528][ T8530] usb 13-1: Manufacturer: syz [ 122.396612][ T8530] usb 13-1: SerialNumber: syz [ 122.420209][ T8530] usb 13-1: config 0 descriptor?? [ 122.647009][ T8530] usb 13-1: USB disconnect, device number 4 [ 122.668549][ T9653] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1007'. [ 122.898124][ T9662] bond0: (slave bond_slave_0): Releasing backup interface [ 122.907858][ T9662] bond0: (slave bond_slave_1): Releasing backup interface [ 122.916001][ T9662] bond0: option mode: unable to set because the bond device is up [ 122.931114][ T9662] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 125.977376][ T9664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.043777][ T9689] bond0: option mode: unable to set because the bond device has slaves [ 126.051145][ T9689] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 126.063366][ T9691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.064861][ T9691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.145360][ T9695] trusted_key: encrypted_key: insufficient parameters specified [ 126.153548][ T9698] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3086567486 (3086567486 ns) > initial count (1784947667 ns). Using initial count to start timer. [ 126.573488][ T9710] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1028'. [ 126.627935][ T9713] overlayfs: missing 'lowerdir' [ 126.673508][ T42] audit: type=1400 audit(1792401391.719:969): avc: denied { write } for pid=9712 comm="syz.0.1029" name="usb_gadget" dev="configfs" ino=6028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.784433][ T9715] bond0: option mode: unable to set because the bond device has slaves [ 126.785037][ T9715] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 126.887419][ T9725] trusted_key: encrypted_key: insufficient parameters specified [ 127.128246][ C3] net_ratelimit: 80 callbacks suppressed [ 129.792722][ T9717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.858532][ T9738] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1038'. [ 129.866948][ T9743] overlayfs: missing 'lowerdir' [ 129.909339][ T9745] bond0: option mode: unable to set because the bond device has slaves [ 129.912304][ T9745] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 130.065028][ T9753] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3086567486 (3086567486 ns) > initial count (1784947667 ns). Using initial count to start timer. [ 130.167645][ T9761] trusted_key: encrypted_key: insufficient parameters specified [ 130.207677][ T9766] bond0: option mode: unable to set because the bond device has slaves [ 130.208987][ T9766] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 130.249939][ T9774] overlayfs: failed to resolve './file1': -2 [ 132.318278][ C2] net_ratelimit: 52 callbacks suppressed [ 132.650282][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.650329][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.233339][ T9769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.281896][ T9797] overlayfs: missing 'lowerdir' [ 133.295786][ T9792] trusted_key: encrypted_key: insufficient parameters specified [ 133.335519][ T9802] bond0: option mode: unable to set because the bond device has slaves [ 133.336005][ T9802] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 133.401015][ T9805] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3086567486 (3086567486 ns) > initial count (1784947667 ns). Using initial count to start timer. [ 133.488958][ T9817] overlayfs: failed to resolve './file1': -2 [ 134.325790][ T5732] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.327631][ T5732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.329281][ T5732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.337436][ T5732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.340392][ T5732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.582249][ T9825] rxe_eth0 speed is unknown, defaulting to 1000 [ 134.704364][ T9825] dummy0 speed is unknown, defaulting to 1000 [ 134.824618][ T9825] lo speed is unknown, defaulting to 1000 [ 135.045791][ T6109] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.097011][ T9825] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.102475][ T9825] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.102605][ T9825] bridge_slave_0: entered allmulticast mode [ 135.103791][ T9825] bridge_slave_0: entered promiscuous mode [ 135.110048][ T9825] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.110237][ T9825] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.110344][ T9825] bridge_slave_1: entered allmulticast mode [ 135.111540][ T9825] bridge_slave_1: entered promiscuous mode [ 135.141034][ T6109] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.163752][ T9825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.166079][ T9825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.191066][ T9825] team0: Port device team_slave_0 added [ 135.192438][ T9825] team0: Port device team_slave_1 added [ 135.228530][ T6109] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.235156][ T9825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.235165][ T9825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.235183][ T9825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.236814][ T9825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.236824][ T9825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.236843][ T9825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.293455][ T9825] hsr_slave_0: entered promiscuous mode [ 135.294281][ T9825] hsr_slave_1: entered promiscuous mode [ 135.294976][ T9825] debugfs: 'hsr0' already exists in 'hsr' [ 135.294991][ T9825] Cannot create hsr debugfs directory [ 135.325265][ T6109] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.670165][ T6109] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 135.671051][ T6109] veth1_vlan: left allmulticast mode [ 135.672579][ T6109] bond0 (unregistering): Released all slaves [ 136.177168][ T6109] hsr_slave_0: left promiscuous mode [ 136.177713][ T6109] hsr_slave_1: left promiscuous mode [ 136.190642][ T6109] veth1_macvtap: left promiscuous mode [ 136.190687][ T6109] veth0_macvtap: left promiscuous mode [ 136.190751][ T6109] veth1_vlan: left promiscuous mode [ 136.296003][ T6109] team0 (unregistering): Port device vlan0 removed [ 136.398395][ T5740] Bluetooth: hci1: command tx timeout [ 136.423746][ T9811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.521208][ T9849] bond0: option mode: unable to set because the bond device has slaves [ 136.522721][ T9849] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 136.526858][ T9852] overlayfs: missing 'lowerdir' [ 136.554271][ T9846] trusted_key: encrypted_key: insufficient parameters specified [ 136.602230][ T9858] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 136.616986][ T42] audit: type=1400 audit(1792401401.659:970): avc: denied { write } for pid=9854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.671040][ T42] audit: type=1400 audit(1792401401.719:971): avc: denied { write } for pid=9864 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.697766][ T5443] 8021q: adding VLAN 0 to HW filter on device eth26 [ 136.768145][ T42] audit: type=1400 audit(1792401401.809:972): avc: denied { write } for pid=9870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.809103][ T42] audit: type=1400 audit(1792401401.859:973): avc: denied { write } for pid=9876 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.811546][ T9877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1077'. [ 136.847510][ T5443] 8021q: adding VLAN 0 to HW filter on device eth27 [ 136.871438][ T8530] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 136.914724][ T42] audit: type=1400 audit(1792401401.959:974): avc: denied { write } for pid=9883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.962022][ T42] audit: type=1400 audit(1792401402.009:975): avc: denied { write } for pid=9886 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.017641][ T5443] 8021q: adding VLAN 0 to HW filter on device eth28 [ 137.021806][ T9889] bond0: option mode: unable to set because the bond device has slaves [ 137.024526][ T9889] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 137.050577][ T8530] usb 12-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 137.057125][ T8530] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.057136][ T8530] usb 12-1: Product: syz [ 137.057144][ T8530] usb 12-1: Manufacturer: syz [ 137.057152][ T8530] usb 12-1: SerialNumber: syz [ 137.060190][ T8530] usb 12-1: config 0 descriptor?? [ 137.107403][ T42] audit: type=1400 audit(1792401402.149:976): avc: denied { write } for pid=9894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.144234][ T9904] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1085'. [ 137.171519][ T42] audit: type=1400 audit(1792401402.219:977): avc: denied { write } for pid=9905 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.201805][ T5443] 8021q: adding VLAN 0 to HW filter on device eth29 [ 137.235765][ T42] audit: type=1400 audit(1792401402.279:978): avc: denied { write } for pid=9909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.265760][ T8530] usb 12-1: USB disconnect, device number 8 [ 137.282775][ T42] audit: type=1400 audit(1792401402.329:979): avc: denied { write } for pid=9912 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.518355][ C3] net_ratelimit: 97 callbacks suppressed [ 137.776503][ T9825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 137.797973][ T9825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 137.798438][ T9825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 137.815226][ T9825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 137.816351][ T9825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 137.828662][ T9825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 137.831644][ T9825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 137.845460][ T9825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 137.917474][ T9949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1088'. [ 137.952478][ T9939] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 137.976956][ T9825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.993144][ T9825] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.005448][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.005519][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.007233][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.007308][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.195713][ T9971] bond0: option mode: unable to set because the bond device has slaves [ 138.196203][ T9971] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 138.275476][ T9980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.275809][ T9980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.322912][ T9825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.357229][ T9825] veth0_vlan: entered promiscuous mode [ 138.365509][ T9825] veth1_vlan: entered promiscuous mode [ 138.386968][ T9825] veth0_macvtap: entered promiscuous mode [ 138.390830][ T9825] veth1_macvtap: entered promiscuous mode [ 138.397936][ T9825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.402887][ T9825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.430382][ T6109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.430406][ T6109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.430423][ T6109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.430440][ T6109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.463357][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.463365][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.478573][ T5740] Bluetooth: hci1: command tx timeout [ 138.495808][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.495817][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.729110][T10015] bond0: (slave bond_slave_0): Releasing backup interface [ 138.733579][T10015] bond0: (slave bond_slave_1): Releasing backup interface [ 138.740476][T10015] bond0: option mode: unable to set because the bond device is up [ 138.750245][T10015] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 138.856775][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1107'. [ 138.868507][T10031] veth1_macvtap: left promiscuous mode [ 139.079193][T10047] jffs2: notice: (10047) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 139.273935][T10056] kvm_do_msr_access: 1038 callbacks suppressed [ 139.306658][T10058] bond0: option mode: unable to set because the bond device has slaves [ 139.307292][T10058] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 139.540311][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 139.591062][ T10] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 139.741087][ T10] usb 12-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 139.746702][ T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.746712][ T10] usb 12-1: Product: syz [ 139.746719][ T10] usb 12-1: Manufacturer: syz [ 139.746727][ T10] usb 12-1: SerialNumber: syz [ 139.762957][ T10] usb 12-1: config 0 descriptor?? [ 139.964029][T10086] bond0: option mode: unable to set because the bond device has slaves [ 139.964711][T10086] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 139.978782][ T10] usb 12-1: USB disconnect, device number 9 [ 140.065548][T10084] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 140.145052][T10093] bond0: no command found in slaves file - use +ifname or -ifname [ 140.357471][T10114] overlayfs: missing 'lowerdir' [ 140.519679][T10126] ima: policy update failed [ 140.558368][ T5740] Bluetooth: hci1: command tx timeout [ 140.764504][T10158] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 140.766485][T10158] hpfs: Bad magic ... probably not HPFS [ 140.774540][T10158] trusted_key: encrypted_key: insufficient parameters specified [ 140.782759][T10158] Could not find key with description: [syz] [ 140.782774][T10158] process_request_key_err: No key [ 140.782785][T10158] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 140.782795][T10158] One or more global auth toks could not properly register; rc = [-2] [ 140.782826][T10158] Error validating options; rc = [-2] [ 140.811543][T10165] bond0: (slave dummy0): Releasing backup interface [ 140.827538][T10165] team0: No ports can be present during mode change [ 140.830871][T10165] tipc: Started in network mode [ 140.830886][T10165] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 140.831058][T10165] tipc: Enabled bearer , priority 0 [ 141.008343][ T8454] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 141.117283][T10192] overlay: ./file0 is not a directory [ 141.158857][ T8454] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 141.161912][ T8454] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.161923][ T8454] usb 8-1: Product: syz [ 141.161931][ T8454] usb 8-1: Manufacturer: syz [ 141.161939][ T8454] usb 8-1: SerialNumber: syz [ 141.165849][ T8454] usb 8-1: config 0 descriptor?? [ 141.370908][ T8454] usb 8-1: USB disconnect, device number 2 [ 141.549987][T10216] overlay: ./file0 is not a directory [ 141.777199][T10230] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 141.784788][T10230] hpfs: Bad magic ... probably not HPFS [ 141.788910][T10230] trusted_key: encrypted_key: insufficient parameters specified [ 141.791539][T10230] Could not find key with description: [syz] [ 141.791547][T10230] process_request_key_err: No key [ 141.791552][T10230] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 141.791558][T10230] One or more global auth toks could not properly register; rc = [-2] [ 141.791574][T10230] Error validating options; rc = [-2] [ 141.929709][T10249] overlayfs: missing 'lowerdir' [ 141.948499][ T8454] tipc: Node number set to 11578026 [ 141.952006][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 141.952021][ T42] audit: type=1400 audit(1792401406.999:1014): avc: denied { write } for pid=10247 comm="syz.3.1189" name="usb_gadget" dev="configfs" ino=6028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.062117][T10261] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 142.066694][T10261] hpfs: Bad magic ... probably not HPFS [ 142.072671][T10261] trusted_key: encrypted_key: insufficient parameters specified [ 142.076339][T10261] Could not find key with description: [syz] [ 142.076350][T10261] process_request_key_err: No key [ 142.076357][T10261] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 142.076368][T10261] One or more global auth toks could not properly register; rc = [-2] [ 142.076394][T10261] Error validating options; rc = [-2] [ 142.164048][T10275] nvme_fabrics: no handler found for transport t. [ 142.164511][T10275] nvme_fabrics: unknown parameter or missing value 'éjéðµê ¦ÏD">Šm„²!®Ô·6ó=µ´ðÒ’jX¯³ª3øPÜ d”œKñ¨zwâWEœ õ«[A¦û' in ctrl creation request [ 142.208120][ T42] audit: type=1400 audit(1792401407.249:1015): avc: denied { write } for pid=10285 comm="syz.8.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.244431][T10291] overlayfs: missing 'lowerdir' [ 142.258249][ T42] audit: type=1400 audit(1792401407.299:1016): avc: denied { write } for pid=10290 comm="syz.3.1208" name="usb_gadget" dev="configfs" ino=6028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.412495][T10305] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 142.495263][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 142.497587][T10318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10318 comm=syz.0.1219 [ 142.529282][T10321] FAULT_INJECTION: forcing a failure. [ 142.529282][T10321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.529310][T10321] CPU: 1 UID: 0 PID: 10321 Comm: syz.8.1218 Not tainted syzkaller #0 PREEMPT(full) [ 142.529330][T10321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.529374][T10321] Call Trace: [ 142.529382][T10321] [ 142.529390][T10321] dump_stack_lvl+0x100/0x190 [ 142.529424][T10321] should_fail_ex.cold+0x5/0xa [ 142.529452][T10321] _copy_from_user+0x2e/0xd0 [ 142.529486][T10321] generic_map_update_batch+0x4b8/0x860 [ 142.529516][T10321] ? __pfx_generic_map_update_batch+0x10/0x10 [ 142.529543][T10321] ? __pfx_generic_map_update_batch+0x10/0x10 [ 142.529565][T10321] bpf_map_do_batch+0x66f/0x6d0 [ 142.529596][T10321] __sys_bpf+0x4ce/0x4a30 [ 142.529624][T10321] ? __pfx___sys_bpf+0x10/0x10 [ 142.529645][T10321] ? find_held_lock+0x2b/0x80 [ 142.529673][T10321] ? get_pid_task+0xfc/0x250 [ 142.529698][T10321] ? get_pid_task+0xfc/0x250 [ 142.529731][T10321] ? find_held_lock+0x2b/0x80 [ 142.529765][T10321] ? rcu_read_lock_any_held+0x6a/0x90 [ 142.529785][T10321] ? find_held_lock+0x2b/0x80 [ 142.529812][T10321] ? ksys_write+0x190/0x250 [ 142.529835][T10321] ? ksys_write+0x190/0x250 [ 142.529857][T10321] ? lock_acquire+0x1d1/0x380 [ 142.529905][T10321] ? fput+0x7c/0x100 [ 142.529932][T10321] ? ksys_write+0x1ac/0x250 [ 142.529958][T10321] ? __x64_sys_bpf+0xce/0x140 [ 142.529979][T10321] __x64_sys_bpf+0xce/0x140 [ 142.530001][T10321] ? do_syscall_64+0xae/0x790 [ 142.530032][T10321] do_syscall_64+0x123/0x790 [ 142.530061][T10321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.530081][T10321] RIP: 0033:0x7f64e5f9e559 [ 142.530098][T10321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.530115][T10321] RSP: 002b:00007f64e6e91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.530147][T10321] RAX: ffffffffffffffda RBX: 00007f64e6226090 RCX: 00007f64e5f9e559 [ 142.530159][T10321] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 142.530171][T10321] RBP: 00007f64e6e91090 R08: 0000000000000000 R09: 0000000000000000 [ 142.530183][T10321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.530194][T10321] R13: 00007f64e6226128 R14: 00007f64e6226090 R15: 00007ffc1b703cb8 [ 142.530220][T10321] [ 142.530645][T10320] overlayfs: missing 'lowerdir' [ 142.542091][ T42] audit: type=1400 audit(1792401407.589:1017): avc: denied { write } for pid=10319 comm="syz.3.1220" name="usb_gadget" dev="configfs" ino=6028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.560840][ T42] audit: type=1400 audit(1792401407.609:1018): avc: denied { create } for pid=10322 comm="syz.0.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 142.562200][ T42] audit: type=1400 audit(1792401407.609:1019): avc: denied { write } for pid=10322 comm="syz.0.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 142.615471][T10331] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 142.648310][ C1] net_ratelimit: 330 callbacks suppressed [ 142.648709][ T5740] Bluetooth: hci1: command tx timeout [ 142.696332][T10347] overlayfs: missing 'lowerdir' [ 142.698019][ T42] audit: type=1400 audit(1792401407.739:1020): avc: denied { write } for pid=10345 comm="syz.3.1230" name="usb_gadget" dev="configfs" ino=6028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.707813][T10349] FAULT_INJECTION: forcing a failure. [ 142.707813][T10349] name failslab, interval 1, probability 0, space 0, times 0 [ 142.707831][T10349] CPU: 3 UID: 0 PID: 10349 Comm: syz.0.1231 Not tainted syzkaller #0 PREEMPT(full) [ 142.707844][T10349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.707850][T10349] Call Trace: [ 142.707855][T10349] [ 142.707860][T10349] dump_stack_lvl+0x100/0x190 [ 142.707881][T10349] should_fail_ex.cold+0x5/0xa [ 142.707897][T10349] should_failslab+0xc2/0x120 [ 142.707914][T10349] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 142.707930][T10349] ? __alloc_skb+0x140/0x710 [ 142.707944][T10349] __alloc_skb+0x140/0x710 [ 142.707953][T10349] ? __alloc_skb+0x5b7/0x710 [ 142.707964][T10349] ? __pfx___alloc_skb+0x10/0x10 [ 142.707978][T10349] netlink_ack+0x117/0xb80 [ 142.707989][T10349] ? trace_contention_end+0x126/0x160 [ 142.708007][T10349] netlink_rcv_skb+0x333/0x420 [ 142.708018][T10349] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 142.708033][T10349] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.708053][T10349] xfrm_netlink_rcv+0x71/0x90 [ 142.708066][T10349] netlink_unicast+0x65f/0x950 [ 142.708078][T10349] ? __pfx_netlink_unicast+0x10/0x10 [ 142.708093][T10349] netlink_sendmsg+0x8b0/0xda0 [ 142.708106][T10349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.708119][T10349] ? selinux_socket_sendmsg+0x198/0x2f0 [ 142.708138][T10349] ____sys_sendmsg+0xa4d/0xbe0 [ 142.708151][T10349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.708163][T10349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.708194][T10349] ? lock_acquire+0x1d1/0x380 [ 142.708207][T10349] ? get_pid_task+0x2a/0x250 [ 142.708224][T10349] ___sys_sendmsg+0x190/0x1e0 [ 142.708242][T10349] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.708257][T10349] ? get_pid_task+0x106/0x250 [ 142.708278][T10349] ? find_held_lock+0x2b/0x80 [ 142.708304][T10349] __sys_sendmsg+0x160/0x210 [ 142.708316][T10349] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.708336][T10349] do_syscall_64+0x123/0x790 [ 142.708366][T10349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.708381][T10349] RIP: 0033:0x7f30e1d9e559 [ 142.708391][T10349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.708402][T10349] RSP: 002b:00007f30e2c0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.708413][T10349] RAX: ffffffffffffffda RBX: 00007f30e2025fa0 RCX: 00007f30e1d9e559 [ 142.708420][T10349] RDX: 0000000000002014 RSI: 00002000000004c0 RDI: 0000000000000003 [ 142.708427][T10349] RBP: 00007f30e2c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 142.708434][T10349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.708441][T10349] R13: 00007f30e2026038 R14: 00007f30e2025fa0 R15: 00007ffd5a70ea28 [ 142.708456][T10349] [ 142.811816][T10363] netlink: 'syz.3.1238': attribute type 10 has an invalid length. [ 142.814817][T10363] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.815907][T10363] bond0: (slave team0): Enslaving as an active interface with an up link [ 142.842384][T10363] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.913470][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1240'. [ 142.916240][T10371] overlayfs: missing 'lowerdir' [ 142.918147][ T42] audit: type=1400 audit(1792401407.959:1021): avc: denied { write } for pid=10370 comm="syz.8.1241" name="usb_gadget" dev="configfs" ino=6028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.945893][T10363] dummy0 speed is unknown, defaulting to 1000 [ 143.022690][ T42] audit: type=1400 audit(1792401408.069:1022): avc: denied { setopt } for pid=10378 comm="syz.8.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.032786][T10363] lo speed is unknown, defaulting to 1000 [ 143.148014][T10392] jffs2: notice: (10392) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 143.174986][T10397] overlayfs: missing 'lowerdir' [ 143.177992][ T42] audit: type=1400 audit(1792401408.219:1023): avc: denied { write } for pid=10396 comm="syz.8.1251" name="usb_gadget" dev="configfs" ino=6028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 143.197913][ T5740] Bluetooth: hci1: status 0x02 [ 143.259032][T10405] affs: No valid root block on device sr0 [ 143.272775][T10405] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 143.376786][T10412] overlayfs: failed to resolve './bus/file0': -2 [ 143.548363][T10421] rxe_eth0 speed is unknown, defaulting to 1000 [ 143.626456][T10421] dummy0 speed is unknown, defaulting to 1000 [ 143.710882][T10421] lo speed is unknown, defaulting to 1000 [ 143.780974][T10427] overlayfs: missing 'lowerdir' [ 143.849529][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1266'. [ 143.852126][T10433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10433 comm=syz.8.1266 [ 143.880998][T10438] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 144.080073][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1275'. [ 144.085154][T10455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10455 comm=syz.3.1275 [ 144.172135][T10465] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 144.419442][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1281'. [ 144.439743][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1285'. [ 144.441295][T10487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10487 comm=syz.3.1285 [ 144.547575][T10500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1289'. [ 144.547593][T10500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1289'. [ 145.289428][ T9] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 145.388658][T10545] FAULT_INJECTION: forcing a failure. [ 145.388658][T10545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.388679][T10545] CPU: 2 UID: 0 PID: 10545 Comm: syz.7.1301 Not tainted syzkaller #0 PREEMPT(full) [ 145.388692][T10545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.388699][T10545] Call Trace: [ 145.388704][T10545] [ 145.388708][T10545] dump_stack_lvl+0x100/0x190 [ 145.388729][T10545] should_fail_ex.cold+0x5/0xa [ 145.388745][T10545] _copy_from_iter+0x1f4/0x1690 [ 145.388764][T10545] ? __asan_memset+0x23/0x50 [ 145.388778][T10545] ? __pfx__copy_from_iter+0x10/0x10 [ 145.388794][T10545] ? __pfx___alloc_skb+0x10/0x10 [ 145.388811][T10545] netlink_sendmsg+0x808/0xda0 [ 145.388825][T10545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.388837][T10545] ? selinux_socket_sendmsg+0x198/0x2f0 [ 145.388856][T10545] ____sys_sendmsg+0xa4d/0xbe0 [ 145.388869][T10545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.388881][T10545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.388899][T10545] ? lock_acquire+0x1d1/0x380 [ 145.388912][T10545] ? get_pid_task+0x2a/0x250 [ 145.388929][T10545] ___sys_sendmsg+0x190/0x1e0 [ 145.388945][T10545] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.388960][T10545] ? get_pid_task+0x106/0x250 [ 145.388981][T10545] ? find_held_lock+0x2b/0x80 [ 145.389007][T10545] __sys_sendmsg+0x160/0x210 [ 145.389019][T10545] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.389038][T10545] do_syscall_64+0x123/0x790 [ 145.389056][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.389069][T10545] RIP: 0033:0x7f6de3d9e559 [ 145.389079][T10545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.389091][T10545] RSP: 002b:00007f6de4c73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.389103][T10545] RAX: ffffffffffffffda RBX: 00007f6de4025fa0 RCX: 00007f6de3d9e559 [ 145.389110][T10545] RDX: 0000000020004844 RSI: 0000200000000300 RDI: 0000000000000009 [ 145.389118][T10545] RBP: 00007f6de4c73090 R08: 0000000000000000 R09: 0000000000000000 [ 145.389124][T10545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.389131][T10545] R13: 00007f6de4026038 R14: 00007f6de4025fa0 R15: 00007ffcdac86728 [ 145.389146][T10545] [ 145.440415][ T9] usb 13-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 145.442944][ T9] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.442956][ T9] usb 13-1: Product: syz [ 145.442963][ T9] usb 13-1: Manufacturer: syz [ 145.442971][ T9] usb 13-1: SerialNumber: syz [ 145.445571][ T9] usb 13-1: config 0 descriptor?? [ 145.653597][ T851] usb 13-1: USB disconnect, device number 5 [ 146.261536][T10591] FAULT_INJECTION: forcing a failure. [ 146.261536][T10591] name failslab, interval 1, probability 0, space 0, times 0 [ 146.261557][T10591] CPU: 2 UID: 0 PID: 10591 Comm: syz.3.1320 Not tainted syzkaller #0 PREEMPT(full) [ 146.261570][T10591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.261577][T10591] Call Trace: [ 146.261581][T10591] [ 146.261586][T10591] dump_stack_lvl+0x100/0x190 [ 146.261607][T10591] should_fail_ex.cold+0x5/0xa [ 146.261624][T10591] should_failslab+0xc2/0x120 [ 146.261641][T10591] __kmalloc_cache_noprof+0x91/0x6d0 [ 146.261654][T10591] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 146.261674][T10591] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 146.261692][T10591] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 146.261711][T10591] selinux_socket_post_create+0x368/0x7e0 [ 146.261728][T10591] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 146.261742][T10591] ? udp_init_sock+0x384/0x450 [ 146.261755][T10591] ? inet_create+0x962/0x1060 [ 146.261772][T10591] security_socket_post_create+0xaf/0x270 [ 146.261795][T10591] __sock_create+0x70b/0x860 [ 146.261815][T10591] udp_sock_create4+0xa6/0x450 [ 146.261830][T10591] ? __pfx_udp_sock_create4+0x10/0x10 [ 146.261845][T10591] ? lockdep_hardirqs_on+0x7d/0x110 [ 146.261862][T10591] ? crng_make_state+0x2b0/0x6c0 [ 146.261879][T10591] rxrpc_open_socket+0x512/0x6e0 [ 146.261893][T10591] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 146.261909][T10591] ? net_generic+0x25/0x2a0 [ 146.261925][T10591] ? rcu_is_watching+0x13/0xc0 [ 146.261943][T10591] rxrpc_lookup_local+0xac7/0x1220 [ 146.261960][T10591] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 146.261974][T10591] ? __local_bh_enable_ip+0xa5/0x120 [ 146.261990][T10591] rxrpc_bind+0x37e/0x590 [ 146.262006][T10591] __sys_bind+0x1a9/0x260 [ 146.262023][T10591] ? __pfx___sys_bind+0x10/0x10 [ 146.262038][T10591] ? __fget_files+0x21f/0x3d0 [ 146.262059][T10591] ? __pfx_ksys_write+0x10/0x10 [ 146.262077][T10591] __x64_sys_bind+0x72/0xb0 [ 146.262092][T10591] ? lockdep_hardirqs_on+0x7d/0x110 [ 146.262108][T10591] do_syscall_64+0x123/0x790 [ 146.262126][T10591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.262137][T10591] RIP: 0033:0x7efd9f79e559 [ 146.262147][T10591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.262159][T10591] RSP: 002b:00007efd9d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 146.262170][T10591] RAX: ffffffffffffffda RBX: 00007efd9fa25fa0 RCX: 00007efd9f79e559 [ 146.262178][T10591] RDX: 0000000000000024 RSI: 0000200000000080 RDI: 0000000000000003 [ 146.262185][T10591] RBP: 00007efd9d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 146.262192][T10591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.262199][T10591] R13: 00007efd9fa26038 R14: 00007efd9fa25fa0 R15: 00007ffe61bd6818 [ 146.262214][T10591] [ 146.698283][ T5881] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 146.851528][ T5881] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 146.856406][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.856418][ T5881] usb 8-1: Product: syz [ 146.856426][ T5881] usb 8-1: Manufacturer: syz [ 146.856435][ T5881] usb 8-1: SerialNumber: syz [ 146.857848][ T5881] usb 8-1: config 0 descriptor?? [ 146.901125][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1333'. [ 146.903399][T10620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10620 comm=syz.7.1333 [ 146.968016][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 146.968027][ T42] audit: type=1400 audit(1792401412.009:1029): avc: denied { write } for pid=10627 comm="syz.7.1337" name="usb_gadget" dev="configfs" ino=6028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 146.997992][T10630] team0: No ports can be present during mode change [ 147.067922][ T8756] usb 8-1: USB disconnect, device number 3 [ 147.095257][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 147.154206][T10646] FAULT_INJECTION: forcing a failure. [ 147.154206][T10646] name failslab, interval 1, probability 0, space 0, times 0 [ 147.154232][T10646] CPU: 1 UID: 0 PID: 10646 Comm: syz.7.1343 Not tainted syzkaller #0 PREEMPT(full) [ 147.154251][T10646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.154262][T10646] Call Trace: [ 147.154269][T10646] [ 147.154277][T10646] dump_stack_lvl+0x100/0x190 [ 147.154308][T10646] should_fail_ex.cold+0x5/0xa [ 147.154334][T10646] should_failslab+0xc2/0x120 [ 147.154360][T10646] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 147.154384][T10646] ? sidtab_sid2str_get+0x84/0x670 [ 147.154404][T10646] ? sidtab_sid2str_get+0x17a/0x670 [ 147.154425][T10646] kmemdup_noprof+0x29/0x60 [ 147.154445][T10646] sidtab_sid2str_get+0x17a/0x670 [ 147.154466][T10646] security_sid_to_context_core+0x373/0x700 [ 147.154496][T10646] avc_audit_post_callback+0x1aa/0x910 [ 147.154516][T10646] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 147.154536][T10646] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 147.154554][T10646] ? skb_put+0x138/0x180 [ 147.154598][T10646] ? audit_log_n_string+0x2a3/0x5a0 [ 147.154626][T10646] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 147.154645][T10646] common_lsm_audit+0x23f/0x2b0 [ 147.154672][T10646] ? __pfx_common_lsm_audit+0x10/0x10 [ 147.154706][T10646] slow_avc_audit+0x186/0x210 [ 147.154726][T10646] ? __pfx_slow_avc_audit+0x10/0x10 [ 147.154747][T10646] ? tomoyo_path_number_perm+0x28f/0x580 [ 147.154774][T10646] ? tomoyo_path_number_perm+0x188/0x580 [ 147.154802][T10646] audit_inode_permission+0x1ea/0x2a0 [ 147.154825][T10646] ? __pfx_audit_inode_permission+0x10/0x10 [ 147.154847][T10646] ? d_splice_alias_ops+0x626/0x15b0 [ 147.154877][T10646] selinux_inode_permission+0x7ed/0x1130 [ 147.154904][T10646] ? __pfx_selinux_inode_permission+0x10/0x10 [ 147.154926][T10646] ? make_vfsgid+0xf1/0x140 [ 147.154954][T10646] security_inode_permission+0xda/0x250 [ 147.154980][T10646] inode_permission+0x36c/0x620 [ 147.155002][T10646] may_create_dentry+0x2ec/0x380 [ 147.155025][T10646] vfs_mkdir+0x88/0x850 [ 147.155048][T10646] filename_mkdirat+0x48b/0x5e0 [ 147.155076][T10646] ? __pfx_filename_mkdirat+0x10/0x10 [ 147.155102][T10646] ? strncpy_from_user+0x19d/0x2d0 [ 147.155132][T10646] ? do_getname+0x191/0x390 [ 147.155153][T10646] __x64_sys_mkdirat+0x89/0xc0 [ 147.155179][T10646] do_syscall_64+0x123/0x790 [ 147.155211][T10646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.155229][T10646] RIP: 0033:0x7f6de3d9e559 [ 147.155244][T10646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.155260][T10646] RSP: 002b:00007f6de4c73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 147.155279][T10646] RAX: ffffffffffffffda RBX: 00007f6de4025fa0 RCX: 00007f6de3d9e559 [ 147.155291][T10646] RDX: 00000000000001c0 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 147.155303][T10646] RBP: 00007f6de4c73090 R08: 0000000000000000 R09: 0000000000000000 [ 147.155314][T10646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.155325][T10646] R13: 00007f6de4026038 R14: 00007f6de4025fa0 R15: 00007ffcdac86728 [ 147.155351][T10646] [ 147.156082][T10646] o2cb: This node has not been configured. [ 147.156092][T10646] o2cb: Cluster check failed. Fix errors before retrying. [ 147.156108][T10646] (syz.7.1343,10646,1):user_dlm_register:674 ERROR: status = -22 [ 147.156128][T10646] (syz.7.1343,10646,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 147.156284][ T42] audit: type=1400 audit(1792401412.199:1030): avc: denied { write } for pid=10645 comm="syz.7.1343" name="/" dev="ocfs2_dlmfs" ino=38990 scontext=root:sysadm_r:sysadm_t tsid=3 tclass=dir permissive=1 [ 147.156321][ T42] audit: type=1400 audit(1792401412.199:1031): avc: denied { create } for pid=10645 comm="syz.7.1343" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 147.242601][T10654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10654 comm=syz.7.1347 [ 147.302919][T10656] rxe_eth0 speed is unknown, defaulting to 1000 [ 147.397764][T10656] dummy0 speed is unknown, defaulting to 1000 [ 147.501443][T10666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1036 sclass=netlink_route_socket pid=10666 comm=syz.8.1351 [ 147.542530][T10656] lo speed is unknown, defaulting to 1000 [ 147.567365][ T42] audit: type=1400 audit(1792401412.609:1032): avc: denied { write } for pid=10673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.626157][ T42] audit: type=1400 audit(1792401412.669:1033): avc: denied { write } for pid=10676 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.768968][ T42] audit: type=1400 audit(1792401412.809:1034): avc: denied { write } for pid=10680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.825589][ T42] audit: type=1400 audit(1792401412.869:1035): avc: denied { write } for pid=10688 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.838261][ C1] net_ratelimit: 199 callbacks suppressed [ 147.847707][T10693] __nla_validate_parse: 2 callbacks suppressed [ 147.847717][T10693] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1357'. [ 147.851980][T10693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10693 comm=syz.8.1357 [ 147.957603][ T42] audit: type=1400 audit(1792401412.999:1036): avc: denied { write } for pid=10699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.987600][T10712] FAULT_INJECTION: forcing a failure. [ 147.987600][T10712] name failslab, interval 1, probability 0, space 0, times 0 [ 147.987617][T10712] CPU: 2 UID: 0 PID: 10712 Comm: syz.7.1363 Not tainted syzkaller #0 PREEMPT(full) [ 147.987629][T10712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.987636][T10712] Call Trace: [ 147.987640][T10712] [ 147.987645][T10712] dump_stack_lvl+0x100/0x190 [ 147.987666][T10712] should_fail_ex.cold+0x5/0xa [ 147.987683][T10712] should_failslab+0xc2/0x120 [ 147.987700][T10712] __kmalloc_noprof+0xfc/0x840 [ 147.987713][T10712] ? rcu_is_watching+0x13/0xc0 [ 147.987730][T10712] ? tomoyo_realpath_from_path+0xb6/0x690 [ 147.987745][T10712] tomoyo_realpath_from_path+0xb6/0x690 [ 147.987759][T10712] tomoyo_path_number_perm+0x23c/0x580 [ 147.987774][T10712] ? tomoyo_path_number_perm+0x22e/0x580 [ 147.987790][T10712] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 147.987817][T10712] ? __lock_acquire+0x5c0/0x1f40 [ 147.987837][T10712] ? __fget_files+0x34/0x3d0 [ 147.987853][T10712] ? find_held_lock+0x2b/0x80 [ 147.987869][T10712] ? hook_file_ioctl_common+0x140/0x440 [ 147.987885][T10712] ? __fget_files+0x21f/0x3d0 [ 147.987903][T10712] security_file_ioctl+0xd3/0x230 [ 147.987920][T10712] __x64_sys_ioctl+0xb7/0x210 [ 147.987935][T10712] do_syscall_64+0x123/0x790 [ 147.987953][T10712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.987965][T10712] RIP: 0033:0x7f6de3d9e559 [ 147.987975][T10712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.987985][T10712] RSP: 002b:00007f6de4c73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.987997][T10712] RAX: ffffffffffffffda RBX: 00007f6de4025fa0 RCX: 00007f6de3d9e559 [ 147.988004][T10712] RDX: 0000000000000000 RSI: 0000000040047459 RDI: 0000000000000004 [ 147.988011][T10712] RBP: 00007f6de4c73090 R08: 0000000000000000 R09: 0000000000000000 [ 147.988017][T10712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.988024][T10712] R13: 00007f6de4026038 R14: 00007f6de4025fa0 R15: 00007ffcdac86728 [ 147.988039][T10712] [ 147.988044][T10712] ERROR: Out of memory at tomoyo_realpath_from_path. [ 148.037072][ T42] audit: type=1400 audit(1792401413.079:1037): avc: denied { write } for pid=10713 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.103699][T10723] FAULT_INJECTION: forcing a failure. [ 148.103699][T10723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.103792][T10723] CPU: 0 UID: 0 PID: 10723 Comm: syz.8.1372 Not tainted syzkaller #0 PREEMPT(full) [ 148.103814][T10723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.103824][T10723] Call Trace: [ 148.103831][T10723] [ 148.103838][T10723] dump_stack_lvl+0x100/0x190 [ 148.103870][T10723] should_fail_ex.cold+0x5/0xa [ 148.103910][T10723] _copy_to_user+0x32/0xd0 [ 148.103940][T10723] simple_read_from_buffer+0xcb/0x170 [ 148.103969][T10723] proc_fail_nth_read+0x1af/0x230 [ 148.103995][T10723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.104022][T10723] ? rw_verify_area+0xce/0x6d0 [ 148.104040][T10723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.104065][T10723] vfs_read+0x1e4/0xb40 [ 148.104085][T10723] ? lock_acquire+0x1d1/0x380 [ 148.104117][T10723] ? __fget_files+0x34/0x3d0 [ 148.104141][T10723] ? __pfx_vfs_read+0x10/0x10 [ 148.104159][T10723] ? find_held_lock+0x2b/0x80 [ 148.104184][T10723] ? __fget_files+0x215/0x3d0 [ 148.104212][T10723] ? __fget_files+0x21f/0x3d0 [ 148.104248][T10723] ksys_read+0x12a/0x250 [ 148.104268][T10723] ? __pfx_ksys_read+0x10/0x10 [ 148.104295][T10723] do_syscall_64+0x123/0x790 [ 148.104324][T10723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.104341][T10723] RIP: 0033:0x7f64e5f5ed8e [ 148.104357][T10723] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 148.104373][T10723] RSP: 002b:00007f64e6eb1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.104390][T10723] RAX: ffffffffffffffda RBX: 00007f64e6eb26c0 RCX: 00007f64e5f5ed8e [ 148.104402][T10723] RDX: 000000000000000f RSI: 00007f64e6eb20a0 RDI: 0000000000000005 [ 148.104413][T10723] RBP: 00007f64e6eb2090 R08: 0000000000000000 R09: 0000000000000000 [ 148.104423][T10723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.104433][T10723] R13: 00007f64e6226038 R14: 00007f64e6225fa0 R15: 00007ffc1b703cb8 [ 148.104457][T10723] [ 148.130839][ T42] audit: type=1400 audit(1792401413.179:1038): avc: denied { write } for pid=10724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.228556][ T5881] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 148.378810][ T5881] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 148.381402][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.381413][ T5881] usb 8-1: Product: syz [ 148.381421][ T5881] usb 8-1: Manufacturer: syz [ 148.381430][ T5881] usb 8-1: SerialNumber: syz [ 148.383056][ T5881] usb 8-1: config 0 descriptor?? [ 148.461345][T10731] rxe_eth0 speed is unknown, defaulting to 1000 [ 148.552559][T10731] dummy0 speed is unknown, defaulting to 1000 [ 148.591827][ T5881] usb 8-1: USB disconnect, device number 4 [ 148.641476][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1370'. [ 148.643324][T10743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10743 comm=syz.8.1370 [ 148.657068][T10731] lo speed is unknown, defaulting to 1000 [ 148.736620][T10752] overlayfs: failed to resolve './file0': -2 [ 148.793614][T10754] Cannot find del_set index 4 as target [ 148.837462][T10760] FAULT_INJECTION: forcing a failure. [ 148.837462][T10760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.837480][T10760] CPU: 3 UID: 0 PID: 10760 Comm: syz.0.1378 Not tainted syzkaller #0 PREEMPT(full) [ 148.837493][T10760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.837499][T10760] Call Trace: [ 148.837503][T10760] [ 148.837508][T10760] dump_stack_lvl+0x100/0x190 [ 148.837529][T10760] should_fail_ex.cold+0x5/0xa [ 148.837545][T10760] _copy_from_user+0x2e/0xd0 [ 148.837562][T10760] do_ipt_set_ctl+0xa09/0xcf0 [ 148.837578][T10760] ? nf_sockopt_find.isra.0+0x222/0x290 [ 148.837592][T10760] ? nf_sockopt_find.isra.0+0x222/0x290 [ 148.837606][T10760] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 148.837622][T10760] ? __mutex_unlock_slowpath+0x35d/0x930 [ 148.837640][T10760] ? sockopt_release_sock+0x5c/0x70 [ 148.837659][T10760] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.837699][T10760] ? nf_sockopt_find.isra.0+0x222/0x290 [ 148.837717][T10760] nf_setsockopt+0x8d/0xf0 [ 148.837731][T10760] ip_setsockopt+0xcb/0xf0 [ 148.837749][T10760] udp_setsockopt+0x64/0xb0 [ 148.837763][T10760] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 148.837779][T10760] do_sock_setsockopt+0xf3/0x1d0 [ 148.837794][T10760] __sys_setsockopt+0x195/0x220 [ 148.837808][T10760] __x64_sys_setsockopt+0xbd/0x160 [ 148.837818][T10760] ? do_syscall_64+0xae/0x790 [ 148.837834][T10760] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.837850][T10760] do_syscall_64+0x123/0x790 [ 148.837867][T10760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.837883][T10760] RIP: 0033:0x7f30e1d9e559 [ 148.837893][T10760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.837904][T10760] RSP: 002b:00007f30e2c0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 148.837916][T10760] RAX: ffffffffffffffda RBX: 00007f30e2025fa0 RCX: 00007f30e1d9e559 [ 148.837923][T10760] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 148.837930][T10760] RBP: 00007f30e2c0e090 R08: 0000000000000488 R09: 0000000000000000 [ 148.837936][T10760] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 148.837943][T10760] R13: 00007f30e2026038 R14: 00007f30e2025fa0 R15: 00007ffd5a70ea28 [ 148.837958][T10760] [ 148.950615][T10769] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 148.959309][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1383'. [ 148.961774][T10772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10772 comm=syz.0.1383 [ 149.142692][T10782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.143172][T10782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.169092][T10786] netlink: 144 bytes leftover after parsing attributes in process `syz.7.1387'. [ 149.187701][T10784] rxe_eth0 speed is unknown, defaulting to 1000 [ 149.282332][T10784] dummy0 speed is unknown, defaulting to 1000 [ 149.376630][T10784] lo speed is unknown, defaulting to 1000 [ 149.590171][T10807] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 149.644206][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1397'. [ 149.645706][T10812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10812 comm=syz.3.1397 [ 149.737397][T10819] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 149.837947][T10831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1404'. [ 149.877679][T10834] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 149.879371][T10837] overlayfs: failed to resolve './file1': -2 [ 149.906263][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'. [ 150.168434][ T34] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 150.329720][ T34] usb 12-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 150.333568][ T34] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.333583][ T34] usb 12-1: Product: syz [ 150.333595][ T34] usb 12-1: Manufacturer: syz [ 150.333606][ T34] usb 12-1: SerialNumber: syz [ 150.336027][ T34] usb 12-1: config 0 descriptor?? [ 150.541114][ T2337] usb 12-1: USB disconnect, device number 10 [ 150.638724][ T5881] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 150.798358][ T5881] usb 13-1: Using ep0 maxpacket: 32 [ 150.799088][ T5881] usb 13-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 150.799918][ T5881] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.799930][ T5881] usb 13-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.802849][ T5881] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.802860][ T5881] usb 13-1: Product: syz [ 150.802867][ T5881] usb 13-1: Manufacturer: syz [ 150.802875][ T5881] usb 13-1: SerialNumber: syz [ 150.804416][ T5881] usb 13-1: config 0 descriptor?? [ 150.972756][T10879] zram: Can't change algorithm for initialized device [ 151.010788][T10856] Cannot find del_set index 4 as target [ 151.015423][ T5881] usb 13-1: USB disconnect, device number 6 [ 151.113760][T10890] overlayfs: failed to resolve './file1': -2 [ 151.128802][T10892] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1424'. [ 151.373809][T10911] FAULT_INJECTION: forcing a failure. [ 151.373809][T10911] name failslab, interval 1, probability 0, space 0, times 0 [ 151.373831][T10911] CPU: 1 UID: 0 PID: 10911 Comm: syz.0.1431 Not tainted syzkaller #0 PREEMPT(full) [ 151.373851][T10911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.373861][T10911] Call Trace: [ 151.373868][T10911] [ 151.373875][T10911] dump_stack_lvl+0x100/0x190 [ 151.373904][T10911] should_fail_ex.cold+0x5/0xa [ 151.373929][T10911] should_failslab+0xc2/0x120 [ 151.373953][T10911] __kmalloc_cache_noprof+0x91/0x6d0 [ 151.373974][T10911] ? sctp_add_bind_addr+0xae/0x3e0 [ 151.374002][T10911] sctp_add_bind_addr+0xae/0x3e0 [ 151.374028][T10911] sctp_copy_local_addr_list+0x349/0x550 [ 151.374057][T10911] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 151.374088][T10911] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 151.374114][T10911] sctp_bind_addr_copy+0xe0/0x530 [ 151.374142][T10911] sctp_connect_new_asoc+0x1c9/0x770 [ 151.374164][T10911] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 151.374193][T10911] sctp_sendmsg+0x1743/0x22e0 [ 151.374218][T10911] ? __pfx_sctp_sendmsg+0x10/0x10 [ 151.374236][T10911] ? sock_has_perm+0x25a/0x2f0 [ 151.374256][T10911] ? __pfx_sock_has_perm+0x10/0x10 [ 151.374285][T10911] ? __might_fault+0xc5/0x140 [ 151.374309][T10911] ? __pfx_sctp_sendmsg+0x10/0x10 [ 151.374330][T10911] inet_sendmsg+0x11c/0x140 [ 151.374356][T10911] __sys_sendto+0x453/0x4e0 [ 151.374372][T10911] ? __pfx_inet_sendmsg+0x10/0x10 [ 151.374395][T10911] ? __pfx___sys_sendto+0x10/0x10 [ 151.374428][T10911] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.374463][T10911] ? ksys_write+0x1ac/0x250 [ 151.374484][T10911] ? __pfx_ksys_write+0x10/0x10 [ 151.374507][T10911] __x64_sys_sendto+0xe0/0x1c0 [ 151.374523][T10911] ? do_syscall_64+0xae/0x790 [ 151.374547][T10911] ? lockdep_hardirqs_on+0x7d/0x110 [ 151.374571][T10911] do_syscall_64+0x123/0x790 [ 151.374597][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.374614][T10911] RIP: 0033:0x7f30e1d9e559 [ 151.374628][T10911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.374645][T10911] RSP: 002b:00007f30e2c0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 151.374663][T10911] RAX: ffffffffffffffda RBX: 00007f30e2025fa0 RCX: 00007f30e1d9e559 [ 151.374674][T10911] RDX: 0000000000034000 RSI: 0000200000000240 RDI: 0000000000000003 [ 151.374684][T10911] RBP: 00007f30e2c0e090 R08: 0000200000000280 R09: 000000000000001c [ 151.374695][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.374705][T10911] R13: 00007f30e2026038 R14: 00007f30e2025fa0 R15: 00007ffd5a70ea28 [ 151.374729][T10911] [ 151.468247][ T6218] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 151.620645][ T6218] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 151.623989][ T6218] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.624000][ T6218] usb 8-1: Product: syz [ 151.624009][ T6218] usb 8-1: Manufacturer: syz [ 151.624017][ T6218] usb 8-1: SerialNumber: syz [ 151.627016][ T6218] usb 8-1: config 0 descriptor?? [ 151.833764][ T6218] usb 8-1: USB disconnect, device number 5 [ 152.788419][ T7050] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 152.852990][T11004] FAULT_INJECTION: forcing a failure. [ 152.852990][T11004] name failslab, interval 1, probability 0, space 0, times 0 [ 152.853015][T11004] CPU: 1 UID: 0 PID: 11004 Comm: syz.7.1472 Not tainted syzkaller #0 PREEMPT(full) [ 152.853035][T11004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.853046][T11004] Call Trace: [ 152.853054][T11004] [ 152.853062][T11004] dump_stack_lvl+0x100/0x190 [ 152.853094][T11004] should_fail_ex.cold+0x5/0xa [ 152.853122][T11004] should_failslab+0xc2/0x120 [ 152.853149][T11004] __kmalloc_noprof+0xfc/0x840 [ 152.853174][T11004] ? afs_alloc_vlserver_list+0x24/0xa0 [ 152.853205][T11004] afs_alloc_vlserver_list+0x24/0xa0 [ 152.853227][T11004] afs_lookup_cell+0x14c6/0x1940 [ 152.853258][T11004] ? __pfx_afs_lookup_cell+0x10/0x10 [ 152.853281][T11004] ? net_generic+0x25/0x2a0 [ 152.853302][T11004] ? find_held_lock+0x2b/0x80 [ 152.853329][T11004] ? net_generic+0xea/0x2a0 [ 152.853348][T11004] ? net_generic+0xea/0x2a0 [ 152.853376][T11004] afs_dynroot_lookup+0x2e2/0xaf0 [ 152.853399][T11004] ? __pfx_afs_dynroot_lookup+0x10/0x10 [ 152.853422][T11004] ? down_read+0x13b/0x4c0 [ 152.853440][T11004] ? __pfx_down_read+0x10/0x10 [ 152.853460][T11004] __lookup_slow+0x155/0x320 [ 152.853483][T11004] lookup_slow+0x50/0x70 [ 152.853502][T11004] link_path_walk+0x1377/0x1cc0 [ 152.853535][T11004] path_lookupat+0x74/0xc40 [ 152.853563][T11004] filename_lookup+0x202/0x590 [ 152.853598][T11004] ? __pfx_filename_lookup+0x10/0x10 [ 152.853637][T11004] ? strncpy_from_user+0x19d/0x2d0 [ 152.853671][T11004] ? do_getname+0x191/0x390 [ 152.853691][T11004] user_path_at+0x3c/0x60 [ 152.853715][T11004] __x64_sys_mount+0x1fb/0x310 [ 152.853736][T11004] ? __pfx___x64_sys_mount+0x10/0x10 [ 152.853764][T11004] do_syscall_64+0x123/0x790 [ 152.853793][T11004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.853813][T11004] RIP: 0033:0x7f6de3d9e559 [ 152.853830][T11004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.853848][T11004] RSP: 002b:00007f6de4c73028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 152.853867][T11004] RAX: ffffffffffffffda RBX: 00007f6de4025fa0 RCX: 00007f6de3d9e559 [ 152.853880][T11004] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000000 [ 152.853891][T11004] RBP: 00007f6de4c73090 R08: 0000000000000000 R09: 0000000000000000 [ 152.853903][T11004] R10: 00000000008b101a R11: 0000000000000246 R12: 0000000000000001 [ 152.853915][T11004] R13: 00007f6de4026038 R14: 00007f6de4025fa0 R15: 00007ffcdac86728 [ 152.853942][T11004] [ 152.939170][ T7050] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 152.946747][ T7050] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.946767][ T7050] usb 8-1: Product: syz [ 152.946782][ T7050] usb 8-1: Manufacturer: syz [ 152.946795][ T7050] usb 8-1: SerialNumber: syz [ 152.953576][T11008] net_ratelimit: 237 callbacks suppressed [ 152.956869][ T7050] usb 8-1: config 0 descriptor?? [ 153.127048][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 153.127058][ T42] audit: type=1400 audit(1792401418.169:1052): avc: denied { write } for pid=11020 comm="syz.0.1480" name="usb_gadget" dev="configfs" ino=6028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.160785][ T5881] usb 8-1: USB disconnect, device number 6 [ 153.193074][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1484'. [ 153.276739][T11041] FAULT_INJECTION: forcing a failure. [ 153.276739][T11041] name failslab, interval 1, probability 0, space 0, times 0 [ 153.276765][T11041] CPU: 3 UID: 0 PID: 11041 Comm: syz.7.1489 Not tainted syzkaller #0 PREEMPT(full) [ 153.276783][T11041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 153.276793][T11041] Call Trace: [ 153.276799][T11041] [ 153.276806][T11041] dump_stack_lvl+0x100/0x190 [ 153.276835][T11041] should_fail_ex.cold+0x5/0xa [ 153.276858][T11041] should_failslab+0xc2/0x120 [ 153.276883][T11041] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 153.276905][T11041] ? __alloc_skb+0x5b7/0x710 [ 153.276922][T11041] ? __alloc_skb+0x140/0x710 [ 153.276941][T11041] __alloc_skb+0x140/0x710 [ 153.276956][T11041] ? __alloc_skb+0x5b7/0x710 [ 153.276971][T11041] ? __pfx___alloc_skb+0x10/0x10 [ 153.276993][T11041] netlink_alloc_large_skb+0x69/0x150 [ 153.277021][T11041] netlink_sendmsg+0x680/0xda0 [ 153.277042][T11041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.277060][T11041] ? selinux_socket_sendmsg+0x198/0x2f0 [ 153.277087][T11041] ____sys_sendmsg+0xa4d/0xbe0 [ 153.277107][T11041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.277124][T11041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.277151][T11041] ? lock_acquire+0x1d1/0x380 [ 153.277170][T11041] ? get_pid_task+0x2a/0x250 [ 153.277194][T11041] ___sys_sendmsg+0x190/0x1e0 [ 153.277224][T11041] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.277246][T11041] ? get_pid_task+0x106/0x250 [ 153.277277][T11041] ? find_held_lock+0x2b/0x80 [ 153.277316][T11041] __sys_sendmsg+0x160/0x210 [ 153.277335][T11041] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.277364][T11041] do_syscall_64+0x123/0x790 [ 153.277391][T11041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.277408][T11041] RIP: 0033:0x7f6de3d9e559 [ 153.277422][T11041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.277438][T11041] RSP: 002b:00007f6de4c73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.277455][T11041] RAX: ffffffffffffffda RBX: 00007f6de4025fa0 RCX: 00007f6de3d9e559 [ 153.277467][T11041] RDX: 0000000004008094 RSI: 00002000000001c0 RDI: 0000000000000003 [ 153.277477][T11041] RBP: 00007f6de4c73090 R08: 0000000000000000 R09: 0000000000000000 [ 153.277488][T11041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.277498][T11041] R13: 00007f6de4026038 R14: 00007f6de4025fa0 R15: 00007ffcdac86728 [ 153.277521][T11041] [ 153.471683][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1498'. [ 153.592297][T11067] overlayfs: missing 'lowerdir' [ 153.734228][T11079] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(14) [ 153.784203][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1508'. [ 153.842627][T11092] overlayfs: missing 'lowerdir' [ 153.877879][T11094] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1514'. [ 153.981393][T11104] xfs: Unknown parameter 'di(mßlYãAC™[«a¤_†XRd²ÐI¢gÌçãö^Gq×9¶¼©úgvjÇÚáÏÎ]wLˆb%WB !HÁ"  €' [ 154.039491][T11104] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.120711][T10846] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 154.132193][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1519'. [ 154.272010][T10846] usb 12-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 154.274745][T10846] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.274756][T10846] usb 12-1: Product: syz [ 154.274763][T10846] usb 12-1: Manufacturer: syz [ 154.274770][T10846] usb 12-1: SerialNumber: syz [ 154.276460][T10846] usb 12-1: config 0 descriptor?? [ 154.487359][ T6218] usb 12-1: USB disconnect, device number 11 [ 154.917959][T11133] overlayfs: missing 'lowerdir' [ 155.044719][T11137] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1530'. [ 155.104279][ T42] audit: type=1400 audit(1792401420.149:1053): avc: denied { execute } for pid=11145 comm="syz.0.1536" path="/dev/audio1" dev="devtmpfs" ino=1320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 155.140569][T11147] 8021q: VLANs not supported on ip6gre0 [ 155.194655][T11157] overlayfs: missing 'lowerdir' [ 155.382898][ T42] audit: type=1400 audit(1792401420.429:1054): avc: denied { write } for pid=11174 comm="syz.8.1545" name="/" dev="9p" ino=71827601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.383533][ T42] audit: type=1400 audit(1792401420.429:1055): avc: denied { remove_name } for pid=11174 comm="syz.8.1545" name="file0" dev="9p" ino=71827607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.383677][ T42] audit: type=1400 audit(1792401420.429:1056): avc: denied { unlink } for pid=11174 comm="syz.8.1545" name="file0" dev="9p" ino=71827607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.389120][ T42] audit: type=1400 audit(1792401420.439:1057): avc: denied { write } for pid=11174 comm="syz.8.1545" name="/" dev="9p" ino=71827601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.389163][ T42] audit: type=1400 audit(1792401420.439:1058): avc: denied { create } for pid=11174 comm="syz.8.1545" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 155.488291][ T2337] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 155.492032][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1545'. [ 155.496620][ T42] audit: type=1400 audit(1792401420.539:1059): avc: denied { read } for pid=11174 comm="syz.8.1545" name="file0" dev="9p" ino=71827607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 155.639000][ T2337] usb 12-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 155.641761][ T2337] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.641778][ T2337] usb 12-1: Product: syz [ 155.641792][ T2337] usb 12-1: Manufacturer: syz [ 155.641804][ T2337] usb 12-1: SerialNumber: syz [ 155.644331][ T2337] usb 12-1: config 0 descriptor?? [ 155.736228][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1562'. [ 155.852038][ T5881] usb 12-1: USB disconnect, device number 12 [ 156.377908][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1566'. [ 156.961464][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 157.019571][T11253] overlayfs: missing 'lowerdir' [ 157.028835][ T6218] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 157.178759][ T6218] usb 13-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 157.182117][ T6218] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.182127][ T6218] usb 13-1: Product: syz [ 157.182135][ T6218] usb 13-1: Manufacturer: syz [ 157.182142][ T6218] usb 13-1: SerialNumber: syz [ 157.184952][ T6218] usb 13-1: config 0 descriptor?? [ 157.308105][ T42] audit: type=1400 audit(1792401422.349:1060): avc: denied { write } for pid=11268 comm="syz.3.1587" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 157.337059][T11273] overlay: ./file0 is not a directory [ 157.378054][T11279] i2c i2c-0: new_device: Instantiated device tcpci at 0x05 [ 157.391933][ T7050] usb 13-1: USB disconnect, device number 7 [ 158.126671][T11315] net_ratelimit: 96 callbacks suppressed [ 158.126681][T11315] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 158.412827][T11327] ip6gre1: entered promiscuous mode [ 158.412843][T11327] ip6gre1: entered allmulticast mode [ 158.420403][ T42] audit: type=1400 audit(1792401423.469:1061): avc: denied { connect } for pid=11326 comm="syz.3.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.498312][ T6218] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 158.502648][T11331] FAULT_INJECTION: forcing a failure. [ 158.502648][T11331] name failslab, interval 1, probability 0, space 0, times 0 [ 158.502665][T11331] CPU: 0 UID: 0 PID: 11331 Comm: syz.3.1611 Not tainted syzkaller #0 PREEMPT(full) [ 158.502677][T11331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.502684][T11331] Call Trace: [ 158.502689][T11331] [ 158.502694][T11331] dump_stack_lvl+0x100/0x190 [ 158.502728][T11331] should_fail_ex.cold+0x5/0xa [ 158.502745][T11331] should_failslab+0xc2/0x120 [ 158.502770][T11331] __kmalloc_noprof+0xfc/0x840 [ 158.502784][T11331] ? rcu_is_watching+0x13/0xc0 [ 158.502800][T11331] ? tomoyo_realpath_from_path+0xb6/0x690 [ 158.502815][T11331] tomoyo_realpath_from_path+0xb6/0x690 [ 158.502829][T11331] tomoyo_path_number_perm+0x23c/0x580 [ 158.502844][T11331] ? tomoyo_path_number_perm+0x22e/0x580 [ 158.502860][T11331] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 158.502881][T11331] ? __lock_acquire+0x5c0/0x1f40 [ 158.502902][T11331] ? __fget_files+0x34/0x3d0 [ 158.502918][T11331] ? find_held_lock+0x2b/0x80 [ 158.502934][T11331] ? hook_file_ioctl_common+0x140/0x440 [ 158.502950][T11331] ? __fget_files+0x21f/0x3d0 [ 158.502969][T11331] security_file_ioctl+0xd3/0x230 [ 158.502986][T11331] __x64_sys_ioctl+0xb7/0x210 [ 158.503001][T11331] do_syscall_64+0x123/0x790 [ 158.503019][T11331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.503031][T11331] RIP: 0033:0x7efd9f79e559 [ 158.503041][T11331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.503052][T11331] RSP: 002b:00007efd9d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.503074][T11331] RAX: ffffffffffffffda RBX: 00007efd9fa25fa0 RCX: 00007efd9f79e559 [ 158.503081][T11331] RDX: 1000000000000002 RSI: 0000000080081272 RDI: 0000000000000003 [ 158.503088][T11331] RBP: 00007efd9d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 158.503095][T11331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.503101][T11331] R13: 00007efd9fa26038 R14: 00007efd9fa25fa0 R15: 00007ffe61bd6818 [ 158.503117][T11331] [ 158.503166][T11331] ERROR: Out of memory at tomoyo_realpath_from_path. [ 158.651168][ T6218] usb 13-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 158.656776][ T6218] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.656786][ T6218] usb 13-1: Product: syz [ 158.656794][ T6218] usb 13-1: Manufacturer: syz [ 158.656801][ T6218] usb 13-1: SerialNumber: syz [ 158.658917][ T6218] usb 13-1: config 0 descriptor?? [ 158.706096][T11351] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1618'. [ 158.830941][T11362] input: syz0 as /devices/virtual/input/input10 [ 158.873209][ T5881] usb 13-1: USB disconnect, device number 8 [ 159.010568][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1627'. [ 159.013934][ T42] audit: type=1400 audit(1792401424.059:1062): avc: denied { write } for pid=11373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.060240][ T42] audit: type=1400 audit(1792401424.109:1063): avc: denied { write } for pid=11382 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.071632][T11385] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 159.108299][T11387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.108628][T11387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.177085][ T42] audit: type=1400 audit(1792401424.219:1064): avc: denied { write } for pid=11393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.221430][ T42] audit: type=1400 audit(1792401424.269:1065): avc: denied { write } for pid=11396 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.663758][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1639'. [ 159.663769][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1639'. [ 159.867416][ T42] audit: type=1400 audit(1792401424.909:1066): avc: denied { write } for pid=11441 comm="syz.7.1649" name="rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 159.878284][ T62] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 159.974422][T11450] FAULT_INJECTION: forcing a failure. [ 159.974422][T11450] name failslab, interval 1, probability 0, space 0, times 0 [ 159.974492][T11450] CPU: 0 UID: 0 PID: 11450 Comm: syz.7.1652 Not tainted syzkaller #0 PREEMPT(full) [ 159.974506][T11450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.974513][T11450] Call Trace: [ 159.974517][T11450] [ 159.974523][T11450] dump_stack_lvl+0x100/0x190 [ 159.974544][T11450] should_fail_ex.cold+0x5/0xa [ 159.974561][T11450] should_failslab+0xc2/0x120 [ 159.974579][T11450] kmem_cache_alloc_noprof+0x92/0x6a0 [ 159.974595][T11450] ? op_alloc+0x2b/0x4e0 [ 159.974630][T11450] op_alloc+0x2b/0x4e0 [ 159.974649][T11450] orangefs_get_tree+0xf9/0x1080 [ 159.974666][T11450] ? __pfx_orangefs_get_tree+0x10/0x10 [ 159.974680][T11450] ? rcu_is_watching+0x13/0xc0 [ 159.974697][T11450] ? cap_capable+0x107/0x430 [ 159.974717][T11450] ? bpf_lsm_capable+0x9/0x10 [ 159.974733][T11450] vfs_get_tree+0x92/0x320 [ 159.974746][T11450] vfs_cmd_create+0xd7/0x2a0 [ 159.974761][T11450] __do_sys_fsconfig+0x55a/0xcb0 [ 159.974778][T11450] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 159.974792][T11450] ? fput+0x7c/0x100 [ 159.974816][T11450] do_syscall_64+0x123/0x790 [ 159.974836][T11450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.974848][T11450] RIP: 0033:0x7f6de3d9e559 [ 159.974858][T11450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.974869][T11450] RSP: 002b:00007f6de4c73028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 159.974882][T11450] RAX: ffffffffffffffda RBX: 00007f6de4025fa0 RCX: 00007f6de3d9e559 [ 159.974890][T11450] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 159.974897][T11450] RBP: 00007f6de3e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 159.974905][T11450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.974913][T11450] R13: 00007f6de4026038 R14: 00007f6de4025fa0 R15: 00007ffcdac86728 [ 159.974929][T11450] [ 159.974976][T11450] op_alloc: kmem_cache_zalloc failed! [ 159.975826][ T42] audit: type=1400 audit(1792401425.019:1067): avc: denied { accept } for pid=11449 comm="syz.7.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 160.030993][ T62] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 160.034640][ T62] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.034659][ T62] usb 8-1: Product: syz [ 160.034673][ T62] usb 8-1: Manufacturer: syz [ 160.034688][ T62] usb 8-1: SerialNumber: syz [ 160.040127][ T62] usb 8-1: config 0 descriptor?? [ 160.046791][ T42] audit: type=1400 audit(1792401425.089:1068): avc: denied { read } for pid=11449 comm="syz.7.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 160.255422][ T5810] usb 8-1: USB disconnect, device number 7 [ 160.761413][T11465] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1659'. [ 160.875045][T11475] FAULT_INJECTION: forcing a failure. [ 160.875045][T11475] name failslab, interval 1, probability 0, space 0, times 0 [ 160.875063][T11475] CPU: 0 UID: 0 PID: 11475 Comm: syz.3.1663 Not tainted syzkaller #0 PREEMPT(full) [ 160.875075][T11475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.875083][T11475] Call Trace: [ 160.875088][T11475] [ 160.875093][T11475] dump_stack_lvl+0x100/0x190 [ 160.875114][T11475] should_fail_ex.cold+0x5/0xa [ 160.875130][T11475] should_failslab+0xc2/0x120 [ 160.875146][T11475] __kmalloc_noprof+0xfc/0x840 [ 160.875176][T11475] ? rcu_is_watching+0x13/0xc0 [ 160.875193][T11475] ? tomoyo_realpath_from_path+0xb6/0x690 [ 160.875208][T11475] tomoyo_realpath_from_path+0xb6/0x690 [ 160.875222][T11475] tomoyo_path_number_perm+0x23c/0x580 [ 160.875237][T11475] ? tomoyo_path_number_perm+0x22e/0x580 [ 160.875253][T11475] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 160.875274][T11475] ? __lock_acquire+0x5c0/0x1f40 [ 160.875295][T11475] ? __fget_files+0x34/0x3d0 [ 160.875311][T11475] ? find_held_lock+0x2b/0x80 [ 160.875327][T11475] ? hook_file_ioctl_common+0x140/0x440 [ 160.875342][T11475] ? __fget_files+0x21f/0x3d0 [ 160.875361][T11475] security_file_ioctl+0xd3/0x230 [ 160.875377][T11475] __x64_sys_ioctl+0xb7/0x210 [ 160.875392][T11475] do_syscall_64+0x123/0x790 [ 160.875411][T11475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.875422][T11475] RIP: 0033:0x7efd9f79e559 [ 160.875432][T11475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.875444][T11475] RSP: 002b:00007efd9d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.875455][T11475] RAX: ffffffffffffffda RBX: 00007efd9fa25fa0 RCX: 00007efd9f79e559 [ 160.875463][T11475] RDX: 0000000000000000 RSI: 00000000000064d2 RDI: 0000000000000003 [ 160.875470][T11475] RBP: 00007efd9d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 160.875477][T11475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.875483][T11475] R13: 00007efd9fa26038 R14: 00007efd9fa25fa0 R15: 00007ffe61bd6818 [ 160.875499][T11475] [ 160.875566][T11475] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.947248][T11477] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 161.173035][T11492] FAULT_INJECTION: forcing a failure. [ 161.173035][T11492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.173054][T11492] CPU: 3 UID: 0 PID: 11492 Comm: syz.0.1671 Not tainted syzkaller #0 PREEMPT(full) [ 161.173066][T11492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.173073][T11492] Call Trace: [ 161.173078][T11492] [ 161.173083][T11492] dump_stack_lvl+0x100/0x190 [ 161.173104][T11492] should_fail_ex.cold+0x5/0xa [ 161.173120][T11492] _copy_from_iter+0x1f4/0x1690 [ 161.173138][T11492] ? __asan_memset+0x23/0x50 [ 161.173152][T11492] ? __pfx__copy_from_iter+0x10/0x10 [ 161.173168][T11492] ? __pfx___alloc_skb+0x10/0x10 [ 161.173185][T11492] netlink_sendmsg+0x808/0xda0 [ 161.173199][T11492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.173211][T11492] ? selinux_socket_sendmsg+0x198/0x2f0 [ 161.173230][T11492] ____sys_sendmsg+0xa4d/0xbe0 [ 161.173243][T11492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.173261][T11492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.173279][T11492] ? lock_acquire+0x1d1/0x380 [ 161.173292][T11492] ? get_pid_task+0x2a/0x250 [ 161.173309][T11492] ___sys_sendmsg+0x190/0x1e0 [ 161.173325][T11492] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.173340][T11492] ? get_pid_task+0x106/0x250 [ 161.173361][T11492] ? find_held_lock+0x2b/0x80 [ 161.173386][T11492] __sys_sendmsg+0x160/0x210 [ 161.173399][T11492] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.173418][T11492] do_syscall_64+0x123/0x790 [ 161.173436][T11492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.173448][T11492] RIP: 0033:0x7f30e1d9e559 [ 161.173457][T11492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.173468][T11492] RSP: 002b:00007f30e2c0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.173480][T11492] RAX: ffffffffffffffda RBX: 00007f30e2025fa0 RCX: 00007f30e1d9e559 [ 161.173526][T11492] RDX: 0000000004008094 RSI: 00002000000001c0 RDI: 0000000000000003 [ 161.173534][T11492] RBP: 00007f30e2c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 161.173541][T11492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.173547][T11492] R13: 00007f30e2026038 R14: 00007f30e2025fa0 R15: 00007ffd5a70ea28 [ 161.173562][T11492] [ 161.203816][T11494] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1672'. [ 161.298338][ T6218] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 161.367555][ T42] audit: type=1400 audit(1792401426.409:1069): avc: denied { load_policy } for pid=11498 comm="syz.0.1674" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 161.370697][T11500] SELinux: policydb magic number 0x8646e69 does not match expected magic number 0xf97cff8c [ 161.370872][T11500] SELinux: failed to load policy [ 161.448941][ T6218] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 161.452272][ T6218] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.452284][ T6218] usb 8-1: Product: syz [ 161.452293][ T6218] usb 8-1: Manufacturer: syz [ 161.452301][ T6218] usb 8-1: SerialNumber: syz [ 161.455586][ T6218] usb 8-1: config 0 descriptor?? [ 161.482303][ T42] audit: type=1400 audit(1792401426.529:1070): avc: denied { create } for pid=11503 comm="syz.0.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 161.661795][ T6218] usb 8-1: USB disconnect, device number 8 [ 161.984176][T11535] FAULT_INJECTION: forcing a failure. [ 161.984176][T11535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.984221][T11535] CPU: 3 UID: 0 PID: 11535 Comm: syz.0.1683 Not tainted syzkaller #0 PREEMPT(full) [ 161.984235][T11535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.984251][T11535] Call Trace: [ 161.984255][T11535] [ 161.984260][T11535] dump_stack_lvl+0x100/0x190 [ 161.984282][T11535] should_fail_ex.cold+0x5/0xa [ 161.984299][T11535] _copy_from_user+0x2e/0xd0 [ 161.984322][T11535] generic_map_update_batch+0x51d/0x860 [ 161.984340][T11535] ? __pfx_generic_map_update_batch+0x10/0x10 [ 161.984357][T11535] ? __pfx_generic_map_update_batch+0x10/0x10 [ 161.984370][T11535] bpf_map_do_batch+0x66f/0x6d0 [ 161.984389][T11535] __sys_bpf+0x4ce/0x4a30 [ 161.984406][T11535] ? __pfx___sys_bpf+0x10/0x10 [ 161.984419][T11535] ? find_held_lock+0x2b/0x80 [ 161.984436][T11535] ? get_pid_task+0xfc/0x250 [ 161.984452][T11535] ? get_pid_task+0xfc/0x250 [ 161.984473][T11535] ? find_held_lock+0x2b/0x80 [ 161.984493][T11535] ? rcu_read_lock_any_held+0x6a/0x90 [ 161.984526][T11535] ? find_held_lock+0x2b/0x80 [ 161.984544][T11535] ? ksys_write+0x190/0x250 [ 161.984557][T11535] ? ksys_write+0x190/0x250 [ 161.984570][T11535] ? lock_acquire+0x1d1/0x380 [ 161.984592][T11535] ? fput+0x7c/0x100 [ 161.984608][T11535] ? ksys_write+0x1ac/0x250 [ 161.984623][T11535] ? __x64_sys_bpf+0xce/0x140 [ 161.984635][T11535] __x64_sys_bpf+0xce/0x140 [ 161.984648][T11535] ? do_syscall_64+0xae/0x790 [ 161.984666][T11535] do_syscall_64+0x123/0x790 [ 161.984688][T11535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.984700][T11535] RIP: 0033:0x7f30e1d9e559 [ 161.984710][T11535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.984721][T11535] RSP: 002b:00007f30e2bed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.984743][T11535] RAX: ffffffffffffffda RBX: 00007f30e2026090 RCX: 00007f30e1d9e559 [ 161.984750][T11535] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 161.984757][T11535] RBP: 00007f30e2bed090 R08: 0000000000000000 R09: 0000000000000000 [ 161.984764][T11535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.984770][T11535] R13: 00007f30e2026128 R14: 00007f30e2026090 R15: 00007ffd5a70ea28 [ 161.984785][T11535] [ 163.242932][T11573] FAULT_INJECTION: forcing a failure. [ 163.242932][T11573] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 163.242951][T11573] CPU: 3 UID: 0 PID: 11573 Comm: syz.0.1700 Not tainted syzkaller #0 PREEMPT(full) [ 163.242964][T11573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.242971][T11573] Call Trace: [ 163.242976][T11573] [ 163.242980][T11573] dump_stack_lvl+0x100/0x190 [ 163.243002][T11573] should_fail_ex.cold+0x5/0xa [ 163.243018][T11573] ? prepare_alloc_pages+0x16d/0x5b0 [ 163.243037][T11573] should_fail_alloc_page+0xeb/0x140 [ 163.243055][T11573] prepare_alloc_pages+0x1f0/0x5b0 [ 163.243072][T11573] ? is_bpf_text_address+0x94/0x1a0 [ 163.243091][T11573] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 163.243113][T11573] ? stack_trace_save+0x8e/0xc0 [ 163.243125][T11573] ? __pfx_stack_trace_save+0x10/0x10 [ 163.243136][T11573] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 163.243149][T11573] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 ** 467 printk messages dropped ** ** 210 printk messages dropped ** ** 108 printk messages dropped ** ** 106 printk messages dropped ** ** 94 printk messages dropped ** ** 91 printk messages dropped ** ** 92 printk messages dropped ** ** 101 printk messages dropped ** ** 98 printk messages dropped ** ** 89 printk messages dropped ** ** 98 printk messages dropped ** ** 93 printk messages dropped ** ** 101 printk messages dropped ** ** 93 printk messages dropped ** ** 90 printk messages dropped ** ** 99 printk messages dropped ** ** 88 printk messages dropped ** ** 101 printk messages dropped ** ** 94 printk messages dropped ** ** 88 printk messages dropped ** ** 60 printk messages dropped ** [ 163.358441][ C0] net_ratelimit: 146 callbacks suppressed [ 163.401000][ T2337] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 163.437691][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 163.437704][ T42] audit: type=1400 audit(1792401428.479:1074): avc: denied { nlmsg_read } for pid=11580 comm="syz.3.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.568742][ T2337] usb 13-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 163.571460][ T2337] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.571476][ T2337] usb 13-1: Product: syz [ 163.571487][ T2337] usb 13-1: Manufacturer: syz [ 163.571498][ T2337] usb 13-1: SerialNumber: syz [ 163.574100][ T2337] usb 13-1: config 0 descriptor?? [ 163.764125][T11607] FAULT_INJECTION: forcing a failure. [ 163.764125][T11607] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 163.764151][T11607] CPU: 1 UID: 0 PID: 11607 Comm: syz.7.1714 Not tainted syzkaller #0 PREEMPT(full) [ 163.764164][T11607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.764177][T11607] Call Trace: [ 163.764185][T11607] [ 163.764197][T11607] dump_stack_lvl+0x100/0x190 [ 163.764226][T11607] should_fail_ex.cold+0x5/0xa [ 163.764241][T11607] ? prepare_alloc_pages+0x16d/0x5b0 [ 163.764263][T11607] should_fail_alloc_page+0xeb/0x140 [ 163.764281][T11607] prepare_alloc_pages+0x1f0/0x5b0 [ 163.764297][T11607] ? is_bpf_text_address+0x94/0x1a0 [ 163.764316][T11607] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 163.764338][T11607] ? stack_trace_save+0x8e/0xc0 [ 163.764350][T11607] ? __pfx_stack_trace_save+0x10/0x10 [ 163.764362][T11607] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 163.764374][T11607] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 163.764388][T11607] ? is_bpf_text_address+0x94/0x1a0 [ 163.764406][T11607] ? kasan_save_stack+0x3f/0x50 [ 163.764420][T11607] ? kasan_save_stack+0x30/0x50 [ 163.764434][T11607] ? kasan_save_track+0x14/0x30 [ 163.764448][T11607] ? __kasan_slab_alloc+0x89/0x90 [ 163.764463][T11607] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 163.764477][T11607] ? alloc_vmap_area+0x1814/0x2bb0 [ 163.764492][T11607] ? __get_vm_area_node+0x1ed/0x350 [ 163.764532][T11607] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 163.764549][T11607] ? __vmalloc_node_noprof+0xad/0xf0 [ 163.764565][T11607] ? copy_process+0x80b/0x8430 [ 163.764579][T11607] ? kernel_clone+0x176/0x9d0 [ 163.764592][T11607] ? __do_sys_clone+0xd9/0x120 [ 163.764605][T11607] ? do_syscall_64+0x123/0x790 [ 163.764626][T11607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.764645][T11607] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 163.764661][T11607] ? policy_nodemask+0xed/0x4f0 [ 163.764679][T11607] alloc_pages_mpol+0x201/0x550 [ 163.764697][T11607] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 163.764718][T11607] alloc_pages_noprof+0x1a/0x160 [ 163.764732][T11607] get_free_pages_noprof+0x10/0xb0 [ 163.764747][T11607] __kasan_populate_vmalloc+0xa0/0x210 [ 163.764765][T11607] alloc_vmap_area+0x95d/0x2bb0 [ 163.764785][T11607] ? kasan_save_track+0x14/0x30 [ 163.764800][T11607] ? __kasan_kmalloc+0xaa/0xb0 [ 163.764814][T11607] ? __pfx_alloc_vmap_area+0x10/0x10 [ 163.764830][T11607] ? __get_vm_area_node+0x124/0x350 [ 163.764848][T11607] __get_vm_area_node+0x1ed/0x350 [ 163.764867][T11607] __vmalloc_node_range_noprof+0x268/0x1420 [ 163.764885][T11607] ? kernel_clone+0x176/0x9d0 [ 163.764897][T11607] ? lock_acquire+0x1d1/0x380 [ 163.764910][T11607] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 163.764924][T11607] ? find_held_lock+0x2b/0x80 [ 163.764941][T11607] ? rcu_read_unlock+0x17/0x60 [ 163.764954][T11607] ? kernel_clone+0x176/0x9d0 [ 163.764968][T11607] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 163.764983][T11607] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 163.765002][T11607] ? rcu_is_watching+0x13/0xc0 [ 163.765019][T11607] ? trace_kmem_cache_alloc+0xdd/0x100 [ 163.765037][T11607] ? kernel_clone+0x176/0x9d0 [ 163.765050][T11607] __vmalloc_node_noprof+0xad/0xf0 [ 163.765067][T11607] ? kernel_clone+0x176/0x9d0 [ 163.765081][T11607] copy_process+0x80b/0x8430 [ 163.765101][T11607] ? __pfx___futex_wait+0x10/0x10 [ 163.765114][T11607] ? __pfx_try_to_wake_up+0x10/0x10 [ 163.765127][T11607] ? futex_hash+0x311/0x400 [ 163.765149][T11607] ? __pfx_copy_process+0x10/0x10 [ 163.765164][T11607] ? futex_wake+0x4ea/0x5e0 [ 163.765182][T11607] kernel_clone+0x176/0x9d0 [ 163.765197][T11607] ? __pfx_kernel_clone+0x10/0x10 [ 163.765215][T11607] ? ksys_write+0x190/0x250 [ 163.765233][T11607] __do_sys_clone+0xd9/0x120 [ 163.765246][T11607] ? __pfx___do_sys_clone+0x10/0x10 [ 163.765259][T11607] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.765289][T11607] do_syscall_64+0x123/0x790 [ 163.765307][T11607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.765319][T11607] RIP: 0033:0x7f6de3d9e559 [ 163.765329][T11607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.765341][T11607] RSP: 002b:00007f6de4c72fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 163.765361][T11607] RAX: ffffffffffffffda RBX: 00007f6de4025fa0 RCX: 00007f6de3d9e559 [ 163.765371][T11607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 163.765378][T11607] RBP: 00007f6de3e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 163.765386][T11607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 163.765394][T11607] R13: 00007f6de4026038 R14: 00007f6de4025fa0 R15: 00007ffcdac86728 [ 163.765409][T11607] [ 163.781948][ T2337] usb 13-1: USB disconnect, device number 9 [ 163.914759][T11616] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1718'. [ 164.135627][T11631] FAULT_INJECTION: forcing a failure. [ 164.135627][T11631] name failslab, interval 1, probability 0, space 0, times 0 [ 164.135648][T11631] CPU: 2 UID: 0 PID: 11631 Comm: syz.7.1722 Not tainted syzkaller #0 PREEMPT(full) [ 164.135661][T11631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.135668][T11631] Call Trace: [ 164.135673][T11631] [ 164.135678][T11631] dump_stack_lvl+0x100/0x190 [ 164.135699][T11631] should_fail_ex.cold+0x5/0xa [ 164.135716][T11631] should_failslab+0xc2/0x120 [ 164.135733][T11631] __kvmalloc_node_noprof+0x113/0x9b0 [ 164.135747][T11631] ? fdget_pos+0x2aa/0x380 [ 164.135759][T11631] ? traverse.part.0.constprop.0+0x397/0x650 [ 164.135778][T11631] traverse.part.0.constprop.0+0x397/0x650 [ 164.135795][T11631] ? __fget_files+0x215/0x3d0 [ 164.135814][T11631] seq_lseek+0x2fb/0x430 [ 164.135832][T11631] tracing_lseek+0xa2/0xd0 [ 164.135850][T11631] ksys_lseek+0xf3/0x1b0 [ 164.135864][T11631] do_syscall_64+0x123/0x790 [ 164.135882][T11631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.135895][T11631] RIP: 0033:0x7f6de3d9e559 [ 164.135904][T11631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.135916][T11631] RSP: 002b:00007f6de4c73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 164.135927][T11631] RAX: ffffffffffffffda RBX: 00007f6de4025fa0 RCX: 00007f6de3d9e559 [ 164.135935][T11631] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 164.135941][T11631] RBP: 00007f6de4c73090 R08: 0000000000000000 R09: 0000000000000000 [ 164.135948][T11631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.135955][T11631] R13: 00007f6de4026038 R14: 00007f6de4025fa0 R15: 00007ffcdac86728 [ 164.135970][T11631] [ 164.289717][T11638] FAULT_INJECTION: forcing a failure. [ 164.289717][T11638] name failslab, interval 1, probability 0, space 0, times 0 [ 164.289754][T11638] CPU: 0 UID: 0 PID: 11638 Comm: syz.0.1725 Not tainted syzkaller #0 PREEMPT(full) [ 164.289778][T11638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.289793][T11638] Call Trace: [ 164.289801][T11638] [ 164.289806][T11638] dump_stack_lvl+0x100/0x190 [ 164.289838][T11638] should_fail_ex.cold+0x5/0xa [ 164.289856][T11638] should_failslab+0xc2/0x120 [ 164.289877][T11638] __kmalloc_noprof+0xfc/0x840 [ 164.289892][T11638] ? lsm_blob_alloc+0x68/0x90 [ 164.289907][T11638] lsm_blob_alloc+0x68/0x90 [ 164.289920][T11638] security_task_alloc+0x2a/0x260 [ 164.289932][T11638] copy_process+0x2c19/0x8430 [ 164.289954][T11638] ? __pfx_copy_process+0x10/0x10 [ 164.289968][T11638] ? futex_wake+0x4ea/0x5e0 [ 164.289986][T11638] kernel_clone+0x176/0x9d0 [ 164.290000][T11638] ? __pfx_kernel_clone+0x10/0x10 [ 164.290017][T11638] ? ksys_write+0x190/0x250 [ 164.290035][T11638] __do_sys_clone+0xd9/0x120 [ 164.290048][T11638] ? __pfx___do_sys_clone+0x10/0x10 [ 164.290060][T11638] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 164.290094][T11638] do_syscall_64+0x123/0x790 [ 164.290113][T11638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.290125][T11638] RIP: 0033:0x7f30e1d9e559 [ 164.290135][T11638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.290146][T11638] RSP: 002b:00007f30e2c0dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 164.290166][T11638] RAX: ffffffffffffffda RBX: 00007f30e2025fa0 RCX: 00007f30e1d9e559 [ 164.290175][T11638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 164.290182][T11638] RBP: 00007f30e1e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 164.290190][T11638] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 164.290197][T11638] R13: 00007f30e2026038 R14: 00007f30e2025fa0 R15: 00007ffd5a70ea28 [ 164.290213][T11638] [ 164.458784][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1731'. [ 164.731285][ T5732] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.733989][ T5732] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.734814][ T5732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.737051][ T5732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.738064][ T5732] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.863682][T11664] FAULT_INJECTION: forcing a failure. [ 164.863682][T11664] name failslab, interval 1, probability 0, space 0, times 0 [ 164.863700][T11664] CPU: 2 UID: 0 PID: 11664 Comm: syz.7.1743 Not tainted syzkaller #0 PREEMPT(full) [ 164.863714][T11664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.863720][T11664] Call Trace: [ 164.863725][T11664] [ 164.863729][T11664] dump_stack_lvl+0x100/0x190 [ 164.863749][T11664] should_fail_ex.cold+0x5/0xa [ 164.863763][T11664] ? __netlink_lookup+0x692/0x950 [ 164.863790][T11664] should_failslab+0xc2/0x120 [ 164.863807][T11664] kmem_cache_alloc_noprof+0x92/0x6a0 [ 164.863822][T11664] ? skb_clone+0x190/0x400 [ 164.863837][T11664] skb_clone+0x190/0x400 [ 164.863849][T11664] netlink_deliver_tap+0xaed/0xcc0 [ 164.863869][T11664] netlink_unicast+0x6ff/0x950 [ 164.863882][T11664] ? __pfx_netlink_unicast+0x10/0x10 [ 164.863896][T11664] netlink_sendmsg+0x8b0/0xda0 [ 164.863910][T11664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.863922][T11664] ? selinux_socket_sendmsg+0x198/0x2f0 [ 164.863941][T11664] ____sys_sendmsg+0xa4d/0xbe0 [ 164.863954][T11664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.863966][T11664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.863984][T11664] ? lock_acquire+0x1d1/0x380 [ 164.863997][T11664] ? get_pid_task+0x2a/0x250 [ 164.864015][T11664] ___sys_sendmsg+0x190/0x1e0 [ 164.864047][T11664] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.864062][T11664] ? get_pid_task+0x106/0x250 [ 164.864084][T11664] ? find_held_lock+0x2b/0x80 [ 164.864110][T11664] __sys_sendmsg+0x160/0x210 [ 164.864122][T11664] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.864142][T11664] do_syscall_64+0x123/0x790 [ ** replaying previous printk message ** [ 164.864161][T11664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.864173][T11664] RIP: 0033:0x7f6de3d9e559 [ 164.864183][T11664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.864194][T11664] RSP: 002b:00007f6de4c73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.864205][T11664] RAX: ffffffffffffffda RBX: 00007f6de4025fa0 RCX: 00007f6de3d9e559 [ 164.864212][T11664] RDX: 0000000020004844 RSI: 0000200000000300 RDI: 0000000000000009 [ 164.864219][T11664] RBP: 00007f6de4c73090 R08: 0000000000000000 R09: 0000000000000000 [ 164.864226][T11664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.864236][T11664] R13: 00007f6de4026038 R14: 00007f6de4025fa0 R15: 00007ffcdac86728 [ 164.864252][T11664] [ 164.864263][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1743'. [ 164.867600][T11669] overlayfs: mkdir(file1/file7, 040700) [ 164.867713][T11669] overlayfs: ...mkdir = 0 [ 164.867750][T11669] overlayfs: setxattr(file1/file7, "trusted.overlay.opaque", "y", 1, 0) = 0 [ 164.867776][T11669] overlayfs: getxattr(file1/file7, "trusted.overlay.impure", "", 1, 0) = -61 [ 164.867791][T11669] overlayfs: getxattr(file1/file7, "trusted.overlay.origin", "", 0, 0) = -61 [ 164.867805][T11669] overlayfs: getxattr(file1/file7, "trusted.overlay.protattr", "", 32, 0) = -61 [ 164.870132][T11663] kobject: 'kvm' (ffff888025387000): kobject_uevent_env [ 164.870157][T11663] kobject: 'kvm' (ffff888025387000): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 164.877670][T11678] async_waiting @ 11678 [ 164.877682][T11678] async_continuing @ 11678 after 1 usec [ 164.895329][T11679] async_waiting @ 11679 [ 164.895342][T11679] async_continuing @ 11679 after 1 usec [ 164.909698][T11669] overlayfs: setxattr(295/file1, "trusted.overlay.impure", "y", 1, 0) = 0 [ 164.909886][T11669] overlayfs: symlink(".", index/#1e) = 0 [ 164.909993][T11669] overlayfs: getxattr(295/file0, "security.capability", "", 0, 0) = 20 [ 164.910032][T11669] overlayfs: getxattr(295/file0, "security.capability", "\0\0\0\002Z\r\0\0\005\0\0\0\003\0\0\0\001\0\0\0", 20, 0) = 20 [ 164.910079][T11669] overlayfs: setxattr(index/#1e, "security.capability", "\0\0\0\002Z\r\0\0\005\0\0\0\003\0\0\0\001\0\0\0", 20, 0) = 0 [ 164.910139][T11669] overlayfs: setxattr(index/#1e, "trusted.overlay.origin", "\0û!\0\001WÒ´÷¶\032M\022£Þs\017\225:\200Êz\222[4H\006\0\0\0\0\0\0", 33, 0) = 0 [ 164.910170][T11669] overlayfs: rename(index/#1e, file1/file0, 0x0) [ 164.910283][T11669] overlayfs: setxattr(file1/file7, "trusted.overlay.impure", "y", 1, 0) = 0 [ 164.910317][T11669] overlayfs: rename(file1/file0, file7/file0, 0x4) [ 164.913850][T11680] async_waiting @ 11680 [ 164.913867][T11680] async_continuing @ 11680 after 1 usec [ 164.919445][T11669] ================================================================== [ 164.919462][T11669] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 164.919481][T11669] Read of size 8 at addr ffff88802f9db618 by task syz.8.1737/11669 [ 164.919490][T11669] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 164.919496][T11669] CPU: 2 UID: 0 PID: 11669 Comm: syz.8.1737 Not tainted syzkaller #0 PREEMPT(full) [ 164.919509][T11669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.919516][T11669] Call Trace: [ 164.919520][T11669] [ 164.919525][T11669] dump_stack_lvl+0x100/0x190 [ 164.919542][T11669] print_report+0x13d/0x4b0 [ 164.919559][T11669] ? __virt_addr_valid+0x239/0x430 [ 164.919573][T11669] ? dvb_device_open+0x33f/0x3b0 [ 164.919586][T11669] kasan_report+0xdf/0x1c0 [ 164.919603][T11669] ? dvb_device_open+0x33f/0x3b0 [ 164.919617][T11669] ? __pfx_dvb_device_open+0x10/0x10 [ 164.919631][T11669] dvb_device_open+0x33f/0x3b0 [ 164.919646][T11669] ? __pfx_dvb_device_open+0x10/0x10 [ 164.919661][T11669] chrdev_open+0x234/0x6a0 [ 164.919677][T11669] ? __pfx_chrdev_open+0x10/0x10 [ 164.919693][T11669] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 164.919707][T11669] do_dentry_open+0x6ab/0x14d0 [ 164.919721][T11669] ? __pfx_chrdev_open+0x10/0x10 [ 164.919738][T11669] vfs_open+0x82/0x3f0 [ 164.919755][T11669] path_openat+0x1a23/0x2450 [ 164.919771][T11669] ? __pfx_path_openat+0x10/0x10 [ 164.919789][T11669] do_file_open+0x20e/0x430 [ 164.919805][T11669] ? __pfx_do_file_open+0x10/0x10 [ 164.919825][T11669] ? _raw_spin_unlock+0x28/0x50 [ 164.919839][T11669] ? alloc_fd+0x471/0x7a0 [ 164.919857][T11669] do_sys_openat2+0x10f/0x1e0 [ 164.919867][T11669] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.919877][T11669] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 164.919893][T11669] ? arch_do_signal_or_restart+0x1f9/0x7e0 [ 164.919911][T11669] __x64_sys_openat+0x12d/0x210 [ 164.919922][T11669] ? __pfx___x64_sys_openat+0x10/0x10 [ 164.919936][T11669] do_syscall_64+0x123/0x790 [ 164.919953][T11669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.919965][T11669] RIP: 0033:0x7f64e5f5ed8e [ 164.919974][T11669] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.919986][T11669] RSP: 002b:00007f64e6eb1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.919998][T11669] RAX: ffffffffffffffda RBX: 00007f64e6eb26c0 RCX: 00007f64e5f5ed8e [ 164.920005][T11669] RDX: 0000000000000002 RSI: 00007f64e6eb1c00 RDI: ffffffffffffff9c [ 164.920013][T11669] RBP: 00007f64e6eb1c00 R08: 0000000000000000 R09: 0000000000000000 [ 164.920019][T11669] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 164.920026][T11669] R13: 00007f64e6226038 R14: 00007f64e6225fa0 R15: 00007ffc1b703cb8 [ 164.920037][T11669] [ 164.920042][T11669] [ 164.920045][T11669] Allocated by task 1: [ 164.920059][T11669] kasan_save_stack+0x30/0x50 [ 164.920074][T11669] kasan_save_track+0x14/0x30 [ 164.920087][T11669] __kasan_kmalloc+0xaa/0xb0 [ 164.920101][T11669] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 164.920113][T11669] dvb_register_device+0x1d6/0x1e20 [ 164.920127][T11669] dvb_register_frontend+0x552/0x820 [ 164.920140][T11669] vidtv_bridge_probe+0x44b/0xa30 [ 164.920157][T11669] platform_probe+0x106/0x1d0 [ 164.920171][T11669] really_probe+0x241/0xa60 [ 164.920179][T11669] __driver_probe_device+0x210/0x460 [ 164.920188][T11669] driver_probe_device+0x4a/0x140 [ 164.920198][T11669] __driver_attach+0x21f/0x5b0 [ 164.920206][T11669] bus_for_each_dev+0x13e/0x1d0 [ 164.920219][T11669] bus_add_driver+0x305/0x5b0 [ 164.920238][T11669] driver_register+0x1e2/0x360 [ 164.920248][T11669] vidtv_bridge_init+0x52/0x80 [ 164.920259][T11669] do_one_initcall+0x11c/0x6f0 [ 164.920270][T11669] kernel_init_freeable+0x6ea/0x7b0 [ 164.920284][T11669] kernel_init+0x21/0x1e0 [ 164.920294][T11669] ret_from_fork+0x730/0xd60 [ 164.920306][T11669] ret_from_fork_asm+0x1a/0x30 [ 164.920317][T11669] [ 164.920319][T11669] Freed by task 11603: [ 164.920325][T11669] kasan_save_stack+0x30/0x50 [ 164.920338][T11669] kasan_save_track+0x14/0x30 [ 164.920351][T11669] kasan_save_free_info+0x3b/0x70 [ 164.920362][T11669] __kasan_slab_free+0x5f/0x80 [ 164.920376][T11669] kfree+0x22b/0x6d0 [ 164.920384][T11669] dvb_device_put.part.0+0x57/0x90 [ 164.920397][T11669] dvb_device_open+0x2ba/0x3b0 [ 164.920410][T11669] chrdev_open+0x234/0x6a0 [ 164.920424][T11669] do_dentry_open+0x6ab/0x14d0 [ 164.920436][T11669] vfs_open+0x82/0x3f0 [ 164.920450][T11669] path_openat+0x1a23/0x2450 [ 164.920464][T11669] do_file_open+0x20e/0x430 [ 164.920478][T11669] do_sys_openat2+0x10f/0x1e0 [ 164.920487][T11669] __x64_sys_openat+0x12d/0x210 [ 164.920528][T11669] do_syscall_64+0x123/0x790 [ 164.920551][T11669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.920566][T11669] [ 164.920570][T11669] The buggy address belongs to the object at ffff88802f9db600 [ 164.920570][T11669] which belongs to the cache kmalloc-256 of size 256 [ 164.920581][T11669] The buggy address is located 24 bytes inside of [ 164.920581][T11669] freed 256-byte region [ffff88802f9db600, ffff88802f9db700) [ 164.920592][T11669] [ 164.920595][T11669] The buggy address belongs to the physical page: [ 164.920600][T11669] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f9dac00 pfn:0x2f9da [ 164.920619][T11669] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 164.920628][T11669] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 164.920640][T11669] page_type: f5(slab) [ 164.920650][T11669] raw: 00fff00000000240 ffff88801d042b40 ffffea0000bb6c90 ffffea0000a00590 [ 164.920669][T11669] raw: ffff88802f9dac00 000000000010000f 00000000f5000000 0000000000000000 [ 164.920679][T11669] head: 00fff00000000240 ffff88801d042b40 ffffea0000bb6c90 ffffea0000a00590 [ 164.920688][T11669] head: ffff88802f9dac00 000000000010000f 00000000f5000000 0000000000000000 [ 164.920698][T11669] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 164.920708][T11669] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 164.920716][T11669] page dumped because: kasan: bad access detected [ 164.920722][T11669] page_owner tracks the page as allocated [ 164.920726][T11669] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7494415243 [ 164.920746][T11669] post_alloc_hook+0xfd/0x120 [ 164.920757][T11669] get_page_from_freelist+0x110d/0x35d0 [ 164.920768][T11669] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 164.920780][T11669] new_slab+0xa9/0x6e0 [ 164.920790][T11669] refill_objects+0xe3/0x410 [ 164.920800][T11669] __pcs_replace_empty_main+0x35e/0x650 [ 164.920811][T11669] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 164.920821][T11669] bus_add_driver+0x92/0x5b0 [ 164.920835][T11669] driver_register+0x1e2/0x360 [ 164.920845][T11669] usb_register_driver+0x21c/0x3e0 [ 164.920857][T11669] do_one_initcall+0x11c/0x6f0 [ 164.920868][T11669] kernel_init_freeable+0x6ea/0x7b0 [ 164.920880][T11669] kernel_init+0x21/0x1e0 [ 164.920889][T11669] ret_from_fork+0x730/0xd60 [ 164.920900][T11669] ret_from_fork_asm+0x1a/0x30 [ 164.920911][T11669] page_owner free stack trace missing [ 164.920914][T11669] [ 164.920917][T11669] Memory state around the buggy address: [ 164.920922][T11669] ffff88802f9db500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 164.920931][T11669] ffff88802f9db580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 164.920945][T11669] >ffff88802f9db600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.920951][T11669] ^ [ 164.920957][T11669] ffff88802f9db680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.920964][T11669] ffff88802f9db700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 164.920970][T11669] ================================================================== [ 164.920978][T11669] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 165.243686][T11669] CPU: 2 UID: 0 PID: 11669 Comm: syz.8.1737 Not tainted syzkaller #0 PREEMPT(full) [ 165.246588][T11669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.249761][T11669] Call Trace: [ 165.250823][T11669] [ 165.251767][T11669] dump_stack_lvl+0x100/0x190 [ 165.253285][T11669] vpanic+0x553/0x970 [ 165.254549][T11669] ? __pfx_vpanic+0x10/0x10 [ 165.255980][T11669] ? __pfx_vprintk_emit+0x10/0x10 [ 165.257598][T11669] ? dvb_device_open+0x33f/0x3b0 [ 165.259160][T11669] panic+0xd1/0xe0 [ 165.260350][T11669] ? __pfx_panic+0x10/0x10 [ 165.261777][T11669] ? dvb_device_open+0x33f/0x3b0 [ 165.263338][T11669] check_panic_on_warn.cold+0x19/0x34 [ 165.265036][T11669] end_report.part.0+0x3a/0x90 [ 165.266551][T11669] kasan_report.cold+0xe/0x18 [ 165.268049][T11669] ? dvb_device_open+0x33f/0x3b0 [ 165.269634][T11669] ? __pfx_dvb_device_open+0x10/0x10 [ 165.271299][T11669] dvb_device_open+0x33f/0x3b0 [ 165.272826][T11669] ? __pfx_dvb_device_open+0x10/0x10 [ 165.274483][T11669] chrdev_open+0x234/0x6a0 [ 165.275897][T11669] ? __pfx_chrdev_open+0x10/0x10 [ 165.277478][T11669] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 165.279460][T11669] do_dentry_open+0x6ab/0x14d0 [ 165.280992][T11669] ? __pfx_chrdev_open+0x10/0x10 [ 165.282558][T11669] vfs_open+0x82/0x3f0 [ 165.283851][T11669] path_openat+0x1a23/0x2450 [ 165.285349][T11669] ? __pfx_path_openat+0x10/0x10 [ 165.286911][T11669] do_file_open+0x20e/0x430 [ 165.288361][T11669] ? __pfx_do_file_open+0x10/0x10 [ 165.289961][T11669] ? _raw_spin_unlock+0x28/0x50 [ 165.291492][T11669] ? alloc_fd+0x471/0x7a0 [ 165.292882][T11669] do_sys_openat2+0x10f/0x1e0 [ 165.294363][T11669] ? __pfx_do_sys_openat2+0x10/0x10 [ 165.295987][T11669] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 165.298016][T11669] ? arch_do_signal_or_restart+0x1f9/0x7e0 [ 165.299848][T11669] __x64_sys_openat+0x12d/0x210 [ 165.301415][T11669] ? __pfx___x64_sys_openat+0x10/0x10 [ 165.303096][T11669] do_syscall_64+0x123/0x790 [ 165.304591][T11669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.306448][T11669] RIP: 0033:0x7f64e5f5ed8e [ 165.307865][T11669] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 165.313851][T11669] RSP: 002b:00007f64e6eb1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 165.316429][T11669] RAX: ffffffffffffffda RBX: 00007f64e6eb26c0 RCX: 00007f64e5f5ed8e [ 165.318923][T11669] RDX: 0000000000000002 RSI: 00007f64e6eb1c00 RDI: ffffffffffffff9c [ 165.321382][T11669] RBP: 00007f64e6eb1c00 R08: 0000000000000000 R09: 0000000000000000 [ 165.323832][T11669] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 165.326316][T11669] R13: 00007f64e6226038 R14: 00007f64e6225fa0 R15: 00007ffc1b703cb8 [ 165.328799][T11669] [ 165.330328][T11669] Kernel Offset: disabled [ 165.331607][T11669] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:17:10 Registers: info registers vcpu 0 CPU#0 RAX=00000000ffffffff RBX=ffffffff8fdec620 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8e4da80e RDI=ffffffff8c625680 RBP=0000000000000000 RSP=ffffc900225c7568 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=00000000ffffffff R13=0000000000000246 R14=0000000000000001 R15=ffff88805617ee10 RIP=ffffffff8bd48a9a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555b316500 ffffffff 00c00000 GS =0000 ffff8880d4946000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0545ae4e9c CR3=000000006104d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 37656c69662f3165 6c69662f3632332f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcdac86c16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcdac86c16 00007ffcdac86c1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6de3e360e2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6de3e3611c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6de3e36280 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6de3e3610e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000c4 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000c4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff8fdec620 RCX=ffffffff92ed6201 RDX=0000000000000000 RSI=ffffffff81b9c54e RDI=ffffffff8fdec620 RBP=ffffffff81b9c54e RSP=ffffc900036d6f78 R8 =ffffffff92ed62a6 R9 =0000000000000007 R10=0000000000000200 R11=000000000000f623 R12=ffffc900036d7098 R13=ffffc900036d7048 R14=ffffc900036d7178 R15=ffffc900036d707c RIP=ffffffff81f003fe RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4a46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbff1357e20 CR3=000000002c4ee000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000f80 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff76db7660 00007fff76db7660 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbff07f6823 00007fbff07f6823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbff07f6e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbff07f6e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556b7a8368 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030100000c080650 800301a010004e80 04001000060c02bc 0008004f98030008 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 041000060102d210 8080100050b00352 800450a003030208 5180035180045090 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104800401800412 8408000008000100 000808060a0109bc 1008000480034010 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0050800404100006 0102d21080801000 50b00352800450a0 0303020851800351 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004509003010000 0c080650800301a0 10004e8004001000 060c02bc0008004f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 98030008004f9003 0010004f80030008 004ef8030208004e f0030208004ee803 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b2d115 RDI=ffffffff9cc7e6a0 RBP=ffffffff9cc7e660 RSP=ffffc9000c01f0e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000039 R14=000000000000000b R15=ffffc9000c01f400 RIP=ffffffff85b2d13f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f64e6eb26c0 ffffffff 00c00000 GS =0000 ffff8880d4b46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f64e5f87b80 CR3=000000002c368000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1b7041a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1b7041a6 00007ffc1b7041ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e60360e2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e603611c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e6036280 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e603610e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e61f65f8 00007f64e61f65c8 00007f64e61f6600 00007f64e61f65e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000105c09 RBX=ffff8880206ba580 RCX=ffffffff8bd482f5 RDX=0000000000000001 RSI=ffffffff8e3e3b01 RDI=ffffffff8c625680 RBP=ffffed10040d74b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4a67bd R10=ffff88806a533deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bd467af RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4c46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c280006 CR3=000000002c368000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1b7041a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc1b7041a6 00007ffc1b7041ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e60360e2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e603611c ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e6036280 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e603610e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f64e61f65f8 00007f64e61f65c8 00007f64e61f6600 00007f64e61f65e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000